diff --git a/overlay/usr/local/bin/veilor-installer b/overlay/usr/local/bin/veilor-installer
index 770a364..ddbe238 100644
--- a/overlay/usr/local/bin/veilor-installer
+++ b/overlay/usr/local/bin/veilor-installer
@@ -368,7 +368,17 @@ generate_ks() {
 # DO NOT commit this file — secrets inline.
 url --mirrorlist="https://mirrors.fedoraproject.org/mirrorlist?repo=fedora-43&arch=x86_64"
 repo --name=fedora --baseurl="https://download.fedoraproject.org/pub/fedora/linux/releases/43/Everything/x86_64/os/" --install
-repo --name=updates --baseurl="https://download.fedoraproject.org/pub/fedora/linux/updates/43/Everything/x86_64/" --install
+# `updates` repo intentionally NOT added. Fedora's update stream pushes
+# package versions whose %posttrans scriptlets sometimes fail under
+# anaconda's `--cmdline` mode — most reliably reproduced as `man-db`
+# failing during "Configuring man-db.x86_64", which dumps the whole
+# transaction with no recoverable error message and prints "An error
+# occurred during the transaction: The transaction process has ended
+# with errors..". Reproduced in v0.5.26 + v0.5.27 VM tests against
+# fresh installs days apart, so it is not a Fedora-mirrors-down blip.
+# CI build kickstart already strips this line for the same reason
+# (build-iso.yml line ~109). Users who want to update post-install run
+# `dnf upgrade` or the v0.6 `veilor-update` wrapper.
 
 keyboard --xlayouts='us'
 lang __LOCALE__