base: systemd-detect-virt debian workaround
nginx: only log critical messages
deploy: use inline resource from chef 11
tasks/upstream: speed up cherry pick