This reverts commit 3d12ddae.

software/caddy-frontend implements all requirements and apache-frontend is
not tested neither developed except small fixes, so it's ok to keep it for
reference or some small work outside of official tree, as other developers
might have urge to use it.

Be nice test and clean up your own mess.

This solves vulnerabilities reported by npm upon installation.

We'd prefer ld to always take LD_RUN_PATH into account, even if any
rpath is specified in the command-line. We could actually change the
wrapper this way but it would not be consistent with the case where
the SR is built with system gcc.

See merge request nexedi/slapos!820

This addresses both :
 - some random failures we sometimes have when installing `python-language-server` fail
 - caddy no longer being installed here since nexedi/slapos!821

See merge request nexedi/slapos!828

It has to be ensured, that parameters are correctly passed to the partitions.

Each node allows for global statistic access for full backend-haproxy, which
is exposed using special frontend, and then transferred back to the master
partition, so that the administrator can access it.

Prevent this kind of errors when first installation fail:

    Error: [Errno 13] Permission denied: 'parts/python-language-server/bin/activate'

by using --clear the virtualenv is recreated from scratch if the command failed
for some reason.

We are observing mariadb crashes in ERP5 with 10.4, so revert back to 10.3

Crashes errors are:

    InnoDB: Assertion failure in file .../mariadb-10.4.14/storage/innobase/lock/lock0lock.cc line 6900

in non debug mode and:

    mysqld: .../mariadb-10.4.14/storage/innobase/row/row0sel.cc:4480: dberr_t row_search_mvcc(byte*, page_cur_mode_t, row_prebuilt_t*, ulint, ulint): Assertion `prebuilt->sql_stat_start || trx->state == TRX_STATE_ACTIVE || (prebuilt->table->no_rollback() && trx->state == TRX_STATE_NOT_STARTED)' failed.

in debug mode.

This is an incompatible change for ERP5 instances which might have
already been running mariadb 10.4, because their database would have
been updated to 10.4, but mariadb does not support "downgrading".
Hopefully we don't have such cases, but if that's the case one
solution seems to dump databases with 10.4 and load in 10.3 and
I guess in this process the system databases such as "mysql" should
be excluded from this process.

See merge request nexedi/slapos!823

Changes:

 * traffic_cop was removed, so use traffic_manager directly
 * logging.config was changed to logging.yaml
 * made records.config and storage.config similar to original files
 * proxy.config.admin.synthetic_port option was removed
 * proxy.config.process_manager.mgmt_port option was removed
 * test: ignore traffic.out in logs
 * test: update ATS version
 * pqsn field was removed and replaced with shn, so follow upstream:
   https://github.com/apache/trafficserver/commit/b0969c91ebc52b37f4c3195ec17d4d0c1c18650c
 * add a test to prove squid.log working, as upgrade resulted with not
   created file

Require minially gcc 8 for C++17 support

Copied part of gowork.install:command to activate GO111MODULES and also the
[caddy] section is minimised, as the whole build happnes in proper place.

defines 'configure-command = true' because configure script does not exist

Should be used soon.

There was missing promise from other work.

See merge request nexedi/slapos!814

This is critical feature of SlapOS Master instantiation, and very easy to
damage, thus testing it is important.

It's useful for some tests to use.

Some profiles needs to extends the path with binaries location of provided
software.

This reverts commit 440b88c5

As there might be some reasons why the instance is not found explain what to
in each case.

See merge request nexedi/slapos!810

Thanks to using check_execute_command with logrotate -d one can assure, that
logrotate is for sure correctly configured.

By disabling delaycompress filenames are going to be stable, on delaying the
compression is not needed.

In some cases there is not need to have delayed compression of the logs.

By using regular expressions, matching exact host names up to the optional
port and putting wildcard matches in the end, the Haproxy acl rules will allow
to direct request to correct backend.

See merge request nexedi/slapos!815

Because of escaping of slapos.cookbook:wrapper kedifa is never reloaded, so
use instead jinja2 with template_wrapper for it.

Also adapt to kill from dash (-HUP).

This partially reverts commit 20fb7c58.

Unfortunately having trustable X-Forwarded for in case of SlapOS Master
is not so simple, and not needed for now, as the approach is a bit different
on that apache, thus let's revert for now.

The update of AddOutputFilterByType is kept.