#!/usr/bin/env bats
# Security compliance tests

@test "preseed contains encryption configuration" {
    grep -q "crypto" /workspace/config/includes.installer/preseed.cfg
    grep -q "LUKS" /workspace/config/includes.installer/preseed.cfg
}

@test "WiFi is permanently disabled" {
    grep -q "cfg80211" /workspace/src/security-hardening.sh
}

@test "nftables is in package list" {
    grep -q "nftables" /workspace/config/package-lists/knel-football.list.chroot
}