wget darwin: disable Test-iri-disabled.px

This test fails on MacOS X. The failure has something to do with
the tests expecting filesystems to accept/store filenames as
bytes. On the HFS+ filesystem, however, filenames are Unicode
characters (Normalisation Form D).

This wget ticket appears to be relevant
    http://savannah.gnu.org/bugs/index.php?27541

The maintainer does not seem to think that this test
failure represents a problem in practice:
    http://article.gmane.org/gmane.comp.web.wget.general/8988

But this patch should be revisited/removed if this aspect of wget is
ever addressed in the future.

NB: I'm also a bit concerned/confused that none of the tests mentioned
in that message seem to fail, so I'm not 100% sure if this is the
relevant issue.
grafx2: new package

GrafX2 is a bitmap paint program inspired by the Amiga programs Deluxe Paint and Brilliance. Specialized in 256-color drawing.
autofs: upgrade 5.0.5 -> 5.0.8

* upstream: patches have been moved into the patches-5.0.x directory
* disable autofs preparing and then moving mount points

  "With the introduction of systemd the root filesystem is now usually
  marked as shared instead of private as part of the systemd sandbox
  functionality. As a consequence moving a mount from one mount point to
  another is not allowed."
First commit.
Added Nix expression for Bochs - "the highly portable x86 emulator".
A not so clear README file.
grafx2: Some simplification in the package file.
Deleting README to conform to some style standards.
Minor changes to Bochs expression.
Edit that was left out from the last commit.
grsecurity: Update to 3.0-3.2.52-201311261307 and add patch for 3.12
grsecurity: Fix module loading during boot due to path restrictions
haskellPackages.foldl: New expression
Merge pull request #1285 from ocharles/foldl

haskellPackages.foldl: New expression
haskellPackages.HDBCodbc: Do not build Haddocks

The Haddocks currently fail to build, which means that HDBC-ODBC
cannot be install.
New Haskell package: CodecImageDevIL, bindings to libdevil
Add posix nodePackage

Signed-off-by: Shea Levy <shea@shealevy.com>
Merge pull request #1286 from ocharles/haskell-odbc

haskellPackages.HDBCodbc: Do not build Haddocks
postgresql: Fix the port option

Also clarify the description of the enableTCPIP option.
When setting $NIX_REMOTE, check whether /nix/var/nix/db is writable

In NixOS containers, root doesn't have write permission to
/nix/var/nix/db, so it has to use the daemon.
Add support for lightweight NixOS containers

You can now say:

  systemd.containers.foo.config =
    { services.openssh.enable = true;
      services.openssh.ports = [ 2022 ];
      users.extraUsers.root.openssh.authorizedKeys.keys = [ "ssh-dss ..." ];
    };

which defines a NixOS instance with the given configuration running
inside a lightweight container.

You can also manage the configuration of the container independently
from the host:

  systemd.containers.foo.path = "/nix/var/nix/profiles/containers/foo";

where "path" is a NixOS system profile.  It can be created/updated by
doing:

  $ nix-env --set -p /nix/var/nix/profiles/containers/foo \
      -f '<nixos>' -A system -I nixos-config=foo.nix

The container configuration (foo.nix) should define

  boot.isContainer = true;

to optimise away the building of a kernel and initrd.  This is done
automatically when using the "config" route.

On the host, a lightweight container appears as the service
"container-<name>.service".  The container is like a regular NixOS
(virtual) machine, except that it doesn't have its own kernel.  It has
its own root file system (by default /var/lib/containers/<name>), but
shares the Nix store of the host (as a read-only bind mount).  It also
has access to the network devices of the host.

Currently, if the configuration of the container changes, running
"nixos-rebuild switch" on the host will cause the container to be
rebooted.  In the future we may want to send some message to the
container so that it can activate the new container configuration
without rebooting.

Containers are not perfectly isolated yet.  In particular, the host's
/sys/fs/cgroup is mounted (writable!) in the guest.