diff --git a/tasks/setup_debian.yml b/tasks/setup_debian.yml
index f9489f4..f73abfb 100644
--- a/tasks/setup_debian.yml
+++ b/tasks/setup_debian.yml
@@ -19,6 +19,8 @@
         owner: root
         group: root
         mode: "0644"
+      # change is always triggered in check mode
+      when: not ansible_check_mode
 
     - name: Determine distribution name (Debian sid pb)
       ansible.builtin.set_fact: