Since debian/compat is increased to 9, stricter flags are used for compilation.

With default dpkg-buildflags, gettext fails to build as follows:

libcroco/cr-statement.c: In function 'cr_statement_dump_ruleset':
libcroco/cr-statement.c:2610:17: error: format not a string literal and no format arguments [-Werror=format-security]
                 fprintf (a_fp, str);
                 ^

ansible-upload-vm-logs is a Python2 script so we explicitly need requests egg for python2. python-request used to be installed by the deploy script but for Debian 10, the deploy script install python3-requests.

This reverts commit 0acda09c.

I switching to use only one ssh key (luke_chronos_key).

We know that on Debian 9 used version of ansible does not work with success,
so let's make the "when" part depending on the distribution.

/reviewed-on nexedi/slapos.package!108

  Since the upgrade isn't perfectly stable, don't upgrade the package anymore.

/cc @jerome @jm  (You were asking about this)

/reviewed-on nexedi/slapos.package!105

Ces images on été construite pour Teralab.
 La Ubuntu18 a été testée, la debian10 non.
Les fichiers de preseed et les bootcommande font des opérations redondantes.

This reverts commit 0e51aaef.

The latest tag wasn't compiling fine because of erp5-doc still being a
submodule in erp5-vifib branch but not in slapos anymore.

For now nofile hard limit is set to 1048576.

/reviewed-on !104

slapos node collect needs them to query hardware status.

/reviewed-on !103

The kernel in Debian9 was updated by upstream and new updates, among
regular bugfixes contain fixes for security issues:

https://metadata.ftp-master.debian.org/changelogs//main/l/linux/linux_4.9.189-3_changelog

The kernel was also included into just oldstable (compared to
oldstable-proposed-updates). I'm not dropping oldstable-proposed-updates
repository for now, since maybe we might need it once again in the
future.

/reviewed-on !102

@rafael  or @tomo 

Please feel free to merge in so we can have deployment tests working back again.

/reviewed-on !101

  fuse requires to be system wide installed, as it is linked with kernel modules.

  Only 4.9.185 contains the fix from Kiril. For now, debian 8 won't contains it.

  The user can decide set upgrade kernel as True, by doing so, the computer will start
  to automatically upgrade kernel on the next upgrades.

  The invokation of the script is done manually, in future we might have a cron task