diff --git a/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml b/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml
index bbb361b66c..2ace5bc7ee 100644
--- a/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml
+++ b/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml
@@ -142,6 +142,18 @@ storage:
           sed -i '/^PasswordAuthentication yes/ s/ yes/ no/' /etc/ssh/sshd_config
 
           systemctl restart sshd
+    - path: /etc/zincati/config.d/90-disable-auto-updates.toml
+      # 420 (decimal) == 644 (octal)
+      mode: 420
+      group:
+        name: root
+      user:
+        name: root
+      contents:
+        inline: |
+          [updates]
+          enabled = false
+
 systemd:
   units:
     - name: configure-agent-env.service
diff --git a/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json b/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json
index 85ba9e5a8f..b2da796a8a 100644
--- a/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json
+++ b/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json
@@ -101,6 +101,20 @@
           "verification": {}
         },
         "mode": 448
+      },
+      {
+        "group": {
+          "name": "root"
+        },
+        "path": "/etc/zincati/config.d/90-disable-auto-updates.toml",
+        "user": {
+          "name": "root"
+        },
+        "contents": {
+          "source": "data:,%5Bupdates%5D%0Aenabled%20%3D%20false%0A",
+          "verification": {}
+        },
+        "mode": 420
       }
     ]
   },