V8.13.392.2025.11.07

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

lib/lib_clean_up.sh

@@ -39,19 +39,19 @@ clean_up() {
   rm -f -- "${VAR_KERNEL_TMP}"
   rm -f -- "${VAR_NOTES}"
 
-  # Release advisory lock on FD 127.
+  ### Release advisory lock on FD 127.
   flock -u 127
 
-  # Close file descriptor 127.
+  ### Close file descriptor 127.
   exec 127>&-
 
-  # Remove the lockfile artifact.
+  ### Remove the lockfile artifact.
   rm -f /run/lock/ciss_live_builder.lock
 
-  # Removes the error log on clean exit.
+  ### Removes the error log on clean exit.
   if (( clean_exit_code == 0 )); then rm -f -- "${LOG_ERROR}"; fi
 
-  # Cleaning TCP wrapper artifacts.
+  ### Cleaning TCP wrapper artifacts.
   if [[ -f "${VAR_WORKDIR}/hosts.allow" ]]; then
     rm -f "${VAR_WORKDIR}/hosts.allow"
   fi
@@ -59,7 +59,7 @@ clean_up() {
     rm -f "${VAR_WORKDIR}/hosts.deny"
   fi
 
-  # Kill gpg-agent and remove artifacts securely.
+  ### Kill gpg-agent and remove artifacts securely.
   if [[ ! "${VAR_CDLB_INSIDE_RUNNER}" == "true" ]]; then
 
     if [[ -n "${GNUPGHOME:-}" && -d "${GNUPGHOME}" ]]; then
@@ -85,7 +85,7 @@ clean_up() {
 
   fi
 
-  # Removes secrets securely.
+  ### Removes secrets securely.
   # shellcheck disable=SC2312
   find "${VAR_TMP_SECRET}" -xdev -type f -print0 | xargs -0 --no-run-if-empty shred -fzu -n 5 --
   find "${VAR_TMP_SECRET}" -xdev -depth -type d -empty -delete