diff --git a/roles/unattended-upgrades/tasks/main.json b/roles/unattended-upgrades/tasks/main.json
index 4098ae9..014209d 100644
--- a/roles/unattended-upgrades/tasks/main.json
+++ b/roles/unattended-upgrades/tasks/main.json
@@ -1,7 +1,19 @@
 [
+	{
+		"name": "install packages",
+		"become": true,
+		"ansible.builtin.apt": {
+			"update_cache": true,
+			"pkg": [
+				"unattended-upgrades",
+				"apt-listchanges"
+			]
+		}
+	},
 	{
 		"name": "Allow unattended reboots (1)",
-		"lineinfile": {
+		"become": true,
+		"ansible.builtin.lineinfile": {
 			"dest": "/etc/apt/apt.conf.d/50unattended-upgrades",
 			"regexp": "^(//)?Unattended-Upgrade::Automatic-Reboot ",
 			"line": "Unattended-Upgrade::Automatic-Reboot \"true\";"
@@ -9,7 +21,8 @@
 	},
 	{
 		"name": "Allow unattended reboots (2)",
-		"lineinfile": {
+		"become": true,
+		"ansible.builtin.lineinfile": {
 			"dest": "/etc/apt/apt.conf.d/50unattended-upgrades",
 			"regexp": "^(//)?Unattended-Upgrade::Automatic-Reboot-Time ",
 			"line": "Unattended-Upgrade::Automatic-Reboot-Time \"23:55\";"
@@ -17,7 +30,8 @@
 	},
 	{
 		"name": "Allow more origins for updates",
-		"lineinfile": {
+		"become": true,
+		"ansible.builtin.lineinfile": {
 			"dest": "/etc/apt/apt.conf.d/50unattended-upgrades",
 			"regexp": "^(//\\s*)?\"\\$\\{distro_id\\}:\\$\\{distro_codename\\}-updates\";",
 			"line": "\"${distro_id}:${distro_codename}-updates\";"
@@ -25,7 +39,8 @@
 	},
 	{
 		"name": "Enable unattended upgrades",
-		"copy": {
+		"become": true,
+		"ansible.builtin.copy": {
 			"src": "20auto-upgrades",
 			"dest": "/etc/apt/apt.conf.d/20auto-upgrades"
 		}