PR: https://github.com/opnsense/core/issues/1714

opnsense-update can still be used to selectively upgrade, but
here we shouldn't take any chances.  Worst case the system will
reboot prompting "nothing to do", which isn't true because we
only know about the base and kernel, not the packages state.

We want to pull changelogs also when we look for upgrade instructions,
in order to safely show then afterwards if we can indeed upgrade from
there.

This performs the full update, now we need to figure out how
this will look from the frontend side...

This is a shell script to make recovery as recoverable as
possible, now with a clear license and the ability to apply
inline or reboot for a clean configuration cycle.

error: setsockopt(..., SO_RCVBUF, ...) failed: No buffer space available

In the longrun all macro entries should go, but for now a replace should be sufficient.

ipsec, cleanup non-functional nat before ipsec logic and ui for 17.7. In case the feature will reemerge at some point, it would be better to move it to the firewall section anyway. for reference about this long standing issue see https://github.com/opnsense/core/issues/440