diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1e7224c..d3cc3a4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -31,6 +31,20 @@ jobs:
             runs_on: s390x
             arch: 's390x'
     steps:
+      # Allow CI user to access /dev/kvm (via qemu) w/o group change/relogin
+      # by changing permissions set by udev.
+      - name: Set /dev/kvm permissions
+        shell: bash
+        run: |
+          if [ -e /dev/kvm ]; then
+            echo "/dev/kvm exists, updating permissions"
+            echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' \
+              | sudo tee /etc/udev/rules.d/99-kvm4all.rules > /dev/null
+            sudo udevadm control --reload-rules
+            sudo udevadm trigger --name-match=kvm
+          else
+            echo "/dev/kvm does not exist"
+          fi
       - uses: actions/checkout@v3
         name: Checkout
       - uses: ./.github/actions/setup