Bump version to 0.16rc4
deploy: Check permissions after installing pkgs

Currently archipelago runs as archipelago:archipelago. Pithos and
Cyclades depend on archipelago and thus gunicorn must run as
www-data:archipelago. There is a known bug in gunicorn that does not
set supplementary groups when changing uid [1]. Therefore all conf
files under /etc/synnefo must be root:archipelago and not
root:www-data.

Since the snf-* packages are shipped with root:www-data conf files
we must chown them after installation. This patch, as a workaround,
checks if the user archipelago exists and acts accordingly.

Note that on a multinode setup, only Pithos and Cyclades
need those permissions. On a single node setup all components that
add files under /etc/synnefo or run via gunicorn should check
permissions during setup.

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762448

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>
deploy: Add PITHCAT_UMASK setting to snf-image

PITHCAT_UMASK is needed so if archipelago does not run as root.
If missing the pithcat (e.g. needed for shared-filer ext provider)
becomes really slow.

Up until now we had /etc/default/snf-image as a template with
default snf-image settings commented. These settings were never
updated and as a result were different from the ones the package is
shipped with. This patch, after package installation, moves original
/etc/default/snf-image to snf-image.orig and then overrides it with
the template that includes only the settings that deploy want to
change.

Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>