REGISTRY argument is overriden by a Makefile command as it is used in other
dockerfiles in this repository. This dockerfile did not use a REGISTRY argument
until previous commit so rename it to SWH_REGISTRY to prevent errors when
rebuilding images.

This is using the new swh container gitlab registry and install such binary.
This demonstrates how to use that new container while allowing dev on the svn
loader (using that new binary) to happen.

This is required in order for swh tests that use nix binaries being able
to locate them.

No recent mirrors present that kafka version so...

Related to T4615#92999

Following the documentation [1].

[1] https://cassandra.apache.org/doc/latest/cassandra/getting_started/installing.html#installing-the-debian-packages

Related to T4615

I forgot the other url instance to change.

Related to T4615

That should unstuck the current failing build [1].

[1] https://jenkins.softwareheritage.org/job/jenkins-tools/job/swh-jenkins-dockerfiles/1136/console

Related to T4615

It should fix docker image builds as the following error was reported:

Failed to fetch http://www.apache.org/dist/cassandra/debian/dists/40x/InRelease
Could not connect to downloads.apache.org:443 (88.99.95.219), connection timed out

The new swh directory loader will check recursive nar checksum
for downloaded tarball content using the nix-store command if
it is available in execution environment.

nodejs 12.x reached EOL so it is time to upgrade it.

Also explicitely install nodejs.

Related to T4259

Related to T3838

It is required to communicate info back to Phabricator when building
documentation after a diff has been submitted.

Related to T3661

Related to T3407

The Let's Encrypt ISRG root has expired, and only recent versions of apt
support validating through the alternative chain. As the base image
we're building from is not up to date, we need to upgrade apt and dpkg
before running apt update on https sources.

This should allow diff [1] to build.

[1] D5988

Related to T2845

Related to T3484

swh-search will use tree-sitter to generate its search language
parser which has the advantage to work both with Python and
JavaScript.

JavaScript version of the parser requires the compilation of a
Web Assembly module and thus emscripten must be installed in
the build environment.

This will probably also be used by the swh.loader.core package at some
point.

Change the default permission of the ~jenkins/.cache directory
created by the --mount option on the RUN command
It fixes all the following errors:
```
During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/jenkins/.local/bin/pre-commit", line 10, in <module>
    sys.exit(main())
  File "/home/jenkins/.local/lib/python3.7/site-packages/pre_commit/main.py", line 398, in main
    f'Command {args.command} failed to exit with a returncode',
  File "/usr/lib/python3.7/contextlib.py", line 130, in __exit__
    self.gen.throw(type, value, traceback)
  File "/home/jenkins/.local/lib/python3.7/site-packages/pre_commit/error_handler.py", line 73, in error_handler
    _log_and_exit(msg, ret_code, e, traceback.format_exc())
  File "/home/jenkins/.local/lib/python3.7/site-packages/pre_commit/error_handler.py", line 24, in _log_and_exit
    storedir = Store().directory
  File "/home/jenkins/.local/lib/python3.7/site-packages/pre_commit/store.py", line 52, in __init__
    os.makedirs(self.directory, exist_ok=True)
  File "/usr/lib/python3.7/os.py", line 221, in makedirs
    mkdir(name, mode)
PermissionError: [Errno 13] Permission denied: '/home/jenkins/.cache/pre-commit'
```

node 12.x is now required to run cypress >= 7.0.

Related to T2912

The kafka version we are using is not available anymore on the
main apache mirrors. It was moved to the archive.
I take the opportunity to upgrade to kafka version to the version we are
using in production

Related to T3120

The new yarn's repository signing key was not recognized via the
old way to declare the key.
Using the new recommanded way[1] solves the problem.
It's the opportunity to migrate the declaration of the other
repositories to this method.

[1] https://wiki.debian.org/DebianRepository/UseThirdParty

Related to T3120

We chose to exclude the broken version by pinning 7.10.0 to -1 instead of
pinning the currently working 7.9.3 version to 1001. This will make sure we
don't forget to upgrade once the bugfix is published.

Related to T2791