diff --git a/main/postmarketos-base/APKBUILD b/main/postmarketos-base/APKBUILD
index f9394907b..f343c202d 100644
--- a/main/postmarketos-base/APKBUILD
+++ b/main/postmarketos-base/APKBUILD
@@ -21,7 +21,7 @@ depends="
 	util-linux
 	wpa_supplicant
 	"
-install="$pkgname.post-install $pkgname.pre-upgrade"
+install="$pkgname.post-install $pkgname.pre-upgrade $pkgname.post-upgrade"
 triggers="$pkgname.trigger=/etc"
 subpackages="
 	$pkgname-elogind
diff --git a/main/postmarketos-base/postmarketos-base.post-upgrade b/main/postmarketos-base/postmarketos-base.post-upgrade
new file mode 100644
index 000000000..4b719027e
--- /dev/null
+++ b/main/postmarketos-base/postmarketos-base.post-upgrade
@@ -0,0 +1,5 @@
+#!/bin/sh
+# WARNING: do not symlink this file to postmarketos-base.post-install!
+# Otherwise it will enable services, as listed in that file. And we don't want
+# this to happen during upgrade, especially not automatically enabling the sshd
+# service! (build.postmarketos.org#85)