#!/bin/bash
set -euo pipefail


printf \
	"UMASK=0077\n" | \
	tee /etc/initramfs-tools/conf.d/umask.conf &> /dev/null

update-initramfs \
	-c \
	-k all