install setuptools instead of distribute; pin pip at v1.4
ensure the sudo package is installed
ensure the user is in the sudoers file
include vmware grain and only patch kernels on Debian-type distros
improved nginx state with template site config