5 days agoInstall own citoid instance master
root []
Install own citoid instance

In this module, the following things were configured and installed:

* zotero translation server, a core backend of citoid to generate citation
* citoid, a node-based service to query URIs and bring back metadata about
the passed URI
* logstash gelf logging support for citoid

Citoid isn't configured to use WorldCats library database for now, as we're
waiting for the application of an API key is processed.

Change-Id: I51141eb8a930e3251991b1cebba2316363a91fb7

5 weeks agoAdd license file
root []
Add license file

Change-Id: Ic8e13fdce58243bb467cf67b87c476e45605cd88

5 weeks ago[logstash] Fix missing plugins and false configuration
root []
[logstash] Fix missing plugins and false configuration

The ES output configuration changed slightly since the last update, which should
be reflected in the configuration using puppet. Also, 2 plugins were not installed
through puppet so far, but were needed by the mediawiki filter.

Change-Id: Ief54d3a73910cb7bf04f07fb8abfaf0c0f2364dc

2 months agoUpdate ELK stack
root []
Update ELK stack

* Upgrade Elasticsearch to 5.1.2
* Upgrade Kibana to 5.1.2
* Upgrade Logstash to 5.1.2

Also:
* Removed kibana4 module, as it doesn't support kibana 5, kibana is now managed
by the role:kibana class by itself (it's a very very easy and default setup)
* Removed the java module from gitmodules, as java isn't managed by puppet at
the moment (and not by this module)

Change-Id: Ica596592b10e9edf20f22bce9e817b89ea43636e

2 months agoMerge "Add missing monit manifest and template"
Jenkins CI []
Merge "Add missing monit manifest and template"

2 months agoAdd missing monit manifest and template
root []
Add missing monit manifest and template

Change-Id: I59cc1b6a06896831d64fa3587f689966e9cab784

2 months agoRemove unused functions from wmflib
root []
Remove unused functions from wmflib

The wmflib functions were added for the user management (which was taken
from the WMF), however, most of the provided functions are not used or
needed.

Fixes #1

Change-Id: Ib7113a6a5f2d8559ac320866690048a4b84bfac2

3 months agoAdd certificate checks to monit
root []
Add certificate checks to monit

Whenever a certificate will expire in the next 15 days, monit will
now send an alert.

Change-Id: I01ef527c84a185b2b777bda0af7beba7f0bc21f8

3 months agoFix syntax for postfix ssl settings
root []
Fix syntax for postfix ssl settings

Change-Id: Ie0c0c1431e4a9fe75b1e29ab928f2387727f71ee

3 months agoChanges for certbot
root []
Changes for certbot

- Changed to new symlink structure
- Moved .well-known directives in nginx to ssl sites
- Removed missionrhode.go2tech.de from eclair.dwnet (hosted on donut.dwnet)

Change-Id: Icb812b536213bdccf3a713d77fd2a75a1f65efe1

3 months agoUse new live link for certificates of droidwiki.de and friends
root []
Use new live link for certificates of droidwiki.de and friends

This also moves the certificate from missionrhode.go2tech.de to
the droidwiki.de certificate.

Change-Id: Ia91fca053649d2cbb92d07a31eb35a8fb27a0bfc

3 months agoMerge changes from topic 'device/space'
Jenkins CI []
Merge changes from topic 'device/space'

* changes:
Add mediawiki logrotate
Add new monit checks for disk space

3 months agoMerge "Fix missing vmail user"
Jenkins CI []
Merge "Fix missing vmail user"

3 months agoAdd mediawiki logrotate
root []
Add mediawiki logrotate

Change-Id: Ib6e7d1d771cbc82c68d95e4f4e4b7279c3d69be7

3 months agoAdd new monit checks for disk space
root []
Add new monit checks for disk space

Change-Id: I201d37a2e3042acd43f895c7a7e3108823af7d24

3 months agoFix missing vmail user
root []
Fix missing vmail user

vmail was created manually, but unfortunately not as a system user, so
he will be deleted automatically by the cleanup script.

Instead, this user like zuul, is now an exception in this script. The
todo should be to make this user a system user.

Change-Id: I32653268c3a171b82b47b39d441aa90826e784cc

3 months agoRedirect https://droidwiki.org to https://www.droidwiki.org
root []
Redirect https://droidwiki.org to https://www.droidwiki.org

Instead of redirecting it to https://data.droidwiki.org

Change-Id: I057a12ea5b56306b667fb8c39cd73b1f61aa5d34

3 months agoChange data.droidwiki.de to data.droidwiki.org
root []
Change data.droidwiki.de to data.droidwiki.org

See If2a2565c3f683ce334078d058346640ab241110f

Change-Id: I22d394b299c9e03580fc3cfcf93857c3cb9d5998

3 months agoChange droidwiki.de to droidwiki.org
root []
Change droidwiki.de to droidwiki.org

This should be a very silent change with a 301 redirect to our
pretty new domain droidwiki.org.

Change-Id: If2a2565c3f683ce334078d058346640ab241110f

3 months agoMerge "Change owner of jobrunner directory to www-data"
Jenkins CI []
Merge "Change owner of jobrunner directory to www-data"

3 months agoUse present as package_ensure instead of latest for nginx
root []
Use present as package_ensure instead of latest for nginx

It's the default value. We don't want to automatically upgrade nginx.

Change-Id: If22851692a6e824a19e12b456428cbee28cad63c

3 months agoChange owner of jobrunner directory to www-data
root []
Change owner of jobrunner directory to www-data

Change-Id: Ia698c197833f441791af8c5ffafd6b2516deef33

4 months agoMerge "Reload nginx when certbot updates the certificates"
Jenkins CI []
Merge "Reload nginx when certbot updates the certificates"

4 months agoReload nginx when certbot updates the certificates
root []
Reload nginx when certbot updates the certificates

So nginx will take up the new certificates and serves it to the users.

Change-Id: I8661d5e262c58cec60f8a4032fc419127b4289d4

4 months agoUpdate puppetboard to master
root []
Update puppetboard to master

This seems to be more actual.

Change-Id: I75ebf4fcc22bb4bb8957b96d363c25b5184addf0

4 months agoSet www-data as user and group for /data/mediawiki and main/
root []
Set www-data as user and group for /data/mediawiki and main/

Change-Id: Id9c72226e6c528bcbfe34bb5a4c144a7f69ac008

4 months agoRemove old manifest and old comment
root []
Remove old manifest and old comment

Change-Id: Ie6c04f0fee0fed5afa56bfa17282615a0c987111

4 months agoAdd admin module from WMF for user management
root []
Add admin module from WMF for user management

This also puppetizes:
* sudoers
* ssh

And also requires to import the wmflib puppet functions.

Change-Id: I69fb1bc40af16d4b54c7ee3f6e8e0d4a9a0e0653

4 months agoMerge "Add NFS for shareddata storage"
Jenkins CI []
Merge "Add NFS for shareddata storage"

4 months agoMerge "Move missionrhode.go2tech.de to donut.dwnet"
Jenkins CI []
Merge "Move missionrhode.go2tech.de to donut.dwnet"

4 months agoAdd NFS for shareddata storage
root []
Add NFS for shareddata storage

The storage is currently located on donut.dwnet (and will probably be
moved to a separate storage server in the future). This will allow easier
maintenance, as now all data can (in general) be accessed from both servers,
no matter where a particular web request is passed to. E.g. missionrhode.go2tech.de
could now be routed back to eclair.dwnet and is still fully working, including
all data and files.

In future, all mediawiki images will be moved from /data/www/images (current
location) to the new nfs share /data/shareddata.

Change-Id: Ib2d56f08afa4873ab047170ce474a8989964c1e1

4 months agoMerge "Change permissions of mediawiki directories"
Florian Schmidt []
Merge "Change permissions of mediawiki directories"

4 months agoMove missionrhode.go2tech.de to donut.dwnet
root []
Move missionrhode.go2tech.de to donut.dwnet

Until the DNS record is updated (may take up to 48 hours), the site will be
delivered from both servers. The wp-content directory will be synced from
time to time.

Change-Id: I5b19ab621a3645ac263581487ffe55932f4bd7c7

4 months agoMerge "Puppetize Jenkins"
Jenkins CI []
Merge "Puppetize Jenkins"

4 months agoPuppetize Jenkins
root []
Puppetize Jenkins

Change-Id: Ia8467a556d231d50305594c4d48c5e1294f0cda1

4 months agoChange permissions of mediawiki directories
root []
Change permissions of mediawiki directories

Change-Id: I458d0171c68606c38d1c63a580f908f9185ba0ab

5 months agoFix permissions for mediawiki log directory
root []
Fix permissions for mediawiki log directory

Change-Id: If5308bc986c8be7ac3e8d347874847d12689e78c

5 months agoChange mediawiki log directory to /data/log/mediawiki
root []
Change mediawiki log directory to /data/log/mediawiki

Change-Id: I6bfcb869c54f5b7ee338f2857f18e118874f9c74

5 months agoManage elasticsearch with puppet
root []
Manage elasticsearch with puppet

This also moves the data directory from /var/lib/elasticsearch to
/data/elasticsearch (the move is done in a manual step on eclair.dwnet). This
will prevent, that the os partition is filled with user data, which, when no
space is left, will stop the server from executing correctly.

Change-Id: I9ab4e09e0cb7cad04d2fc8b79c7c5ef311264d40

5 months agoHHVM logs -> rsyslog -> logstash
root []
HHVM logs -> rsyslog -> logstash

Change-Id: I12e39bd2b54485eec03bde6a26829b7cc8f21840

5 months agoClean-up droidwiki module
root []
Clean-up droidwiki module

* Removed old rc.local manifest and templates
* Removed old rule to delete iptables.local (which is already removed everywhere)

Change-Id: I2199673de0309d8f44390841af13b56d1decc4c4

5 months agoRemove puppet firewall rule and add dhcp
root []
Remove puppet firewall rule and add dhcp

Puppet communicates only internally, all servers are already whitelisted, so
there's no reason to open the firewall for this specific port.

Also: Add dhcp ports (67/udp and 547/udp6) as accepted traffic.

Change-Id: I667d9d3f3b785c5e88615e1a3fca98887f729e81

5 months agoMerge "Add logrotate to hhvm logs"
Jenkins CI []
Merge "Add logrotate to hhvm logs"

5 months agoAdd rsyslog logging to logstash
root []
Add rsyslog logging to logstash

This also moves rsyslog configuration to puppet, *yay*!

Change-Id: Ie1af45aab1bed77acb8779d00e69491c944c7582

5 months agoAdd logrotate to hhvm logs
root []
Add logrotate to hhvm logs

Change-Id: I2b4b0443aecaa1b84d34fe2c7298f8da4a1f5c2a

5 months agoRemove grafana and graphite as well as statsd
root []
Remove grafana and graphite as well as statsd

Noone really cares about these statistics, so there's no reason
to collect them.

Change-Id: I541b1031845df048b6ce11505eea1e3b54bb38ea

6 months agoFilter mediawiki log messages for a bit better output
root []
Filter mediawiki log messages for a bit better output

Change-Id: Iebb3832b6d90fbcf0e2153e461a3f04d3ca38ce2

6 months agoAdd logstash and kibana as central logging instance
root []
Add logstash and kibana as central logging instance

Logstash will, for the first round, consume the logging data from
all mediawiki instances. See Ib09d8968cb1e for this. In the future
other logs will hopefully be added, too.

Currently, there's no authentication against the LDAP possible, as
nginx unfortunately doesn't provide such a module by default.

Change-Id: I01ea51bdc75ad63f25b57dbb6f49be6b966764c3

6 months agoChange the remaining manifests to use Let's Encrypt instead of StartCom
root []
Change the remaining manifests to use Let's Encrypt instead of StartCom

With this change, every service, that uses TLS secured connections on go2tech.de
and other sites, will use certificates from Let's Encrypt instead of StartCom/StartSSL.

Change-Id: Ia91efaabcb413f10b943659bce5ae75d60b2a32e

6 months agoMerge "Don't be restrict with helo command"
Jenkins CI []
Merge "Don't be restrict with helo command"

6 months agoDon't be restrict with helo command
root []
Don't be restrict with helo command

Change-Id: Idfbc54b2182107153dd208c7f945e3d81311887f

6 months agoAdd tagmail module for tagmail reports
root []
Add tagmail module for tagmail reports

Change-Id: Ie4d277297a69c8d606bd28d2a67c2fb4962f2c8b

6 months agoFix broken SSL configuration for nginx on eclair.dwnet
root []
Fix broken SSL configuration for nginx on eclair.dwnet

droidwiki.de can't be enabled on eclair.dwnet anymore (which uses let's encrypt
now, and we don't have a strategy for multiple-webserver hosts and let's encrypt for now).

Disabling droidwiki.de as a website on eclair.dwnet and correcting the certificate path
for missionrhode.go2tech.de fixes the startup error of nginx.

Follow up: I3a7ab3eaaf180f435d0bd606eb6a052add2d14df

Change-Id: Ibf7310cfb2c7c34897f4bda9643c8eb6d66acda5

6 months agoMerge "Enable ssl for more sites"
Jenkins CI []
Merge "Enable ssl for more sites"

6 months agoChange StartCom to LE as CA for droidwiki.de and friends
root []
Change StartCom to LE as CA for droidwiki.de and friends

Change-Id: I3a7ab3eaaf180f435d0bd606eb6a052add2d14df

6 months agoEnable ssl for more sites
root []
Enable ssl for more sites

Change-Id: I9389d06659090555bbb60686e595490f6e73d83a

6 months agoEnable www.go2tech.de site
root []
Enable www.go2tech.de site

Change-Id: I016cf2bf11a4a1c047aa46062c14e82267956313

7 months agoChange command for certbot-auto renew cron
root []
Change command for certbot-auto renew cron

Change-Id: Ic4c1585449b24f58e59c764b48f5cea4d36d39b1

7 months agoEnable OCSP Stapling for blog.go2tech.de
root []
Enable OCSP Stapling for blog.go2tech.de

Change-Id: I63d0ef429c2d2fef9ad96bcfd6afc407171f8254

7 months agoAdd new certbot role for let's encrypt and try it on blog.go2tech.de
root []
Add new certbot role for let's encrypt and try it on blog.go2tech.de

This is just a test for now. Let's see if Let's encrypt can be handled for
the little amount of sites on go2tech.de and droidwiki.de In best case,
Let's encrypt will take over all certificates from Startcom.

Change-Id: I70055e1982d78acee89454cfabbfac0ba4aaa114

7 months agoMerge "Enable OCSP Stapling for all ssl hosts"
Jenkins CI []
Merge "Enable OCSP Stapling for all ssl hosts"

7 months agoAdd HSTS for go2tech.de
root []
Add HSTS for go2tech.de

Not sure, why this wasn't added before.

Change-Id: I2e45460b8a457714bfc2d83458e57af3f5e565cc

7 months agoEnable OCSP Stapling for all ssl hosts
root []
Enable OCSP Stapling for all ssl hosts

Change-Id: Ieb1577d570d46955ccdefeb212070331298d75d1

7 months agoMonitor mariadb slave
Florian Schmidt []
Monitor mariadb slave

Change-Id: Ia1d48a2241e10afc8da0d2bd0b3db0c631f1d64f

7 months agoMerge "Follow up postfix settings"
Jenkins CI []
Merge "Follow up postfix settings"

7 months agoMerge "Puppetize monit"
Jenkins CI []
Merge "Puppetize monit"

7 months agoFollow up postfix settings
Florian Schmidt []
Follow up postfix settings

Duplicating settings doesn't make much sense and is more confusing. Also,
don't re-define default value (smtpd_delay_reject).

Follow up: I7ca3c600541b6771d2e815a7991f07fd3836909e

Change-Id: I94b61d8639ef1006f2a889a65b4b1245c4f2bca9

7 months agoPuppetize monit
Florian Schmidt []
Puppetize monit

Enabled all services to donut.dwnet and installed and enabled
services (which applies to the host) on eclair.dwnet.

Change-Id: Id4c32e5777315a7447c32f1e70ea872bd4490b6e

7 months agoCentralize mailserver configuration
Florian Schmidt []
Centralize mailserver configuration

Also, disallow sending e-mails for unauthenticated users (wtf).

Change-Id: I7ca3c600541b6771d2e815a7991f07fd3836909e

7 months agoChange default db server to donut
Florian Schmidt []
Change default db server to donut

Change-Id: I2cc24c573bc3dd51351d85e1a209be49d093e3d3

8 months agoPuppetize automysqlbackup
Florian Schmidt []
Puppetize automysqlbackup

Change-Id: I30cf7947c6acf339bc26d5ab45ce19a5d625feb4

8 months agoFollow up misconfigured ipv6 support
Florian Schmidt []
Follow up misconfigured ipv6 support

The puppet nginx module support ipv6_enable, which will insert a listen
option to the vhost (if set to true). However, the default ipv6_listen_options
parameter is different from the listen_options (for ipv4) parameter:
$listen_options = undef,
$ipv6_listen_options = 'default ipv6only=on',

This means: Enabling ipv6 support for a vhost with ipv6_enable will use the
default and ipv6only=on options for the listen directive. Having more then one
ipv6-enabled vhost on the same address:port combination including one of the
default listen options breaks nginx with message:
nginx: [emerg] duplicate listen options for [::]:80 ...

This change fixes the false implementation of ipv6 support for all vhosts by
setting the ipv6 listen options to '', excluding the ipv4 default vhost.

The different default values was reported upstream with #874:
https://github.com/voxpupuli/puppet-nginx/issues/874

Follow up: I690799e6f4977ced914b6e6e1dc03563380d4d73

Change-Id: I9d02c49ac1934336ab553bbb29520304306d0ce3

8 months agoFix missing IPv6 support in nginx vhosts
Florian Schmidt []
Fix missing IPv6 support in nginx vhosts

All hosts are enabled to communicate with IPv6, however, no nginx vhost was
configured to do so. For go2tech.de domains, this resulted in problems when
a user connects via IPv6 to one of the hosts (as this is the only domain, which
has an AAAA record so far), if the client doesn't try IPv4 if IPv6 doesn't work.

This change enables IPv6 on all vhosts to fix this problem and to cleanup the
configuration.

Change-Id: I690799e6f4977ced914b6e6e1dc03563380d4d73

8 months agoAdd new site missionrhode.go2tech.de
Florian Schmidt []
Add new site missionrhode.go2tech.de

Change-Id: I038959445b0e4983e30c4971e1bc121b18e311b8

8 months agoCleanup ambiguous file owner/group membership
Florian Schmidt []
Cleanup ambiguous file owner/group membership

Puppet would change the ownership in any run, which is not what we want ;)

Change-Id: If6afbf409cba7744d5a2276d4110352e9e89324e

8 months agoAdd xhgui.go2tech.de as frontend for profiling
Florian Schmidt []
Add xhgui.go2tech.de as frontend for profiling

Change-Id: Ied0ba5e71aa8c8fda468ed5e014200f54d9d41b6

8 months agoAdd MongoDB module and profilinghost role
Florian Schmidt []
Add MongoDB module and profilinghost role

This allows us to save profiling data in mongodb to view it with XHGui or
any other tool that conforms to the data schema.

Change-Id: I1be8ae6ecaf3b57e600becd2a7c5061738ebdad9

8 months agoAdd donut.go2tech.de handler to nginx
Florian Schmidt []
Add donut.go2tech.de handler to nginx

Access to monit and phpmydmin of donut.dwnet (droidwiki.de/data.droidwiki.de).

Change-Id: Ifea35b450b125953e9d3dfe2f402ef7235dc841e

9 months agoRemove go2tech.de/pwm vhost
Florian Schmidt []
Remove go2tech.de/pwm vhost

The last step of moving the user-self-management to opswiki.

Change-Id: I143b8e057f93649d5abe0a8b7950a3baebea9aaa

9 months agoAllow the * wildcard in sender_login_maps destination
Florian Schmidt []
Allow the * wildcard in sender_login_maps destination

This fixes the problem, that the mail user droidwiki@go2tech.de can't send
any e-mails through Special:EmailUser anymore. Adding the map

+----------------------+-------------+
| source | destination |
+----------------------+-------------+
| droidwiki@go2tech.de | * |
+----------------------+-------------+

to the vmail.aliases table allows the mail user now to send e-mails with
any source e-mail adress (including all unknown ones), which unblocks
Special:EmailUser.

Change-Id: I5f8654a4e1fba6bd4fcd88b54cbd78ea922f6b9b

9 months agoRedirect droidwiki.org to droidwiki.de
Florian Schmidt []
Redirect droidwiki.org to droidwiki.de

droidwiki.org should redirect to droidwiki.de instead of
data.droidwiki.de

Change-Id: Ib8cf7d5cff2468d626acd3bb84a150fa635e4e75

9 months agoAdd missing port for graphite.go2tech.de
Florian Schmidt []
Add missing port for graphite.go2tech.de

The default port (9000) points to hhvm, which can't handle uwsgi
requests.

Change-Id: I7889160a34f9f49feebe52cfe502db3ebdcdc8a3

9 months agoRemove facts.json
Florian Schmidt []
Remove facts.json

Not used/needed (anymore).

Change-Id: I17f5a814572e0e4a93a6a40dbeecf34cad863ab7

9 months agoRemove local hieradata nodes file puppet.speedport.ip
Florian Schmidt []
Remove local hieradata nodes file puppet.speedport.ip

Change-Id: Id173c0134810288ac985c0b15fe488a64dd64edc

9 months agoAdd missing dependency for stankevich/python
Florian Schmidt []
Add missing dependency for stankevich/python

Change-Id: I8ba7c31c22294d67c9e924e4a363c6044620b890

9 months agoRemove ganglia code and replace by submodule
Florian Schmidt []
Remove ganglia code and replace by submodule

Change-Id: I3b0a2f070aa3c6bc6be81f359ac46e71270d359b

9 months agoAdd README file
Florian Schmidt []
Add README file

Change-Id: I9f920a81ed365804de71aafcda04c2b6a23104c3

9 months agoPuppetize mediawiki service jobrunner and jobchron
Florian Schmidt []
Puppetize mediawiki service jobrunner and jobchron

Change-Id: I56541cb2803968a17c365b0e733e8a77091a35ff

9 months agoMerge "Puppetize postfix as a first step for the go2tech.de mailserver"
Jenkins CI []
Merge "Puppetize postfix as a first step for the go2tech.de mailserver"

9 months agoPuppetize postfix as a first step for the go2tech.de mailserver
Florian Schmidt []
Puppetize postfix as a first step for the go2tech.de mailserver

This is the first change that requires eyaml for encrypted data,
like db passwords and so on. So this is kind of a breaking change,
as it won't work for puppet masters without eyaml support.

Change-Id: I83be6fe6923c8128fd5605801832e2b84925df10

9 months agoDeploy certificate files with puppet
Florian Schmidt []
Deploy certificate files with puppet

Change-Id: I468d40fa68c7b2856a79e856d528fa8fd37c8a35

10 months agoFix ganglia inclusion
Florian Schmidt []
Fix ganglia inclusion

Change-Id: I1b972786506ae33b3c88877b885a96bfac974798

10 months agoFix hiera setup
Florian Schmidt []
Fix hiera setup

Change-Id: I81954a958499f9eeacf491e285dc5b42eda71f65

10 months agoConfigure ganglia with hiera
Florian Schmidt []
Configure ganglia with hiera

Also: Remove the meaningless puppetboard parameter.

Change-Id: I704efd5cf2b627e4d5af2b5bbd8863beb9357495

10 months agoChange article path from droidwiki.de/ to droidwiki.de/wiki
Florian Schmidt []
Change article path from droidwiki.de/ to droidwiki.de/wiki

Change-Id: I5c70eb93e62ee877dd893b0586b55c59c42a7928

10 months agoPuppetize nginx and hhvm configuration
Florian Schmidt []
Puppetize nginx and hhvm configuration

One of the biggest parts of puppetizing the server setup.

The new roles and configurations cover all virtual hosts, including
location configuration, of all services provided by eclair.dwnet and
donut.dwnet, but NOT the installation/configuration of the underlying
services (such as shellinabox or mediawiki). Puppetizing these
configuration will be part of separate commits for each service in the
future.

Change-Id: I0a8f9f15ef4a3f8ae011fbc73923a07b55a277dc

10 months agoRemove stdlib files and replace with submodule
Florian Schmidt []
Remove stdlib files and replace with submodule

No reason why these files should be kept in our repository,
as they can be included via a submodule, like any othe module,
too.

Change-Id: I86e36a8cd2bf4659e01a50834cdf5d66d33ceeeb

10 months agoFix iptables rule for gerrit
root []
Fix iptables rule for gerrit

29418 is the destination port for incoming traffic, not the source port.

Change-Id: Ic6d7070c112caac572731d3f9261201046c62cff

10 months agoDisable puppetboards query module
root []
Disable puppetboards query module

Change-Id: I65f34c05cefe3d02ebe7c539ee006a0f7bcb5d01

10 months agoDon't apply python-dev and python-all-dev to one host
root []
Don't apply python-dev and python-all-dev to one host

Both rules change each other.

Change-Id: Idc3801a3a255d4dd7a2c4a0b353f1b4e13a62921