checksum doesn't make sense until we finalise the image

... and even then maybe not.