V8.13.440.2025.11.19

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

config/includes.chroot/usr/lib/live/boot/0042-ciss-post-decrypt-attest

@@ -17,6 +17,8 @@
 # Purpose: Late rootfs attestation and dmsetup health checking.
 # Phase  : bottom (executed by live-boot inside the initramfs).
 
+_SAVED_SET_OPTS="$(set +o)"
+
 set -eu
 
 printf "\e[95m[INFO] Starting: [/usr/lib/live/boot/0042-ciss-post-decrypt-attest] ... \n\e[0m"
@@ -174,6 +176,8 @@ log_ok "dm-crypt and dm-integrity(HMAC-SHA512, 4096B) chain looks healthy."
 
 fi
 
+eval "${_SAVED_SET_OPTS}"
+
 printf "\e[92m[INFO] Successfully applied: [/usr/lib/live/boot/0042-ciss-post-decrypt-attest]\n\e[0m"
 
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh