diff --git a/images/act/Dockerfile b/images/act/Dockerfile
index b906e9e..1469b86 100644
--- a/images/act/Dockerfile
+++ b/images/act/Dockerfile
@@ -1,5 +1,11 @@
 FROM docker.gitea.com/runner-images:ubuntu-latest
 
+RUN set -eux; \
+    apt-get update; \
+    apt-get install -y --no-install-recommends rsync; \
+    rm -rf /var/lib/apt/lists/*; \
+    rsync --version
+
 ## renovate: datasource=github-releases depName=getsops/sops
 ARG SOPS_VERSION=v3.13.3
 
diff --git a/images/act/README.md b/images/act/README.md
index bf45571..a9fe6dd 100644
--- a/images/act/README.md
+++ b/images/act/README.md
@@ -1,5 +1,5 @@
 # act runner image
 
-Gitea / Forgejo Actions runner image based on `runner-images:ubuntu-latest` with the pinned, checksum-verified SOPS build installed.
+Gitea / Forgejo Actions runner image based on `runner-images:ubuntu-latest` with the pinned, checksum-verified SOPS build installed, plus `rsync` from apt.
 
 Built and pushed to `git.studiovita.li/studio/actions:ubuntu-latest` by the `build` workflow on push to `main`. Update `SOPS_VERSION` in `Dockerfile` to bump SOPS (tracked in renovate.json).
\ No newline at end of file