diff --git a/buildserver/provision-apt-get-install b/buildserver/provision-apt-get-install
index 0075de3e..0fa3d94f 100644
--- a/buildserver/provision-apt-get-install
+++ b/buildserver/provision-apt-get-install
@@ -115,6 +115,10 @@ apt-get upgrade
 # again after upgrade in case of keyring changes
 apt-get update || apt-get update
 
+# make sure everything is upgraded
+apt-get upgrade --download-only
+apt-get upgrade
+
 packages="
  androguard/trixie-backports
  apksigner