Ensure this is available in lms.env to be overridden.

Feanil/test sandbox build

Jibsheet/programs on 16.04

Update common to pull down the non-ppa python on 16.04

(cherry picked from commit dd3c15bf019c6538ed8b83834fd2dc5b1a51a1db)

Instead of making the change just for ansible-provision.sh make the
change for all ansible runs.  Most of them don't currently have this
problem right now but I think it makes sense to make them all consistent
and not have to worry about this problem in the future.

When ansible is going over a NAT Gateway or other intermdiate
network devices, the connection can time out if that device has
its own timeout setting for no traffic.  Setting the ServerAliveInterval
will ensure that there is data sent over the wire ever 30 seconds so the
connection does not get closed while running ansible tasks that take
over 5 minutes.

update packer scripts to use ansible bootstrap script

These defaults are conflicting with the overrides.

ECOM-6238

Max/update pipeline migrations

Simplify the data table we need to change with each release

Jibsheet/use configuration source checking

Simple playbook to take security updates on hosts

add security upgrade flag to te jenkins plays

* fix the analyticstack box (#3369)

* revert change to vagrant version

Use unattended-upgrade to only take security updates

This allows for security updates to be applied during artifact creation,
but not applying other updates.

Add a new check which allows checking for extra config

Adding PUBLISHER_FROM_EMAIL for sending emails.

We include configuration from multiple sources, and we wanted a way
to ensure that a list of variables (canaries) have been defined
in our various configuration override repos and then -e@'ed in.

remove updates available check from MOTD

install pysqlite for devstack and jenkins workers