diff --git a/src/vm.ts b/src/vm.ts
index dbe6bb5..e22fb84 100644
--- a/src/vm.ts
+++ b/src/vm.ts
@@ -81,8 +81,7 @@ export async function ensure(log?: (msg: string) => void): Promise<void> {
     const tmp = `${home}/.sandlot/.api-key-helper.tmp`
     await Bun.write(tmp, `#!/bin/sh\necho '${apiKey.replace(/'/g, "'\\''")}'\n`)
     await $`chmod +x ${tmp}`.quiet()
-    await $`container exec --user ${USER} ${CONTAINER_NAME} mkdir -p /home/${USER}/.claude`.quiet()
-    await $`container cp ${tmp} ${CONTAINER_NAME}:/home/${USER}/.claude/api-key-helper.sh`.quiet()
+    await $`container exec --user ${USER} ${CONTAINER_NAME} bash -c ${"mkdir -p ~/.claude && cp /sandlot/.api-key-helper.tmp ~/.claude/api-key-helper.sh"}`.quiet()
     await Bun.file(tmp).unlink()
   }