On Sat, Nov 21, 2020 at 10:03:06PM +0100, tomas@tuxteam.de wrote: > The initramfs is a compressed cpio archive (of the initial file > system at boot time). You can inspect it like so: > > gunzip < /boot/initrd.img-4.19.0-10-amd64 | cpio -it | less Debian's initrd images are actually multiple cpio archives concatenated together. The command you used here only views the first archive. Use lsinitramfs instead. It will open all of the archives inside the image.