diff --git a/dib/ironic-python-agent-ramdisk/package-installs.yaml b/dib/ironic-python-agent-ramdisk/package-installs.yaml
index 1423d60..deda54a 100644
--- a/dib/ironic-python-agent-ramdisk/package-installs.yaml
+++ b/dib/ironic-python-agent-ramdisk/package-installs.yaml
@@ -59,6 +59,11 @@ amd64-microcode:
     - DISTRO_NAME = debian
     - IPA_DEBIAN_NONFREE = true
 
+# Packages needed by Debian
+# bsdextrautils provides the 'hexdump' command used by IPA.
+bsdextrautils:
+  when: DISTRO_NAME = debian
+
 # Packages that should not normally be present on IPA images
 cloud-init:
     phase: post-install.d
diff --git a/dib/ironic-python-agent-ramdisk/post-install.d/80-ironic-python-agent-ramdisk b/dib/ironic-python-agent-ramdisk/post-install.d/80-ironic-python-agent-ramdisk
index 7100d50..7af6b1d 100755
--- a/dib/ironic-python-agent-ramdisk/post-install.d/80-ironic-python-agent-ramdisk
+++ b/dib/ironic-python-agent-ramdisk/post-install.d/80-ironic-python-agent-ramdisk
@@ -64,7 +64,7 @@ DHCP=yes" > /etc/systemd/network/99-dhcp.network
         fi
         if [ -e /usr/lib/systemd/system/glean-early.service ]; then
             # Disable Glean-early start
-            # Under normal cirumstances, glean-early attempts to mount a config
+            # Under normal circumstances, glean-early attempts to mount a config
             # drive, configure ssh and a hostname. We only need the mount, and we
             # trigger that in ironic-agent-resolve-config-drive.service.
             # This is largely because glean uses /mnt/config by default,