diff --git a/.github/workflows/package-raspberry-pi.yml b/.github/workflows/package-raspberry-pi.yml
index 9d38b7aa..2fc052da 100644
--- a/.github/workflows/package-raspberry-pi.yml
+++ b/.github/workflows/package-raspberry-pi.yml
@@ -55,6 +55,7 @@ jobs:
           ${{ github.workspace }}/armv6-unknown-linux-gnueabihf/bin/armv6-unknown-linux-gnueabihf-strip ./nostr-wallet-connect
           patchelf --force-rpath --set-rpath '$ORIGIN/lib' ./nostr-wallet-connect
 
+      # TODO: remove this; it produces a ZIP archive that loses all permissions (for now, the update.sh script uses this artifact).
       - name: Archive the artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -62,3 +63,22 @@ jobs:
           path: |
             lib/
             nostr-wallet-connect
+
+      - name: Add Linux perms
+        run: chmod +x ./nostr-wallet-connect
+
+      # Store everything in a tar archive to preserve permissions
+      # (specifically, the executable bit on the app executable).
+      - name: Make output tar archive
+        run: |
+          mkdir -p ./tmp
+          mv ./nostr-wallet-connect ./tmp/
+          mv ./lib ./tmp/
+          tar -cjf nostr-wallet-connect.tar.bz2 -C ./tmp .
+          rm -Rf ./tmp
+
+      - name: Upload the package
+        uses: actions/upload-artifact@v4
+        with:
+          name: nostr-wallet-connect.tar.bz2
+          path: nostr-wallet-connect.tar.bz2
diff --git a/.github/workflows/publish-release.yaml b/.github/workflows/publish-release.yaml
index eca7f65d..29bfdd4c 100644
--- a/.github/workflows/publish-release.yaml
+++ b/.github/workflows/publish-release.yaml
@@ -14,7 +14,7 @@ jobs:
       - name: Download Raspberry Pi archive
         uses: actions/download-artifact@v4
         with:
-          name: nostr-wallet-connect.zip
+          name: nostr-wallet-connect.tar.bz2
           path: artifacts
 
       - name: Download Linux desktop archive