diff --git a/.github/workflows/build-installer-iso.yml b/.github/workflows/build-installer-iso.yml
index fb0f4bc..8730a65 100644
--- a/.github/workflows/build-installer-iso.yml
+++ b/.github/workflows/build-installer-iso.yml
@@ -62,23 +62,29 @@ jobs:
       - name: Build installer ISO with livemedia-creator
         run: |
           set -euxo pipefail
-          # livemedia-creator refuses an existing non-empty resultdir.
-          rm -rf build/out
+          # livemedia-creator refuses an existing resultdir of any kind
+          # (even empty + just-mkdir'd). Force-clean + use a fresh path
+          # outside the workspace; copy artefacts back at the end.
+          OUT=/var/lmc-out-$$
+          rm -rf "$OUT" /var/lmc
           mkdir -p /var/lmc
           ln -sfn "$GITHUB_WORKSPACE" /work
-          # livemedia-creator does NOT support --title (that's livecd-creator).
-          # --volid replaces it for the ISO volume label.
           livemedia-creator \
             --make-iso \
             --no-virt \
             --ks kickstart/install-ostreecontainer-installer.ks \
-            --resultdir build/out \
+            --resultdir "$OUT" \
             --tmp /var/lmc \
             --volid "veilor-os-installer-${RELEASEVER}" \
             --project "veilor-os" \
             --releasever "$RELEASEVER" \
-            --logfile build/out/build.log \
-            2>&1 | tee -a build/out/build.log
+            --logfile "$OUT/build.log" \
+            2>&1 | tee /tmp/build.log
+          # Move artefacts back into workspace for downstream steps.
+          mkdir -p build/out
+          cp -a "$OUT"/. build/out/
+          cp -a /tmp/build.log build/out/build.log 2>/dev/null || true
+          ls -lh build/out/
 
       - name: Rename ISO + sha256
         run: |