LDAPSocketOpenError

I used Certipy against a few HTB machines without any issues. Now I setup my own Windows server 2019 VM and I'm getting the following error:
$ ./venv/bin/certipy find -u ###### -p ######## -dc-ip <IP_ADDRESS> -ns <IP_ADDRESS> -debug
Certipy v4.8.2 - by Oliver Lyak (ly4k)

[+] Authenticating to LDAP server
[+] Authenticating to LDAP server
[-] Got error: socket ssl wrapping error: [Errno 104] Connection reset by peer
Traceback (most recent call last):
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/lib/ldap.py", line 77, in connect
    self.connect(version=ssl.PROTOCOL_TLSv1_2)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/lib/ldap.py", line 136, in connect
    bind_result = ldap_conn.bind()
                  ^^^^^^^^^^^^^^^^
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/ldap3/core/connection.py", line 589, in bind
    self.open(read_server_info=False)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/ldap3/strategy/sync.py", line 57, in open
    BaseStrategy.open(self, reset_usage, read_server_info)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/ldap3/strategy/base.py", line 146, in open
    raise exception_history[0][0]
ldap3.core.exceptions.LDAPSocketOpenError: socket ssl wrapping error: [Errno 104] Connection reset by peer

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/entry.py", line 60, in main
    actions[options.action](options)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/commands/parsers/find.py", line 12, in entry
    find.entry(options)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/commands/find.py", line 1179, in entry
    find.find()
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/commands/find.py", line 165, in find
    connection = self.connection
                 ^^^^^^^^^^^^^^^
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/commands/find.py", line 124, in connection
    self._connection.connect()
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/lib/ldap.py", line 83, in connect
    self.connect(version=ssl.PROTOCOL_TLSv1)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/certipy/lib/ldap.py", line 136, in connect
    bind_result = ldap_conn.bind()
                  ^^^^^^^^^^^^^^^^
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/ldap3/core/connection.py", line 589, in bind
    self.open(read_server_info=False)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/ldap3/strategy/sync.py", line 57, in open
    BaseStrategy.open(self, reset_usage, read_server_info)
  File "/home/kali/Temp/venv/lib/python3.11/site-packages/ldap3/strategy/base.py", line 146, in open
    raise exception_history[0][0]
ldap3.core.exceptions.LDAPSocketOpenError: socket ssl wrapping error: [Errno 104] Connection reset by peer

The Windows server 2019 installation is pretty straightforward. I used the 180 days evaluation ISO, installed all Windows patches, then I added Active Directory Domain Services and then I added Active Directory Certificates Services (here I selected Certification Authority role and later Enterprise CA).
To install certipy, I ran ./venv/bin/python -m pip install certipy-ad
bloodhound.py works fine.

Certipy uses LDAPS by default, you can switch to LDAP with -scheme or -ldap-scheme. Alternatively you must request a certificate for server authentication for your domain controller. It fails because the domain controller doesn't have a certificate to use. Log on to the DC as domain admin, then search for Computer Certificates and follow the guide to request a new certificate. Choose the Domain Controller option


PhantomJS disable proxy auth on empty password

Which version of PhantomJS are you using? Tip: run phantomjs --version.
2.1.1

What steps will reproduce the problem?

trying to connect to a proxy with an empty password

Which operating system are you using?
Ubuntu 16.04

Did you use binary PhantomJS or did you compile it from source?
binary

Please provide any additional information below.

The issue has been described quite accurately by @cfank in comment https://github.com/ariya/phantomjs/issues/14554#issuecomment-270241200
buth I think that this is a separate issue from the linked one.
https://github.com/ariya/phantomjs/blob/master/src/phantom.cpp#L423 This check could be causing the issue with crawlera.
Unfortunately crawlera uses the api key as the username and an empty password, but this code discard username and password altogether in case of an empty password.
CC: @ezako2

Great investigation @dege88 this looks likely to be the issue that's been plaguing us, and the fix could be as simple as changing that && to a || ... 😅
I'd be happy to test a properly patched build, just let me know.


Unable to install the package in project framework targeted 4.0

The package is not installed if your project framework version = v4.0
Install-Package : Could not install package 'AutofacSerilogIntegration x.x.x'. You are trying to install this package into a project that targets '.NETFramework,Version=v4.0',  but the package does not contain any assembly references or content files that are compatible with that framework. For more information, contact the package author.

Hi Ammar, Serilog's dropping .NET 4 from the v2 package, I don't think this package will support it. Should be possible to grab the source and recompile/embed however. Thanks!


[Discussion] Removal of Azure Functions version 4.27.5

Discussion issue for removal of Azure Functions version 4.27.5

I have a function app which is still running this version, how do I bump it to the latest runtime?


Add the ability to use a DNSimple User API token

This Pull Request adds the ability to use a User API token (as opposed to an Account API token) for communicating with the DNSimple API. Currently, if a User API token is attempted to be used, it will fail as discussed in https://github.com/neoskop/cert-manager-webhook-dnsimple/issues/12.
To test, set the token value to a valid User DNSimple API token and the accountID value to the account ID for the DNSimple account that contains the DNS zones which contain the domains for which Let's Encrypt certificates are to be obtained for.

@splattner I'm not sure if you're the right person to ask for this but looking at https://github.com/puzzle/cert-manager-webhook-dnsimple/pull/23#issuecomment-1705391752, given that @puzzle now maintains this repository, I'm wondering if this pull request could be reviewed and merged if there are no issues with it.

@IntegralProgrammer Hello on behalf of Puzzle. Our maintenance of the project has just begun to take shape. You can expect some updates in the upcoming weeks and your request will be reviewed. Thanks for your patience!

Wouldn't it make more sense to save this data as part of the secret dnsimple-token? That way the configuration for the authentication lies in single (and encrypted) source.

Wouldn't it make more sense to save this data as part of the secret dnsimple-token? That way the configuration for the authentication lies in single (and encrypted) source.

Okay, that is doable. The easiest way to do that would be to edit https://github.com/IntegralProgrammer/cert-manager-webhook-dnsimple/blob/feature-env-override-account-id/deploy/dnsimple/templates/deployment.yaml#L41-L45 so that if .Values.dnsimple.existingAccountIdSecret is set to true, the DNSIMPLE_ACCOUNT_ID environment variable value will come from the Kubernetes secret referenced by .Values.dnsimple.accountIdSecretName and .Values.dnsimple.accountIdSecretKey. So therefore, by setting .Values.dnsimple.existingAccountIdSecret to true, .Values.dnsimple.accountIdSecretName to dnsimple-token, and .Values.dnsimple.accountIdSecretKey to accountId we would have the option of storing the entire DNSimple API access configuration in the dnsimple-token Kubernetes secret with the API access token stored under the token key and the DNSimple account ID stored under the accountId key.
This would really only be for convenience and simplicity as the DNSimple account ID value need not be kept secret as, unlike the API access token, knowing it does not permit any access to the DNSimple API.
WDYT?

I was thinking about modifying https://github.com/IntegralProgrammer/cert-manager-webhook-dnsimple/blob/feature-env-override-account-id/main.go#L92-L106 and load the data directly from the code. This would keep the template more clean.
That makes the code more complex though so I'm honestly not sure if that is preferable.

I was thinking about modifying https://github.com/IntegralProgrammer/cert-manager-webhook-dnsimple/blob/feature-env-override-account-id/main.go#L92-L106 and load the data directly from the code. This would keep the template more clean. That makes the code more complex though so I'm honestly not sure if that is preferable.

I think the best option is to refactor the code so that Kubernetes Secrets are passed into containers via environment variables. To do so, we would need to modify https://github.com/puzzle/cert-manager-webhook-dnsimple/blob/04cc3cc9b6f4528a0eac5f09454db5389e2cab95/deploy/dnsimple/templates/deployment.yaml#L41-L43 and add
- name: DNSIMPLE_TOKEN
  valueFrom:
    secretKeyRef:
      name: {{ include "dnsimple-webhook.tokenSecretName" . }}
      key: token

then modify https://github.com/puzzle/cert-manager-webhook-dnsimple/blob/04cc3cc9b6f4528a0eac5f09454db5389e2cab95/main.go#L89-L103 so that apiKey is read from an environment variable (apiKey := os.Getenv("DNSIMPLE_TOKEN")).
In addition to that simplification, we would be able to remove https://github.com/puzzle/cert-manager-webhook-dnsimple/blob/04cc3cc9b6f4528a0eac5f09454db5389e2cab95/deploy/dnsimple/templates/secret.yaml#L16-L48 as the webhook container would no longer need to read this secret via the Kubernetes API.
Furthermore, we could probably also remove https://github.com/puzzle/cert-manager-webhook-dnsimple/blob/04cc3cc9b6f4528a0eac5f09454db5389e2cab95/deploy/dnsimple/templates/staging.cluster-issuer.yaml#L20-L23 and https://github.com/puzzle/cert-manager-webhook-dnsimple/blob/04cc3cc9b6f4528a0eac5f09454db5389e2cab95/deploy/dnsimple/templates/production.cluster-issuer.yaml#L20-L23 since the DNSimple API access token would now always be coming from the DNSIMPLE_TOKEN environment variable.
So while this solution would make the deployment.yaml file slightly more complicated, it would have a net result of much less complicated code.
So if you agree that this is the preferable option, I can do that refactoring.

Yes tthat looks like a very sensible simplification. It would be great if you could implement that!

Hi @IntegralProgrammer
Thank you for your contribution. I think we should keep the ability to configure the token via a secret.
To my understanding the idea behind that design is that you could have multiple issuers which could use different DNSimple credentials. Also if we keep it in the current way we don't break users which rely on this.
To support the user API tokens we could add an additional setting accoundID in the issuer config.
I created a PR(#29) which should implement that change. I couldn't test it so far as I don't have access to DNSimple at the moment.
@IntegralProgrammer @moll-re  can you test these changes? would this solve the your requirement?
Also my PR lacks the required changes in the helm chart and documentation. So feel free to merge the changes of #29 into this PR or we can add the missing changes to #29. whatever you prefer.

@dvob Thank you for your feedback and PR. Here are my thoughts on how to proceed...

I think we should keep the ability to configure the token via a secret. ... Also if we keep it in the current way we don't break users which rely on this.

This was my intent all along to keep the DNSimple token as a Kubernetes secret. In my comment on https://github.com/puzzle/cert-manager-webhook-dnsimple/pull/26#issuecomment-2015796855 I propose that we keep the DNSimple credentials as a Kubernetes secret but instead of that token being read from the webhook container using the Kubernetes API directly... https://github.com/puzzle/cert-manager-webhook-dnsimple/blob/04cc3cc9b6f4528a0eac5f09454db5389e2cab95/main.go#L89-L103 ...it would be read from a environment variable whose value would come from the DNSimple token environment variable - this environment variable from Kubernetes secret would be configured in the /deploy/dnsimple/templates/deployment.yaml file. So from the perspective of a user deploying puzzle/cert-manager-webhook-dnsimple nothing changes - the webhook container still obtains its DNSimple API credentials from the same Kubernetes secret as before therefore nothing should break.

To my understanding the idea behind that design is that you could have multiple issuers which could use different DNSimple credentials

Yes, that is correct - the DNSimple API credentials are associated with a certificate issuer and therefore it is possible to deploy multiple certificate issuers each with their own unique DNSimple API token. For example, certificate issuer (A) could be configured to use DNSimple API token (X), certificate issuer (B) could be configured to use DNSimple API token (Y), and certificate issuer (C) could be configured to use DNSimple API token (Z). From a user perspective, that would be done with multiple helm installs, one for each certificate issuer to be created each creating a new certificate issuer named as {{ helm_install_name }}-staging or {{ helm_install_name }}-production. Again, given that the DNSimple API token Kubernetes Secret is created on a per-install basis, it wouldn't matter if that secret is read by Kubernetes populating an environment variable with it or if the webhook container reads it directly via the Kubernetes API. It is however technically possible, although I don't know about how likely it would be, for a user to be using custom YAML manifests (as the Helm templates in this repository don't allow for this) that reference different Kubernetes secrets for different DNSimple API tokens on different certificate issuers but using the same webhook container. For that reason, I see merit in using the Kubernetes API to read secrets as opposed to having them passed by environment variable.

To support the user API tokens we could add an additional setting accoundID in the issuer config. I created a PR(#29) which should implement that change. I couldn't test it so far as I don't have access to DNSimple at the moment. @IntegralProgrammer @moll-re can you test these changes? would this solve your requirement? Also my PR lacks the required changes in the helm chart and documentation. So feel free to merge the changes of #29 into this PR or we can add the missing changes to #29. whatever you prefer.

I looked at PR(#29) and, although I didn't test it yet it, I anticipate that it would fail at https://github.com/dvob/cert-manager-webhook-dnsimple/blob/95329b721c2c353d4d947070cf34b8f2e0fef0f2/main.go#L141 given that I had to bypass that call in my branch https://github.com/IntegralProgrammer/cert-manager-webhook-dnsimple/blob/ca1b10acea4654bc21385e93dd0a0e240c3eb880/main.go#L122-L138 that being said, that change could easily be added to PR(#29) as well. With that change added and the required changes to the Helm template YAMLs added as well, this does look like it would solve my requirement.
So how should we proceed? @moll-re is it important that the DNSimple Account ID be stored as part of the dnsimple-token secret (https://github.com/puzzle/cert-manager-webhook-dnsimple/pull/26#issuecomment-2003594017) or should it be moved to the issuer config as @dvob suggests? I'm fine to stay with using the Kubernetes API from inside the webhook container to read secrets given the small chance that someone might be using custom YAML manifests and updating the image to use environment variables from secrets could break their custom deployment.
So here's how I propose that we proceed:

@moll-re @dvob Please decide if we should store the DNSimple Account ID in the dnsimple-token Kubernetes secret (that is referenced by the issuer config) or if it should be stored directly in the issuer config. I'm basically equally fine with both of those options although storing in the issuer config is slightly less work as it has already been implemented by @dvob.
I plan to work on this branch PR(#26) moving the changes to the getClient, Present, and CleanUp functions in PR(#29) to here.
I'll update the Helm Chart templates and documentation so that the accountId variable in values.yaml will be passed down to the certificate issuer configs if we choose to go that route and not store it in the dnsimple-token Kubernetes secret.

@IntegralProgrammer thank you for your response. I spoke with @moll-re and we decided it would be best to go ahead with the solution proposed in #29 where the account ID is stored in the issuer config. As you mentioned it would be transparent for users  which deploy the webhook using the provided helm chart, but if someone uses the webhook with their own setup it would break them. Also we think this is the most flexible approach.

I plan to work on this branch PR(https://github.com/puzzle/cert-manager-webhook-dnsimple/pull/26) moving the changes to the getClient, Present, and CleanUp functions in PR(https://github.com/puzzle/cert-manager-webhook-dnsimple/pull/29) to here.

In that case I close #29 then you can merge/cherry-pick the changes from there and go ahead with this PR.
Thank you in advance and sorry for the back and forth.

@IntegralProgrammer thank you for your response. I spoke with @moll-re and we decided it would be best to go ahead with the solution proposed in #29 where the account ID is stored in the issuer config. As you mentioned it would be transparent for users which deploy the webhook using the provided helm chart, but if someone uses the webhook with their own setup it would break them. Also we think this is the most flexible approach.

I plan to work on this branch PR(#26) moving the changes to the getClient, Present, and CleanUp functions in PR(#29) to here.

In that case I close #29 then you can merge/cherry-pick the changes from there and go ahead with this PR.
Thank you in advance and sorry for the back and forth.

I have changed the implementation to follow this design pattern and can confirm that, when using a DNSimple User API token:

Let's Encrypt certificates can be generated using both the staging and production issuers when the dnsimple.accountID value is set to the value of the DNSimple account that controls the domain for which certificates are to be obtained for. :white_check_mark:
The "failed to lookup account ID. data missing. you are most likely using a user token without configuring an account ID in your issuer config." error is displayed in the logs of the cert-manager pod when a certificate is requested but the dnsimple.accountID value is not present :white_check_mark:.

This fulfills the requirements within the scope of this PR for my intended use-case and therefore this PR can be merged upon satisfactory review.

Tested on an independent build.
Running on minikube and generating a dummy certificate yields the described results:

normal workflow when using account-level token
normal workflow when using a user token and specifying the account id
warning and failure when only specifying the user-token


Feed wont be showed under Discover or My Feeds

Describe the bug

When i subscribe to a feed list or just discover them , the list is empty  or it shows an error.
To Reproduce
Steps to reproduce the behavior:
Feed itself

Got to an Feed over "Discover Feeds" like the feed "Whats Science"

Tap into it then it comes "This List is Empty" ,

Adding Feed:

Add the Feed over "+" to ur Feeds

Go to my Feeds

Tap "see from discover" there comes the error "could not find feed"  and under it This list is empty

Expected behavior

The Feed should showing up correctly
Screenshots

Details

Platform:
Android
Platform version:
Miui 12.5.1 Based on Android 11
App version:
1.42.0 (28) Production

Additional context

best regards

Do u have an apk version from it ?
Im not a dev so im not able to compile an apk.
Best regards

I downloaded the 1.4.3  it from apk mirror ( play Store not rolled out yet ) . Same behaviour nothing has changed.
Best regards

The only feed  which wirks flawless on any device ( phone,web) is "whats hot classic"

Hey! Thank you for the updates. So to summarize:

Feeds do not work on your phone (except What's Hot Classic)
Feeds do work on your old Huawei

Is that correct?

Apologies, I mistakenly wrote 1.4.3 instead of 1.43.0. Also, we've since updated to 1.44.0. Can you please upgrade to 1.44.0 from the Play Store and see if that works?

Helio @estrattonbailey
I have it already same errors  and also in the brower.( Ff/kiwi browser)
Moreover there was an error on the classic feed ( wont fetch  old threads, reload error)  on  Browser and Xiaomi device.
Best regards.

Just returning to provide an update 👋  we still cannot reproduce this issue, unfortunately 😕
I'm going to close for now, but we can reopen at a later date if this surfaces again ✌


avoid creating symlink to clang format config

resolves #14
Change-Id: I1ac2d54dee77c9d9ecd93bdd3b38a6b0856caf0f

Nice! Thanks!


Build out footer

Content

[ ] Finalize homepage content strategy
[ ] Send footer content to designer

Design

[ ] Vyki to check in with Kristi
[ ] Send designer final content / strategy
[ ] Approve final design drafts for footer

Implementation

[ ] Develop footer based on design specs

Resources

Prior art / initial Figma design (not final, but to give an idea)
Lo-Fi Wireframe

@angela-tran Add some additional tasks for content, design, and implementation. Let me know if we should build out the implementation tasks to include a few more steps. I will update these tasks with all the approved designs once we get to that point, so you don't have too look around

@vykster Checking on the content strategy. Do we [Compiler] need to finalize the content, or were you planning to send that back over to Haley for a final run-through? If you cc me or send me Haley's contact info, I would be happy to reach out.

it's totally up to you know. I think what Haley sent was incomplete and we
can finish it ourselves and/or ask for additional support from Haley. I can
intro you directly.
On Tue, Jun 21, 2022 at 5:53 PM Anthony Rollins @.***>
wrote:

@vykster https://github.com/vykster Checking on the content strategy.
Do we [Compiler] need to finalize the content, or were you planning to send
that back over to Haley for a final run-through? If you cc me or send me
Haley's contact info, I would be happy to reach out.
—
Reply to this email directly, view it on GitHub
https://github.com/compilerla/compiler.la/issues/6#issuecomment-1162505138,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ABAWB5WXMIQ54MYIY4RALTDVQJPZHANCNFSM5YU5UC3A
.
You are receiving this because you were mentioned.Message ID:
@.***>

@vykster Thanks! Haley had a few questions that I answered on the doc and is currently taking another stab at the content, prioritizing some footer content. Would you be able to send me Kristi's email address, so I can prepare to send her the footer content? Did you get a chance to see if she is available for more work?

@thekaveman @angela-tran The content is in a good place for you both to review and give feedback. There is one place that you both should pay close attention to the Our Worksection. Let me know if you have any questions!

We have a new footer style for implementation!


meros_vp_stereotypes.xml not contains all required stereotypes

meros_vp_stereotypes.xml should contain stereotypes mentioned in documentation.  However many of them is missing. For example:

New version 1.2 is under development. Version 1.1 will be deprecated.

First of all, MeROS releases  are numbered 1.2.3

Hence, if you would like to increase from for example 1.1.2 to 1.2.1 it should be backward compatible.
Moreover, I do not see a point to marking issue as completed when it is not :(


Reduce allocations for 6 & 7-card hand evaluations

This PR reduces allocations for 6 & 7-card hand evaluations by avoiding making a tuple of all card combinations, and instead evaluates and tracks each 5-card hand rank. We're also adding a test for the allocations

bors r+

bors r+

bors r-

bors r+


NoResourceAdapterError when using TypeORM

          I have the same error.

import AdminJS from 'adminjs';
import AdminJSExpress from '@adminjs/express';
import 'reflect-metadata';
import * as AdminJSTypeORM from '@adminjs/typeorm';
import express, { Express } from 'express';
import dotenv from 'dotenv';

// Database connection
import dataSource from './orm/datasource.js';
import { User } from './orm/models/user.js';

dotenv.config();

const port = process.env.PORT || 3000;

const start = async () => {
  const app: Express = express();
  await dataSource.initialize();

  // Initializtion
  AdminJS.registerAdapter({
    Resource: AdminJSTypeORM.Resource,
    Database: AdminJSTypeORM.Database
  });

  const adminOptions = {
    resources: [ User ]
  }
  const admin = new AdminJS(adminOptions);
  const adminRouter = AdminJSExpress.buildRouter(admin);
  app.use(admin.options.rootPath, adminRouter);

  app.listen(port, () => {
    console.log(`AdminJS started on http://localhost:${port}${admin.options.rootPath}`)
  });

}

start();

And the error:
[0] 5:55:44 PM - Found 0 errors. Watching for file changes.
[1] (node:31804) ExperimentalWarning: Import assertions are not a stable feature of the JavaScript language. Avoid relying on their current behavior and syntax as those might change in a future version of Node.js.
[1] (Use `node --trace-warnings ...` to show where the warning was created)
[1] (node:31804) ExperimentalWarning: Importing JSON modules is an experimental feature and might change at any time
[1] file:///Users/vitalyradchik/Devel/StilyoApps/Tests/adminjs-app-ts/node_modules/adminjs/lib/backend/utils/resources-factory/resources-factory.js:73
[1]         throw new NoResourceAdapterError(resourceObject);
[1]               ^
[1]
[1] NoResourceAdapterError: There are no adapters supporting one of the resource you provided
[1]     at file:///Users/vitalyradchik/Devel/StilyoApps/Tests/adminjs-app-ts/node_modules/adminjs/lib/backend/utils/resources-factory/resources-factory.js:73:15
[1]     at Array.map (<anonymous>)
[1]     at ResourcesFactory._convertResources (file:///Users/vitalyradchik/Devel/StilyoApps/Tests/adminjs-app-ts/node_modules/adminjs/lib/backend/utils/resources-factory/resources-factory.js:68:22)
[1]     at ResourcesFactory.buildResources (file:///Users/vitalyradchik/Devel/StilyoApps/Tests/adminjs-app-ts/node_modules/adminjs/lib/backend/utils/resources-factory/resources-factory.js:28:35)
[1]     at new AdminJS (file:///Users/vitalyradchik/Devel/StilyoApps/Tests/adminjs-app-ts/node_modules/adminjs/lib/adminjs.js:80:39)
[1]     at start (file:///Users/vitalyradchik/Devel/StilyoApps/Tests/adminjs-app-ts/dist/main.js:23:19) {
[1]   resource: [class User extends BaseEntity]
[1] }
[1]
[1] Node.js v20.0.0

Originally posted by @exp131 in https://github.com/SoftwareBrothers/adminjs/issues/976#issuecomment-1705411603

import dataSource from './orm/datasource.js';
import { User } from './orm/models/user.js';

dotenv.config();

Can you check if you have access to environment variables in your datasource/User files? dotenv should rather be at the top of the file. I prefer to use a CLI version myself:
    "start": "dotenv -c '.env' -- node dist/server/index.js",

Yes, it is available. I even disabled dotenv completely in the project, but the error remains the same.

To update:
Here data source and entity configs used:
orm/datasource.ts
import { DataSource } from 'typeorm';

const SqliteDataSource = new DataSource({
  type: 'sqlite',
  database: './db.sqlite'
});

export default SqliteDataSource;

orm/models/user.ts
import { BaseEntity, Column, Entity, PrimaryGeneratedColumn } from 'typeorm';

@Entity({ name: 'User' })
export class User extends BaseEntity {
  @PrimaryGeneratedColumn()
  public id: number;

  @Column()
  public firstName: string;

  @Column()
  public lastName: string;
}

I just followed the docs, but this is a solution. Now it working fine, thanks a lot @dziraf

Issue fixeed


Regularly trigger ADD_CALENDAR to ensure calendar fetcher is running

Currently an ADD_CALENDAR notification is only sent once when the calendar module is started in the UI. This notification creates a calendar fetcher on the server side that is used to regularly update the calendar.
When MagicMirror is running in serveronly mode, the server process can be restarted even while the UI keeps running. When the server process restarts, it launches with no calendar fetchers running, and there is currently no way to start them again other than to refresh the UI.
This change just fires an ADD_CALENDAR event every fetch interval. When such event is received by the server that already has a fetcher running, it's effectively ignored (i.e. no duplicate fetcher is started), however if there is no fetcher running (because the server has been restarted) this makes sure it gets started.

Warnings

:warning:

Please include an updated CHANGELOG.md file.This way we can keep track of all the contributions.

  Generated by :no_entry_sign: dangerJS

Updated CHANGELOG.md.

It might be a cleaner idea to broadcast a message to all modules whenever the socket connection is (re-) established. In that case you can broadcast ADD_CALENDAR whenever this happens. For now your solution seems fine and we can always change the impementation... Thanks!


use docker port instead of docker inspect for action containers

This will avoid the need for special networking route to private network on docker containers for local development on Mac.
With potential to allow the use of docker for mac.

Note that per this issue https://github.com/openwhisk/openwhisk/issues/1334, the invoker will eschew calls to docker inspect.

@rabbah This PR is work in progress not ready.
I was already about replacing docker inspect for getting the info directly from config.json from under docker.
This PR is WIP, I wanted to investigate the option of having only for Mac Dev Environment  the ability of using docker port
This way we have a easier for people to setup their local dev environment, by avoiding the special network route tweak, and the ability to use docker for mac instead of docker-machine if they like
I was planning to make it conditional, if Mac then, if not then use the current mode.
But then I was curious if using docker port we don't hit the performance problems of using inspect
That's why I'm debating if I should make condition in code with if Mac, or maybe control it thru wiskprops.
By doing with wiskprops property we than can control which method to use from the outside, and we can run the benchmark side by side more easier.
I think I would go in phases, solve one problem at a time and just solve it for Mac Dev, by detecting Mac.

Is the route tweak even necessary for plain deployment of OpenWhisk. I was under the impression its only needed for the actionContainer tests? Everything else is handled inside the VM anyway?

@markusthoemmes I think I know see what you mean.
Making myself more familiar with invoker, you are correct when the invoker executes docker commands does them from it's container using the docker cli from the invoker container out to the host where docker engine is located.
For the run and init also you are correct going from invoker container to action container they seat on the same subnet so goes thru internal network
But I think I found some tests that call run and init from docker host, when tests runs in addition of actionContainer tests.
Take a look at tests/src/whisk/core/container/test/ContainerPoolTests.scala)
Is my assumption correct that when this tests run the run and init against the docker action happens from the machine running the test, not the invoker.

You're right Carlos. These are the actionContainer tests that Markus alluded to.

what I don't get about this test is the use of localhost
@rr any ideas
https://github.com/openwhisk/openwhisk/blob/master/tests/src/whisk/core/container/test/ContainerPoolTests.scala#L62
    val config = new WhiskConfig(
        Map(selfDockerEndpoint -> "localhost",
            dockerEndpoint -> null,
            edgeHostName -> "localhost",
            invokerSerializeDockerOp -> "true",
            invokerSerializeDockerPull -> "true")
            ++ WhiskEntityStore.requiredProperties
            ++ WhiskAuthStore.requiredProperties)

was planning to make it conditional, if Mac then, if not then use the current mode.

This is dangerous in that we don't have Mac specific tests and makes the invoker platform aware where it isn't otherwise. A general solution is preferred.

@rabbah I think I understand now better. I agree from the invoker there is no need to do port mapping.
We already have a case where we detect Mac but only from test system
For the test cases I was I aware of 1. actionContainers like @markusthoemmes commented
https://github.com/openwhisk/openwhisk/tree/master/tests/src/actionContainers
I also found 2.
ContainerPoolTests.scala
https://github.com/openwhisk/openwhisk/blob/master/tests/src/whisk/core/container/test/ContainerPoolTests.scala#L62
Are there any other test that do docker run and then init/run on port 8080 with the internal ip from the test system?

revisiting this in a later time.


TODO: More docs, examples and tests

I have done a lot of search for ECIES and your code seems to be the only one that works for me as a Windows user. I am using this with Chrome extension.
I would like to know how to load an external generated public key generated by BouncyCastle. Or load in the hex for X and Y values to encypt.
privateKey =	"-----BEGIN EC PRIVATE KEY-----\r\nMIIBCwIBAQQgXUriUohju+MZIN/6GmejKI+9pw5fs464BzK8IbRPX+GggeMwgeAC\r\nAQEwLAYHKoZIzj0BAQIhAP////////////////////////////////////7///wv\r\nMEQEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAA\r\nAAAAAAAAAAAAAAAAAAAAAAAAAAAABwRBBHm+Zn753LusVaBilc6HCwcCm/zbLc4o\r\n2VnygVsW+BeYSDradyajxGVdpPv8DhEIqP0XtEimhVQZnEfQj/sQ1LgCIQD/////\r\n///////////////+uq7c5q9IoDu/0l6M0DZBQQIBAQ==\r\n-----END EC PRIVATE KEY-----\r\n"	string
"-----BEGIN PUBLIC KEY-----\r\nMIIBMzCB7AYHKoZIzj0CATCB4AIBATAsBgcqhkjOPQEBAiEA////////////////\r\n/////////////////////v///C8wRAQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\r\nAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBEEEeb5m\r\nfvncu6xVoGKVzocLBwKb/NstzijZWfKBWxb4F5hIOtp3JqPEZV2k+/wOEQio/Re0\r\nSKaFVBmcR9CP+xDUuAIhAP////////////////////66rtzmr0igO7/SXozQNkFB\r\nAgEBA0IABGMgfhYdsm7dTzR6Nr1+lUlLoCDzqlJq/QBV41mcON2yCJQ9SnNS3YUa\r\nxA8SwkXnnuatFpSmd8UfINaq+cLktO8=\r\n-----END PUBLIC KEY-----\r\n"

@qisbic Glad to see my first issue reporter on github 😄, I think ecdh.setPrivateKey is what you want. Just replace ecdh.generateKeys() in my example code to ecdh.setPrivateKey, it should work

Unfortunate.. this is not what I want.. the client is receiving a "public" key which is used to encrypt.
Unfortunately, according to the documentation the ecdh.setPublicKey has been Deprecated.
I have struggled for a few days trying to find javascript codes that will let me set a public key to encrypt for ECIES. Almost all codes used are ECDH/ECDSA in which the client generate the keys.
Thanks for any suggestions you would have.

@qisbic
server side:
ecdh.setPrivateKey()
publicKey = ecdh.getPublicKey();// send this to client

client side:
ecies.encrypt(publicKey);

@qisbic maybe I didn't fully understand your requirement before.
After reconsider the requirement of generate multiple public key from one private key, since nodejs didn't implement that in ECDH, import keys from other crypto libraries is one of the solution. So I did some search on your problem, here is some information that looks helpful:
your key is ASN.1 encoded, and from this link you can see detailed data structure of your public key.
And from this mail archive  it looks like the key you using is invalid encoded, but it is ok,  from the correct encoding we can see that the value you wanted to use with crypto.ECDH is the  BIT_STRING part.
There is an ASN.1 library on npm you can use it to decode your public key and get the last part use it as the public key on ecdh. I'm not sure but it should be same way of your library encoding public ec  point and the way node did, because how to encode the point is standardized, you can check it by reading the source, here is how the node output the public key.
Hope this post will help you.


Experiment: QuickJS lands in polyscript

This is just a PoC / playground with doubtful usage for the time being but I'll keep it here for fun and history.

more recent fork: https://github.com/openwebf/quickjs

@bugzpodder I just re-packaged justjake's project as it was unbearable for web standards (TypeScript breaking over CommonJS breaking over fake ESM breaking and so on) but I didn't take any credit and there's no DOM ffi AFAIK so it's half usable but somehow it works ... that's the experiment and I won't work on this for the time being, specially because it has dubious use cases or benefits if realm proposal moves forward.


[Proposal] Speed up !pip install transformer-lens in colab

Proposal
Currently !pip install transformer-lens takes ~a minute in colab. However, a lot of time is spent uninstalling PyTorch 2.1.0 and upgrading.
I think this is because we pinned PyTorch >2.1.0 here because of PyTorch bugs on MPS. But this doesn't impact colab.
Ideally, a solution would make !pip install transformer-lens use the version of PyTorch colab is shipped with, but demand an upgrade on MPS solutions. I'm out of my depth here though, so would appreciate discussion of how big an issue this is and what solutions we could have!

This is possible - https://python-poetry.org/docs/dependency-specification/#using-environment-markers .
Seems like a reasonable thing to do!

Thanks! Sadly I don't think this works out-of-the-box and I'm not sure why
See implementation here and then pip seems to realise it can use any torch version >=1.10 and that it has a bigger version installed, but just reinstalls torch anyway. I'm quite confused and LLMs did not help!
$ %pip install git+https://github.com/ArthurConmy/TransformerLens.git@colab-fast-install
...
Requirement already satisfied: torch>=1.10 in /usr/local/lib/python3.10/dist-packages (from transformer-lens==0.0.0) (2.1.0+cu121)
Collecting torch>=1.10 (from transformer-lens==0.0.0)
  Downloading torch-2.1.2-cp310-cp310-manylinux1_x86_64.whl (670.2 MB)
...

Ah it's probably also a downstream dependency also requiring >2 then? In that case it's probably more hassle than it's worth to find and fix it (and possibly not fixable).
FYI the marker "platform_machine == 'arm64'" catches just M1/M2 I think, so if you did find all the requirement chains it's probably easier to just set that to >=2.1.2 .
Oh and to add complexity, I'm not sure how installing from github differs from installing from pypi - there may be a subtle difference (e.g. it might be using the poetry lock file for the former).

Thanks! Sadly I don't think this works out-of-the-box and I'm not sure why
(Implementation reference here). pip seems to realise it can use any torch version >=1.10, and also realise that it has a compatible version installed, but just reinstalls torch anyway. I'm quite confused and LLMs did not help!
$ %pip install git+https://github.com/ArthurConmy/TransformerLens.git@colab-fast-install
...
Requirement already satisfied: torch>=1.10 in /usr/local/lib/python3.10/dist-packages (from transformer-lens==0.0.0) (2.1.0+cu121)
Collecting torch>=1.10 (from transformer-lens==0.0.0)
  Downloading torch-2.1.2-cp310-cp310-manylinux1_x86_64.whl (670.2 MB)
...

@ArthurConmy your implementation seems to work with a small change. #510


Add default encryption data to s3 bucket resources

This change adds properties to S3 buckets related to default encryption, and updates the schema for these properties in the readme.
It also does a minor refactor of the module to consolidate some of the exception handling.
It also fixes a bug related to loading policy. Previously, if a bucket had no ACLs, the bucket policy also wouldn't be parsed/loaded. Now the policy is parsed/loaded whether or not an ACL exists.
It also updates mypy in pre-commit, to support python 3.9.

I removed a warning on "NoSuchBucketPolicy" because that behavior is expected (the bucket isn't deleted, but the bucket exists and has no policy)

I found a bug with this in production. Please hold review.

I verified the last commit correctly fixes the issue I ran into.

Can you update tests with this?
If it's too troublesome to wire that up, showing a screenshot of nodes with your expected attributes is super helpful too.

Oh, I didn't see there were tests for this. Yeah. I'll update them!

@achantavy done!


Versioning consistency across Github, Docker Hub, and Gogs' footer.

I was wondering why the latest release on Github says 0.9.13, while on Docker Hub it's 0.9.30 but then the app I get pulling that image lists <IP_ADDRESS>7 in its footer. This is all very confusing, can someone explain it?

Is the 0.9.13 binary the latest? I mean it says its from march?
Where can I get the latest binary?


Create a systematic approach when adding new dependencies on code repository

A predefined steps for adding new dependencies can help avoid merge conflicts with the package-lock.json file

Seems like a common issue in shared development. Here is one way to: https://gist.github.com/szemate/6fb69c8e3d8cce3efa9a6c922b337d98

Currently, the easiest way I found is to:

Fix package.json conflicts
Delete node_modules
npm install to regenerate the fixed package-lock.json

These steps worked without having to manually check merge conflicts in the package-lock.json file, and is a viable solution for developers having merge conflicts when adding new dependencies.


Option to open the Windows properties dialog of a file/folder

What feature or improvement do you think would benefit Files?
I like Files' own properties dialog a lot, but in some cases you need Windows' own properties dialog. My main issue right now is working with TortoiseSVN, which adds a tab to the properties:

I assume Files' can't just integrate those additional tabs, so a way to open Windows' properties dialog on a file/folder would be necessary. Possibly just a button on the General tab of Files' that says "Show Windows' properties dialog" would be good enough.
Requirements

Button somewhere in the UI

Files' properties dialog
Files' context menu on files/folders

API to open Windows' properties dialog

Files Version
<IP_ADDRESS>
Windows Version
10.0.19045.3031
Comments
No response

Thanks for the feedback, I've added this to the project board.

@Alloc86 thank you for sharing your feedback. We don't have plans to add this option to Files, but if TortoiseSVN adds a shell extension to the right click context menu in File Explorer, it should work in Files as well.


Implemented energy mechanism and UI

Closes #5 and closes #6
Added energy mechanism on GameManager
Added Panel component and energy panel
Implemented energy spend mechanism, locking expensive towers
Added and implemented UIManager
Removed old references to ScrollableCamera to UIManager
Renamed TowerDrag to TowerIcon
Moved things around so folders make more sense now in line with the GDD

No code reviewers are available so will go ahead and merge this


Dev mode issue replacing server.xml

Linux
liberty.maven.plugin 3.0.1

When mvn liberty:dev is running, I made a modification to the server.xml file to add mpHealth, and everything worked fine.
But later when I modified the server.xml again, to add <logging/>, i got the following error:
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /tmp/tempConfig5185899734902275753/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Config file deleted: .server.xml.swx
[INFO] Config file deleted: .server.xml.swp
[INFO] Deleted file/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /tmp/tempConfig1472029845038444492/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /tmp/tempConfig17490292191552317679/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /tmp/tempConfig9595107170170341891/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /tmp/tempConfig4830449442933404376/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /tmp/tempConfig2978634558097137809/.server.xml.swp
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/.server.xml.swp to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] Config file deleted: 4913
[INFO] Config file deleted: server.xml
[INFO] Deleted file/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/server.xml
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/server.xml to: /tmp/tempConfig3613379452805757318/server.xml
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/server.xml to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/server.xml
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/server.xml to: /tmp/tempConfig11709083723723589925/server.xml
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/server.xml to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/server.xml
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/server.xml to: /tmp/tempConfig5313679753401239127/server.xml
[INFO] Copied file: /home/ibmadmin/QA_getting-started/start/src/main/liberty/config/server.xml to: /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/server.xml
[INFO] Config file deleted: server.xml~
[INFO] Config file deleted: .server.xml.swp
[INFO] Deleted file/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/.server.xml.swp
[INFO] [AUDIT   ] CWWKG0016I: Starting server configuration update.

[INFO] (0x00007F44B5F4EB20 [libj9jit29.so+0x204b20])
[INFO] (0x00007F44B5F507A0 [libj9jit29.so+0x2067a0])
[INFO] (0x00007F44B5F50974 [libj9jit29.so+0x206974])
[INFO] (0x00007F44B5F540A7 [libj9jit29.so+0x20a0a7])
[INFO] (0x00007F44B5E8CEC4 [libj9jit29.so+0x142ec4])
[INFO] (0x00007F44BC0313EE [libj9hookable29.so+0x13ee])
[INFO] (0x00007F44BC512DE9 [libj9vm29.so+0xc1de9])
[INFO] (0x00007F44BC49D332 [libj9vm29.so+0x4c332])
[INFO] (0x00007F44BC48D845 [libj9vm29.so+0x3c845])
[INFO] (0x00007F44BC52B4C2 [libj9vm29.so+0xda4c2])
[INFO] ---------------------------------------
[INFO] JVMDUMP039I Processing dump event “gpf”, detail “” at 2019/09/16 10:11:37 - please wait.
[INFO] JVMDUMP032I JVM requested System dump using ‘/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/core.20190916.101137.9501.0001.dmp’ in response to an event
[INFO] Unhandled exception
[INFO] Type=Segmentation error vmState=0x00000000
[INFO] J9Generic_Signal_Number=00000018 Signal_Number=0000000b Error_Value=00000000 Signal_Code=00000001
[INFO] Handler1=00007F44BC4F02F0 Handler2=00007F44B7DBA520 InaccessibleAddress=00000001FFBBA15A
[INFO] RDI=00007F44AC199290 RSI=00007F44738157F1 RAX=00000001FFBBA14A RBX=00000000000010E9
[INFO] RCX=0000000000000001 RDX=00000000000010E9 R8=0000000000000000 R9=0000000000000001
[INFO] R10=0000000000000000 R11=00007F44B8251822 R12=00007F44738157F1 R13=0000000000000001
[INFO] R14=0000000000000001 R15=0000000000000001
[INFO] RIP=00007F44B5F4EB20 GS=0000 FS=0000 RSP=00007F449462B2B8
[INFO] EFlags=0000000000010202 CS=0033 RBP=00007F44AC199290 ERR=0000000000000004
[INFO] TRAPNO=000000000000000E OLDMASK=0000000000000000 CR2=00000001FFBBA15A
[INFO] xmm0<PHONE_NUMBER>000000 (f: 0.000000, d: 0.000000e+00)
[INFO] xmm1 00000000c291e6e0 (f:<PHONE_NUMBER>.000000, d: 1.612799e-314)
[INFO] xmm2<PHONE_NUMBER>000000 (f: 0.000000, d: 0.000000e+00)
[INFO] xmm3 000000003f8e0e0a (f:<PHONE_NUMBER>.000000, d: 5.268095e-315)
[INFO] xmm4<PHONE_NUMBER>4d0700 (f:<PHONE_NUMBER>.000000, d: 5.993054e-315)
[INFO] xmm5 40302c1174025b39 (f:<PHONE_NUMBER>.000000, d: 1.617214e+01)
[INFO] xmm6 7fffffffffffffff (f:<PHONE_NUMBER>.000000, d: nan)
[INFO] xmm7 3ff0000000000000 (f: 0.000000, d: 1.000000e+00)
[INFO] xmm8 3bbcc86800000000 (f: 0.000000, d: 6.095003e-21)
[INFO] xmm9 3fcd68a0cf19e6fd (f:<PHONE_NUMBER>.000000, d: 2.297555e-01)
[INFO] xmm10 3d763e92125dd962 (f: 308140384.000000, d: 1.264449e-12)
[INFO] xmm11 40302c1168e20c0e (f:<PHONE_NUMBER>.000000, d: 1.617214e+01)
[INFO] xmm12 bc98000000000000 (f: 0.000000, d: -8.326673e-17)
[INFO] xmm13 bfcd68a0cf19e700 (f:<PHONE_NUMBER>.000000, d: -2.297555e-01)
[INFO] xmm14 402fe2804e87b080 (f:<PHONE_NUMBER>.000000, d: 1.594239e+01)
[INFO] xmm15 3c66e04d0e7077fc (f: 242251776.000000, d: 9.920960e-18)
[INFO] Module=/usr/local/bin/jdk-11.0.4+11/lib/compressedrefs/libj9jit29.so
[INFO] Module_base_address=00007F44B5D4A000
[INFO] Target=2_90_20190717_286 (Linux 4.4.0-148-generic)
[INFO] CPU=amd64 (2 logical CPUs) (0xf6f7a000 RAM)
[INFO] ----------- Stack Backtrace -----------
[INFO] (0x00007F44B5F4EB20 [libj9jit29.so+0x204b20])
[INFO] (0x00007F44B5F507A0 [libj9jit29.so+0x2067a0])
[INFO] (0x00007F44B5F50974 [libj9jit29.so+0x206974])
[INFO] (0x00007F44B5F540A7 [libj9jit29.so+0x20a0a7])
[INFO] (0x00007F44B5E8CEC4 [libj9jit29.so+0x142ec4])
[INFO] (0x00007F44BC0313EE [libj9hookable29.so+0x13ee])
[INFO] (0x00007F44BC512DE9 [libj9vm29.so+0xc1de9])
[INFO] (0x00007F44BC4A3463 [libj9vm29.so+0x52463])
[INFO] (0x00007F44BC48D845 [libj9vm29.so+0x3c845])
[INFO] (0x00007F44BC52B4C2 [libj9vm29.so+0xda4c2])
[INFO] ---------------------------------------
[INFO] JVMDUMP039I Processing dump event “gpf”, detail “” at 2019/09/16 10:11:37 - please wait.
[INFO] JVMPORT030W /proc/sys/kernel/core_pattern setting “|/usr/share/apport/apport %p %s %c %d %P” specifies that the core dump is to be piped to an external program.  Attempting to rename either core or core.10011.
[INFO]
[INFO] JVMDUMP010I System dump written to /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/core.20190916.101137.9501.0001.dmp
[INFO] JVMDUMP032I JVM requested Java dump using ‘/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/javacore.20190916.101137.9501.0004.txt’ in response to an event
[INFO] JVMDUMP032I JVM requested System dump using ‘/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/core.20190916.101137.9501.0002.dmp’ in response to an event
[INFO] JVMDUMP010I Java dump written to /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/javacore.20190916.101137.9501.0004.txt
[INFO] JVMPORT030W /proc/sys/kernel/core_pattern setting “|/usr/share/apport/apport %p %s %c %d %P” specifies that the core dump is to be piped to an external program.  Attempting to rename either core or core.10015.
[INFO]
[INFO] JVMDUMP010I System dump written to /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/core.20190916.101137.9501.0002.dmp
[INFO] JVMDUMP032I JVM requested Java dump using ‘/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/javacore.20190916.101137.9501.0006.txt’ in response to an event
[INFO] JVMDUMP032I JVM requested Snap dump using ‘/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/Snap.20190916.101137.9501.0005.trc’ in response to an event
[INFO] JVMDUMP010I Snap dump written to /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/Snap.20190916.101137.9501.0005.trc
[INFO] JVMDUMP007I JVM Requesting JIT dump using ‘/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/jitdump.20190916.101137.9501.0007.dmp’
[INFO] JVMDUMP010I JIT dump written to /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer/jitdump.20190916.101137.9501.0007.dmp
[INFO] JVMDUMP013I Processed dump event “gpf”, detail “”.
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  03:21 min
[INFO] Finished at: 2019-09-16T10:11:42-04:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal io.openliberty.tools:liberty-maven-plugin:3.0.1:dev (default-cli) on project getting-started: The server has stopped. Exiting dev mode. -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[INFO] CWWKM2001I: server.config.dir is /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer.
[INFO] CWWKM2001I: server.output.dir is /home/ibmadmin/QA_getting-started/start/target/liberty/wlp/usr/servers/defaultServer.
[INFO] CWWKM2001I: Invoke command is [/home/ibmadmin/QA_getting-started/start/target/liberty/wlp/bin/server, stop, defaultServer].
[INFO]
[INFO] Stopping server defaultServer.
[INFO] Server defaultServer is not running.

I could not reproduce this issue on Linux.  From your output, it looks like the Liberty server encounters the core dump.  Can you try enabling looseApplication mode according to https://github.com/OpenLiberty/ci.maven/blob/master/docs/deploy.md#deploy , start Liberty with mvn liberty:run, and then try adding the <logging/> to the server.xml again?

@NimG98, is this reproducible consistently?  Also, please share the project you used too.

I have reproduced this problem multiple times now.
I was working on the guide-getting-started

I reproduced the same issue on guide-getting-started

@NimG98 Can you please provide the following information:

What Linux distribution and version are you using
What text editor or IDE are you using to save the server.xml file
The exact line that you are adding to server.xml

Linux version:
NAME="Ubuntu"
VERSION="16.04.6 LTS (Xenial Xerus)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 16.04.6 LTS"
VERSION_ID="16.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
VERSION_CODENAME=xenial
UBUNTU_CODENAME=xenial

Java version:
openjdk 11.0.4 2019-07-16
OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.4+11)
Eclipse OpenJ9 VM AdoptOpenJDK (build openj9-0.15.1, JRE 11 Linux amd64-64-Bit
Compressed References 20190717_286 (JIT enabled, AOT enabled)
OpenJ9   - 0f66c6431
OMR      - ec782f26
JCL      - fa49279450 based on jdk-11.0.4+11)

Using vim to edit the server.xml

Deleting the old server.xml, and replacing it with:
<server description="Sample Liberty server">
    <featureManager>
        <feature>jaxrs-2.1</feature>
        <feature>jsonp-1.1</feature>
        <feature>cdi-2.0</feature>
        <feature>mpMetrics-2.0</feature>
        <feature>mpHealth-2.0</feature>
        <feature>mpConfig-1.3</feature>
    </featureManager>

    <webApplication location="getting-started.war" contextRoot="/" />
    <mpMetrics authentication="false"/>

    <logging traceSpecification="com.ibm.ws.microprofile.health.*=all" />

    <httpEndpoint host="*" httpPort="${default.http.port}"
        httpsPort="${default.https.port}" id="defaultHttpEndpoint"/>

    <variable name="io_openliberty_guides_system_inMaintenance" value="false"/>
</server>

I'm having similar issues on Windows... I'm going to edit the issue description.

I have a bit more insight into the problem from running with -X......
Here's how the events are detected by the watcher:

[DEBUG] Processing events for watched directory: C:\git\mp-demo-1\demo\service-b\src\main\liberty\config
[DEBUG] Changed: 4913; ENTRY_CREATE
[DEBUG] (org.codehaus.mojo.pluginsupport.ant.AntHelper) CWWKM2014I: Now looking for CWWKZ0003I.*demo in messages.log.
[DEBUG] Message occurrences before compile: 0
[DEBUG] Processing events for watched directory: C:\git\mp-demo-1\demo\service-b\src\main\liberty\config
[DEBUG] Changed: 4913; ENTRY_MODIFY
[DEBUG] (org.codehaus.mojo.pluginsupport.ant.AntHelper) CWWKM2014I: Now looking for CWWKZ0003I.*demo in messages.log.
[DEBUG] Message occurrences before compile: 0
[DEBUG] Processing events for watched directory: C:\git\mp-demo-1\demo\service-b\src\main\liberty\config
[DEBUG] Changed: 4913; ENTRY_DELETE
[DEBUG] (org.codehaus.mojo.pluginsupport.ant.AntHelper) CWWKM2014I: Now looking for CWWKZ0003I.*demo in messages.log.
[DEBUG] Message occurrences before compile: 0
[INFO] Config file deleted: 4913
[DEBUG] File that was deleted: C:\git\mp-demo-1\demo\service-b\src\main\liberty\config\4913
[DEBUG] Target file exists: false
[DEBUG] Processing events for watched directory: C:\git\mp-demo-1\demo\service-b\src\main\liberty\config
[DEBUG] Changed: server.xml; ENTRY_DELETE
[DEBUG] (org.codehaus.mojo.pluginsupport.ant.AntHelper) CWWKM2014I: Now looking for CWWKZ0003I.*demo in messages.log.
[DEBUG] Message occurrences before compile: 0
[INFO] Config file deleted: server.xml
...
...
...
[DEBUG] Changed: server.xml; ENTRY_CREATE

So the server.xml is completely blown away, and we call DevUtil.runTestThread(boolean, ThreadPoolExecutor, int, boolean, boolean) before the new server.xml can be copied into place.
Maybe the code was expecting this to come in as an ENTRY_MODIFY event?

@ericglau @kathrynkodama @patricktiu

I was able to reproduce this issue on Mac with OpenJDK 11 by first adding <feature>mpHealth-2.0</feature> in server.xml, saving it, then adding <logging traceSpecification="com.ibm.ws.microprofile.health.*=all" /> and saving it again.

This appears to be an Open Liberty issue with OpenJDK 8/11/12 on OpenJ9.  I've created an issue here: https://github.com/OpenLiberty/open-liberty/issues/9039

Thx @ericglau.  Just to be clear, that OpenLiberty/open-liberty#9039 seems to be a distinct issue from what I noticed, which didn't involve <logging> and which involved the server.xml getting deleted.

@scottkurz The server being deleted should not cause a problem as long as it gets created again afterwards.  Could you try with a Hotspot JVM, or OpenJDK13+OpenJ9, along with the latest ci.common and ci.maven and see the issue still occurs?

For me the error occurs with Java 8 Hotspot or J9 JVMs... it gets logged like:

[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  53.033 s
[INFO] Finished at: 2019-09-18T16:58:30-04:00
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal io.openliberty.tools:liberty-maven-plugin:3.0.1:dev (default-cli) on project batch-bonuspayout-application: C:\git\sample.batch.bonuspayout\target\liberty\wlp\usr\servers\BonusPayout\workarea\org.eclipse.osgi\275 (The system cannot find the file specified.) -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoExecutionException
[INFO] CWWKM2001I: server.config.dir is C:\git\sample.batch.bonuspayout\target\liberty\wlp\usr\servers\BonusPayout.
[INFO] CWWKM2001I: server.output.dir is C:\git\sample.batch.bonuspayout\target\liberty\wlp\usr\servers\BonusPayout.
Exception in thread "Thread-9" java.lang.NoClassDefFoundError: io.openliberty.tools.ant.ServerTask$ReturnCode
at io.openliberty.tools.ant.ServerTask.doStop(ServerTask.java:374)
at io.openliberty.tools.ant.ServerTask.execute(ServerTask.java:149)
at io.openliberty.tools.maven.server.DevMojo$DevMojoUtil.stopServer(DevMojo.java:252)
at io.openliberty.tools.common.plugins.util.DevUtil$2.run(DevUtil.java:599)
Caused by: java.lang.ClassNotFoundException: io.openliberty.tools.ant.ServerTask$ReturnCode
at org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass(SelfFirstStrategy.java:50)
at org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass(ClassRealm.java:271)
at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:247)
at org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:239)
... 4 more

So I think the root cause is the failure copying the server dir, which includes the workarea which is changing somehow.     Then there also seems to be a classloading issue on this error path from dev mode.
I didn't mean to say that the missing server.xml was the core, root issue..just wondering if maybe this suggested an unexpected code path.

@scottkurz I've opened a separate issue for what you reported https://github.com/OpenLiberty/ci.maven/issues/610 , since that is different from the core dump originally described in this current issue.

@NimG98 or @DannyS03 , can you try with OpenJDK13 on OpenJ9, or any OpenJDK version on Hotspot JVM, and see if it resolves the core dump issue?

Since issue https://github.com/OpenLiberty/open-liberty/issues/9039 has been created for Open Liberty, I am marking this issue as Done. We will need to verify it before actually closing this.

@NimG98 Since you are using OpenJDK11 with OpenJ9, can you try this again with the latest OpenJ9 nightly build from https://adoptopenjdk.net/nightly.html?variant=openjdk11&jvmVariant=openj9 and see if it still has this issue?  I don't see this error anymore with the latest nightly build (java -version shows build 11.0.5+7-201909161842)
@gkwan-ibm FYI

The core dump error is gone when replacing server.xml with latest OpenJ9 nightly build:
ibmadmin@linux-vm:~/QA_getting-started/start$ java -version
openjdk version "11.0.5" 2019-10-15
OpenJDK Runtime Environment AdoptOpenJDK (build 11.0.5+7-201909200946)
Eclipse OpenJ9 VM AdoptOpenJDK (build master-ad592a06b, JRE 11 Linux amd64-64-Bit Compressed References 20190920_335 (JIT enabled, AOT enabled)
OpenJ9   - ad592a06b
OMR      - 640f1dfa
JCL      - 8bf2a81661 based on jdk-11.0.5+7)

This is not a dev mode issue and appears to be fixed in the latest OpenJ9 nightly build.  Closing.


Does this create a canonical redirect?

Switching an existing site over to https and so far Patrol has made it way easier. I'm just wondering, though - is the redirect like a 301 .htaccess redirect or do I need to do something else to let search engines know that the pages have moved?

Wow, I'm so sorry @jonlongnecker, I have no idea how I forgot to get back to you:( I remember getting the notification, just totally slipped my mind.
To answer your question (way late), Patrol does 302 to protect from issues that arise from accidentally using 301 as well as other best practices during development.
There is no setting/config to switch those from 302 to 301 but I can see how it could be useful.
How would this work, in your opinion? Maybe by having a usePermanentRedirects setting in the config file, or something along those lines?

Hah, apparently this is the slowest thread ever! So for me I used the plugin to force https for the whole site once I added an SSL. A site with like 10 years of content and pages. A switch in the admin area to make sure it's a true redirect (301) would be good I think - unless I'm using the plugin in a way it wasn't intended.

@jonlongnecker I think the only reason this wasn't a feature from the start, was that when you're ready to take your site live, you'd probably want to handle that https redirect at the server level. You would use Patrol only for maintenance at that point.
So, I'd recommend adding https redirect rules in Apache or NginX if you have access to them.

I guess I don't really understand the point of forcing https if it's not for a live site then? Why even have the option if it's not for production?

Because it helps during development (https on staging/production but not locally, etc) and because on some shared hosting environments, there is no easy way to manage https redirects easily.
Additionally, with Patrol, you can force https only on some sections of the site while forcing http on others if you want to minimize latency for example.
I should clarify that if you want to use Patrol in production, you can (that's why I'm considering the 301 feature) but if you have access to your server config (apache/nginx), that would be the canonical way of doing it for production.

Moving this feature to Patrol for Craft 3


swarm -> thorntail minor refactor

Can one of the admins verify this patch?

ok to test

retest this please


PackageManager

https://unity.pkg.cesium.com
Access denied
"Cannot connect to 'github.com' (error code: ECONNRESET). Verify your environment firewall policies allow connection to this host name. lfour system is behind a proxy, verify your proxy environment varlables (HTTP_PROXY and HTTPS_PROXY) are properly set."

This looks like the same issue as reported here:
https://community.cesium.com/t/launching-cesium-for-unity/21380/6
I'm closing this as it's almost certainly a problem with your system or network, not something we can fix on our end. Please start a thread on the community forum if you have any followup questions.


Doesn't feed the task watchdog timer in the latest esp idf release

Hi Carson,
I tried to compile the template with the latest esp-idf release and I'm getting a task watchdog trigger and couldn't get any further. I have checked with the certificates and policies but couldn't debug what exactly is causing this error. Could you please provide a feedback.

yess its working now... just added a vTaskdelay before aws_iot_mqtt_connect.

Hi @ricksondpenha
Would you mind posting your modifications? I am still encountering the same issue you described above despite adding the vTaskdelay before aws_iot_mqtt_connect.
Thanks!

Same issue here. Tracked it down to:
rc = aws_iot_mqtt_internal_wait_for_read(pClient, CONNACK, &connect_timer);
in file: components/awsiot/src/aws_iot_mqtt_client_connect.c, function: _aws_iot_mqtt_internal_connect
It timesout. I've increased the mqttCommandTimeout_ms to no avail.
Any ideas?

For anyone else getting to this point - the key was in the policies. You must have a policy which allows iot:Connect to any resource as so:
{   "Version": "2012-10-17",   "Statement": [     {       "Effect": "Allow",       "Action": [         "iot:Connect"       ],       "Resource": [         "*"       ]     }   ] }

Hi @edge0701
Where to set this policies.
and also i am getting a different error using latest esp idf .
Connected to AP
V (5328) intr_alloc: esp_intr_alloc_intrstatus (cpu 0): checking args
V (5328) intr_alloc: esp_intr_alloc_intrstatus (cpu 0): Args okay. Resulting flags 0xE
D (5336) intr_alloc: Connected src 51 to int 12 (cpu 0)
abort() was called at PC 0x401062e7
Guru Meditation Error: Core  0 panic'ed (abort)
Backtrace: 0x4010772e:0x3ffca590 0x40082fec:0x3ffca5b0
Rebooting...
after debugging using gdb
Remote debugging using COM9
0x40107af6 in aws_iot_mqtt_connect (pClient=0x3ffca900,
pConnectParams=)
at C:/esp32-aws-iot/components/awsiot/src/aws_iot_mqtt_client_connect.c:481
481             FUNC_EXIT_RC(rc);

The policy must be created under AWS IoT -> Security -> Policies. The policy then needs be linked with the certificate you are using for authentication. To do that, go to the certificate, click "Actions", and then "Attach policy".

Hi,
Thank you for the reply.
I had small query . Is there an API to disable exponential back off when network disconnects.
Thank you
Paul


Need to force account information to be passed as a string

When populating the
ocm:
aws:
accessKey:
account:
secretKey:
we are not forcing surrounding ' 's. When it is then read by osde2e it is converted into an int and drops any leading 0.

Related to https://github.com/yaml/pyyaml/issues/98
I have moved to ruamel.yaml instead of pyyaml and now, all strings that could be considered numbers are quoted


sometimes frozen

Sometimes when a video gets completed downloading and ends itself with .mp4, no new file ending with .par gets created afterwards.
The console itself is continuing flashing with dots like this current one is still downloading but it's actually been completed,so maybe it has some difficulty detecting video's completion status.
Could this problem get solved? Thanks.

Under this,I have to Ctrl+C to skip to the next  video downloading


Silent Install doesn't install Start Menu Shortcuts

We pushed the ScreenToGif.2.19.3.Setup.msi installer via Intune to our machines with the /silent switch and it installs, but no shortcut is placed in any of the users' Start Menus. Note, it's installing in the Per-User context so it should be running the installer as the currently signed in user. "C:\Program Files (x86)\ScreenToGif" exists on every machine we push it to, so we know it's installing. Can you have the msi installer drop a shortcut or a folder with a shortcut to "C:\ProgramData\Microsoft\Windows\Start Menu\Programs", even when the installer is run silently? Thank you!

IssueHunt Summary

Backers (Total: $0.00)
Become a backer now!
Or submit a pull request to get the deposits!
Tips

Checkout the Issuehunt explorer to discover more funded issues.
Need some help from other developers? Add your repositories on IssueHunt to raise funds.

IssueHunt has been backed by the following sponsors. Become a sponsor

Hi, the switches to add shortcuts are these:

msiexec /i "ScreenToGif 2.19.3 Setup.msi" /quiet /norestart INSTALLDESKTOPSHORTCUT=yes INSTALLSHORTCUT=yes

https://github.com/NickeManarin/ScreenToGif/wiki/Tips-for-installing-this-app-using-the-command-line
I'm not sure if it works with Intune.

Thanks, but this only works when manually executing ".\ScreenToGif.2.19.3.Setup.msi /quiet INSTALLSHORTCUT=yes". The properties (INSTALLSHORTCUT) are being ignored though when it's pushed through Intune. Can you confirm that they're marked as SecureCustomProperties, like shown in the example below?
https://stackoverflow.com/questions/39225934/customaction-and-msi-properties-ignored-when-deploying-through-intune

Ah, it was false by default.
I can't test it, since I don't work with Intune. Could you test it?
Properties = new[]
{
    new Property("INSTALLDESKTOPSHORTCUT", "no") { Secure = true },
    new Property("INSTALLSHORTCUT", "no") { Secure = true }
},

ScreenToGif 2.19.3 Setup.zip

Worked like a charm, thanks @NickeManarin. Successfully deployed to several machines through Intune.

@pyoungberg Great! This change will be available with the next version of the app.
I see that this issue was funded on IssueHunt.
Since the installer is not open sourced in here, there's no way to get the bounty. :/

I canceled it on IssueHunt - You should see the payment come through PayPal in the next few days.

@pyoungberg Oh, thank you! :D

Hi @pyoungberg , I'm running into this same issue on 2.39.
Running the installer. Usingmsiexec /i "ScreenToGif 2.19.3 Setup.msi" /quiet /norestart INSTALLDESKTOPSHORTCUT=yes INSTALLSHORTCUT=yes doesn't create any shortcuts. Running without the shortcut parameters doesn't create any in start menu or desktop either. Was something changed?

I am able to reproduce this issue even with the latest version of ScreenToGif  (version 2.41.0)  when installed as the built-in Windows user 'NT AUTHORITY\SYSTEM'. The logs suggest that the installer is using the wrong values for the ProgramMenuFolder and DesktopFolder properties:

ProgramMenuFolder = C:\WINDOWS\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\
DesktopFolder = C:\WINDOWS\system32\config\systemprofile\Desktop\

These values should be:

DesktopFolder = C:\Users\Public\Desktop\
ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\

In summary, the MSI installer is likely hardcoding or incorrectly retrieving the 'NT AUTHORITY\SYSTEM' user profile paths instead of the expected public folders, resulting in the shortcuts not being created in the correct locations.


VaultSecret - missing role

Hello,
Vault Config Operator: 0.8.25
We are spiking this and we have the need to be able to point VaultSecret to  a Vault Server that does not run in the same k8s cluster
Based on the CRD this is supported however when it is deployed in the cluster this is reported back as we are using http://vault.vault.svc.cluster.local:8200/ just to test it the values are supported:
│ Events:                                                                                │
│   Type     Reason           Age                  From         Message                                                                                │
│   ----     ------           ----                 ----         -------                                                                                │
│   Warning  ProcessingError  94s (x17 over 7m2s)  VaultSecret  Error making API request.                                                                                │
│                                                                                │
│ URL: PUT http://vault.vault.svc.cluster.local:8200/v1/auth/kubernetes/login                                                                                │
│ Code: 400. Errors:                                                                                │
│                                                                                │
│ * missing role

Having looked into apiextensions.k8s.io_v1_customresourcedefinition_vaultsecrets.redhatcop.redhat.io.yaml there is no support for role when attempting to add role this is reported back:
strict decoding error: unknown field "spec.vaultSecretDefinitions[0].connection.role"
When removing
 - connection:
    address: http://vault.vault.svc.cluster.local:8200/

This works as before but only to the vault server that happens to run on the same cluster as vault config operator is deployed into, plus role is defined under spec:vaultSecretDefinitions:authentication:role
apiVersion: redhatcop.redhat.io/v1alpha1
kind: VaultSecret
metadata:
 namespace: helloworld
 name: helloworld-pull-secret
spec:
 vaultSecretDefinitions:
 - connection:
    address: http://vault.vault.svc.cluster.local:8200/
 - authentication:
     namespace: vault-config-authentications
     path: kubernetes
     role: kubernetes-auth-engine-admin-role
   name: retrievepassword
   path: teams/kv-test/data/cluster/helloworld/randomsecret-password-v1
 output:
   name: pull-secret-from-vault
   stringData:
    password : "{{ .retrievepassword.password }}"
   type: Opaque
   labels:
    app: helloworld
   annotations:
    purpose: spike-testing

Log output from Vault Config Operator (some things have been removed/redacted/replaced for obvious reasons)
2024-01-31T16:52:31.276861245Z 2024-01-31T16:52:31Z    ERROR    controllers.VaultSecret    unable to complete sync logic    {"instance": {"kind":"VaultSecret","apiVersion":"redhatcop.redhat.io/v1alpha1","metadata":{"name":"helloworld-pu
ll-secret","namespace":"helloworld","uid":"076fd7c0-12c2-47b9-b224-e2a00a7ee3a0","resourceVersion":"792013","generation":1,"creationTimestamp":"2024-01-31T16:52:10Z","annotations":{"kubectl.kubernetes.io/last-applied-configuration":"{\"apiVersion\":\"
redhatcop.redhat.io/v1alpha1\",\"kind\":\"VaultSecret\",\"metadata\":{\"annotations\":{},\"name\":\"helloworld-pull-secret\",\"namespace\":\"helloworld\"},\"spec\":{\"output\":{\"annotations\":{\"purpose\":\"spike-test
ing\"},\"labels\":{\"app\":\"helloworld\"},\"name\":\"pull-secret-from-vault\",\"stringData\":{\"password\":\"{{ .retrievepassword.password }}\"},\"type\":\"Opaque\"},\"refreshPeriod\":\"2m0s\",\"vaultSecretDefinitions\":[{\"connection\
":{\"address\":\"http://vault.vault.svc.cluster.local:8200/\"}},{\"authentication\":{\"namespace\":\"vault-config-authentications\",\"path\":\"kubernetes\",\"role\":\"kubernetes-auth-engine-admin-role\"},\"name\":\"retrievepassword\",\"
path\":\"teams/kv-test/data/cluster/helloworld/randomsecret-password-v1\"}]}}\n"},"managedFields":[{"manager":"kubectl-client-side-apply","operation":"Update","apiVersion":"redhatcop.redhat.io/v1alpha1","time":"2024-01-31T16:52:10Z","fiel
dsType":"FieldsV1","fieldsV1":{"f:metadata":{"f:annotations":{".":{},"f:kubectl.kubernetes.io/last-applied-configuration":{}}},"f:spec":{".":{},"f:output":{".":{},"f:annotations":{".":{},"f:purpose":{}},"f:labels":{".":{},"f:app":{}},"f:name":{},"f:st
ringData":{".":{},"f:password":{}},"f:type":{}},"f:refreshPeriod":{},"f:refreshThreshold":{},"f:vaultSecretDefinitions":{}}}},{"manager":"Go-http-client","operation":"Update","apiVersion":"redhatcop.redhat.io/v1alpha1","time":"2024-01-31T16:52:21Z","f
ieldsType":"FieldsV1","fieldsV1":{"f:status":{".":{},"f:conditions":{".":{},"k:{\"type\":\"ReconcileFailed\"}":{".":{},"f:lastTransitionTime":{},"f:message":{},"f:observedGeneration":{},"f:reason":{},"f:status":{},"f:type":{}}}}},"subresource":"status
"}]},"spec":{"refreshPeriod":"2m0s","refreshThreshold":90,"vaultSecretDefinitions":[{"connection":{"address":"http://vault.vault.svc.cluster.local:8200/"},"authentication":{"serviceAccount":{"name":"default"},"path":"kubernetes"},"path":"kubernetes","
requestType":"GET"},{"name":"retrievepassword","authentication":{"serviceAccount":{"name":"default"},"path":"kubernetes","role":"kubernetes-auth-engine-admin-role","namespace":"vault-config-authentications"},"path":"teams/kv-test/d
ata/cluster/helloworld/randomsecret-password-v1","requestType":"GET"}],"output":{"name":"pull-secret-from-vault","type":"Opaque","stringData":{"password":"{{ .retrievepassword.password }}"},"labels":{"app":"helloworld"},"annotat
ions":{"purpose":"spike-testing"}}},"status":{"conditions":[{"type":"ReconcileFailed","status":"False","observedGeneration":1,"lastTransitionTime":"2024-01-31T16:52:21Z","reason":"LastReconcileCycleFailed","message":"Error making API
 request.\n\nURL: PUT http://vault.vault.svc.cluster.local:8200/v1/auth/kubernetes/login\nCode: 400. Errors:\n\n* missing role"}]}}, "error": "Error making API request.\n\nURL: PUT http://vault.vault.svc.cluster.local:8200/v1/auth/kubernetes/login\nCo
de: 400. Errors:\n\n* missing role"}
2024-01-31T16:52:31.276872676Z github.com/redhat-cop/vault-config-operator/controllers.(*VaultSecretReconciler).Reconcile
2024-01-31T16:52:31.276877062Z     /home/runner/work/vault-config-operator/vault-config-operator/controllers/vaultsecret_controller.go:120
2024-01-31T16:52:31.276881209Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile
2024-01-31T16:52:31.276885392Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:118
2024-01-31T16:52:31.276968696Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2024-01-31T16:52:31.276982441Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:314
2024-01-31T16:52:31.276993472Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2024-01-31T16:52:31.276998063Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:265
2024-01-31T16:52:31.277002090Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
2024-01-31T16:52:31.277005923Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:226
2024-01-31T16:52:31.277237955Z 2024-01-31T16:52:31Z    DEBUG    events    Error making API request.
2024-01-31T16:52:31.277250727Z
2024-01-31T16:52:31.277255663Z URL: PUT http://vault.vault.svc.cluster.local:8200/v1/auth/kubernetes/login
2024-01-31T16:52:31.277260084Z Code: 400. Errors:
2024-01-31T16:52:31.277264103Z
2024-01-31T16:52:31.277268910Z * missing role    {"type": "Warning", "object": {"kind":"VaultSecret","namespace":"helloworld","name":"helloworld-pull-secret","uid":"076fd7c0-12c2-47b9-b224-e2a00a7ee3a0","apiVersion":"redhatcop.redhat.io
/v1alpha1","resourceVersion":"792013"}, "reason": "ProcessingError"}
2024-01-31T16:52:31.287843261Z 2024-01-31T16:52:31Z    ERROR    Reconciler error    {"controller": "vaultsecret", "controllerGroup": "redhatcop.redhat.io", "controllerKind": "VaultSecret", "VaultSecret": {"name":"helloworld-pull-secret"
,"namespace":"helloworld"}, "namespace": "helloworld", "name": "helloworld-pull-secret", "reconcileID": "129564ba-69f6-43b0-80b0-ec130ac6629b", "error": "Error making API request.\n\nURL: PUT http://vault.vault.svc.cluster.local:8200/v1
/auth/kubernetes/login\nCode: 400. Errors:\n\n* missing role"}
2024-01-31T16:52:31.288569528Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler
2024-01-31T16:52:31.288586261Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:324
2024-01-31T16:52:31.288593078Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem
2024-01-31T16:52:31.288597778Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:265
2024-01-31T16:52:31.288602203Z sigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2
2024-01-31T16:52:31.288606641Z     /home/runner/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.15.0/pkg/internal/controller/controller.go:226

Your example has the connection as a separate element. The connection should be in the entry with all other required elements to authenticate.
for example:
apiVersion: redhatcop.redhat.io/v1alpha1
kind: VaultSecret
metadata:
  namespace: helloworld
  name: helloworld-pull-secret
spec:
  vaultSecretDefinitions:
    - connection:
        address: http://vault.vault.svc.cluster.local:8200/
      authentication:
        namespace: vault-config-authentications
        path: kubernetes
        role: kubernetes-auth-engine-admin-role
      name: retrievepassword
      path: teams/kv-test/data/cluster/helloworld/randomsecret-password-v1

Thank you @trevorbox that worked 👍🏻


Fix mask at boundaries

Closes #163.

The failing tests are not introduced by this PR. I opened a separate issue #166.


oversample and undersample always return classes as well

Fix #113 by having the implementation adhere to the docs instead of changing the docs.
The resampled classes are now always returned.
Also, made the under/oversample calls deterministic when shuffle=false.
Since the change is breaking with respect to previous behavior (but non-breaking with respect to the behavior declaimed in the docs) I'm also updating the minor version.

here b/c I am confused about how oversample works.
# 6 observations with 3 features each
X = rand(3, 6)
# 2 classes, severely imbalanced
Y = ["a", "b", "b", "b", "b", "a"]
# oversample the class "a" to match "b"
X_bal, Y_bal = oversample(X, Y)
# this results in a bigger dataset with repeated data
@assert size(X_bal) == (3,8)
@assert length(Y_bal) == 8
# now both "a", and "b" have 4 observations each
@assert sum(Y_bal .== "a") == 4
@assert sum(Y_bal .== "b") == 4

does not hold as advertised...


Invalid URL error when using non-FQDN hosts

As an example:

ictfs-admin@IC-TFS-BA-02Lin:/usr/vsoagent$ node agent/vsoagent
Enter alternate username ><EMAIL_ADDRESS>Enter alternate password >
Enter server url > http://ic-tfs-at-01:8080/tfs
Enter agent name (enter sets IC-TFS-BA-02Lin)  >
Enter agent pool name (enter sets default)  >
Error starting the agent
http://ic-tfs-at-01:8080/tfs is not a valid URL

"ic-tfs-at-01" is not a FQDN. This is caused by line 184 of configuration.ts:
throwIf(!check.isURL(settings.serverUrl), settings.serverUrl + ' is not a valid URL');
The validator library has options for controlling this behavior.

I believe we accepted a PR for this.  It's fixed now right?

Correct. I found the source of the issue and opened the issue, then thought
"Wait a minute, this is on Github, I might as well just fix it myself and
send a PR." :)
On Mon, Aug 17, 2015 at 7:12 AM, Bryan MacFarlane<EMAIL_ADDRESS>wrote:

I believe we accepted a PR for this. It's fixed now right?
—
Reply to this email directly or view it on GitHub
https://github.com/Microsoft/vso-agent/issues/56#issuecomment-131783545.


Add Polaris to the list of repositories

This adds https://github.com/Shopify/polaris to the list of repositories.

@dfmcphee I just discovered this awesome OSS@Shopify GitHub page, are there any other notable Shopify UX repos that should appear on it?

Nice, good find. 👍
I'm sure there are a few others we could probably add too.


Freezing while Finetuning Wav2vec 2.0 Models

How can i freeze the finetuned wav2vec 2.0 .pt model upto certain layers and train on other language so that i can achieve transfer learning ?

How many hours of labeled data do you have on the target language?

@medabalimi I have nearly 150 hours labeled data. I am experimenting with changing the model to make a multilingual decoder.

If you have 150 hours labeled data try just try training on it.

I dont have the training resource right now. So i am using smaller size of labelled audios. Also i want my model to learn some english styles as well because i am trying to implement the model on bilingual data.


Pet Peeves: not using brackets for branching logic

Why would you leave any ambiguity in one of the places directly related to cyclomatic complexity and common bugs?

This isn't worth writing about. A minor pet peeve does not a blog post make.


fixing BiconomySmartAccount error, line 132

Supposed to be BiconomySmartAccountV2, I think... :)

Thank you for the update!


add ipynb support (jupyter notebook)

it works in .py files, but don't in .ipynb

Hi @ex3ndr, what is needed to make this work on notebook cells? Where would we look to get started on an update?


follower of https://github.com/conda-forge/trilinos-feedstock/pull/8

update trilinos version to 12.12.1
osx on circle-ci

Hi! This is the friendly automated conda-forge-linting service.
I just wanted to let you know that I linted all conda-recipes in your PR (recipe) and found it was in an excellent condition.


Web Support ( Zielak/AutoTerrainGen#5 )

Added support for running in web. When adding input files, uses a file picker to get them one-by-one. When saving output files, uses FileSaver.js to "download" them.
Added 3 javascript libraries:

fireEvent (for opening a file open dialog)
pako (for delateing the png data)
FileSaver (for "downloading" the output files)

Which require two haxe extern libraries to be installed:

haxelib install FileSaver
haxelib install pako

Demo available here: http://fuzzywuzzie.github.io/AutoTerrainGen

Awesome work!
The only quirk that I've discovered was when I tried exporting changed terrain files for the second time. Chrome would download the same files with different names, eg. "output (1).png" and "output.tsx", but the TSX file still refers to the "output.png" (which is the first generated terrain). Tiled displays old texture, but with the new tilesets naming in "Terains" panel.
On desktop this doesn't happen, because old files are overriden.
I'm gonna add a "filename" text field, which on web would change to prevent TSX from getting old texture (every time we hit GENERATE and/or Export).
Thanks for the help! :crown:

Ahh, that's more an issue with chrome's download manager than anything else, really. It's downloading the same file, but to prevent it being overwritten, it automatically adds  (n) after the filename. You can change this in your chrome settings:


Code lens shows fully qualified types even though they are in scope

Seems to be working fine with 2.35.4