Add a script to check for packages defined in both coreos-overlay and
portage-stable.

The glibc ebuild runs locale-gen itself while installing.

enter_chroot: Drop special locale-gen handling

build_torcx_store: Bump the default to 18.04 and LTS to 18.03

FAT32 seemed to aggravate coreos/bugs#2284, but
now that that issue has been addressed, we can return to the correct
filesystem type.

This reverts commit 299f8fb.

Revert "Revert "disk_util: use FAT32 on ESP""

This is the same story as the others: our images will fail the GLSA
checks as long as we build old Go versions.  However, this one will
fail for any version less than 1.10.1 now.

build_library: Whitelist the new Go 1.10 GLSA

Check_out_of_date: add script

Images have been published to the release buckets, but never to OCI.

build_library: drop oracle_oci_qcow image format

transfer.sh: use update-percent in updateservicectl calls

Pass /dev/urandom through to QEMU VMs. (Not /dev/random, to avoid
draining the host's entropy.) This speeds initialization of VM entropy.

It's been deprecated since QEMU 0.12. Fixes warning on QEMU startup:

    qemu-system-x86_64: -net nic,vlan=0,model=virtio: 'vlan' is deprecated. Please use 'netdev' instead.

build_library: attach virtio-rng-pci; avoid obsolete QEMU syntax

This allows booting the default entry even if GRUB authentication is
configured in /usr/share/oem/grub.cfg.

build_library: add --unrestricted to default GRUB menuentry

Upgrade Docker to 18.05

This will run on ESXi 6.0 and above, and all non-EOL versions of Fusion
and Workstation.

Also enable a few useful VMX features (HPET; CPU and memory hotplug) that
are added by VMware Workstation 14.1.1's Change Hardware Compatibility
wizard. Correspondingly, enable CPU/memory hotplug in the OVF; omit
HPET because there's no obvious way to enable it.

build_library: update VMware virtual hardware version to 11

Replace calls to restart_in_chroot_if_needed with assert_inside_chroot.
This removes a dependency on chromite.

This removes a dependency on chromite

jenkins: Free more disk space on successful job completion

Revert this after the new binutils is built into the SDK.

build_library: Add temporary workaround for binutils update

It's already built into the SDK.

jenkins: Stop trying to install catalyst

This reverts commit faf07f1.

Revert "build_library: Add temporary workaround for binutils update"

Add a workaround to be sure we're using the correct binutils when SDK
sharing.

setup_board: add workaround for binutils issue

This reverts commit 3d60305.

Revert "setup_board: add workaround for binutils issue"

Both CVE fixes were backported.

test_image_content: whitelist polkit GLSA

Backported the dbus GLSA.  Ignoring the Perl one.

test_image_content: whitelist Perl and dbus GLSAs

It only affects a default-disabled USE flag, and our overlay ebuild is too
old to even support it.

test_image_content: whitelist OpenSSH GLSA

Retry losetup if it fails, up to 5 times with 5 seconds between retries.

build_library/disk_util: work around losetup bug

This fails frequently but should succeed if retried. This should reduce
failed builds.

disk_util: retry loopback mounts if they fail

systemd and sudo are already fixed.  Git was fixed by updating to 2.23.2,
not 2.24.1.  Samba is 2 years old and customized, thus difficult to update.
file, Python, and gdb are only in the SDK.

test_image_content: whitelist some GLSAs

Git was fixed by updating to 2.23.3, not 2.26.2.  Python and QEMU are
only in the SDK.

test_image_content: whitelist some GLSAs

We updated to 1.0.2u instead of 1.1.1g.

test_image_content: whitelist OpenSSL GLSA

set_lsb_release: update codename