diff --git a/internal/bootstrap/bootstrap.go b/internal/bootstrap/bootstrap.go
index 4d03b17..f5f3846 100644
--- a/internal/bootstrap/bootstrap.go
+++ b/internal/bootstrap/bootstrap.go
@@ -90,7 +90,10 @@ func ensureRepo(dir, repoURL, ref string) error {
 	if err := utils.RunCommandInDir(dir, "git", "fetch", "origin"); err != nil {
 		return err
 	}
-	return utils.RunCommandInDir(dir, "git", "checkout", ref)
+	if err := utils.RunCommandInDir(dir, "git", "checkout", ref); err != nil {
+		return err
+	}
+	return utils.RunCommandInDir(dir, "git", "pull", "--ff-only", "origin", ref)
 }
 
 func ensureTalosConfig(generatedDir string, cfg config.Config) error {