diff --git a/conf.d/vm.mk b/conf.d/vm.mk
index c6798a09..0d3ee63b 100644
--- a/conf.d/vm.mk
+++ b/conf.d/vm.mk
@@ -4,7 +4,8 @@ ifeq (vm,$(IMAGE_CLASS))
 vm/bare: vm/.bare
 	@$(call add,BASE_PACKAGES,apt)
 
-vm/net: vm/bare use/vm-net/dhcp use/vm-ssh; @:
+vm/net: vm/bare use/vm-net/dhcp use/vm-ssh
+	@$(call add,BASE_PACKAGES,su)
 
 # NB: use/x11 employs some installer-feature packages
 vm/icewm: vm/net use/cleanup/installer use/repo use/deflogin/altlinuxroot \