diff --git a/roles/rke2/tasks/setup_host.yml b/roles/rke2/tasks/setup_host.yml
index b8d3d360e29a15373318bf75d3558307e1ff1872..8d11ceb3311f704405dda7bd4201cb3222536185 100644
--- a/roles/rke2/tasks/setup_host.yml
+++ b/roles/rke2/tasks/setup_host.yml
@@ -13,6 +13,13 @@
     /usr/sbin/pvresize -y -q /dev/vda2 
     /usr/sbin/lvresize -y -q -r -l +100%FREE /dev/mapper/*root 
 
+- name: Upgrade to latest kernel
+  shell: |
+    dnf upgrade -y 
+    dnf updateinfo list --security --available
+    dnf install https://www.elrepo.org/elrepo-release-8.el8.elrepo.noarch.rpm --assumeyes
+    dnf --enablerepo=elrepo-kernel install kernel-ml --assumeyes
+    touch /.autorelabel
     
 - name: install RHEL packages
   dnf:
@@ -103,3 +110,10 @@
     path: /etc/rancher/rke2
     state: directory
     recurse: yes
+
+#- name: reboot (make sure SELinux is off)
+#  shell: |
+#    systemctl reboot
+- name: Reboot a slow machine that might have lots of updates to apply
+  ansible.builtin.reboot:
+    reboot_timeout: 3600
\ No newline at end of file