fix(make.conf): Remove custom fetch and tar commands.

Switch to portage's default (wget) for fetching. wget is nice and
reports the URL it is downloading while curl does not. This makes
understanding errors like '404' actually somewhat possible.

The --checkpoint arg to tar didn't serve much of a useful purpose as far
as I know besides adding to the build noise. Just drop it.
add(sys-libs/timezone-data): Import latest stable timezone ebuild

This is a copy of the current stable version from Gentoo but without the
extra junk code to try to create /etc/localtime which we don't need.
add(app-misc/ca-certificates): Add new CA cert package.

This package is based exclusively on the Mozilla certificate store
distributed in their NSS library and adopts NSS's version accordingly.
It replaces the previous Gentoo package which came directly from Debian.

The Debian package package had a couple issues we didn't like:

 - Trusts the http://cacert.org root CA which isn't the worst thing in
   the world to do but seems like a really bad default policy to ship.
 - update-ca-certificates had a confusing configuration/hook scheme
   which seemed almost useful but completely obnoxious and useless to
   CoreOS at the same time. systemd-tmpfiles plus a simpler script does
   a better job for us.

The python script certdata2pem.py came from Debian's source package
ca-certificates_20130119 and modified slightly. It is only used at
build-time to convert the file format used by NSS to PEM files.

The old packages used dates as the version, this one uses the NSS
library the certificate store came from as the version. This may cause
an issue if packages from Gentoo depend on >=ca-certificates-20080809 or
similar. Currently the only packages in Gentoo that do so are
sci-misc/boinc and www-client/epiphany, neither of which will ever be
needed in CoreOS so we should be OK.
feat(sys-kernel/coreos-kernel): Enable VFIO modules

Original thread:
https://groups.google.com/forum/#!topic/coreos-dev/MGxSfJNdNkM
bump(sys-kernel/coreos-kernel): Bump revision, cleanup old ebuilds.
Merge pull request #369 from marineam/vfio

Enable VFIO
bump(fleet): Bump fleet ebuild to v0.1.3
Merge pull request #368 from marineam/etc-fixes

New timezone-data and ca-certificates packages
Merge pull request #371 from bcwaldon/bump-fleet

bump(fleet): Bump fleet ebuild to v0.1.3
fix(app-emulation/docker): fix up socket activation problem

This includes a patch that was sent upstream for docker 0.8.1 SA
problems.
Merge pull request #375 from philips/docker-0.8.1-fix-sa

fix(app-emulation/docker): fix up socket activation problem
bump(sys-kernel/coreos-kernel) bump to 3.13.5
feat(app-emulation/docker): bump docker-0.8.1-r1

In the last patch I modified docker-0.8.1.ebuild directly. That was
wrong. This time I copy the ebuild, add the epatch and leave
docker-0.8.0 unmodified. This also changes the patch to reflect what is
waiting for a merge upstream.
Merge pull request #377 from philips/docker-0.8.1-fix-sa2

feat(app-emulation/docker): bump docker-0.8.1-r1
Merge pull request #376 from gregkh/kernel_update

bump(sys-kernel/coreos-kernel) bump to 3.13.5
fix(sys-apps/dbus): Add slot dependency on systemd

This will force a recompile of dbus when systemd's sub-slot changes as
it did from 207->209 when some lib versions changed.
clean(sys-apps/dbus): Remove unused ebuilds
fix(sys-apps/baselayout): Use custom script to generate /etc/group

I misunderstood the documentation for systemd-tmpfiles, if a string to
write to a file is provided it will always write it, even if the file
already exists and doesn't need to be created. This means that using
tmpfiles to initialize /etc/group results appending each boot.

Instead use a little script instead, also initialize passwd and shadow
so that the `passwd` command works for the core user.

Make use of the systemd eclass where applicable.
fix(profiles): Add which to stage1 bootstrap.

libseccomp calls which in its ./configure script so when building stage3
if which isn't already there the build will fail. This is quick fix.

Reported upstream: https://bugs.gentoo.org/show_bug.cgi?id=502084
Merge pull request #378 from marineam/misc

misc updates