diff --git a/config/hooks/live/0002_hardening_overlay_tmpfs.chroot b/config/hooks/live/0002_hardening_overlay_tmpfs.chroot
index 676ad44..ad11284 100644
--- a/config/hooks/live/0002_hardening_overlay_tmpfs.chroot
+++ b/config/hooks/live/0002_hardening_overlay_tmpfs.chroot
@@ -45,8 +45,10 @@ EOF
 
 mkdir -p /etc/systemd/system/tmp.mount.d
 cat << EOF >| /etc/systemd/system/tmp.mount.d/override.conf
+# The live ISO runs CISS.debian.installer and must support at least 12 raw plus encrypted LUKS header backups in the installer
+# scratch path.
 [Mount]
-Options=mode=1777,strictatime,nosuid,nodev,noexec,size=1%
+Options=mode=1777,strictatime,nosuid,nodev,noexec,size=2G
 EOF
 
 mkdir -p /etc/systemd/system/dev-shm.mount.d