diff --git a/bindep.txt b/bindep.txt
new file mode 100644
index 0000000..48ce379
--- /dev/null
+++ b/bindep.txt
@@ -0,0 +1,14 @@
+# This file contains runtime (non-python) dependencies
+# More info at: http://docs.openstack.org/infra/bindep/readme.html
+
+# install Ansible as system package
+ansible
+
+# cffi (required by oslo.privsep) and PyNaCL (required by paramiko)
+libffi-dev [platform:dpkg]
+libffi-devel [platform:rpm]
+
+# requirements from paramiko which requires cryptography which requires ssl
+libssl-dev [platform:dpkg]
+openssl-devel [platform:rpm !platform:suse]
+libopenssl-devel [platform:suse !platform:rpm]
diff --git a/os_faults/tests/devstack/playbooks/pre.yml b/os_faults/tests/devstack/playbooks/pre.yml
index 0f88af9..5d779fd 100644
--- a/os_faults/tests/devstack/playbooks/pre.yml
+++ b/os_faults/tests/devstack/playbooks/pre.yml
@@ -2,4 +2,5 @@
 
 - hosts: all
   roles:
+    - bindep
     - orchestrate-devstack
diff --git a/tox.ini b/tox.ini
index 947447a..219df04 100644
--- a/tox.ini
+++ b/tox.ini
@@ -65,7 +65,6 @@ setenv = {[testenv]setenv}
          OS_TEST_PATH=./os_faults/tests/devstack
          OS_DEBUG=True
 deps = {[testenv]deps}
-       ansible
 extras =
 commands =
   py.test -vvvv --html={envlogdir}/pytest_results.html --self-contained-html --durations=10 "os_faults/tests/devstack" {posargs}