Allow set software-root via parameters allow the webrunner inside a erp5testnode,
  recover the the previous builds from previous resilient tests, and only update (instead build from scratch)
  This is a typical usage on the webrunner (keep updating SR), so there is no
  problem on use this approach on erp5testnode tests.

Use the same exclude patterns (receiving end may want to exclude a file set
different from the time backup was exported, or may have a different set of
buildout-managed files which would be dangerous and misleading to
overwrite).

Do not apply exclusions to unrelated paths ("project", "proxy.db" and
"etc").
Simplify global exclusion file generation.
Add support for absolute and partition-relative exclusion paths
(previously, only partition-relative were supported).
Pipe exclusion file to rsync, to avoid an intermediate disk write.
Remove some directory prefix duplication by using PWD-relative paths
(except in one place, for runner-import.sh.jinja2 comparison).

So avoid spawning "cat" only for this.
Also, variable expansion quoting.

More similar changes will come later as part of larger changes.
Also, fail if
  cd "$backup_directory"
fails, as it is supposed to exist by that point.

Imperfect: single-quote escaping would be good. But this at least makes
it significantly harder to accidentally end up outside variable assignment.
Users of these values will be added in a later commit.

Software release for testing deploy scripts and Ansible playbooks
provided in slapos.package repository.

It is used by Test Suite and ERP5TestNode and runs tests configured in
Test Suite against VM built with deploy script.

Conflicts:
	slapos/recipe/check_url_available/__init__.py
	slapos/recipe/check_url_available/template/check_url.in

  The version 0.4.0 uses an deprecated version of 
  GraphAPI which might not work anymore.

The CA python egg is here: https://lab.nexedi.com/vpelletier/caucase
instance-certificate-authority.cfg.jinja2.in deploy a CA server which expose an API on HTTP,
all request are done using GET, PUT, DELETE and POST on that API.
CA server use ngix + gunicorn (for wsgi)

Auth server is an apache httpd which validate client certificate for authentification.
It autmatically request a signed certificate to CA and use it in apache configuration.

client request will be validated using:
SSLVerifyClient require in apache config

The CA expose two URL:
${certificate-authority-server:url} which is https URL used to access admin interface
${certificate-authority-server:insecure-url} is the HTTP url which can be used to post csr and download certificate

  This intent to speed up the download (only) of cache by using traffic server

  When slow clients post a large request, 30 seconds is too short for the current
  production usage. Short timeouts are rare but it always happens on POST, which
  is annoying for the user.

  Move from 30s to 5min the timeout to allow the slow clients upload their data
  with time.

  Apply commits:
   stack.erp5: Drop unneeded executable permissions. (fe7ea950)
   stack.logrotate: Fix support for stopped processes.
   stack.erp5: Use an iterator to produce port numbers.
   software/erp5: if wendelin-core-zblk-fmt is not given, then use wendelin.core's default.
   software/erp5 & stack/erp5: Add a new parameter wendelin-core-zblk-fmt.

In order to work in deep directory structures it is required to have
kvm-controller script wrapped to avoid shabang limit.

Since release of ipython 6.0.0 (
https://pypi.python.org/pypi/ipython/6.0.0 ) ipython became incompatible
with python < 3.3, so its version needs to be pinned.