init

hardening-work/unlock.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+set -euo pipefail
+
+sudo cryptsetup open /var/lib/secure-projects/projects.luks secure_projects
+sudo mount -o nodev,nosuid /dev/mapper/secure_projects /secure-projects
+echo "VERIFY MOUNTED — must return a line"
+mount_output="$(findmnt /secure-projects)"
+echo "$mount_output"
+[ -n "$mount_output" ]