diff --git a/lamp/Makefile b/lamp/Makefile
index 597e3fb..1f80856 100644
--- a/lamp/Makefile
+++ b/lamp/Makefile
@@ -21,7 +21,9 @@ postinstall: timesyncd.conf firstboot.start
 	cp firstboot.start $(CHROOT)/etc/local.d/firstboot.start
 	touch $(CHROOT)/firstboot
 	sed -i 's/# %wheel ALL=(ALL) ALL/%wheel ALL=(ALL) ALL/' $(CHROOT)/etc/sudoers
-	$(inroot) useradd -m -G users,wheel -s /bin/bash admin
+	sed -i 's#^auth.*$$#auth [success=2 default=ignore] pam_ssh_agent_auth.so file=~/.ssh/authorized_keys\nauth    include         system-auth#' $(CHROOT)/etc/pam.d/sudo
+	echo "Defaults   env_keep += SSH_AUTH_SOCK" > $(CHROOT)/etc/sudoers.d/ssh_auth_sock
+	$(inroot) useradd -m -G users,wheel -s /bin/bash --comment="virtual appliance admin" --uid 2000 admin
 	$(inroot) passwd -d admin; $(inroot) passwd -e admin
 	$(inroot) systemctl enable screen@adm.service