diff --git a/.etckeeper b/.etckeeper
index a7a771d0..88ec330b 100755
--- a/.etckeeper
+++ b/.etckeeper
@@ -1394,6 +1394,11 @@ maybe chmod 0644 'letsencrypt/csr/0404_csr-certbot.pem'
 maybe chmod 0644 'letsencrypt/csr/0405_csr-certbot.pem'
 maybe chmod 0644 'letsencrypt/csr/0406_csr-certbot.pem'
 maybe chmod 0644 'letsencrypt/csr/0407_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/0408_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/0409_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/0410_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/0411_csr-certbot.pem'
+maybe chmod 0644 'letsencrypt/csr/0412_csr-certbot.pem'
 maybe chmod 0700 'letsencrypt/keys'
 maybe chmod 0600 'letsencrypt/keys/0000_key-certbot.pem'
 maybe chmod 0600 'letsencrypt/keys/0001_key-certbot.pem'
@@ -1803,6 +1808,11 @@ maybe chmod 0600 'letsencrypt/keys/0404_key-certbot.pem'
 maybe chmod 0600 'letsencrypt/keys/0405_key-certbot.pem'
 maybe chmod 0600 'letsencrypt/keys/0406_key-certbot.pem'
 maybe chmod 0600 'letsencrypt/keys/0407_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/0408_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/0409_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/0410_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/0411_key-certbot.pem'
+maybe chmod 0600 'letsencrypt/keys/0412_key-certbot.pem'
 maybe chmod 0700 'letsencrypt/live'
 maybe chmod 0755 'letsencrypt/live/5f3b42dd7a0ab1cb.natalieandjoshua.com'
 maybe chmod 0644 'letsencrypt/live/5f3b42dd7a0ab1cb.natalieandjoshua.com/README'
@@ -1900,8 +1910,6 @@ maybe chmod 0755 'network/if-up.d/openssh-server'
 maybe chmod 0644 'network/interfaces'
 maybe chmod 0755 'network/interfaces.d'
 maybe chmod 0644 'networks'
-maybe chmod 0755 'newt'
-maybe chmod 0644 'newt/palette.original'
 maybe chmod 0755 'nginx'
 maybe chmod 0755 'nginx/conf.d'
 maybe chmod 0644 'nginx/fastcgi.conf'
@@ -1979,6 +1987,8 @@ maybe chmod 0644 'profile'
 maybe chmod 0755 'profile.d'
 maybe chmod 0644 'profile.d/Z97-byobu.sh'
 maybe chmod 0644 'profile.d/bash_completion.sh'
+maybe chmod 0644 'profile.d/gawk.csh'
+maybe chmod 0644 'profile.d/gawk.sh'
 maybe chmod 0644 'profile.d/sshpwd.sh'
 maybe chmod 0644 'profile.d/wifi-country.sh'
 maybe chmod 0644 'protocols'
diff --git a/X11/Xsession.d/90qt-a11y b/X11/Xsession.d/90qt-a11y
index 29923211..bd3d1fb6 100644
--- a/X11/Xsession.d/90qt-a11y
+++ b/X11/Xsession.d/90qt-a11y
@@ -8,5 +8,5 @@ QT_ACCESSIBILITY=1
 export QT_ACCESSIBILITY
 
 if [ -x "/usr/bin/dbus-update-activation-environment" ]; then
-        dbus-update-activation-environment --verbose --systemd QT_ACCESSIBILITY QT_LINUX_ACCESSIBILITY_ALWAYS_ON
+        dbus-update-activation-environment --verbose --systemd QT_ACCESSIBILITY
 fi
diff --git a/apt/apt.conf.d/01autoremove-kernels b/apt/apt.conf.d/01autoremove-kernels
index d197b013..7b05a01e 100644
--- a/apt/apt.conf.d/01autoremove-kernels
+++ b/apt/apt.conf.d/01autoremove-kernels
@@ -1,36 +1,36 @@
 // DO NOT EDIT! File autogenerated by /etc/kernel/postinst.d/apt-auto-removal
 APT::NeverAutoRemove
 {
-   "^linux-image-4\.14\.52-v7\+$";
    "^linux-image-4\.14\.62-v7\+$";
-   "^linux-headers-4\.14\.52-v7\+$";
+   "^linux-image-4\.14\.71-v7\+$";
    "^linux-headers-4\.14\.62-v7\+$";
-   "^linux-image-extra-4\.14\.52-v7\+$";
+   "^linux-headers-4\.14\.71-v7\+$";
    "^linux-image-extra-4\.14\.62-v7\+$";
-   "^linux-modules-4\.14\.52-v7\+$";
+   "^linux-image-extra-4\.14\.71-v7\+$";
    "^linux-modules-4\.14\.62-v7\+$";
-   "^linux-modules-extra-4\.14\.52-v7\+$";
+   "^linux-modules-4\.14\.71-v7\+$";
    "^linux-modules-extra-4\.14\.62-v7\+$";
-   "^linux-signed-image-4\.14\.52-v7\+$";
+   "^linux-modules-extra-4\.14\.71-v7\+$";
    "^linux-signed-image-4\.14\.62-v7\+$";
-   "^kfreebsd-image-4\.14\.52-v7\+$";
+   "^linux-signed-image-4\.14\.71-v7\+$";
    "^kfreebsd-image-4\.14\.62-v7\+$";
-   "^kfreebsd-headers-4\.14\.52-v7\+$";
+   "^kfreebsd-image-4\.14\.71-v7\+$";
    "^kfreebsd-headers-4\.14\.62-v7\+$";
-   "^gnumach-image-4\.14\.52-v7\+$";
+   "^kfreebsd-headers-4\.14\.71-v7\+$";
    "^gnumach-image-4\.14\.62-v7\+$";
-   "^.*-modules-4\.14\.52-v7\+$";
+   "^gnumach-image-4\.14\.71-v7\+$";
    "^.*-modules-4\.14\.62-v7\+$";
-   "^.*-kernel-4\.14\.52-v7\+$";
+   "^.*-modules-4\.14\.71-v7\+$";
    "^.*-kernel-4\.14\.62-v7\+$";
-   "^linux-backports-modules-.*-4\.14\.52-v7\+$";
+   "^.*-kernel-4\.14\.71-v7\+$";
    "^linux-backports-modules-.*-4\.14\.62-v7\+$";
-   "^linux-modules-.*-4\.14\.52-v7\+$";
+   "^linux-backports-modules-.*-4\.14\.71-v7\+$";
    "^linux-modules-.*-4\.14\.62-v7\+$";
-   "^linux-tools-4\.14\.52-v7\+$";
+   "^linux-modules-.*-4\.14\.71-v7\+$";
    "^linux-tools-4\.14\.62-v7\+$";
-   "^linux-cloud-tools-4\.14\.52-v7\+$";
+   "^linux-tools-4\.14\.71-v7\+$";
    "^linux-cloud-tools-4\.14\.62-v7\+$";
+   "^linux-cloud-tools-4\.14\.71-v7\+$";
 };
 /* Debug information:
 # dpkg list:
@@ -38,13 +38,13 @@ APT::NeverAutoRemove
 
 # list of different kernel versions:
 
-# Installing kernel:  (4.14.62-v7+)
-# Running kernel: ignored (4.14.52-v7+)
+# Installing kernel:  (4.14.71-v7+)
+# Running kernel: ignored (4.14.62-v7+)
 # Last kernel: 
 # Previous kernel: 
 # Kernel versions list to keep:
 
 # Kernel packages (version part) to protect:
-4\.14\.52-v7\+
 4\.14\.62-v7\+
+4\.14\.71-v7\+
 */
diff --git a/exim4/conf.d/acl/30_exim4-config_check_rcpt b/exim4/conf.d/acl/30_exim4-config_check_rcpt
index 69364eb3..b8bde1e3 100644
--- a/exim4/conf.d/acl/30_exim4-config_check_rcpt
+++ b/exim4/conf.d/acl/30_exim4-config_check_rcpt
@@ -2,6 +2,19 @@
 ### acl/30_exim4-config_check_rcpt
 #################################
 
+# define macros to be used below in this file to check recipient
+# local parts for strange characters. Documentation below.
+# This blocks local parts that begin with a dot or contain a quite
+# broad range of non-alphanumeric characters.
+
+.ifndef CHECK_RCPT_LOCAL_LOCALPARTS
+CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
+.endif
+
+.ifndef CHECK_RCPT_REMOTE_LOCALPARTS
+CHECK_RCPT_REMOTE_LOCALPARTS = ^[./|] : ^.*[@%!`#&?] : ^.*/\\.\\./
+.endif
+
 # This access control list is used for every RCPT command in an incoming
 # SMTP message. The tests are run in order until the address is either
 # accepted or denied.
@@ -46,7 +59,7 @@ acl_check_rcpt:
   # incorporated unthinkingly into a shell command line.
   #
   # These ACL components will block recipient addresses that are valid
-  # from an RFC2822 point of view. We chose to have them blocked by
+  # from an RFC5322 point of view. We chose to have them blocked by
   # default for security reasons.
   #
   # If you feel that your site should have less strict recipient
@@ -58,11 +71,8 @@ acl_check_rcpt:
   # default, and is applied to messages that are addressed to one of the
   # local domains handled by this host.
 
-  # The default value of CHECK_RCPT_LOCAL_LOCALPARTS is defined in
-  # main/01_exim4-config_listmacrosdefs:
-  # CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
-  # This blocks local parts that begin with a dot or contain a quite
-  # broad range of non-alphanumeric characters.
+  # The default value of CHECK_RCPT_LOCAL_LOCALPARTS is defined
+  # at the top of this file.
   .ifdef CHECK_RCPT_LOCAL_LOCALPARTS
   deny
     domains = +local_domains
diff --git a/exim4/conf.d/main/01_exim4-config_listmacrosdefs b/exim4/conf.d/main/01_exim4-config_listmacrosdefs
index 82b0d1ff..baa48faa 100644
--- a/exim4/conf.d/main/01_exim4-config_listmacrosdefs
+++ b/exim4/conf.d/main/01_exim4-config_listmacrosdefs
@@ -75,26 +75,6 @@ LOCAL_DELIVERY=mail_spool
 gecos_pattern = ^([^,:]*)
 gecos_name = $1
 
-# define macros to be used in acl/30_exim4-config_check_rcpt to check
-# recipient local parts for strange characters.
-
-# This macro definition really should be in
-# acl/30_exim4-config_check_rcpt but cannot be there due to
-# http://www.exim.org/bugzilla/show_bug.cgi?id=101 as of exim 4.62.
-
-# These macros are documented in acl/30_exim4-config_check_rcpt,
-# can be changed here or overridden by a locally added configuration
-# file as described in README.Debian section "Using Exim Macros to control
-# the configuration".
-
-.ifndef CHECK_RCPT_LOCAL_LOCALPARTS
-CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
-.endif
-
-.ifndef CHECK_RCPT_REMOTE_LOCALPARTS
-CHECK_RCPT_REMOTE_LOCALPARTS = ^[./|] : ^.*[@%!`#&?] : ^.*/\\.\\./
-.endif
-
 # always log tls_peerdn as we use TLS for outgoing connects by default
 .ifndef MAIN_LOG_SELECTOR
 MAIN_LOG_SELECTOR = +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified +tls_peerdn
diff --git a/exim4/exim4.conf.template b/exim4/exim4.conf.template
index ddd40a07..b03df965 100644
--- a/exim4/exim4.conf.template
+++ b/exim4/exim4.conf.template
@@ -78,26 +78,6 @@ LOCAL_DELIVERY=mail_spool
 gecos_pattern = ^([^,:]*)
 gecos_name = $1
 
-# define macros to be used in acl/30_exim4-config_check_rcpt to check
-# recipient local parts for strange characters.
-
-# This macro definition really should be in
-# acl/30_exim4-config_check_rcpt but cannot be there due to
-# http://www.exim.org/bugzilla/show_bug.cgi?id=101 as of exim 4.62.
-
-# These macros are documented in acl/30_exim4-config_check_rcpt,
-# can be changed here or overridden by a locally added configuration
-# file as described in README.Debian section "Using Exim Macros to control
-# the configuration".
-
-.ifndef CHECK_RCPT_LOCAL_LOCALPARTS
-CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
-.endif
-
-.ifndef CHECK_RCPT_REMOTE_LOCALPARTS
-CHECK_RCPT_REMOTE_LOCALPARTS = ^[./|] : ^.*[@%!`#&?] : ^.*/\\.\\./
-.endif
-
 # always log tls_peerdn as we use TLS for outgoing connects by default
 .ifndef MAIN_LOG_SELECTOR
 MAIN_LOG_SELECTOR = +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified +tls_peerdn
@@ -529,6 +509,19 @@ acl_check_mail:
 ### acl/30_exim4-config_check_rcpt
 #################################
 
+# define macros to be used below in this file to check recipient
+# local parts for strange characters. Documentation below.
+# This blocks local parts that begin with a dot or contain a quite
+# broad range of non-alphanumeric characters.
+
+.ifndef CHECK_RCPT_LOCAL_LOCALPARTS
+CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
+.endif
+
+.ifndef CHECK_RCPT_REMOTE_LOCALPARTS
+CHECK_RCPT_REMOTE_LOCALPARTS = ^[./|] : ^.*[@%!`#&?] : ^.*/\\.\\./
+.endif
+
 # This access control list is used for every RCPT command in an incoming
 # SMTP message. The tests are run in order until the address is either
 # accepted or denied.
@@ -573,7 +566,7 @@ acl_check_rcpt:
   # incorporated unthinkingly into a shell command line.
   #
   # These ACL components will block recipient addresses that are valid
-  # from an RFC2822 point of view. We chose to have them blocked by
+  # from an RFC5322 point of view. We chose to have them blocked by
   # default for security reasons.
   #
   # If you feel that your site should have less strict recipient
@@ -585,11 +578,8 @@ acl_check_rcpt:
   # default, and is applied to messages that are addressed to one of the
   # local domains handled by this host.
 
-  # The default value of CHECK_RCPT_LOCAL_LOCALPARTS is defined in
-  # main/01_exim4-config_listmacrosdefs:
-  # CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
-  # This blocks local parts that begin with a dot or contain a quite
-  # broad range of non-alphanumeric characters.
+  # The default value of CHECK_RCPT_LOCAL_LOCALPARTS is defined
+  # at the top of this file.
   .ifdef CHECK_RCPT_LOCAL_LOCALPARTS
   deny
     domains = +local_domains
diff --git a/init.d/udev b/init.d/udev
index 950dd366..9c394bbb 100755
--- a/init.d/udev
+++ b/init.d/udev
@@ -2,12 +2,20 @@
 ### BEGIN INIT INFO
 # Provides:          udev
 # Required-Start:    mountkernfs
-# Required-Stop:
+# Required-Stop:     umountroot
 # Default-Start:     S
-# Default-Stop:
+# Default-Stop:      0 6
 # Short-Description: Start systemd-udevd, populate /dev and load drivers.
 ### END INIT INFO
 
+PATH="/sbin:/bin"
+NAME="systemd-udevd"
+DAEMON="/lib/systemd/systemd-udevd"
+DESC="hotplug events dispatcher"
+PIDFILE="/run/udev.pid"
+CTRLFILE="/run/udev/control"
+OMITDIR="/run/sendsigs.omit.d"
+
 # we need to unmount /dev/pts/ and remount it later over the devtmpfs
 unmount_devpts() {
   if mountpoint -q /dev/pts/; then
@@ -42,15 +50,6 @@ create_dev_makedev() {
   fi
 }
 
-supported_kernel() {
-  case "$(uname -r)" in
-    2.[012345].*|2.6.[0-9]|2.6.[0-9][!0-9]*) return 1 ;;
-    2.6.[12][0-9]|2.6.[12][0-9][!0-9]*) return 1 ;;
-    2.6.3[0-1]|2.6.3[0-1][!0-9]*) return 1 ;;
-  esac
-  return 0
-}
-
 # shell version of /usr/bin/tty
 my_tty() {
   [ -x /bin/readlink ] || return 0
@@ -98,10 +97,6 @@ make_static_nodes() {
 
 ##############################################################################
 
-PATH="/sbin:/bin"
-NAME="systemd-udevd"
-DAEMON="/lib/systemd/systemd-udevd"
-DESC="the hotplug events dispatcher"
 
 [ -x $DAEMON ] || exit 0
 
@@ -114,11 +109,6 @@ fi
 
 . /lib/lsb/init-functions
 
-if ! supported_kernel; then
-  log_failure_msg "udev requires a kernel >= 2.6.32, not started"
-  log_end_msg 1
-fi
-
 if [ ! -e /proc/filesystems ]; then
   log_failure_msg "udev requires a mounted procfs, not started"
   log_end_msg 1
@@ -153,17 +143,17 @@ fi
 case "$1" in
     start)
     if [ ! -e "/run/udev/" ]; then
-	warn_if_interactive
+        warn_if_interactive
     fi
 
     if [ -w /sys/kernel/uevent_helper ]; then
-	echo > /sys/kernel/uevent_helper
+        echo > /sys/kernel/uevent_helper
     fi
 
     if ! mountpoint -q /dev/; then
-	unmount_devpts
-	mount_devtmpfs
-	[ -d /proc/1 ] || mount -n /proc
+        unmount_devpts
+        mount_devtmpfs
+        [ -d /proc/1 ] || mount -n /proc
     fi
 
     make_static_nodes
@@ -175,19 +165,23 @@ case "$1" in
     [ -x /sbin/restorecon ] && /sbin/restorecon -R /dev
 
     log_daemon_msg "Starting $DESC" "$NAME"
-    if $DAEMON --daemon; then
-	log_end_msg $?
+    if start-stop-daemon --start --name $NAME --user root --quiet \
+        --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile; then
+        # prevents udevd to be killed by sendsigs (see #791944)
+        mkdir -p $OMITDIR
+        ln -sf $PIDFILE $OMITDIR/$NAME
+        log_end_msg $?
     else
-	log_warning_msg $?
-	log_warning_msg "Waiting 15 seconds and trying to continue anyway"
-	sleep 15
+        log_warning_msg $?
+        log_warning_msg "Waiting 15 seconds and trying to continue anyway"
+        sleep 15
     fi
 
     log_action_begin_msg "Synthesizing the initial hotplug events"
     if udevadm trigger --action=add; then
-	log_action_end_msg $?
+        log_action_end_msg $?
     else
-	log_action_end_msg $?
+        log_action_end_msg $?
     fi
 
     create_dev_makedev
@@ -195,34 +189,44 @@ case "$1" in
     # wait for the systemd-udevd childs to finish
     log_action_begin_msg "Waiting for /dev to be fully populated"
     if udevadm settle; then
-	log_action_end_msg 0
+        log_action_end_msg 0
     else
-	log_action_end_msg 0 'timeout'
+        log_action_end_msg 0 'timeout'
     fi
     ;;
 
     stop)
     log_daemon_msg "Stopping $DESC" "$NAME"
-    if start-stop-daemon --stop --name $NAME --user root --quiet --oknodo --retry 5; then
-	log_end_msg $?
+    if start-stop-daemon --stop --name $NAME --user root --quiet \
+        --pidfile $PIDFILE --remove-pidfile --oknodo --retry 5; then
+        # prevents cryptsetup/dmsetup hangs (see #791944)
+        rm -f $CTRLFILE
+        log_end_msg $?
     else
-	log_end_msg $?
+        log_end_msg $?
     fi
     ;;
 
     restart)
     log_daemon_msg "Stopping $DESC" "$NAME"
-    if start-stop-daemon --stop --name $NAME --user root --quiet --oknodo --retry 5; then
-	log_end_msg $?
+    if start-stop-daemon --stop --name $NAME --user root --quiet \
+        --pidfile $PIDFILE --remove-pidfile --oknodo --retry 5; then
+        # prevents cryptsetup/dmsetup hangs (see #791944)
+        rm -f $CTRLFILE
+        log_end_msg $?
     else
-	log_end_msg $? || true
+        log_end_msg $? || true
     fi
 
     log_daemon_msg "Starting $DESC" "$NAME"
-    if $DAEMON --daemon; then
-	log_end_msg $?
+    if start-stop-daemon --start --name $NAME --user root --quiet \
+        --pidfile $PIDFILE --exec $DAEMON --background --make-pidfile; then
+        # prevents udevd to be killed by sendsigs (see #791944)
+        mkdir -p $OMITDIR
+        ln -sf $PIDFILE $OMITDIR/$NAME
+        log_end_msg $?
     else
-	log_end_msg $?
+        log_end_msg $?
     fi
     ;;
 
diff --git a/letsencrypt/csr/0408_csr-certbot.pem b/letsencrypt/csr/0408_csr-certbot.pem
new file mode 100644
index 00000000..91597465
--- /dev/null
+++ b/letsencrypt/csr/0408_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/csr/0409_csr-certbot.pem b/letsencrypt/csr/0409_csr-certbot.pem
new file mode 100644
index 00000000..51532149
--- /dev/null
+++ b/letsencrypt/csr/0409_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/csr/0410_csr-certbot.pem b/letsencrypt/csr/0410_csr-certbot.pem
new file mode 100644
index 00000000..27a0a0be
--- /dev/null
+++ b/letsencrypt/csr/0410_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/csr/0411_csr-certbot.pem b/letsencrypt/csr/0411_csr-certbot.pem
new file mode 100644
index 00000000..4b0c7e03
--- /dev/null
+++ b/letsencrypt/csr/0411_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/csr/0412_csr-certbot.pem b/letsencrypt/csr/0412_csr-certbot.pem
new file mode 100644
index 00000000..6d5cf50e
--- /dev/null
+++ b/letsencrypt/csr/0412_csr-certbot.pem
@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----
diff --git a/letsencrypt/keys/0408_key-certbot.pem b/letsencrypt/keys/0408_key-certbot.pem
new file mode 100644
index 00000000..f9224890
--- /dev/null
+++ b/letsencrypt/keys/0408_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/letsencrypt/keys/0409_key-certbot.pem b/letsencrypt/keys/0409_key-certbot.pem
new file mode 100644
index 00000000..96cf1b98
--- /dev/null
+++ b/letsencrypt/keys/0409_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/letsencrypt/keys/0410_key-certbot.pem b/letsencrypt/keys/0410_key-certbot.pem
new file mode 100644
index 00000000..0840200f
--- /dev/null
+++ b/letsencrypt/keys/0410_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/letsencrypt/keys/0411_key-certbot.pem b/letsencrypt/keys/0411_key-certbot.pem
new file mode 100644
index 00000000..21c63174
--- /dev/null
+++ b/letsencrypt/keys/0411_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/letsencrypt/keys/0412_key-certbot.pem b/letsencrypt/keys/0412_key-certbot.pem
new file mode 100644
index 00000000..05cb7073
--- /dev/null
+++ b/letsencrypt/keys/0412_key-certbot.pem
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/network/if-pre-up.d/wireless-tools b/network/if-pre-up.d/wireless-tools
index 1525c908..0bd400ef 100755
--- a/network/if-pre-up.d/wireless-tools
+++ b/network/if-pre-up.d/wireless-tools
@@ -138,6 +138,6 @@ apply_settings 2>/dev/null
 
 if [ -n "$FAIL" ]; then
 	FAIL=
-	ifconfig "$IFACE" up
+	/sbin/ip link set dev "$IFACE" up
 	apply_settings
 fi
diff --git a/newt/palette.original b/newt/palette.original
deleted file mode 100644
index e69de29b..00000000
diff --git a/openal/alsoft.conf b/openal/alsoft.conf
index 3e7d0eec..8061ed1c 100644
--- a/openal/alsoft.conf
+++ b/openal/alsoft.conf
@@ -149,10 +149,11 @@
 #  Selects the resampler used when mixing sources. Valid values are:
 #  point - nearest sample, no interpolation
 #  linear - extrapolates samples using a linear slope between samples
-#  sinc4 - extrapolates samples using a 4-point Sinc filter
-#  bsinc - extrapolates samples using a band-limited Sinc filter (varying
-#          between 12 and 24 points, with anti-aliasing)
-#  Specifying other values will result in using the default (linear).
+#  cubic - extrapolates samples using a Catmull-Rom spline
+#  bsinc12 - extrapolates samples using a band-limited Sinc filter (varying
+#            between 12 and 24 points, with anti-aliasing)
+#  bsinc24 - extrapolates samples using a band-limited Sinc filter (varying
+#            between 24 and 48 points, with anti-aliasing)
 #resampler = linear
 
 ## rt-prio: (global)
@@ -181,6 +182,14 @@
 #  than the default has no effect.
 #sends = 16
 
+## front-stablizer:
+#  Applies filters to "stablize" front sound imaging. A psychoacoustic method
+#  is used to generate a front-center channel signal from the front-left and
+#  front-right channels, improving the front response by reducing the combing
+#  artifacts and phase errors. Consequently, it will only work with channel
+#  configurations that include front-left, front-right, and front-center.
+#front-stablizer = false
+
 ## output-limiter:
 #  Applies a gain limiter on the final mixed output. This reduces the volume
 #  when the output samples would otherwise clamp, avoiding excessive clipping
@@ -210,8 +219,9 @@
 ## excludefx: (global)
 #  Sets which effects to exclude, preventing apps from using them. This can
 #  help for apps that try to use effects which are too CPU intensive for the
-#  system to handle. Available effects are: eaxreverb,reverb,chorus,compressor,
-#  distortion,echo,equalizer,flanger,modulator,dedicated
+#  system to handle. Available effects are: eaxreverb,reverb,autowah,chorus,
+#  compressor,distortion,echo,equalizer,flanger,modulator,dedicated,pshifter,
+#  fshifter
 #excludefx =
 
 ## default-reverb: (global)
@@ -277,7 +287,7 @@ nfc = true
 nfc-ref-delay =
 
 ## quad:
-#  Decoder configuration file for Quadrophonic channel output. See
+#  Decoder configuration file for Quadraphonic channel output. See
 #  docs/ambdec.txt for a description of the file format.
 quad =
 
@@ -310,12 +320,6 @@ surround71 =
 #  value of 0 means no change.
 #boost = 0
 
-## emulate-eax: (global)
-#  Allows the standard reverb effect to be used in place of EAX reverb. EAX
-#  reverb processing is a bit more CPU intensive than standard, so this option
-#  allows a simpler effect to be used at the loss of some quality.
-#emulate-eax = false
-
 ##
 ## PulseAudio backend stuff
 ##
@@ -441,9 +445,9 @@ surround71 =
 #buffer-size = 0
 
 ##
-## MMDevApi backend stuff
+## WASAPI backend stuff
 ##
-[mmdevapi]
+[wasapi]
 
 ##
 ## DirectSound backend stuff
diff --git a/profile.d/gawk.csh b/profile.d/gawk.csh
new file mode 100644
index 00000000..583d5bcd
--- /dev/null
+++ b/profile.d/gawk.csh
@@ -0,0 +1,11 @@
+alias gawkpath_default 'unsetenv AWKPATH; setenv AWKPATH `gawk -v x=AWKPATH "BEGIN {print ENVIRON[x]}"`'
+
+alias gawkpath_prepend 'if (! $?AWKPATH) setenv AWKPATH ""; if ($AWKPATH == "") then; unsetenv AWKPATH; setenv AWKPATH `gawk -v x=AWKPATH "BEGIN {print ENVIRON[x]}"`; endif; setenv AWKPATH "\!*"":$AWKPATH"'
+
+alias gawkpath_append 'if (! $?AWKPATH) setenv AWKPATH ""; if ($AWKPATH == "") then; unsetenv AWKPATH; setenv AWKPATH `gawk -v x=AWKPATH "BEGIN {print ENVIRON[x]}"`; endif; setenv AWKPATH "$AWKPATH"":\!*"'
+
+alias gawklibpath_default 'unsetenv AWKLIBPATH; setenv AWKLIBPATH `gawk -v x=AWKLIBPATH "BEGIN {print ENVIRON[x]}"`'
+
+alias gawklibpath_prepend 'if (! $?AWKLIBPATH) setenv AWKLIBPATH ""; if ($AWKLIBPATH == "") then; unsetenv AWKLIBPATH; setenv AWKLIBPATH `gawk -v x=AWKLIBPATH "BEGIN {print ENVIRON[x]}"`; endif; setenv AWKLIBPATH "\!*"":$AWKLIBPATH"'
+
+alias gawklibpath_append 'if (! $?AWKLIBPATH) setenv AWKLIBPATH ""; if ($AWKLIBPATH == "") then; unsetenv AWKLIBPATH; setenv AWKLIBPATH `gawk -v x=AWKLIBPATH "BEGIN {print ENVIRON[x]}"`; endif; setenv AWKLIBPATH "$AWKLIBPATH"":\!*"'
diff --git a/profile.d/gawk.sh b/profile.d/gawk.sh
new file mode 100644
index 00000000..c35471fa
--- /dev/null
+++ b/profile.d/gawk.sh
@@ -0,0 +1,31 @@
+gawkpath_default () {
+	unset AWKPATH
+	export AWKPATH=`gawk 'BEGIN {print ENVIRON["AWKPATH"]}'`
+}
+
+gawkpath_prepend () {
+	[ -z "$AWKPATH" ] && AWKPATH=`gawk 'BEGIN {print ENVIRON["AWKPATH"]}'`
+	export AWKPATH="$*:$AWKPATH"
+}
+
+gawkpath_append () {
+	[ -z "$AWKPATH" ] && AWKPATH=`gawk 'BEGIN {print ENVIRON["AWKPATH"]}'`
+	export AWKPATH="$AWKPATH:$*"
+}
+
+gawklibpath_default () {
+	unset AWKLIBPATH
+	export AWKLIBPATH=`gawk 'BEGIN {print ENVIRON["AWKLIBPATH"]}'`
+}
+
+gawklibpath_prepend () {
+	[ -z "$AWKLIBPATH" ] && \
+		AWKLIBPATH=`gawk 'BEGIN {print ENVIRON["AWKLIBPATH"]}'`
+	export AWKLIBPATH="$*:$AWKLIBPATH"
+}
+
+gawklibpath_append () {
+	[ -z "$AWKLIBPATH" ] && \
+		AWKLIBPATH=`gawk 'BEGIN {print ENVIRON["AWKLIBPATH"]}'`
+	export AWKLIBPATH="$AWKLIBPATH:$*"
+}
diff --git a/rc0.d/K01udev b/rc0.d/K01udev
new file mode 120000
index 00000000..f5866f9f
--- /dev/null
+++ b/rc0.d/K01udev
@@ -0,0 +1 @@
+../init.d/udev
\ No newline at end of file
diff --git a/rc6.d/K01udev b/rc6.d/K01udev
new file mode 120000
index 00000000..f5866f9f
--- /dev/null
+++ b/rc6.d/K01udev
@@ -0,0 +1 @@
+../init.d/udev
\ No newline at end of file