diff --git a/containers/infra/Containerfile b/containers/infra/Containerfile
index 37a53ee..e5f8a27 100644
--- a/containers/infra/Containerfile
+++ b/containers/infra/Containerfile
@@ -2,8 +2,9 @@ ARG TAG
 FROM git.plabble.org/job79/fedora:${TAG}
 USER root
 
-RUN dnf -y install kubectl k9s openssl
+RUN dnf -y install kubectl k9s openssl age
 RUN curl -sL https://talos.dev/install | sh
 RUN curl -s https://fluxcd.io/install.sh | bash
+RUN dnf -y install "$(curl -s https://api.github.com/repos/getsops/sops/releases/latest | jq -r '.assets[] | select(.name | test("sops-.*.x86_64.rpm$")) | .browser_download_url')"
 
 USER user