Add --chown option to add/copy

Hi there,
I came across a permission error while I was automating the migration of a Redis setup into a container. Basically, buildah copy was copying my file into the container and leaving it owned by root.
While I know that an extra buildah run containerID chown redis:redis /etc/redis.conf would solve that issue, I would love to have a --chown option in buildah add/copy. I know that docker added something similar recently, but I haven't looked into their implementation.
This PR is simply a PoC to to get a feedback from you. It still needs some improvements, so if you think I can go ahead, I'll look into adding in some tests, docs and refactor the code.
This is an example of how it works:
# Create container
$ sudo ./buildah from registry.access.redhat.com/rhscl/redis-32-rhel7
redis-32-rhel7-working-container-15

# Copy some data into the container, setting the owner
$ sudo ./buildah copy --chown redis:redis redis-32-rhel7-working-container-15 contrib /data/contrib
$ sudo ./buildah copy --chown redis:redis redis-32-rhel7-working-container-15 add.go /data/
$ sudo ./buildah copy --chown redis:redis redis-32-rhel7-working-container-15 add.go /data/
$ sudo ./buildah copy --chown redis:redis redis-32-rhel7-working-container-15 https://github.com/projectatomic/buildah/blob/master/README.md /data/

# Owner is properly set
$ sudo ./buildah run redis-32-rhel7-working-container-15 sh
sh-4.2$ ls /data -l
total 64
-rw-------. 1 redis redis 45981 Nov 27 14:41 README.md
-rw-rw-r--. 1 redis redis  8779 Nov 27 14:35 add.go
drwxr-xr-x. 4 redis redis  4096 Nov 27 14:40 contrib
sh-4.2$ ls /data/contrib/ -l
completions/ rpm/
sh-4.2$ ls /data/contrib/rpm/buildah.spec -l
-rw-rw-r--. 1 redis redis 5347 Nov 23 13:49 /data/contrib/rpm/buildah.spec
sh-4.2$

Thanks for looking into this!

@bertinatto Thanks for the PR/PoC.  The change sounds good to me, but I'll let @nalind and @rhatdan give the definitive answer.  If we do move forward, we'll want to add some tests and man page changes too.
The test failure is not related to this change.  @rhatdan the error is these two versions aren't matching:
buildah version: 0.8
buildah rpm version: 0.7
Does buildah.spec need to have it's version bumped?  It's set at 0.7 atm.

bot, add author to whitelist

Since this made it into Docker, I agree that it should be implemented.

https://github.com/moby/moby/pull/34263

Thank you for the initial look!
I've made a few adjustments, added a few tests and updated the man pages. Would you mind taking another look?
The second commit is just to make the tests pass. I tried to make my code simpler to avoid this change, but I' afraid there isn't much I can do. Any suggestions?

LGTM
@nalind WDYT?

Failing test seems to be unrelated to this patch:
# error pulling image "registry.fedoraproject.org/fedora:27": Error initializing image from source docker://registry.fedoraproject.org/fedora:27: pinging docker registry returned: error pinging repository, response code 503

@bertinatto I concur that it's unrelated.  The fedora site seems to be hiccuping like crazy today.  I've seen this error in other PR's this morning and I am having difficulty pulling kits from there outside of GitHub.

I talked to @nalind offline and he expresses concern about symlink attacks.
os.Chown() follows symlinks, we need to at least switch to os.Lchown, so it will not follow symlinks, and perhaps it is best if we did the chown within a chroot.

Cool, tests are passing now!

Ok I will merge, the question is do we need more protection with the chown call then just lchown.

@bertinatto thanks for this.
@rh-atomic-bot r+


After 2019.1, look into adding a community release checklist to the repo.

There is an internal (to Edalex) checklist, using Monday.com .  Reach out to the equella-dev group if folks want to get involved / have questions.


Group preliquidity orders as single toast

Closes #3640

are we not showing each order in the bell? not seeing that happen
"Bell message should show each individual order"

Whoops, my mistake. Yes, we should be showing the individual orders under the bell. Will fix.


Update style-guide.md

Added our intent to now use the NS_DESIGNATED_INITIALISER in order to make our objective-c code more Swift-like and Swift compatible.

:+1:


nest v8

did you plan to upgrade this module to be compatible with nestjs v8?

Possibly will make an update for v8 soon!


Catch up with message renaming in all files

Was broken with https://github.com/ArachisH/Sulakore/commit/e2db4bb

Ah, I forgot to include it in my commit. Thanks!


[CFP]: How Academic OSPOs Are Amplifying Research Impact … and How Industry OSPOs Can Benefit Please provide more details about your proposal

Session Title
How Academic OSPOs Are Amplifying Research Impact … and How Industry OSPOs Can Benefit
Please provide more details about your proposal
Session Description
OSPOs in academia need to be in alignment with the missions of universities, including teaching, research, and public service. These missions are very different from the missions of industrial corporations. But the strategic goals of both academic and industry OSPOs are complementary and enable acceleration of innovation that benefits all stakeholders. In this presentation we will provide an overview of the efforts being made at UC Santa Cruz to amplify the impact of academic research by leveraging open source ecosystems, and how these activities are opening opportunities that can benefit  industry partners – both through the engagement with university researchers and the education of the next generation of technical professionals.
Benefits to the Ecosystem
The audience will learn about:

Efforts to support academic research based in open source ecosystems that align with industry practices;
Development of innovative curricula and mentoring programs that teach open source techniques to the next generation of technical professionals; and
How industry OSPOs and the wider open source community can support these efforts and benefit from their outcomes.

Help us narrow down the focus a bit more. Please choose the OSPO related topic that best describes your proposal.
Evangelizing OSS Use and Ecosystem Participation, Hosting OSS Projects and Growing Communities
What level of experience should the audience have to best understand your presentation?
No response
Speaker Name
Carlos Maltzahn and Stephanie Lieggi
Speaker Bio
Carlos Maltzahn is the founding director for the Center for Research in Open Source Software (cross.ucsc.edu) and the new UC Santa Cruz OSPO. He is an Adjunct Professor of Computer Science & Engineering at UC Santa Cruz, a co-founder of the Ceph open source distributed storage system project, and co-founded the Systems Research Lab, known for its cutting-edge work on programmable storage systems, big data storage & processing, scalable data management, distributed system performance management, and practical reproducible evaluation of computer systems. Prior to joining UCSC, he was a Performance Engineer, Netapp.  (see people.ucsc.edu/carlosm)
Stephanie Lieggi is assistant director for CROSS and the UC Santa Cruz OSPO. In her current roles she supports the work of academic-based open source projects and enables a sustainable contributor base through the establishment of hands-on mentorship programs. Stephanie promotes the use of open source in academic settings as well as increasing diversity and inclusion in open source ecosystems. Prior to joining UCSC, she was a Senior Research Associate and Adjunct Professor at the Center for Nonproliferation Studies (CNS) at the Middlebury Institute of International Studies at Monterey (MIIS).
Speaker preferred pronouns
Carlos Maltzahn (he, him)
Stephanie Lieggi (she, her)

Thanks a lot @slieggi! this topic looks great to schedule for the April OSPOlogy session (cc @caniszczyk )

@slieggi I have scheduled and published the session for April, Wed 6th. RSVP is already open: https://community.linuxfoundation.org/events/details/lfhq-todo-group-presents-how-academic-ospos-are-amplifying-research-impact/
Please let me know if you'd like to change anything from your bio or topic description 🙂


Asset lost after env.close() then creating new env

Run test_export_metadrive_scenario(render_export_env=True, render_load_env=True) in test_export_scene.py, you will see the second environment fails to render road structure.

Good to know. I will fix this

It is due to del env. Already remove all del env

I think del env may clean some environment variables related to s_rgb color format, which is required to correct road surface color.


TransportContext.java:352|Fatal (HANDSHAKE_FAILURE): no cipher suites in common (  "throwable"

Tried to run ldaps on Ubuntu but it does not work, ldap - ok.
Environment:
oc: Ubuntu 22.04.1
OS name: "linux", version: "6.5.0-28-generic", arch: "amd64", family: "unix"
ldap-server version: v.1.0.0
openjdk 11.0.22
Apache Maven 3.6.3
Steps:

Create key store:
keytool -validity 365 -genkey -alias lda-example -keyalg RSA -keystore ../ldap-ad-it/keystore/ldap.example.keystore -storepass 1Q2w3e4r -keypass 1Q2w3e4r -dname cn=ldap.example
Run server:
java -Djavax.net.debug=all -jar target/ldap-server.jar -sp 10636 -skf ../ldap-ad-it/keystore/ldap.example.keystore -skp 1Q2w3e4r
Run client
LDAPTLS_REQCERT=never  ldapsearch -H ldaps://ldap.example:10636 -x -b "ou=users,dc=ldap,dc=example" -D "uid=admin,ou=system" -w secret

Expected result:
some data from ldap request
Actual Result:
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
Attached you can find ldap server log:
HANDSHAKE_FAILURE.txt

Hi
I was able to reproduce your issue. So far I think that the problem is not with the server. Because I used jExplorer and i was able to connect and search for information from the server.
I guess that problem was with certificates. We should define CA as localhost and then it works.
So the client should have only generated the certificate from the server's key pair stored in the JKS keystore. That is it. It is so simple, that it is hard to get it :D
btw. Djavax.net.debug=all gives me only bad clues...

So far I think that the problem is not with the server.
Right
I guess that problem was with certificates. We should define CA as localhost and then it works.
Thanks. I regenerated certificates and ldaps works ok after it.
The problem was in certificates.


Rogue should provide some basic api services

There should be an optional library/bundle that provides a few basic robot apis (services) that are incredibly common.
Examples:

Drive

@WillYingling this would be a good place to start under an api subproject that provides just a bunch of common interfaces, like Drive, etc.

Implementation of this issue is being reviewed in #18


w8a8_fp8 quantization

I quantized opt-125M to fp8, according to  llama3_example.py, but I find that model saved as fp16, although it has scalar, like this:

I am wondering if this is an expected behavior.

Weight scales are stored as either fp16 or fp32

Can you share the config file produce for the model, any modifications you made to the script and confirm the versions you used?

I use llm-compressor==0.1.0.
config file:
{   "_name_or_path": "/workspace/Meta-Llama-3.1-8B-Instruct/",   "architectures": [     "LlamaForCausalLM"   ],   "attention_bias": false,   "attention_dropout": 0.0,   "bos_token_id": 128000,   "eos_token_id": [     128001,     128008,     128009   ],   "head_dim": 128,   "hidden_act": "silu",   "hidden_size": 4096,   "initializer_range": 0.02,   "intermediate_size": 14336,   "max_position_embeddings": 131072,   "mlp_bias": false,   "model_type": "llama",   "num_attention_heads": 32,   "num_hidden_layers": 32,   "num_key_value_heads": 8,   "pretraining_tp": 1,   "rms_norm_eps": 1e-05,   "rope_scaling": {     "factor": 8.0,     "high_freq_factor": 4.0,     "low_freq_factor": 1.0,     "original_max_position_embeddings": 8192,     "rope_type": "llama3"   },   "rope_theta": 500000.0,   "tie_word_embeddings": false,   "torch_dtype": "bfloat16",   "transformers_version": "4.46.3",   "use_cache": true,   "vocab_size": 128256 }
conversion script:
`
from transformers import AutoModelForCausalLM, AutoTokenizer
from llmcompressor.modifiers.quantization import QuantizationModifier
from llmcompressor.transformers import oneshot
MODEL_ID = "/workspace/llm_workspace/opt-125m"
model = AutoModelForCausalLM.from_pretrained(
MODEL_ID, device_map="auto", torch_dtype="auto"
)
tokenizer = AutoTokenizer.from_pretrained(MODEL_ID)
recipe = QuantizationModifier(
targets="Linear", scheme="FP8_DYNAMIC", ignore=["lm_head"]
)
oneshot(model=model, recipe=recipe)
print("========== SAMPLE GENERATION ==============")
input_ids = tokenizer("Hello my name is", return_tensors="pt").input_ids.to("cuda")
output = model.generate(input_ids, max_new_tokens=20)
print(tokenizer.decode(output[0]))
print("==========================================")
SAVE_DIR = "./" + "opt-125m" + "-FP8-Dynamic"
model.save_pretrained(SAVE_DIR)
tokenizer.save_pretrained(SAVE_DIR)
`

I used llmcompressor=0.1.0, these are script and config file after conversion, and I also tried 0.3.0, the result is same:
{
  "_name_or_path": "/workspace/llm_workspace/opt-125m",
  "_remove_final_layer_norm": false,
  "activation_dropout": 0.0,
  "activation_function": "relu",
  "architectures": [
    "OPTForCausalLM"
  ],
  "attention_dropout": 0.0,
  "bos_token_id": 2,
  "do_layer_norm_before": true,
  "dropout": 0.1,
  "enable_bias": true,
  "eos_token_id": 2,
  "ffn_dim": 3072,
  "hidden_size": 768,
  "init_std": 0.02,
  "layer_norm_elementwise_affine": true,
  "layerdrop": 0.0,
  "max_position_embeddings": 2048,
  "model_type": "opt",
  "num_attention_heads": 12,
  "num_hidden_layers": 12,
  "pad_token_id": 1,
  "prefix": "</s>",
  "torch_dtype": "float16",
  "transformers_version": "4.46.3",
  "use_cache": true,
  "vocab_size": 50272,
  "word_embed_proj_dim": 768
}

from transformers import AutoModelForCausalLM, AutoTokenizer

from llmcompressor.modifiers.quantization import QuantizationModifier
from llmcompressor.transformers import oneshot

MODEL_ID = "/workspace/llm_workspace/opt-125m"

# Load model.
model = AutoModelForCausalLM.from_pretrained(
    MODEL_ID, device_map="auto", torch_dtype="auto"
)
tokenizer = AutoTokenizer.from_pretrained(MODEL_ID)

# Configure the quantization algorithm and scheme.
# In this case, we:
#   * quantize the weights to fp8 with per channel via ptq
#   * quantize the activations to fp8 with dynamic per token
recipe = QuantizationModifier(
    targets="Linear", scheme="FP8_DYNAMIC", ignore=["lm_head"]
)

# Apply quantization.
oneshot(model=model, recipe=recipe)

# Confirm generations of the quantized model look sane.
print("========== SAMPLE GENERATION ==============")
input_ids = tokenizer("Hello my name is", return_tensors="pt").input_ids.to("cuda")
output = model.generate(input_ids, max_new_tokens=20)
print(tokenizer.decode(output[0]))
print("==========================================")

# Save to disk in compressed-tensors format.
SAVE_DIR = "./" + "opt-125m" + "-FP8-Dynamic"
model.save_pretrained(SAVE_DIR)
tokenizer.save_pretrained(SAVE_DIR)

I also want to know if the successful conversion result should be weight fp8, weight scale fp16 or fp32, and zero_point doesn't seem to be very useful?

And, when I try the command according to the docs:
lm_eval   --model vllm   --model_args pretrained=$MODEL,add_bos_token=True   --tasks gsm8k  --num_fewshot 5 --batch_size auto --limit 250
vllm can not initialize the w8a8 fp8 model architecture correctly

Hey @hochen1 - we are in progress of updating our integration into AutoModelForCausalLM are pushed the updated examples to the main branch

@horheynm - can you share instructions for installing from source that would work with the examples on main?
@hochen1 - for now, you can unblock yourself by running the examples on v0.3.0 (https://github.com/vllm-project/llm-compressor/tree/0.3.0/examples/quantization_w8a8_fp8). These use SparseAutoModelForCausalLM which handles the saving and loading properly

Sorry for the issue!

Can you let me know if this resolves your issue?

Problem solved! Thank you for your time.

Thanks!


No WiFi networks found

I have successfully installed raspberry-wifi-conf on RPi with raspbian-jessie according to manual, started node with server.js, AP is started, I connect to AP go to <IP_ADDRESS>:88, and no WiFi networks are found, I click Rescan, see on node.js console that rescan wifi was requested, but nothing happens, where should I search for the problem?

I would try and narrow down this issue to see if the server actually gets the request to scan for networks. See this file: https://github.com/sabhiram/raspberry-wifi-conf/blob/master/app/api.js#L45
That is the API endpoint in the server which triggers an "iwlist scan" (see here: https://github.com/sabhiram/raspberry-wifi-conf/blob/master/app/iwlist.js#L22).
However, it might be a couple of other issues:

You might need to run as sudo for iwlist scan to work - are you running the service as sudo?
I noticed another thread online which might speak of a similar issue (see this: http://raspberrypi.stackexchange.com/questions/23125/raspbian-linux-no-wifi-scan-results-from-iwlist-wlan0-scan)

Hope this helps. I am super swamped at my new company and have 0 time to repro and debug this. Please let me know if this worked for you! I appreciate you taking the time to open this issue and help out!

Some wifi-adapter do not support scanning via "iwlist scan" when in ap-mode.
Right now, i try to refactor the code to use "iw dev wlan0 scan ap-force" instead.
I update this post if i have success.

Thanks for the update! I think the hardest part would be to correctly figure out which type of adapter supports what type of scan. That is a bit too involved for me at the moment as I am super swamped with work.
I will look into this when I get some time.


RewriteTest / YamlResourceLoader Enhancements

What's changed?

YamlResourceLoader now uses jackson to try to instantiate imperative recipes with zero args if basic reflection fails. And, reverted change to RecipeSpec which made it scanRuntimeClasspath unnecessarily for yaml recipes. Fixes #3414
adding RewriteTest/RecipeSpec recipeFromResources option to scan all rewrite yamls on classpath (ignoring classes. Fixes #3096

Anything in particular you'd like reviewers to focus on?

In ClasspathScanningLoader, the constructor overloads were starting to get diverse in functionality, so I opted for a factory method for this new scenario. Open to changing it
In ClasspathScanningLoader, there's this comment, which I'm not sure is accurate today; I think the new case RecipeLifecycleTest::declarativeRecipeChainFromResourcesIncludesImperativeRecipesInDescriptors disproves it https://github.com/openrewrite/rewrite/blob/1834d4e3fd3253a6f604f7b34cfc14d02ee66662/rewrite-core/src/main/java/org/openrewrite/config/ClasspathScanningLoader.java#L102-L106
I considered removing the reflective attempt to instantiate the recipe and only using jackson, but that led to a regression with recipes like this, because jackson (for some reason) picked the 1-arg constructor (passing a null value) instead of the annotated zero-arg constructor (which would have set the required field by default) https://github.com/openrewrite/rewrite-migrate-java/blame/main/src/main/java/org/openrewrite/java/migrate/UseJavaUtilBase64.java

Anyone you would like to review specifically?
@sambsnyd
Have you considered any alternatives or workarounds?

Scanning the full runtime classpath when you're just looking for Yaml files is slow and doesn't seem beneficial
You can also explicitly list the yamls you care about when defining your RecipeSpec, but with recursive validation, if you're testing a recipe which chains to many recipes across many files, then that becomes painful to maintain

Checklist

[X] I've added unit tests to cover both positive and negative cases
[X] I've added the license header to any new files through ./gradlew licenseFormat
[X] I've used the IntelliJ IDEA auto-formatter on affected files
[ ] I've updated the documentation (if applicable)

looking at the failing test, it was actually failing for the "wrong" reason before: "recipe 'org.openrewrite.text.ChangeText' does not exist."
now, it's passing, because the single toText field on ChangeText isn't actually annotated as nullable.
I'm thinking we fix it by adjusting NullUtils::findNonNullFields to include fields annotated with Option and not explicitly setting required=false ? Will draft that commit now and add to the PR


update .dockerfunc: Chrome's function

The "--user-data-dir=/data" flag might be a duplicate, since a similar flag was provided in the CMD command in the respective Dockerfile (line 40).
excerpt from the Dockerfile
# Autorun chrome
ENTRYPOINT [ "/usr/bin/google-chrome" ]
CMD [ "--user-data-dir=/data", "--no-sandbox" ]

=======
chrome(){
	del_stopped chrome

	docker run -d \
		--memory 5gb \
		--net host \
		-v /etc/localtime:/etc/localtime:ro \
		-v /tmp/.X11-unix:/tmp/.X11-unix \
		-e DISPLAY=unix$DISPLAY \
		-v $HOME/Downloads:/root/Downloads \
		-v $HOME/Pictures:/root/Pictures \
		-v $HOME/Torrents:/root/Torrents \
		-v $HOME/.chrome:/data \
		--device /dev/snd \
		--device /dev/dri \
		--device /dev/video0 \
		--name chrome \
		jess/chrome --user-data-dir=/data --force-device-scale-factor=1 "$@"

	# exit current shell
	exit 0
}

Side Note Question: Did you add the HiDPI support flag (--force-device-scale-factor=1) because this is something unique to your env (i.e. your monitor) or because at the time it was required to run the container? The matching pull request will only be an update for the data dir ... but wanted to ask because it crashes my container.

No sorry these are my dotfiles and I use this function everyday feel free to fork

The scale factor is because of hidpi is a personal preference and since I am overriding the cmd the data dir is not duplicated. It is how the cmd directive works in a dockerfile

I purposely run with the sandbox because I want OpenGL and crap to work right, watch my YouTube video from container camp and you will understand

nice, i see ...mucho learnings here - thanks! your personal files are dope! Will take advice and keep any nuances in my fork. thx

hi @jfrazelle --- I am wondering why you are not passing --no-sandbox in your dockerfunc for chrome? i.e. adding that arg to the override too?  -- adding that solves my problem - otherwise the other two args are not passed to the container (based on the docker inspect info --bug?) -- suspect maybe I am missing some context ...thanks

It works better on my machine this way because I have the Graphics lobs in the container I purposely override the --no-sandbox so the default image works for people out of the box

On Jul 15, 2015, at 22:04, Jaren Glover<EMAIL_ADDRESS>wrote:
hi @jfrazelle --- I am wondering why you are not passing --no-sandbox in your dockerfunc for chrome? i.e. adding that arg to the override too? -- adding that solves my problem - otherwise the other two args are not passed to the container (based on the docker inspect info --bug?) -- suspect maybe I am missing some context ...thanks
—
Reply to this email directly or view it on GitHub.

If you watch my talk from container camp I explain all of this

On Jul 15, 2015, at 22:04, Jaren Glover<EMAIL_ADDRESS>wrote:
hi @jfrazelle --- I am wondering why you are not passing --no-sandbox in your dockerfunc for chrome? i.e. adding that arg to the override too? -- adding that solves my problem - otherwise the other two args are not passed to the container (based on the docker inspect info --bug?) -- suspect maybe I am missing some context ...thanks
—
Reply to this email directly or view it on GitHub.


Pull request to merge Mauro's new code into this repo

"took data out of textarea and using csv file instead. put trail text …in center of the circle."

:+1:  Merging into CFM's repo!


Version switcher is available for predicates

When switching to 1.14 or 1.13 on the predicates page, the loot-table schema is loaded. Instead, the 1.13 and 1.14 versions should not be visible.
Preferred solution would not require hard coding this. But loading all version schema's on startup should also be avoided.

Will be fixed with #50


It is impossible to launch carcel/fpm images

Relates to  #123
It seems that nginx and akeneo-fpm images don't wait for each other on launching, and close immediately.
After running docker-compose up -d, both are immediately with status "EXIT".

docker run carcel/fpm provides the following output:
[19-Jan-2017 18:57:43] ERROR: unable to bind listening socket for address '/run/php/php7.1-fpm.sock': No such file or directory (2)
[19-Jan-2017 18:57:43] ERROR: FPM initialization failed

Problem is not present in php-5.6 and php-7.0 branches, only php-7.1 and master.


Launch Failed with vkcube.exe In Vulkan SDK

Description
When i try to launch the vkcube.exe in the vulkan sdk, the vkcube automatically close in a second.
the log:
RDOC 005244: [16:30:32]    win32_process.cpp( 514) - Log     - Running process D:\VulkanSDK\<IP_ADDRESS>\Bin\vkcube.exe
RDOC 005244: [16:30:32]    win32_process.cpp( 597) - Log     - Injecting renderdoc into process 13424
RDOC 013424: [16:30:32]             core.cpp( 440) - Log     - RenderDoc v1.11 Windows 64-bit Release (c5480aa622a2f5447c87d23ccc0b08fb320b0169) capturing application
RDOC 013424: [16:30:32]      crash_handler.h( 150) - Log     - Timer Waiting for crash handling server - 49.737 ms
RDOC 013424: [16:30:32]      crash_handler.h( 156) - Log     - Created crash-handling server \\.\pipe\RenderDocBreakpadServer1787540763
RDOC 013424: [16:30:32]      crash_handler.h(  87) - Log     - Connecting to server \\.\pipe\RenderDocBreakpadServer1787540763
RDOC 013424: [16:30:32]         settings.cpp( 460) - Log     - Loading config from C:\Users\tk\AppData\Roaming\renderdoc\renderdoc.conf
RDOC 013424: [16:30:32]         settings.cpp( 311) - Log     - DXBC.Debug.SearchDirPaths has been customised from [0] to [1]
RDOC 013424: [16:30:32]   win32_libentry.cpp(  66) - Log     - Loading into D:\VulkanSDK\<IP_ADDRESS>\Bin\vkcube.exe
RDOC 013424: [16:30:32]  sys_win32_hooks.cpp(  82) - Log     - Registering Win32 system hooks
RDOC 013424: [16:30:32]      d3d11_hooks.cpp(  44) - Log     - Registering D3D11 hooks
RDOC 013424: [16:30:32]        amd_hooks.cpp( 151) - Log     - Registering AMD hooks
RDOC 013424: [16:30:32]      nvapi_hooks.cpp( 117) - Log     - Registering nvidia hooks
RDOC 013424: [16:30:32]      d3d12_hooks.cpp( 173) - Log     - Registering D3D12 hooks
RDOC 013424: [16:30:32]       d3d8_hooks.cpp(  36) - Log     - Registering D3D8 hooks
RDOC 013424: [16:30:32]       d3d9_hooks.cpp(  45) - Log     - Registering D3D9 hooks
RDOC 013424: [16:30:32]       dxgi_hooks.cpp( 250) - Log     - Registering DXGI hooks
RDOC 013424: [16:30:32]        egl_hooks.cpp( 992) - Log     - Registering EGL hooks
RDOC 013424: [16:30:32]         gl_hooks.cpp( 263) - Log     - Registering OpenGL hooks
RDOC 013424: [16:30:32]        wgl_hooks.cpp( 616) - Log     - Registering WGL hooks
RDOC 013424: [16:30:32]         vk_layer.cpp(  99) - Log     - Registering Vulkan hooks
RDOC 013424: [16:30:32]      crash_handler.h(  51) - Log     - Re-using crash-handling server \\.\pipe\RenderDocBreakpadServer1787540763
RDOC 013424: [16:30:32]      crash_handler.h(  87) - Log     - Connecting to server \\.\pipe\RenderDocBreakpadServer1787540763
RDOC 005244: [16:30:32]   target_control.cpp( 585) - Log     - Got remote handshake: vkcube [13424]
RDOC 013424: [16:30:32]             core.cpp(1798) - Log     - Adding Vulkan device frame capturer for 0x000001AF7070C220
RDOC 013424: [16:30:32]  vk_device_funcs.cpp( 814) - Log     - Initialised capture layer in Vulkan instance.
RDOC 013424: [16:30:32]  vk_device_funcs.cpp(1429) - Log     - physical device 0: GeForce GTX 950M (ver 388.57 patch 0x0) - 10de:139a
RDOC 013424: [16:30:32]             core.cpp(1831) - Log     - Adding Vulkan frame capturer for 0x000001AF7070C220 / 0x00000000000B05F6
RDOC 013424: [16:30:32]          vk_core.cpp(3768) - Warning - [Loader Message] vkCreateDevice:  Failed to create device chain.
RDOC 005244: [16:30:33]    win32_network.cpp( 261) - Warning - recv: WSAECONNRESET: An existing connection was forcibly closed by the remote host.

Steps to reproduce
just launch with vkcube.exe
Environment

RenderDoc version: 1.11
Operating System: Win10 17134.1902
Graphics API: Vulkan <IP_ADDRESS>

It is not true that launching vkcube.exe on any system will crash, I can easily show that by capturing it myself. Since vkcube is a known good program this means the problem is very likely some problem with your system setup.
Your nvidia drivers are ancient, 388.57 is from 2017. If you update to the latest available drivers for your GPU do you still have problems?

i have update my driver to 460.89, but still crash...

Can you build vkcube from source and attach a debugger to it, to see exactly where and why it crashes? You can use the 'debugger delay' option in the capture dialog to make sure you have enough time to attach.

Please close this issue, i now cannot run vkcube after updated my driver, seems to be my computer's problem, sry.


adds minutes for 2020-10-19 meeting

Closes #148

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Instruction info on hover

An optional mode that will show tooltips for lines of asm, explaining what the instruction does
bonus points if we can make the explanation use the actual operands in the asm line

bonus points if we can show equivalent c code


rspec updates and cleanup

In response to a lapse in previous reviews :) here goes a PR for updating the tests to remove insist and try and be more DRY.

still hoping to figure out a way to instantiate more let variables across the test cases. I am not completely sure how to do this since plugin instantiation depends on specific settings which are unique to almost all the tests

@talevy let variables are just that variables, who are so nice to be reset all the time, like monoid I guess is call in FP.
Keep in mind you can have multiple describe and context, then you can reuse or redefine any let variable created, inheritance apply between the several context.

@talevy every time I see something like:
settings = {"statement" => "SELECT 1 as num_param FROM SYSIBM.SYSDUMMY1", "schedule" => "* * * * * UTC"}
plugin = LogStash::Inputs::Jdbc.new(mixin_settings.merge(settings))
plugin.register

I think you're really facing with another test context, why not having something like:
let(:settings) {}
subject(:plugin) {}
...
   before do
      plugin.register
   end

then in each context you can redefine the settings to the specific ones.

Avoid having test like: https://github.com/logstash-plugins/logstash-input-jdbc/pull/14/files#diff-9c9936a0fd95805a5aa45981f93241c0L15 . You are either testing register or teardown.

:dancers: for removing insist!! thanks!

@talevy just left you a very small comment, for the rest this looks very nice. Good work man!

@purbon thanks for the final comments, updated!


Update e3oncan to 0.9.1

Please update my adapter ioBroker.e3oncan to version 0.9.1.
This pull request was created by https://www.iobroker.dev c0726ff.

Your Adapter has been added to stable repository. If you like you can extend the news message here:
https://github.com/ioBroker/ioBroker.docs/blob/master/docs/en/history/history.md
If you add some more information / description, please consider to add this information to README.md too.
If you have any questions related to the news file, please contact @Apollon77 for further information.
Please note, that the PR announcing the new adapter at stable might not be merged.
https://github.com/ioBroker/ioBroker.docs/pull/


TypeError: Cannot read properties of undefined (reading 'token')

Hi,
Thanks for your work, I would like use, but I don't understand What's happen... But It doesn't work, I must be making a mistake somewhere...

Hi @job-bens, can you please provide the environment variables that you have set on the plugin? You can obfuscate them obviously. I just what to make sure that you have set the required variables correctly :)

Of Course,

Hi here, i have the same "token" problem, and i live in France too, like job-bens. I think it's more librelink up related than nightscout.

Hi here, i have the same "token" problem, and i live in France too, like job-bens. I think it's more librelink up related than nightscout.

Hi here, i have the same "token" problem, and i live in France too, like job-bens. I think it's more librelink up related than nightscout.

@timoschlueter Any idea ?

Same here, I have the same error
TypeError: Cannot read properties of undefined (reading 'token')
I live also in France if that changes anything.

Hello,
Did you find a solution ? I also live in France and I have got the same error message....
I would like to use the fsl3 with android aps and for the moment it seems to be the only solution to recover the blood sugar values.
Thanks in advance

Malheureusement non, j ai abandonné l idée
Le mar. 7 juin 2022 à 11:45, fabricejoubert @.***> a
écrit :

Hello,
Did you find a solution ? I also live in France and I have got the same
error message....
I would like to use the fsl3 with android aps and for the moment it seems
to be the only solution to recover the blood sugar values.
Thanks in advance
—
Reply to this email directly, view it on GitHub
https://github.com/timoschlueter/nightscout-librelink-up/issues/28#issuecomment-1148443871,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ANVOIYXJ6Z7BAYVLFZ6DIVTVN4K37ANCNFSM5P4TOVHQ
.
You are receiving this because you were mentioned.Message ID:
@.***>

Bonjour,
Pour information cette fonctionnalité vient d'être implémentée dans la dernière version xdrip et ça fonctionne très bien. Xdrip récupère directement les données libreview.
https://xdrip.readthedocs.io/en/latest/install/webfollower/

@zanfirovidius i noticed that on my instance as well. I will take a look at this.

Hello. Quick question.... dose any of you have issue with receiving data from the LibreLink server? (personaly I am using the fr server for my kid). For the last 5 days I received data only at random intervals and starting from today I am not able to receive any data. (and is not link to nightscout-librelink-up, because also the LibreLinkUp app is not receiving data) Any info will be useful because we are struggling with monitoring my kids blood sugar

Hello. Quick question.... dose any of you have issue with receiving data from the LibreLink server? (personaly I am using the fr server for my kid). For the last 5 days I received data only at random intervals and starting from today I am not able to receive any data. (and is not link to nightscout-librelink-up, because also the LibreLinkUp app is not receiving data) Any info will be useful because we are struggling with monitoring my kids blood sugar

No problems here. Maybe the data is not sent to the libre link servers at all? We sometimes need to restart the smartphone of our son to activate data sending again…

Hello. Quick question.... dose any of you have issue with receiving data from the LibreLink server? (personaly I am using the fr server for my kid). For the last 5 days I received data only at random intervals and starting from today I am not able to receive any data. (and is not link to nightscout-librelink-up, because also the LibreLinkUp app is not receiving data) Any info will be useful because we are struggling with monitoring my kids blood sugar

No problems here. Maybe the data is not sent to the libre link servers at all? We sometimes need to restart the smartphone of our son to activate data sending again…

Thank you. I ended up uninstalling and reinstalling the app. It works now. Thank you again.

Hello,
I have the same error message and in order to fix it, I had to switch to this LIBRE_LINK_UP_URL=api-fr.libreview.io. And using this URL are able to login in and get all the data about the patient. Now the problem is that (at last for what there is in the main branch) after receiving the blood glucose measurement items I receive a really strange error. Any suggestions? (for the moment I am using something that I forked 3 or 4 months ago)
UPDATE: Funny thing: from time to time it does update the values in the Nightscout, but the update will happen sometimes after 5 minutes other times after 15 min (really random intervals)
<!DOCTYPE html>\n\t\n\t \n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<meta charset=\"utf-8\">\n\t\t<title>Application Error</title>\n\t\t\n\t \n\t \n\t\t\n\t \n\t

I published version 1.8.0 of the app where you can set the LINK_UP_REGION environment variable to specify the API endpoint the app should use. In your case, setting the variable to "FR" will set the LIBRE_LINK_UP_URL to api-fr.libreview.io. This should help with the manual overwrite of the variable in the code :)
Seems like there are many more API endpoints dedicated to specific regions von Abbotts end. I found an API endpoint to receive all of them and added them to the app: https://github.com/timoschlueter/nightscout-librelink-up/blob/main/utils/llu-api-endpoints.js

Got the same message yesterday, any thoughts?

Hello,
I am getting the same error.
2022-07-14T15:54:00.621399+00:00 app[worker.1]: [info]: Logged in to LibreLink Up 2022-07-14T15:54:00.659272+00:00 app[worker.1]: [error]: {"message":"invalid or expired jwt"} 2022-07-14T15:54:00.660459+00:00 app[worker.1]: [error]: getting libreLinkUpConnection:  Cannot read properties of undefined (reading 'data')
I tried with EU, FR, and DE.

I just fixed this in my client this morning. The response if you are using a specific server answers with redirect information.
Could you just try out api.libreview.io

@khskekec I tried, same error.
I manually hit the API endpoints, and I am able to get the token, but hitting the connections endpoint is returning that error.
Could it be that they changed the way that you authenticate?

No, my client application also include authentication procedures and I did not change anything in the code.
The only thing I changed was the api url to api.libreview.io.
I do not think that changes are necessary here.

Just in case you did not get this email (it is available as a web version, too) I wanted to give this as an additional information.
https://service.freestylelibre.se/optiext/optiextension.dll?ID=qYZqW272h0U8aC30UCtxz%2BN_o66DhGuEh5IWxsI47PuRGaXazQjPjck1Rr7B%2BTEenpMiYru3AqvKB_pW0jy3GXuRUW%2Ba1
It's in swedish but google translator couldn't handle it 🤪 (I wanted to translate to German)

@useful-idiot I didn't get that email, that's probably what is going on with my account.
I don't want to delete the main account and miss all the information, I will see how can I work around it if it's possible.
Thanks!

I am noticing that LibreLinkUp always visits https://api.libreview.io/llu/config/country?country=IT first for me.

I will check if we can use this mechanism to automatically find the correct API endpoint.

Now is working for me, thanks all!

@timoschlueter I didn’t realize at first that it doesn’t need authentication — and that they are supporting even push notifications! B-)
The replies to the country codes where the Libre 3 is currently available vary properly:
DE  =>  "lslApi": "https://api-de.libreview.io/"
FR  =>  “lslApi": "https://api-fr.libreview.io/"

CH  =>  “lslApi": "https://api-eu.libreview.io/"
GB  =>  “lslApi": "https://api-eu.libreview.io/"
IT  =>  “lslApi": "https://api-eu.libreview.io/"
ES  =>  "lslApi": "https://api-eu.libreview.io/"

Oddly enough, however:
US  => ”lslApi": "https://api-eu.libreview.io/"

Whats interesting here is: If the config-Endpoint does not need any authentication but the assumption that it does in fact return the API endpoint that you have to use is correct, how does Abbott decide which endpoint you need to access? Some kind of IP based geolocation? Or the HTTP header? Any idea, @gui-dos? :)
For now, the endpoints are hardcoded in the application as of version 1.8.0. A generic approach would be way better!

When you post your credentials to /llu/auth/login you get the country code in data.user.country ;-)
(https://gist.github.com/khskekec/6c13ba01b10d3018d816706a32ae8ab2)

@khskekec I am scraping also the Logbook measurements and alarms but I am noticing that LibreLinkUp in this case is always using the local server https://api-eu.libreview.io/llu/connections/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx/logbook

@gui-dos
In my opinion this is just fine and the service ist responsible for proper routing and redirecting.
But this definetly simplifies the configuration for users. In comparison to dexcom, which requires the usage of regional server, abbot does not care about it it seems.
I am not sure whether responses differ in general but actually it is guaranteed that most recent cgm readings are available. This should be totally okay for this bridge.

I really like the discussion with you guys. Thank you all! :)
@khskekec I am sitting in Germany as well and just tried using the generic endpoint from Germany via a VPN connection going through Spain, just to confirm your theory of routing. When connecting from outside of Germany (through the VPN), the generic login endpoint seems to determine that the request comes in fact from Spain and gives a response with a HTTP 200 and redirect information, although it does not do the redirection itself:
{
    "status": 0,
    "data": {
        "redirect": true,
        "region": "de"
    }
}

Using the German API endpoint through the Spanish VPN works still fine. You are right, there is routing on Abbotts side. But I am not quite sure if we should switch to the generic endpoint for all users. A thought I have: If I spin up a Heroku instance in Spain for example, but am in fact using a German account, won't the generic endpoint respond with a redirection as well instead of the actual measurements? The only solution for me would be to specify the region in order to receive measurements. Or this bridge should figure out the correct API itself. What are your thoughts? Am I missing something?

Hey @timoschlueter,
Nice catch!
I find your idea great to let the bridge talk to the main api.libreview.io and do the reset of the host if the service responds with some redirect information instead of an access token.
I will definetly implement this in my client also.
The interesting part for me is the way abbot handles the routing:
I am sitting in Germany and have an account belonging to Germany - > I can talk with api.libreview.io
I am sitting in Spain and have an account belonging to Germany - > I cannot talk with api.libreview.io and receive redirect information...
Is that correct?

It worked when I changed my region from DE to GB. So I would suggest everyone to test out different regions despite your country.

@kaussel i noticed that as well a few days ago but it has since gone back to normal (with 5 minutes intervals). I would assume that this was a server issue on Abbotts side. Can you check again if the problem still exists?

@timoschlueter
thanks for the info but I can't report any progress. the behaviour remains the same. I constantly miss 2 of 3 measurements. but I also think it's a problem on abbotts side,
since the linkup app often shows no data "---", I contacted their support and they claimed the issue may have been that I used the same email address for libreview and linkup. but using a new linkup account didn't change anything.
since I'm neither a programmer nor an avid log analysist maybe someone can light up the log entries for me. it essentially reports the Upload of 0 measurements every time the html error occurs. I assume there's nothing suspicious in the debug log entry? and the html error is a response to not being able to retreive anything from Abbott?
2022-07-30T10:55:00.372554+00:00 app[worker.1]: [debug]: authenticatedHttpHeaders: {"User-Agent":"FreeStyle LibreLink Up NightScout Uploader","Content-Type":"application/json","version":"4.2.2","product":"llu.ios","Accept-Encoding":"gzip, deflate, br","Connection":"keep-alive","Pragma":"no-cache","Cache-Control":"no-cache","authorization":"Bearer <some_cryptic_identifier>"}
2022-07-30T10:55:30.611665+00:00 app[worker.1]: [error]: "\n\t\n\t  \n\t\t<meta name="viewport" content="width=device-width, initial-scale=1">\n\t\t<meta charset="utf-8">\n\t\tApplication Error\n\t\t


Issue on access website

New client can't access to website, show [threat found]

closing this issue as resolved by client.


Propose RFC: Test suite

Yeah, maybe it belongs in concepts instead of features. I can move it. Don't merge until I do.

@dhh1128  I hit a weird bug with github, where it was asking me update branch, failed, and had a try again button. Turns out this merged it somehow, so I'll submit a PR now to move this to concepts rather than features.


Implement TryFromBytes for Option<{ref-like}>

Makes progress towards #5.

@joshlf, CI is blocked on tweaking the invocation (and definition?) of impl_try_from_bytes_testable in ways I don't exactly understand. Can you give this a ./cargo.sh +msrv test --features alloc sometime and provide some pointers?


Adds new swift-package for use in Native projects.

Any way you can contribute the code of the package so it can be stored in this repository, rather than having the documentation point to yours?

Unfortunately I don't believe there is a way. The way XCode pulls it in is via the .git url as if it was cloned. The file structure is very important for it. If any one pice is out of place, then it won't work. It looks specifically for the Package.swift file to know what the structure for it is, which is at the root.

It looks specifically for the Package.swift file to know what the structure for it is, which is at the root.

I don't see a problem in adding this file in this repo here at root level 👍 In contrast, I would be a bit hesitant when it comes to including a submodule inside this repo.

Perhaps you could add all of the files from your repository to the root of this one? Looks like we would just need the following files:

Sources
.swiftpm/xcode
Package.swift

And then we could integrate update.sh with our internal build script that runs every time new icons are generated.
As for excluding files so this entire repository isn't cloned whenever you install via Swift Package Manager, it appears there's a mechanism for that.
I hesitate to create a separate repository for this (even in the iconoir-icons org) as syncing the tags and icons would become a bit of a chore, when we can automate it in this repo with GitHub Actions.

I hesitate to create a separate repository for this (even in the iconoir-icons org) as syncing the tags and icons would become a bit of a chore, when we can automate it in this repo with GitHub Actions.

In my opinion, this doesn't sound like a bad idea. As far as I know, you can trigger other workflows within a GitHub organization.

Well, if we add it to the top, then we have to add all of it to the top level. I'd strongly recommend against that. An alternative would be to provide a binary on your repo that can be used but then that kills the "Open Source" side of it. Unfortunately it's no simple answer and this is the solution I could come up with. I'm already working towards automating the Swift Package from within the separate repo, to always stay in sync with this repo.

Could the source of truth not be kept in (this) the main repo, and mirrored to the swift package for releases?

I would say if we're doing the separate repository route, let's just keep things simple and keep it separated in the other repo, and just keep it in sync with the icons / releases from this one.
I'm hoping we can lean on @mkaulfers a bit here to automate that release process so it doesn't become a chore 😄
But, as always, if we find it becomes unsustainable we can always figure out how to move it to this repository later. I'm apt to go ahead and create a separate repository now since the code is already there and we can quickly get SwiftUI support out.

@DaniFoldi @sammarks @paescuj So if I'm reading correctly, remove the iconoir-swift directory from the packages directory. Then move it over to the new repo that was created here  https://github.com/iconoir-icons/iconoir-swift

@sammarks okay that works, but why keep the source both in here as well as the other? If Iconoir will be in posession of the source of truth, no need to have it copied in both repos right? I already have a thought for the workflow to update the repository and there already exists a update.sh script added with the package that will handle writing new code as well as downloading properly formatted icons. For sure I'd like to do it however, contributing to open source looks good at my job as well as helps keep copilot free lol

I'm not sure what you mean by keeping the source in this repo as well as in the other? If you're talking about the submodule you've added inside the PR, we can get rid of that in this repo as we don't need it.

Yes that's what I was referring to. I'll get that going here in a few minutes.

@sammarks done 👍  There's now a PR up on both repositories, submodule has been extracted, and as soon as they're approved I'll get it listed on Swift Package Index.

Thank you!


Sa/new normalization and minibatching

Purpose
This PR adds the possibility of calibration with mini-batches. Also, normalization with the standard deviation of the observational data is added.
<!---
Review checklist

I have:
- followed the codebase contribution guide: https://clima.github.io/ClimateMachine.jl/latest/Contributing/
- followed the style guide: https://clima.github.io/ClimateMachine.jl/latest/DevDocs/CodeStyle/
- followed the documentation policy: https://github.com/CliMA/policies/wiki/Documentation-Policy
- checked that this PR does not duplicate an open PR.

In the Content, I have included
- relevant unit tests, and integration tests,
- appropriate docstrings on all functions, structs, and modules, and included relevant documentation.
- I have read and checked the items on the review checklist.

LGTM! - Left some very minor comments. I'm not the best person to review the whole calibration code.
Would be great to add at some point some very simple documentation to the whole project... I could offer to add the KiD description and maybe could ask you to add some small section about the calibration setup?
OK to merge this PR after squashing (some?) of the commits.

It's a good idea. Let's add the documentation in another PR.

bors r+


add support for armv7

Current state: build for armv7 not supported
Wanted state: build for armv7 supported
Why the change is sensible: add more arm architectures.

Do you have a build output for me? C is supported on armv7, so theoretically it should work. If it is a minor issue i might be able to fix it without the need to set up a VM.

I just managed to compile all fastfetch code for armv7 (-m32) in my Android phone with vulkan support disabled (but link failed due to lack of armv7 libraties)

I am compiling on Samsung Galasy S5 (klte) on PostMarketOS Edge.

What were the errors printed?

/usr/bin/cc broken

GCC installed

Try reinstalling gcc and gcc-libs

I installed build-base package, fixed! Thanks!


Firefox support

Set PT per sub based on offer sdp. Transform incoming packets to sub pt if required.
Response to publish offer with the matching single supported codec per track.
Response to subscribe offer with pub pt or allowed transformable pt in offer.
Testing

Codec
Chrome => Chrome
Firefox => Firefox
Chrome => Firefox
Firefox => Chrome

VP8
✓
✓
✓
Sometimes frame decode issues

VP9
✓
✓
✓
✓

H264
✓
X
X
X

Opus
✓
✓

I'm not super familiar with the requirements here but generally lgtm

Have seen a few issues with Firefox still in testing, but this is a lot better that what we currently have so going to merge for now.


Switch QR Scanner

change QR scanner library in QrScannerWorker.js to jsQR
remove unused code from QrScanner.js and refactor a little bit
change file importer to use object urls instead of FileLoader
reuse rendered image in file importer for QR scanning
preload qr scanner worker in import file request

Note that I have prove read the QrScanner library but feel free to also do so.

Note: The contrast for yellow and turquoise login files is too low for the used grayscale weights and thus the scanner is having issues detecting the QR code for those colors.
I'll implement one of the following approaches to fix that:

Search for a set of greyscale weights that work for all color versions.
Use two different sets of grayscale weights and check both.
Add a bias towards black in the binarizer.

It should work for all colors now.


fix(kafka create): run interactive if no name provided and fix typos

Open interactive mode when rhoas kafka create is run with flags but no name.
Fix faulty error message while filtering consumergroups by topic.

Closes #703, #704
Verification Steps

Run rhoas kafka create --provider aws, it should open the interactive mode.
Run rhoas kafka consumergroup list --topic <topic-name> where the topic has no associated consumergroup, it should display the message Kafka instance "<instance name>" has no consumer groups for topic "<topic-name>"

Type of change

[X] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] Documentation change
[ ] Other (please specify)

Checklist

[ ] Documentation added for the feature
[ ] CI and all relevant tests are passing
[ ] Code Review completed
[ ] Verified independently by reviewer

It looks like the Closing keyword does not link multiple issues automatically. In this case you can manually link them in the side bar.

I think that this is more maintainable in the long run, and I believe it is consistent with the other create commands (not sure though).

Had used topic create as a reference. We should update that one later as well.


Added new script to return channel and device counts from target kepw…

…are server

Cancelling with new pull request to come


improve template handling

When you submit<EMAIL_ADDRESS>and start<EMAIL_ADDRESS>fleet writes these unit files into the file system:
ls -la /run/fleet/units/
total 40
drwxr-xr-x 2 root root 240 Mar 16 16:51 .
drwxr-xr-x 3 root root  60 Mar 16 11:47 ..
-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>-rw-r--r-- 1 root root  97 Mar 16 16:51<EMAIL_ADDRESS>
Also it writes down unnecessary duplicated data inside the etcd registry.
With the new --replace feature you have to update each "templated" unit file instead of only one template.
Also when you start units using local template, which is not stored into the registry (i.e. fleetctl start template@{1..10}.service), fleet just creates copies of this template. But for some reason doesn't store the origin template into the registry. I suppose it should.
So the idea is to create a reference to the origin template inside the registry instead of copying template's data. This will allow you to update only one template using the --replace feature.

@kayrus how would you replace a template? AIUI, fleet commands always work on actual instances. If you do, say fleetctl start --replace<EMAIL_ADDRESS><EMAIL_ADDRESS>it should replace these two instances with ones created from the current (possible changed) template; but not the others. I don't see how you would express "update all instances of this template"...

@antrik it shouldn't allow to replace template's reference. like it is not possible to start template itself.

@kayrus on your argument "With the new --replace feature you have to update each "templated" unit file instead of only one template."
I don't see any problem on this ? if you update a template then "submit --replace" to updated into the registry, that's it. We don't start units from a template on behalf of the user as I guess we don't want to automatically replace instantiated units on behalf of the user, and it's pretty easy just after submit --replace, do start --replace<EMAIL_ADDRESS>

@tixxdz start --replace<EMAIL_ADDRESS>will create 100 write events into etcd. if you rewrite only one template it will create only N etcd read events, where N is amount of machines in cluster.


🐛 e2e/syncer: temporarily schedule all workspaces on the root shard

Summary
the issue will be eventually addressed in kcp-dev#2649
Related issue(s)
https://github.com/kcp-dev/kcp/pull/2596

/close
in favour of https://github.com/kcp-dev/kcp/pull/2651


No output on prometheus API call through lens when query param contains colon

Hi,
On Lens 4.2.5, I am trying to make an API call. The query param has colon ':' in it and the url is properly encoded
query: sum(node_namespace_pod_container:container_cpu_usage_seconds_total)
Here is my url
http://5f6d4bf3-ece4-4805-bdb5-1bab9a662abc.localhost:61283/api-kube/api/v1/namespaces/lens-metrics/services/prometheus:80/proxy/api/v1/query_range?query=sum(node_namespace_pod_container%3Acontainer_cpu_usage_seconds_total)
Request Method: GET
Same works directly on prometheus server but when invoked through Lens, it doesn't return any output.
I wish to understand if there is any difference to it.
Thanks,
Tashi

Does it return anything? What is the status code?

Yes it returns empty response like results: []
maybe the expression that is sent to Prometheus that contain colon is not correct hence the result set is empty.


About the pretrain model

I want to know where to get the pretrain model "pretrained/tsn2d_rgb_r50.pth". And the code in the file train_source_model.py, there is two parameter “end_epoch” in the function train_source_model.

I want to know where to get the pretrain model "pretrained/tsn2d_rgb_r50.pth". And the code in the file train_source_model.py, there is two parameter “end_epoch” in the function train_source_model.

Hi! Thank you for your interest in our project.
I would also like to thank you for pointing out the repeated parameter, that has been fixed and you may renew your repository by simply pulling again. Sorry for the confusion.
As for the pretrained model, it is uploaded in Google Drive. Please see the README (https://github.com/xuyu0010/ATCoN#notes-on-training-and-testing) for details.

Thank you so much.


[3.2.0] "Create" button is displayed in the UI for API Products which lets the users to create API Products in the CREATED state

Description:
When creating an API Product there are two (2) options as below.

If we select Create, an API Product will be created with the state CREATED as shown below.

Since we do not have life cycle management for API Products, there is no way to PUBLISH this CREATED product. Hence, the option "Create" should not be there in the UI for API Products.
Affected Product Version:
APIM 3.2.0 WUM
Environment details (with versions):

OS: Ubuntu 20.04.2 LTS
Browser: Chrome

This is a workaround to be able to specify what GWs should be selected at the time of publishing. Since by default it gets published to all GWs, this was done to allow customers to have some control of that. So you first go to CREATED then select the desired GWs and then PUBLISH. The Publish button is available in the Environments tab.

Closing this since this is not a bug.


Enable decrypting the sealed secrets at piped

What this PR does / why we need it:
In the next pull requests:

more test for secrets management feature
improve the visibility of the sealed secret

Which issue(s) this PR fixes:
Part of #749
Does this PR introduce a user-facing change?:

NONE

/cc @nakabonne

Except for just one nit, looks good to me. A big thank you goes out to you!


restore ical for 3rd party modules

Does the pull request solve a related issue?
#2138

Warnings

:warning:

Please include an updated CHANGELOG.md file.This way we can keep track of all the contributions.

  Generated by :no_entry_sign: dangerJS

I have asked for info in the forums.. issue and PR ready in case..


GdkRGBA to boxed value

For some attributes on ListStore (e.g. foreground-rgba, cell-background-rgba etc.) to be set by a column value GdkRGBA needs to be convertible into a value.
Looking through some of the gtk+ code it seems this would be done with g_value_set_boxed, so it is possible at the moment, but it would be useful to, for example, implement ToValue for GdkRGBA so we don't need to use gobject_sys for this.
ETA: This seems to do what I'm after, I'm just not sure how to create a pull that adds this given the crate is mostly automatically generated
    let color = GdkRGBA{red:1.0,green:0.0,blue:0.0,alpha:1.0};
    let val = unsafe{
        let mut out_val = Value::uninitialized();
        {
            let stash = out_val.to_glib_none_mut();
            gobject_sys::g_value_init(stash.0 as *mut _,gdk_sys::gdk_rgba_get_type());
            gobject_sys::g_value_set_boxed(stash.0 as *mut _,&color as *const _ as *const libc::c_void);
        }
        out_val
    };

First you'd need to make a struct RGBA in gdk similar to this one and then implement for it StaticType (by calling gdk_rgba_get_type()) and SetValueOptional (via g_value_set_boxed, that seems correct).
But I'm not sure how you'd use it because we don't have nice ways to access properties yet.

This was fixed in gdk long ago


Log PayPal monthly payments and award gems immediately

This is for the first subscribe payment, to remove the delay between
subscribing and PayPal the webhook getting called minutes later.
Recurring payments will be handled by the webhook.
The billing agreement id is used to lookup and attach the sale payment
object in the webhook later, after the initial subscribe event.

Coverage increased (+0.04%) to 62.07% when pulling 6d63a56a9e18cf378f0faccf91373f214554997e on paypal-payments into ac744442da217b6bc8e7571af9f303d7c8db83c1 on master.

Coverage increased (+0.05%) to 62.08% when pulling 7384bcbcac84ee8a995fa6bfb20dec77a146d77d on paypal-payments into ac744442da217b6bc8e7571af9f303d7c8db83c1 on master.


How will we download artifacts required by the makefile?

We need to be able to download the makefiles themselves, as well as any additional artifacts, such as bash scripts that the makefile depends on.
My current implementations tend to use a bash script that performs the downloading, such as the Dogmatic makefiles fetch script.
This is executed by the makefile by piping it to bash:
artifacts/make/%.mk:
	curl -sf https://dogmatiq.io/makefiles/fetch | bash /dev/stdin $*

Notice that both the makefile and the fetch script depend on curl, which is probably the lowest common denominator. The fetch script could contain some smarts to use other downloading mechanisms if they are available, but the makefile itself will always need to get the original binary somehow.
As for other assets, it might be possible to define such a pattern rule that can download any file from the repo, by reserving some subfolder of artifacts/ for this purpose. For example, artifacts/make/foo/bar.ext would always be pulled from make-files.github.io/foo/bar.ext or something like that.
Another solution we've used elsewhere is to download all assets in a single archive.

For example, artifacts/make/foo/bar.ext would always be pulled from make-files.github.io/foo/bar.ext or something like that.

Seems like a workable solution to me. We could also generalize it into a system for any web asset, where artifacts/remote/https/example.org/path/to/file could be pulled from https://example.org/path/to/file?

Yeah potentially. It'd probably be a mistake to tie those two systems together, but it could work.


CommandValidator not getting invoked

Hi,
I am using FluentValidations in one of my ASP.NET Core application. I am trying to implement a Validation pipeline via MediatR pipelines. While doing this, I have a ValidatorBehavior which calls the validate method.
I have registered all the CommandValidator, Behavior in DI. But, it seems like the Validators are not getting resolved.
This is what I have in my StartUp:
builder.RegisterModule(new DependancyModule());
services.AddMvc()
.AddControllersAsServices()
.AddFluentValidation();
builder.RegisterAssemblyTypes(typeof(MyCommandValidator).GetTypeInfo().Assembly)
.Where(t => t.IsClosedTypeOf(typeof(IValidator<>)))
.AsImplementedInterfaces();
builder.RegisterGeneric(typeof(ValidatorBehavior<,>)).As(typeof(IPipelineBehavior<,>));
Whenever a mediator.Send is called, the code in ValidatorBehavior gets invoked, but the commandvalidator and thus the rules are never run.
Any input is greatly appreciated. Please let me know if any more information is required.
Thanks,
Minu

Have you verified that your validators have definitely
been correctly registered? (Is if you inspect the container at runtime, are they all there?)
How are you resolving the validators inside your behavior?

Yes, I can see the Validator inside the Registrations. I am using Constructor Injection. At this point, the validators' count is 0 and therefore nothing is being validated. Sorry, forgot to mention this in the original post.
public class ValidatorBehavior<TRequest, TResponse> : IPipelineBehavior<TRequest, TResponse>
    {
        private readonly ILogger _logger = LoggerService.Logger<ValidatorBehavior<TRequest, TResponse>>();

        private readonly IValidator<TRequest>[] _validators;

        public ValidatorBehavior(IValidator<TRequest>[] validators)
        {
            _validators = validators;
        }

        public async Task<TResponse> Handle(TRequest request, CancellationToken cancellationToken, RequestHandlerDelegate<TResponse> next)
        {
            var typeName = string.Empty;
            if (request.GetType().IsGenericType)
            {
                var genericTypes = string.Join(",", request.GetType().GetGenericArguments().Select(t => t.Name).ToArray());
                typeName = $"{request.GetType().Name.Remove(request.GetType().Name.IndexOf('`'))}<{genericTypes}>";
            }
            else
            {
                typeName = request.GetType().Name;
            }

            _logger.LogInformation($"----- Validating command {typeName} -----");

            var failures = _validators
                .Select(v => v.Validate(request))
                .SelectMany(result => result.Errors)
                .Where(error => error != null)
                .ToList();

            if (failures.Any())
            {
                _logger.LogError($"Validation errors - {typeName} - Command: {request} - Errors: {failures}");
            }

            return await next();
        }
    }

Sounds like it’s probably an issue with the resolution then from the container, not a problem with FluentValidation itself, so there’s not really much I can help with (for problems troubleshooting DI container registrations you’d be better of asking the developers of the container or asking on stackoverflow - I can only help with issues related to FluentValidation itself)
The only further thing I can suggest is making sure that the container is set up to resolve arrays of dependencies in this way - maybe it needs extra configuration to support this? Have you tried using IEnumerable instead?

Let me try the IEnumerable version. Thanks for the prompt response Jeremy.


Where do i find encrypt.so for windows x86 OS.?

https://github.com/PokemonGoF/PokemonGo-Bot/issues/2706#issuecomment-238074250

Thank You!!! You rock!!!

@BobbyWibowo  can i request you to host those 'dll' files somewhere as i dont have acess to slack chat. Your help would be much appreciated. :)

@rahul1205 Register at the Slack group: https://pokemongo-bot.herokuapp.com/ then look for all uploaded files in the group from this link: https://pokemongo-bot.slack.com/files after that, simply look for encrypt.dll (if you're on Win x86).

https://github.com/PokemonGoMap/PokemonGo-Map/tree/develop/pogom
On Sun, Aug 7, 2016 at 12:25 PM, Bobby Wibowo<EMAIL_ADDRESS>wrote:

@rahul1205 https://github.com/rahul1205 Register at the Slack group:
https://pokemongo-bot.herokuapp.com/ then look for all uploaded files in
the group from this link: https://pokemongo-bot.slack.com/files after
that, simply look for encrypt.dll (if you're on Win x86).
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/PokemonGoF/PokemonGo-Bot/issues/2844#issuecomment-238091943,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AGGmHNh9WS3JkXIJoWRAHWvgTS3TNrN3ks5qdgbhgaJpZM4JehxC
.

@relomy  Thanks mate..!! Help was much appreciated..Closing this issue now. Resolved..:)


Roll Flutter Engine from 25afdb9b696d to fd3fa2825632 (1 revision)

https://github.com/flutter/engine/compare/25afdb9b696d...fd3fa2825632
2023-08-11<EMAIL_ADDRESS>Roll Skia from f4080803ee69 to 41d099099095 (2 revisions) (flutter/engine#44624)
If this roll has caused a breakage, revert this CL and stop the roller
using the controls here:
https://autoroll.skia.org/r/flutter-engine-flutter-autoroll
Please CC chinmaygarde@google.com,rmistry<EMAIL_ADDRESS>on the revert to ensure that a human
is aware of the problem.
To file a bug in Flutter: https://github.com/flutter/flutter/issues/new/choose
To report a problem with the AutoRoller itself, please file a bug:
https://bugs.chromium.org/p/skia/issues/entry?template=Autoroller+Bug
Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md

Commit queue failed; closing this roll.


backport/backport-2802-to-2.x?

Use custom serialization in security plugin.

Resolves https://github.com/opensearch-project/security/issues/2780

Description
Refer https://github.com/opensearch-project/security/pull/2802
Issues Resolved

Resolves https://github.com/opensearch-project/security/issues/2780

Is this a backport? If so, please add backport PR # and/or commits #
Yes
https://github.com/opensearch-project/security/pull/2802
Testing
Refer
Check List

[x] New functionality includes testing
[ ] New functionality has been documented
[x] Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@parasjain1 Is this targeting 2.11 release?

@DarshitChanpura yes this is targeting 2.11 release.

FYI BWC tests are failing due to compilation failures. Seems like the recent fixes were not backported to 2.x.

While resolving conflicts, I've not brought in any changes to the CI configuration. Please see if we need to bring those in, feel free to open a separate PR if needed.
I've updated the ConfigConstants.FIRST_CUSTOM_SERIALIZATION_SUPPORTED_OS_VERSION to 2.11.0 in this PR and accordingly also updated the versions in SecuritySSLRequestHandlerTests.

@parasjain1 The compilation failures are due to a difference in the version of the Apache HttpClient/HttpComponent libraries used in main vs 2.x. main uses HttpClientV5 while 2.x uses HttpClientV4. This PR will need to adjust to the difference between the main and 2.x branch of the security plugin.

Closing as https://github.com/opensearch-project/security/pull/3444 was merged.


handshake_failure

when trying to read from vault I am getting following on puppet agent:
$ sudo puppet agent -tv --tags test
Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Function Call, Lookup of key 'libnss-ldap_secret' failed: [hiera-vault] Skipping backend. Configuration error: Received fatal alert: handshake_failure (file: /etc/puppetlabs/code/environments/stretch/modules/test/manifests/init.pp, line: 5, column: 13) on node kicktest.domain.com
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
tcpdump confirms it is handshake failure
puppetserver -v
puppetserver version: 5.3.9
puppet module list | grep vault
davealden-hiera_vault (v0.9.0) - that is the 0.1.0 version from git
puppetserver gem list
*** LOCAL GEMS ***
aws-sigv4 (1.0.3)
columnize (0.9.0)
debouncer (0.2.2)
deep_merge (1.0.1)
did_you_mean (default: 1.0.1)
fast_gettext (1.1.2)
gettext (3.2.2)
hiera-eyaml (3.0.0, 2.1.0)
hiera-vault (0.2.2)
highline (1.6.21)
hocon (1.2.5)
jar-dependencies (default: 0.3.12)
jruby-openssl (0.9.21 java)
jruby-readline (1.2.2 java)
json (1.8.3 java)
linecache (1.3.1 java)
locale (2.1.2)
minitest (default: 5.4.1)
multi_json (1.13.1)
net-telnet (default: 0.1.1)
optimist (3.0.0)
power_assert (default: 0.2.3)
psych (2.2.4 java)
puppetserver-ca (1.2.1)
rake (default: 10.4.2)
rdoc (default: 4.2.0)
ruby-debug (0.10.6)
ruby-debug-base (0.10.6 java)
semantic_puppet (0.1.3, 0.1.2)
test-unit (default: 3.1.1)
text (1.3.1)
trollop (2.9.9)
vault (0.11.0)
puppetserver ruby --version
jruby <IP_ADDRESS> (2.3.3) 2018-02-21 8f3f95a OpenJDK 64-Bit Server VM 25.222-b10 on 1.8.0_222-8u222-b10-1~deb9u1-b10 +jit [linux-x86_64]
/etc/puppetlabs/puppet/hiera.yaml
version: 5
hierarchy:

name: "Hiera-vault lookup"
lookup_key: hiera_vault
options:
confine_to_keys:
- ".*secret$"
- ".*vault$"
ssl_verify: false
ssl_pem_file: /etc/puppetlabs/puppet/ssl/ssl_pem_file.pem
ssl_ca_cert: /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem
address: https://vault.domain.com:8200
token: s.x6kVhjgf67gjM2p4UXlzBB65jg876876bSFfC4hn
default_field: value
mounts:
generic:
- secret/puppet/%{::environment}/
- secret/puppet/

cat /etc/puppetlabs/code/environments/stretch/modules/test/manifests/init.pp
class test {
$secret = lookup({"name" => "libnss-ldap_secret", "value_type" => String, "merge" => "first"})
notify {"testing vault ${secret}":}
file { '/tmp/test':
content => $secret,
}
notify {"testing vault1":}
file { '/tmp/test1':
content => lookup({"name" => "libnss-ldap_secret", "value_type" => String, "merge" => "first"}),
}
}
PUPPET LOOKUP AND CURL WORKS
puppet lookup libnss-ldap_secret --explain
Searching for "lookup_options"
Global Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/puppet/hiera.yaml"
Hierarchy entry "Hiera-vault lookup"
No such key: "lookup_options"
[hiera-vault] Skipping hiera_vault backend because key 'lookup_options' does not match confine_to_keys
Environment Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/code/environments/stretch/hiera.yaml"
Merge strategy hash
Hierarchy entry "Per-node data (yaml version)"
Path "/etc/puppetlabs/code/environments/stretch/data/nodes/sppuppet03test.domain.com.yaml"
Original path: "nodes/%{::trusted.certname}.yaml"
Path not found
Hierarchy entry "Other YAML hierarchy levels"
Path "/etc/puppetlabs/code/environments/stretch/data/common.yaml"
Original path: "common.yaml"
Path not found
Searching for "libnss-ldap_secret"
Global Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/puppet/hiera.yaml"
Hierarchy entry "Hiera-vault lookup"
Found key: "libnss-ldap_secret" value: "test"
[hiera-vault] Client configured to connect to https://vault.domain.com:8200
[hiera-vault] Looking in path secret/puppet/stretch/libnss-ldap_secret
[hiera-vault] Looking in path secret/puppet/libnss-ldap_secret
[hiera-vault] Read secret: libnss-ldap_secret
curl -v https://vault.domain.com:8200 -E /etc/puppetlabs/puppet/ssl/ssl_pem_file.pem --cacert /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem

Rebuilt URL to: https://vault.domain.com:8200/
Trying <IP_ADDRESS>...
TCP_NODELAY set
Connected to vault.domain.com (<IP_ADDRESS>) port 8200 (#0)
ALPN, offering h2
ALPN, offering http/1.1
Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
successfully set certificate verify locations:
CAfile: /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem
CApath: /etc/ssl/certs
TLSv1.2 (OUT), TLS header, Certificate Status (22):
TLSv1.2 (OUT), TLS handshake, Client hello (1):
TLSv1.2 (IN), TLS handshake, Server hello (2):
TLSv1.2 (IN), TLS handshake, Certificate (11):
TLSv1.2 (IN), TLS handshake, Server key exchange (12):
TLSv1.2 (IN), TLS handshake, Server finished (14):
TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
TLSv1.2 (OUT), TLS change cipher, Client hello (1):
TLSv1.2 (OUT), TLS handshake, Finished (20):
TLSv1.2 (IN), TLS change cipher, Client hello (1):
TLSv1.2 (IN), TLS handshake, Finished (20):
SSL connection using TLSv1.2 / DHE-RSA-AES256-GCM-SHA384
ALPN, server did not agree to a protocol
Server certificate:
subject: OU=Domain Control Validated; CN=*.domain.com
start date: Feb 20 18:58:38 2019 GMT
expire date: Apr 21 17:34:11 2020 GMT
subjectAltName: host "vault.domain.com" matched cert's "*.domain.com"
issuer: C=US; ST=Arizona; L=Scottsdale; O=GoDaddy.com, Inc.; OU=http://certs.godaddy.com/repository/; CN=Go Daddy Secure Certificate Authority - G2
SSL certificate verify ok.

GET / HTTP/1.1
Host: vault.domain.com:8200
User-Agent: curl/7.52.1
Accept: /

You have similar ticker, where lookup works but puppet agent doesn't, not sure if related.
Would you be able to help to found out the root cause ?

I'm not sure whats happening there, Your listing shows davealden-hiera_vault
The version should be petems-hiera_vault - 0.4.0
Are you managing modules with R10k? Or just installed straight on the server?

I just installed straight on the server:
puppet module install petems-hiera_vault-0.1.0.tgz --ignore-dependencies
--force --environment stretch
can I use 0.4.0 on vault k/v v1 ?
On Tue, Jul 30, 2019 at 4:11 PM Peter Souter<EMAIL_ADDRESS>wrote:

I'm not sure whats happening there, Your listing shows
davealden-hiera_vault
The version should be petems-hiera_vault - 0.4.0
Are you managing modules with R10k? Or just installed straight on the
server?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/petems/petems-hiera_vault/issues/39?email_source=notifications&email_token=AA5WSLO4HH3UCVK67Z5OWE3QCBD25A5CNFSM4IH4XCY2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD3EDGJA#issuecomment-516436772,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AA5WSLKEWB6O6S56WVNJE2DQCBD25ANCNFSM4IH4XCYQ
.

Yes, you can use 0.4.0 with vault k/v1
Can you try installing 0.4.0 and trying again for me?

puppet module list --environment stretch | grep vault
petems-hiera_vault (v0.4.1)
cat
/etc/puppetlabs/code/environments/stretch/modules/test/manifests/init.pp
$secret = lookup({"name" => "libnss-ldap_secret" })
notify {"testing vault ${secret}":}
file { '/tmp/test':
content => $secret,
}
}
sudo puppet agent -tv --tags test
Error: Could not retrieve catalog from remote server: Error 500 on SERVER:
Server Error: Evaluation Error: Error while evaluating a Resource
Statement, Evaluation Error: Error while evaluati
ng a Function Call, Lookup of key 'libnss-ldap_secret' failed:
[hiera-vault] Skipping backend. Configuration error: Received fatal alert:
handshake_failure (file: /etc/puppetlabs/code/enviro
nments/stretch/modules/test/manifests/init.pp, line: 6, column: 13) on node
kicktest.domain.com
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
puppet lookup libnss-ldap_secret --explain
Thread.exclusive is deprecated, use Thread::Mutex
/etc/puppetlabs/code/environments/stretch/modules/common/lib/facter/partitions.rb:12:in
<top (required)>' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/facts/facter.rb:35:in to_hash'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/facts/facter.rb:35:in
find' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/indirection.rb:198:in find'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/node.rb:135:in
fact_merge' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/node/plain.rb:18:in find'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/indirection.rb:198:in
find' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/lookup.rb:345:in generate_scope'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/lookup.rb:312:in
main' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:383:in run_command'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:375:in
block in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:667:in exit_on_fail'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:375:in
run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:139:in run'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:77:in
execute' /opt/puppetlabs/puppet/bin/puppet:5:in '
Searching for "lookup_options"
Global Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/puppet/hiera.yaml"
Hierarchy entry "Hiera-vault lookup"
No such key: "lookup_options"
[hiera-vault] Skipping hiera_vault backend because key 'lookup_options'
does not match confine_to_keys
Environment Data Provider (hiera configuration version 5)
Using configuration
"/etc/puppetlabs/code/environments/stretch/hiera.yaml"
Merge strategy hash
Hierarchy entry "Per-node data (yaml version)"
Path
"/etc/puppetlabs/code/environments/stretch/data/nodes/sppuppet03test.domain.com.yaml"
    Original path: "nodes/%{::trusted.certname}.yaml"
    Path not found
Hierarchy entry "Other YAML hierarchy levels"
  Path "/etc/puppetlabs/code/environments/stretch/data/common.yaml"
    Original path: "common.yaml"
    Path not found

Searching for "libnss-ldap_secret"
Global Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/puppet/hiera.yaml"
Hierarchy entry "Hiera-vault lookup"
Found key: "libnss-ldap_secret" value: "test"
[hiera-vault] Client configured to connect to
https://vault.domain.com:8200
[hiera-vault] Looking in path secret/puppet/stretch/libnss-ldap_secret
[hiera-vault] Looking in path secret/puppet/libnss-ldap_secret
[hiera-vault] Read secret: libnss-ldap_secret
cat /etc/puppetlabs/puppet/hiera.yaml
Hiera 5 Global configuration file
notice no TABs are allowed
version: 5
defaults:
data_hash: yaml_data
hierarchy:
- name: Common
data_hash: yaml_data
#hierarchy: []
hierarchy:

name: "Hiera-vault lookup"
lookup_key: hiera_vault
options:
Only use this backend if the key matches one of the regexes in the

array - related to performance - did not work with key.secret for me, had
to change to key_secret
confine_to_keys:
- ".*secret$"
- ".*vault$"
ssl_verify: false
#ssl_pem_file: /etc/puppetlabs/puppet/ssl/ssl_pem_file.pem
#ssl_ca_cert: /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem
#ssl_ciphers: "MY:SSL:CIPHER:CONFIG"
address: https://vault.domain.com:8200
token: xxxxxxxxxxxxxxxxxxxxxx
default_field: value
mounts:
secret:
# we first check if we have environment specific key, otherwise
use common key
- puppet/%{::environment}/
- puppet/
just thinking loud - if "ssl_verify: false" means the same as
"-tls-skip-verify" in vault command ? as in our case vault without
-tls-skip-verify would fail with message like: x509: cannot validate
certificate for <IP_ADDRESS> because it doesn't contain any IP SANs - not sure
if related though ?

Any update on this?
On Wed, 31 Jul 2019, 10:50 Peter Sutty<EMAIL_ADDRESS>wrote:

puppet module list --environment stretch | grep vault
petems-hiera_vault (v0.4.1)
cat
/etc/puppetlabs/code/environments/stretch/modules/test/manifests/init.pp
$secret = lookup({"name" => "libnss-ldap_secret" })
notify {"testing vault ${secret}":}
file { '/tmp/test':
content => $secret,
}
}
sudo puppet agent -tv --tags test
Error: Could not retrieve catalog from remote server: Error 500 on SERVER:
Server Error: Evaluation Error: Error while evaluating a Resource
Statement, Evaluation Error: Error while evaluati
ng a Function Call, Lookup of key 'libnss-ldap_secret' failed:
[hiera-vault] Skipping backend. Configuration error: Received fatal alert:
handshake_failure (file: /etc/puppetlabs/code/enviro
nments/stretch/modules/test/manifests/init.pp, line: 6, column: 13) on
node kicktest.domain.com
Warning: Not using cache on failed catalog
Error: Could not retrieve catalog; skipping run
puppet lookup libnss-ldap_secret --explain
Thread.exclusive is deprecated, use Thread::Mutex
/etc/puppetlabs/code/environments/stretch/modules/common/lib/facter/partitions.rb:12:in
<top (required)>' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/facts/facter.rb:35:in to_hash'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/facts/facter.rb:35:in
find' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/indirection.rb:198:in find'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/node.rb:135:in
fact_merge' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/node/plain.rb:18:in find'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/indirector/indirection.rb:198:in
find' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/lookup.rb:345:in generate_scope'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application/lookup.rb:312:in
main' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:383:in run_command'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:375:in
block in run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util.rb:667:in exit_on_fail'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/application.rb:375:in
run' /opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:139:in run'
/opt/puppetlabs/puppet/lib/ruby/vendor_ruby/puppet/util/command_line.rb:77:in
execute' /opt/puppetlabs/puppet/bin/puppet:5:in '
Searching for "lookup_options"
Global Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/puppet/hiera.yaml"
Hierarchy entry "Hiera-vault lookup"
No such key: "lookup_options"
[hiera-vault] Skipping hiera_vault backend because key
'lookup_options' does not match confine_to_keys
Environment Data Provider (hiera configuration version 5)
Using configuration
"/etc/puppetlabs/code/environments/stretch/hiera.yaml"
Merge strategy hash
Hierarchy entry "Per-node data (yaml version)"
Path
"/etc/puppetlabs/code/environments/stretch/data/nodes/sppuppet03test.domain.com.yaml"
    Original path: "nodes/%{::trusted.certname}.yaml"
    Path not found
Hierarchy entry "Other YAML hierarchy levels"
  Path "/etc/puppetlabs/code/environments/stretch/data/common.yaml"
    Original path: "common.yaml"
    Path not found

Searching for "libnss-ldap_secret"
Global Data Provider (hiera configuration version 5)
Using configuration "/etc/puppetlabs/puppet/hiera.yaml"
Hierarchy entry "Hiera-vault lookup"
Found key: "libnss-ldap_secret" value: "test"
[hiera-vault] Client configured to connect to
https://vault.domain.com:8200
[hiera-vault] Looking in path secret/puppet/stretch/libnss-ldap_secret
[hiera-vault] Looking in path secret/puppet/libnss-ldap_secret
[hiera-vault] Read secret: libnss-ldap_secret

cat /etc/puppetlabs/puppet/hiera.yaml
Hiera 5 Global configuration file
notice no TABs are allowed
version: 5
defaults:
data_hash: yaml_data
hierarchy:
- name: Common
data_hash: yaml_data
#hierarchy: []
hierarchy:

name: "Hiera-vault lookup"
lookup_key: hiera_vault
options:
Only use this backend if the key matches one of the regexes in the

array - related to performance - did not work with key.secret for me, had
to change to key_secret
confine_to_keys:
- ".*secret$"
- ".*vault$"
ssl_verify: false
#ssl_pem_file: /etc/puppetlabs/puppet/ssl/ssl_pem_file.pem
#ssl_ca_cert: /etc/puppetlabs/puppet/ssl/ca/ca_crt.pem
#ssl_ciphers: "MY:SSL:CIPHER:CONFIG"
address: https://vault.domain.com:8200
token: xxxxxxxxxxxxxxxxxxxxxx
default_field: value
mounts:
secret:
# we first check if we have environment specific key, otherwise
use common key
- puppet/%{::environment}/
- puppet/
just thinking loud - if "ssl_verify: false" means the same as
"-tls-skip-verify" in vault command ? as in our case vault without
-tls-skip-verify would fail with message like: x509: cannot validate
certificate for <IP_ADDRESS> because it doesn't contain any IP SANs - not sure
if related though ?

I experienced a similar issue when our Puppet Servers are trying to talk directly to Vault.
Check if you can use puppet lookup as this will use the Puppet Ruby gems (whereas Puppet Server is using JRuby gems).
If puppet lookup works fine (similar to your curl), then my next suggestion is to check the cipher suite of Vault against what the JRuby implemenetation of OpenSSL supports (https://github.com/jruby/jruby-openssl/issues/168) is realted.
To work around this, we run Vault in agent mode on the Puppet Servers and have them talk to local host an the Vault agent is happy to support the same ciphers as the Vault server.

Bingo!
it was the cipher suite set on vault too hard:
tls_cipher_suites =
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
If you comment it out it will add this cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA
on vault, which is compatible with puppet server's JRuby.
Now just need to wait for this fix
https://github.com/jruby/jruby-openssl/pull/177
And thanks for the workaround tip, but I am running vault in internal
environment (not a public service), so I am good with that cipher
On Tue, Aug 20, 2019 at 7:23 PM Travis Cosgrave<EMAIL_ADDRESS>wrote:

I experienced a similar issue when our Puppet Servers are trying to talk
directly to Vault.
Check if you can use puppet lookup as this will use the Puppet Ruby gems
(whereas Puppet Server is using JRuby gems).
If puppet lookup works fine (similar to your curl), then my next
suggestion is to check the cipher suite of Vault against what the JRuby
implemenetation of OpenSSL supports (jruby/jruby-openssl#168
https://github.com/jruby/jruby-openssl/issues/168) is realted.
To work around this, we run Vault in agent mode on the Puppet Servers and
have them talk to local host an the Vault agent is happy to support the
same ciphers as the Vault server.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/petems/petems-hiera_vault/issues/39?email_source=notifications&email_token=AA5WSLKHKVLWBCRCHT5ZPXTQFQSB7A5CNFSM4IH4XCY2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOD4XBH5I#issuecomment-523113461,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AA5WSLN5DRR2XXS5ODN7RJDQFQSB7ANCNFSM4IH4XCYQ
.


Dependency conflict with langchain-mistralai

Getting a dependency conflict when trying to include langchain-mistralai:
poetry add langchain-mistralai
Using version ^0.0.5 for langchain-mistralai

Updating dependencies
Resolving dependencies... (0.3s)

Because no versions of langchain-mistralai match >0.0.5,<0.0.6
 and langchain-mistralai (0.0.5) depends on mistralai (>=0.1,<0.2), langchain-mistralai (>=0.0.5,<0.0.6) requires mistralai (>=0.1,<0.2).
And because semantic-router (0.0.27) depends on mistralai (>=0.0.12,<0.0.13)
 and no versions of semantic-router match >0.0.27,<0.0.28, langchain-mistralai (>=0.0.5,<0.0.6) is incompatible with semantic-router (>=0.0.27,<0.0.28).
So, because vortex-python depends on both semantic-router (^0.0.27) and langchain-mistralai (^0.0.5), version solving failed.

I wonder if you can update the dependencies definition for mistralai.
This is my current setup for poetry:
python = ">=3.9,<3.13"
mlflow = "^2.10.2"
pydantic = ">=2.5.3,<3.0.0"
python-dotenv = "^1.0.1"
typing-extensions = "^4.9.0"
urllib3 = "^1.26.16"
dagster = "^1.6.6"
pandas = "^2.2.1"
langchain = "^0.1.9"
langchain-openai = "^0.0.8"
openai = "^1.12.0"
sqlalchemy = "^2.0.27"
psycopg2-binary = "^2.9.9"
bs4 = "^0.0.2"
dagster-webserver = "^1.6.6"
langchainhub = "^0.1.14"
selenium = "^4.18.1"
html2text = "^2024.2.26"
chromadb = "^0.4.24"
pymupdf = "^1.23.25"
wikipedia = "^1.4.0"
sendgrid = "^6.11.0"
fastapi = "^0.110.0"
uvicorn = "^0.27.1"
twilio = "^9.0.0"
python-decouple = "^3.8"
python-multipart = "^0.0.9"
pyngrok = "^7.1.3"
langchain-experimental = "^0.0.52"
langchain-community = "^0.0.24"
langchain-together = "^0.0.2.post1"
numexpr = "^2.9.0"
langchain-fireworks = "^0.1.1"
semantic-routes = "^0.0.27"

@zahid-syed maybe something simple like more flexible versions (ie mistralai = "^0.0.2")

Well, it's not making the cut. I believe it's due to the difference in version ranges that semantic-router vs langchain-mistralai have for mistralai. I was able to install mistral using mistralai = "^0.0.12", since no version 0.0.2 even exists on pipy and the minimum requirement by semantic-router is such version, however, the installation of langchain is still unsuccessful. Notice this would happen the other way around (having installed langchain-mistralai + mistralai, and attempting to install semantic-router)
Having semantic-router installed and attempting to install langchain-mistralai

Having langchain-mistralai installed and attempting to install semantic-router


Feature Request: can you publish on the Open VSX Registry

Can you please publish this extension on the Open VSX Registry so that it can be installed in VSCodium (the open source non-Microsoft non-telemetry build)?

Done!

Very awesome, thanks a lot!


The compilation error in the UEPyFFoliageInstance.cpp

Hello author, your plugin is awesome. But when I built the project with the latest source code on UE 4.20, I encountered a compilation error. When I choose a solution configured for Development without the Editor, I get the following compilation error message:

Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(35): error C2039: 'Instances': is not a member of 'FFoliageMeshInfo'
Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(37): error C2039: 'Instances': is not a member of 'FFoliageMeshInfo'
Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(67): error C2039: 'PreMoveInstances': is not a member of 'FFoliageMeshInfo'
Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(69): error C2039: 'PostMoveInstances': is not a member of 'FFoliageMeshInfo'
Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(88): error C2039: 'PreMoveInstances': is not a member of 'FFoliageMeshInfo'
Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(90): error C2039: 'PostMoveInstances': is not a member of 'FFoliageMeshInfo'

There is no problem with using the solution configure for Development Editor.
I tried using the WITH_EDITOR macro to avoid compiling the relevant code in the file, but it still doesn't work. Do you understand the reason for this issue? Thank you.

We got the same issue!
Is there any solution? We need to ship the project soon. :sweat:
Thank you.

We got the same issue!
Is there any solution? We need to ship the project soon.
Thank you.

Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(33): error C2039: 'Instances': is not a member of 'FFoliageMeshInfo'
ParallelExecutor.ExecuteActions:   C:\Program Files\Epic Games\UE_4.20\Engine\Source\Runtime/Foliage/Public/InstancedFoliageActor.h(20): note: see declaration of 'FFoliageMeshInfo'
ParallelExecutor.ExecuteActions:   C:\workspace\apps\ProjectName\dev\Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(33): error C2228: left of '.Num' must have class/struct/union
ParallelExecutor.ExecuteActions:   C:\workspace\apps\ProjectName\dev\Plugins\UnrealEnginePython\Source\UnrealEnginePython\Private\Wrappers\UEPyFFoliageInstance.cpp(35): error C2039: 'Instances': is not a member of 'FFoliageMeshInfo'
ParallelExecutor.ExecuteActions:   C:\Program Files\Epic Games\UE_4.20\Engine\Source\Runtime/Foliage/Public/InstancedFoliageActor.h(20): note: see declaration of 'FFoliageMeshInfo'

and so on..

The easiest but not elegant way is to comment out the relevant code, anyway, these APIs can only be used in the editor.

That helped!
:+1:

I think that the guard with #ifdef WITH_EDITOR would be a perfect solution.


pilz_industrial_motion: 0.5.0-4 in 'noetic/distribution.yaml' [bloom]

Increasing version of package(s) in repository pilz_industrial_motion to 0.5.0-4:

upstream repository: https://github.com/PilzDE/pilz_industrial_motion.git
release repository: https://github.com/PilzDE/pilz_industrial_motion-release.git
distro file: noetic/distribution.yaml
bloom version: 0.10.7
previous version for package: null

pilz_industrial_motion
* Port to ROS Noetic (ubuntu 20.04, python3)
  * Remove pilz_store_positions package
  * Update branching model in README.md
  * Use relative paths for test-data/movecmd.py (colcon support)
  * Misc minor refactorings
* Update maintainer list
* Move pilz command planner to moveit
* Contributors: Pilz GmbH and Co. KG

pilz_robot_programming
* Adapt to changes in MoveThread api
* Port to ROS Noetic (ubuntu 20.04, python3)
  * Remove pilz_store_positions package
  * Update branching model in README.md
  * Use relative paths for test-data/movecmd.py (colcon support)
  * Misc minor refactorings
* Fix KeyError on calling release twice
* Fix blend-radius and misunderstandings in Tests (#341, #330)
* Fix architecture documentation
* Use public acceptance-test utility methods
* Move pilz command planner to moveit
* Contributors: Pilz GmbH and Co. KG

Holding for Noetic sync.


Error loading permission sets while creating Eligibility policy

Describe the bug
@tawoyinfa: With reference to the closed issue #261 which is still not resolved.
When we are trying to create an eligibility policy, UI is crashing, and we are getting "error fetching permissions" message as shown in the attached screenshot, in Developer Tools console in browser. We tested with both Chrome and Edge.
Expected behavior
Permission Sets should be loaded successfully in the Permissions dropdown while creating the Eligibility Policy.
Screenshots

Desktop (please complete the following information):

OS: Windows 11

Browser: Chrome

Version: Chrome Version 125.0.6422.142 (Official Build) (64-bit)

OS: Windows 11

Browser: Edge

Version: Edge Version 125.0.2535.85 (Official build) (64-bit)

Additional context
@tawoyinfa  This fix might be similar to the getOUs issue that was fixed in the latest release 1.1.2

@vgsachin839  This issue has been fixed in the latest commit. Let me know if you are still facing the problem