diff --git a/tasks/setupacdc.yml b/tasks/setupacdc.yml
index 4276c86..a0f6d79 100644
--- a/tasks/setupacdc.yml
+++ b/tasks/setupacdc.yml
@@ -151,6 +151,26 @@
     notify: Restart sshd
     tags: [timezone]
 
+  - name: Ensure update-manager-core is installed
+    ansible.builtin.apt:
+      name: update-manager-core
+      state: present
+      update_cache: true
+
+  - name: Run Ubuntu release upgrade (non-interactive)
+    ansible.builtin.command:
+      cmd: do-release-upgrade -f DistUpgradeViewNonInteractive
+    register: upgrade_output
+    changed_when: "'No new release found' not in upgrade_output.stdout"
+
+  - name: Reboot if kernel updated
+    ansible.builtin.reboot:
+      msg: "Rebooting after Ubuntu upgrade"
+      connect_timeout: 5
+      reboot_timeout: 600
+    when: upgrade_output is changed
+
+
   - name: Deploy the Samba AD DC role
     ansible.builtin.include_role:
       name: ansible_samba_ad_dc