diff --git a/CHANGELOG.md b/CHANGELOG.md
index b50dcb1f..9dfc2d42 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,7 @@ The **patch** part changes incrementally at each release.
 * evoacme: upstream version 19.11
 * evolinux-base: default value for "evolinux_ssh_group"
 * evolinux-base: install /sbin/deny
+* evolinux-base: install Evocheck (default: `True`)
 * evolinux-base: on debian 10 and later, add noexec on /dev/shm
 * evolinux-base: on debian 10 and later, add /usr/share/scripts in root's PATH
 * evolinux-base: remove the chrony package
diff --git a/evolinux-base/defaults/main.yml b/evolinux-base/defaults/main.yml
index 4b1b0611..9681f0b7 100644
--- a/evolinux-base/defaults/main.yml
+++ b/evolinux-base/defaults/main.yml
@@ -202,6 +202,11 @@ evolinux_nagios_nrpe_include: True
 
 evolinux_fail2ban_include: False
 
+# Evocheck
+
+evolinux_evocheck_include: True
+evolinux_evocheck_force_install: "local"
+
 # Listupgrade
 
 evolinux_listupgrade_include: True
diff --git a/evolinux-base/tasks/main.yml b/evolinux-base/tasks/main.yml
index aa1393cf..0b2fdf89 100644
--- a/evolinux-base/tasks/main.yml
+++ b/evolinux-base/tasks/main.yml
@@ -113,6 +113,13 @@
     name: evolix/fail2ban
   when: evolinux_fail2ban_include
 
+- name: Evocheck
+  include_role:
+    name: evolix/evocheck
+  vars:
+    evocheck_force_install: "{{ evolinux_evocheck_force_install }}"
+  when: evolinux_evocheck_include
+
 - name: Listupgrade
   include_role:
     name: evolix/listupgrade