* Add flags for systemd [0]

* Enable tests
  Though I actually didn't look to see how they're
  performed, only effort done was to get a success-
  ful build.

* Enable vala bindings

[0]: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/blob/1.8.0/NEWS#L21

(cherry picked from commit cb962e8)

Drop --enable-mbim-qmux because we have libmbim >= 1.14.0 [0]

[0]: https://gitlab.freedesktop.org/mobile-broadband/libqmi/blob/1.16.0/NEWS#L5

(cherry picked from commit fd5c74c)

(cherry picked from commit 005c3cf)

[19.03] gitlab 11.7.5 -> 11.9.1, backport of more fixes and test improvements

avahi: apply patches for CVE-2017-6519 & CVE-2018-1000845

seems that this got broken when the config option was made to use enums. "secure" got replaced with "enum", which isn't a valid option for the failure mode.

(cherry picked from commit 0c34b9f)

Setting setupPyBuildFlags makes builder add an additional target
"build_ext" to setup.py arguments in addition to "bdisst_wheel".
pyarrow's setup.py recently started to try to redo build_ext again which
broke the build.

(cherry picked from commit 49e9194)

(cherry picked from commit 55223a8)

(cherry picked from commit 2645454)

(cherry picked from commit 910c1d0)

turses: fix crash when starting with existing config file

…ixOS#58412)

This caused some reverse dependencies of adoptopenjdk to depend on
adoptopenjdk's libfreetype, rather than the NixOS
libfreetype. For example: NixOS#57733

Now the derivation does not contain libfreetype.so . The JRE links to
nixpkg's freetype:

$ ldd /nix/store/9iyxm1nkn35xhjgri041r980z4p5ls5g-adoptopenjdk-hotspot-bin-11.0.2/lib/libfontmanager.so | grep -i freetype
	libfreetype.so => /nix/store/ycbkq39cngzx19j829qzgdnw3mx3z78g-freetype-2.9.1/lib/libfreetype.so (0x0000795e30702000)

(cherry picked from commit 6bae073)

(cherry picked from commit 32538ff51f15c2a416949a6f75ef41a505d530f8)

[19.03] tzdata: 2018g -> 2019a

[backport] nixos/tests/predictable-interfaces: fix failure on aarch64

(cherry picked from commit ebd2533)

(cherry picked from commit e3bee73)

(cherry picked from commit ec83ff0)

(cherry picked from commit 95f568b)

The previous code using substituteInPlace was broken for both 5.9 and
5.11 (latter was broken after a minor release bump). Using patches
should make things fail loudly and prevent modules/qtwebengine.nix from
being littered with version checks.

The patch for 5.12 is only tested to apply.

(cherry picked from commit 1809832)

…ituteInPlace

qt59.qtwebengine doesn't need those fixes (probably since the recent
minor version bump)

(cherry picked from commit ccd1bf6)

This ports a patch that is already used in 5.11. Also one of the
substituteInPlace call fails because a file doesn't exist.

(cherry picked from commit 0624deb)

dockerTools: align generated layer archives with docker's output
(cherry picked from commit 6af3176)

(cherry picked from commit a0a1dc0)

(cherry picked from commit b1d040b)

(cherry picked from commit bbefa95)

(cherry picked from commit 4b7d9dc)

(cherry picked from commit b16b1b3)

[19.03] monero: 0.13 -> 0.14

https://lists.gnupg.org/pipermail/gnutls-help/2019-March/004497.html
Close NixOS#58437.

(cherry picked from commit 225b164)

(cherry picked from commit 63f2441)
(cherry picked from commit 94a4094)
(cherry picked from commit 0ccfebf)

(cherry picked from commit 774a299)

(cherry picked from commit b31ab20)

(cherry picked from commit e683811)