(cherry picked from commit f67a89e)
Signed-off-by: Domen Kožar <domen@dev.si>

(cherry picked from commit 8143413)

(cherry picked from commit 41abf78)

Without this it would try to find files in qtbase.

(cherry picked from commit 7eb9a85)

(cherry picked from commit 242031a)

(cherry picked from commit c5f818f)

enginepkcs11: Removed from all-packages.nix
(cherry picked from commit 112a91c)

Tries to access path outside of sandbox.

(cherry picked from commit 693d0e7)

(cherry picked from commit ce6cd33)

(cherry picked from commit 95eaa3a)

- Description from upstream
- A more informative homepage
- Per upstream, pax-utils should work for unix-likes beyond linux

(cherry picked from commit 41e2ffa)

(cherry picked from commit 9298536)

…too much

(cherry picked from commit ede7097)

(cherry picked from commit d2cd304)

We did this for 2.2 (cc61d31) but
lost this for 2.4. This reduces the Apache closure size from 312 MiB
to 102 MiB (primarily by getting rid of -dev outputs).

(cherry picked from commit 4e54611)

This reduces the runtime closure size from 297 to 132 MiB.

(cherry picked from commit 96d7f35)

This reduces the closure size of gconf from 225 to 63 MiB.

(cherry picked from commit 3ab897c)

This reduces the runtime closure size from 80 to 23 MiB.

(cherry picked from commit 1824832)

This removes some -dev paths from the closure of subversionClient and
gitFull.

(cherry picked from commit f6c73f1)

This removes glib.dev from the runtime closure, reducing its size from
357 to 253 MiB.

(cherry picked from commit 7c60ba1)

This reduces its closure size from 484 to 281 MiB.

(cherry picked from commit 6dd5846)

This reduces the closure size from 566 to 438 MiB.

(cherry picked from commit 3ff08d6)

This reduces the closure size from 438 to 174 MiB.

(cherry picked from commit b751036)

(cherry picked from commit 7aee677)

(cherry picked from commit 3de6ccd)

Fixes NixOS#24126.

(cherry picked from commit 7ca6293)

(cherry picked from commit 203c492)

(cherry picked from commit a96e047)

(cherry picked from commit 66c384a)

(cherry picked from commit 877aaef)

(cherry picked from commit cc82423)

(cherry picked from commit 536b782)

(cherry picked from commit 13ab07d)

(cherry picked from commit 9b89d68)

PIC is used by default since 16.09

(cherry picked from commit b9948fe)

(cherry picked from commit 84db2df)

(cherry picked from commit c47cc7e)

(cherry picked from commit 9f86136)

(cherry picked from commit 8e3a595)

(cherry picked from commit 4a702e8)

(cherry picked from commit 9330991)

(cherry picked from commit c38d6b4)

cc @aszlig

(cherry picked from commit 6230362)

(cherry picked from commit 5c04b32)

(cherry picked from commit 520ce40)

(cherry picked from commit f0512f4)

(cherry picked from commit 2cef2c5)

backported because not functional due protocol changes: NixOS#24454 (comment)

(cherry picked from commit 80c916b)

(cherry picked from commit f9a1060)

This commit adds the FireHOL-software (v3.1.4) and it's dependency
iprange (v1.0.3). The FireHOL-package also contains FireQOS, which
is a human-friendly tc-wrapper. A NixOS-module to interact with
FireQOS was also provided.