diff --git a/roles/lmn_vm/tasks/main.yml b/roles/lmn_vm/tasks/main.yml
index b4f7cb8..46f0c20 100644
--- a/roles/lmn_vm/tasks/main.yml
+++ b/roles/lmn_vm/tasks/main.yml
@@ -1,4 +1,15 @@
 ---
+# FIXME #691138, better: prepare interfaces ready to use, c.f. down below, macvtap.
+# This task needs to be run before the last apt run to provide a ready-to-use installation.
+- name: Allow users to attach to bridge
+  ansible.builtin.copy:
+    dest: /etc/apt/apt.conf.d/94qemu-bridge-suid
+    content: |
+      ## Modify permissions after installation/upgrade
+      ## to run qemu-bridge as root
+      DPkg::Post-Invoke {"/usr/bin/chmod 4755 /usr/lib/qemu/qemu-bridge-helper || true"; };
+
+
 - name: install libvirt packages
   apt:
     name:
@@ -178,16 +189,6 @@
     mode: '0600'
 
 
-# FIXME #691138, better: prepare interfaces ready to use, c.f. below
-- name: Allow users to attach to bridge
-  ansible.builtin.copy:
-    dest: /etc/apt/apt.conf.d/94qemu-bridge-suid
-    content: |
-      ## Modify permissions after installation/upgrade
-      ## to run qemu-bridge as root
-      DPkg::Post-Invoke {"/usr/bin/chmod 4755 /usr/lib/qemu/qemu-bridge-helper || true"; };
-
-
 - name: Configure macvtap interface
   ansible.builtin.copy:
     dest: /etc/NetworkManager/system-connections/macvlan-vm-macvtap.nmconnection