diff --git a/launch/launch-node.py b/launch/launch-node.py
index 305b66ef96..f146b62e17 100755
--- a/launch/launch-node.py
+++ b/launch/launch-node.py
@@ -182,6 +182,7 @@ def bootstrap_server(server, key, name, volume_device, keep,
         for playbook in [
                 'set-hostnames.yaml',
                 'base.yaml',
+                'apply-package-updates.yaml',
         ]:
             run(ansible_cmd + [
                 os.path.join(SCRIPT_DIR, '..', 'playbooks', playbook)],
diff --git a/playbooks/apply-package-updates.yaml b/playbooks/apply-package-updates.yaml
new file mode 100644
index 0000000000..2092e0a2be
--- /dev/null
+++ b/playbooks/apply-package-updates.yaml
@@ -0,0 +1,8 @@
+- hosts: "{{ target }}"
+  user: root
+  tasks:
+    - name: Run unattended-upgrade on debuntu
+      shell: |
+        unattended-upgrade -d
+      when: ansible_facts['os_family'] == "Debian"
+  # TODO add equivalent for other platforms