diff --git a/autoinstall/build-iso.sh b/autoinstall/build-iso.sh
index 4a30078..e48ad5d 100644
--- a/autoinstall/build-iso.sh
+++ b/autoinstall/build-iso.sh
@@ -66,20 +66,6 @@ rsync -a --delete \
   "$PACKAGE_DIR/" "$WORK_DIR/cezen-aipackage/"
 echo "✓ Installer payload bundled"
 
-# ── Refresh installer checksum manifest ─────────────────
-echo "→ Refreshing md5sum.txt..."
-(
-  cd "$WORK_DIR"
-  rm -f md5sum.txt
-  find . -type f \
-    ! -path './md5sum.txt' \
-    ! -path './boot.catalog' \
-    -print0 \
-    | sort -z \
-    | xargs -0 md5sum > md5sum.txt
-)
-echo "✓ md5sum.txt refreshed"
-
 # ── Patch GRUB ────────────────────────────────
 echo "→ Patching GRUB config..."
 GRUB_CFG="$WORK_DIR/boot/grub/grub.cfg"
@@ -96,6 +82,20 @@ sed -i "s/set timeout_style=.*/set timeout_style=countdown/" "$GRUB_CFG"
 sed -i '/^\s*linux.*vmlinuz/s|---|autoinstall ds=nocloud\\;s=/cdrom/nocloud/ ---|' "$GRUB_CFG"
 echo "✓ GRUB patched"
 
+# ── Refresh installer checksum manifest ─────────────────
+echo "→ Refreshing md5sum.txt..."
+(
+  cd "$WORK_DIR"
+  rm -f md5sum.txt
+  find . -type f \
+    ! -path './md5sum.txt' \
+    ! -path './boot.catalog' \
+    -print0 \
+    | sort -z \
+    | xargs -0 md5sum > md5sum.txt
+)
+echo "✓ md5sum.txt refreshed"
+
 # ── Extract MBR and EFI partition from original ISO ────
 echo "→ Extracting boot data from original ISO..."
 MBR_TEMPLATE=$(mktemp)