diff --git a/roles/rke2/tasks/setup_host.yml b/roles/rke2/tasks/setup_host.yml
index b907aea543498fff0e15891a5f63c1a74373928d..db1f75c1c9a82ee6ee28dfbfdf4f8dc8b68297f4 100644
--- a/roles/rke2/tasks/setup_host.yml
+++ b/roles/rke2/tasks/setup_host.yml
@@ -45,6 +45,7 @@
     enabled: no
     masked: no
     state: stopped
+    ignore_errors: True #this command is not idempotent it seems
 
 - name: enable nftables
   ansible.builtin.systemd: