diff --git a/services/maintenance/node-ops/titan-22-link-keeper-daemonset.yaml b/services/maintenance/node-ops/titan-22-link-keeper-daemonset.yaml
index 42d46d4a..6a3b2dba 100644
--- a/services/maintenance/node-ops/titan-22-link-keeper-daemonset.yaml
+++ b/services/maintenance/node-ops/titan-22-link-keeper-daemonset.yaml
@@ -77,6 +77,13 @@ spec:
                     exit 0
                   fi
 
+                  # Keep the RTL8153 firmware patch available for subsequent cold boots.
+                  if ! dpkg-query -W -f="\${Status}" firmware-realtek 2>/dev/null | grep -q "install ok installed"; then
+                    echo "installing firmware-realtek for ${usb_if}"
+                    apt-get update
+                    DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends firmware-realtek
+                  fi
+
                   if nmcli connection show "Wired connection 1" >/dev/null 2>&1; then
                     nmcli connection modify "Wired connection 1" connection.autoconnect no || true
                   fi