avoid the extra `apt-get upgrade`