chef: upgrade does not always work