diff --git a/roles/pi_standard_setup/tasks/main.yml b/roles/pi_standard_setup/tasks/main.yml
index 54dba69..8b6b6e4 100644
--- a/roles/pi_standard_setup/tasks/main.yml
+++ b/roles/pi_standard_setup/tasks/main.yml
@@ -36,6 +36,7 @@
   ansible.builtin.command: "raspi-config nonint get_hostname"
   register: pi_standard_setup_pi_hostname
   changed_when: false
+  check_mode: false # read-only; must run in --check so .stdout isn't empty
 - name: Change hostname  {{ pi_standard_setup_new_hostname }}
   ansible.builtin.command: "raspi-config nonint do_hostname {{ pi_standard_setup_new_hostname }}"
   when: pi_standard_setup_new_hostname | length > 0 and pi_standard_setup_pi_hostname.stdout != pi_standard_setup_new_hostname
@@ -46,10 +47,12 @@
   ansible.builtin.command: "raspi-config nonint get_hostname"
   register: pi_standard_setup_pi_hostname
   changed_when: false
+  check_mode: false # read-only; must run in --check so .stdout isn't empty
 - name: Get current boot target
   ansible.builtin.command: "systemctl get-default"
   register: pi_standard_setup_boot_target
   changed_when: false
+  check_mode: false # read-only; must run in --check so .stdout isn't empty
 - name: Set boot mode to CLI
   ansible.builtin.command: "raspi-config nonint do_boot_behaviour B1"
   when: pi_standard_setup_boot_target.stdout != "multi-user.target"