Mask /sys/firmware using read-only tmpfs

- What I did
TestBuildApiDockerFileRemote has been consistently failing (EPERM) on the host with #26618, which prohibits /sys/firmware from being accessed using apparmor.
https://github.com/docker/docker/blob/8a46c18dd4e4f8091b9e02ef5b476e8b8aa77c47/integration-cli/docker_api_build_test.go#L19
RUN find / -name ba*
find: /sys/firmware/dmi: Permission denied
find: /sys/firmware/acpi: Permission denied
find: /sys/firmware/memmap: Permission denied

This PR masks /sys/firmware using a read-only tmpfs so that TestBuildApiDockerFileRemote  passes without a change.
- How I did it
Masked /sys/firmware using a read-only tmpfs.
- How to verify it
Make sure the latest apparmor profile is installed to the host:
$ cat /etc/apparmor.d/docker
...
profile docker-default flags=(attach_disconnected,mediate_deleted) {
...
  deny /sys/firmware/** rwklx,
...
}

Then execute tests
$ TESTFLAGS='-check.f TestBuildApiDockerFileRemote' make test-integration-cli
$ TESTFLAGS='-check.f TestRunContainerWithSysFirmwareMountRO' make test-integration-cli

Or just make sure that docker run -it --rm busybox sh -c 'find / > /dev/null' passes without any error.
- Description for the changelog

Mask /sys/firmware using read-only tmpfs
- A picture of a cute animal (not mandatory but encouraged)
Signed-off-by: Akihiro Suda<EMAIL_ADDRESS>

This PR depends on https://github.com/opencontainers/runc/pull/1054

I fear this approach would need many tmpfs if we masks other /sys/foobar or /proc/foobar as well in the future.
So maybe there is a chance to accept EPERM as a breaking change, but I don't like to break the compatibility. Not sure how many folks can hit such EPERM...

The test should be using find -xdev I would think - it is fine for these system directories to have inaccessible files.

@justincormack OK, opened https://github.com/docker/docker/pull/26720
I'm closing this PR.

There is still an issue that if users do not have apparmor these paths are not being blocked, and this is one solution, but it would need to be applied more completely. There may be other solutions though, looking at the options.

@justincormack
Yes, and I was thinking of adding maskedDirPath (equivalent of maskedPath for directories) in the OCI spec, as a much more generic approach.
https://github.com/opencontainers/runtime-spec/blob/9c0fcee0b8d620f1fe7d5032e5f674fe2feda09f/config-linux.md#masked-paths
Some questions:

Should we mask other /{sys,proc}/foobar as well?  I feel currently too many entries under /sys and /proc are exposed, but not sure they can be a  vulnerability.
Is it technically right approach to use read-only tmpfs for masking directories? Is there any impact on performance?

@justincormack
Opened PRs in OCI, please look into them?
https://github.com/opencontainers/runtime-spec/pull/582
https://github.com/opencontainers/runc/pull/1068


New version: Tutanota.Tutanota 3.118.13

[ ] Have you signed the Contributor License Agreement?
[x] Have you checked that there aren't other open pull requests for the same manifest update/change?
[x] This PR only modifies one (1) manifest
[x] Have you validated your manifest locally with winget validate --manifest <path>?

[x] Does your manifest conform to the 1.5 schema?

Microsoft Reviewers: Open in CodeFlow

@microsoft-github-policy-service agree


Not working!

@Crinsane why is this not working:
This is a Controller function called by a get-link /cart/{{ $product->id }}
public function cart(Product $product)
    {
        Cart::add($product->id, $product->title, 1, $product->price);
        return redirect()->back();
    }

In the View I have this:
@foreach(Cart::content() as $cart)
{{ var_dump($cart) }} // nothing dumped
@endforeach

Gloudemans\Shoppingcart\CartCollection Object ( [items:protected] => Array ( ) ) 1

Okay, so I figured out that routes need to be added within the "web" middleware group like this:
Route::group(['middleware' => 'web'], function () {
	Route::get('tours/{id}/{slug}', 'ToursController@detail');
	Route::post('tours/addtocart', 'ToursController@addtoCart');
});

@David-Kurniawan  @Crinsane , I'm facing the same problem ( Laravel Framework version 5.2.29): cart is empty on every request. Session is not working as expected. On the other hand, "web" middleware is enabled by default on laravel 5.2:
https://laravel.com/docs/master/middleware#middleware-groups

LaravelShoppingCart is working ok. The problem was related to the way Laravel is handling the session:
http://stackoverflow.com/questions/29346743/laravel-5-session-doesnt-work


Added function element_encode()

Q
A

Type
feature

BC Break
no

Fixed issues
#31

Summary

Looks awesome, thanks!
Added a few minor nitpicks to make it even better 😲


JSON output includes the header row as a normal row

When a datasource has a header row, it should be possible to request that each row is a dict in the JSON, using keys from the header row.
I recently added that functionality to https://github.com/pyexcel/pyexcel-text/pull/14
(And I am moderately happy with pyexcel, so there is no urgency for this issue to be fixed.)

Good idea!


Please make this lib npm compatible

Nice lib, but it's not npm compatible, it would be best if you could make it compatible with es6 syntax(import).

Happy to receive a PR if you want to have a go :) If not, I'll try to get something done in the next week or so.


[Do not merge] Testing CI build

@seanpmorgan @av8ramit -- This appears to be working as intended. Tests pass currently; introducing an error results in failing tests and a failure log--
======================================================================
FAIL: test_transform_eager (__main__.ImageOpsTest)
test_transform_eager (__main__.ImageOpsTest)
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/tmpfs/src/github/tensorflow_addons/tf/local/lib/python2.7/site-packages/absl/third_party/unittest3_backport/case.py", line 37, in testPartExecutor
    yield
  File "/tmpfs/src/github/tensorflow_addons/tf/local/lib/python2.7/site-packages/absl/third_party/unittest3_backport/case.py", line 162, in run
    testMethod()
  File "/tmpfs/tmp/bazel/sandbox/linux-sandbox/15/execroot/__main__/bazel-out/k8-opt/bin/tensorflow_addons/image/transform_ops_test.runfiles/__main__/tensorflow_addons/image/python/transform_test.py", line 148, in test_transform_eager
    transform_ops.transform(image, [1] * 8))
  File "/tmpfs/src/github/tensorflow_addons/tf/local/lib/python2.7/site-packages/tensorflow/python/framework/test_util.py", line 1013, in decorated
    return f(*args, **kwds)
  File "/tmpfs/src/github/tensorflow_addons/tf/local/lib/python2.7/site-packages/tensorflow/python/framework/test_util.py", line 2235, in assertAllEqual
    np.testing.assert_array_equal(a, b, err_msg="\n".join(msgs))
  File "/tmpfs/src/github/tensorflow_addons/tf/local/lib/python2.7/site-packages/numpy/testing/_private/utils.py", line 896, in assert_array_equal
    verbose=verbose, header='Arrays are not equal')
  File "/tmpfs/src/github/tensorflow_addons/tf/local/lib/python2.7/site-packages/numpy/testing/_private/utils.py", line 819, in assert_array_compare
    raise AssertionError(msg)
AssertionError:
Arrays are not equal

not equal where = (array([0]), array([0]))
not equal lhs = [5]
not equal rhs = [4.]
Mismatch: 25%
Max absolute difference: 1.
Max relative difference: 0.25
 x: array([[5, 4],
       [4, 4]])
 y: array([[4., 4.],
       [4., 4.]], dtype=float32)

----------------------------------------------------------------------
Ran 7 tests in 29.232s

FAILED (failures=1, skipped=1)
================================================================================
INFO: Elapsed time: 58.370s, Critical Path: 46.21s
INFO: 15 processes: 15 linux-sandbox.
INFO: Build completed, 1 test FAILED, 45 total actions
//tensorflow_addons/layers:layers_wrappers_py_test                       PASSED in 9.6s
//tensorflow_addons/layers:maxout_py_test                                PASSED in 3.8s
//tensorflow_addons/layers:poincare_py_test                              PASSED in 4.3s
//tensorflow_addons/losses:triplet_py_test                               PASSED in 6.0s
//tensorflow_addons/optimizers:lazy_adam_optimizer_test                  PASSED in 7.4s
//tensorflow_addons/text:text_ops_py_test                                PASSED in 1.5s
//tensorflow_addons/image:transform_ops_test                             FAILED in 30.4s

Those logs are not currently visible, but Amit is working on that.
@seanpmorgan - once the GPU test script is set up, we can run that as well.

Thanks again for the help! Couple of clarifying questions:

Can we run these nightly and on git hook?
Will we be able to display build badges after test result are made public?

Yes, that is how they are setup now.
Yes, that is part of what @av8ramit is working on now. Turns out there may need to be some changes to the way the testing script is called, but he's working through that.

Closing as I'm not sure this is needed. Feel free to re-open if it is.


[DO NOT MERGE] Bicep net

Draft for using BicepNet.PS instead of Bicep dlls
To make this work we need to copy BicepNet.PS folder into the sources folder.
BicepNet.PS can be found at PSBicep/BicepNet
Run scripts/build.ps1 to build the module into
out-folder and copy this this project.

TODO:
- Fix Test-BicepFile
- Set up scripts to download BicepNet.PS
- Create workflow to publish BicepNet.PS as release

Done some quick tests and it looks great!
Bumped into an issue with ConvertTo-Bicep. Will do some more testing tomorrow.
ConvertTo-Bicep -Path c:\git\StefanIvemo\BicepPowerShell\tmp\sub.json
WARNING: Decompilation is a best-effort process, as there is no guaranteed mapping from ARM JSON to Bicep.
You may need to fix warnings and errors in the generated bicep file(s), or decompilation may fail entirely if an accurate conversion is not possible.
If you would like to report any issues or inaccurate conversions, please see https://github.com/Azure/bicep/issues.
ConvertTo-BicepNetFile: C:\git\StefanIvemo\BicepPowerShell\Source\Public\ConvertTo-Bicep.ps1:29:61
Line |
  29 |  …            $BicepObject = ConvertTo-BicepNetFile -Path $file.FullName
     |                                                           ~~~~~~~~~~~~~~
     | Cannot validate argument on parameter 'Path'. The argument is null or empty. Provide an argument that is not null or empty, and then try
     | the command again.

No bicep files located in path

ConvertTo-Bicep should be working now.

Done a lot of additional testing and I can't find any issues. Is there anything left to do?

Need to fix the cache task in the pipeline, then I think we are ready.

Great! We need to make a game plan then. 🙂

We can merge this into the Version2.0 branch and potentially create a prerelease/preview version to unblock the ones stuck on assembly conflicts.

Sounds great! Will look into how to publish a prerelease tonight.

ConvertTo-Bicep throws this error when I test on my Ubuntu WSL.
PS /mnt/c/git/stefanivemo/biceppowershell/source> ConvertTo-Bicep C:\git\StefanIvemo\BicepPowerShell\Source\azureFirewalls.json
WARNING: Decompilation is a best-effort process, as there is no guaranteed mapping from ARM JSON to Bicep.
You may need to fix warnings and errors in the generated bicep file(s), or decompilation may fail entirely if an accurate conversion is not possible.
If you would like to report any issues or inaccurate conversions, please see https://github.com/Azure/bicep/issues.
Get-ChildItem: /mnt/c/git/stefanivemo/biceppowershell/source/Public/ConvertTo-Bicep.ps1:26
Line |
  26 |  …     $files = Get-Childitem -Path $Path -Filter '*.json' -File | Selec …
     |                                                            ~~~~~
     | A parameter cannot be found that matches parameter name 'File'.


Moment helpers timeZone not working?

Hey,
I'm using ember v.2.5.0 and I'm trying to use ember-moment to beautifully include dates and times. Here are some vague photos of my project. Basically, it seems as though no matter what I change the timeZone value too, the time displayed does not change. It just stays at my standard time (in NY). What's the issue? The second image is how my times are displaying (all different timezones yet showing the same time). First is handlebars helper code.

Usually, this happens when you have another addon which might app.import moment.
Can you list out all your addons that your project uses?


Proxy always terminating

Description:

after install eg and proxy, when I add or delete a httproute, proxy will new pods then terminating every time, as shown

Environment:

the latest version

Logs:

it seems like the problem of OpenShift, cause in kubernetes cluster everything works fine.

it seems like the problem of OpenShift, cause in native kubernetes cluster everything works fine.

hey, native works fine but there is a compare nit.

are you still seeing this issue @hemenghong with the latest release ?

Fixed by #1594


Function 'semver.bump_patch` is deprecated

From our build log:
tests/commands/test_grow.py::test_path_full
  /builddir/build/BUILD/hatch-0.23.0/hatch/grow.py:66: DeprecationWarning: Function 'semver.bump_patch' is deprecated. Deprecated since version 2.10.0.  This function will be removed in semver 3. Use the respective 'semver.VersionInfo.bump_patch' instead.
    new_version = BUMP[part](old_version)

and
tests/commands/test_grow.py::test_path_file
  /builddir/build/BUILD/hatch-0.23.0/hatch/grow.py:66: DeprecationWarning: Function 'semver.bump_major' is deprecated. Deprecated since version 2.10.0.  This function will be removed in semver 3. Use the respective 'semver.VersionInfo.bump_major' instead.
    new_version = BUMP[part](old_version)

Hatch has been rewritten from scratch and no longer uses that package, see https://ofek.dev/hatch/latest/version/


Reserve published ports when using HairpinNAT

The HairpinNAT PR is most likely getting merged soon (#12165). Relying on HairpinNAT and IPTables rules for port publishing means that nothing in Docker actually binds the published port. To put it differently:

docker run -p 80:80 foo/bar might succeed even if something on the host besides Docker was already listening on port 80.
Running a process binding port 80 on the host will succeed even if a container is already publishing that same port.

What will happen in those cases in terms of prioritization of trafic is left as an exercise for the reader.
Proposed solution
When HairpinNAT is enabled (--userland-proxy=false), port publishing should bind the published port for the whole lifetime of the container. This will allow to mark the port as reserved at the kernel level, and prevent both of the use case above (failure to bind at container start will prevent 1, failure to bind at service start time will prevent 2).

Hi!
If you are reporting a new issue, PLEASE make sure that does not have any duplicates already open.
We would like to take this time to remind you of the information we need to debug the problem you are seeing. This is an automated response so if this ticket is not about a bug, do not fret.
If you fail to provide this information within 7 days, we will close this because we cannot debug your issue. We can reopen whenever the information is provided.
Thank you.
Please see:
https://github.com/docker/docker/blob/master/CONTRIBUTING.md#reporting-other-issues
Description of problem:

`docker version`:

`docker info`:

`uname -a`:

Environment details (AWS, VirtualBox, physical, etc.):

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual Results:

Expected Results:

Additional info:

#ENEEDMOREINFO

Guess this should be in the 1.7 milestone?

Makes sense as it goes hand-in-hand with the other on.e

Closed by docker/libnetwork#195.


Update curl version list

See https://github.com/xmake-io/xmake-repo/pull/101

Merged with base branch.
I'm wondering, should we disable test building? It doesn't seem really useful here (and is causing compilation issues with msvc and libcurl 7.64.0 because of an empty file)

If it is a test build of libcurl itself, as long as cmakelist provides an option to disable them, we usually set it to disable.

Yes it is, I'll make a separate PR for this.

Following #101
I made the changes, except for two things:

I used includes directly instead of declaring a function to prevent declaring a global add_versions_list variable which would then pollute the global namespace.
I removed the patched versions (example: instead of keeping libcurl 7.65.0 I kept 7.65.3), it seems to make more sense this way.

Sorry about all the failing checks from the previous commit.

I used includes directly instead of declaring a function to prevent declaring a global add_versions_list variable which would then pollute the global namespace.

No, xmake.lua of each package is completely isolated and will not affect

Oh alrighty then. Another thing I didn't know. I'm making the changes as requested.

Well this time I don't understand why it's failing, maybe it's not including the good versions.lua file?

Oh, it's the first time I use include in package/xmake.lua, I need to look at it, please wait. : (

No problem, I'm trying some stuff on my side too. It seems the versions.lua file is not executed (adding print statements inside this file has no effect), where is includes defined?

You should write:
includes(path.join(os.scriptdir(), "versions.lua"))

Perfect! Thank you.

ci fails, maybe we need add --without-zstd for macos
        if is_plat("macosx") then
            -- ...
            table.insert(configs, "--without-zstd")
        end

Should I make another PR?

No, please modify it directly on the current pr

Thank you very much for your contribution. :+1:

No problem 😸 I think you can expect a few more soon!


NO-ISSUE: Remove dnf upgrade from image mode container builds

The upgrades occasionally cause problems, like the following one:
Running transaction
[build]   Preparing        :                                                        1/1
[build]   Upgrading        : microcode_ctl-4:20230808-2.20240910.1.el9_4.noarch     1/2
[build]   Running scriptlet: microcode_ctl-4:20230808-2.20240910.1.el9_4.noarch     1/2
[build] /var/tmp/rpm-tmp.rIQFD8: line 18: /dev/kmsg: Read-only file system
[build]
[build]   Running scriptlet: microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch     2/2
[build] /var/tmp/rpm-tmp.LaGb5F: line 11: /var/lib/rpm-state/microcode_ctl_un_intel-ucode: No such file or directory
[build] /var/tmp/rpm-tmp.LaGb5F: line 13: /var/lib/rpm-state/microcode_ctl_un_ucode_caveats: No such file or directory
[build] /var/tmp/rpm-tmp.LaGb5F: line 15: /var/lib/rpm-state/microcode_ctl_un_file_list: No such file or directory
[build] error: %preun(microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch) scriptlet failed, exit status 1
[build]
[build] Error in PREUN scriptlet in rpm package microcode_ctl
[build]   Running scriptlet: microcode_ctl-4:20230808-2.20240910.1.el9_4.noarch     2/2
[build] error: microcode_ctl-4:20230808-2.20240531.1.el9_4.noarch: erase failed

See this Slack discussion

/approve


SunEditor

Fix #1110
@jepsar @newk5 and others here is initial version of the SunEditor courtesy of MattSho.
I added some features like RTL, Extender, and a few others.  But this needs review and Showcase examples!

[ ] Needs Showcase examples (especially localization and buttons)
[x] Review ButtonListJSON. Not thrilled with that property or name (renamed toolbar)
[x] Test in Dialog
[ ] Client Behavior Events Documented
[ ] Theme switching https://github.com/JiHong88/suneditor/issues/978

Yeah its on the TODO.  was hoping to get help with Showcase, Dark mode, etc.

Yeah its on the TODO.

Okay.. don't know how I missed that 🙈

was hoping to get help with Showcase, Dark mode, etc.

I can take care of it

OK I combined the JS so now its a normal  widget, renamed the JSON property to just toolbar.

Also I wonder if we can just combine and include all the language files as well. And the locale will just pick the right language.

OK added showcase examples for Localization, RTL, and Mode.
I think we just need one for custom button list.

I think we are good to merge. Only thing is that the basic example is not really basic. 😅

Love it!


OpenRefine docker containers

Would it be useful to make some official releases of OpenRefine available via dockerhub? I've sketched a couple of Dockerfiles at:

OpenRefine - latest release (link fixed now)
OpenRefine - recent build from github (link fixed now)

that I think do the job, though there may be better ways of doing them?
In respect of official releases, it could be handy to have:

openrefine/openrefine-latest-build
openrefine/openrefine-latest-release
openrefine/openrefine-stable

An example of how to create a dockerfile that adds extensions to any of these base builds might also be useful for cut-and-paste tinkerers such as myself...

I like containers, so I want to think with you. Given the fact that openrefine is already a self-contained widget that minimally inserts itself into a machine, the only workflow that I can see an OpenRefine container would enable is dispatching it in the cloud in a fast and reliable way. To do that properly, the dockerfile would need to architect a storage hierarchy, so that there is some persistence and workspace to get non-trivial things done. If you are working with data sets that reside in a public/private cloud it would be interesting to push the OpenRefine functionality to the data and reduce cost, or increase performance, but that would only kick in for data sets that are over a couple GB. That again would make the storage design more important.
What was the use case that you designed the dockerfile for?

@Ravenwater The particular use case I have been exploring is the assembly of virtual machines for use in distance education by remote students. I am part of a team writing a distance education course on data management and data analysis for the UK Open University, and we are supplying students with a virtual machine that contains various databases (mongodb, postgresql), an analysis environment (IPython notebooks with a lot of preinstalled python packages), and OpenRefine.
The original model was to give students a single VM image configured using vagrant and docker. (As well as getting this particular machine built, I was also interested in ways in which we might support workflows for creating new VM configurations, as well as supporting VM configurations for courses that run once or twice a year for up to 5 years). The particular use case we have at the moment is for students to download a VM image and run it using VirtualBox on their own computer; but I was mindful that there might also be a requirement to support students who want to access the VM running in the cloud or on institutional cloud servers. (Another model might be a traditional university where students use computer labs and need to access software packaged and maintained by the institution on pubic access machines).
I also started exploring the idea of being able create a VM that was assembled as a combination of docker containers. Part of the attraction of this is that an institution could maintain a set of "approved containers" that could be called on by people developing a new course requiring a new set-up.
The challenge then becomes one of adding data into the mix eg a set of OpenRefine example projects accessible from an OpenRefine container, eg a database preconfigured with some example database tables, eg IPython Notebook pointing to a directory containing example notebooks.
A brief timeline of my journey is described in these blogposts:
http://blog.ouseful.info/2013/12/02/packaging-software-for-distance-learners-vms-101/
http://blog.ouseful.info/2014/05/15/confused-again-about-vm-ecology-i-blame-not-blogging/
http://blog.ouseful.info/2014/12/10/thoroughly-confused-about-student-vms-docker/
http://blog.ouseful.info/2015/01/14/using-docker-to-build-course-vms/

@Tony Excellent, thank you for that background: makes perfect sense;
been through that same 'how to package a collection' experiment myself,
for us it also included the hardware and software appliance module.
The problem that we encountered is that some academic environments are
very Microsoft oriented, and some are very Apple oriented, and most of
the good server side web application stuff is Canonical oriented. Than
through in a smorgasbord of Java and JVM languages, JS environments for
web development, and PSE such as MATLAB, COMSOL, Gaussian, SciLab,
Octave, and R, and you end up without a good answer.
We have been putting some elbow grease into containerizing the server
side (Hadoop, Cassandra, etc.) guided by the observation that a modern
SOA is going to be a micro-services platform and containers are the
right weight for delivering said microservice SOAs. However, that
doesn't solve the MATLAB/COMSOL/Gaussian commercial software, which are
real workhorses in academia where the cost to use these is minimal.
I still like the Vagrant path as the tools are more mature and work on
Microsoft environments.
Love to collaborate as we are doing similar things.
On 1/28/2015 5:03 AM, Tony Hirst wrote:

@Ravenwater https://github.com/Ravenwater The particular use case I
have been exploring is the assembly of virtual machines for use in
distance education by remote students. I am part of a team writing a
distance education course on data management and data analysis for the
UK Open University http://www.open.ac.uk/courses/modules/tm351, and
we are supplying students with a virtual machine that contains various
databases (mongodb, postgresql), an analysis environment (IPython
notebooks with a lot of preinstalled python packages), and OpenRefine.
The original model was to give students a single VM image configured
using vagrant and docker. (As well as getting this particular machine
built, I was also interested in ways in which we might support
workflows for creating new VM configurations, as well as supporting VM
configurations for courses that run once or twice a year for up to 5
years). The particular use case we have at the moment is for students
to download a VM image and run it using VirtualBox on their own
computer; but I was mindful that there might also be a requirement to
support students who want to access the VM running in the cloud or on
institutional cloud servers. (Another model might be a traditional
university where students use computer labs and need to access
software packaged and maintained by the institution on pubic access
machines).
I also started exploring the idea of being able create a VM that was
assembled as a combination of docker containers. Part of the
attraction of this is that an institution could maintain a set of
"approved containers" that could be called on by people developing a
new course requiring a new set-up.
The challenge then becomes one of adding data into the mix eg a set of
OpenRefine example projects accessible from an OpenRefine container,
eg a database preconfigured with some example database tables, eg
IPython Notebook pointing to a directory containing example notebooks.
A brief timeline of my journey is described in these blogposts:
http://blog.ouseful.info/2013/12/02/packaging-software-for-distance-learners-vms-101/
http://blog.ouseful.info/2014/05/15/confused-again-about-vm-ecology-i-blame-not-blogging/
http://blog.ouseful.info/2014/12/10/thoroughly-confused-about-student-vms-docker/
http://blog.ouseful.info/2015/01/14/using-docker-to-build-course-vms/
—
Reply to this email directly or view it on GitHub
https://github.com/OpenRefine/OpenRefine/issues/933#issuecomment-71808864.

@Ravenwater Agreed on the commercial software side, though I can imagine (not sure how it would be implemented) something like boot2dockerPro that provides you with metered access to a commercial software container, and that logs the use of said containers, providing billing at an institutional level say. Eg I could imagine an institutional dockerhub that includes commercial as well as free containers, with the institution paying license fees on commercial containers based on a per get basis, or metering via docker runners just logs use of the commercial containers. (Though possibly intrusive, I can also imagine the desirability for corporate types to be able to track usage of all containers using docker on institutional machines.)
A real issue we have at the UK Open University is the current IT policy that virtual machines are not allowed on trusted/managed computers because they might introduce vulnerabilities (In part, the VM would have access to the core IT network, and arbitrary code can be installed and run in the VM that could then act maliciously within the core network context).
As well as the educational context, I have an interest in working with data in general and open data sets in particular, for example in a news context. I first took an interest in VMs after seeing @DataminerUK's Infinite Interns project, which supports the creation of a variety of VM configurations for use in a data journalistic context. In the last few days, I've started pondering how we might create custom configurations based around orchestrated assemblies of containers eg Frictionless Data Analysis – Trying to Clarify My Thoughts.
*(You might note that a lot of my interests relate to client side use of containers which I think is underexplored at the moment?)
Would be great to be able to both work up and generalise some of these ideas further, and also explore the use cases you're looking at.

To complement the OpenRefine container, I've started exploring a container for running CSV backed reconciliation services using the Open Knowledge Lab Reconcile-CSV server : Reconcile-CSV container
Whilst my early tests work fine for calling the reconciliation service from an OpenRefine container by calling the container's IP address on host, I can't seem to register the reconciliation service published by a --linked to Reconcile-CSV server from the OpenRefine container using aliases or IP addresses that exist within docker?

@psychemedia third-party virtualized workloads would have to go through a hardening and security review before they could be introduced and deployed in trusted environments: that unfortunately is just a fact of life for exactly the reasons you describe: arbitrary code could be brought in thus breaching any trust. Interestingly enough, for the DoS security vector, VMs are a better choice as the hypervisor can exert some control over the VM's use of resources: container technologies are not as mature yet and really can take down a machine for other tenants. That implies that you can apply containers where there is a need for efficiency, and VMs where there is a need for control.
If you have a dockerfile that you can share, I can take a look and debug.

Here's another approach that uses a release:
FROM maven:3.6.0-jdk-8-alpine
MAINTAINER<EMAIL_ADDRESS>
ARG RELEASE=3.1
ENV RELEASE=$RELEASE

RUN wget --no-check-certificate https://github.com/OpenRefine/OpenRefine/releas$
RUN tar -xzf openrefine-linux-$RELEASE.tar.gz  && rm openrefine-linux-$RELEASE.$
RUN mkdir /mnt/refine
VOLUME /mnt/refine
EXPOSE 3333
CMD openrefine-$RELEASE/refine -i <IP_ADDRESS> -d /mnt/refine

#Reference:

##to build, cd into the directory containing this Dockerfile, and run:
# docker build -t psychemedia/openrefinedemo .

##to peek inside the container:
# docker run -i -t psychemedia/openrefinedemo /bin/bash

##to run:
# docker run --rm -d -p 3333:3333 --name openrefine psychemedia/openrefinedemo

#to push:
# docker push psychemedia/openrefinedemo

@thadguidry Is there a clean step that can be added to your dockerfile to tidy up the container and make it essentially a container for the the clean/distributable app?

@psychemedia Yes, extra RUN commands could be added remove build folders/files and only leave the classes/libs.  @wetneb probably has that info that could be added.  OpenRefine when it is compiled (refine build command) needs the JDK, but after compiled and to run it, only needs JRE.  "Standard Java Web App Stuff"

Re: "OpenRefine when it is compiled (refine build command) needs the JDK, but after compiled and to run it, only needs JRE. "Standard Java Web App Stuff". My Dockerfile is for active development usage."
I'm guessing that means if someone wanted a lite container for running OpenRefine, a multistage Dockerfile woul dbe the way to do, compiling OpenRefine against JDK and then copying OpenRefine files over (which ones?) into the container running JRE.

By the by, just mentioning this here: OpenRefine can be run in a MyBinder container, proxied via a Jupyter-server-proxy, using nbopenrefineproxy

I'm guessing that means if someone wanted a lite container for running OpenRefine, a multistage Dockerfile would be the way to do, compiling OpenRefine against JDK and then copying OpenRefine files over (which ones?) into the container running JRE.

Since we're doing snapshot release builds with every commit now, an easier approach would be to just use the desired release (although I'm not sure how much we want to be encouraging people to use builds other than the standard releases).

To know which files to copy, you can have a look at the packaging scripts. I expect your Docker image to be based on Linux so you should use this one:
https://github.com/OpenRefine/OpenRefine/blob/master/packaging/linux.xml
The syntax there is fairly self-explanatory hopefully.

Circling back to this issue, I agree with @tfmorris in that I think having alternative installation mechanisms should be community maintained elsewhere than our own repo.  However, I'm fine with us setting up a Wiki page for the community to maintain and that holds links to other repos and DockerHub namespaces where the community maintains them unofficially.
So I vote to close this issue after some agreement and then move some of the information in this issue into a Wiki page where the community can keep it updated.

Fine with me!

@wetneb OK, I'll close this issue after I ...

[ ] setup the Wiki page and move the important info from this issue over to it.

DONE!  https://github.com/OpenRefine/OpenRefine/wiki/Alternative-Installation-Types


Improve handling split clusters

When a cluster is split stream info and consumer info will still work, but stream names wont.
However our startup uses StreamNames to get list of streams in order to figure out if we need to ask the user.
If we flip things so that we do stream info - and save/return that info - and only then prompt we can cut down startup API access significantly.  We never do stream names and we can optimise other access to the loaded stream using the cached instance.

https://github.com/nats-io/natscli/pull/642


#Vulcan-234/Show details button on node right click for Graph charts.

Problem
For my users it is very hard to remember the node label value and select the values from parameter select dropdown.
Solution
So we have implemented a show details button on node right click. But you can come up with your own way of implementation for this problem. We tried to use the existing available feature from Neodash.
**Notice:**

This feature was developed/tested solely for our own use cases, which might differ from yours. Don't have to merge if this is not a value added feature.
Feature:

      {
          "id": "909e565a-1a65-42bc-a730-5b063a3b5723",
          "title": "Movie Names",
          "query": "MATCH (m:Movie) where m.title=$neodash_movie_title_200 return m",
          ....
          "selection": {
            "Movie": "title"
          },
          "settings": {
            "pageIdAndParameterName": "0:neodash_movie_title_100:Movie" // Newly added settings
          },
     }

Caveats:
The updated global parameter value is not set to the parameter select dropdown if the show details functionality is configured in the same page. But all the graph chart are updating.
Author Info:
Monish<EMAIL_ADDRESS>on behalf of Mercedes-Benz Research and Development India
https://github.com/mercedes-benz/mercedes-benz-foss/blob/master/PROVIDER_INFORMATION.md

@m-o-n-i-s-h  expanding on the requirement a little more: The use case we are trying to address is as follows:

There are nodes in 1 tab/page of the dashboard, and the details of the nodes can be viewed by selecting the same on another page. The feature allows one to "connect" a node - such that one or more properties of a node can act as "input parameters" on another page. Monish's example gif shows the working of the feature.

Thanks @m-o-n-i-s-h and @brahmprakashMishra !
@BennuFire would this overlap with the 'jump to page report action'?
Can we accomplish the same with hooking up the action into the context menu for the node?


CMake Discovery Plugin fails to find FastRTPS in a ROS2 package.

Replication steps:
git clone https://github.com/Liquid-ai/Plankton.git
cd Plankton
statick uuv_gazebo_worlds

Error:
Running cmake discovery plugin...
  Found cmake package /home/axydes/code/github/Plankton/uuv_gazebo_worlds/CMakeLists.txt
Problem running CMake! Returncode = 1
From /home/axydes/code/github/Plankton, running ['cmake', '.', '-DCMAKE_BUILD_TYPE=RelWithDebInfo', '-DBUILD_GMOCK=ON', '-DBUILD_GTEST=OFF', '-DCMAKE_EXPORT_COMPILE_COMMANDS=ON', '-DCATKIN_ENABLE_TESTING=OFF', '-DCATKIN_SKIP_TESTING=ON', '-DINPUT_DIR=/home/axydes/code/github/Plankton/uuv_gazebo_worlds', '-DSTATICK_EXTRA_GCC_FLAGS=-Wcast-align -Wchar-subscripts -Wformat-security -Wformat -Wimplicit-int -Wincompatible-pointer-types -Wint-conversion -Wint-to-pointer-cast -Wparentheses -Winvalid-offsetof -Wsequence-point -Wdelete-incomplete -Wdelete-non-virtual-dtor -Winvalid-offsetof -Wreorder -Wreturn-type -Wuninitialized -Wunused-parameter -Wunreachable-code -Wunused-value -Wvarargs -Wtrigraphs -Wvarargs -Wformat -Wcast-qual']
-- STATICK FLAGS: -Wcast-align -Wchar-subscripts -Wformat-security -Wformat -Wimplicit-int -Wincompatible-pointer-types -Wint-conversion -Wint-to-pointer-cast -Wparentheses -Winvalid-offsetof -Wsequence-point -Wdelete-incomplete -Wdelete-non-virtual-dtor -Winvalid-offsetof -Wreorder -Wreturn-type -Wuninitialized -Wunused-parameter -Wunreachable-code -Wunused-value -Wvarargs -Wtrigraphs -Wvarargs -Wformat -Wcast-qual
-- PROJECT: [NAME:uuv_gazebo_worlds][SRC_DIR:/home/axydes/code/github/Plankton/uuv_gazebo_worlds][BIN_DIR:/home/axydes/code/github/Plankton]
-- HEADERS:
-- Found gazebo_ros: 3.5.0 (/opt/ros/foxy/share/gazebo_ros/cmake)
-- Using PYTHON_EXECUTABLE: /usr/bin/python3
-- Using all available rosidl_typesupport_c: rosidl_typesupport_fastrtps_c;rosidl_typesupport_introspection_c
-- Found rosidl_adapter: 1.1.0 (/opt/ros/foxy/share/rosidl_adapter/cmake)
CMake Error at /usr/share/cmake-3.16/Modules/FindPackageHandleStandardArgs.cmake:146 (message):
  Could NOT find FastRTPS (missing: FastRTPS_INCLUDE_DIR FastRTPS_LIBRARIES)
Call Stack (most recent call first):
  /usr/share/cmake-3.16/Modules/FindPackageHandleStandardArgs.cmake:393 (_FPHSA_FAILURE_MESSAGE)
  /opt/ros/foxy/share/fastrtps_cmake_module/cmake/Modules/FindFastRTPS.cmake:95 (find_package_handle_standard_args)
  /opt/ros/foxy/share/rosidl_typesupport_fastrtps_c/cmake/rosidl_typesupport_fastrtps_c-extras.cmake:7 (find_package)
  /opt/ros/foxy/share/rosidl_typesupport_fastrtps_c/cmake/rosidl_typesupport_fastrtps_cConfig.cmake:41 (include)
  /opt/ros/foxy/share/rosidl_typesupport_c/cmake/rosidl_typesupport_c-extras.cmake:13 (find_package)
  /opt/ros/foxy/share/rosidl_typesupport_c/cmake/rosidl_typesupport_cConfig.cmake:41 (include)
  /opt/ros/foxy/share/rosidl_default_runtime/cmake/rosidl_default_runtime-extras.cmake:12 (find_package)
  /opt/ros/foxy/share/rosidl_default_runtime/cmake/rosidl_default_runtimeConfig.cmake:41 (include)
  /opt/ros/foxy/share/builtin_interfaces/cmake/ament_cmake_export_dependencies-extras.cmake:21 (find_package)
  /opt/ros/foxy/share/builtin_interfaces/cmake/builtin_interfacesConfig.cmake:41 (include)
  /opt/ros/foxy/share/rcl_interfaces/cmake/ament_cmake_export_dependencies-extras.cmake:21 (find_package)
  /opt/ros/foxy/share/rcl_interfaces/cmake/rcl_interfacesConfig.cmake:41 (include)
  /opt/ros/foxy/share/rcl/cmake/ament_cmake_export_dependencies-extras.cmake:21 (find_package)
  /opt/ros/foxy/share/rcl/cmake/rclConfig.cmake:41 (include)
  /opt/ros/foxy/share/libstatistics_collector/cmake/ament_cmake_export_dependencies-extras.cmake:21 (find_package)
  /opt/ros/foxy/share/libstatistics_collector/cmake/libstatistics_collectorConfig.cmake:41 (include)
  /opt/ros/foxy/share/rclcpp/cmake/ament_cmake_export_dependencies-extras.cmake:21 (find_package)
  /opt/ros/foxy/share/rclcpp/cmake/rclcppConfig.cmake:41 (include)
  /opt/ros/foxy/share/gazebo_ros/cmake/ament_cmake_export_dependencies-extras.cmake:21 (find_package)
  /opt/ros/foxy/share/gazebo_ros/cmake/gazebo_rosConfig.cmake:41 (include)
  uuv_gazebo_worlds/CMakeLists.txt:4 (find_package)

-- Configuring incomplete, errors occurred!
See also "/home/axydes/code/github/Plankton/CMakeFiles/CMakeOutput.log".

  0 make targets found.
cmake discovery plugin done.

Adding the following custom CMake flags on the command line fixed the issue:
 --cmake-flags="-DCMAKE_PREFIX_PATH=/opt/ros/foxy"

#278 adds the appropriate CMake flags do fix this bug.


the input device is not a TTY

Hi,
I am trying to run mriqc using docker on a HPC server.
Running a single script it works well but when I am trying to run several subjects in parallel, I get the following message:
the input device is not a TTY
does it affect the processing?
Some details:
For each subject I am using the following commands in a script "sub-01.sh":
docker run -it --rm -v  $bids_dir:/data:ro   -v $out_dir:/out poldracklab/mriqc:latest    /data /out participant --participant_label sub-01
and to parallelize I am using GNU Parallel like:
parallel --verbose bash :::: to_run.sh
Here to_run.sh includes all the single subjects scripts:
sub-01.sh  ub-02.sh sub-03.sh ....
Sorry if I am not very clear.
Please let me know if there are better way to run mriqc in parallel.
Thank you!
Fab

Thread necromancy, but this is probably more a parallel invocation issue.

Please reopen if this is still an issue.


Playbook Instructions do not support writing sub-steps/indented steps

While creating a playbook, creating instructions require passing a list of strings which are converted to instruction steps. While this is helpful to add quick instructions, it does not provide an option to add sub-steps.
Expected Behavior
For eg. Instructions

If the user enquires about a product category:

Ask the user about the specific product name
Ask the user about their preferences ....

Current Behavior
For eg. Instructions

If the user enquires about a product category:
Ask the user about the specific product name
Ask the user about their preferences ....

Possible Solution
Allow writing the Step object to instructions in create_playbook.
Steps to Reproduce
Try by creating a copy of playbook and the instructions are not getting set correctly during create_playbook due to method requirements.
Context (Environment)
We are trying to create a copy of playbook(with goals, instructions, examples and parameters) and saving it with a new name for internal tests and experimentations.

Fixed in #212 and #213


removed hardcoded disable on logging

Removed "false &&" that was (mistakenly?) appended to the trace condition

That was indeed a mistake. They got disabled in 449c64bc, along with some others, then these others were re-enabled in 44f62456, but not these two. Cc @ctiller just in case my analysis is wrong, but otherwise LGTM.


现在通过简单的字典决定流向，但之后还是应该有思考过程

https://github.com/geekan/MetaGPT/blob/5c47fc53617330106d342fcec0fba44ea2da1c4b/metagpt/manager.py#L53

We are planning to implement a division of labor through thinking in the future.


Azure.Core | Remove unused HttpClient request option

API change check
API changes are not detected in this pull request.


Revert "BROOKLYN-626: fix jmxmp"

Reverts apache/brooklyn-server#1097

I tested this locally and it works as intended.


[tcgc] explore what it would mean to have a @client(modelsOnly)

Right now, our clients are exclusively tied to @service decorators. If there's no @service decorator, we don't have clients. However, for libraries like EventGrid, which are models only, we aren't able to generate anything. In cases like this, we would still like to return a list of models.
Would this mean explicitly adding to the @client decorator that I am a models-only library, so I don't need a service?
cc @timotheeguerin @tadelesh @swathipil

the easiest way is to add like this:
@client
@usage(UsageFlags.Input | UsageFlags.Output)
namespace EventGrid;

but still need a work to remove service check for @client decorator, we have a lint in tcgc currently.


Fix incorrectly passing base64url encoded content to GitHub's API instead of standard base64

Fixes #1147

Thank you very much for your effort!


Wrong parameter description

The text explaning AllowCallForwardingToPhone is wrong. This is not related to call park.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 2f1bf407-1ad6-77d9-4ef1-4bc821576912
Version Independent ID: 4630697b-375e-85f2-25b1-b944bc6dad5f
Content: Set-CsTeamsCallingPolicy (skype)
Content Source: skype/skype-ps/skype/Set-CsTeamsCallingPolicy.md
Service: skypeforbusiness-powershell
GitHub Login: @kenwith
Microsoft Alias: kenwith

@officedocsbot assign @yogkumgit

@kenwith  Please merge PR #3394

@dariomws306  Thank you very much for the contribution and updating the documentation with PR. @JensTrier Hope this update is helpful for you. Thanks for taking out some time to open the issue. Appreciate and encourage you to do the same in future also.

@officedocsbot close


Automated Package Upgrade

:tada: This PR is included in version 25.6.114 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Doesn't work with Windows 10 high contrast theme.

If you set Windows 10 to High Contrast theme, then the Color Theme dropdown box inside VS2019 (under Environment->General) is greyed out and cannot be changed. Likewise, the "apply" button found in this tool, is also greyed out and you cannot apply any color theme using this tool. And visual studio will appear all in black and white, and all your source code will be in white colored text only, which makes it slow and much more difficult to read your code. You lose all the colorization of your source code. If you know how to edit the registry, it is possible to copy all the values from the dark theme into the high contrast theme (overwriting visual studio's high contrast theme), thus forcing visual studio to use the dark theme. There is a tutorial that can be found on google, which worked on VS2017, explaining how to do this. But editing the registry by hand is very advanced and dangerous. Also, every time you install any update to visual studio, it overwrites any edits you made to the registry, which means you have to do the registry hack all over again to get the colors fixed.  There is no reason why visual studio shouldn't allow users of the high contrast windows theme to edit the color theme inside visual studio. The very fact that we can hack the registry to forcibly fix the problem, shows that there is no technical reason why visual studio can't use its "dark" theme when windows is set to high contrast theme. It CAN be done through registry hacking, so WHY can't it simply be done under Environment->General? Why does visual studio disable the option to switch the color theme? WHY? This problem existed in VS2017 and was reported as a bug many times by many people, but it was never fixed during the years that we had VS2017. And now we're on VS2019 and the problem still exists. Will it ever be fixed? I downloaded this color themes editor tool hoping it would allow me to edit the theme, but all its "apply" buttons are also greyed out.  I'm writing this issue report to help bring attention to this problem. If you don't believe me, simply go to Windows' theme editor (under Settings->Vision->High Contrast) and turn window's high contrast ON. Then, go to visual studio and you'll see that it will not allow you to edit the color theme, and all your source code will be white colored text and very ugly.

This is just a set of themes for use in Visual Studio. VS controls what themes are visible and when based on registration and the Windows high contrast setting. There is a ticket tracking this feedback here:
https://developercommunity.visualstudio.com/idea/527413/visual-studio-forces-the-user-to-use-its-high-cont.html
I recommend following that to stay up to date on how that issue evolves.


Go agent

Go agent with all event handlers implemented and 83 test cases

Change the go-machine-service dependency to https://github.com/rancher/event-subscriber
We abstracted out the logic we needed from gms to there


google drive file download access denied

When I run:
source ./scripts/install_deps.sh
I get the following errors:
python -c "import gdown; gdown.download('https://drive.google.com/uc?id=1BlDBB4dLLrlN3cJhVL4nmrd_g6Jx6uP0', 'checkpoints/pretrained/epoch_20.pth', quiet=False)"
Access denied with the following error:

        Cannot retrieve the public link of the file. You may need to change
        the permission to 'Anyone with the link', or have had many accesses.

You may still be able to access the file from the browser:

         https://drive.google.com/uc?id=1BlDBB4dLLrlN3cJhVL4nmrd_g6Jx6uP0

This applies to all the google drive files.

Does this issue occur for triplanenet_v2_final.pth as well?

Yes it does

I am experiencing same issue as well.

When I run: source ./scripts/install_deps.sh
I get the following errors:
python -c "import gdown; gdown.download('https://drive.google.com/uc?id=1BlDBB4dLLrlN3cJhVL4nmrd_g6Jx6uP0', 'checkpoints/pretrained/epoch_20.pth', quiet=False)"
Access denied with the following error:

        Cannot retrieve the public link of the file. You may need to change
        the permission to 'Anyone with the link', or have had many accesses.

You may still be able to access the file from the browser:

         https://drive.google.com/uc?id=1BlDBB4dLLrlN3cJhVL4nmrd_g6Jx6uP0

This applies to all the google drive files.

I was able to fix the issue by upgrading gdown from 4.7.1 to 4.7.3


Link to datasets YAML configuration page

Link to https://huggingface.co/docs/datasets/v2.7.1/en/dataset_card#more-yaml-tags from https://huggingface.co/docs/hub/datasets-manual-configuration, to complement with all the possible values in README's YAML

And give an example of each supported feature type in the YAML config. See https://discuss.huggingface.co/t/appropriate-yaml-for-dataset-info-list-float/74418 for example: I think we currently have no reference to share to the user.

Indeed, it has been removed in https://github.com/huggingface/datasets/pull/5470#discussion_r1088471903
The spec is here: https://github.com/huggingface/hub-docs/blob/main/datasetcard.md?plain=1

Somewhat related: discussion about the spec: https://github.com/huggingface/dataset-viewer/issues/2639
Also: should we just redirect to the spec (https://github.com/huggingface/hub-docs/blob/main/datasetcard.md?plain=1), or should we create a dedicated doc page for this? Adding the link would already by a good step forward.

Also: https://github.com/huggingface/hub-docs/blob/main/datasetcard.md?plain=1 is outdated:
configs:  # Optional for datasets with multiple configurations like glue.
- {config_0}  # Example for glue: sst2
- {config_1}  # Example for glue: cola

It does not respect the current format: https://huggingface.co/docs/hub/datasets-manual-configuration.
Ideally, it should be the reference, with more details than https://huggingface.co/docs/hub/datasets-manual-configuration, not the other way.
cc @polinaeterna for example if you want to look at it

Adding the link would already by a good step forward.

Shall i start out with this and have a look where it leads us @severo? Or would you suggest a different approachch?

Hmmm, I think we have to improve the spec first. Then, link to it from the docs page, otherwise the link would not bring much value.

Do you want to work on a PR to improve the spec https://github.com/huggingface/hub-docs/blob/main/datasetcard.md?plain=1 ?
The idea is to add the structure of the configs: field, to match https://huggingface.co/docs/hub/datasets-manual-configuration at least (config_name, data_files, etc). Some more fields can be passed, if I'm not wrong (it's defined in https://github.com/huggingface/datasets, but @polinaeterna knows these details better than I)

Since the spec is improved, shall i open a PR to link the YAML configuratino page?


♻ Clear duplicated class border-0

dist/css/bootstrap-utilities.css

#L200-L202
#L272-L274

Nice catch, thanks!
Wouldn't it be better to drop the relevant entry in _utilities.scss (L77) instead? @mdo any opinion?

Nice catch, thanks!
Wouldn't it be better to drop the relevant entry in _utilities.scss (L77) instead? @mdo any opinion?

Wouldn't it be better to drop the relevant entry in _utilities.scss (L77) instead?

I think that's no good 🙈
In the current dist CSS order,
make it impossible to set some directions border with clearing the components border.

example @ jsfiddle

Wouldn't it be better to drop the relevant entry in _utilities.scss (L77) instead?

I think that's no good 🙈
In the current dist CSS order,
make it impossible to set some directions border with clearing the components border.

example @ jsfiddle

For the record, this is somehow unrelevant: if you want to clean some borders only (and not all), do not use .border-0 which means drop all borders. Use .border-top-0 and so on.
However I prefer that .border-0 matches border: 0; instead of border-width: 0px; so I'd stick to your suggestion. :)

For the record, this is somehow unrelevant: if you want to clean some borders only (and not all), do not use .border-0 which means drop all borders. Use .border-top-0 and so on.
However I prefer that .border-0 matches border: 0; instead of border-width: 0px; so I'd stick to your suggestion. :)

I don't know what the migration guide entry is, and I'm not very good at English 😂
Please write that, or I'll try to write if show me some examples 🙋♂

@k-utsumi The migration guide is migration.md in site/content/docs/5.0/, you may simply mentionned something like:

Dropped the 0 entry in $border-widths map to remove duplicated utilities.

@ffoodd Thanks, maybe I understood🙌

Thanks😊


chore(deps): upgrade dependencies

Upgrades project dependencies. See details in workflow run.

Automatically created by projen via the "upgrade-dependencies" workflow

AWS CodeBuild CI Report

CodeBuild project: GitHubPipelineAutoBuildProj-XK8ItpxnSow5
Commit ID: c266d9e7037f5ab95ffb8a7a184c240fa3b1751a
Result: SUCCEEDED
Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository


Dart 2.8.0-dev.17.0 breaks Dart Sass Node.js tests

I haven't had time to dive in and find a minimal reproduction, but Dart Sass's Node.js tests started failing with the release of Dart 2.8.0-dev.17.0 with errors like the following:
  NoSuchMethodError: method not found: 'get$$call' (t2.get$$call is not a function)
  test/node_api/value/null_test.dart 23:47  main.<fn>.<fn>

See this Travis job for an example of the failure, and this Travis job for an example of a successful run with Dart 2.8.0-dev.16.0.
To reproduce:
$ git clone git://github.com/sass/dart-sass
$ cd dart-sass
$ pub get
$ pub run grinder before-test
$ pub run test test/node_api/value/null_test.dart -n "from a parameter is instanceof Null"

You can inspect the generated JS code in build/npm/sass.dart.js and regenerate it with pub run grinder pkg-js-dev.
This is blocking Dart Sass's release process.

Culprit[1] is https://dart-review.googlesource.com/c/sdk/+/140042 by @johnniwinther.
This changed how implements Function is handled, which should have been a no-op, but apparently had an effect on JS interop.
This makes sense as the error relates to call. Natalie, I suspect you can make the code work by writing the signature for call yourself on the class(es) that currently implement Function. I will leave figuring out the SDK fix to those more knowledgeable than I :)
[1] found by bisecting through SDK changes in range 41fa72ef11799676526593694801cda3954d4ff6..e3af7e724f51ca12636ed0c716cbb3daab9213d5 which corresponds to dev.16.0 to dev.17.0: git checkout <revision> && git clean -ffd && gclient sync -D --force --reset && ./tools/build.py --mode release --arch x64 create_sdk

Unfortunately manually implementing call() doesn't work here—this is coming from type definitions for JS classes, e.g.:
@JS()
class NodeSassNullClass implements Function {
  external Object call();
  external NodeSassNull get NULL;
}

@JS()
class NodeSassNull {
  external Constructor get constructor;
}

@sigmundch @fishythefish Is this related to the problem you found with js-interop and Function ?

@nex3 TL;DR - I believe a quick fix on your end would be to remove the Function type in the parameter of isJSInstanceOf in utils.dart.
@johnniwinther I think it's a different issue.
It appears that removing Function while lowering is causing downstream changes to implicit tear-offs of the call method. Before the change, if something implemented Function we allowed assigning it to the Function type, even though a cast to that type would fail. After the change, we'd tear-off the call method instead.
Consider this example:
class B implements Function {
  void call() {}
}

m1(Function f) => m2(f);
m2(f) => print(
    'arg: $f\n'
    'type: ${f.runtimeType}\n'
    'is function: ${(f as dynamic) is Function}');

main() {
  m1(B());
  m2(B());
}

Before the change, this would print twice:
  arg: Instance of 'B'
  type: B
  is function: false

After the change, the call to m2 continues to print that, but the call to m1 would print:
  arg:  Closure 'call$0' of Instance of 'B'
  type: () => void
  is function: true

(Note: this is also the case on other backends)
The new behavior is what was specified back in 2.0.0, which is that implementing Function was supposed to have no effect whatsoever. Nevertheless, this bug fix is a breaking change so we should decide whether to move forward with it and, if so, send out a breaking change announcement about it. My inclination is that we do release it.

I assumed that the fix only had impact on backends that (mis)used the references to Function wrongfully included in the AST. With your example, Siggi, it turns out the CFE was inconsistent in its own handling of Function - it excluded Function in only some of its internal processing.

@nex3 TL;DR - I believe a quick fix on your end would be to remove the Function type in the parameter of isJSInstanceOf in utils.dart.

Unfortunately this doesn't work because the js package also types instanceof()'s parameter as Function.

quick update: we discussed this more broadly and are going to move ahead with the breaking change. We'll send out a proper announcement soon.
@nex3 I tried the suggestion above and it allows the test to pass. However, I believe it is not enough. I didn't notice earlier that the utility method calls js_utils's instanceof, which is also typed to receive a Function parameter.
I believe it is a mistake that such API expects a Dart Function (for the same reason behind @johnniwinther's fix), it should instead accept any js-interop type that could be representing a constructor (and not require those to implement Function). We don't have a type to describe that, so we'll likely turn it in to Object.
I think we need to relax the API in js-util. Until we do so, maybe the immediate fix for your test would be to add a copy of instanceof in your utility library instead, or skip that step in the unit test.

Unfortunately this doesn't work because the js package also types instanceof()'s parameter as Function.

Sorry I had the tab open since yesterday and I had not seen your response until after I replied. Seems you had encountered the same issue.
I sent out a change to fix  instanceof and callConstructor: https://dart-review.googlesource.com/c/sdk/+/142321

I sent out a change to fix instanceof and callConstructor: https://dart-review.googlesource.com/c/sdk/+/142321

Please let me know once this change makes it into a dev release.

Sure thing! Merge request is tracked at https://github.com/dart-lang/sdk/issues/41326

Thanks again @nex3  for following up offline.
I'm closing this issue now that the fix has landed in the beta channel (https://github.com/dart-lang/sdk/commit/1e81d677f731f6ea58786e20b4ec3e809aab8366).


MacOS (problem installing NEFI) : Error: invalid option: --with-python3

Hello,
So I just downloaded NEFI and was following all the steps in the installation guide (http://nefi.mpi-inf.mpg.de/documentation/rst_files/Installation.html#macosx) but when I reached the point where I have to install OpenCV 3 with the necessary python bindings, an error appears.
This is what it says -- >

Any idea how I can solve this?
best,
Luna

It looks like opencv has been updated to no longer provide the --with-python3 option. Can you try brew install opencv?

Oh yes, now it did install it. Thank you ^^
But how do I follow the next step? (image below)

I tried changing the location of the files as they specify in the documentation but when I try to import (e.g. import networkx) it says that command is not found.

Oh wait. I think it does recognize the command. I just don't know whether it worked. This is how it looks like:

If there is no error message, it was successful. It looks like you're good to go.


perf: refactor dates to not use dayJs and use auro-datetime instead

Alaska Airlines Pull Request
Type of change:
Please delete options that are not relevant.

[ ] New capability
[x] Revision of an existing capability
[ ] Infrastructure change (automation, etc.)
[ ] Other (please elaborate)

Checklist:

[x] My update follows the CONTRIBUTING guidelines of this project
[x] I have performed a self-review of my own update

By submitting this Pull Request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
Pull Requests will be evaluated by their quality of update and whether it is consistent with the goals and values of this project. Any submission is to be considered a conversation between the submitter and the maintainers of this project and may require changes to your submission.
Thank you for your submission!
-- Auro Design System Team
Summary by Sourcery
Refactor the AuroPane component to replace dayJs with native Date object and auro-datetime for date handling, improving performance and consistency. Update tests and documentation to reflect these changes.
Enhancements:

Refactor date handling in AuroPane component to use native Date object and auro-datetime element instead of dayJs.

Documentation:

Update API documentation to include examples with invalid date and empty price attributes.

Tests:

Modify tests to accommodate changes in date handling and ensure correct parsing of null dates.

@sourcery-ai review

:tada: This PR is included in version 3.1.1 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Issue #11101 - Remove fill values from vel3d_b_sample

Prototype code, probably shouldn’t be merged until Stream Engine is updated.

We should wait until Rene finishes his commit (which is version 0.6.7) and then merge this code after (since 0.6.7 has been officially released with a partial implementation of Rene's fix).


docker-from-docker?

Same as devcontainers/features#123
Generally this is referred to as "Docker outside of Docker" (DooD), like "Docker in Docker" (DinD), so a name change may make sense.

@Chuxel / @joshspicer Any concerns with renaming the Template?
It is currently only used by Add Dev Container Configuration Files command which dynamically reads data from a index.json file. I think it would be safe to simply rename the template and regenerate the index.

Nope!  As discussed for the feature, that's fine with me!

Renamed and published docker outside of docker Templates 🚀


Provide examples of stored variables

When I go and look at the store, variables are empty and there is some code to intialize them.
This is hard to understand because now I don't know how this variable will look like once it is initialized.
We need one of these

detailed documentation of the variables at runtime
inline comments explaining the format of the variables once they are initialized

This was initially a drafted issue from a good while back.
I think another way of thinking about this problem is with tests. If I have tests for components that mount the component and supply them with the correct format of data, then the test shows me how to use the component. And the test is kind enough to break when the supplied data no longer works - unlike some inline doc.

This is conceptually linked to https://github.com/neurobagel/annotation_tool/issues/166

Currently a page's initial state cannot (always) be loaded with a few simple store actions. Page load is brittle because of actions required for their initialization being separated between the store and mount functions.
For example, the categorization table is not created until requirements are met on the index page for the user to navigate to the categorization page. This results in non-standard/disparate page loading code and makes for creation of tests for pages more difficult to setup as well as more opaque.
The ideal solution would be to create a standard for page load, for example, where an initial state is created via store actions. A page's early Vue lifecycle hooks (e.g. created or mounted) can then call the required page state initialization actions in the store – making the location of such code standard across pages and making the creation of tests more intuitive and less research-intensive for the test creator.

Closing this because runtime store variables are now accessible via our component and store-unit tests


ENH: Add gradient plot method

Add gradient plot method.

Notes:

Following https://github.com/nipreps/mriqc/issues/1216#issuecomment-2056452871.
Test data is missing. I have used some local data. Suggestions on where a pair of bvals/bvecs should be fetched are welcome.
This has been transferred/adapted (return object docstring added to plot_gradients) from eddymotion. IMO eddymotion should import plot capabilities from either here, nireports or elsewhere. As the mentioned issue was opened here, adding the code here.
Eventually, the entire eddymotion.viz module will need to be relocated, and the documentation be adjusted:
https://github.com/nipreps/eddymotion/pull/169/files#diff-c4b284a0e8c330264ebefb4d3d14dd5bb68fe3b72c2ae656f49132e2c134b84fR90
Not sure whether the module where I added the data is the most appropriate one (e.g. instrumentation has a viz module).
The current code provides this plot: are we OK with it?

Or do we prefer each shell in a different sphere, e.g.?

I would prefer the first plot, but with a twist: it should render both the original b-vectors and where they land after head motion correction, possibly showing the glyph through which they rotate.
The original b-vector could be just a point (not to overcrowd the plot) and then the rotated b-vector should take the color scale.
Why this?
First, because the plot would allow assessing head motion at the same time (we have some metrics summarizing the angles between original and rotated b-vectors).
Second, because MRIQC cannot assume the dataset is "shelled" -- the input can be DSI or some hybrid sampling. IMHO, plots with 3 or more spheres are almost impossible to interpret. Having a single sphere can feel crowdy, but gives a good sense of the coverage of the b-vectors and shells.
WDYT?

This has been transferred/adapted (return object docstring added to plot_gradients) from eddymotion. IMO eddymotion should import plot capabilities from either here, nireports or elsewhere. As the mentioned issue was opened here, adding the code here.

I think eddymotion's viz module could be outsourced into nireports, so all nipreps can use it naturally without forcing the dependency.

Not sure whether the module where I added the data is the most appropriate one (e.g. instrumentation has a viz module).

mriqc.instrumentation is basically a resource monitoring tool, and the plotting is just for it. mriqc.viz is the right location for this (actually somewhere under nireports.reportlets)


1.0.37: New starting mechanism using systemctl --user doesn't work when users $HOME is on an AFS filesystem

systemd --user doesn't work with $HOME in /afs in general, there are systemd bug reports about this already. Maybe it would be better to revert to the old mechanism for starting things?
Long version: systemd --user bypasses the normal PAM stack when user logs in and instead tells the system 's systemd (PID 1) to spawn systemd --user processes for each user, which systemctl --user talks to. However, these systemd --user processes run through their own PAM stack which doesn't call any auth modules (just account and session, see /etc/pam.d/system-user). This leads to them having neither a kerberos ticket, nor an AFS token, both of which are required to get access to anything inside /afs.

Seems there's now a fallback for situations where systemd --user is unavailable or doesn't work.

OK, need to reopen, the script doesn't really work.
It runs keybase config set mountdir which in turn tries to start keybase.service using systemctl --user before even knowing whether this works at all. This the fails because systemctl --user runs in degraded mode.
It also doesn't handle this degraded mode of systemctl --user correctly. It treats degraded the same as running, which is wrong:
    status="$(systemctl --user is-system-running || true)"
    if [ "$status" = "running" ] || [ "$status" = "degraded" ] ; then
        return 0
    elif [ -z "$status" ] ; then

This should really be:
    status="$(systemctl --user is-system-running || true)"
    if [ "$status" = "running" ] ; then
        return 0
    elif [ "$status" = "degraded" ] || [ -z "$status" ] ; then

because degraded means "doesn't work", which is the case when $HOME is in AFS (or any other kerberized network filesystem.

Sorry, I missed this. In the future please make a new issue if you need to re-open after a long time,
otherwise no one will get notified.

OK, wasn't aware of this. Will do next time...

I'll look at this more after the holidays, but as I understand it, systemd user manager doesn't
work on AFS?

Yes, when the user's $HOME is below /afs. This is because systemd --user itself is not started from the user session, but from systemd (PID 1) and thus doesn't belong to the same process group and never get's a token to access anything inside /afs (root is NOT a special user there). See the link in my previous message.

Your fix seems reasonable though, I'll have to look into it.

Sounds great.

As a workaround for now, could you try exporting KEYBASE_SYSTEMD=0 before run_keybase
to signal that it isn't wanted?

Tried, and it works. Thanks a lot.

What is the output of
systemctl --user is-active init.scope

for you? I'm thinking of changing the logic to that. The problem with systemctl --user is-system-running is that it returns degraded if any unit is failing.

Unfortunately this prints out active in both cases.

systemctl --user status dbus.service too?

Sorry, just to make sure, also systemctl --is-active dbus?

Looks like the best option:
% systemctl is-active dbus
active
% systemctl --user is-active dbus
inactive

Great, thanks for the help. We'll get this in in the next Linux release. Thanks for the report!


Make table rendering consistent across commands

With the updated prettytable-rs from #28 I played a little bit to get a more consistent table output, mainly for enclosure and disks listing.
h3. Current output

Enclosure listing

Disks listing

h4. Possible new output format

Enclosure listing

Disks listing

What is your feeling on this ?

I feel it is beautiful :)
It looks way better, thanks to work on this.
Can we have a PR with these changes?

And plus you managed to sort the SLOT, that is a big plus :)

Example to check:
Before sort:
dev: dev/sg20 map: /dev/sdu slot: 18
After sort:
dev: dev/sg20 map: /dev/sdu slot: 20

And plus you managed to sort the SLOT, which is a big plus :)
But need to be sure the sort in the slots really match the DISK and MAP, that was very hard for me to make, and I gave up in the end.
Comparing the images before/after, looks like the Array slot isn't right anymore with the "sort", would be interesting if you could double check it.

I haven't explicitly sorted anything...
For the array -> slot mapping, the screenshot comes from a different model of JBOD, that didn't enumerate in the same order, but I will make sure it doesn't change :)

@herver feel free to open an MR with these changes, it really looks better than what is presented right now. I personally liked a lot :)


Linkedin login page clone

Linkedin phishing page creation

Can I make Google clone?

I would like to perform this task. could you assign it to me?

@ParamTatiya02 Ok, I am assigning this issue to you.

i want to contribute to this. Could you assign to me?

Hello @prachi0117,
Note: @ParamTatiya02 is already working on this, do you want to work together?

Hello @prachi0117, Note: @ParamTatiya02 is already working on this, do you want to work together?

I am already done with the html part and soon  I will complete with the css one. So if you could assign it to me?

#18 Improved this LinkedIn login page. Tried to replicate the original


Dockable Views Exception on Button Press

Hey, I tried to create some windows in a dockable fashioned way, without using tkinter but using windows forms. Without the usage of Forms, the plugin worked worked without errors, but as soon as I added windows forms some weird errors are occur. I added the forms as mentioned in https://github.com/haroldlinke/VEGASPython/issues/1#issuecomment-599104805.
Due to the fact, that I cannot access the conole, I pasted the error into the button ^^.

Any Idea what could cause this error?
(Whole source code could be provided if needed)

Dear Peter,
is also used windows forms in some scripts and did not have this error.
So there must be something else happening. Can you please provide me with the source code, then I can check what happened?
Kind regards
Harold
Von: Peter Wassermair<EMAIL_ADDRESS>Gesendet: Dienstag, 18. August 2020 14:44
An: haroldlinke/VEGASPython<EMAIL_ADDRESS>Cc: Subscribed<EMAIL_ADDRESS>Betreff: [haroldlinke/VEGASPython] Dockable Views Exception on Button Press (#2)
Hey, I tried to create some windows in a dockable fashioned way, without using tkinter but using windows forms. Without the usage of Forms, the plugin worked worked without errors, but as soon as I added windows forms some weird errors are occur.
Due to the fact, that I cannot access the conole, I pasted the error into the button ^^.
https://user-images.githubusercontent.com/1789749/90514115-062e5b00-e161-11ea-85d3-2f2f5059ef44.png
Any Idea what could cause this error?
(Whole source code could be provided if needed)
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub https://github.com/haroldlinke/VEGASPython/issues/2 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AKNR4QXUDRBQ5T2BWQQXXZLSBJZR3ANCNFSM4QDM6TMA .  https://github.com/notifications/beacon/AKNR4QSYGQM7A24BBHVPUXDSBJZR3A5CNFSM4QDM6TMKYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4KEXNOMA.gif

I have uploaded my code into a seperate repository:
https://github.com/Peda1996/jump_cutter/blob/master/jump_cutter_dockable.py
Basically the whole code except the windows gui should work..

Hallo Peter,
I have downloaded the script.
To be able to run it I also need the modules:
utils.process_audio
vegasWrapper.wrapper
Can you please provide them to me?
Thanks.
Please note: I am very busy at the moment so it may take some time until I can have a detailed look into the issue.
Kind regards
Harold
Von: Peter Wassermair<EMAIL_ADDRESS>Gesendet: Dienstag, 18. August 2020 15:01
An: haroldlinke/VEGASPython<EMAIL_ADDRESS>Cc: haroldlinke<EMAIL_ADDRESS>Comment<EMAIL_ADDRESS>Betreff: Re: [haroldlinke/VEGASPython] Dockable Views Exception on Button Press (#2)
I have uploaded my code into a seperate repository:
https://github.com/Peda1996/jump_cutter/blob/master/jump_cutter_dockable.py
Basically the whole code except the windows gui should work..
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub https://github.com/haroldlinke/VEGASPython/issues/2#issuecomment-675464173 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AKNR4QV2C5OVGDN3AAAD4CTSBJ3SNANCNFSM4QDM6TMA .  https://github.com/notifications/beacon/AKNR4QRJVSFVEGALUJ2YWL3SBJ3SNA5CNFSM4QDM6TMKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOFBBMH3I.gif

Hey,
thanks for having a look at my project :)
The modules, and the whole code can be found in the github project: https://github.com/Peda1996/jump_cutter

Hello Peter,
I am sorry it took a bit longer.
Unfortunately the problem is a bit more complex than I thought initially.
I will try to explain what is happening:
VEGASPython uses PythonNet to create the interface between Python and C# modules like VEGAS.
In the current implementation the Pythonengine is started, when a VegasPython script is executed. The start includes the initalisation of the variable scope.
When the script ends, the variable scope is disposed. But the pythonengine is not stopped.
In the case of your program the script creates the dockable window and then ends.
When you press the button execute in the dockable window the python code associated with the button is executed. This works until the code tries to access the variable pyVEGAS.
As the variable scope was disposed at the end of the script, the variable is not accessible anymore and the system crashes.
Unfortunately it is not easy possible to remove the disposal of the variable scope as this is a bigger redesign of the architecture of the program and needs a lot of testing to ensure that nothing else is broken.
At the moment I do not have the time to do this.
I will think about a solution and as soon as I have a new version , it would be nice if you could test it.
Kind regards
Harold
Von: Peter Wassermair<EMAIL_ADDRESS>Gesendet: Dienstag, 18. August 2020 21:05
An: haroldlinke/VEGASPython<EMAIL_ADDRESS>Cc: haroldlinke<EMAIL_ADDRESS>Comment<EMAIL_ADDRESS>Betreff: Re: [haroldlinke/VEGASPython] Dockable Views Exception on Button Press (#2)
Hey,
thanks for having a look at my project :)
The modules, and the whole code can be found in the github project:  https://github.com/Peda1996/jump_cutter https://github.com/Peda1996/jump_cutter
—
You are receiving this because you commented.
Reply to this email directly,  https://github.com/haroldlinke/VEGASPython/issues/2#issuecomment-675659186 view it on GitHub, or  https://github.com/notifications/unsubscribe-auth/AKNR4QS4UDSCYTVE3GUMUS3SBLGHNANCNFSM4QDM6TMA unsubscribe.  https://github.com/notifications/beacon/AKNR4QQ5CW6GKPTVM4KK3HDSBLGHNA5CNFSM4QDM6TMKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOFBC33MQ.gif

Hmm, I was afraid it was something like that.
Is it possible to pass the dispose function to Python (or disable the dispose functionality with a boolean variable set in the Python script)? Then the only problem is that different scopes need different names (because some of them are still running in the background). These scope names could be set by the filename or?
Could you append the dependencies to the project (C# part), so I could compile the whole project and do some experiments?
Translated with www.DeepL.com/Translator (free version)

Hello Peter,
yes. I was thinking in this direction too.
One year ago I was experimenting with integrating a TK-window in a dockable window to create a dockable TK-windows. Unfortunately the concepts for this did not work with VEGASPython. So it would finitely be nice to have dockable windows for VEGASPython and I would like to find a solution. But unfortunately (or fortunately) I am very busy with my professional work. So I think I will not have sufficient time before October/November.
I would really appreciate if you would like to have a look at this topic.
I have made all source code available on Github as I think this should be open source and the further development should not only depend on me.
Please feel free to have a look at it and if possible to contribute to the further development:
https://github.com/haroldlinke/VEGASPython (I think you know the link already 😊 )
If you have any question I will try to support you.
Kind regards
Harold
Von: Peter Wassermair<EMAIL_ADDRESS>Gesendet: Donnerstag, 3. September 2020 15:49
An: haroldlinke/VEGASPython<EMAIL_ADDRESS>Cc: haroldlinke<EMAIL_ADDRESS>Comment<EMAIL_ADDRESS>Betreff: Re: [haroldlinke/VEGASPython] Dockable Views Exception on Button Press (#2)
Hmm, I was afraid it was something like that.
Is it possible to pass the dispose function to Python (or disable the dispose functionality with a boolean variable set in the Python script)? Then the only problem is that different scopes need different names (because some of them are still running in the background). These scope names could be set by the filename or?
Could you append the dependencies to the project (C# part), so I could compile the whole project and do some experiments?
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub https://github.com/haroldlinke/VEGASPython/issues/2#issuecomment-686504709 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AKNR4QUBYCXZ7CLPNL73NP3SD6ND7ANCNFSM4QDM6TMA .  https://github.com/notifications/beacon/AKNR4QW6MT2FLSAL5ECHHZLSD6ND7A5CNFSM4QDM6TMKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOFDVTWBI.gif


fix(cni-networking): Enables br_netfilter kernel module

What this PR does / why we need it:'
Without this module, iptables rules do not apply to bridges and network overlays do not function
Release note:
fix(cni-networking): Enables `br_netfilter` kernel module

cc @jessfraz

ah jeez good find lgtm


Require valid "Authorization" header in S3 API Proxy

This PR is the successor of https://github.com/Alluxio/alluxio/pull/16135
Introduced on top of that PR is the following:

Fixes how the S3 API sets ACL permissions and mode bits on files so that buckets and their objects are owned by a user corresponding to the "Authorization" header
Disables requirement for "Authorization" header when alluxio.security.authentication.type=NOSASL

alluxio-bot, merge this please

alluxio-bot, cherry-pick this to branch-2.8 please


glew110: fix cross compiling

Description of changes
Fixes cross compiling of glew110

Things done

Built on platform(s)

[ ] x86_64-linux
[x] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

Instead of patching we can simply do:
--- a/pkgs/development/libraries/glew/1.10.nix
+++ b/pkgs/development/libraries/glew/1.10.nix
@@ -40,6 +40,8 @@ stdenv.mkDerivation (finalAttrs: {

   makeFlags = [
     "SYSTEM=${if stdenv.hostPlatform.isMinGW then "mingw" else stdenv.hostPlatform.parsed.kernel.name}"
+    "CC:=$(CC)"
+    "LD:=$(CC)"
   ];

   passthru.tests.pkg-config = testers.testMetaPkgConfig finalAttrs.finalPackage;

Does that work when CC and LD are declared like this?

Does that work when CC and LD are declared like this?

Yes.

@ofborg build pkgsCross.aarch64-multiplatform.glew110

Result of nixpkgs-review pr 314452 run on x86_64-linux 1

3 packages marked as broken and skipped:

fspy
golden-cheetah-bin
itch

1 package blacklisted:

appimage-run-tests

1 package failed to build:

badlion-client

125 packages built:

Sylk
altair
alvr
anki-bin
anytype
appimage-run
arduino-ide
bazecor
beekeeper-studio
beeper
betterdiscord-installer
bino3d
bloomrpc
bootstrap-studio
buttercup-desktop
caido
caprine-bin
chrysalis
cider
clockify
codux
cozy-drive
crypto-org-wallet
davinci-resolve
davinci-resolve-studio
deskreen
devdocs-desktop
electron-mail
electronplayer
fflogs
firefly-desktop
flexoptix-app
fluent-reader
framesh
game-rs
glew110
glew110.dev
hamsket
hifile
hoppscotch
httpie-desktop
immersed-vr
insomnia
irccloud
jan
jbrowse
jetbrains-toolbox
joplin-desktop
kchat
keet
kmeet
kodiPackages.steam-launcher
lbry
ldtk
ledger-live-desktop
lens
listen1
lmstudio
losslesscut-bin
lunar-client
lunatask
lutris
marktext
mathpix-snipping-tool
mendeley
minigalaxy
minigalaxy.dist
miru
mobilecoin-wallet
mockoon
molotov
motrix
mqttx
museeks
mycrypto
neo4j-desktop
nosql-workbench
notable
notesnook
notion-app-enhanced
nuclear
openlens
osu-lazer-bin
p3x-onenote
parsify
playonlinux
plexamp
polypane
protontricks
protontricks.dist
protonup-qt
pureref
rambox
raven-reader
remnote
requestly
saleae-logic-2
session-desktop
simplex-chat-desktop
sonixd
spacedrive
ssb-patchwork
station
steam (steamPackages.steam-fhsenv)
steam-rom-manager
steam-run
steam-small (steamPackages.steam-fhsenv-small)
steam-tui
steamPackages.steam-fhsenv-without-steam
steamcmd (steamPackages.steamcmd)
timeular
todoist-electron
trezor-suite
tusk
tutanota-desktop
upscayl
via
vial
wootility
wowup-cf
xivlauncher
xlights
zecwallet-lite
zettlr
zulip

Only failure is an unrelated hash mismatch.


Search Not show it at the top as the most related item.

I searched Ömer Keleş. But it did not show it at the first page.  Then I searched it on the advanced search; it did not show it at the top. as the most related answer, it should be at the top.

your searched author firstname field is Ö.

So this result is correctly works http://beta.dergipark.gov.tr/search?q=((ö[author.firstName])+AND+keleş[author.lastName])&type=advanced&section=author


mark Valle downstream transmission line crossing as not there in bcfishpass repo

modelled_crossing_id 1802482

https://github.com/smnorris/bcfishpass/pull/367


wiki update

not an issue, really, but a minor edit as I went through the configuration of this awesome library:
in this wiki page: https://github.com/MrStahlfelge/gdx-gamesvcs
For core in the build.gradle, instead of :
compile "de.golfgl.gdxgamesvcs:gdx-gamesvcs-core:$gamesvcsVersion"
I used
api "de.golfgl.gdxgamesvcs:gdx-gamesvcs-core:$gamesvcsVersion"
(compile was showing "obsolete")
same thing for for iOS, in this page:  https://github.com/MrStahlfelge/gdx-gamesvcs/wiki/Apple-Game-Center
but for Android, I used "implementation" instead of API.
I used LibGDX 1.10.0

Thanks for the hint, it's been quite some time since I wrote the docs. Will change the next days.

Updated the pages of the still active components, please check.


Add a CLI interface

A command-line interface that provides functionality for:

Creating and listing projects
Creating, listing, and changing active status of parameter sets
Creating, listing, and changing deployment status of models
Creating and listing model test results

A separate repository will be home to the CLI.


unquote-splice, #?@(:cljs [[]]) leads to an Invalid token: ##viewer-eval error

Reported by @mhuebert in https://github.com/nextjournal/clerk/issues/332#issuecomment-1348375008

I had hit this too, glad to see it's fixed!


chore(docs/ts): correct some chinese syntax

PR Details
纠正一些语法错误
Description
纠正一些语法错误
Related Issue

Motivation and Context

How Has This Been Tested

Types of changes

[ ] Docs change / refactoring / dependency upgrade
[ ] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist

[ ] My code follows the code style of this project.
[ ] I have updated changeset
[ ] My change requires a change to the documentation.
[ ] I have updated the documentation accordingly.
[ ] I have read the CONTRIBUTING document.
[ ] I have added tests to cover my changes.
[ ] All new and existing tests passed.

👍🏻


Add ability to control where unocss runtime styles are injected

First of all, amazing work with UnoCSS, keep it up!
I'm liking runtime, but one thing I'm missing is the ability to control where the generated styles get injected into the DOM, right now they are basically even before the head tag. I'm using it in a context where i'd like to override existing classes from HTML markup I don't control via UnoCSS shortcuts, but I can't (without !important) because the styles from that platform are in the head (as usual) and single class selector's specificity is therefore higher than single class shortcuts from UnoCSS defined/injected earlier on.

So the fix is relatively simple (see changed file), it's just a user configurable function that receives the style element and the user can then inject that wherever they want. Default behavior doesn't change.
One can now do the following:
	window.__unocss = {
		...,
		runtime: {
			inject: (styleElement) => document.head.append(styleElement),
		},
	};

which results in:

If you don't like the way it's implemented or where, let me know, glad to adapt to your liking. Just threw this together for myself, but thought it might be helpful for others too.

The insertion before <head> was done so that unocss styles can be overriden by other library/styles that usually appear in the <head> or even <body>.
Per your example,

The first <style> element can be overriden by unocss, especially if you are using reset/preflights.
You can get each layer's <style> element with the update() method and reposition them manually. See test example below.
https://github.com/unocss/unocss/blob/1073beac99d637c30604b42bf5aa843b0f576f2f/test/runtime-dom.test.ts#L32-L42

The insertion before  was done so that unocss styles can be overriden by other library/styles that usually appear in the  or even .

absolutely agree! This is the normal use case, but in mine I want to use Uno CSS within a third party vendor platform that does a lot of things i can't control, including markup & styles etc., and here the issue is that I DON'T want the platform's styles to override my utils (or shortcuts) defined in Uno, of course I can use !important everywhere, but we all know that's bad practice and leads to lots of other issues, so simply being able to control where Uno's style elements are placed within the DOM can solve that problem.


runsv aeron: fatal: unable to start ./run: access denied

When running the docker-compose up command it looks like things are working until this starts flooding the screen. Any thoughts?

Hey @jackdempsey, first thought would be to check to make sure you have the scripts in /scripts executable.
If you'd like to jump on the Onyx gitter
https://gitter.im/onyx-platform/onyx
or Slack Clojurians I can help diagnose this. Thanks!

hey gardner, that helped. No longer have that issue, just see this now:
te cxid:0x14 zxid:0xcf txntype:-1 reqpath:n/a Error Path:/onyx/1/job-scheduler/scheduler Error:KeeperErrorCode = NodeExists for /onyx/1/job-scheduler/scheduler
zookeeper_1 | 2016-02-18 16:48:43,454 [myid:] - INFO  [ProcessThread(sid:0 cport:-1)::PrepRequestProcessor@645] - Got user-level KeeperException when processing sessionid:0x152f54856d70008 type:create cxid:0x15 zxid:0xd0 txntype:-1 reqpath:n/a Error Path:/onyx/1/messaging/messaging Error:KeeperErrorCode = NodeExists for /onyx/1/messaging/messaging
peer_1      | Attempting to connect to to Zookeeper:  zk:2181
peer_1      | Started peers. Blocking forever.

Unfortunately I can't get the mysql connect to work. Will close this and pop into gitter when I can. Thanks!


autoLoad is not working

Hey there. Just checking the slotsprovider, the react prop autoLoad is not being used.
Are you planning to make this feature available?
Thank you.

This was eventually fixed, I tested it again and it's working fine, @jeffersonlicet please let me know if it's not working for u.
thanks.


High server load messages / low CPU utilization

Is there an existing issue for this?

[X] I have searched the existing issues

Used image version
latest - 1d77460
Used docker compose file or docker command
services:
  enshrouded:
    image: mornedhels/enshrouded-server:latest
    container_name: enshrouded
    hostname: enshrouded
    restart: unless-stopped
    stop_grace_period: 90s
    ports:
      - "15637:15637/udp"
    volumes:
      - ./game:/opt/enshrouded
    environment:
      - SERVER_NAME=Enshrouded Server
      - SERVER_PASSWORD=secret
      - UPDATE_CRON=*/30 * * * *
      - PUID=4711
      - PGID=4711

What you expected to see, versus what you actually saw
I'm running this container on a Synology NAS with AMD Ryzen CPU and 6 Cores/12 Threads. As soon as more than one player is connected, the game starts complaining about high server load or even excessive load. While looking into the CPU utilization of the container I see only a utilization of up to 300 %, i.e 3 cores or threads.
The Synology Resource Manager (kind of a taskmanager like in Windows) shows a Cpu utilization of only around 20 %. I've tried many things like redeploying the container, turning on resource restriction, turning it off. Setting the priority of the container to high and even started messing with the docker -cpushares parameter through ssh. Nothing has ever increase CPU utilization.
At this point I suspect somethings off with the container, rather than the host machine or configuration.
Any ideas?
Logs from the container
No response

+1 Got exactly the same issue. With only 2 players got rubber banding and the high server load message in game. Server has more then enough resources with a i5 13500, 20 threads and 64gb. Meanwhile the enshrouded server used max 2gb ram with a max load of 300% aswell.
No idea if its a docker image issue or enshrouded as i found also a recent reddit post with the same issue.

Hey there, well I'm experience the same on my setup. I mostly get messages but the game is still playable with 4. In Discord I see also some complains about the performance even on windows servers.
So unfortunately I can't do anything but wait for fixes from the core enshrouded server. A native linux server would also help, so I can get rid of the wine virtualization.
For now you can only try out the stable-wine version aswell. Some reported it worked better on their setup.

For now you can only try out the stable-wine version aswell. Some reported it worked better on their setup.

Can this use the already existing data folder and savegame for the wine version, or do I need to migrate the savegame to a new data folder?

Can this use the already existing data folder and savegame for the wine version, or do I need to migrate the savegame to a new data folder?

You can use the same setup, just switch to the other docker tag and start it back up. If you run into problems, you would migrate the savegames or use one of the backup zip files.
I never played around with the CPU_TOPOLOGY env vars, but enshrouded is spawning a lot of threads, so I don't think that would be a problem in that case. It seems that you need a cpu with a high single core performance, so the main thread can keep up.
If you want to play around with the proton or wine env vars, just slap them on your docker compose or docker command and start/restart you docker container. The env variable is passed to the start script and gets picked up by proton/enshrouded.
services:
  enshrouded:
    ...
    environment:
      ...
      - PROTON_CPU_TOPOLOGY=4

PROTON_CPU_TOPOLOGY=6
supervisord: enshrouded-server DEBUG - [72] - PROTON_CPU_TOPOLOGY: 6
...
supervisord: enshrouded-server     Type:      AMD
supervisord: enshrouded-server     Cpus:      6
supervisord: enshrouded-server         Perf:  6 111111

PROTON_CPU_TOPOLOGY: 4
supervisord: enshrouded-server DEBUG - [72] - PROTON_CPU_TOPOLOGY: 4
...
supervisord: enshrouded-server     Type:      AMD
supervisord: enshrouded-server     Cpus:      4
supervisord: enshrouded-server         Perf:  4 1111

And don't be surprised, the debug log is not available in the current builds.

Thanks, yes the CPU_Topology env var is being passed on, I can see it from the logs, but it doesn't seem to have any (positive) effect on CPU usage. It's still capped to 3 cores/threads.
I've tried the wine-dev container and that did actually help to reduce the number of ingame messages. I also noticed that the wine image consumes far more RAM (I've seen >5,5 GB with 2 Players) while the Proton image is using barely more than 1 GB, so I guess that is one reason why there is less rubberbanding. But the CPU usage is also capped with the wine image.

I'm encountering performance issue's as well. I'm hosting a server for 3 players.
First I tried the proton image with alot of performance issue's in busier areas. Reading this issue I switched to the wine image and that did make a good difference, but not enough in busier area's, still a lot of performance issue's.
Switching to wine-dev from wine-stable did not make a difference and neither did limiting cores/threads in my expirience.
It's using about ~300% CPU and ~3Gb of ram with lots more resources avalible.

We have the same messages in the server, when more than 2 people are on the server. When we have 4, the problems become worse and someone losts connection sometimes. We have an I5 4590 in the system. What is really different to the other is our used ram memory. Normally the server uses 12 GB and with 4 poleople on the Server up to 15 GB.


@W-14069124   - Update SCVProvisioningPolicy.json for byoac new function change - geico

@W-14069124  fix merge to public repo.

Looks good to me.


Native Java Script Actions NFC

test

I am merging this now, but @Andries-Smit please sign the CLA when you have a second. You have been asked before by Adam.