diff --git a/playbooks/attended_upgrades.yml b/playbooks/attended_upgrades.yml
new file mode 100644
index 0000000000..ea1a433e8b
--- /dev/null
+++ b/playbooks/attended_upgrades.yml
@@ -0,0 +1,6 @@
+- hosts: all
+  gather_facts: true
+  tasks:
+  - name: run unattended upgrades
+    shell: apt-get update &&  unattended-upgrade
+    when: ansible_os_family == "Debian"