diff --git a/packages/grub2/config.sh b/packages/grub2/config.sh
index c7b223fe..461c9458 100644
--- a/packages/grub2/config.sh
+++ b/packages/grub2/config.sh
@@ -17,29 +17,18 @@
 # shellcheck disable=SC2034
 
 DEFAULT_PACKAGE_GIT_URL="https://github.com/delphix/grub2"
+SKIP_COPYRIGHTS_CHECK=true
 
-UPSTREAM_GIT_URL=https://git.launchpad.net/ubuntu/+source/grub2
-UPSTREAM_GIT_BRANCH="applied/ubuntu/${UBUNTU_DISTRIBUTION}-updates"
+URI="s3://release-de-images/internal-artifacts/2025.3.0.1/1.0.53/input-artifacts/combined-packages/packages/grub2"
 
-SKIP_COPYRIGHTS_CHECK=true
+function fetch() {
+	logmust cd "$WORKDIR/artifacts"
 
-#
-# Install build dependencies for the package.
-#
-function prepare() {
-	logmust install_build_deps_from_control_file
+	logmust aws s3 sync "$URI" .
+	logmust sha256sum -c SHA256SUMS
 }
 
-#
-# Build the package.
-#
 function build() {
-	logmust dpkg_buildpackage_default
-}
-
-#
-# Hook to fetch upstream package changes and merge into our tree.
-#
-function update_upstream() {
-	logmust update_upstream_from_git
+	return
+	# Nothing to do, all the logic is done in fetch().
 }
diff --git a/packages/masking/config.sh b/packages/masking/config.sh
index 92163bdb..97491e3c 100644
--- a/packages/masking/config.sh
+++ b/packages/masking/config.sh
@@ -53,6 +53,7 @@ function build() {
 	args+=("-Porg.gradle.configureondemand=false")
 	args+=("-PenvironmentName=linuxappliance")
 
+	DELPHIX_RELEASE_VERSION="2025.5.0.2-AES-256"
 	if [[ -n "$DELPHIX_RELEASE_VERSION" ]]; then
 		args+=("-PmaskingVer=$DELPHIX_RELEASE_VERSION")
 	fi
diff --git a/resources/delphix_kernel_annotations b/resources/delphix_kernel_annotations
index 101308d7..4f48ec7a 100644
--- a/resources/delphix_kernel_annotations
+++ b/resources/delphix_kernel_annotations
@@ -154,7 +154,6 @@ CONFIG_CDROM                                    policy<{'amd64': 'n', 'arm64': '
 CONFIG_CEPH_LIB                                 policy<{'amd64': 'n', 'arm64': 'n'}>
 CONFIG_CRAMFS                                   policy<{'amd64': 'n', 'arm64': 'n'}>
 CONFIG_CYCLADES                                 policy<{'amd64': 'n', 'arm64': 'n'}>
-CONFIG_DRM                                      policy<{'amd64': 'n', 'arm64': 'n'}>
 CONFIG_ENIC                                     policy<{'amd64': 'n', 'arm64': 'n'}>
 CONFIG_FM10K                                    policy<{'amd64': 'n', 'arm64': 'n'}>
 CONFIG_FORCEDETH                                policy<{'amd64': 'n', 'arm64': 'n'}>