Revert "desktop: temporarily switch homepage to hello"

This reverts commit 5332100ad6fa28897c93a91a2f0e2ad56f6e7742.
nodes: obey owner puppet var for desktops

We still need to clean up the auth definitions a lot, but in the
meantime this doesn't make it too terrible.
nodes: allow ocfstaff to sudo on desktops
nodes: fix mismatched brace
nodes: fix *another* mismatched brace
common: raise limits to more useful levels

java can't even start on tsunami because it requests giant address space
at the start :\
common: install more packages on login server

Yes, I know I'm the only one who does my homework on the login servers,
but still...
desktop: use only 1 workspace (xfce)

(cherry-picked from jessie branch)

Users (and me) get confused when scrolling on the desktop switches to
another workspace. We could show a workspace applet and disable
desktop scrolling, but I think it will still be confusing.

If anybody actually uses workspaces we could do that, but not sure that
anybody does?

I spent two hours writing this using augeaus and then realized we're
syncing the entire directory, so that won't even work. For the record,

    augeas { 'xfwm4':
      lens    => 'Xml.lns',
      incl    => '/etc/xdg/xfce4/xfconf/xfce-perchannel-xml/xfwm4.xml',
      changes => [
        "set channel[#attribute/name='xfwm4']/property[#attribute/name='general']/property[#attribute/name='workspace_count']/#attribute/value 1"
      ];
    }

We could not sync the entire directory (probably better), but this file (and
xfce4-panel.xml) don't even get created by default, so we'd have to recreate
the entire file with augeaus (unless it just overrides default configs? who
knows...)
dementors: move printing stats to dementors
ocf_mirrors: increase frequency of ubuntu mirroring

Ubuntu keeps security releases in the main archive, so we should update
more frequently.
kvm: use ocfstaff as socket owner

This allows ocfstaff to use the virt-manager GUI
Revert "kvm: use ocfstaff as socket owner"

This reverts commit 5601f7d3c20ecb70c622ec8943f14f6982fafeb0.

As pointed out by Dara, this has some significant security concerns. I
think we'll have to discuss alternative ways to provide VNC access to
staff VMs.
Disables XFCE's logout confirmation so users have one fewer excuse to ask for print refunds.
desktop: also backport linux-headers

This allows DKMS to build the VirtualBox kernel module.
desktop: only backport kernel on wheezy
Remove coupdetat module
Remove tornado module
Rename supernova -> ocf_admin
Add willh/admin permissions
Tell xscreensaver to blank screen only
Check if desktop profile is running in a VM before suspending
Changed Iceweasel's launcher icon in taskbar to that of Firefox
Various XFCE tweaks