diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..30914d2
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+*.retry
+hosts
+ansible.cfg
diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg
deleted file mode 100644
index 009dbb4..0000000
--- a/ansible/ansible.cfg
+++ /dev/null
@@ -1,2 +0,0 @@
-[defaults]
-inventory = hosts
\ No newline at end of file
diff --git a/ansible/ansible.cfg.template b/ansible/ansible.cfg.template
new file mode 100644
index 0000000..33e048b
--- /dev/null
+++ b/ansible/ansible.cfg.template
@@ -0,0 +1,8 @@
+[defaults]
+inventory = hosts
+stdout_callback = yaml # makes error output more readable
+
+[ssh_connection]
+pipelining = True
+# enable this if ansible hangs on long-running tasks
+#ssh_args = -o ServerAliveInterval=100 -o ControlMaster=auto -o ControlPersist=60m
diff --git a/ansible/hosts b/ansible/hosts
deleted file mode 100644
index 22992c3..0000000
--- a/ansible/hosts
+++ /dev/null
@@ -1,32 +0,0 @@
-[ovh]
-ovh-vpsssd1-ubuntu        ansible_host=X.X.X.X  ansible_python_interpreter=/usr/bin/python3
-
-[linode]
-linode-linode1024-ubuntu  ansible_host=X.X.X.X  ansible_python_interpreter=/usr/bin/python3
-
-[digitalocean]
-do-5bucks-ubuntu          ansible_host=X.X.X.X  ansible_python_interpreter=/usr/bin/python3
-
-[scaleway]
-scaleway-vc1s-ubuntu      ansible_host=X.X.X.X  ansible_python_interpreter=/usr/bin/python3
-
-[vultr]
-vultr-20gbssd-ubuntu      ansible_host=X.X.X.X  ansible_python_interpreter=/usr/bin/python3
-vultr-25gbssd-ubuntu      ansible_host=X.X.X.X  ansible_python_interpreter=/usr/bin/python3
-
-
-# vars by provider
-[ovh:vars]
-ansible_user=root
-
-[linode:vars]
-ansible_user=root
-
-[digitalocean:vars]
-ansible_user=root
-
-[scaleway:vars]
-ansible_user=root
-
-[vultr:vars]
-ansible_user=root
diff --git a/ansible/hosts.template b/ansible/hosts.template
new file mode 100644
index 0000000..6e53375
--- /dev/null
+++ b/ansible/hosts.template
@@ -0,0 +1,32 @@
+[ovh]
+ovh-vpsssd1-ubuntu        ansible_host=X.X.X.X
+
+[linode]
+linode-linode1024-ubuntu  ansible_host=X.X.X.X
+
+[digitalocean]
+do-5bucks-ubuntu          ansible_host=X.X.X.X
+
+[scaleway]
+scaleway-vc1s-ubuntu      ansible_host=X.X.X.X
+
+[vultr]
+vultr-20gbssd-ubuntu      ansible_host=X.X.X.X
+vultr-25gbssd-ubuntu      ansible_host=X.X.X.X
+
+
+# vars by provider
+[ovh:vars]
+ansible_user=root
+
+[linode:vars]
+ansible_user=root
+
+[digitalocean:vars]
+ansible_user=root
+
+[scaleway:vars]
+ansible_user=root
+
+[vultr:vars]
+ansible_user=root
diff --git a/ansible/roles/common/tasks/main.yml b/ansible/roles/common/tasks/main.yml
index c5db29c..7b02740 100644
--- a/ansible/roles/common/tasks/main.yml
+++ b/ansible/roles/common/tasks/main.yml
@@ -6,3 +6,20 @@
   become: no
   tags:
     - gather
+
+- name: calculate sha512 checksum of results table
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: ../logs/tables.org
+  register: logfile
+  delegate_to: localhost
+  become: no
+
+- name: save checksum to file
+  local_action:
+    copy content="{{logfile.stat.checksum}}" dest="../logs/tables.org.sha512"
+  become: no
diff --git a/ansible/roles/compiler/tasks/main.yml b/ansible/roles/compiler/tasks/main.yml
index af2d864..f02e764 100644
--- a/ansible/roles/compiler/tasks/main.yml
+++ b/ansible/roles/compiler/tasks/main.yml
@@ -2,39 +2,63 @@
 
 - name: download mariadb
   get_url:
-    url:  https://downloads.mariadb.org/f/mariadb-10.1.22/source/mariadb-10.1.22.tar.gz?serve
-    dest: /tmp/mariadb.tar.gz
+    url: https://downloads.mariadb.com/MariaDB/mariadb-{{mariadb_version}}/source/mariadb-{{mariadb_version}}.tar.gz
+    dest: /tmp/mariadb-{{mariadb_version}}.tar.gz
 
 - name: uncompress mariadb
   unarchive:
-    src: /tmp/mariadb.tar.gz
+    src: /tmp/mariadb-{{mariadb_version}}.tar.gz
     dest: /tmp
     copy: no
 
-- name: set source repo
-  apt_repository:
-    repo: "deb-src http://archive.ubuntu.com/ubuntu/ xenial-updates universe"
-    state: present
-
-- name: install packages need to build mariadb
+- name: install packages needed to build mariadb
   apt:
     name: "{{item}}"
-    state: build-dep
+    state: present
     update_cache: yes
     install_recommends: no
   with_items:
-    - mariadb-server
+    - bison
+    - make
+    - cmake
+    - g++
+    - gcc
+    - git
+    - libaio-dev
+    - libcurl4-gnutls-dev
+    - libevent-dev
+    - libgnutls28-dev
+    - libjemalloc-dev
+    - libncurses-dev
+    - libxml2-dev
+    - zlib1g-dev
 
 - name: configure the mariadb build
-  shell: cmake . -DBUILD_CONFIG=mysql_release
+  shell: cmake . -DBUILD_CONFIG=mysql_release -DWITHOUT_MROONGA_STORAGE_ENGINE=YES
   args:
-    chdir: /tmp/mariadb-10.1.22
+    chdir: /tmp/mariadb-{{mariadb_version}}
+  # some versions of gcc segfault when building mroonga, so omit it
 
 - name: compile mariadb
   shell: (time -p make) > /tmp/compiler.log 2>&1
   args:
     executable: /bin/bash
-    chdir: /tmp/mariadb-10.1.22
+    chdir: /tmp/mariadb-{{mariadb_version}}
+
+- name: calculate sha512 checksum of logfile
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/compiler.log
+  register: logfile
+
+- name: save checksum to file
+  local_action:
+    copy content="{{ logfile.stat.checksum }}" dest="../logs/{{inventory_hostname}}/compiler.log.sha512"
+  become: no
 
 - name: retrieve log
   fetch:
@@ -44,11 +68,11 @@
 
 - name: remove mariadb files
   file:
-    path: /tmp/test
+    path: "{{item}}"
     state: absent
   with_items:
-    - /tmp/mariadb-10.1.22
-    - /tmp/mariadb.tar.gz
+    - /tmp/mariadb-{{mariadb_version}}
+    - /tmp/mariadb-{{mariadb_version}}.tar.gz
 
 - name: remove installed packages
   apt:
@@ -57,83 +81,17 @@
     purge: yes
     state: absent
   with_items:
-    - autotools-dev
-    - binutils
     - bison
-    - build-essential
-    - chrpath
+    - make
     - cmake
-    - cmake-data
-    - cpp
-    - cpp-5
-    - debhelper
-    - dh-apparmor
-    - dh-strip-nondeterminism
-    - dpkg-dev
     - g++
-    - g++-5
     - gcc
-    - gcc-5
-    - gdb
-    - gettext
-    - icu-devtools
-    - intltool-debian
+    - git
     - libaio-dev
-    - libaio1
-    - libarchive-zip-perl
-    - libarchive13
-    - libasan2
-    - libatomic1
-    - libbabeltrace-ctf1
-    - libbabeltrace1
-    - libbison-dev
-    - libboost-dev
-    - libboost1.58-dev
-    - libc-dev-bin
-    - libc6-dev
-    - libcc1-0
-    - libcilkrts5
-    - libcroco3
-    - libcurl3
-    - libdpkg-perl
-    - libfile-stripnondeterminism-perl
-    - libgcc-5-dev
-    - libgomp1
-    - libicu-dev
-    - libisl15
-    - libitm1
+    - libcurl4-gnutls-dev
+    - libevent-dev
+    - libgnutls28-dev
     - libjemalloc-dev
-    - libjemalloc1
-    - libjsoncpp1
-    - libjudy-dev
-    - libjudydebian1
-    - liblsan0
-    - libltdl-dev
-    - libltdl7
-    - libmpc3
-    - libmpx0
-    - libncurses5-dev
-    - libodbc1
-    - libpam0g-dev
-    - libpcre16-3
-    - libpcre3-dev
-    - libpcre32-3
-    - libpcrecpp0v5
-    - libquadmath0
-    - libreadline-gplv2-dev
-    - libstdc++-5-dev
-    - libtimedate-perl
-    - libtinfo-dev
-    - libtsan0
-    - libubsan0
-    - libunistring0
+    - libncurses-dev
     - libxml2-dev
-    - linux-libc-dev
-    - m4
-    - make
-    - odbcinst
-    - odbcinst1debian2
-    - po-debconf
-    - unixodbc
-    - unixodbc-dev
-    - zlib1g-dev 
+    - zlib1g-dev
diff --git a/ansible/roles/dd/tasks/main.yml b/ansible/roles/dd/tasks/main.yml
index 339bb1b..799585e 100644
--- a/ansible/roles/dd/tasks/main.yml
+++ b/ansible/roles/dd/tasks/main.yml
@@ -6,26 +6,43 @@
     chdir: /tmp
   with_sequence: count=5
 
-- name: retrieve log
-  fetch:
-    src: /tmp/dd_cpu.log
-    dest: ../logs/{{inventory_hostname}}/dd_cpu.log
-    flat: yes
-
 - name: run dd IO test
   shell: dd if=/dev/zero of=test bs=64k count=16k conv=fdatasync 2>> dd_io.log
   args:
     chdir: /tmp
   with_sequence: count=5
 
-- name: retrieve log
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/{{item}}.log
+  register: logfile
+  with_items:
+    - dd_io
+    - dd_cpu
+
+- name: save checksums to files
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
+
+- name: retrieve logs
   fetch:
-    src: /tmp/dd_io.log
-    dest: ../logs/{{inventory_hostname}}/dd_io.log
+    src: /tmp/{{item}}.log
+    dest: ../logs/{{inventory_hostname}}/{{item}}.log
     flat: yes
+  with_items:
+    - dd_io
+    - dd_cpu
 
 - name: remove auxiliary file
-  file: 
+  file:
     path: /tmp/test
     state: absent
 
diff --git a/ansible/roles/downloads/tasks/main.yml b/ansible/roles/downloads/tasks/main.yml
index 080f5c3..9a5da58 100644
--- a/ansible/roles/downloads/tasks/main.yml
+++ b/ansible/roles/downloads/tasks/main.yml
@@ -7,7 +7,22 @@
   shell: cat downloads_1.log downloads_2.log downloads_3.log > downloads.log
   args:
     chdir: /tmp
- 
+
+- name: calculate sha512 checksum of logfile
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/downloads.log
+  register: logfile
+
+- name: save checksum to file
+  local_action:
+    copy content="{{ logfile.stat.checksum }}" dest="../logs/{{inventory_hostname}}/downloads.log.sha512"
+  become: no
+
 - name: retrieve log
   fetch:
     src: /tmp/downloads.log
diff --git a/ansible/roles/fio/tasks/main.yml b/ansible/roles/fio/tasks/main.yml
index e5e39b5..605b910 100644
--- a/ansible/roles/fio/tasks/main.yml
+++ b/ansible/roles/fio/tasks/main.yml
@@ -13,14 +13,8 @@
     chdir: /tmp
   with_sequence: count=5
 
-- name: retrieve log
-  fetch:
-    src: /tmp/fio_randread.log
-    dest: ../logs/{{inventory_hostname}}/fio_randread.log
-    flat: yes
-
 - name: remove auxiliary files
-  file: 
+  file:
     path: "{{item}}"
     state: absent
   with_items:
@@ -39,14 +33,37 @@
     chdir: /tmp
   with_sequence: count=5
 
-- name: retrieve log
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/{{item}}.log
+  register: logfile
+  with_items:
+    - fio_randwrite
+    - fio_randread
+
+- name: save checksums to files
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
+
+- name: retrieve logs
   fetch:
-    src: /tmp/fio_randwrite.log
-    dest: ../logs/{{inventory_hostname}}/fio_randwrite.log
+    src: /tmp/{{item}}.log
+    dest: ../logs/{{inventory_hostname}}/{{item}}.log
     flat: yes
+  with_items:
+    - fio_randwrite
+    - fio_randread
 
 - name: remove auxiliary files
-  file: 
+  file:
     path: "{{item}}"
     state: absent
   with_items:
diff --git a/ansible/roles/hardware/tasks/main.yml b/ansible/roles/hardware/tasks/main.yml
index 77c9684..f774b73 100644
--- a/ansible/roles/hardware/tasks/main.yml
+++ b/ansible/roles/hardware/tasks/main.yml
@@ -17,77 +17,74 @@
   args:
     chdir: /tmp
 
-- name: retrieve dmidecode log
-  fetch:
-    src: /tmp/hard_dmidecode.log
-    dest: ../logs/{{inventory_hostname}}/hard_dmidecode.log
-    flat: yes
-
 - name: detect virtualization technology
   shell: systemd-detect-virt > hard_virt_tech.log
   args:
     chdir: /tmp
 
-- name: retrieve vir-tech log
-  fetch:
-    src: /tmp/hard_virt_tech.log
-    dest: ../logs/{{inventory_hostname}}/hard_virt_tech.log
-    flat: yes
-
 - name: run lscpu
   shell: lscpu > hard_lscpu.log
   args:
     chdir: /tmp
 
-- name: retrieve lscpu log
-  fetch:
-    src: /tmp/hard_lscpu.log
-    dest: ../logs/{{inventory_hostname}}/hard_lscpu.log
-    flat: yes
-
 - name: run lsblk
   shell: lsblk -p > hard_lsblk.log
   args:
     chdir: /tmp
 
-- name: retrieve lsblk log
-  fetch:
-    src: /tmp/hard_lsblk.log
-    dest: ../logs/{{inventory_hostname}}/hard_lsblk.log
-    flat: yes
-
 - name: run lshw
   shell: lshw > hard_lshw.log
   args:
     chdir: /tmp
 
-- name: retrieve lshw log
-  fetch:
-    src: /tmp/hard_lshw.log
-    dest: ../logs/{{inventory_hostname}}/hard_lshw.log
-    flat: yes
-
 - name: run inxi
   shell: inxi -Fxxx -c0 > hard_inxi.log
   args:
     chdir: /tmp
 
-- name: retrieve inxi log
-  fetch:
-    src: /tmp/hard_inxi.log
-    dest: ../logs/{{inventory_hostname}}/hard_inxi.log
-    flat: yes
-
 - name: run hwinfo
   shell: hwinfo > hard_hwinfo.log
   args:
     chdir: /tmp
 
-- name: retrieve hwinfo log
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/{{item}}.log
+  register: logfile
+  with_items:
+    - hard_dmidecode
+    - hard_virt_tech
+    - hard_lscpu
+    - hard_lsblk
+    - hard_lshw
+    - hard_inxi
+    - hard_hwinfo
+
+- name: save checksums to files
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
+
+- name: retrieve logs
   fetch:
-    src: /tmp/hard_hwinfo.log
-    dest: ../logs/{{inventory_hostname}}/hard_hwinfo.log
+    src: /tmp/{{item}}.log
+    dest: ../logs/{{inventory_hostname}}/{{item}}.log
     flat: yes
+  with_items:
+    - hard_dmidecode
+    - hard_virt_tech
+    - hard_lscpu
+    - hard_lsblk
+    - hard_lshw
+    - hard_inxi
+    - hard_hwinfo
 
 - name: remove dmidecode & lswh & inxi & hwinfo
   apt:
@@ -100,11 +97,3 @@
     - lshw
     - inxi
     - hwinfo
-
-
-
-
-
-
-
-
diff --git a/ansible/roles/lynis/tasks/main.yml b/ansible/roles/lynis/tasks/main.yml
index 582b6d6..cc8ec7d 100644
--- a/ansible/roles/lynis/tasks/main.yml
+++ b/ansible/roles/lynis/tasks/main.yml
@@ -11,29 +11,29 @@
   get_url:
     url: https://github.com/CISOfy/lynis/archive/master.tar.gz
     dest: /tmp/lynis.tar.gz
-  when: lynis_log.stat.exists == False 
+  when: lynis_log.stat.exists == False
 
 - name: uncompress Lynis
   unarchive:
     src: /tmp/lynis.tar.gz
     dest: /tmp
     copy: no
-  when: lynis_log.stat.exists == False 
+  when: lynis_log.stat.exists == False
 
 - name: run Lynis
   command: ./lynis audit system
   args:
     chdir: /tmp/lynis-master
-  when: lynis_log.stat.exists == False 
+  when: lynis_log.stat.exists == False
 
 - name: remove Lynis
-  file: 
+  file:
     path: "{{item}}"
     state: absent
   with_items:
     - /tmp/lynis-master
     - /tmp/lynis.tar.gz
-  when: lynis_log.stat.exists == False 
+  when: lynis_log.stat.exists == False
 
 - name: retrieve Lynis log
   fetch:
@@ -47,3 +47,20 @@
   script: clean_ips.py lynis.log -p ../logs
   delegate_to: localhost
   become: no
+
+- name: calculate sha512 checksum of logfile
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: ../logs/{{inventory_hostname}}/lynis.log
+  delegate_to: localhost
+  become: no
+  register: logfile
+
+- name: save checksum to file
+  local_action:
+    copy content="{{ logfile.stat.checksum }}" dest="../logs/{{inventory_hostname}}/lynis.log.sha512"
+  become: no
diff --git a/ansible/roles/ports/tasks/main.yml b/ansible/roles/ports/tasks/main.yml
index c01799b..10b5a50 100644
--- a/ansible/roles/ports/tasks/main.yml
+++ b/ansible/roles/ports/tasks/main.yml
@@ -52,6 +52,31 @@
   delegate_to: localhost
   become: no
 
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: ../logs/{{inventory_hostname}}/{{item}}.log
+  register: logfile
+  delegate_to: localhost
+  become: no
+  with_items:
+    - netstat
+    - nmap
+    - nmap_v6
+    - nmap_pro
+    - nmap_pro_v6
+
+- name: save checksum to file
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
+
 - name: remove nmap
   apt:
     name: nmap
diff --git a/ansible/roles/speedtest/tasks/main.yml b/ansible/roles/speedtest/tasks/main.yml
index 5943545..5eca378 100644
--- a/ansible/roles/speedtest/tasks/main.yml
+++ b/ansible/roles/speedtest/tasks/main.yml
@@ -5,8 +5,14 @@
     url: https://raw.githubusercontent.com/sivel/speedtest-cli/master/speedtest.py
     dest: /tmp/speedtest-cli
 
+- name: set python executable
+  replace:
+    path: /tmp/speedtest-cli
+    regexp: '#!\/usr\/bin\/env python'
+    replace: "#!{{ ansible_python_interpreter }}"
+
 - name: set execution permission
-  file: 
+  file:
     path: /tmp/speedtest-cli
     mode: "u=rwx,g=rwx,o=rx"
 
@@ -21,19 +27,19 @@
   args:
     chdir: /tmp
   with_sequence: count=3
- 
+
 - name: run speedtest-cli for Barcelona
   shell: ./speedtest-cli --server 1695 >> speedtest_bar.log
   args:
     chdir: /tmp
   with_sequence: count=3
- 
+
 - name: run speedtest-cli for Paris
   shell: ./speedtest-cli --server 5559 >> speedtest_par.log
   args:
     chdir: /tmp
   with_sequence: count=3
- 
+
 - name: run speedtest-cli for London
   shell: ./speedtest-cli --server 2789 >> speedtest_lon.log
   args:
@@ -51,7 +57,7 @@
   args:
     chdir: /tmp
   with_sequence: count=3
- 
+
 - name: retrieve logs
   fetch:
     src: /tmp/{{item}}.log
@@ -67,7 +73,7 @@
     - speedtest_rom
 
 - name: remove speedtest-cli
-  file: 
+  file:
     path: "{{item}}"
     state: absent
   with_items:
@@ -88,3 +94,29 @@
     - speedtest_ber
     - speedtest_rom
 
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: ../logs/{{inventory_hostname}}/{{item}}.log
+  register: logfile
+  delegate_to: localhost
+  become: no
+  with_items:
+    - speedtest_near
+    - speedtest_mad
+    - speedtest_bar
+    - speedtest_par
+    - speedtest_lon
+    - speedtest_ber
+    - speedtest_rom
+
+- name: save checksum to file
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
diff --git a/ansible/roles/sysbench/tasks/main.yml b/ansible/roles/sysbench/tasks/main.yml
index 4e5de9e..5feaaae 100644
--- a/ansible/roles/sysbench/tasks/main.yml
+++ b/ansible/roles/sysbench/tasks/main.yml
@@ -1,5 +1,27 @@
 ---
 
+- name: get signing key for sysbench repository
+  get_url:
+    url: https://packagecloud.io/akopytov/sysbench/gpgkey
+    dest: /tmp/sysbench-gpgkey
+
+- name: install signing key
+  shell: apt-key add /tmp/sysbench-gpgkey &>/dev/null
+
+- name: add apt https support
+  apt:
+    name: apt-transport-https
+    state: latest
+    update_cache: yes
+    install_recommends: no
+
+- name: add sysbench repository
+  apt_repository:
+    repo: "deb https://packagecloud.io/akopytov/sysbench/{{ ansible_distribution | lower }}/ {{ ansible_distribution_release }} main"
+    state: present
+    filename: sysbench
+  when: ansible_distribution_release != "bionic" # bionic already has speedtest 1.x and pc currently does not have a bionic repo
+
 - name: install sysbench
   apt:
     name: sysbench
@@ -8,77 +30,50 @@
     install_recommends: no
 
 - name: run sysbench cpu
-  shell: sysbench --test=cpu --cpu-max-prime=20000 --num-threads=1 run >> /tmp/sysbench_cpu.log
+  shell: sysbench cpu --cpu-max-prime=20000 --num-threads=1 run >> /tmp/sysbench_cpu.log
   args:
     chdir: /tmp
     executable: /bin/bash
   with_sequence: count=5
 
-- name: retrieve cpu log
-  fetch:
-    src: /tmp/sysbench_cpu.log
-    dest: ../logs/{{inventory_hostname}}/sysbench_cpu.log
-    flat: yes
-
 - name: run sysbench memory random read
-  shell: sysbench --test=memory --memory-access-mode=rnd --memory-oper=read --num-threads=1 run >> /tmp/sysbench_ram_randrd.log
+  shell: sysbench memory --memory-access-mode=rnd --memory-oper=read --num-threads=1 run >> /tmp/sysbench_ram_randrd.log
   args:
     chdir: /tmp
     executable: /bin/bash
   with_sequence: count=5
 
 - name: run sysbench memory random write
-  shell: sysbench --test=memory --memory-access-mode=rnd --memory-oper=write --num-threads=1 run >> /tmp/sysbench_ram_randrw.log
+  shell: sysbench memory --memory-access-mode=rnd --memory-oper=write --num-threads=1 run >> /tmp/sysbench_ram_randrw.log
   args:
     chdir: /tmp
     executable: /bin/bash
   with_sequence: count=5
 
-- name: retrieve memory logs
-  fetch:
-    src: /tmp/{{item}}.log
-    dest: ../logs/{{inventory_hostname}}/{{item}}.log
-    flat: yes
-  with_items:
-    - sysbench_ram_randrd
-    - sysbench_ram_randrw
-
 - name: prepare sysbench fileio
-  shell: sysbench --test=fileio --file-total-size=8G prepare 
+  shell: sysbench fileio --file-total-size=8G prepare
   args:
     chdir: /tmp
 
 - name: run sysbench fileio random write
-  shell: sysbench --test=fileio --file-total-size=8G --file-test-mode=rndrw --init-rng=on --max-time=300 --max-requests=0 --file-block-size=4K run >> /tmp/sysbench_randrw.log
+  shell: sysbench fileio --file-total-size=8G --file-test-mode=rndrw --rand-seed=0 --max-time=300 --max-requests=0 --file-block-size=4K run >> /tmp/sysbench_randrw.log
   args:
     chdir: /tmp
     executable: /bin/bash
   with_sequence: count=5
 
 - name: run sysbench fileio random read
-  shell: sysbench --test=fileio --file-total-size=8G --file-test-mode=rndrd --init-rng=on --max-time=300 --max-requests=0 --file-block-size=4K run >> /tmp/sysbench_randrd.log
+  shell: sysbench fileio --file-total-size=8G --file-test-mode=rndrd --rand-seed=0 --max-time=300 --max-requests=0 --file-block-size=4K run >> /tmp/sysbench_randrd.log
   args:
     chdir: /tmp
     executable: /bin/bash
   with_sequence: count=5
 
 - name: cleanup sysbench fileio
-  shell: sysbench --test=fileio --file-total-size=8G cleanup
+  shell: sysbench fileio --file-total-size=8G cleanup
   args:
     chdir: /tmp
 
-- name: retrieve randrw log
-  fetch:
-    src: /tmp/sysbench_randrw.log
-    dest: ../logs/{{inventory_hostname}}/sysbench_randrw.log
-    flat: yes
-
-- name: retrieve randrd log
-  fetch:
-    src: /tmp/sysbench_randrd.log
-    dest: ../logs/{{inventory_hostname}}/sysbench_randrd.log
-    flat: yes
-
 - name: set MySQL root password before installing
   debconf:
     name: 'mysql-server'
@@ -102,27 +97,52 @@
 - name: create sysbench database
   shell: mysql -u root -ppassword -e "CREATE DATABASE sysbench;"
 
-- name: create database user
-  shell: mysql -u root -ppassword -e "CREATE USER 'sysbench'@'localhost' IDENTIFIED BY 'password';"
-
-- name: set database user privileges
-  shell: mysql -u root -ppassword -e "GRANT ALL PRIVILEGES ON *.* TO 'sysbench'@'localhost' IDENTIFIED  BY 'password';"
-
 - name: prepare sysbench database
-  shell: sysbench --test=oltp --db-driver=mysql --oltp-table-size=10000000 --mysql-db=sysbench --mysql-user=sysbench --mysql-password=password prepare
+  shell: sysbench oltp_read_only --db-driver=mysql --table_size=10000000 --mysql-db=sysbench --mysql-user=root --mysql-password=password prepare
 
 - name: run sysbench oltp
-  shell: sysbench --test=oltp --oltp-table-size=10000000 --mysql-db=sysbench --mysql-user=root --mysql-password=password --max-time=60 --max-requests=0 --num-threads=1 --oltp-reconnect-mode=random run >> /tmp/sysbench_mysql.log
+  shell: sysbench oltp_read_only --db-driver=mysql --table_size=10000000 --mysql-db=sysbench --mysql-user=root --mysql-password=password --time=60 --max-requests=0 --num-threads=1 run >> /tmp/sysbench_mysql.log
   args:
     chdir: /tmp
     executable: /bin/bash
   with_sequence: count=5
 
-- name: retrieve oltp log
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/{{item}}.log
+  register: logfile
+  with_items:
+    - sysbench_ram_randrd
+    - sysbench_ram_randrw
+    - sysbench_randrw
+    - sysbench_randrd
+    - sysbench_mysql
+    - sysbench_cpu
+
+- name: save checksums to files
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
+
+- name: retrieve logs
   fetch:
-    src: /tmp/sysbench_mysql.log
-    dest: ../logs/{{inventory_hostname}}/sysbench_oltp.log
+    src: /tmp/{{item}}.log
+    dest: ../logs/{{inventory_hostname}}/{{item}}.log
     flat: yes
+  with_items:
+    - sysbench_ram_randrd
+    - sysbench_ram_randrw
+    - sysbench_randrw
+    - sysbench_randrd
+    - sysbench_mysql
+    - sysbench_cpu
 
 - name: remove sysbench
   apt:
@@ -131,9 +151,24 @@
     purge: yes
     state: absent
 
+- name: remove sysbench repository
+  apt_repository:
+    repo: "deb https://packagecloud.io/akopytov/sysbench/{{ ansible_distribution | lower }}/ {{ ansible_distribution_release }} main"
+    state: absent
+
 - name: remove mysql
   apt:
-    name: mysql-server
+    name: 'mysql*'
     autoremove: yes
     purge: yes
     state: absent
+
+- name: remove remaining mysql files
+  file:
+    path: "{{ item }}"
+    state: absent
+  with_items:
+    - /var/lib/mysql
+    - /var/lib/mysql-files
+    - /var/lib/mysql-keyring
+    - /etc/mysql
diff --git a/ansible/roles/transcode/tasks/main.yml b/ansible/roles/transcode/tasks/main.yml
index 28382b1..a7ec45b 100644
--- a/ansible/roles/transcode/tasks/main.yml
+++ b/ansible/roles/transcode/tasks/main.yml
@@ -8,7 +8,14 @@
   get_url:
     url: http://distribution.bbb3d.renderfarming.net/video/mp4/bbb_sunflower_2160p_30fps_normal.mp4
     dest: /tmp/video4k.mp4
-  when: video_down.stat.exists == False 
+  when: video_down.stat.exists == False
+
+- name: add backports repository for ffmpeg on debian/jessie
+  apt_repository:
+    repo: "deb http://http.debian.net/debian/ jessie-backports main"
+    state: present
+    filename: jessie-backports
+  when: ansible_distribution_release == "jessie"
 
 - name: install ffmpeg
   apt:
@@ -23,6 +30,21 @@
     chdir: /tmp/
     executable: /bin/bash
 
+- name: calculate sha512 checksum of logfile
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/transcode.log
+  register: logfile
+
+- name: save checksums to files
+  local_action:
+    copy content="{{logfile.stat.checksum}}" dest="../logs/{{inventory_hostname}}/transcode.log.sha512"
+  become: no
+
 - name: retrieve log
   fetch:
     src: /tmp/transcode.log
@@ -37,11 +59,15 @@
     state: absent
 
 - name: remove videos
-  file: 
+  file:
     path: "{{item}}"
     state: absent
   with_items:
     - /tmp/video4k.mp4
     - /tmp/video_1080p.mp4
 
-
+- name: remove backports repository on debian/jessie
+  apt_repository:
+    repo: "deb http://http.debian.net/debian/ jessie-backports main"
+    state: absent
+  when: ansible_distribution_release == "jessie"
diff --git a/ansible/roles/unixbench/tasks/main.yml b/ansible/roles/unixbench/tasks/main.yml
index abe43d6..6d104b3 100644
--- a/ansible/roles/unixbench/tasks/main.yml
+++ b/ansible/roles/unixbench/tasks/main.yml
@@ -7,8 +7,9 @@
     update_cache: yes
     install_recommends: no
   with_items:
-    - gcc-5
-    - build-essential
+    - gcc
+    - libc-dev
+    - make
 
 - name: download UnixBench
   get_url:
@@ -27,26 +28,42 @@
     chdir: /tmp/byte-unixbench-master/UnixBench
 
 - name: remove UnixBench
-  file: 
+  file:
     path: "{{item}}"
     state: absent
   with_items:
     - /tmp/byte-unixbench-master
     - /tmp/unixbench.tar.gz
 
+- name: calculate sha512 checksum of logfile
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: /tmp/unixbench.log
+  register: logfile
+
+- name: save checksums to files
+  local_action:
+    copy content="{{logfile.stat.checksum}}" dest="../logs/{{inventory_hostname}}/unixbench.log.sha512"
+  become: no
+
 - name: retrieve log
   fetch:
     src: /tmp/unixbench.log
     dest: ../logs/{{inventory_hostname}}/unixbench.log
     flat: yes
 
-- name: remove installed packages 
+- name: remove installed packages
   apt:
     name: "{{item}}"
     autoremove: yes
     purge: yes
     state: absent
   with_items:
-    - gcc-5
-    - build-essential
+    - gcc
+    - libc-dev
+    - make
 
diff --git a/ansible/roles/web/tasks/main.yml b/ansible/roles/web/tasks/main.yml
index 7582d9e..628868c 100644
--- a/ansible/roles/web/tasks/main.yml
+++ b/ansible/roles/web/tasks/main.yml
@@ -98,7 +98,7 @@
   when: wordpress_installed.rc == 0
 
 - name: run ApacheBench app in local Docker against WordPress with 10 connections
-  shell: docker run --rm jordi/ab ab -t180 -c10 \
+  shell: docker run --rm jordi/ab -t180 -c10 \
          http://{{ansible_host}}/wordpress/{{ansible_date_time.year}}/{{ansible_date_time.month}}/{{ansible_date_time.day}}/hello-world/ > web_wp_ab_10.log
   delegate_to: localhost
   become: no
@@ -114,7 +114,7 @@
   when: wordpress_installed.rc == 0
 
 - name: run ApacheBench app in local Docker against WordPress with 25 connections
-  shell: docker run --rm jordi/ab ab -t180 -c25 \
+  shell: docker run --rm jordi/ab -t180 -c25 \
          http://{{ansible_host}}/wordpress/{{ansible_date_time.year}}/{{ansible_date_time.month}}/{{ansible_date_time.day}}/hello-world/ > web_wp_ab_25.log
   delegate_to: localhost
   become: no
@@ -130,7 +130,7 @@
   when: wordpress_installed.rc == 0
 
 - name: run ApacheBench app in local Docker against WordPress with 50 connections
-  shell: docker run --rm jordi/ab ab -t180 -c50 \
+  shell: docker run --rm jordi/ab -t180 -c50 \
          http://{{ansible_host}}/wordpress/{{ansible_date_time.year}}/{{ansible_date_time.month}}/{{ansible_date_time.day}}/hello-world/ > web_wp_ab_50.log
   delegate_to: localhost
   become: no
@@ -284,3 +284,32 @@
     - web_ghost_wrk_100
     - web_ghost_wrk_150
     - web_ghost_wrk_200
+
+- name: calculate sha512 checksums of logfiles
+  stat:
+    checksum_algorithm: sha512
+    get_checksum: true
+    get_attributes: false
+    get_md5: false
+    get_mime: false
+    path: ../logs/{{inventory_hostname}}/{{item}}.log
+  register: logfile
+  delegate_to: localhost
+  become: no
+  with_items:
+    - web_wp_ab_10
+    - web_wp_ab_25
+    - web_wp_ab_50
+    - web_wp_wrk_100
+    - web_wp_wrk_150
+    - web_wp_wrk_200
+    - web_ghost_wrk_100
+    - web_ghost_wrk_150
+    - web_ghost_wrk_200
+
+- name: save checksum to file
+  local_action:
+    copy content="{{item.stat.checksum}}" dest="../logs/{{inventory_hostname}}/{{item.item}}.log.sha512"
+  become: no
+  with_items:
+    - "{{ logfile.results }}"
diff --git a/ansible/site.yml b/ansible/site.yml
index 76d116a..93bfc3b 100644
--- a/ansible/site.yml
+++ b/ansible/site.yml
@@ -1,12 +1,22 @@
 - hosts: all
   become: yes
   become_method: sudo
+  strategy: linear # this is the default. Set to 'free' to let hosts to run independently
+  gather_facts: false # needs to be run after ansible_python_interpreter is set up correctly
 
-  # pre_tasks:
-  #   - name: Install python for Ansible on Ubuntu
-  #     raw: test -e /usr/bin/python || (apt -y update && apt install -y python-minimal)
-  #     when: ansible_distribution == "Ubuntu"
-  #     changed_when: False
+  # set /usr/bin/python3 as interpreter on systems that don't ship /usr/bin/python
+  pre_tasks:
+    - name: detect available python interpreter
+      raw: which /usr/bin/python || which /usr/bin/python3
+      register: py_interpreter
+      changed_when: py_interpreter.stdout != ""
+    - name: set python interpreter
+      set_fact:
+        ansible_python_interpreter: "{{ py_interpreter.stdout_lines[0] }}"
+    - debug:
+        msg: "{{ inventory_hostname }} python interpreter: {{ ansible_python_interpreter }}"
+    - name: Gathering Facts
+      setup: # AKA gather_facts
 
   roles:
     - { role: lynis,      tags: ['security', 'lynis', 'info']}
@@ -18,7 +28,7 @@
     - { role: fio,        tags: ['fio', 'disk', 'benchmark']}
     - { role: speedtest,  tags: ['speedtest', 'network', 'benchmark']}
     - { role: downloads,  tags: ['downloads', 'network', 'benchmark']} #caution! ~93Gbits
-    - { role: compiler,   tags: ['compiler', 'benchmark']}
+    - { role: compiler,   tags: ['compiler', 'benchmark'], vars: { mariadb_version: 10.2.14 }}
     - { role: transcode,  tags: ['transcode', 'multimedia', 'benchmark']}
     - { role: web,        tags: ['web', 'benchmark']}
     - { role: common,     tags: ['common']}