apt update is already done in provision.sh