diff --git a/.github/workflows/tools_tests.yaml b/.github/workflows/tools_tests.yaml
index 218d2c802d..b7dc19f6be 100644
--- a/.github/workflows/tools_tests.yaml
+++ b/.github/workflows/tools_tests.yaml
@@ -105,4 +105,5 @@ jobs:
       run: |
         devcontainer exec --workspace-folder . scons -j$(nproc)
         devcontainer exec --workspace-folder . pip install pip-install-test
-        devcontainer exec --workspace-folder . touch /home/batman/.comma/auth.json
\ No newline at end of file
+        devcontainer exec --workspace-folder . touch /home/batman/.comma/auth.json
+        devcontainer exec --workspace-folder . sudo touch /root/test.txt
\ No newline at end of file
diff --git a/Dockerfile.openpilot_base b/Dockerfile.openpilot_base
index 8b434536df..98d07ea39e 100644
--- a/Dockerfile.openpilot_base
+++ b/Dockerfile.openpilot_base
@@ -25,6 +25,8 @@ RUN cd /tmp && \
 ARG USER=batman
 ARG USER_UID=1000
 RUN useradd -m -s /bin/bash -u $USER_UID $USER
+RUN usermod -aG sudo $USER
+RUN echo '%sudo ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
 USER $USER
 
 ENV POETRY_VIRTUALENVS_CREATE=false