diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7bcf176a..2f049fa7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 
 ### Added
 
+* apt: Disable NonFreeFirmware warning for VM on Debian 12+
 * docker-host: added var for user namespace setting
 * dovecot: add Munin plugins dovecot1 and dovecot_stats (patched)
 * dovecot: fix old_stats plugin for Dovecot 2.3.
diff --git a/apt/tasks/main.yml b/apt/tasks/main.yml
index 295f42f1..4d357f8b 100644
--- a/apt/tasks/main.yml
+++ b/apt/tasks/main.yml
@@ -96,6 +96,18 @@
   when: apt_clean_gandi_sourceslist | bool
 
 
+- name: "Disable NonFreeFirmware warning for VM on Debian 12+"
+  ansible.builtin.lineinfile:
+    path: /etc/apt/apt.conf.d/no-bookworm-firmware.conf
+    create: yes
+    line: "APT::Get::Update::SourceListWarnings::NonFreeFirmware \"false\";"
+  tags:
+    - apt
+  when:
+    - ansible_distribution_major_version is version('12', '>=')
+    - ansible_virtualization_role == "guest"
+
+
 - name: Install check for packages marked hold
   ansible.builtin.import_tasks: hold_packages.yml
   when: apt_install_hold_packages | bool