diff --git a/ansible/roles/debian/tasks/main.yml b/ansible/roles/debian/tasks/main.yml
index f84806f..3eaaa97 100644
--- a/ansible/roles/debian/tasks/main.yml
+++ b/ansible/roles/debian/tasks/main.yml
@@ -23,6 +23,11 @@
     - _mariadb_repo_content.content is defined
     - "'repo/12.2/debian' in (_mariadb_repo_content.content | b64decode)"
 
+- name: "Remove stale linuxfactory.or.kr PPA (ARM Rockchip, unreachable on x86 noble)"
+  ansible.builtin.file:
+    path: /etc/apt/sources.list.d/ppa-linuxfactory-or-kr.list
+    state: absent
+
 - name: "Install updates"
   ansible.builtin.apt:
     name: "*"
diff --git a/ansible/roles/monitor/tasks/main.yml b/ansible/roles/monitor/tasks/main.yml
index 206d293..c9d2706 100644
--- a/ansible/roles/monitor/tasks/main.yml
+++ b/ansible/roles/monitor/tasks/main.yml
@@ -49,6 +49,11 @@
     - /etc/apt/sources.list.d/jammy-icinga.list
     - /etc/apt/sources.list.d/jammy-icinga.list.distUpgrade
 
+- name: Install python3-debian (required for deb822_repository module)
+  ansible.builtin.apt:
+    name: python3-debian
+    state: present
+
 - name: Add Icinga apt repository
   ansible.builtin.deb822_repository:
     name: icinga