This supports defining rate limits as maximum number of matched requests
over a period of time for the same client IP.

Requests are matched either by a regular expression on URL path or a
response status code.

Once a client exceeded the rate limit, haproxy will reply with HTTP
status code 429 ("Too Many Requests") until the expiration period
configured on the rule has passed. Optionally, the responses can be made
after the "tarpit" delay.

slapos.core and slapos.cookbook with fixed package release.

Including changes:

 * librecipe: stop calling getInstanceParameterDict by default
 * slapos.cookbook: Fix publish_failsafe

There is no reason to have so many empty lines, as other tools can have
troubles with processing it.

Do not return installed files in order to avoid endless Uninstall/Install of
the part and instead use the uninstall hook to handle the file when part is
uinstalled.

Also re-install during update if there was a problem with publishing during
install; note that checking for file presence on each update is very fast, so
the speed gain is preserved.

Call it only on demand, to get rid of useless http queries

A new version of zodburi has been released [1] that
removes Python2 compatibility shims [2] and is therefore
needed to successfully run 'wendelin.core' tests with python3 [3].

Suggested by @kirr.

[1] https://pypi.org/project/zodburi/3.0.0/
[2] https://github.com/Pylons/zodburi/commit/a00fea755
[3] wendelin.core!35

/reviewed-by @kirr @jerome
/reviewed-on !1745

When there is not a nobody user (for example inside Docker), the
tests TestAmbientCaps and TestAmbientCapsUserns should be skipped
instead of failing.

This has been patched upstream in
https://github.com/golang/go/commit/1959703dddffef61760d5d4fdedc4df8d2d73438
and we use here that patch.

See merge request !1741

Starting from nexedi/pygolang@95fd2889
pygolang needs zodbpickle for tests. So without pinning zodbpickle
testnodes starrted to error with

    Installing gpython-interpreter.
    While:
      Installing gpython-interpreter.
      Base installation request: 'pygolang[all_test]'
        Requirement of pygolang[all_test]: py; python_version >= "3" and extra == "all_test"
        Requirement of pygolang[all_test]: zodbpickle; extra == "all-test"
        Requirement of pygolang[all_test]: wheel; extra == "all-test"
        Requirement of pygolang[all_test]: setuptools-dso>=2.8; extra == "all-test"
        Requirement of pygolang[all_test]: setuptools; extra == "all-test"
        Requirement of pygolang[all_test]: pytest; extra == "all-test"
        Requirement of pygolang[all_test]: numpy; extra == "all-test"
        Requirement of pygolang[all_test]: ipython; extra == "all-test"
        Requirement of pygolang[all_test]: cython<3; extra == "all-test"
        Requirement of pygolang[all_test]: geventmp; python_version >= "3" and platform_system != "Windows"
        Requirement of pygolang[all_test]: setuptools>=60.2; python_version >= "3"
        Requirement of pygolang[all_test]: setuptools-dso>=2.8
        Requirement of pygolang[all_test]: decorator
        Requirement of pygolang[all_test]: six
        Requirement of pygolang[all_test]: gevent
      Getting distribution for 'zodbpickle; extra == "all-test"'.
    Error: Picked: zodbpickle = 4.2

    The `zodbpickle` egg does not have a version pin and `allow-picked-versions = false`.

    To resolve this, add

        zodbpickle = 4.2

    to the [versions] section,

    OR set `allow-picked-versions = true`.

/reviewed-by @jerome
/reviewed-on nexedi/slapos!1744

See merge request nexedi/slapos!1738

This reverts commit 95b1d7df as
testnodes were upgraded.

See merge request !1737

Save HTTP requests to the registry and token manager logs in dedicated
log files and correctly logrotate them.

Also use a newer version of slapos.cookbook to properly revoke re6st
certificate when the slapos shared instance is destroyed.
Co-authored-by: Thomas Gambier <thomas.gambier@nexedi.com>

Patch submitted here:
https://github.com/zopefoundation/ZODB/pull/403

We backport it in SlapOS directly as the branch 5.8 is not being
developed anymore.

This partially reverts f834a06f.

This shebang was causing issues with testnodes. See
nexedi/slapos@f834a06f (comment 228158)

This is a fixup of d2d0d49e.