(cherry picked from commit 5720671b)

exclude /dev/* from minirootfs.

https://github.com/gliderlabs/docker-alpine/issues/356
(cherry picked from commit 2f07f9eb)

add all_video

(cherry picked from commit dd591750)

(cherry picked from commit 4dfaaf89)

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
(cherry picked from commit bf993f3f)

(cherry picked from commit 72c7a7a3)

ref #9549

(cherry picked from commit e48587de)

this is needed for firware which is not automatically detected.

(cherry picked from commit 680b40d3)

let abuild manage the shared libs depends
actually use libxcomposite

(cherry picked from commit 33b92c79)

(cherry picked from commit 69b0b34f)

ref #10032
upstream: https://github.com/jvinet/knock/issues/54

fixes #10004

we store the key in our git repo so we are sure we get exactly same
build from same git checkout.

fixes #9552

(cherry picked from commit f897f1ae)

Patch is taken from upstream at https://github.com/curl/curls
The http2 code for connection checking needs a transfer to use. Make
sure a working one is set before handler->connection_check() is called.

(cherry picked from commit 4a7cbd15)

fixes #9991

fixes #9961

(cherry picked from commit b5fca727)

CVE-2019-2510, CVE-2019-2537