diff --git a/lokinet/.gitignore b/lokinet/.gitignore
index 7a03e56..35f30a7 100644
--- a/lokinet/.gitignore
+++ b/lokinet/.gitignore
@@ -3,3 +3,4 @@
 !PKGBUILD
 !lokinet.sysusers
 !lokinet.tmpfiles
+!lokinet.install
diff --git a/lokinet/PKGBUILD b/lokinet/PKGBUILD
index 259b340..2b79bd2 100644
--- a/lokinet/PKGBUILD
+++ b/lokinet/PKGBUILD
@@ -10,8 +10,9 @@ license=('custom:zlib')
 depends=('bash' 'libcap')
 makedepends=('git' 'cmake')
 provides=("lokinet")
-source=("$_pkgname::git+git://github.com/loki-project/lokinet-builder.git" 'lokinet.sysusers' 'lokinet.tmpfiles')
-sha256sums=('SKIP' 'b8c5648e95d3725ecba246dc702856e691d6e0688554654b2712ffdea16b1c6f' 'a67f1eb92176c85dc25b2e41fb796a8c8334270bb230ccfdf9320d0a8552ca93')
+source=("$_pkgname::git+git://github.com/loki-project/lokinet-builder.git" 'lokinet.sysusers' 'lokinet.tmpfiles' 'lokinet.install')
+sha256sums=('SKIP' 'b8c5648e95d3725ecba246dc702856e691d6e0688554654b2712ffdea16b1c6f' 'a67f1eb92176c85dc25b2e41fb796a8c8334270bb230ccfdf9320d0a8552ca93' 'e28f5e9eb910e3da5c5d1b5551c8b7209e40043ec82ad8c66c565e1b59bc1ec8')
+install=lokinet.install
 
 pkgver() {
 	cd "$srcdir/$_pkgname/deps/llarp"
diff --git a/lokinet/lokinet.install b/lokinet/lokinet.install
new file mode 100644
index 0000000..ccc5886
--- /dev/null
+++ b/lokinet/lokinet.install
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+post_install() {
+    setcap cap_net_admin,cap_net_bind_service=+eip /usr/bin/lokinet || echo "failed to setcap lokinet"
+}