See merge request nexedi/slapos!1401

  Update logs directive to set LogFormat properly

Also switch to basic authentication, this is generally more supported
than digest; keeweb for example only supports basic authentication. It
seems less secure though ( https://github.com/sigoden/dufs/issues/228 )

See merge request nexedi/slapos!1398

Since surykatka 0.8.0 the DB is not updated by default on elapsed time change,
and that shall be user explicit configuration. Thus fix
"software/monitor: Version up surykatka 0.8.0" by adding, required from
edgetest-basic perspective, switch ELAPSED_FAST.

neo logs to sqlite databases, not to "append only" files, so we need extra
care when rotation and cannot use the new "copytruncate" approach.

needs nexedi/erp5!1786

See merge request nexedi/slapos!1395

log files used by neo storage are not text files, they are sqlite
databases, so we can not use copytruncate because it leaves a broken
database. For neo, we have to go back to sending a SIGUSR1 signal to
tell neo client to reopen log files. This depends on neo registering
a signal handler, which is done in [1]. It depends on ZServer, so this
approach will probably have to be adjusted when running on python3
because the current plan is that we don't have ZServer installed on
python3.

This depends on a recent erp5.git where runwsgi understands --pidfile
argument.

1: https://lab.nexedi.com/nexedi/neoppod/blob/fd87e153/neo/client/app.py#L58

In 0409f691 (zope4: Handle log rotation following Zope documentation.,
2022-03-10) we added an option to use copytruncate in logrotate, with
a default value of "false" which is true in jinja2, so it was actually
enabled every where.

This change brings the expected behavior copytruncate option in
logrotate stack, it is not enabled by default, unless explicitly using
copytruncate = true

This can be helpful when comparing measurements or more generally when
trying multiple versions

this is a wrapper independent from where the part got installed

no reason to have an exception here.

CPU temperature promise will now come from monitor SR

See https://firewalld.org/documentation/configuration/firewalld-conf.html#ipv6_rpfilter

When re6st is running with tunnels, the IPv6 packets can come in through
an interface and go out through another. This is expected.