fix wacom hotplug and all Intuos 5 issues

- drop custom config:
  (please wacom using folks review this part and think
  about how to get it back if its important to you)

- put default config shipping with  xf86_input_wacom
  into /etc/X11/xorg.conf.d/
  which seems to be interpreted again when
  devices are hot plugged

- when starting x11, also provide xinput
  .. you never know when you need it

This fixes all problems I had:
- device only worked when plugged in, then xorg was started
(an alternative quick fix is switching to terminal by ctrl-alt-F1 and back)
- I had to disable some devices, because eg myaint switched input
device many times a sec rendering it unusable otherwise, some of those devices
configured did not work.

Details:
http://sourceforge.net/apps/mediawiki/linuxwacom/index.php?title=FAQ#Is_hotplugging_supported_for_my_USB_tablet.3F
See 12 -> HAL or xorg.conf.d
openconnect and vpnc NetworkManager plugins added
Make fail2ban a normal systemd service in nixos module.
Limit the location where fail2ban service can write to (only /var/run/fail2ban).
Limit the capabilities of what fail2ban service can do. Taken from ArchLinux wiki.
venus: Support https
nixos-rebuild: Allow to use --repair.

Unfortunately, the flag only works directly and without the daemon, so
this adds an extra variable $repair, to avoid the daemon. This is to
avoid to iterate through the $extraBuildFlags just to test whether
"--repair" exists.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Fix ReadWriteDirectories for fail2ban, added /var/tmp.
Add OpenSMTPD service option
fail2ban: move /var/run/fail2ban creation to activation script to be able to restrict the write locations for the service properly, add configuration files to the restartTriggers.
Fix node_modules references in uptime module.
Use the qemu-kvm wrapper
bash: Disable hashing of command lookups in interactive shells

This just confuses people when (say) using multiple profiles.
Performance benefits for interactive shells are likely to be very
small anyway.
Support Nix's mandatoryFeatures

Extend the buildMachines option to support specification of
supportedFeatures and mandatoryFeatures in order to support all
configuration options of the nix.machines file.
Hide kernel pointers for unprivileged users via kptr_restrict
Merge pull request #201 from garbas/networkmanager

openconnect and vpnc NetworkManager plugins added
test-driver/Machine: Add new allowReboot flag.

This is to actually allow for the target machine to reboot, which could
come in handy for some VM tests in NixOps. Well, actually to be more
specific: We need it for the Hetzner NixOps backend test. :-)

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Supybot/limnoria: add service module
qemu-vm: Add new option writableStoreUseTmpfs.

This is to use the VMs own disk image instead of a tmpfs in order to
avoid eating more memory. Of course, by default we still use the tmpfs
in order to not break existing VM tests.

I personally don't like the coding style of the option definition, but
in order to stay consistent, I followed the overall style in this file.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
lightdm: remove unused reference to mesa drivers

I don't need them and llvm at all, for example.