diff --git a/nix/kexec-installer/kexec-run.sh b/nix/kexec-installer/kexec-run.sh
index 9a144c3..5d4a1ad 100644
--- a/nix/kexec-installer/kexec-run.sh
+++ b/nix/kexec-installer/kexec-run.sh
@@ -27,6 +27,10 @@ extractPubKeys() {
 }
 extractPubKeys /root
 
+if test -n "${DOAS_USER-}"; then
+  SUDO_USER="$DOAS_USER"
+fi
+
 if test -n "${SUDO_USER-}"; then
   sudo_home=$(sh -c "echo ~$SUDO_USER")
   extractPubKeys "$sudo_home"