These ones don't have a single pass on 17.09 and weren't disabled in ZHF
for some reason:

gnome3-gdm: broken since 2016-10-25
ec2-config: broken since 2017-04-03 @copumpkin
pam-oath-login: broken since 2017-05-31 @grahamc

Disable them on 17.09 (and in ~1mo I will disable them on master if
they're still broken as well).

(cherry picked from commit 4147207)

The preStart script used a hardcoded "git" user instead of the cfg value.

(cherry picked from commit a89b28f)

(cherry picked from commit f906d6d)

https://hydra.nixos.org/build/62778325
(cherry picked from commit 28494e9)

(cherry picked from commit c529454)

(cherry picked from commit 69ebd73)

(cherry picked from commit e9aa686)

https://hydra.nixos.org/build/62750790
(cherry picked from commit 917bd0b)

irssi: 1.0.4 -> 1.0.5
(cherry picked from commit ec5f9c8)

Tested that pdftk builds on linux again, and gccgo6 builds hello-world.
The default gcc doesn't rebuild.

(cherry picked from commit 80c57fd)

Since basically forever, it randomly fails with
   do not know how to unpack source archive /nix/store/d821jkm8bgkdcv924nk7qr1q06l9is35-x42-plugins-20170428.tar.xz
on Hydra.

https://hydra.nixos.org/build/62793688
(cherry picked from commit 4068703)

(cherry picked from commit fd3bb25)

head_stage2.nix has been regenerated to reflect changes in ghcjs

Cherry-pick ghcjsHEAD upgrade on release-17.09

(cherry picked from commit 124e462)

(cherry picked from commit 7b3a61a)

…tialization required anymore)

(cherry picked from commit 61089dd)

See http://lists.gnu.org/archive/html/info-gnu/2017-10/msg00006.html
for release information

(cherry picked from commit 131b7c2)

…s-upgrade

ghcjsHEAD: bump ghcjs shims

(cherry picked from commit e2e5979)

(cherry picked from commit 6af0de6)

(cherry picked from commit bb49391)

(cherry picked from commit 1f2d1ac)

(cherry picked from commit 4b756e4)

(cherry picked from commit 9bd9305)

Security update: https://curl.haxx.se/docs/adv_20171023.html

(cherry picked from commit 5d0ece7)

…7.09

hackage: update snapshot of 'all-cabal-hashes' repo for callHackage

(cherry picked from commit 03bcadd)

https://hydra.nixos.org/build/63628044
(cherry picked from commit 5d5eb6a)

5a5db60 disabled it by default, which
may have been unintentional. mkEnableOption considered harmful.

(cherry picked from commit 9df79de)

(cherry picked from commit d2df286)

This allows it to co-exist with other debug info directories, such as
the one used by dwarffs
(https://github.com/edolstra/dwarffs/blob/master/module.nix).

(cherry picked from commit ee9a15b)

(cherry picked from commit a0f01a5)

This patch is based on the work of the patch from Thorsten Glaser (MirBSD) [1]

[1] http://www.mirbsd.org/cvs.cgi/src/gnu/usr.bin/cvs/src/rsh-client.c.diff?r1=1.6;r2=1.7

(cherry picked from commit d0c8c66)

This fixes the case where the `find` command does not return any
files.

(cherry picked from commit 66c0193)

(cherry picked from commit f6858e5)

(cherry picked from commit 7b718036642f4794e8d1351ef932e2367dd5d84b)

(cherry picked from commit e8edf093bd05130f40863b879f2b74eafd5d92c5)

(cherry picked from commit e3997b6fa2d2fbe8ab1480346da58b25c6115005)

(cherry picked from commit cb926a1b209c3bf685a6ed175794d1ea27fa7e1a)

(cherry picked from commit 8bc5f04)

(cherry picked from commit 914fcc8)

(cherry picked from commit 3f9e872)

(cherry picked from commit bee61a0)

This is required by the new c5.* instance types.

Note that this changes disk names from /dev/xvd* to
/dev/nvme0n*. Amazon Linux has a udev rule that calls a Python script
named "ec2nvme-nsid" to create compatibility symlinks. We could use
that, but it would mean adding Python to the AMI closure...

(cherry picked from commit 54da9cc)

(cherry picked from commit ea40b0c)

see issue #31584