Switched to using a lockfile (.firstboot-complete-do-not-delete)
to ensure firstboot script is run only once.
Also includes an improved approach to ensure hostid is always
unique, called via firstboot. This should work accross various
distros not just CentOS and friends (see IMAGE-441).