nixos/modules/services/monitoring/graphite.nix: don't create graphite user unconditionally

I'm not sure what exactly this user is needed for, i.e. under what circumstances
it must exist or not, but creating it unconditionally seems like the wrong thing
to do. I complained to @offlinehacker about this on Github, but got no response
for a week or so. I'm disabling the extraUsers bit to put out the fire, and now
hope that someone who actually knows about Graphite implements a proper solution
later.
nixos/modules/services/monitoring/graphite.nix: strip trailing whitespace
nix-prefetch-git: fix determinism with leaveDotGit

Add more files to the delete list:

 * .git/FETCH_HEAD
 * .git/ORIG_HEAD
 * .git/refs/remotes/origin/HEAD
 * .git/config

Further, remove all remote branches, remove tags not reachable from the
given 'rev', do a full repack and then garbage collect unreferenced
objects.

According to my testing, the result is fully deterministic. As in "any
change done to the upstream repo, ahead of 'rev', will not affect the
hash of the resulting 'clone'". Even changing the clone URL will not
change the output hash, because .git/config is removed.

A new version of git can of course change store format, but that's
unavoidable.

For big repositories, the repack operation may be a bit heavy. But as
far as I can see there is no cheaper way to determinism.
sudo: allow adding extra configuration options to the bottom of sudoers

from sudoers (5):
When multiple entries match for a user, they are applied in order.
Where there are multiple matches, the last match is used (which is not necessarily the most specific match).
r-RcppArmadillo: fix download URL
r-nloptr: add missing dependency on nlopt library
r-PoweR: fix build
postgris: 1.5.1 -> 1.5.8, fixes #3389
haskell-platform: install binaries and libraries into the user environment

Fixes https://github.com/NixOS/nixpkgs/issues/2968.
haskell-ariadne: update to version 0.1.2.3
haskell-language-c: update to version 0.4.7
haskell-rethinkdb: update to version 1.15.2.0
haskell-vty-ui: update to version 1.8
libfaketime: new package

Report faked system time to programs without having to change the
system-wide time.

http://www.code-wizards.com/projects/libfaketime/
kernel: Enable PPP_FILTER by default.

pppd will try to use it to improve efficiency and complain if it's not available
(but is is not mandatory).
Merge remote-tracking branch 'origin/master' into staging.
nixos: increase allocated memory for gnome tests. Closes #4651
bcache-tools: don't use probe-bcache and bcache-register

This allows us not to include any additional binaries for bcache
support in initrd; just an udev rule.
stage-1: add bcache support

This adds necessary udev rule into initrd to support autodetecting
bcache partitions in stage-1. It also fixes 'sh' path for the new
rule to work.
r-RcmdrPlugin.ROC: disable broken build