diff --git a/post-debootstrap-installer.sh b/post-debootstrap-installer.sh
index a8c1bbf..56b9905 100755
--- a/post-debootstrap-installer.sh
+++ b/post-debootstrap-installer.sh
@@ -34,9 +34,6 @@ mdadm --examine --scan | perl -pe 's/.*\/dev\/md\/?([0-9]+) .*UUID\=(.+?) .*/ARR
 # concat user keys for cryptsetup unlocking at boot
 cat /hardware-setup/authorized_keys/* > /etc/dropbear-initramfs/authorized_keys
 
-# after cryptsetup, mdadm, ... because of update-initramfs
-apt-get -y install linux-image-amd64
-
 # install grub
 if [ -d /sys/firmware/efi ]; then
     apt-get -y install grub-efi-amd64
@@ -58,6 +55,9 @@ sed -i "s/%root_uuid%/${root_uuid}/" /etc/crypttab
 sed -i "s/%boot_uuid%/${boot_uuid}/" /etc/fstab
 sed -i "s/%esp_uuid%/${esp_uuid}/" /etc/fstab
 
+# after cryptsetup, mdadm, ... because of update-initramfs
+apt-get -y install linux-image-amd64
+
 
 ### networking