1) Implement the latest dataset read/write access settings from frontend to
   backend. Also updates for simultaneous read-only usage.

2) New configure options: PROTOGENI_LOCALUSER and PROTOGENI_GENIWEBLOGIN.

   The first changes the way that projects and users are treated at the
   CM. When set, we create real accounts (marked as nonlocal) for users and
   also create real projects (also marked as nonlocal). Users are added to
   those projects according to their credentials. The underlying experiment
   is thus owned by the user and in the project, although all the work is
   still done by the geniuser pseudo user. The advantage of this approach
   is that we can use standard emulab access checks to control access to
   objects like datasets. Maybe images too at some point.

   NOTE: Users are not removed from projects once they are added; we are
   going to need to deal with this, perhaps by adding an expiration stamp
   to the groups_membership tables, and using the credential expiration to
   mark it.

   The second new configure option turns on the web login via the geni
   trusted signer. So, if I create a sliver on a backend cluster when both
   options are set, I can use the trusted signer to log into my newly
   created account on the cluster, and see it (via the emulab classic web
   interface).

   All this is in flux, might end up being a bogus approach in the end.

Quite simple actually. In ptopgen we add all persistent stores, which
are identified by having a non-zero lease_idx. To ensure they are only
matched up with the correct virt_blockstore, we add a feature "bs-lease-NN"
where NN is the unique lease index with weight 1.0.

In vtopgen, when a request is made to map a persistent store, we first
verify that the experiment pid matches that of the blockstore's lease
(this is a fer-now simple check which is actually redundant as we make
this check in the parser too) and ensure that the blockstore is not already
mapped (indicated by the blockstore_state entry having size==0) and then
we emit an entry with desire "bs-lease-NN" and weight 1.0.

Most of the file changes were actually to get the "preassign" flag to
vtopgen forwarded into the various libvtop modules so that I can check it
and not perform the permission/size check if it is set.

libvtop.

promoting libvtop_test to libvtop_stable.

d1b972c1, before I make a change
that might cause some grief.

This commit is intended to makes the license status of Emulab and
ProtoGENI source files more clear.  It replaces license symbols like
"EMULAB-COPYRIGHT" and "GENIPUBLIC-COPYRIGHT" with {{{ }}}-delimited
blocks that contain actual license statements.

This change was driven by the fact that today, most people acquire and
track Emulab and ProtoGENI sources via git.

Before the Emulab source code was kept in git, the Flux Research Group
at the University of Utah would roll distributions by making tar
files.  As part of that process, the Flux Group would replace the
license symbols in the source files with actual license statements.

When the Flux Group moved to git, people outside of the group started
to see the source files with the "unexpanded" symbols.  This meant
that people acquired source files without actual license statements in
them.  All the relevant files had Utah *copyright* statements in them,
but without the expanded *license* statements, the licensing status of
the source files was unclear.

This commit is intended to clear up that confusion.

Most Utah-copyrighted files in the Emulab source tree are distributed
under the terms of the Affero GNU General Public License, version 3
(AGPLv3).

Most Utah-copyrighted files related to ProtoGENI are distributed under
the terms of the GENI Public License, which is a BSD-like open-source
license.

Some Utah-copyrighted files in the Emulab source tree are distributed
under the terms of the GNU Lesser General Public License, version 2.1
(LGPL).

devices with network interfaces. Emulab's spp and bbg nodes are
examples, but I did all that by hand inserting sql. An spp node is a
shared node with some interfaces. Users can allocate one or more of
those interfaces and establish vlans to the interfaces. The node is a
"fakenode" in "shared" mode, and everything else falls out. The mapper
assigns virtual nodes until all of the interfaces are allocated,
snmpit does its work on the interfaces, and the user then does the
rest.

Anyway, to added a special device:

  boss> wap addspecialdevice -s -t goober goober1

The -t argument is the name of the node type, created if it does not
exists. The last argument is the name of the fakenode to create in the
DB. The -s option says the special device is shared. Without -s, the
device is allocated exclusively.

Then to add interfaces to the device:

  boss> wap addspecialiface -b 1Gb -s cisco4,100,100 goober1 eth0

The -b option is the speed (either 100Mb or 1Gb). The -s option is the
switch side of the interface (switchname,card,port). The last two
arguments are the nodename and iface name for the interfaces table.

After the interface and wires table entry are added to the DB, snmpit
is called to put the switch port into tagged mode (if the node is
shared). To skip the snmpit step, add the -t option.

determining the jailosid for "static" images like OPENVZ-STD. For
example:

	tb-set-hardware $n1 d710-vm
	tb-set-node-os $n1 OPENVZ-STD FEDORA15-64-OVZ-STD

The main point is that OPENVZ-STD is a placeholder with no associated
image. It exists to tell the mapper and osload what to do. This is
accomplished with nextosid. The new approach makes things consistent
with subos stuff.

I do not know if this fix is correct or complete. It is however, sufficient
to make a non-protogeni elabinelab work again.

This reverts commit fc89eb38.

Checked in a bunch of crap that was unrelated.

When downloading an image, start the frisbeed process with the minimum set of
gids necessary to access the image. This includes the unix gid of the
project that the image is in and, optionally, the unix gid of the project
subgroup if the image is part of one.

Previously, we just use the gid set of the uid of the swapper of the
experiment. Not only was this excessive, but it might also not include the
gids needed in the case of a "global" image that is not in the world-readable
/usr/testbed/images directory.

will be subsumed by the NewMapper feature when that is exported to all
sites, which will happen soon.

Nothing is done with the portlist as of yet. Only parses standard assign output, not rspecs.

you can do this in your NS file:

tb-set-node-loadlist $myboss FBSD73-S2,FBSDXX-FOO

Note that this does not replace tb-set-node-os(), cause that is a
little too special. So in practice, you would do:

tb-set-node-os $myboss FBSD73-STD
tb-set-node-loadlist $myboss FBSD73-S2,FBSDXX-FOO

Also, reordered initialization of counters so it is the same as the order of the access methods for easier verification that everything gets initialized.

for LM.

properly. Now able to allocate and redeem tickets at PLC via cooked
mode.

encapsulated link; the vinterfaces were not getting updated properly.

I am not happy with the change mentioned above, but I needed it to
make vlan tag pre-reservations work; the encapsulation vlan has a
generated name, and that is hard to match up with the tag that is
reserved before the experiment is created, as from the protogeni
interface when stitching. I plan to come back and redo this after the
GEC.