diff --git a/ubuntu/roles/common/tasks/main.yml b/ubuntu/roles/common/tasks/main.yml
index df9f60e..91c1b43 100644
--- a/ubuntu/roles/common/tasks/main.yml
+++ b/ubuntu/roles/common/tasks/main.yml
@@ -54,3 +54,5 @@
      - haveged
      - vnstat
      - ntp
+- name: Ensure that the periodic APT cron task clears out old kernels and does unattended security upgrades
+  copy: src=10periodic dest=/etc/apt/apt.conf.d/10periodic backup=yes owner=root group=root mode=0644