diff --git a/packages.yml b/packages.yml
index 6f3c626..a81199f 100644
--- a/packages.yml
+++ b/packages.yml
@@ -15,6 +15,8 @@ packages:
       archlinux: ["strace"]
     sudo:
       archlinux: ["sudo"]
+    doas:
+      archlinux: ["opendoas"]
     apt:
       archlinux: [""]
     xorg:
diff --git a/playbook.yml b/playbook.yml
index a58adc6..180f47d 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -555,6 +555,16 @@
           %sudonopw ALL=(ALL) NOPASSWD: ALL
       become: true
 
+    - name: configure passwordless doas
+      copy:
+        owner: root
+        group: root
+        mode: "0400"
+        dest: /etc/doas.conf
+        content: |
+          permit nopass nolog setenv {PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin} :sudonopw
+      become: true
+
     - block:
       - name: install AMDGPU packages
         package: