diff --git a/.github/workflows/build-iso.yml b/.github/workflows/build-iso.yml
index e1e7a78..ffc260a 100644
--- a/.github/workflows/build-iso.yml
+++ b/.github/workflows/build-iso.yml
@@ -67,17 +67,19 @@ jobs:
 
             cd /work
 
-            # Validate kickstart syntax
-            ksvalidator kickstart/veilor-os.ks
+            # CI uses ks-ci.ks (no local fix-repo line). Generated from main ks.
+            sed '/veilor-fix/d' kickstart/veilor-os.ks > kickstart/veilor-os-ci.ks
 
-            # Run host-native build (CI container has matched lib versions
-            # so no need for fix-repo or anaconda patching).
-            mkdir -p build/out
+            # Validate
+            ksvalidator kickstart/veilor-os-ci.ks
+
+            # Pre-create tmp dir (lorax requires it pre-existing)
+            mkdir -p build/out /tmp/veilor-lmc
 
             livemedia-creator \
               --make-iso \
               --no-virt \
-              --ks kickstart/veilor-os.ks \
+              --ks kickstart/veilor-os-ci.ks \
               --resultdir build/out/build \
               --project veilor-os \
               --releasever "${{ github.event.inputs.releasever || '43' }}" \