diff --git a/roles/2-common/tasks/packages.yml b/roles/2-common/tasks/packages.yml
index 3dc470753..57912076a 100644
--- a/roles/2-common/tasks/packages.yml
+++ b/roles/2-common/tasks/packages.yml
@@ -42,7 +42,9 @@
   when: is_redhat
 
 - name: Download usbmount -- not in debian-9
-  command: wget {{ iiab_download_url }}/usbmount_0.0.14.1_all.deb -P {{ downloads_dir }}
+  get_url:
+    url: "{{ iiab_download_url }}/usbmount_0.0.14.1_all.deb"
+    dest: "{{ downloads_dir }}"
   when: is_debian_9
 
 - name: Install usbmount for debian-9
diff --git a/roles/kiwix/tasks/kiwix_install.yml b/roles/kiwix/tasks/kiwix_install.yml
index 54d7d4d86..e30323b02 100644
--- a/roles/kiwix/tasks/kiwix_install.yml
+++ b/roles/kiwix/tasks/kiwix_install.yml
@@ -71,8 +71,11 @@
   when: kiwix_src_bin_only and kiwix_first_pass
 
 # workaround because unarchive does not set ownership properly
-- name: "Set ownership: 'chown -R root:root /opt/iiab/kiwix'"
-  command: "chown -R root:root {{ iiab_base }}/kiwix"
+- name: "Set ownership as if: 'chown -R root:root /opt/iiab/kiwix'"
+  file: path="{{ iiab_base }}/kiwix"
+        owner=root
+        group=root
+        recurse=yes
 
 # workaround because kiwix-serve does not stay running
 - name: Make a crontab entry to restart kiwix-serve at 4AM (debuntu)
diff --git a/roles/network/tasks/detected_network.yml b/roles/network/tasks/detected_network.yml
index 6848199dc..29b0bd73d 100644
--- a/roles/network/tasks/detected_network.yml
+++ b/roles/network/tasks/detected_network.yml
@@ -144,12 +144,12 @@
 - name: 2 or more devices on the LAN - use bridging
   set_fact:
       iiab_lan_iface: br0
-  when: num_lan_interfaces >= 2 and not is_rpi
+  when: num_lan_interfaces|int >= 2 and not is_rpi
 
 - name: For Debian, always use bridging - except RPi
   set_fact:
       iiab_lan_iface: br0
-  when: num_lan_interfaces >= 1 and is_debuntu and not is_rpi
+  when: num_lan_interfaces|int >= 1 and is_debuntu and not is_rpi
 
 - name: WiFi is on the LAN - use bridging - except RPi
   set_fact: