diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index 3e9401e..0299278 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -1,8 +1,9 @@
 name: Release
 
-# Container images are published separately by publish-images.yml. This builds the kiosk
-# package for the Pi, which needs an arm64 toolchain, so it goes through buildx and QEMU
-# rather than running on the host directly.
+# Container images are published separately by publish-images.yml. This builds the kiosk .deb
+# for the Pi, which needs an arm64 toolchain, so it goes through buildx and QEMU rather than
+# running on the host directly. Only the .deb is built here: AppImage bundling shells out to
+# linuxdeploy, which needs FUSE and cannot run inside an emulated build.
 on:
   push:
     tags: ["v*"]
@@ -33,7 +34,6 @@ jobs:
         run: |
           mkdir -p dist
           find bundle -name '*.deb' -exec cp {} dist/ \;
-          find bundle -name '*.AppImage' -exec cp {} dist/ \;
           ls -lh dist
 
       - uses: actions/upload-artifact@v4
diff --git a/apps/kiosk-client/Dockerfile.bundle b/apps/kiosk-client/Dockerfile.bundle
index 8106c13..a008738 100644
--- a/apps/kiosk-client/Dockerfile.bundle
+++ b/apps/kiosk-client/Dockerfile.bundle
@@ -28,7 +28,9 @@ COPY packages packages
 COPY apps/kiosk-client apps/kiosk-client
 
 RUN bun install
-RUN bun run build:kiosk
+
+WORKDIR /work/apps/kiosk-client
+RUN bun run tauri build --bundles deb
 
 FROM scratch AS bundle
-COPY --from=build /work/apps/kiosk-client/src-tauri/target/release/bundle /
+COPY --from=build /work/apps/kiosk-client/src-tauri/target/release/bundle/deb /