We're tweaking it with file_line etc. instead.

I need to push syslinux there, built for both i386 (for inclusion into
the ISO) and amd64 (for builder VMs).

As discussed with him, he doesn't need these privs in practice.

Note: given the dependencies on parcimonie (that's not exactly
lightweight yet) and systemd (that's not very widespread on Debian
servers yet), it doesn't feel worth pushing this to the upstream
reprepro module yet.

It's been here since 10 months, that should be more than enough :)

This reverts commit 9b73e7c6.

In general, classes should themselves specify what the need, and not
rely on some other module to be independently pulled in by
something else.

for isobuilders.

Our automated test suite *needs* parted, so currently we're
uninstalling parted just to reinstall it later every 30 minutes or so.

This partially reverts 54d9d6ae,
which I initially committed mainly to get smartd out of the way on VMs.
It's no big deal to have memlockd, memtest86+ and parted on VMs.

A run now takes about one second, so we can do that more often!

We'll put in there what we need to workaround Debian#774643.

Still, leave the packages around, just in case.

When updating reprepro's local Git clone, remove any remote-tracking references that no longer exist on the remote after fetching.

This is a first step towards cleaning up files from obsolete APT suites
when branches get deleted (#8615).

... and append a '+' to the key ID so that a signature made by
a subkey of this primary key is accepted too (see reprepro(1), section
"UPLOADERS FILES" for details).

`git annex mirror' deletes file content locally if it's not available
on the remote. For our torbrowser-archive repository, we don't want to
manually upload file content to the repo on puppet-git.lizard:
instead, we want git annex on the web server to download them from
their initial location. That's what `git annex get *' does.

Otherwise, nginx can't possibly serve it on the web.