From 2775def93aa25b978791bb63c896f4df30f5d1d1 Mon Sep 17 00:00:00 2001
From: invario <67800603+invario@users.noreply.github.com>
Date: Wed, 3 Dec 2025 12:05:19 -0500
Subject: [PATCH] Use 'cat' instead of 'cp', removed use of temp file, keeps
 permissions

Signed-off-by: invario <67800603+invario@users.noreply.github.com>
---
 deploy/localcopy.sh | 23 +++++++++++++++--------
 1 file changed, 15 insertions(+), 8 deletions(-)

diff --git a/deploy/localcopy.sh b/deploy/localcopy.sh
index 38ae9599..f420e62f 100644
--- a/deploy/localcopy.sh
+++ b/deploy/localcopy.sh
@@ -67,14 +67,21 @@ localcopy_deploy() {
     fi
     DEPLOY_LOCALCOPY_CERTKEY=""
     _info "Creating combined PEM at $_combined_target"
-    _tmpfile="$(mktemp)"
-    if ! cat "$_combined_srccert" "$_ckey" >"$_tmpfile"; then
-      _err "Failed to build combined PEM file"
-      return 1
-    fi
-    if ! mv "$_tmpfile" "$_combined_target"; then
-      _err "Failed to move combined PEM into place"
-      return 1
+    if [ -f "$_combined_target" ]; then
+      if ! cat "$_combined_srccert" "$_ckey" >"$_combined_target"; then
+        _err "Failed to create PEM file"
+        return 1
+      fi
+    else
+      if ! touch "$_combined_target"; then
+        _err "Failed to create PEM file"
+        return 1
+      fi
+      chmod 600 "$_combined_target"
+      if ! cat "$_combined_srccert" "$_ckey" >"$_combined_target"; then
+        _err "Failed to create PEM file"
+        return 1
+      fi
     fi
   fi