diff --git a/playbooks/vhost_update_reboot.yml b/playbooks/vhost_update_reboot.yml
index 0d60cb2189..e915c7b9c9 100644
--- a/playbooks/vhost_update_reboot.yml
+++ b/playbooks/vhost_update_reboot.yml
@@ -1,10 +1,10 @@
 ---
 # Note that someone probably wants to run:
-# ansible -m shell -a 'dnf --refresh -y update; rkhunter --propupd' all:!copr*:!openqa*:!ocp*:!worker*'
+# ansible -m shell -a 'dnf --refresh -y update && (rkhunter --propupd || true)' 'all:!copr*:!openqa*:!ocp*:!worker*'
 # ...during an outage. Note that doing more than one vmhost at once isn't
 # easily safe, because some vmhost will want another to be up while they reboot.
 # Also:
-# ansible -m shell -a 'dnf --refresh -y update; rkhunter --propupd' staging:!copr*:!openqa*:!ocp*:!worker*'
+# ansible ... 'staging:!copr*:!openqa*:!ocp*:!worker*'
 # could be used for staging, but it's not that big.
 
 - import_playbook: /srv/web/infra/ansible/playbooks/vhost_update.yml