diff --git a/.dockerfile b/.dockerfile
index 8380e60..c7dd809 100644
--- a/.dockerfile
+++ b/.dockerfile
@@ -13,11 +13,12 @@ COPY --chown=ambrose:ambrose . .
 
 # system
 RUN ./.install/core.sh
+RUN ./.install/sudo.sh
 RUN ./.install/archival.sh
 RUN ./.install/git.sh
 RUN ./.install/zsh.sh
 RUN ./.install/neovim.sh
-# shell, env manager
+# shell config, env manager
 RUN ./.install/zsh-pure.sh
 RUN ./.install/yadm.sh
 # languages
diff --git a/.install/core.sh b/.install/core.sh
index 2e38647..fbc0a7c 100755
--- a/.install/core.sh
+++ b/.install/core.sh
@@ -8,8 +8,8 @@ echo "Installing system utilities..."
 echo
 
 apk add --no-cache \
-	sudo \
 	nano \
 	curl \
 	wget \
 	openssh-client
+
diff --git a/.install/sudo.sh b/.install/sudo.sh
new file mode 100755
index 0000000..de86b02
--- /dev/null
+++ b/.install/sudo.sh
@@ -0,0 +1,16 @@
+#!/bin/sh
+
+set -e
+source ./.versions
+
+echo
+echo "Installing sudo..."
+echo
+
+apk add --no-cache \
+	sudo
+
+echo '' >> /etc/sudoers
+echo '## No password sudo' >> /etc/sudoers
+echo 'ambrose ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
+