(cherry picked from commit 53f44c89)

(cherry picked from commit 8185e200)
(cherry picked from commit 6aac623b)

We have manifests for packages, no need to duplicate info
about sub-packages that aren't really packages.

Approved by: @adschellevis

(cherry picked from commit e713d12a)

(cherry picked from commit 7094a5cd)

(cherry picked from commit b60391da)
(cherry picked from commit 9b0ed8f8)
(cherry picked from commit 289c349b)
(cherry picked from commit c378d413)
(cherry picked from commit 6aaba834)
(cherry picked from commit 22928ac8)
(cherry picked from commit 15214186)
(cherry picked from commit 57fb95f8)
(cherry picked from commit c5ab052b)
(cherry picked from commit f39ce32b)
(cherry picked from commit 143a9b34)
(cherry picked from commit 029393ad)

(cherry picked from commit fe81d2e8)
(cherry picked from commit 58ca0284)

(cherry picked from commit 5ac1ab3f)

(cherry picked from commit d82608e1)
(cherry picked from commit 6f2bd698)
(cherry picked from commit c34ac4df)
(cherry picked from commit 1af75a82)

(cherry picked from commit 2155d52f)

(cherry picked from commit 38fc7d4d)

(cherry picked from commit 5a6f5b64)
(cherry picked from commit 8b6108a8)
(cherry picked from commit 8f00c9c7)

(cherry picked from commit bbab5ea3)

(cherry picked from commit 870fcde1)

(ipsec, "save password") change yes -> 1 for 28673. for https://github.com/opnsense/core/issues/1209

(cherry picked from commit 8459b38f)

We don't need 7z anymore, so it's better to use the lightweight package.

(cherry picked from commit 804d915b)

(cherry picked from commit d032a27b)

(cherry picked from commit 34604d5a)

(cherry picked from commit f8645117)

(cherry picked from commit 5365f380)

(cherry picked from commit 0fd14066)

Spotted by: pavelb

(cherry picked from commit c5c1c110)

(cherry picked from commit 6735984b)

PR: https://github.com/opnsense/core/issues/1214

(cherry picked from commit 5dc95bac)
(cherry picked from commit 6eea44ff)

(cherry picked from commit 1d4ca0ff)
(cherry picked from commit 0e03967c)

(cherry picked from commit 407dc8ae)

We can only update from -devel so we do not need this code now.

(cherry picked from commit 9859d51e)

(cherry picked from commit 436a9fa3)

(cherry picked from commit 2a76c4ab)

cleanup in services_dnsmasq_configure, remove duplicate code, for https://github.com/opnsense/core/issues/1182

(cherry picked from commit 52c78955)

It's only partially true and will be compeltely wrong in
the mid-term future.  ;)

(cherry picked from commit 6855a212)

(cherry picked from commit 2d2df026)

(cherry picked from commit c8524059)

(cherry picked from commit 9f315cec)

(cherry picked from commit 57ab36d3)
(cherry picked from commit 76c66b2e)
(cherry picked from commit 6e5f2354)

(openvpn client export) add X-Content-Type-Options: nosniff header, closes https://github.com/opnsense/core/issues/1204

(cherry picked from commit ab3098d6)