tempstorage 2.12.2 is from 2012 and misses loadBefore fixes which are
important when ERP5 is run with ZODB5 or ZODB4-wc2:

https://github.com/zopefoundation/tempstorage/commit/d187a86d
https://github.com/zopefoundation/tempstorage/pull/16

When the first loadBefore fix is not there, the problem manifests itself as
Zope not starting correctly with the following error in its log:

    2021-07-02 08:37:25,579 ERROR Zope.ZODBMountPoint Failed to mount database. <class 'ZODB.POSException.ReadConflictError'> (^@^@^@^@^@^@^@^@)
    Traceback (most recent call last):
     File ".../eggs/Zope2-2.13.30-py2.7.egg/Products/ZODBMountPoint/MountedObject.py", line 248, in _getOrOpenObject
       root = conn.root()
     File ".../parts/ZODB4-wc2/src/ZODB/Connection.py", line 405, in root
       return RootConvenience(self.get(z64))
     File ".../parts/ZODB4-wc2/src/ZODB/Connection.py", line 276, in get
       p, serial = self._load(oid)
     File ".../parts/ZODB4-wc2/src/ZODB/Connection.py", line 246, in _load
       return self._loadFrom(oid, self._storage)
     File ".../parts/ZODB4-wc2/src/ZODB/Connection.py", line 255, in _loadFrom
       raise ReadConflictError(oid)
    ReadConflictError: ^@^@^@^@^@^@^@^@

When the second loadBefore fix is not there, the problem manifests
itself as data corruption and sporadic POSKeyErrors
(https://github.com/zopefoundation/tempstorage/issues/8).

-> Fix both problem by using recent tempstorage with ZODB5 and ZODB4:

- ZODB5: just use tempstorage 5.2 egg
- ZODB4-wc2: use tempstorage 3 + loadBefore backports:
  https://lab.nexedi.com/nexedi/tempstorage/commits/3-nxd
- ZODB4: stays at 2.12.2 for now for this change to be as risk-free as
  possible. However, due to the fixes and e.g. https://github.com/zopefoundation/tempstorage/issues/8#issuecomment-873894941
  it makes sense to switch ZODB4 to tempstorage 3-nxd as well.

/cc @tomo, @romain, @rafael

Also improve the recipe `switch-softwaretype' by catching the possible errors.

- directory html5as: final version 
- directory html5as-base: initial version

See merge request nexedi/slapos!1006

See merge request nexedi/slapos!1003

See !1008

This is based on commit "Firefox Version Up to 78.1.0esr", but it does not
replace the default firefox, just enable a new version for now.

This is a "minimal" version up to fix https://bugs.gentoo.org/580392 which
appears now that we build with gbm

some components, like binary chromium needs libgbm, which is part of mesa, but
build only when enabled.

fixup for 452e8f78

See nexedi/slapos!1008

* [slapos-master](https://nexedijs.erp5.net/#/test_result_module/20210629-DE509CB3/23) is failing in checkSoftware step, because:
  * wcfs is linked against system zlib (fixed in this MR)
  * the .so in the build directory have missing references. I think we don't need to check in build folders and also liblibgolang is missing, but it's not a problem because of the way we load dynamically at runtime, so I suggest changing checkSoftware in nexedi/slapos.core!317
* [gitlab](https://nexedijs.erp5.net/#/test_result_module/20210629-DE509CB3/10) is failing for some time because mimemagic have been yanked from rubygems. This is a minimal change to get the test running again, to prevent other problems to sneak in while we don't have tests

See merge request nexedi/slapos!1007

see gitlab-ce!5

On wendlin.core 2, wcfs uses github.com/DataDog/czlib which uses zlib. We also
need to instruct linker to set a rpath for slapos' zlib, otherwise the system
one will be used.

Suggested by Kirill on nexedi/slapos!1007 (comment 136801)

Change all `check_port_listening` promises to `check_socket_listening`
and rename all associated `config-hostname` arguments to `config-host`

See merge request nexedi/slapos!1004

See nexedi/slapos@f3da4b0e

It was broken since commit 92779bf4.

See merge request nexedi/slapos!999

With recently backported fix for h5py

This software uses xml for parameters serialisation, so we can not use
boolean type. As a result, smtp_verify_ssl was always "true" and disabling ssl
verification was not working.

When accessing the smtp server from localhost, grafana attempt STARTLS and
verifies certificate, so scenarios of using localhost:25 as smtp server usually
needed smtp_verify_ssl="false".

Fixes and tests https://github.com/apache/trafficserver/issues/7880

By following:

https://docs.trafficserver.apache.org/en/9.0.x/release-notes/upgrading.en.html

configuration has been adapted.

Tests to new version string has been adapted with smaller fixes, including a
bit more time for log to appear in squid.log.

Previous patch is incorporated with 4f6bfe439e4ed7794992e16c16eb991976a3018e

The missing run was hidden by slow Caddy warmup procedure.

Remote-User header is not managed by the frontend.