- Changed shebang to /bin/sh for wider compatibility - Script requires root (sudo/doas) — all privileged ops work directly - Alpine: installs curl+docker before download (was failing silently) - Alpine: writes OpenRC init directly (no sudo/tee permission issue) - Debian: auto-detects SUDO_USER for WorkingDirectory instead of hardcoded /home/bruno - All OS: prerequisites (curl, docker) installed in unified step [1/5]