diff --git a/oneshot/update-pvc-daemons.yml b/oneshot/update-pvc-daemons.yml
index 7bb95c2..3a8f244 100644
--- a/oneshot/update-pvc-daemons.yml
+++ b/oneshot/update-pvc-daemons.yml
@@ -130,7 +130,15 @@
         - pvcworkerd
         - pvchealthd
 
-    - name: unset PVC maintenance mode
+    - name: become primary on first node
+      command: pvc node primary --wait
+      run_once: yes
+
+    - name: apply database migrations on first node (safe upgrades prevented this in dpkg)
+      command: /usr/share/pvc/pvc-api-db-upgrade
+      run_once: yes
+
+    - name: unset PVC maintenance mode on first node
       command: pvc cluster maintenance off
       run_once: yes