diff --git a/releases/weekly/scripts/cloud-prep.sh b/releases/weekly/scripts/cloud-prep.sh
index 577af848..3d60ca9a 100644
--- a/releases/weekly/scripts/cloud-prep.sh
+++ b/releases/weekly/scripts/cloud-prep.sh
@@ -71,3 +71,7 @@ passwd -l root
 for i in $(find /var/log -type f); do truncate -s 0 $i; done
 # remove foreign manpages
 find /usr/share/man/ -mindepth 1  -maxdepth 1 -path "/usr/share/man/man*" -prune -o -exec rm -rf {} \;
+
+# fine if this fails, aka non-hardened
+echo 'migraging pax'
+/usr/sbin/migrate-pax -m