so that on first connection clients can check the fingerprint key
instead of blindly accepting it.

This seem to be needed "sometimes", apparently on the first connection
after server is started, but this was not investigated much.

In "direct zope access" ports, the shared frontend is not used, so
the argument that long timeout consume resources on shared server does
not apply here.

A timeout of one hour was choosen arbitrarily, a value that should be
large enough for normal requests and more than the default 60s timeout
that we hit in the "wait for activities" step when running zelenium
tests.

In 51740961 we "started testing new version of setuptools" and `BUILDOUT-NEXT` test suite was set to use this `software/buildout-testing/software-next.cfg`.

In nexedi/slapos!425 we started to depend on very recent setuptools and updated to 40.4.3 .

This `software/buildout-testing/software-next.cfg` kept using this old setuptools and `BUILDOUT-NEXT` test suite failed to build in a loop.

The test suite was already changed to use `software/buildout-testing/software.cfg` (ie. it's same as `BUILDOUT` but testing slapos.buildout's  `next` branch instead of `master` ), so I think this profile is not needed currently.

/reviewed-on nexedi/slapos!488

Using `software11` breaks now that the version of the database was
increased in nexedi/slapos.core!76

/reviewed-on nexedi/slapos!483

/reviewed-on nexedi/slapos!489

/reviewed-on nexedi/slapos!469

  Before call uninstall, the pin is verified and it can cause error if picked version is mandatory.

Just asserting Location header is not enough, as http status code value is
important for the implementation, so assert for its value.

Also fix https-only redirect status code value, which supposed to be FOUND,
not default MOVED_PERMANENTLY.

/reviewed-on nexedi/slapos!485

/reviewed-on nexedi/slapos!487

/reviewed-on nexedi/slapos!486

   The version 1.0.84 was used by an existing tag on the
   version control, so it would be inconsistent to use this
   version number.

It is known problem of Caddy regarding QUIC non functional after sending it
SIGUSR1: https://github.com/mholt/caddy/issues/2394

/reviewed-on nexedi/slapos!481

/reviewed-on nexedi/slapos!480

Installing from master is problematic because when master does not build
we don't have test results and we don't see that it's broken.

/reviewed-on nexedi/slapos!474

The query present in the sql dump sets gtid_slave_pos, which is used by
slave_pos. current_pos relies on gtid_current_pos, which is not set here
and hence fails to initiate replication.
Another (unintended) effect of using slave_pos is that queries run on the
slave will not break replication. There should be no reason to run queries
on slave (at least, data & schema modification queries while replication
is active), so it would seem better to fail the replication immediately in
order to detect this. So this may not be the best solution - but at least
this fixes this script.

We no enforce formatting of json schema, this was causing a test
failure:
```

======================================================================
FAIL: test_schema_neoppod_instance_neo_input_schema_json_format (slapos.test.test_json_schema.TestJSONSchemaValidation)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/srv/slapgrid/slappart0/srv/testnode/bpy/inst/test0-0/parts/slapos.cookbook/slapos/test/test_json_schema.py", line 80, in run
    content.splitlines())
AssertionError: Lists differ: ['{', '  "$schema": "http://js... != ['{', '  "$schema": "http://js...

First differing element 87:
'            "description": "Storage type. Defaults to MySQL if available, else SQLite.",'
'              "description": "Storage type. Defaults to MySQL if available, else SQLite.",'

First list contains 3 additional elements.
First extra element 119:
'  },'

Diff is 5422 characters long. Set self.maxDiff to None to see it.

----------------------------------------------------------------------
```

/reviewed-on nexedi/slapos!482

We still want to check the signature of the reference .data file and of the index

/reviewed-on nexedi/slapos!453

  Present a reduced sub-set of parameters for simpler users.

It will be used on python2.7

from https://docs.python.org/2/library/subprocess.html :
POSIX users (Linux, BSD, etc.) are strongly encouraged to install and
use the much more recent subprocess32 module instead of the version
included with python 2.7. It is a drop in replacement with better
behavior in many situations.

/reviewed-on !476

slapos.core test suite needs `sensors` command in $PATH
nexedi/slapos.core@7467ef4c (comment 71574)

/reviewed-on nexedi/slapos!479

Since some software releases have unit tests, it is good idea to run the
tests for each commit on slapos branch.

This SR follow slapos-testing SR in a way how tests are grouped and run.

Fixed erp5.util is used to expose good test suite names.

When debian 9.4 was latest version, we wanted the url to expand to
http://cdimage.debian.org/cdimage/release/current/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso
now we want
http://cdimage.debian.org/cdimage/archive/9.4.0/amd64/iso-cd/debian-9.4.0-amd64-netinst.iso

no reason to use http

apache mirrors only have latest version of tomcat, but
archive.apache.org have all versions.

Asserts Caddy issue https://github.com/mholt/caddy/issues/2394

 * keep the start date
 * don't remove the file before writing in it (use > directly) so that the file always exist
 * format the date with ISO 8601
 * format all the lines the same way

This will let the monitor promise read this file easily

The recent changes in rdiff backup are not backward compatible.

Because we have no choice and test do pass I merge right away.

https://nexedi.erp5.net/test_result_module/20181217-239F0A22/view

/reviewed-on nexedi/slapos!477