diff --git a/build-iso.sh b/build-iso.sh
index 0f31592..2d517bd 100755
--- a/build-iso.sh
+++ b/build-iso.sh
@@ -66,7 +66,7 @@ for cmd in sops envsubst xorriso; do
   command -v "$cmd" &>/dev/null || error "'$cmd' not found. Install it first."
 done
 
-export SOPS_AGE_KEY_FILE="${SOPS_AGE_KEY_FILE:-$HOME/.config/sops/age/keys.txt}"
+export SOPS_AGE_KEY_FILE="${SOPS_AGE_KEY_FILE:-/persists/sops/age/keys.txt}"
 [[ -f "$SOPS_AGE_KEY_FILE" ]] || error "age key not found at $SOPS_AGE_KEY_FILE"
 
 # ── Decrypt secrets → render template ─────────────────────────────────────────
diff --git a/qemu.sh b/qemu.sh
old mode 100644
new mode 100755
index 0411da8..4524212
--- a/qemu.sh
+++ b/qemu.sh
@@ -16,7 +16,7 @@ fi
 
 ## Create a virtual disk first
 ## Uncomment 'create' if test-disk missing
-# qemu-img create -f qcow2 /tmp/test-disk.qcow2 20G
+qemu-img create -f qcow2 /tmp/test-disk.qcow2 20G
 
 # Boot the ISO as USB with the virtual disk as install target
 qemu-system-x86_64 \
diff --git a/run.sh b/run.sh
old mode 100644
new mode 100755