From 2055148dac99c1216540a7e448c56deea84f4434 Mon Sep 17 00:00:00 2001
From: BillyOutlast <172061051+BillyOutlast@users.noreply.github.com>
Date: Wed, 4 Mar 2026 10:02:59 -0500
Subject: [PATCH] Update ct/localagi.sh

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---
 ct/localagi.sh | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/ct/localagi.sh b/ct/localagi.sh
index e9a11e955..2b7bc60dd 100644
--- a/ct/localagi.sh
+++ b/ct/localagi.sh
@@ -71,19 +71,23 @@ function update_script() {
     msg_ok "Stopped LocalAGI Service"
 
     msg_info "Backing up Environment"
-    cp /opt/localagi/.env /tmp/localagi.env.backup 2>/dev/null || true
+    local env_backup
+    env_backup="$(mktemp /tmp/localagi.env.XXXXXX)"
+    chmod 600 "$env_backup"
+    cp /opt/localagi/.env "$env_backup" 2>/dev/null || true
     msg_ok "Backed up Environment"
 
     msg_info "Updating LocalAGI"
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
     msg_ok "Updated LocalAGI"
 
-    if [[ -f /tmp/localagi.env.backup ]]; then
+    if [[ -n "${env_backup:-}" && -f "$env_backup" ]]; then
       msg_info "Restoring Environment"
-      cp /tmp/localagi.env.backup /opt/localagi/.env
-      rm -f /tmp/localagi.env.backup
+      cp "$env_backup" /opt/localagi/.env
+      rm -f "$env_backup"
       msg_ok "Restored Environment"
     fi
+    fi
   fi
 
   BACKEND="external-llm"