@tomo can you please accept.

See merge request !119

/reviewed-on nexedi/slapos.package!117

properly setuped (automatically).
Add tests for this.

/reviewed-on nexedi/slapos.package!116

/reviewed-on nexedi/slapos.package!110

/reviewed-on nexedi/slapos.package!115

  it doesn't work as erp5.git repository is outdated and it cannot be upgraded for now.

The firewall which comes with Suse by default leads to not working re6stnet
connectivity, so drop it.

  The gpg is normally pre-installed already, so no need to install it.

  Set re6st as present to prevent unintented upgrade of re6st on this loop.

playbook: no need to remove legacy repositories anymore as it has been a very long time since any machine installed them

Caddy doesn't support the wildcard Virtual Host like Apache so it's not
suitable for standalone deploy.

On newest OS, python2.7 is not installed anymore.

There is not reason to not check endpoint certificate.

Thanks to injecting slapos.networkcache to provided buildout, it will be
possible to use networkcache for fetching the dependencies.

/reviewed-on nexedi/slapos.package!112

/reviewed-on !111

See commit 0421fd9e4dfcedb4754f8df4e51c2656eb78e706 in slapos.git

Since debian/compat is increased to 9, stricter flags are used for compilation.

With default dpkg-buildflags, gettext fails to build as follows:

libcroco/cr-statement.c: In function 'cr_statement_dump_ruleset':
libcroco/cr-statement.c:2610:17: error: format not a string literal and no format arguments [-Werror=format-security]
                 fprintf (a_fp, str);
                 ^

ansible-upload-vm-logs is a Python2 script so we explicitly need requests egg for python2. python-request used to be installed by the deploy script but for Debian 10, the deploy script install python3-requests.