Run an upgrade before adding new packages from 3rd party repos.
Specify a libssl-dev and libssl version, forcing a downgrade, but making the xdebug compile work.
Ensure we unzip drush to /tmp