diff --git a/.ansible-lint b/.ansible-lint
index 20e479e700..76430677b8 100644
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -19,3 +19,9 @@ skip_list:
   # [unnamed-task] All tasks should be named
   # FIXME(mgoddard): Add names to all tasks
   - unnamed-task
+  # disable experimental rules
+  - experimental
+  # Package installs should not use latest
+  - package-latest
+  # Most files should not contain tabs
+  - no-tabs
diff --git a/ansible/roles/baremetal/tasks/install.yml b/ansible/roles/baremetal/tasks/install.yml
index adb904370f..c16231eadd 100644
--- a/ansible/roles/baremetal/tasks/install.yml
+++ b/ansible/roles/baremetal/tasks/install.yml
@@ -7,7 +7,7 @@
 
 # TODO(inc0): Gates don't seem to have ufw executable, check for it instead of ignore errors
 - block:
-    - name: Set firewall default policy
+    - name: Set firewall default policy  # noqa ignore-errors
       become: True
       ufw:
         state: disabled