diff --git a/apps/base/customer1/hermes-agent/deployment.yaml b/apps/base/customer1/hermes-agent/deployment.yaml
index 481f9cd..c5fabac 100644
--- a/apps/base/customer1/hermes-agent/deployment.yaml
+++ b/apps/base/customer1/hermes-agent/deployment.yaml
@@ -23,7 +23,7 @@ spec:
           type: RuntimeDefault
       initContainers:
       - name: fix-webui-perms
-        image: busybox:1.37
+        image: alpine:3.20
         imagePullPolicy: IfNotPresent
         securityContext:
           runAsNonRoot: false
@@ -45,7 +45,13 @@ spec:
             chown -R 1000:1000 /data/.hermes /data/.cache /data/.config /data/bin || true
             chown -R 1024:1024 /data/.hermes/webui || true
             echo "✅ Hermes data permissions fixed (agent=1000, webui=1024)"
-        
+            if [ ! -d "/data/.hermes/hermes-agent" ]; then
+              echo "Cloning hermes-agent source..."
+              git clone https://github.com/NousResearch/hermes-agent.git /data/.hermes/hermes-agent
+              echo "hermes-agent source cloned successfully"
+            else
+              echo "hermes-agent source already present"
+            fi
         volumeMounts:
           - name: hermes-data
             mountPath: /data