move most apt package installs to ansible