diff --git a/test/README.md b/test/README.md
index 02c09d7..185d1e7 100644
--- a/test/README.md
+++ b/test/README.md
@@ -25,6 +25,22 @@ Copy `.env.example` to `.env` and fill it in. `.env`, `*.key`, and
 cp .env.example .env
 ```
 
+## Lock the installer (after a fresh install via `main.ts`)
+
+Dolibarr keeps its web installer reachable until an `install.lock` file exists.
+After a fresh install (the `main.ts` flow), create it in the target pod — for the
+sandbox:
+
+```sh
+kubectl -n erp-sandbox exec \
+  "$(kubectl get pod -n erp-sandbox -l app.kubernetes.io/instance=erp-sandbox -o name)" -- \
+  /bin/sh -c 'touch /var/www/html/install.lock && chown www-data:www-data /var/www/html/install.lock'
+```
+
+For prod, swap to `-n erp -l app.kubernetes.io/instance=erp`. Not needed when the
+instance was seeded from a prod dump instead of freshly installed — see
+`../ops/sandbox/`.
+
 ## Provision the sandbox
 
 Provisions `erp-sandbox.arcodange.lab`: enables the REST API module, creates the