diff --git a/oneshot/upgrade-pvc-cluster_deb12.yml b/oneshot/upgrade-pvc-cluster_deb12.yml
index f26ab41..b0da3ec 100644
--- a/oneshot/upgrade-pvc-cluster_deb12.yml
+++ b/oneshot/upgrade-pvc-cluster_deb12.yml
@@ -224,15 +224,17 @@
             mode: 0755
             content: |
               #!/usr/bin/env bash
+              exec 1>/tmp/upgrade-d10.log
+              exec 2>&1
               export DEBIAN_FRONTEND=noninteractive
-              apt-get --download-only install libcrypt1
+              apt-get --download-only install --yes libcrypt1
               dpkg --force-all --install /var/cache/apt/archives/{libcrypt1,libpam0g,libc6}*.deb
-              apt --fix-broken install
-              apt-get --no-install-recommends install apt dpkg dpkg-dev base-files zstd
-              apt-get --no-install-recommends install ca-certificates
-              apt-get --no-install-recommends --option Dpkg::Options::="--force-confold" install sudo
-              apt-get --no-install-recommends --option Dpkg::Options::="--force-confnew" upgrade
-              apt-get --no-install-recommends --option Dpkg::Options::="--force-confnew" dist-upgrade
+              apt --fix-broken install --yes
+              apt-get --no-install-recommends --option Dpkg::Options::="--force-confold" install --yes apt dpkg dpkg-dev base-files zstd
+              apt-get --no-install-recommends --option Dpkg::Options::="--force-confold" install --yes ca-certificates
+              apt-get --no-install-recommends --option Dpkg::Options::="--force-confold" install --yes sudo
+              apt-get --no-install-recommends --option Dpkg::Options::="--force-confnew" upgrade --yes
+              apt-get --no-install-recommends --option Dpkg::Options::="--force-confnew" dist-upgrade --yes
               systemctl restart ssh
 
         - name: run script to perform safe d10->d12 upgrade (will take a long time)