diff --git a/.gitea/workflows/generate-iso.yaml b/.gitea/workflows/generate-iso.yaml
index cdae91b..1005474 100644
--- a/.gitea/workflows/generate-iso.yaml
+++ b/.gitea/workflows/generate-iso.yaml
@@ -36,16 +36,16 @@ jobs:
     steps:
       - name: Basic Image Setup and enable Bookworm Backports.
         run: |
-          apt-get update
-          apt-get install -y apt-transport-https apt-utils ca-certificates openssl
+          sudo apt-get update
+          sudo apt-get install -y apt-transport-https apt-utils ca-certificates openssl
           echo 'deb https://deb.debian.org/debian bookworm-backports main' \
             >| /etc/apt/sources.list.d/bookworm-backports.list
-          apt-get update
+          sudo apt-get update
 
       - name: Installing Build Tools.
         run: |
-          apt-get update
-          apt-get install -y \
+          sudo apt-get update
+          sudo apt-get install -y \
             cryptsetup \
             curl \
             debootstrap \
@@ -132,13 +132,16 @@ jobs:
           touch opt/config/authorized_keys && chmod 0600 opt/config/authorized_keys
           echo "${{ secrets.CISS_DLB_ROOT_PWD }}" >| opt/config/password.txt
           echo "${{ secrets.CISS_DLB_ROOT_SSH_PUBKEY }}" >| opt/config/authorized_keys
+          mkdir -p opt/livebuild/chroot/dev
+          mknod opt/livebuild/chroot/dev/null c 1 3
+          chmod 666 opt/livebuild/chroot/dev/null
 
       - name: Starting CISS.debian.live.builder. This may take a while ...
         run: |
-          chmod 0700 ciss_live_builder.sh && chown root:root ciss_live_builder.sh
+          sudo chmod 0755 ciss_live_builder.sh
           timestamp=$(date -u +"%Y_%m_%d_%H_%M_Z")
           ### Change "--autobuild=" to the specific kernel version you need: 6.12.22+bpo-amd64.
-          ./ciss_live_builder.sh \
+          sudo ./ciss_live_builder.sh \
           --autobuild=6.12.22+bpo-amd64 \
           --architecture amd64 \
           --build-directory opt/livebuild \
diff --git a/lib/lib_lb_config_write.sh b/lib/lib_lb_config_write.sh
index d5186b9..e5e3c1b 100644
--- a/lib/lib_lb_config_write.sh
+++ b/lib/lib_lb_config_write.sh
@@ -86,6 +86,7 @@ lb_config_write() {
     --mirror-chroot-security 'https://security.debian.org/' \
     --mirror-debian-installer 'https://deb.debian.org/debian/' \
     --mode debian \
+    --packages 'gpgv,ca-certificates' \
     --parent-archive-areas main contrib non-free non-free-firmware \
     --parent-debian-installer-distribution bookworm \
     --parent-distribution bookworm \