sliverstatus. Change CM name from keys to users.

No more 768MB limit for memory.
Use FreeBSD 9 kernel if available, it is more stable with Xen.

This reverts commit f352b4d5.

the CM; we return the entire set of logins (keys) that were included
when the sliver was created. Format looks like:

	keys => [{'urn'   => $urn.
	          'login' => $login,
		  'keys'  => [...] },
		 {'urn'   => $urn.
	          'login' => $login,
		  'keys'  => [...] }];

This is *not* integrated with the AM yet.

that list.

1. Change default slice expiration to a new site variable called
   protogeni/default_slice_lifetime, defaults to six hours.

2. Add a site variable (protogeni/warn_short_slices) to tell the
   sa_daemon if it should send email to war about short lived slices
   expiring, defaults to off.

confuses the user.

devices (for creating the stack object). We were using the older
mapping code (that computes on the fly) in the snmpit front end, but
now we use the DB in both the front end, and from the stack later.

from tbacct, which happens in the context of the project/group root,
not as the user.

So we can specify a different slice (partition) to create the filesystem on.

This is for BSD, so that we can tweak the default /boot/loader.conf file
to turn off "comconsole" on machines that don't have a UART.
In my experience, trying to probe the UART on newer machines that don't
have one causes a kernel crash.

Currently this attribute is just signalled by the existance of the
/etc/testbed/isvgaonly file in the diskloader MFS. But this will be
eventually sent over via "tmcc loadinfo" so that we can set the attribute
on a per-node-type or per-node basis.

The logic here is:
 * this is the last step and that a failure at this point causes a
   complete swapout of the experiment, possibly losing important state.
 * we can probably recover from this by just manually starting the
   event system.

* When generating an encrypted SSL certificate, derive an SSH public
  key from the private key and store in the pubkeys table for the
  user. Note that SSH version 2 RSA keys are actually just openssl RSA
  keys, and that ssh-keygen can extract an ssh compatible public key
  from it.

* Change getsslcert.php3 to return the ssh private and public key when
  give the "ssh" boolean argument. This is mostly for the benefit of
  Flack; we probably need a better UI for the user to get this stuff. 

* Remove the requirement that users must upload an SSH key to use
  protogeni, since we now create one for them when they create their
  encrypted SSL certificate.

* Some cleanup; instead of looking at the comment field to determine
  what pubkeys are Emulab created (and should not be deleted), use new
  internal and nodelete flags.

can stop using the comment field to determine which keys are the ones
generated by emulab. Internal keys are the unencrypted keys created
for users. They are also nodelete, but we also mark the ssh public
derived from the user's encrypted ssl certificate as nodelete.

MarkNodesForUpdate() on the experiment to force all of the nodes to
update their accounts.

an experiment.

in Utah.

Also add initialization of user_sslcerts to avoid serial number
conflict with initial certificates.