diff --git a/script/infra-setup.sh b/script/infra-setup.sh
index d1d5f7c..7d6531c 100755
--- a/script/infra-setup.sh
+++ b/script/infra-setup.sh
@@ -260,6 +260,10 @@ gitea_ci ALL=(root) NOPASSWD: /usr/sbin/restorecon -R /usr/local/bin/quantus-min
 gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl daemon-reload
 gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl enable quantus-miner.service
 gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl restart quantus-miner.service
+# stop/start (not just restart) so the benchmark harness in quantus/miner#2 can
+# pause mining for a measurement window and resume it afterwards.
+gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl stop quantus-miner.service
+gitea_ci ALL=(root) NOPASSWD: /usr/bin/systemctl start quantus-miner.service
 SUDO
     chmod 0440 "$tmp"
     visudo -cf "$tmp"