Upgrade the remote box before provisioning.
Check only in the met? block; don't upgrade.
Update the apt sources before the remote upgrade.