diff --git a/qemu/debian/image/BUILD.bazel b/qemu/debian/image/BUILD.bazel
index dbb29073c1e189436f1b8918c73d804c4fa02579..2a834cb705b6828375c49bf5e7c3e8bf74db82ba 100644
--- a/qemu/debian/image/BUILD.bazel
+++ b/qemu/debian/image/BUILD.bazel
@@ -16,10 +16,11 @@ genrule(
     name = "resize",
     srcs = [":cloudvm"],
     outs = ["resized.qcow2"],
-    cmd = "$(CP) $< $@ && $(location //labgrid/toolchain/qemu-img:resolved) resize $@ +2G",
+    cmd = "$(CP) $< $@ && $(CHMOD) u+w $@ && $(location //labgrid/toolchain/qemu-img:resolved) resize $@ +2G",
     toolchains = [
         "//labgrid/toolchain/qemu-img:resolved",
         "@rules_coreutils//coreutils/toolchain/cp:resolved",
+        "@rules_coreutils//coreutils/toolchain/chmod:resolved",
     ],
     visibility = ["//visibility:private"],
 )