confine-system/Makefile: add package diffutils, useful for debugging
vct: add ca-certificates to VCT_DEB_PACKAGES
vct.conf.default: add rsyslog and logrotate to VCT_SLIVER_TEMPLATE_DEBIAN_PACKAGES
lxc, confine: new lxc mount feature to add mount points to container, mount debian /run as tmpfs
vct: vct_build_sliver_template(): more image finetuning...
lxc, confine: new lxc mount feature to add mount points to container, mount debian /run as tmpfs
vct fix initscripts of experiments/hello-world-debian
confine/*.lua: reread sliver.set_state correctly
confine.lib: do not configure sliver IPv4/6 via lxc as it causes  debian7-based slivers network setup to fail
vct: fix netmask of vct-local udhcpd leases, causing debian7 slivers to fail dhcpd requests
confine/slivers.lua: use deployed_rules for maintaining unchanged deployed state
confine/*.lua: reread sliver.set_state correctly
confine/*.lua: purge stale template and image files
confine-system/Makefile: add package procps (ps,top,..), for lxc-ps and debugging
confine/*.lua: purge stale template and image files
confine/*.lua: purge stale template and image files
confine/sliver.lua: strictly report servers template/uri
confine/*.lua: reread sliver.local_exp_data correctly
confine/rules.lua: set_or_err(): report possible values if invalid value
confine: support RestAPI fileds (sliver/slice) overlay_url/sha256