From b9c563eb5b11864792fc25c0832ca089003b391a Mon Sep 17 00:00:00 2001
From: Nick Sweeting <git@sweeting.me>
Date: Fri, 14 Aug 2026 19:39:09 -0700
Subject: [PATCH] Download Compose setup atomically

---
 bin/setup.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/bin/setup.sh b/bin/setup.sh
index 40b9ebbb..4f23bd3e 100755
--- a/bin/setup.sh
+++ b/bin/setup.sh
@@ -360,7 +360,12 @@ if [ "$DOCKER_IMAGE_READY" = "true" ] && "$DOCKER_BINARY" compose version > /dev
     cd "$ARCHIVEBOX_HOME_DIR"
     migrate_legacy_collection_dir
     if [ ! -f docker-compose.yml ]; then
-        "$CURL_BINARY" -fsSL "$ARCHIVEBOX_COMPOSE_URL" > docker-compose.yml
+        compose_download="$(mktemp "$ARCHIVEBOX_HOME_DIR/.docker-compose.yml.XXXXXX")"
+        if ! "$CURL_BINARY" -fsSL "$ARCHIVEBOX_COMPOSE_URL" -o "$compose_download"; then
+            rm -f "$compose_download"
+            exit 1
+        fi
+        mv "$compose_download" docker-compose.yml
         if [ "$RUNNING_AS_ROOT" = "true" ]; then
             chown "$ARCHIVEBOX_SYSTEM_UID:$ARCHIVEBOX_SYSTEM_GID" docker-compose.yml
         fi