diff --git a/common/services/role.role.j2.yaml b/common/services/role.role.j2.yaml
index d99fec6f1b..a156c76d4f 100644
--- a/common/services/role.role.j2.yaml
+++ b/common/services/role.role.j2.yaml
@@ -393,6 +393,14 @@ outputs:
           - {get_attr: [DockerPuppetTasks, value]}
       host_prep_tasks:
         list_concat:
+          - - name: Ensure /var/log/journal exists
+              file:
+                path: /var/log/journal
+                state: directory
+                mode: 0750
+                owner: root
+                group: root
+                setype: var_log_t
           - - name: Run firewall role
               include_role:
                 name: tripleo-firewall