When debian 9.4 was latest version, we wanted the url to expand to
http://cdimage.debian.org/cdimage/release/current/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso
now we want
http://cdimage.debian.org/cdimage/archive/9.4.0/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso

no reason to use http

apache mirrors only have latest version of tomcat, but
archive.apache.org have all versions.

Asserts Caddy issue https://github.com/mholt/caddy/issues/2394

 * keep the start date
 * don't remove the file before writing in it (use > directly) so that the file always exist
 * format the date with ISO 8601
 * format all the lines the same way

This will let the monitor promise read this file easily

The recent changes in rdiff backup are not backward compatible.

Because we have no choice and test do pass I merge right away.

https://nexedi.erp5.net/test_result_module/20181217-239F0A22/view

/reviewed-on nexedi/slapos!477

See sqlite-mixin.cfg to skip the building of MariaDB.

Since usage of cryptography in "caddy-frontend/test: Switch to cryptography"
certificates are programmatically  done.

Caddy has its own approach to security and browser support, and it is
trusted, so keep it this way. If incompatibilities would be found, they
will be tackled by each one.

Current way of testing caddy-frontend SR is enough.

It is done in "caddy-frontend: Restart 6tunnel services on SR upgrade"

Apache-migration is not needed, as the profiles can be used in place, and
upcoming development will drop a lot of needs.

This reverts commit 6eec01b7.

The test_supervisor_state run on each test case has exactly the same
functionality, so just drop not needed additional test.

/reviewed-on !466

"software/caddy-frontend: auto-restart services on SR upgrade." begun
implementation of automatic restart of services on SR upgrade, but not all
services has been caught - 6tunnel was missing.

/reviewed-on nexedi/slapos!473

Those values are free to be used by tests in order to obtain working
IPv4 and IPv6 addresses.

/reviewed-on nexedi/slapos!470

Those values are free to be used by tests in order to obtain working
IPv4 and IPv6 addresses or other parameters fetched during test node
instantiation.

Note that old-style keys (like LOCAL_IPV4 and LOCAL_IPV6) are kept for
backward compatibility.

/reviewed-on nexedi/slapos!471

Some tests need to play with IPv6, and it would be better, if they would use
IPv6 on which the test system has control.

/reviewed-on nexedi/slapos!467

Do not emit needless diff into log.

Do not stop processing in case of validation failure.

Caddy reloads configuration on USR1 not on HUP.

/reviewed-on nexedi/slapos!465

This way when setting `udp:<port>` in `nat-rules` instance parameter, it won't mess up with buildout's syntax.

PS: It seems the UDP won't work at all since `6tunnel` doesn't support TCP tunneling, so this is more of a cosmetic fix.

/reviewed-on nexedi/slapos!464