This upgrade

- teaches nxdtest to run each testcase with its own /tmp and /dev/shm to
  detect after each test run leaked temporary files, leaked mount
  entries, to isolate different test runs from each other, and to provide
  tmpfs on /tmp for every test.

  nexedi/nxdtest!13

- teaches nxdtest to propagate cancellation to spawned test jobs, so
  that whenever user cancels corresponding test run in ERP5 UI, nxdtest
  stops promptly. This should be most useful for long-running tests like
  SlapOS.SoftwareReleases.IntegrationTest-* which before had to be
  waited for for hours to complete even after cancelling test run in ERP5.

  nexedi/nxdtest!14

Pytest-mock is added because it becomes dependency to test nxdtest
itself.

Several places pin mock egg individually. There are pins to `mock = 3.0.5`
and pins to `mock = 2.0.0:whl`. Mock 3.0.5 is the last version that
supports Python2 and can be considered as "current" in our context today.

For nxdtest we are going to add pytest-mock, which depends on the mock,
which, if not consolidated, will need to add another `mock = 3.0.5`
somewhere.

-> Stop doing that and move mock pinning into stack/slapos.cfg.
This way it will be even easier for upcoming Python3 support, because in
stack/slapos.cfg we can add per-Python3 [versions] with pins adjusted as
needed for py3, but all still in one single place.

Leave `mock = 2.0.0:whl` pins intact to be updated when needed by
maintainers of corresponding software releases:

    software/slapos-sr-testing/software.cfg:mock = 2.0.0:whl
    software/slapos-testing/software.cfg:mock = 2.0.0:whl
    software/wendelin/software-kerastensorflow.cfg:mock = 2.0.0:whl

IMS and MME are in the same instance, but there is only one TUN
per instance. IMS is not crucial right now so we temporarily remove it
until we implement a clean solution.

We were trying to patchelf a file that apparently exists when Theia
is compiled on Debian 8, 10 and 11, but not on Debian 9.

See merge request nexedi/slapos!1105

Include the hash of all parameters related to the embedded instance
as a comment in the standalone script, so that if the hash changes,
the script and its own hash change as well, and standalone service
will be restarted.

Generate standalone script in instance-theia.cfg.jinja.in instead of
in software.cfg, avoiding the need to forward all the parameters.

Include the hash of the relevant parameters in the abstract socket path,
so that when changing these instance parameters the promise waits until
the standalone service has taken the new parameters into account.

Change "Embedded Instance" to "embedded_instance", and rename existing
"Embdded Instance" into "embedded_instance" for compatibility.

Installing will setup git hooks, so we can do one step further and
also configure the mergetool

otherwise curl uses system ca-certificates if the system package is
installed and otherwise is not able to verify server certificates,
usually being observed in slapos as git refusing to clone with error:
SSL certificate problem: unable to get local issuer certificate

See merge request nexedi/slapos!1103

On Debian 9, the given rpath seem to be ignored when compiling
the `keytar` dependency of theia, for unknown reasons.

- Move [theia] section and dependencies into component/theia
- Make [theia] section shared

This was missing in this software and in 03c5b311 (Stop using
hexagonit.recipe.download, 2021-12-03) the hash got out of sync

also mention automatic installation method

Since https://github.com/eclipse-theia/theia/pull/10343 theia depend on
nodejs >= 12 and they test on 12 and 14. Use 14 to have an officially
tested version.

This removes the strong requirement to have python2.7 in theia, so we
just use the software python, which might be python3

https://github.com/metabase/metabase/releases/tag/v0.41.4