diff --git a/deploy/install/metervault-install.sh b/deploy/install/metervault-install.sh
index de6a3a5..f311a22 100755
--- a/deploy/install/metervault-install.sh
+++ b/deploy/install/metervault-install.sh
@@ -235,9 +235,12 @@ main() {
   systemctl daemon-reload 2>/dev/null || true
   systemctl_enable_now_best_effort metervault
 
-  motd_ssh
-  customize 2>/dev/null || true
+  # Write the important post-install artifact first, then run cosmetic framework steps best-effort.
+  # motd_ssh's `chmod -x /etc/update-motd.d/*` returns "Operation not permitted" in some unprivileged
+  # LXCs; under the framework's ERR trap that would otherwise abort an already-successful install.
   write_update_command
+  motd_ssh 2>/dev/null || true
+  customize 2>/dev/null || true
   cleanup_lxc 2>/dev/null || true
 
   local ip