diff --git a/apt/files/51apt-sandbox b/apt/files/51apt-sandbox
new file mode 100644
index 0000000000000000000000000000000000000000..6f4b434798f63256d13c0517366eb904c62582e5
--- /dev/null
+++ b/apt/files/51apt-sandbox
@@ -0,0 +1 @@
+APT::Sandbox::Seccomp "true";
diff --git a/apt/tasks/main.yml b/apt/tasks/main.yml
index 3af814ecc856194847c67b3f5c0268be3a330d55..b861f4ea53a6353f3755524e79935230cee56e8d 100644
--- a/apt/tasks/main.yml
+++ b/apt/tasks/main.yml
@@ -24,13 +24,16 @@
 
 - meta: flush_handlers
 
-- name: ensure fix of /tmp script bug
+- name: ensure apt and dpkg are configured
   copy:
-    src: 50debconf-exec-tmp
+    src: "{{ item }}"
     dest: /etc/apt/apt.conf.d/
     owner: root
     group: root
     mode: '0644'
+  with_items:
+    - 50debconf-exec-tmp
+    - 51apt-sandbox
   tags:
     - config
     - apt