(cherry picked from commit 5399370d)

o Mirror/flavour settings now in firmware section
o Proper locking layer to prevent parallel invokes
o Can reattach to running background update
o Can even GUI-attach to cron job or console update

(cherry picked from commit 70998ed9)
(cherry picked from commit 2e10248c)
(cherry picked from commit 5a3a3a84)
(cherry picked from commit d2471552)
(cherry picked from commit 96be50d4)
(cherry picked from commit 9f7e1b89)
(cherry picked from commit 2fe4dce1)
(cherry picked from commit 419d6d72)
(cherry picked from commit eb7a9a31)
(cherry picked from commit 4dde2392)
(cherry picked from commit 951a2984)
(cherry picked from commit b891dc9f)
(cherry picked from commit d46366d2)
(cherry picked from commit 3201c221)

(cherry picked from commit d0f6c169)

(cherry picked from commit 2e5ab318)

(cherry picked from commit 2e6f92f6)
(cherry picked from commit 53e87f7a)
(cherry picked from commit 398ae5bb)
(cherry picked from commit 845b96d4)

(cherry picked from commit ebe341ec)

PR:           https://github.com/opnsense/core/issues/1004
Sponsored by: OSNet.eu -- https://www.osnet.eu/

(cherry picked from commit 449f506b)
(cherry picked from commit 304e2c3d)

Geez, PHP won't really tell if decode failed so we go full circle.

(cherry picked from commit 06ababd8)

(cherry picked from commit 17f656da)

While there zap a note that is obvious, because there is no button
and a text label saying what facility uses the cert...

(cherry picked from commit fb8c8b44)

Further proof that all of the system should use the plugin system,
as the dependencies are going to be unmanageable in the long run.
As soon as there is a new base service with its own include file
its definition will be missing.

(cherry picked from commit f441eae5)

(cherry picked from commit ae6b495e)
(cherry picked from commit 4dde1f08)
(cherry picked from commit e287db60)

(cherry picked from commit 5fa09cd4)

(cherry picked from commit 43f61b07)

(cherry picked from commit a4bb9cd5)

(cherry picked from commit cd724c2b)

(cherry picked from commit c43fcea6)
(cherry picked from commit 7086992b)
(cherry picked from commit fffcede4)
(cherry picked from commit 726e4c05)
(cherry picked from commit 5f14ec36)
(cherry picked from commit 0e916fb2)
(cherry picked from commit 61192fce)
(cherry picked from commit 741bae45)
(cherry picked from commit d5654b79)
(cherry picked from commit b0250b97)
(cherry picked from commit eaabe7f4)
(cherry picked from commit 26fbbb0f)
(cherry picked from commit 409a032c)
(cherry picked from commit ae7f0008)

(cherry picked from commit 41430381)
(cherry picked from commit 5937d16c)

(cherry picked from commit f6b554f8)

Suggested by: @fabianfrz

(cherry picked from commit 163ff001)

(cherry picked from commit ea31c809)

(cherry picked from commit f44b7e0c)
(cherry picked from commit 12febf02)
(cherry picked from commit 88b047c1)
(cherry picked from commit ef63bc68)
(cherry picked from commit d0c8782e)
(cherry picked from commit d7441537)

(cherry picked from commit fc59129e)

(cherry picked from commit aa510985)

(cherry picked from commit 1de9a183)

(cherry picked from commit 0e38a487)

(cherry picked from commit 80dc8457)
(cherry picked from commit 0273d265)

crash report, PHP Warning:  array_unique() expects parameter 1 to be array, null given in /usr/local/etc/inc/services.inc on line 1575

(cherry picked from commit 933ef0c3)

(cherry picked from commit e9225942)

fix for:
PHP Warning:  SQLite3Stmt::execute(): Unable to execute statement: database is locked in /usr/local/opnsense/scripts/OPNsense/CaptivePortal/process_accounting_messages.php on line 68

(cherry picked from commit 3f4d694f)

(cherry picked from commit 6d7c1cb7)

(interfaces.inc) cleanup interface_proxyarp_configure and actually use provided pid, closes https://github.com/opnsense/core/issues/981

(cherry picked from commit 6e4b9c4f)

(ids) add option to drop/reset suricata log file (eve.json*), closes https://github.com/opnsense/core/issues/997

(cherry picked from commit 40e4bdc2)
(cherry picked from commit 8de70201)

(cherry picked from commit 5402a89a)

o Allow to delete WAN, LAN is worse :P
o Zap spurious 4th column
o Shorten assign text prompt
o remove margianlly helpful message

(cherry picked from commit 39406886)

(cherry picked from commit bf745dea)

(cherry picked from commit d4d27c14)

(cherry picked from commit 44cd7aee)

(cherry picked from commit 65f074b6)

LAST TIME THIS WILL BE MOVED LIKE EVER. :P

(cherry picked from commit 05e52517)