From 820da8ca0199e94a27fa937db3386868a19140c1 Mon Sep 17 00:00:00 2001
From: Dilshod Rasulov <admin@tzim.uz>
Date: Mon, 17 Aug 2026 01:20:43 +0500
Subject: [PATCH] fix: set 755 permissions on pve CLI so non-root users can
 read the script
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

sudo cp preserves the source umask which can leave the file without
read permission for group/others.  A bash script needs both read and
execute bits — without read, the shell cannot interpret it.
---
 deploy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/deploy.sh b/deploy.sh
index a86076f..0a95f5e 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -1053,7 +1053,7 @@ install_pve_cli() {
         print_error "Не удалось подготовить pve CLI"
         return 1
     fi
-    chmod +x "$tmp_cli"
+    chmod 755 "$tmp_cli"
 
     # Try to install to /usr/local/bin (global PATH)
     local installed=false
@@ -1062,7 +1062,7 @@ install_pve_cli() {
     else
         # Not root — try sudo (password may already be cached from docker ops)
         if sudo cp "$tmp_cli" "$install_path" 2>/dev/null && \
-           sudo chmod +x "$install_path" 2>/dev/null; then
+           sudo chmod 755 "$install_path" 2>/dev/null; then
             installed=true
         fi
     fi