diff --git a/live-updates/etc/sudoers.d/90-tuxflotte b/live-updates/etc/sudoers.d/90-tuxflotte
new file mode 100644
index 0000000..3609d75
--- /dev/null
+++ b/live-updates/etc/sudoers.d/90-tuxflotte
@@ -0,0 +1 @@
+liveuser ALL=(ALL) NOPASSWD: ALL
diff --git a/live-updates/etc/xdg/autostart/tuxflotte-installer.desktop b/live-updates/etc/xdg/autostart/tuxflotte-installer.desktop
new file mode 100644
index 0000000..3831124
--- /dev/null
+++ b/live-updates/etc/xdg/autostart/tuxflotte-installer.desktop
@@ -0,0 +1,6 @@
+[Desktop Entry]
+Type=Application
+Name=Tuxflotte Provisioning
+Exec=gnome-terminal --title="Tuxflotte Provisioning" -- bash -c 'sudo /opt/tuxflotte/scripts/installer.sh; rc=$?; echo; echo "--- installer.sh beendet (Exit-Code: $rc) ---"; exec bash'
+X-GNOME-Autostart-enabled=true
+NoDisplay=true
diff --git a/scripts/build.sh b/scripts/build.sh
index bd5d368..fdcde8e 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -64,6 +64,22 @@ verify_workdir() {
   echo "GRUB verification passed."
 }
 
+prepare_updates() {
+  echo "Assembling live-updates payload..."
+
+  local updates_dir="$WORK_DIR/updates"
+
+  rm -rf "$updates_dir"
+  mkdir -p "$updates_dir/opt/tuxflotte"
+
+  cp -a "$REPO_DIR/live-updates/etc" "$updates_dir/"
+  cp -a "$REPO_DIR/scripts" "$updates_dir/opt/tuxflotte/"
+  cp -a "$REPO_DIR/backends" "$updates_dir/opt/tuxflotte/"
+  cp -a "$REPO_DIR/config" "$updates_dir/opt/tuxflotte/"
+
+  chmod 0440 "$updates_dir/etc/sudoers.d/90-tuxflotte"
+}
+
 create_iso() {
   echo "Creating Tuxflotte ISO..."
 
@@ -77,6 +93,9 @@ create_iso() {
     -compliance no_emul_toc \
     -map "$REPO_DIR/grub/EFI-BOOT-grub.cfg" /EFI/BOOT/grub.cfg \
     -map "$REPO_DIR/grub/boot-grub2-grub.cfg" /boot/grub2/grub.cfg \
+    -map "$WORK_DIR/updates" /updates \
+    -chown_r 0 /updates -- \
+    -chgrp_r 0 /updates -- \
     -boot_image any replay
 
   echo "ISO created: $output_iso"
@@ -89,6 +108,7 @@ main() {
   extract_iso
   patch_grub
   verify_workdir
+  prepare_updates
   create_iso
 
   echo