diff --git a/run_once_20-install-user-packages.sh.tmpl b/run_once_20-install-user-packages.sh.tmpl
index 0ee2a0c..104ab15 100755
--- a/run_once_20-install-user-packages.sh.tmpl
+++ b/run_once_20-install-user-packages.sh.tmpl
@@ -198,7 +198,7 @@ fi
 USER_SHELL="$(getent passwd "$(whoami)" | cut -d: -f7)"
 if [[ "$USER_SHELL" != "$(command -v zsh)" ]]; then
     log "changing login shell to zsh"
-    chsh -s "$(command -v zsh)"
+    sudo chsh -s "$(command -v zsh)" "$(whoami)"
 else
     log "zsh already the login shell"
 fi