* Add a util to see if containerd socket is working

* Use newer util to determine if containerd socket is active

* Fix circular dep

* Add a comment outlining socket check behaviour

Enhance NFS CI testing around NFS share validation.

This was an oversight when we added roles to privileges framework.
Allowlists are readonly for builtin privileges. In keeping with same
design, we should also prevent changing roles.

* Authenticate calls in `core.bulk` and pass `app`
* Audit calls made with `core.bulk`

* Expose more events to read-only admins

* Update docs

This commit refactors the portion of the directoryservices plugin
that interacts with secrets.tdb to use our general-purpose TDB
plugin and adds tests coverage for functionality.

Add allocation_size key to filesystem.stat and filesystem.listdir
output. This commit also expands documentation for filesystem.stat
output.

This commit adds read and write roles for endpoints related to
directory services LDAP, Active Directory, and Kerberos. Since
the functionality is all inter-connected, we use single set of
roles for all of these plugins.

This commit adds a basic description of some features that were
added after the developer documentation was initially written.

This mirrors validation that already takes place when attempting
to move the system dataset while AD is enabled.

If role prefix is defined, allow corresponding READ role to
subscribe to events by default.

This commit fixes a KeyError that may be raised when dataset
update payload does not contain the acltype or aclmode keys.

* Fix pagination parameters

* Add integration test

* Change graphite hostname attribute

(cherry picked from commit 9ec22a881896b82e5015e0b4e91d4b95fac47fd4)

* Add merge migration

---------
Co-authored-by: M. Rehan <mrehanlm93@gmail.com>

* Move common role based check to an asset for integration tests to be re-used

* Optimize app roles integration tests

* Optimize iscsi auth crud roles integration tests

* Optimize iscsi extent crud roles integration tests

* Optimize iscsi global crud roles integration tests

* Optimize iscsi host crud roles integration tests

* Optimize iscsi initiator crud roles integration tests

* Optimize iscsi portal crud roles integration tests

* Optimize iscsi target crud roles integration tests

* Optimize iscsi target extent crud roles integration tests

* Optimize nfs share crud roles integration tests

* Optimize smb share crud roles integration tests

* Optimize vm roles integration tests

* Fix import order

* Make sure we are not erroring out because of a role issue when expecting an exception

Setting a DISCARD aclmode when NFSv4 acltype is in use. The DISCARD
aclmode causes ZFS to strip ACL whenever chmod is called on a file.
This may lead to security incidents if administrator sets the
parameter without actually knowing what it does.

* fix minor issues in comments

* ignore non-crit ifaces in vrrp_events.py

* address review

* remove unnecessary is_alive() check

NAS-127008 / 24.10 / Do not use interface rename logic on systems that have NICs with dupl… (#13003)

* Do not use interface rename logic on systems that have NICs with duplicate hardware link addresses

* `DuplicateHardwareInterfaceLinkAddresses`