diff --git a/provision/ansible/roles/ubuntu/tasks/kernel.yml b/provision/ansible/roles/ubuntu/tasks/kernel.yml
new file mode 100644
index 00000000..acbd6337
--- /dev/null
+++ b/provision/ansible/roles/ubuntu/tasks/kernel.yml
@@ -0,0 +1,19 @@
+---
+- name: Enable kernel modules runtime
+  community.general.modprobe:
+    name: "{{ item }}"
+    state: present
+  loop:
+    - br_netfilter
+    - overlay
+    - rbd
+
+- name: Enable kernel modules on boot
+  ansible.builtin.copy:
+    mode: 0644
+    content: "{{ item }}"
+    dest: "/etc/modules-load.d/{{ item }}.conf"
+  loop:
+    - br_netfilter
+    - overlay
+    - rbd
diff --git a/provision/ansible/roles/ubuntu/tasks/main.yml b/provision/ansible/roles/ubuntu/tasks/main.yml
index b3bd068c..df35ef64 100644
--- a/provision/ansible/roles/ubuntu/tasks/main.yml
+++ b/provision/ansible/roles/ubuntu/tasks/main.yml
@@ -7,6 +7,10 @@
   tags:
     - packages
 
+- import_tasks: kernel.yml
+  tags:
+    - kernel
+
 - include: network.yml
   tags:
     - network
diff --git a/provision/ansible/roles/ubuntu/tasks/packages.yml b/provision/ansible/roles/ubuntu/tasks/packages.yml
index c5092e1f..545c9cca 100644
--- a/provision/ansible/roles/ubuntu/tasks/packages.yml
+++ b/provision/ansible/roles/ubuntu/tasks/packages.yml
@@ -15,19 +15,27 @@
     name:
       - apt-transport-https
       - arptables
+      - ebtables
       - ca-certificates
       - curl
       - ebtables
+      - gdisk
+      - hdparm
+      - htop
       - iputils-ping
       - ipvsadm
       - lvm2
+      - nano
       - net-tools
       - nfs-common
+      - nvme-cli
       - open-iscsi
       - psmisc
       - smartmontools
+      - socat
       - software-properties-common
       - unattended-upgrades
+      - unzip
     install_recommends: false
     update_cache: true
     cache_valid_time: 3600