diff --git a/cmd/dwelling-upload/main.go b/cmd/dwelling-upload/main.go
index bf0a932..3a5200e 100644
--- a/cmd/dwelling-upload/main.go
+++ b/cmd/dwelling-upload/main.go
@@ -47,6 +47,12 @@ func main() {
 		log.Fatalln(err)
 	}
 
+	if config.Chroot != "" {
+		if err := syscall.Chroot(config.Chroot); err != nil {
+			log.Fatalln("failed to chroot:", err)
+		}
+	}
+
 	if err := substituteUser(config.User); err != nil {
 		log.Fatalln(err)
 	}