bump(sys-apps/baselayout): Updates for systemd
chore(systemd): remove gentoo-systemd-integration from systemd build
chore(sys-apps/systemd): Remove old version
chore(sys-apps/systemd): sync/cleanup systemd ebuilds.

Pull in some updates from upstream Gentoo.
As a follow up to the gentoo-systemd-integration removal prune the now
unused vanilla use flag and our custom openrc use flag along with it.
fix(sys-apps/systemd): Add tmpfiles rule for resolv.conf

This path has changed after v213 so it must be handled here instead of
baselayout now.
fix(coreos-base/oem-vagrant): disable VMware's hgfs

Suggested in https://github.com/coreos/coreos-vagrant/pull/127
fix(coreos-base/oem-vagrant): disable VBox's shared files
Merge pull request #680 from marineam/hgfs

fix(coreos-base/oem-vagrant): disable VMware's hgfs
Merge pull request #679 from marineam/systemd

Systemd maintnance
fix(app-misc/ca-certificates): Never rehash certs during boot.

This kills the massive time-waster we currently have during boot to
cleanup/refresh OpenSSL's certificate directory in /etc/ssl/certs.
System provided certs are now hashed at build time and tempfiles is used
to install the proper links. The certificate bundle is also created at
build time and provided as a symlink. Since tempfiles does not help us
clean up broken links to certs that have been removed that task has been
moved to clean-ca-certificates.service which is still run on every boot.
The update-ca-certificates.service is now only responsible for
recreating the certificate bundle if required. On systems where the user
has never run update-ca-certificates the certificate bundle is just a
symlink to the copy in /usr and update-ca-certificates.service never
runs on boot. If the user does run update-ca-certificates then
update-ca-certificates.service will rewrite the bundle only if the
directory has not been modified since the last time it ran.

There are a few edge cases where if stale hash links may be left if a
system provided cert was replaced a subject that is different enough to
change the hash but not change the file name. I don't expect that to
ever happen though. Also hash collisions between the system certs and
each other or user provided certs are not handled gracefully but should
be rare. tempfiles will report wrong symlink errors in that case.
Merge pull request #681 from marineam/certs

fix(app-misc/ca-certificates): Never rehash certs during boot.
fix(sys-apps/systemd): Fix matching by MAC address
Merge pull request #682 from marineam/systemd

fix(sys-apps/systemd): Fix matching by MAC address
bump(coreos-base/coreos-init): Updates for empty /etc

Fix some issues for booting without using tmpfiles to setup the root
filesystem in advance. For example this now works reliably:

    mkdir -p c/etc
    cp /etc/os-release c/etc
    ln -s usr/lib64 c/lib
    ln -s usr/lib64 c/lib64
    ln -s usr/bin c/bin
    ln -s usr/sbin c/sbin
    systemd-nspawn --directory=c --bind=/usr --boot
Merge pull request #685 from marineam/init

bump(coreos-base/coreos-init): Updates for empty /etc
chore(sys-apps/systemd): Roll back to systemd 212

Versions 213 and 214 are not currently usable on GCE:

 - networkd aborts with "Assertion 'link->manager->rtnl' failed"
   https://bugs.freedesktop.org/show_bug.cgi?id=79789

 - persistent naming for virtio devices was removed,
   network devices have returned to the old eth0, eth1, etc. names:
   https://github.com/systemd/systemd/commit/bf81e792f3c0aed54edf004c1c95cc6f6d81d0ee
   This re-breaks our copy of the GCE address_manager agent:
   https://github.com/coreos/coreos-overlay/blob/a24dfc97a91262de07c3da127388c23faaab334d/app-emulation/google-compute-daemon/files/0001-hack-address_manager-use-CoreOS-names-and-locations.patch

This reverts commit da3226051f and f179df3449.
fix(sys-apps/systemd): Add resolv.conf, remove gentoo-integration

This backports commits 18e58b3e9b and 8577b6480b1 from 213 to 212.
chore(sys-apps/systemd): Sync live ebuild with upstream changes.

Only important thing here is that xattr support is now enabled by
default and the libattr dependency is gone. Previously CoreOS didn't
have the feature enabled.
bump(sys-apps/systemd): Add version 214 for testing

Features the same issues that currently block using 213 but here for
testing purposes.
Merge pull request #686 from marineam/systemd

Revert back to systemd 212