V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/cdi_4200_boot/4230_update_grub.sh

@@ -124,17 +124,6 @@ update_grub() {
 
     fi
 
-    ### Install grub on the specific device.
-    if [[ "${VAR_RECIPE_FIRMWARE,,}" == "uefi" ]]; then
-
-      install_grub_uefi
-
-    elif [[ "${VAR_RECIPE_FIRMWARE,,}" == "bios" ]]; then
-
-      install_grub_bios
-
-    fi
-
     ### Enable booting from LUKS encrypted devices by default.
     cat << EOF >> "${TARGET}/etc/default/grub"
 
@@ -206,6 +195,17 @@ EOF
 
   fi
 
+  ### Install grub on the specific device.
+  if [[ "${VAR_RECIPE_FIRMWARE,,}" == "uefi" ]]; then
+
+    install_grub_uefi
+
+  elif [[ "${VAR_RECIPE_FIRMWARE,,}" == "bios" ]]; then
+
+    install_grub_bios
+
+  fi
+
   [[ "${var_update_grub_required}" == "true" ]] && do_in_target "${TARGET}" update-grub
 
   ### Setting the permissions to read and write for root only prevents non-root users from seeing the boot parameters or changing them.