slapos.cookbook:zero-knowledge.read has this limitation that because it
reads the secret file on __init__, ie. before any other parts are
installed, the value cannot be read the first time.
On first slapos node instance run, the generated turnserver-config has
an empty secret, it's only after the second execution that the secret is
generated. What happens is:
 - first run:
   - read-secret __init__ cannot find the file and does not override
     secret
   - turnserver-config uses the default ${read-secret:secret} (empty
     string)
   - gen-secret install creates the secret file
 - second run
   - read-secret __init__ finds the file and override secret with the
     value read from the file.
   - turnserver-config uses the overriden ${read-secret:secret} (good
     secret)

This was not a problem before, because some frontend promise were
always failing, so we processed this partition several time, but now it
is succesfully processed the first time.

To workadound this, we prevent turnserver from starting if secret is
empty, then promise will fail, instance will be processed a second time
and then turnserver will run with a secret.

This was causing "No JSON object could be decoded"

now that promises are satisfied, we don't retry slapos node instance
again and again, so this test starts earlier and we need to wait longer
for ERP5 to be ready.

This test was just checking the data from the first recv call, but the
data might arrive in multiple times. Call recv in a loop until we
received the end of the expected message (or until timeout when
something goes wrong).

needed for slapos.testing

and make sure we really use the develop version, by clearing version pin
that might be for another version.

Also clean up comments in version section.

This will be needed for standalone tests.

These are changes to profiles to satisfy the requirements from "checkSoftware" function from `slapos.testing`, ie:
 1. rpath is properly set on all executables.
 2. shared parts are not referencing non shared parts.

Eventhough current shared was working, we had several component with the problem 2. This was a problem in the following conditions:
 - because their hash was computed with a signature including the software installation path ( eg `/opt/slapgrid/e96b88e28dac4de1ba005bb48c6daac9/parts/something/`), shared parts were in practice never shared with other softwares. It was effective when re-installing the same software from scratch a second time, but not when using other softwares.
 - when the software was uninstalled, the shared parts stopped working because of missing paths.

As a result of these changes, some parts which used to be shared are no longer shared, but this MR also tries to share a few more parts, the goal was that all parts needed until rebootstrap were shared and also gcc and golang that are significantly large.

/reviewed-on nexedi/slapos!628

ERP5Catalog assumes that dates in catalog are UTC, this works
fine with DATETIME columns that does not carry any timezone
information, but TIMESTAMP columns are converted to mariadb timezone,
which is by default system timezone.

If we want ERP5Catalog to query on TIMESTAMP columns with the existing
logic of converting dates to UTC (because "dates are in UTC in
catalog"), we need to have TIMESTAMP columns in UTC.

This also generally seem a better default than falling back to system
timezone.

/reviewed-on nexedi/slapos!623

backports.lzma was missing from dependencies.

Based on current experiences, update the documentation regarding iptables
and network capability documentation.

It will generate new csr and key if the template changes, also if beacuse of
some reason key or csr is not present anymore.

This change makes the part resist to cases when it is becoming uninstalled and
installed again, so that it will not shoot its own foot and leaving the macro
user in inconsistent state.

depend on not shared nginx-dav-ext-module

because fonts-* all write in same parts/fonts/ this cannot be shared
yet.

xserver tries to write in xkeyboard-config:

make[2]: Nothing to be done for 'install-exec-am'.
 /bin//mkdir -p '/tmp/slaps/shared/xkeyboard-config/02d353dc7c1ab898ea120142e33b42f6/share/X11/xkb/compiled'
/bin//mkdir: cannot create directory ‘/tmp/slaps/shared/xkeyboard-config/02d353dc7c1ab898ea120142e33b42f6/share/X11/xkb/compiled’: Permission denied
Makefile:730: recipe for target 'install-dist_xkbcompiledDATA' failed
make[2]: *** [install-dist_xkbcompiledDATA] Error 1

find . -type f -executable | xargs ldd | egrep '(^\S|not found)' | grep -B1 'not found'
reported that this component creates binaries that are missing missing
rpath because libzip cannot be found.

Also enable shared as it looks shareable.

Now this component can be shared.

Maybe newer versions of file in
https://github.com/file/file/commits/master/magic/Magdir/msooxml have an
equivalent fix and the patch is no longer needed. I have kept the change
minimal.

Most components depend on perl.

We'll use "go1.4-bootstrap-20171003.tar.gz, which contains the Go
1.4 source code plus accumulated fixes to keep the tools running on
newer operating systems." as described in
https://golang.org/doc/install/source#bootstrapFromSource

(this archive contains the "time: Skip TestParseInLocation test."
commit)

Sorting will make dumped data "canonical", so it will limit amount of order
based changes.

Destroyed nodes shall be just destroyed, and there is no need to send whole
configuration to them.

This will stabilise list of published slaves.