Take a look at my fab_changes branch to see if you like the provisioning task that includes installing system dependencies. For apt-get stuff, I don't think you need to do it with every deploy, unless we blow the box away every time. So, one idea is to have the system-wide packages only done during provisionings. But the virtualenv stuff happens everytime.