Co-authored-by: Renovate Bot <bot@renovateapp.com>

* fix(cache) dont cache luarocks in our openresty container

* chore(ci) adjust our cleanup so retrying can be more successful

* feat(*) allow running kong as the 'kong' user

Previously, Kong was, by default, running as root on non-docker systems,
which is not a security best practice. For docker environments, we take
steps to provide more security [2] (create a kong user by default, grant
the same /usr/local/kong/* files and directories ownership to that user
and to the root group) and these are the same steps that are being
employed here for non-docker environments. Post-installation fpm scripts
are being leveraged to create the kong user and change the permissions
of the kong package's contents to that user and to the root group. See
the fpm wiki [1] for details. See all the the files and directories
owned by the kong package here: [files.txt](https://github.com/Kong/kong-build-tools/files/5314643/files.txt)

Note that when `kong start` is run without changing the `$USER`, the
nginx master process will be run as the 'root' user and the nginx
workers processes will run as the 'nobody' user. That is the default
behavior in Kong because the nginx master process needs to run as 'root'
in order for nginx to execute certain actions (listen on privileged
ports such as port 80, for example).

In order to run kong as the 'kong' user, first switch to the kong user:

```
su kong
```

Then start `kong` normally:

```
kong start
```

This will make both the nginx master and worker processes to run as the
'kong' user.

[1] https://github.com/jordansissel/fpm/wiki
[2] https://github.com/Kong/docker-kong/blob/2.1.3/rhel/Dockerfile#L36-L43



* chore(makefile) change DOCKER_KONG_VERSION temporarily

* tests(package) add minimal tests

* tests(package) add chown and chmod tests

* tests(package) validate Kong is running as the correct user

* chore(ci) temporarily remove non-build tests

* tests(package) add 'chmod -R g=u' verification tests

Also fixes a small issue where the user-validation-tests was getting
pulled.

* tests(package) install needed dependencies to run the tests

* tests(package) install debs with dpkg -i /src/kong.deb || apt install --fix-broken -y

Debian jessie can't install local packages with apt-get

* tests(amd64) pin the user-validation tests to as to amd64

* chore(ci) pin DOCKER_KONG_VERSION to master

* Revert "chore(ci) temporarily remove non-build tests"

This reverts commit 66abe497fdbbc414a128c1269cdbc1a9ec35d07a.

Co-authored-by: Colin Hutchinson <chutchic@gmail.com>

Update dependency attrs to v20

chore(ci) add some naive retries to our CI

chore(release) if we try to sign a package but fail we should fail

chore(cache) dont recycle the cache that includes luarocks as downgrading a luarock isnt possible

chore(ci) setup CI to test and release alpine arm build

fix(system) adjust systemd reload to do a kong prepare

feat(openresty-patches) add ngx_stream_lua-0.0.7_04-ffi_crc32_api.patch

Adds missing patch in the family of:

* ngx_lua-0.10.15_03-ffi_crc32_api.patch
* lua-resty-core-0.1.17_05-ffi_crc32_api.patch

This reverts commit 9aad4a1a.

### Summary

Just changes the `KONG_SOURCE` to point to our `next` instead of `master`
branch.

### Summary

This makes compiling OpenResty 1.17.8.x fail because the API is removed in
this commit:

https://github.com/openresty/stream-lua-nginx-module/commit/44f68b9e6000deea1ed982d53d2bf472ce6d0b89#diff-383967f66f2c8340f2dbb7fb1765bc16

We need to figure out if this has any effect on Kong, but the patches
should go away, because they don't make sense anymore.

### Summary

```
patching file LuaJIT-2.1-20200102/src/lj_api.c
patching file LuaJIT-2.1-20200102/src/lj_arch.h
Hunk #1 succeeded at 241 (offset 4 lines).
patching file LuaJIT-2.1-20200102/src/lj_cconv.c
patching file LuaJIT-2.1-20200102/src/lj_obj.h
Hunk #1 succeeded at 831 (offset 1 line).
patching file LuaJIT-2.1-20200102/src/lj_state.c
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core.lua
Hunk #1 succeeded at 19 with fuzz 1 (offset -2 lines).
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/ngx/balancer.lua
patching file lua-resty-core-0.1.19/lib/ngx/balancer.lua
Hunk #1 succeeded at 45 (offset 7 lines).
Hunk #2 succeeded at 348 (offset 137 lines).
patching file lua-resty-core-0.1.19/lib/resty/core.lua
patching file lua-resty-core-0.1.19/lib/resty/core/request.lua
patching file lua-resty-core-0.1.19/lib/resty/core/utils.lua
patching file lua-resty-websocket-0.07/lib/resty/websocket/client.lua
patching file nginx-1.17.8/src/http/ngx_http_upstream.c
Hunk #2 succeeded at 1688 (offset -3 lines).
Hunk #3 succeeded at 1719 (offset -3 lines).
Hunk #4 succeeded at 1765 (offset -3 lines).
patching file nginx-1.17.8/src/http/ngx_http_special_response.c
patching file nginx-1.17.8/src/stream/ngx_stream_proxy_module.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.h
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_common.h
patching file ngx_lua-0.10.17/src/ngx_http_lua_module.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_common.h
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_stream_lua-0.0.8/src/ngx_stream_lua_util.c
Hunk #1 succeeded at 1965 with fuzz 2 (offset 10 lines).
patching file ngx_stream_lua-0.0.8/src/api/ngx_stream_lua_api.h
```

vs.

```
patching file LuaJIT-2.1-20200102/src/lj_api.c
patching file LuaJIT-2.1-20200102/src/lj_arch.h
patching file LuaJIT-2.1-20200102/src/lj_cconv.c
patching file LuaJIT-2.1-20200102/src/lj_obj.h
patching file LuaJIT-2.1-20200102/src/lj_state.c
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/resty/core.lua
patching file lua-resty-core-0.1.19/lib/resty/core/socket_tcp.lua
patching file lua-resty-core-0.1.19/lib/ngx/balancer.lua
patching file lua-resty-core-0.1.19/lib/ngx/balancer.lua
patching file lua-resty-core-0.1.19/lib/resty/core.lua
patching file lua-resty-core-0.1.19/lib/resty/core/request.lua
patching file lua-resty-core-0.1.19/lib/resty/core/utils.lua
patching file lua-resty-websocket-0.07/lib/resty/websocket/client.lua
patching file nginx-1.17.8/src/http/ngx_http_upstream.c
patching file nginx-1.17.8/src/http/ngx_http_special_response.c
patching file nginx-1.17.8/src/stream/ngx_stream_proxy_module.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.h
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_socket_tcp.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_common.h
patching file ngx_lua-0.10.17/src/ngx_http_lua_module.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_lua-0.10.17/src/ngx_http_lua_common.h
patching file ngx_lua-0.10.17/src/ngx_http_lua_balancer.c
patching file ngx_stream_lua-0.0.8/src/ngx_stream_lua_util.c
patching file ngx_stream_lua-0.0.8/src/api/ngx_stream_lua_api.h
```