V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

includes/initramfs-tools/hooks/custom-initramfs.sh

@@ -9,6 +9,7 @@
 # SPDX-LicenseComment: This file is part of the CISS.debian.installer.secure framework.
 # SPDX-PackageName: CISS.debian.installer
 # SPDX-Security-Contact: security@coresecret.eu
+# SPDX-Comment: Hook script (initramfs) for setting up the CISS.debian.installer hardened dropbear environment, incl. Luks Nuke.
 
 set -e
 
@@ -20,6 +21,11 @@ esac
 
 . /usr/share/initramfs-tools/hook-functions
 
+if [ ! -e /etc/initramfs-tools/files/unlock-wrapper.sh ]; then
+  echo "Missing unlock-wrapper.sh in /etc/initramfs-tools/files/"
+  exit 1
+fi
+
 ### Ensure directory structure in initramfs
 mkdir -p "${DESTDIR}/etc/dropbear"
 mkdir -p "${DESTDIR}/etc/keys"
@@ -76,6 +82,6 @@ install -m 0444 /etc/initramfs-tools/files/unlock-wrapper.sh.sha512.sig "${DESTD
 install -m 0444 /root/.ciss/keys/pubring.gpg "${DESTDIR}/etc/keys/pubring.gpg"
 
 ### Install Dropbear Banner
-install -m 0444 /etc/dropbear/initramfs/banner "${DESTDIR}/etc/dropbear/initramfs/banner"
+install -m 0444 /etc/dropbear/initramfs/banner "${DESTDIR}/etc/dropbear/banner"
 
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh