A bit overdue, but here they are.

* Disallow image creation for any taint state on node/image
* Disallow console access for "blackbox" and "useronly" states
* Disallow node_admin for "blackbox" and "useronly" states

TB Admins are exempt from these restrictions.

This commit is intended to makes the license status of Emulab and
ProtoGENI source files more clear.  It replaces license symbols like
"EMULAB-COPYRIGHT" and "GENIPUBLIC-COPYRIGHT" with {{{ }}}-delimited
blocks that contain actual license statements.

This change was driven by the fact that today, most people acquire and
track Emulab and ProtoGENI sources via git.

Before the Emulab source code was kept in git, the Flux Research Group
at the University of Utah would roll distributions by making tar
files.  As part of that process, the Flux Group would replace the
license symbols in the source files with actual license statements.

When the Flux Group moved to git, people outside of the group started
to see the source files with the "unexpanded" symbols.  This meant
that people acquired source files without actual license statements in
them.  All the relevant files had Utah *copyright* statements in them,
but without the expanded *license* statements, the licensing status of
the source files was unclear.

This commit is intended to clear up that confusion.

Most Utah-copyrighted files in the Emulab source tree are distributed
under the terms of the Affero GNU General Public License, version 3
(AGPLv3).

Most Utah-copyrighted files related to ProtoGENI are distributed under
the terms of the GENI Public License, which is a BSD-like open-source
license.

Some Utah-copyrighted files in the Emulab source tree are distributed
under the terms of the GNU Lesser General Public License, version 2.1
(LGPL).

sense to do this since bootinfo will ignore it on free nodes.

* Add libadminmfs.pm with routines for entering/exiting and executing
  commands in, the admin MFS.  Node admin and firewall swapout (see
  below) now use this, the image creation process does not yet.

* Add swapout time hooks for running an admin mode process, likely to
  be used to collect swapout time state.  Currently controlled globally
  by two new sitevars.

* Modified node_admin to use the library and added a "-c <command>"
  option to have nodes go into admin mode and run a command.  I don't
  really expect this to be useful, it was just a testing vehicle for
  the library.

2. Improved the swapout process for firewalled experiments.  Largely
   just generalized what we already did for paniced experiments.
   At swapout, firewalled nodes are:

   - powered off
   - set to boot into admin mode and run a disk zapper
   - powered on

  The swapout process then waits for all nodes to successfully complete
  disk zapage, at which point the nodes are nfree'ed as usual.  Any
  failure of the above process, marks the experiment as panic'ed (to
  ensure that we are involved in cleanup) and sends mail to testbed-ops
  describing the state of the nodes.

3. Added the aforementioned disk zapper, a little C program in the MFS
   which zeroes out the MBR and partition boot blocks (but not the MBR
   partition table or FS superblocks).  This is added insurance that if
   a node somehow gets diverted after being nfree'd but before getting
   the disk reloaded (e.g., goes to hwdown), that we cannot accidentally
   boot from the disk.  This program gets installed in the admin MFS.

4. Related to firewalls, modified swapin to use the new documented
   "snmpit -N" to get the firewall VLAN number rather than parsing the
   output that was a side-effect of VLAN creation.

so that different types can use different MFSes as necessary.  This
ultimately replaces the quadruple-X libos hack which I removed quite some
time ago.

Mac's statewait library to wait for nodes to through a MFSETUP,ISUP
transition. This ensures that the nodes actually came up in the MFS,
and not something else. No retry; just exit with failure if any node
fails.

	Usage: node_admin [-h] [-n | -w] <on | off> [node ....]
	       node_admin [-h] [-n | -w] -p pid,eid <on | off>
	-h   This message
	-n   Do not reboot node
	-w   Wait for node to come back up if rebooted
	-e   Operate on all nodes in an experiment

Add explicit -w option to wait for node to reboot.

filename to boot, and all local nodes will boot the same pxeboot kernel,
which has been extended to allow for jumping directly into a specific MFS
(in addition to the usual testbed boot into a partition or multiboot
kernel).

Bootinfo and the bootwhat protocol extended to tell the client node what
MFS to jump into directly, without a reboot. pxe_boot_path and
next_pxe_boot_path are now deprecated, with bootinfo used to control which
MFS to boot. Nodes now boot a single pxeboot kernel, and bootinfo tells
them what to do next.

Bootinfo greatly simplifed. temp_boot_osid has been added to allow for
temporary booting of different kernels (such as with ndoe_admin or
create_image). Unlike next_boot_osid which is a one-shot boot,
temp_boot_osid causes the node to boot that OS until told not too.

next_boot_path and def_boot_path in the nodes table are now ignored.
Bootinfo gets path info strictly from the os_info table entry for the osid
given ...

Changes to watch out for:

- db calls that change boot info in nodes table are now calls to os_select

- whenever you want to change a node's pxe boot info, or def or next boot
osids or paths, use os_select.

- when you need to wait for a node to reach some point in the boot process
(like ISUP), check the state in the database using the lib calls

- Proxydhcp now sends a BOOTING state for each node that it talks to.

- OSs that don't send ISUP will have one generated for them by stated
either when they ping (if they support ping) or immediately after they get
to BOOTING.

- States now have timeouts. Actions aren't currently carried out, but they
will be soon. If you notice problems here, let me know... we're still
tuning it. (Before all timeouts were set to "none" in the db)

One temporary change:

- While I make our new free node manager daemon (freed), all nodes are
forced into reloading when they're nfreed and the calls to reset the os
are disabled (that will move into freed).

request.

testbed boot process and the freebsd pxeboot/MFS kernel. I'm hoping
this will be useful enough for users to load their own disk images,
but we shall see. Usage is simple:

	/usr/testbed/bin/node_admin on|off pcXXX

The "on" state boots the MFS, and the "off" states sets it back to
normal.