diff --git a/host_provisioner.py b/host_provisioner.py
index 43a7765..ec096ca 100644
--- a/host_provisioner.py
+++ b/host_provisioner.py
@@ -63,7 +63,15 @@ def amqp_connect() -> pika.BlockingConnection:
 
 
 def apply_playbook(*args: str) -> None:
-    cmd = ['ansible-playbook', '-u', 'root', '-e', 'ansible_become_method=su']
+    cmd = [
+        'ansible-playbook',
+        '-u',
+        'root',
+        '-e',
+        'ansible_become_method=su',
+        '-e',
+        "ansible_become_flags='-s /bin/sh'",
+    ]
     cmd += args
     log.debug('Running command: %s', cmd)
     subprocess.run(cmd, check=True, stdin=subprocess.DEVNULL)