diff --git a/services/playout/entrypoint.sh b/services/playout/entrypoint.sh
index 98ade0f..264818c 100644
--- a/services/playout/entrypoint.sh
+++ b/services/playout/entrypoint.sh
@@ -17,6 +17,13 @@ fi
 
 mkdir -p /media/casparcg/log /media/casparcg/data /media/templates
 
+# CEF (HTML producer) initialises an NSS database at /root/.pki/nssdb and
+# Chrome caches under HOME. Pre-create writable dirs so CEF doesn't SIGABRT
+# ~30s into the run when it first lazily inits.
+mkdir -p /root/.pki/nssdb /root/.cache /tmp/cef-cache
+chmod 700 /root/.pki/nssdb
+export HOME=/root
+
 # 2.4.x zip bundles its own .so files under lib/ — add to LD_LIBRARY_PATH.
 export LD_LIBRARY_PATH="/opt/casparcg/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"