blocking option (strictly an IG thing) so that we do not delete the
local instance record until the remote slices are gone. This avoids
name clashes in the Portal where we allow a user to reuse a name
before its really gone, causing obscure errors.

The Emulab DB and codebase cannot currently cope with switch submodules.
Hack around this in the Comware module by using the ifindex as the
port number when the submodule ID is non-zero.  So gross, but no less
arbitrary than some other translation from submodule and port to unique
identifier.

Also includes cutover to ifDescr parsing instead of using static module
offsets (which are unreliable in Comware 7).  This allowed me to get rid
of the awful per-switch module offset hack I added.

Includes some cleanup and minor bug fixes too.

Given a password element in the rspec:

	<emulab:password name='foo'></password>

which the portal has converted to an encrypted secret, when that experiment
is later shown (the status page), ask the server to decrypt the block, and
then replace the string "{password-foo}" in the instructions with the
actual password.

Need to generalize this a bit more, for arbitrary encryption blocks, when
we have those.

different kinds of image failures.

deletes an image.

This translates to -P on the backend. Without this option, a user has no way
to load a standard image on a node that currently has a custom MBR/image on it.

with BADARGS; stitcher always exists with 1, and I've not been able to
fix that.

L2 and L3 flow maps (hardware-assisted matching and forwarding),
learning bridge assisted flows (hardware also, I think), and multiple
forwarding tables.

Default flows go into the "acl" table, which is carved up between various
switch functions, and I believe is software-based (docs are vague).

Adding this support required a change to the createVlan() API call,
which is why this commit touches so many modules. Optional/supplementary
arguments to createVlan() are now passed as a fourth hash reference
argument.

This supplementary hash is used to inform device modules that a vlan to
be created is to be associated with an OpenFlow instance.  Only the
snmpit_force10 makes use of this information at this time. FTOS requires
that openflow-enabled vlans be declared as such at creation time. However,
snmpit's default control flow creates vlans first, then associates them
with OF instances (if requested).  This is why the supplementary argument
(OF hint) to createVlan() is needed here.

OpenFlow configuration actions must all be performed via the
existing Expect-based CLI interface to FTOS. Yuck.

and get rid of hardwired constants from the code.

with all the other geni error codes that percolate back to the user
via the web interface.

dashboard page.

errors page after the instance has been deleted.

errors table so that we can show them in the dashboard.

broken VM is still active, before trying to kill it (which then
fails).

reboot that it does when the filesystems are first created, so as redo what
might have been lost, say by prepare before snapshot. This required saving
some private data in the non private section of the data blob we store to
disk for each VM so that we have enough info to mount and fix the root FS
of the node being rebooted.

listen on jail ports.

to be decrypted using the per-exp ssl keypair we create and store on the
nodes. In this case, you can add this to your rspec in the node element.
You can add as many as you want, use the name attribute. We generate a
random password and encrypt the plain text:

  <emulab:password></emulab:password>

which becomes:

    <emulab:password name="foo" encrypted="true">-----BEGIN PKCS7-----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-----END PKCS7-----
    </emulab:password>

which can then be decrypted using the private key to get the plaintext
password.

output from stdout.

through to where it uses the default from sitevars.

once that can create/join projects. Mostly, we require the additional
personal info and verify their email.

since the public URL is valid only until the instance is killed.

for VNODEBOOTSTART hangs).