Some changes for Mike and Firewalled ElabInElab experiments. I need
all of the nodes to boot up normally before I can turn them into an inner elab (latter, after os_setup). That cannot happen with the firewall rules in place. So, when an experiment is firewalled, reorder the boot/wait list and wait for the firewall node first. Once that hits ISUP, tell the elabinelab code (-f) option so that it can do what it needs, which right now means an ssh over to the firewall node to temporarily disable all the rules. We still need to deal with teardown though.
Showing with 104 additions and 19 deletions