Communication between repman and mariadb can now use ssl for secure
connection.
Proxysql is also configured to work with ssl, user access database with
secure connection.

This commit try to solve error when database initial user created on
master database with socket auth plugin doesn't exist on slave database
because there are running diffrent slapuser.

OPENED ERR00056 : Master user 'slapuser4'@'localhost' is not defined on
replication candidate [2001:67c:1254:e:5:513b:0:5f35]:2199

To add a Database, user should request a slave instance. Each slave
instance is a database.

TODO: Destroy a slave instance should destroy related database

With recently backported fix for h5py

This software uses xml for parameters serialisation, so we can not use
boolean type. As a result, smtp_verify_ssl was always "true" and disabling ssl
verification was not working.

When accessing the smtp server from localhost, grafana attempt STARTLS and
verifies certificate, so scenarios of using localhost:25 as smtp server usually
needed smtp_verify_ssl="false".

Fixes and tests https://github.com/apache/trafficserver/issues/7880

By following:

https://docs.trafficserver.apache.org/en/9.0.x/release-notes/upgrading.en.html

configuration has been adapted.

Tests to new version string has been adapted with smaller fixes, including a
bit more time for log to appear in squid.log.

Previous patch is incorporated with 4f6bfe439e4ed7794992e16c16eb991976a3018e

The missing run was hidden by slow Caddy warmup procedure.

Remote-User header is not managed by the frontend.

for https://github.com/grafana/loki/issues/3177

While investingating this, I realized loki officially supports golang 1.15, but
beside this, everything seems to work fine, so let's keep using 1.16

* version up
 * ssh keys support
 * mod_auth_web support

See merge request nexedi/slapos!993

This is a workaround to avoid the UnicodeDecodeError that occurs
when installing wheel, in particular during compilation of ERP5.

The previous way to initialize ~/srv/mariadb relied on /bin/mv, so that
it's atomic, making [template-mysqld-wrapper] idempotent (think of a
crash in the middle mysql_install_db). However, mv only works if
~/srv/mariadb is a simple directory: it fails if it's a symlink,
a mount point, or a subvolume (btrfs).

When using extra storage devices for some data, one may prefer to only
put the data (e.g. ~/srv/mariadb) and not the whole slapos partition.
Then if we want a resilient ERP5 with catalog's datadir on a separate
storage device, the importer script must be able to reinitialize
~/srv/mariadb whatever its type.

The web service will receive a application/x-www-form-urlencoded POST request,
with login and password arguments and must respond with a
`X-Proftpd-Authentication-Result: Success` header to signal successful
authentication.

The sftp server will map all logins to the same user.

This software uses xml

Switch to using official repository, now that the pull request have been
finally merged.

See merge request nexedi/slapos!983