Help! A zombie appeared!

* nthykier/auto-decruft:
  rm: Ensure con_components are not None

Signed-off-by: NNiels Thykier <niels@thykier.net>

* nthykier/auto-decruft:
  rm: Only add component restriction if there is a component

Signed-off-by: NNiels Thykier <niels@thykier.net>

* nthykier/auto-decruft:
  daklib/rm: Use strings and not RowProxy as key

Signed-off-by: NNiels Thykier <niels@thykier.net>

* nthykier/auto-decruft:
  dak/rm: Fix typo in key name

Signed-off-by: NNiels Thykier <niels@thykier.net>

For now only with -n and then mail out what it thinks it would do.
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

* nthykier/auto-decruft:
  Rewrite auto-decruft to group removals
  daklib/rm: Add a fitting dak-quote
  auto-decruft: Batch check source-less cruft
  auto-decruft: Fix wording of removal message
  auto-decruft: Use bind variables
  auto_decruft: Fix typo
  utils: Use a set rather than list
  utils: Drop unused fields from database query
  utils: Avoid some throw away collections
  generate_filelist.py: Fix typo
  utils: Add a quiet=False parameter to check_reverse_depends
  Add dak auto-decruft command based on cruft-report
  Move two queries from cruft_report to daklib/cruft
  Extract a "remove" method from "dak rm"

Conflicts:
	dak/generate_filelist.py

This patch removes the old implementation of generate-packages-sources
that used apt-ftparchive instead of the metadata in the Postgres
database.

Some very old schema update scripts make use of obsolete code and
would need to be updated to keep working. Just remove them instead.

Signed-off-by: NNiels Thykier <niels@thykier.net>

Which doubles as a fitting disclaimer too.
Signed-off-by: NNiels Thykier <niels@thykier.net>

Add a ReverseDependencyChecker class for bulk testing breakage in
reverse dependencies and use it in the auto-decrufter.

At this point, disable the NBS removal - it will be re-added in the
next commit.
Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Avoid creating collections that are thrown away after a single (or
even zero) uses.
Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Signed-off-by: NNiels Thykier <niels@thykier.net>

The new auto-decruft command automatically removes:

 * sourceless binaries
 * NBS

When the removals can be done without breaking any reverse
dependencies.
Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NNiels Thykier <niels@thykier.net>

Signed-off-by: NJulien Cristau <jcristau@debian.org>

CACERTFILE now must point to a CA, using service certificates directly
doesn't work.

Also use per-connection settings for TLS. Note that the order of
set_option calls matters (setting ldap.OPT_X_TLS_NEWCTX first
fails)...

Somehow this broke with the upgrade to Debian 8. As the information is
more or less informational (connect keys to accounts), do not require
TLS for LDAP connections for a moment.

lynx doesn't seem able to use the service certificates in
/etc/ssl/certs and the SSL_CERT_DIR environment variable doesn't seem
to work either.

While at it, also run lynx as the dak-unpriv user.