From b5ef82a0fe86e096c2c95efed4cf09f7798fceb6 Mon Sep 17 00:00:00 2001
From: RootHost-Stormwind <RootHost-Stormwind@ze.mawtrixx.net>
Date: Mon, 2 Nov 2026 02:36:00 +0100
Subject: [PATCH] fix: fde-lock shellcheck SC2016 on guest scripts

---
 fde-lock/lock.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/fde-lock/lock.sh b/fde-lock/lock.sh
index 4b0174c..f30fccd 100644
--- a/fde-lock/lock.sh
+++ b/fde-lock/lock.sh
@@ -133,6 +133,7 @@ store_mounts() {
 
 # guest_mount INST VOL: where the guest mounted a block volume (by-id path from the Incus device name).
 guest_mount() {
+  # shellcheck disable=SC2016 # $1 expands in the guest shell
   timeout --kill-after=3 10 incus exec -T "$1" --env "PATH=$gpath" -- sh -c \
     'd="$(realpath -e "$1")" && findmnt -rn -o TARGET -S "$d"' sh \
     "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_incus_$2-part1" < /dev/null 2> /dev/null | head -n1
@@ -142,6 +143,7 @@ guest_mount() {
 guest_containers() {
   local inst="$1"
   shift
+  # shellcheck disable=SC2016 # $@, $s, $n expand in the guest shell
   timeout --kill-after=3 10 incus exec -T "$inst" --env "PATH=$gpath" -- sh -c '
     docker ps -q | xargs -r docker inspect -f "{{.Name}}{{range .Mounts}} {{.Source}}{{end}}" |
     while read -r n srcs; do