It is not necessary for phones as re6st will
handle the routing. Adding masquerade interferes
with re6st routing.

format-ims must run even if there is no internet but 'slapos node boot'
is waiting for internet' so add it every minute in addition to other
places.

We really need to add support for multiple tun interface in "slapos node format".

TODO: fix the check, it should check the PCB number and not the
Amarisoft version.

This is a fixup of becf8150

For OSes with python3 older than 3.7, we build python3.7 to bootstrap
buildout.

Since we activated HMAC on the test network, there is no chance of
merging the 2 networks anymore.

Since SUSE Linux Enterprise Server 15, chrony is the default
implementation of NTP (
https://documentation.suse.com/sles/15-SP6/html/SLES-all/cha-ntp.html
).

This commit adds support for using chrony instead of ntp in SLES
versions >= 15.

See merge request nexedi/slapos.package!202

Opensuse names this package 'sensors' and Fedora 'lm_sensors' (see
https://www.rpmfind.net/linux/rpm2html/search.php?query=%2Fusr%2Fbin%2Fsensors)

Seems to be required in newer Amarisoft versions

This role makes a request to shacache to check if new amarisoft
binaries are available. If there are and if the license on the
machine allows it the binaries will be downloaded and decrypted
using the server's private key in /opt/private-key.
The binaries will then be installed in
/opt/amarisoft/vYYYY-MM-DD, to be used with ors-amarisoft
software release.

This will generate a key pair in /opt/private-key.
The public key will then be published in ansible report to
the slapos monitoring service running on the machine.
This private key will be used to decrypt encrypted
data uploaded on shacache.

We had several cases of playbook-tmp becoming empty when
machines were unplugged at the wrong time. This happenned
because data was still in the buffer when machines were
unplugged.

The solution is to do a sync and then atomically change
playbook-tmp

fixup for 203927d9

ansible will exit if there is a sha256sum mismatch, no
need to check rc code