ImportError: easysnmp/interface.so: undefined symbol: netsnmp_transport_config_compare

Hi Fotis,
I moved this issue off email and into your formal support at your request.
I have python 2.6.6 and I installed easysnmp using pip as requested
pip install easysnmp

Any idea why the error?
Thanks,
Mike
# pwd
/usr/lib64/python2.6/site-packages
[root@scaleha-chef site-packages]# ls -ltr | grep easy
drwxr-xr-x   2 root root   4096 Jun  5 11:31 easysnmp
drwxr-xr-x   2 root root   4096 Jun  5 11:31 easysnmp-0.2.2-py2.6.egg-info

# python
Python 2.6.6 (r266:84292, Jun  5 2015, 10:33:19)
[GCC 4.4.7 20120313 (Red Hat 4.4.7-11)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from easysnmp import Session
Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "easysnmp/__init__.py", line 1, in <module>
    from .easy import (  # noqa
  File "easysnmp/easy.py", line 3, in <module>
    from .session import Session
  File "easysnmp/session.py", line 8, in <module>
    from . import interface
ImportError: easysnmp/interface.so: undefined symbol: netsnmp_transport_config_compare
>>>
# python --version
Python 2.6.6

Yep, the reason this is likely happening is that you're not running net-snmp 5.7.x.  Please upgrade your Net-SNMP libraries to 5.7.2 or 5.7.3 and everything should work correctly.
Cheers
Fotis

What version of net-snmp are you currently running? I'm tempted to see if I can get it supported in the C backend.

@nnathan worth a shot, but don't forgot, we have OSs shipping with versions as old as 5.4.  It may be quite a challenge to support them all (but worthwhile if not too much work). :smile:

net-snmp-devel-5.5-50.el6_6.1.x86_64   is the package currently on the system
yum install net-snmp-devel
Loaded plugins: product-id, refresh-packagekit, rhnplugin, security, subscription-manager
This system is receiving updates from RHN Classic or RHN Satellite.
Setting up Install Process
Package 1:net-snmp-devel-5.5-50.el6_6.1.x86_64 already installed and latest version

I installed 5.7.3. I believe its installed correctly but I am still facing the same error trying to use this easysnmp module
which snmpget
/usr/local/bin/snmpget
/usr/local/bin/snmpget --version
NET-SNMP version: 5.7.3

You'll need to ensure that you re-install the package via pip after installing the latest version of Net-SNMP.  Further to this, you'll need to ensure that easysnmp is using the correct header files and libraries for the new version of Net-SNMP which you have installed.
The following code in setup.py configures your libdirs.  You may wish to use the print statement after this code to confirm that the correct paths are being detected:
# If a base directory has been provided, we use it
if in_tree:
    netsnmp_libs = os.popen(basedir + '/net-snmp-config --libs').read()

    libdir = os.popen(
        basedir + '/net-snmp-config --build-lib-dirs ' + basedir).read()
    incdir = os.popen(
        basedir + '/net-snmp-config --build-includes ' + basedir).read()

    libs = re.findall(r' -l(\S+)', netsnmp_libs)
    libdirs = re.findall(r' -L(\S+)', libdir)
    incdirs = re.findall(r' -I(\S+)', incdir)

# Otherwise, we use the system-installed SNMP libraries
else:
    netsnmp_libs = os.popen('net-snmp-config --libs').read()

    libs = re.findall(r' -l(\S+)', netsnmp_libs)
    libdirs = re.findall(r' -L(\S+)', netsnmp_libs)
    incdirs = []

Good luck
Fotis

I think this will only handle the case of compiling and installing the module. When Python runs, it will also need to load /usr/local/lib/libsnmp.so BEFORE /usr/lib/libsnmp.so (if I understand correctly, you have two versions installed). In that case you will need to configure the runtime linker to load from /usr/local/lib first, so I think that would involve something like LD_PRELOAD=/usr/local/lib/libsnmp.so python (or something in that vein) so that Python uses the newer version of the library.

@mlammon any update on this?  I'll be closing the issue in a few days as I'm assuming you've got it all working :smile:

Thanks Fotis.  You can close it by I never did resolve it.  It's ok though

On Jun 28, 2015, at 3:11 AM, Fotis Gimian<EMAIL_ADDRESS>wrote:
@mlammon any update on this? I'll be closing the issue in a few days as I'm assuming you've got it all working
—
Reply to this email directly or view it on GitHub.

@mlammon OK, I do suspect this is an issue with your install of Net-SNMP as we have gotten it working perfectly.  Perhaps try again on a fresh system.  I'll close this for now, but feel free to open a new issue if you encounter further dramas that you suspect relate to the package itself.

I have been instrumenting with easysnmp on OSX where the original problem manifested.
The fix is actually incredibly simple and requires a slight modification of setup.py, but I also want to make sure the full test suite runs correctly.
Once I have sorted this out, I will be happy to say that we do infact support Net-SNMP 5.6 which seems to ship with the latest versions of OSX (10.8, 10.9).
So @mlammon: not sure if you're still interested, but bear with me :).

I ran the test suite against the local running snmpd agent which seems somewhat broken in OSX.
In OSX I would run: sudo -i snmpd -f -Le -d -C -c pwd/easysnmp/tests/snmpd.conf.
Followed by running py.test in the easysnmp directory.
These are the results:
     151 passed
       6 failed
         - /Users/naveen/code/easysnmp/tests/test_easy.py:215: assert '.<IP_ADDRESS>.4.1.8<IP_ADDRESS>' == '.<IP_ADDRESS>.4.1.8<IP_ADDRESS>'
         - /Users/naveen/code/easysnmp/tests/test_easy.py:215: assert '.<IP_ADDRESS>.4.1.8<IP_ADDRESS>' == '.<IP_ADDRESS>.4.1.8<IP_ADDRESS>'
         - /Users/naveen/code/easysnmp/tests/test_easy.py:215: assert '.<IP_ADDRESS>.4.1.8<IP_ADDRESS>' == '.<IP_ADDRESS>.4.1.8<IP_ADDRESS>'
         - /Users/naveen/code/easysnmp/easysnmp/session.py:467: EasySNMPTimeoutError: timed out while connecting to remote host
         - /Users/naveen/code/easysnmp/easysnmp/session.py:467: EasySNMPTimeoutError: timed out while connecting to remote host

This seems to be an issue that's limited to OSX whereby the snmpd will segfault after an interface.walk() test is performed. Until we can get a multi-OS build running in travis, I don't think it is worth doing unit tests in OSX since the shipped version of snmpd seems broken. Having said that, I'm highly confident that easysnmp should work just as good as the Linux version, since the issue is with the daemon and not the client libraries.
I'm now closing this issue again, now that it has been sorted once and for all.

I'm using Ubuntu 12 and can reproduce this problem. I installed net-snmp 5.7.3 from source. I believe the problem is related to not being able to locate the libnetsnmp.so given that is where the symbol is located.
You can run this command: LD_PRELOAD=/usr/local/lib/libnetsnmp.so python
and see there is no problem. I suppose the configuration for where python should load libraries varies across systems which is why this problem occurs.
I hope this helps future users of this great python library.

@normanuber Is there a way to permanently place /usr/local/lib/netsnmplib.so into the LD_LIBRARY_PATH?
Trying to avoid having to have LD_PRELOAD=/usr/local/lib/libnetsnmp.so python in the execution command for my script.
Thanks in advance.

@normanuber really the same ask like jdub982, how do we to load the correct /usr/local/lib/libnetsnmp.so permanently?

This issue  happens on Red Hat Enterprise Linux Server release 6.6 (Santiago).
I have to manually do the following in order for easysnmp to work as expected:
$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.6 (Santiago)
$ /usr/local/bin/snmpget --version
NET-SNMP version: 5.7.3
$ /usr/local/bin/python3.6 -c 'import easysnmp'
Traceback (most recent call last):
File "", line 1, in
File "/usr/local/lib/python3.6/site-packages/easysnmp/init.py", line 1, in
from .easy import (  # noqa
File "/usr/local/lib/python3.6/site-packages/easysnmp/easy.py", line 3, in
from .session import Session
File "/usr/local/lib/python3.6/site-packages/easysnmp/session.py", line 8, in
from . import interface
ImportError: /usr/local/lib/python3.6/site-packages/easysnmp/interface.cpython-36m-x86_64-linux-gnu.so: undefined symbol: netsnmp_transport_config_compare
$ export LD_PRELOAD=/usr/local/lib/libnetsnmp.so
$ /usr/local/bin/python3.6 -c 'import easysnmp'
Is this going to be fixed so that we don't have to depend on doing the LD_PRELOAD?


Open-source the Chrome extension

We're in the process of open-sourcing the Trotto Chrome extension as well. If you're interested in contributing to that project, or if you'd just like to be notified when it's open-sourced, comment on or subscribe to this issue.

any updates on when this is going to be open sourced? =)

Hey @peterfisher, thank you for reaching out! We did a rough initial release of the open-source extension a little while back, and I just updated the README so that it's considerably more usable: https://github.com/trotto/browser-extension
Let me know if you have any questions! We'll be updating it substantially in the near future as we add Firefox support, and then I think we can call this issue properly complete. Deploying updates to the extension is just a matter of uploading a new zip to the Chrome Web Store and submitting.

Alright, I've updated https://github.com/trotto/browser-extension to:

Simplify multi-browser support
Make it dead simple to build a version of the extension pointing to another go links instance (whether self-hosted Trotto or another implementation)
Add deeper documentation
Add Firefox support (see the FF extension we manage at https://addons.mozilla.org/en-US/firefox/addon/trotto-go-links)

I think we can officially call this done!


Update migrating-from-ink-4-to-5.md

Reference the call_runtime example instead of the e2e-test::runtime_call one

I just realize that it's already fixed in master, so closing the PR therefore.


nix: refatored how shell & tools are provided

@semanticphilosopher I am stealing ideas from the ouroboros-consensus repo, without making it too hard to understand what's going on.

@semanticphilosopher you need to review as @njd42, we only have your latter account in the @IntersectMBO/ouroboros-network-maintainers.


Fixes old Tegustation in the list

About this Pull Request
Old Tegustation was a downstream of Fulpstation, as seen in https://github.com/vlggms/tegustation/pull/9

You might've misunderstood what "downstream" means.
Everything that resembled FulpStation has been thoroughly removed ever since we forked new(by that time) /tg/station codebase.
TeguStation was always a /tg/station downstream with very limited pick of FulpStation features.

You might've misunderstood what "downstream" means. Everything that resembled FulpStation has been thoroughly removed ever since we forked new(by that time) /tg/station codebase.
TeguStation was always a /tg/station downstream with very limited pick of FulpStation features.

You started off of fulp then updated to latest TG through that, you're still a Fulp downstream because that's what you branched off of. That's the whole reason why https://github.com/vlggms/fulpstation was a thing in the first place.

You really are shooting yourself in the leg here.


sapper in package.json

Your project don't have sapper in package.json and don't have any instructions of sapper adding. May be you should rename it as svelte template?

Like in #3, the npx command is incorrect. I posted a PR in #4 to get it updated. The correct command is npx degit matyunya/smelte-sapper-template my-svelte-project.


Release v0.23.0

Checklist

[ ] Used a personal fork of the feedstock to propose changes
[ ] Bumped the build number (if the version is unchanged)
[ ] Reset the build number to 0 (if the version changed)
[ ] Re-rendered with the latest conda-smithy (Use the phrase @conda-forge-admin, please rerender in a comment in this PR for automated rerendering)
[ ] Ensured the license file is being packaged.

@conda-forge-admin, please rerender

Hi! This is the friendly automated conda-forge-linting service.
I just wanted to let you know that I linted all conda-recipes in your PR (recipe/meta.yaml) and found it was in an excellent condition.
I do have some suggestions for making it better though...
For recipe/meta.yaml:

ℹ noarch: python recipes should usually follow the syntax in our documentation for specifying the Python version.

For the host section of the recipe, you should usually use python {{ python_min }} for the python entry.
For the run section of the recipe, you should usually use python >={{ python_min }} for the python entry.
For the test.requires section of the recipe, you should usually use python {{ python_min }} for the python entry.
If the package requires a newer Python version than the currently supported minimum version on conda-forge, you can override the python_min variable by adding a Jinja2 set statement at the top of your recipe (or using an equivalent context variable for v1 recipes).

ℹ License is not an SPDX identifier (or a custom LicenseRef) nor an SPDX license expression.

Documentation on acceptable licenses can be found here.

ℹ PyPI default URL is now pypi.org, and not pypi.io. You may want to update the default source url.

This message was generated by GitHub Actions workflow run https://github.com/conda-forge/conda-forge-webservices/actions/runs/12429727974. Examine the logs at this URL for more detail.


Get tag name of node

I want to parse XML with many different node names, I have no possibility to get the tag name of a node: e.G.:
<tagname>value</tagname>
AFAIK I have can get the value with node.text, but I can´t get the <tagname>. Am I doing something wrong or can this feature be added?

To get the fully qualified name call node.name.qualified.
To extract nodes with a specific name across all your document, you might want to use document. findAllElements('tagname').forEach((node) => ...).

xml.XmlDocument document = xml.parse(XML_STRING);
xml.XmlNode node = document.rootElement.firstChild.nextSibling;
String name = (node as xml.XmlElement).name.toString();

@renggli
I can't find node.name
was it deprecated?
How to find the tag now?
Also, what is the best way to extract all the tag names from an XML document?

Nodes don't have names, only Elements. It is defined here: https://github.com/renggli/dart-xml/blob/0d43fd274c8f24c961eefbf72394d4989256b9a1/lib/src/xml/nodes/element.dart#L31

So how can I get the tag names from an XML document? or the tag names of the ancestors of a node?

document.descendants.whereType<XmlElement>().map((element) => element.name). Please consider reading the tutorial.

Hmmm, unfortunately, this didn't do what I expected. I have read the tutorial and it doesn't mention anything about what an XmlElement is.
I used Iterables to get the strings from an XmlNode and used substring to get the names of the tag then added the unique tag names to a list:
      for (var tag in item.descendants) {         if (tag.toString().contains('>')) {           String tagName = tag.toString().substring(1, tag.toString().indexOf('>'));           if(!tagNames.contains(tagName)) {             tagNames.add(tagName);           }         }       }
Please, inform me if there is a better way to do it.

Please study the XML basics and the class documentation. I would write it like item.descendants.whereType<XmlElement>().map((element) => element.name.qualified).toSet().


SearchResult does not return score with withScores field set as true in SearchOptions

SearchResult does not return score with withScores field set as true in SearchOptions

I could not replicate this either. I added a testcase in LettuceMod


Prompt not displaying correctly in PowerShell ISE

System Details

posh-git version/path: 0.7.3
PowerShell version: 5.1.18362.145
Git version: 2.15.0.windows.1
Operating system name and version:  Win32NT             10.0.18362.0 Microsoft Windows NT 10.0.18362.0

Issue Description
Prompt works fine in non-ISE PowerShell prompt.  But in ISE, it displays the following HUGE prompt

I can't replicate what you're seeing:

Is it possible ISE is loading a different version of posh-git?  What version number does gmo posh-git output in ISE?

This is the output.  I thought it was odd that I'm seeing 2 versions (right?).  So I removed and re-installed it and I'm still seeing 2.  Is that normal?

I'm surprised that listed more than one version without specifying -ListAvailable.  What do you get for a posh-git version if you execute just get-module.

Get-Module output:

Now that's a real puzzler.  You should have only one imported at a time.  If I import both 0.7.3 and 1.0.0, I get the same, bad prompt behavior.  So look in your profile.ps1 and Microsoft.PowerShellISE_profile.ps1 scripts and see if you're importing the module twice somehow.

Bingo, that was it!  The CurrentUserAllHosts profile was loading it with Import-Module posh-git.  And the CurrentUserCurrentHosts was loading it with a full path:
Import-Module 'C:\Users\...\posh-git\src\posh-git.psd1'
I removed the full path call, and all seems to be normal now.  Thank you for your help!


TS - kiota abstractions must be a peer dependency in auth and fetch library

When should you use peer dependencies?
When you are building a library to be used by other projects, and
This library is using some other library, and
You expect/need the user to work with that other library as well

https://stackoverflow.com/a/34645112/10760931

@gavinbarron can you provide input on this one please?

@gavinbarron to provide input on this topic. I think the way we have it is absolutely OK and shouldn't be a peer dependency. Especially for a first-run experience that would add a lot of complexity IMO.

@gavinbarron @musale I'd appreciate your input on this one

Interesting. I would strongly agree that we put abstractions as a peer dependency if it was an ever-changing lib. I think it has a pretty finalized api that doesn't change that often. Hence having it as it is works just fine. In the event things change api wise for abstractions, then setting it as a peer dependency will offer a better experience for http/authentincation/serialization lib usage.


Using Pay 'n Spray during "Drive By" crashes on 1.0 EU executable

Report received via email:

When running silent patch san andreas crashes when entering the pay and spray during the drive by mission.
Interestingly enough it only crashes once the game tells you to use the pay and spray.
If entering the pay and spray before that part of the mission, on the mission or not, it works fine

I wasn't able to reproduce this with the 1.0 US Hoodlum executable using a 4:3, 5:4, 16:9 and 16:10 resolution with widescreen fix not present (so I guess widescreen isn't the issue here)

Yes, the title says it's a 1.0 EU EXE only crash.


Gift Entry: ui updates

Critical Changes
Changes

Various UI updates to Gift Entry components

Issues Closed
Community Ideas Delivered
New Metadata
Deleted Metadata

Prince - this is super nice and thank you! There's maybe a collision with the display of validation errors story that Gus just delivered in #5026. There's a couple of other differences with the orgs (one is namespaced, one is Winter '20, one is Spring '20), but maybe just look into how these errors are display:
Non-NS org with this branch deployed:

Namespaced org with main feature branch:

@psadie-sfdo & @ptewson-sfdo I did a quick review of the Custom Label on this one.

Prince - this is super nice and thank you! There's maybe a collision with the display of validation errors story that Gus just delivered in #5026. There's a couple of other differences with the orgs (one is namespaced, one is Winter '20, one is Spring '20), but maybe just look into how these errors are display:
Non-NS org with this branch deployed:

Namespaced org with main feature branch:

Taking a look!

**lurch: attach W-038984

Tracking W-038984


Custom charts for overview page

Looks like on the overview page I have access only to pre-defined charts, but we would like to add  Product Allocation chart next to the existing Controller Allocation and Service Allocation. Is there any way to add custom charts on the overview page?
gz#1222

Hi @pinlast that's not possible today but sounds like a great feature request!

@pinlast I'd like Kubecost to offer more flexibility here. We're slammed on other projects now but would love to see if we can offer something in the future.
It's not a perfect substitute but we do see teams doing lots of customization with our Prometheus metrics in Grafana dashboard. Just wanted to see in case you wanted to explore right away.

This issue is being closed because it may not be relevant to the OpenCost project and appears stale. If you feel this was closed in error, please open a new OpenCost issue with updated details or if it is still relevant for Kubecost please open an issue with Kubecost Support.


QUIC: Avoid crash when IO is disabled by the caller.

This was detected when performing a post over http3.
do_io_read/write is called without buffer.
#5  0x0000555555ecf67f in HQTransaction::do_io_read (this=0x7fffbc0dce40, c=0x7fffc8d31f40, nbytes=0, buf=0x0) at Http3Transaction.cc:116

gdb) f 2
#2  0x0000555555ee2627 in Http3StreamDataVIOAdaptor::handle_frame (this=0x7fffc01ccf20,
    frame=std::shared_ptr<const Http3Frame> (use count 3, weak count 0) = {...}) at Http3StreamDataVIOAdaptor.cc:44
44        writer->write(dframe->payload(), dframe->payload_length());
(gdb) print writer
$1 = (MIOBuffer *) 0x0
(gdb)

#0  0x00005555559ca08c in Ptr<IOBufferBlock>::operator bool (this=0x10) at ../include/tscore/Ptr.h:114
#1  0x0000555555ef9bb2 in MIOBuffer::write (this=0x0, abuf=0x7fffef7e5c43, alen=147) at IOBuffer.cc:85
#2  0x0000555555ee2627 in Http3StreamDataVIOAdaptor::handle_frame (this=0x7fffbc0d3450, frame=
    std::shared_ptr<const Http3Frame> (use count 3, weak count 0) = {...}) at Http3StreamDataVIOAdaptor.cc:44
#3  0x0000555555edd284 in Http3FrameDispatcher::on_read_ready (this=0x7fffbc0dd0b0, stream_id=0, reader=..., nread=@0x7fffef7f5d78: 245)
    at Http3FrameDispatcher.cc:108
#4  0x0000555555ed228a in Http3Transaction::_process_read_vio (this=0x7fffbc0dce40) at Http3Transaction.cc:469
#5  0x0000555555ecf67f in HQTransaction::do_io_read (this=0x7fffbc0dce40, c=0x7fffc8d31f40, nbytes=0, buf=0x0) at Http3Transaction.cc:116
#6  0x0000555555a9a783 in HttpSM::attach_client_session (this=0x7fffc8d31f40, client_vc=0x7fffbc0dce40) at HttpSM.cc:605
#7  0x0000555555d991cd in ProxyTransaction::new_transaction (this=0x7fffbc0dce40, from_early_data=false) at ProxyTransaction.cc:63
#8  0x0000555555ec7c37 in Http3App::_handle_bidi_stream_on_read_ready (this=0x7fffbc0d3b10, event=100, vio=0x7fffbc0db7f0) at Http3App.cc:242
#9  0x0000555555ec709c in Http3App::main_event_handler (this=0x7fffbc0d3b10, event=100, data=0x5555564e1980) at Http3App.cc:134
#10 0x00005555559c7207 in Continuation::handleEvent (this=0x7fffbc0d3b10, event=100, data=0x5555564e1980)
    at /home/dmeden/code/git/trafficserver-h3/iocore/eventsystem/I_Continuation.h:228
#11 0x0000555555efd50f in EThread::process_event (this=0x555556f910a0, e=0x5555564e1980, calling_code=100) at UnixEThread.cc:151
#12 0x0000555555efd75c in EThread::process_queue (this=0x555556f910a0, NegativeQueue=0x7fffef7f6170, ev_count=0x7fffef7f6124, nq_count=0x7fffef7f6120)
    at UnixEThread.cc:186
#13 0x0000555555efda78 in EThread::execute_regular (this=0x555556f910a0) at UnixEThread.cc:243
#14 0x0000555555efde96 in EThread::execute (this=0x555556f910a0) at UnixEThread.cc:336
#15 0x0000555555efc5a6 in spawn_thread_internal (a=0x5555564d5ad0) at Thread.cc:79
#16 0x00007ffff76e4609 in start_thread (arg=<optimized out>) at pthread_create.c:477

[approve ci autest]


can I set a shortcut to the right click menus in workspace file?

just like this

I have search the shortcut setting and I can't find one useful
the question in StackOverflow
https://stackoverflow.com/questions/67464178/can-i-set-a-shortcut-to-the-right-click-menus-in-workspace-file
版本: 1.56.0 (user setup)
提交: cfa2e218100323074ac1948c885448fdf4de2a7f
日期: 2021-05-04T22:09:06.405Z
Electron: 12.0.4
Chrome: 89.0.4389.114
Node.js: 14.16.0
V8: <IP_ADDRESS>-electron.0
OS: Windows_NT x64 10.0.18363

Here are three screenshots of clicking in different places
1.

2.

3.

shift+F10 is show the context menu, like scene 3 above
but what I want is scene 1

but what I want is scene 1 probably call explorer/context

shift+f10 works when focus is in the explorer. first use ctrl+shift+e to focus the explorer, then shift+f10 to show the context menu.

but what I want is scene 1 probably call explorer/context

shift+f10 works when focus is in the explorer. first use ctrl+shift+e to focus the explorer, then shift+f10 to show the context menu.

It works. Thank you very much ！！


Deleting attachement fails after email is sent

When I send an email I want to delete the files if email was sent (->isValid()), but I'm getting a PHP Warning when trying to do so:
Warning:  unlink(./data/tmp/file.txt): Permission denied

I get this exception in Windows so there shouldn't be any permissions problems; it looks like to me that this module locks the attachments.

Thanks. I'll take a look.

I couldn't reproduce this. Can you elaborate?
Are you able to delete the file before sending the email? And before even attaching it?
What version of ZF and PHP are you using?

I've noticed that I only get that PHP warning on Windows, it works OK on Linux...maybe that's why.
Yes, I'm able to delete it before and after, it just looks it's locked when I try to delete from inside the code.
I'm using ZF 2.4.2 and PHP 5.4.16.

I'll try to test it in a Windows environment.


Check for nil/blank headers in the file

Fix the problem when found a empty header in the files.

Thanks for the fix!


add opt-in Longhorn network policy

IMPORTANT: Please do not create a Pull Request without creating an issue first.
Problem:
Need to add opt-in Longhorn network policy to secure its backend API.
Solution:
Enable the opt-in Longhorn network policy
Related Issue:
https://github.com/longhorn/longhorn/discussions/3031
Test plan:

Cases1: Users from the other namespaces should not be able to access the longhorn backend API

get the longhorn-backed svc IP via kubectl get svc -n longhorn-system | grep longhorn-backend
start a VM in a namespace e.g., default and exec into the VM pod via $kubectl exec -it $pod bash
run curl http://$ip:9500/v1 and you will get a JSON response
after applying the LH network policy rules, users are no longer able to curl the Longhorn backend API in any other pods except those pods defined by the network policy.

Case 2: admin user can still access the Longhorn dashboard UI
Case 3&4: users should be able to create and restore VM backups, VM snapshot,s and volume snapshots
Case 5: users can still use the Harvester csi-driver in the guest k8s cluster as before.

create an nginx pod and add persistent pvc using the harvester storage class in the guest rke2 cluster.
check if both the pod and its mount point is running successfully.

rebased and added network policy ingress for the Prometheus monitoring pod,  PTAL again, thanks.

@mergify backport v1.2


Support using SSH agent for authentication

Hello!

Vote on this issue by adding a 👍 reaction
If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details
My instance allows SSH access via a pre-existing public key, which I have added to my locally running SSH agent (with ssh-add), so I can just ssh example.com without specifying or configuring a private key.
remote.Command does not detect that an SSH agent is available, so it fails with the following error:
  command:remote:CopyFile (master.sh):
    error: ssh: handshake failed: ssh: unable to authenticate, attempted methods [none], no supported methods remain

If the environment variable $SSH_AUTH_SOCK is defined (or perhaps via an input option), the connection should create a new SSH client using the agent package, and use this to respond, as described here.
Affected area/feature

Thanks for the detail – this looks like a good addition. We'll add it to the provider's backlog, but if you're keen to add this feature yourself we would welcome the PR!

It might also be desirable to get default connection options from the user/system ssh config file with ssh_config.


deps: cleanup & upgrade

This is a cherry-pick of #1164 w/ resolved conflicts & upgrade.
Closes #1164

Ping @nchanged

@nchanged It's been a week...

closing this for now. Conflicts + breaking the builds


HOSTEDCP-1523: Bump k8s to v0.29.3

What this PR does / why we need it:
Which issue(s) this PR fixes (optional, use fixes #<issue_number>(, fixes #<issue_number>, ...) format, where issue_number might be a GitHub issue, or a Jira story:
Fixes #
Checklist

[x] Subject and description added to both, commit and PR.
[x] Relevant issues have been referenced.
[ ] This change includes docs.
[ ] This change includes unit tests.

/test required

/test e2e-aws
/test e2e-kubevirt-aws-ovn
/test images
/test unit
/test verify

/area ci-tooling

/test verify

/test e2e-aws

/lgtm

/retest

/retest

/lgtm

/retest

/retest

/retest

/retest

/retest

/retest

/lgtm


Error in online demo while converting excel data into Json format

Hi  i have tried converting a excel file into a json format data in the live demo. Share the below screen shot in the console.     Note: My excel has 371 records init, but if try a excel file with 20records its working fine.

I am getting the same error on the demo. Any suggestions?

I found this demo that works converting excel to json http://oss.sheetjs.com/js-xlsx/ looks exactly like the same ui of the demo found on this repo.

@kumarselvarajs please check against http://oss.sheetjs.com/js-xlsx/ -- we merged all of the XLS handling into the XLSX library


unable to edit Prometheus alertmanager.env.yaml

Hi I'm trying to enable email alerts in Alertmanager, but I couldn't edit alertmanager.env.yaml. Please help me if there is a alternative soultion.

Hi @venkatshivap, the description is not very clear of what you want to do and how that is related to MicroK8s. Can you please give more information about what are you trying to achieve?
Thanks.

I'm trying to implement email alerts using Prometheus Alert
Manager with kube-prom-stack on microk8s, I tried editing admin:///var/snap/microk8s/common/var/lib/kubelet/pods/e19a0526-cd5c-450b-abc5-52c489a29322/volumes/kubernetes.io~empty-dir/config-out/alertmanager.env.yaml,
but I'm unable to edit the file to give my own email address.


Warp sync forced change

How does warp sync work near forced changes?

should we trust babe signatures (fast sync) or run WASM (full sync)?
should user restart warp-sync after forced change manually or should it restart automatically?


migrate from the deprecated React.propTypes to prop-types package

Fix #667

@philpl done in #670 :v:


Discuss making a workflow to help people add the correct secrets to their repo or organization

We've created an interview for this in https://github.com/plocket/docassemble-ALAutomatedTestingTests


Replace nodejs dependency by poise-javascript.

This is required to support the latest node versions.

Should fix #18


Enhance OSTYPE environment variable processing during plugin installation

With last update, where was added automatic installation of yq, plugin installation was broken. echo $OSTYPE gives linux-gnu in  python:3.10-slim container.
Currently, during image building facing next error:
Unsupported operating system detected while installing yq.
Error: plugin install hook for "release" exited with error

My current guess that hook is being executed in /bin/sh rather in /bin/bash. If I do echo #OSTYPE in sh I getting nothing.

Here is my solution for this issue.

Thanks, @vadim-zabolotniy, looks good, merged!


CI 3.0.4 removing index.php from url is not Working

Hi to all, i'm trying to remove the index.php from the URL, but this is not working, i have a project with CI 2.0 and works perfectly, but i don´t know what i'm doing wrong in the new version, i 've been doing this steps:
1.- Open config.php and do following replaces
$config['index_page'] = "index.php"
to
$config['index_page'] = ""
2.-  in config.php
$config['uri_protocol'] = "REQUEST_URI"
3.-My httacces in:
Path:
Your_website_folder/
application/
assets/
system/
.htaccess <——— this file
index.php

DirectoryIndex index.php
RewriteEngine on
RewriteCond %{REQUEST_URI} !^(index.php)$
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*) ./index.php [L]
Thank you.

Post this on the forums instead, this is a bug tracker.


Test serializer and default values systematically

Hello!

Vote on this issue by adding a 👍 reaction
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already)

Issue details
We need to systematically weed out issues in serializer and default values. The idea is to set up a test harness like this:

Create a schema.yaml that covers a lot of possible combinations of input and output property types (nesting, optionals, different type cases) - do this as a codegen test

Have codegen generate a resource provider with this schema

Attach Java tests to run as part of the codegen test that would exercise these resource args and default values. For input properties, the tests would construct the resources and assert against the protobuf serialized form of the options sent to the engine. To find out the "correct" input form we might need to trace the behavior of a different language like TypeScript on the same schema.

Deserializer is out of scope for now but we will need similar work

Steps to reproduce

Expected:
Actual:

Taking this out of pulumi-java into a separate prototype that cross-tests all languages including Java. Not clear yet if the idea is viable but it is best explored separately, if it is viable it will bring value across languages.


Redirect to Another Domain

Not sure if I'm missing something here, this is maybe related to #10 or #24
We have a lot of subdomains that need authentication, so instead of having an auth endpoint for each we we have a single https://auth.example.com endpoint which is oauth2-proxy and sets the cookie for domain example.com
When we do that using the example code, the user is redirected to https://auth.example.com/whatever instead of https://service.example.com/whatever
Is there a way to include the domain in the redirect parameter?

Hi @Queuecumber, there is indeed, since you have OAuth2 Proxy centrally, I'm assuming you have nginx set up in front of each of your service endpoints, redirecting to oauth2 when you need to authenticate?
In that case, you can set the rd=https://$host$uri query string parameter in nginx config for the signin-url (this is the annotation name for nginx-ingress at least) or the error_page 401 directive in raw nginx config
Finally, you'll need to set the --whitelist-domains=.example.com and --cookie-domain=.example.com too. Whitelist allows any subdomain of example.com to be redirected to in the rd parameter, and the cookie-domain ensures that the cookie is valid for all of the domains you're authenticating

Confirmed this works perfectly, thanks a lot

A note for others who reference this, the documentation on configuration has whitelist-domain instead of whitelist-domains

When trying to get this working, I am being redirected to https://oauth.domain.com, instead of https://myapp.domain.com.
I have the following Oauth2_Proxy config:
apiVersion: apps/v1
kind: Deployment
metadata:
  labels:
    k8s-app: oauth2-proxy
  name: oauth2-proxy
  namespace: default
spec:
  replicas: 1
  selector:
    matchLabels:
      k8s-app: oauth2-proxy
  template:
    metadata:
      labels:
        k8s-app: oauth2-proxy
    spec:
      containers:
        - args:
            - --provider=keycloak
            - --email-domain=corp.domain.com
            - --email-domain=domain.com
            - --pass-basic-auth=false
            - --pass-access-token=true
            - --set-authorization-header=true
            - --pass-authorization-header=true
            - --http-address=<IP_ADDRESS>:4180
            - --login-url=https://auth.domain.com/auth/realms/realm/protocol/openid-connect/auth
            - --redeem-url=https://auth.domain.com/auth/realms/realm/protocol/openid-connect/token
            - --validate-url=https://auth.domain.com/auth/realms/realm/protocol/openid-connect/userinfo
            - --cookie-expire=4h0m0s
            - --whitelist-domain=".corp.domain.com",".domain.com"
            - --cookie-domain=".corp.domain.com"
          env:
            - name: OAUTH2_PROXY_CLIENT_ID
              value: rancher-demo
            - name: OAUTH2_PROXY_CLIENT_SECRET
              value: <secret>
            # docker run -ti --rm python:3-alpine python -c 'import secrets,base64; print(base64.b64encode(base64.b64encode(secrets.token_bytes(16))));'
            - name: OAUTH2_PROXY_COOKIE_SECRET
              value: <secret>
          image: quay.io/pusher/oauth2_proxy:v4.1.0
          imagePullPolicy: Always
          name: oauth2-proxy
          ports:
            - containerPort: 4180
              protocol: TCP

I am using Istio-IngressGateway as my ingress gateway, and have an envoy filter with the following code (this is the only way to get oauth working in Istio, as it only validates JWTs):
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
  name: authn-filter
spec:
  workloadSelector:
    labels:
      app: istio-ingressgateway
  configPatches:
    - applyTo: HTTP_FILTER
      match:
        context: GATEWAY
        listener:
          portNumber: 443
      patch:
        operation: INSERT_BEFORE
        value:
          name: envoy.lua
          config:
            inlineCode: |
              oauth_host = "oauth.corp.domain.com"

              function starts_with(str, start)
                return str:sub(1, #start) == start
              end

              function login (request_handle)
                -- This did not seem to be working, so I tried hardcoding the domain
                -- local request_url = "https://"..request_handle:headers():get(":authority")..request_handle:headers():get(":path")
                local request_url = "https://rancher-demo.corp.domain.com"
                local redirect_url = "https://"..oauth_host.."/oauth2/start?rd="..request_url
                headers = {
                    [":status"] = 302,
                    ["location"] = redirect_url
                }
                request_handle:respond(headers, "")
              end

              function envoy_on_request(request_handle)

                cookie = request_handle:headers():get("Cookie")
                if cookie == nil then
                  -- request_handle:logWarn("login")
                  login(request_handle)
                  return
                end
                -- request_handle:logWarn("validating token against /ouath2/auth")
                local headers, body = request_handle:httpCall(
                    "outbound|443||"..oauth_host,
                    {
                      [":method"] = "GET",
                      [":path"] = "/oauth2/auth",
                      [":authority"] = oauth_host,
                      ["Cookie"] = cookie
                    },
                    nil,
                    5000)
                local status
                for header, value in pairs(headers) do
                  if header == ":status" then
                      status = value
                  end
                end

                -- request_handle:logWarn("token validation status:"..status)
                if status ~= "202" then
                  -- request_handle:logWarn("Not validated")
                  login(request_handle)
                  return
                end
              end

The envoy filter above was copied from https://github.com/istio/istio/issues/14969#issuecomment-573445692 with some modifications to remove the base_host.
Even with the redirect_url being hardcoded the way that it is, the url from keycloak has the oauth.corp.domain.com/oauth2/callback redirect_url, and from there I am redirected to oauth.corp.domain.com, not rancher-demo.corp.domain.com.
I saw that there were some problems with --skip-provider-button option, so I have removed that.
The issue seems similar to https://github.com/pusher/oauth2_proxy/issues/328 as well as https://github.com/pusher/oauth2_proxy/issues/125


ENH: set -e and set -u in sample bash scripts under libexec

Just for a "demo" of #134
Whenever a variable wants to be consumed even if not defined ${VAR:-} could be used to explicitly assume empty value if not defined under the set -u mode.
Benefits of set -u -- code becomes more robust without continuing running if some variable was not checked to be not empty explicitly.   of set -e: script will exit right away if any error happens, instead of continuing plowing through possibly causing a disaster ;-)
Possible side-effects:  if PS* env variables use some variables loosely allowing them to be assumed empty if not defined, and script relies on using the corresponding PS (e.g. PS4 in set -x mode), could lead to failures if set -u

Ahh, that is very cool!
Considering functions gets sourced by all other files, would it suffice to put set -u -e at the top of that single file alone? (and then fix all of the undeclared variable tests that will occur?)

since alternative approach was taken


"Prefer composition over inheritance": Why you don't use traits?

You could really add a good multi-inheritance or composition example by mentioning threads. Although they may force a developer to jump into polimorphic tables, they are a great way to handle this.
I can't find an example of use of trait anywhere on your "clean-code-php" guide.

In example Prefer composition over inheritance EmployeeTaxData plays the role of ValueObject more than extensions of functionality.
There are no examples of Traits because there are very few normal cases when Traits are really necessary and have an advantage over other implementations.
I know just a few such examples:

Symfony ContainerAwareTrait for inject Container in any services;
Aggregates of domain events AggregateEventsTrait and AggregateEventsRaiseInSelfTrait;
PayloadTrait for automatically fill DTO.

These are very specific examples, not everyone understands and not everyone needs. In my opinion, they are too complicated for this guide.
Can you give a simple example that will be really useful, and not Trait for the sake of Trait?

The new Symfony Clock component, has good use case for trait implementation.
Instead of having a dependency injection for each service you want to make "clock aware", you can just extend it by using a trait (ClockAwareTrait).
also all test that are required to be "time senstive" aka. aware of the clock in order for it to be mocked inside test, you don't need to extend the test case with a base class or write it from scratch each time, you can just use a trait (ClockSensitiveTrait) in order to reuse and set the clock for each test that  needs it.

@vidic-igor ClockAwareTrait is just an example of bad practice in using traits.


Swiper incorrectly calculates last slide as activeSlide on load.

Check that this is really a bug

[X] I confirm

Reproduction link
https://codesandbox.io/s/swiper-bug-loop-centered-auto-width-kwj8ls?file=/index.html
Bug description
a slider with slidesPerView set to 'auto' in loop mode and centeredSlides set to true calculates the last slide as the active slide on load. In the demo you'll see that the first slide shown is slide 7, not slide 1.

changing the slide width in CSS from 20% to 21% causes the first slide to show.

can also play with initialSlide value to correct it.

My guess is some sort of math error when calculating the first slide when combo of slidesPerView 'auto', centeredSlides true, and loop mode are all in play.
Expected Behavior

I expect Slide 1 to be the first to show in the provided example.
I expect changing slide width in CSS to not change which slide is calculated to be first (i.e. I expect when initalSlide is set to 0, the first slide is shown.)

Actual Behavior
The last slide in the html is calculated to be the active slide on load.
Swiper version
11.0.5
Platform/Target and Browser Versions
Chrome, Safari
Validations

[X] Follow our Code of Conduct
[X] Read the docs.
[X] Check that there isn't already an issue that request the same feature to avoid creating a duplicate.
[X] Make sure this is a Swiper issue and not a framework-specific issue

Would you like to open a PR for this bug?

[ ] I'm willing to open a PR

+1.
Having a similar issue when component is mounted -> unmounted -> mounted.
In some cases the last slide is the initial slide.
We using the following modules and the following props.
<Swiper           slidesPerView={'auto'}           spaceBetween={32}           centeredSlides           initialSlide={1}           pagination={{             clickable: true,             dynamicBullets: true,           }}           navigation={{             clickable: true,             nextEl: '.button-next',             prevEl: '.button-prev',           }}           modules={[Navigation, Pagination]}         >

@huggie1984 yea I've been doing more testing and getting the result at odd ranges of slide widths.
I'm setting slide width in % and spaceBetween is 16. The following percent values cause last slide to render first.
50-100%
24-33%
17-19%
13-14%
Seeing this behavior in swiper studio as well.

Facing same issue. Did you find any solution

Hi @kirtikadam, it was a while since I worked with this.
I faced a few issues, as with any carousel package.
It may have been related to the number of slides. Try having a minimum of 3+ slides when you init the carousel, duplicate slides if you need to.
Three slides with no slide after prev or before next was giving me weird side effects
another solution was to tap into the onAfterInit method and manually force the position.
good luck.

I found this same issue and my solution was to do a ".slideTo()" within the onInit function, not ideal but was the only way I found for my use case
 onInit={swiper => swiper.slideToLoop(0, 0)}


Update setting-your-default-editor-for-github-codespaces.md

remove duplicate bullet point

Why:
Closes:

What's being changed (if available, include any code snippets, screenshots, or gifs):

Check off the following:

[ ] I have reviewed my changes in staging, available via the View deployment link in this PR's timeline (this link will be available after opening the PR).

For content changes, you will also see an automatically generated comment with links directly to pages you've modified. The comment won't appear if your PR only edits files in the data directory.

[ ] For content changes, I have completed the self-review checklist.

@luckyguy73 Thanks so much for opening a PR with this fix! I'll get this merged 🍏


Fix comment in RemovePodSandbox

Signed-off-by: Daniel Canter<EMAIL_ADDRESS>

@mikebrow CI seems to be failing on something unrelated.


Some ads can't be blocked?

Despite being blocked and dns cache being wiped I can't block ads from these hosts. I can't go to the sites but they still show ads.
news.freegames66.com
universesearch.net
Other custom blocks work such as these ad/malware networks I've found.
<IP_ADDRESS> get.stream-all.com
<IP_ADDRESS> airartapt.site
<IP_ADDRESS> arcaptart.site
<IP_ADDRESS> allashark.site
<IP_ADDRESS> bumcapale.site

From which site do you see ads from the listed resources?
Can you post some examples urls?

From which site do you see ads from the listed resources?
 Typed just that above into the addy bar and there's some sort of privacy pass.... noticed that its http to https doesn't work properly so https://kimcartoon.to actually takes you there.

news.freegames66.com

Doesn't appear to be in my list with an update of today of block-able items but will try a manual entry.
Rule:
local-zone: "news.freegames66.com" always_nxdomain

... with restart ...
$ unbound-control -c /etc/unbound/unbound.conf reload

... and browser refresh (soft and hard) ...
... Additional flush check(s)...
$ sudo unbound-control flush_zone news.freegames66.com
ok removed 0 rrsets, 0 messages and 0 key entries

$ sudo unbound-control flush_zone kimcartoon.to
ok removed 2 rrsets, 2 messages and 0 key entries

Definitely still seeing ads text and pictures in unfettered browser on left and right side of actual content (in iframes)... presuming everything was done correctly (pasted directly from terminal so hope so).

Hi @Martii Nice explanation of what you have done and how you did it :100:
The right way to let other replicate and find eventual failures :+1:
A little schooling for enhanging your knowledge to find the "&/%(/&¤%¤/" banners
In your browser you opens dev tool ( mosts browsers I can think of uses F12 as hotkey)
My next reply will be my investigation of the OP's Q.

First off, from a very new and very clean FF 70 profile I see no banners what so ever....
But here are some spooky urls that might require a bit more investigation, but I would not test these directly from my working computer
https://keapeiros.xyz/1clkn/10526
https://balvalur.com/pntne

And some absolutely differently ads urls
https://services.bilsyndication.com/adv1/?d=850
https://biltag.bilsyndication.com/jsv1/1572284506/?d=850&n=
https://assets.bilsyndication.com/plugins/cmpv2/cmp.complete.bundle.js
https://assets.bilsyndication.com/prebid/default/prebid-v2.38.0.js
https://assets.bilsyndication.com/plugins/vlPlayer/min/viPlayer_v24.js
https://assets.bilsyndication.com/plugins/safeframe/src/js/sf_host.min.js

Privacy violating Tracking urls:
https://platform.twitter.com/widgets.js
https://platform.twitter.com/widgets/widget_iframe.2d991e3dfc9abb2549972ce8b64c5d85.html?origin=https%3A%2F%2Fkimcartoon.to
https://syndication.twitter.com/settings
https://platform.twitter.com/js/button.d941c9a422e2e3faf474b82a1f39e936.js
https://platform.twitter.com/widgets/follow_button.2d991e3dfc9abb2549972ce8b64c5d85.en.html#dnt=false&id=twitter-widget-0&lang=en&screen_name=kimcartoonweb&show_count=false&show_screen_name=false&size=m&time=1572290057363
https://syndication.twitter.com/i/jot?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fkimcartoon.to%2F%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Awithcount%3A%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1572290057781%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%223541749%3A1571780739496%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22follow%22%2C%22action%22%3A%22impression%22%7D%7D
https://www.google-analytics.com/analytics.js
https://imasdk.googleapis.com/js/sdkloader/ima3.js
https://www.facebook.com/plugins/like.php?href=http%3A%2F%2Fwww.facebook.com%2Fkimcartoonfp&send=false&layout=button_count&width=100&show_faces=false&action=like&colorscheme=dark&font&height=21
https://www.facebook.com/plugins/likebox.php?href=http%3A%2F%2Fwww.facebook.com%2FKimCartoon-1500686783296635&width=300&colorscheme=dark&show_faces=true&stream=false&header=false&height=160

Other:
https://vendorlist.consensu.org/vendorlist.json; /var/lib/unbound/someonewhocares.db

consensu.org
![Screenshot_2019-10-28 Save BIG with $9 99 COMs from GoDaddy ](https://user-images.githubusercontent.com/44526987/67712755-de4ceb80-f9c4-11e9-8275-6f78eef302f6.png)

The some of this site investigation is:
Not reproducible, as I can't find any queries to news.freegames66.com on the site in question, However there is a very high number of spooky domain queries that would make my think twice about visiting that site again.
ScreenShots from test
![Screenshot_2019-10-28 KimCartoon - Watch cartoons online FREE](https://user-images.githubusercontent.com/44526987/67711519-74cbdd80-f9c2-11e9-875d-7c93c07e8d74.png)
![Screenshot_20191028_201449 cross profile notification](https://user-images.githubusercontent.com/44526987/67711520-74cbdd80-f9c2-11e9-92d4-f57ecfda2566.png)
![Screenshot_20191028_201549 privacy violating notification and ads spam warning](https://user-images.githubusercontent.com/44526987/67711521-75647400-f9c2-11e9-9fe0-cd69ef30187a.png)

A thought of why I don't see any spam/banners/ads could be that I block the vendorlist.consensu.org by:
local-zone: "vendorlist.consensu.org" always_nxdomain

Next test would be with the Tor Browser

Nope, still no banners, but also again, most content is blocked by the hostler

Final conclusion
news.freegames66.com is not in any interaction with kimcartoon.to

I tried to hunt it ... Well, good luck!
Putting assets.bilsyndication.com in my iptables (Yes I know we are talking about hosts files 🙄 But it was the quickest way from where I was...) make the ads disappear from a machine with nothing ....

@funilrys don't you mean nftables? iptables is rather "outdated" in *nix :smiling_imp:

@spirillen

news.freegames66.com is not in any interaction with kimcartoon.to

You might be forgetting region specific targeting. It's definitely present, and interacting, as screen shotted here, including Fx:

@funilrys

assets.bilsyndication.com

Will give that a try momentarily.

Hi @Martii
Did you remember to reload Unbound and clear browser cache?
Firefox cache dns queries....

You should block all of bilsyndicate by:
local-zone: "bilsyndication.com" always_nxdomain

I'm fully aware of the localization, but without stripping the js, my guess is that at least one of them is bypassing your local dns setting and goes strait for google's dns server
Could you or @funilrys try to have a look on your network traffic for traffic on port :53 and :853

On my little soap box, if anyone advertises to me in the browser there's is almost always a 100% chance that I won't ever click or buy anything that way. I prefer to do my own research and find my own sources. smile_cat ... besides they can't figure out what I like anyhow because it's on a need to know basis and do some shopping for other people. ;)
:+1:

Maybe try to open the page-source and see if the are any direct queries from kimcartoon.to to news.freegames66.com....

While hunting, I had to open/close the private/incognito window because they put everything in the cache. If you give them 1s of traffic, they put everything in cache and never leave until you properly clean your cache/cookies and reload.

@spirillen

You should block all of bilsyndicate by ...

This did the trick for the iframes themselves:
local-zone: "bilsyndication.com" always_nxdomain

(Once posted above it's always implied that I reload unbound otherwise the rule wouldn't go into effect plus Ctrl + Shift + Del is my friend and rote rehearsal ingrained :wolf:  ;)

port :53 and :853

Even if they use those ports on dev it's routed to unbound via unbound/DoT and the filters here (usually try.conf for what I try from you or someone else) afaik (last tested in February and since the filters are working it should be that still between OS updates). If any browser bypasses local security that's an issue as we've already discussed. As you mentioned it's a rather "spooky" site... I usually don't visit that site but thought this issue could use a little more detail than the original reporter did.

We are defiantly on the same page about braking down this.
But what we haven't found is the how do there come a call to news.freegames66.com which bypass the hosts file.... and/or a local DNS recursor and since @funilrys got it in first step, by blocking on firewall level...
The call to news.freegames66.com most comes from one of the .js from bilsyndication.com that bypass local settings and using external DNS e.g. cloudflare.com as both freegames and bilsyndication is hosted there

Just ran a test of https://keapeiros.xyz/1clkn/10526 on virustotal :wink:
https://balvalur.com/pntne not looking any better VirusTotal
Better get them in my own list...

@spirillen

... a local DNS recursor ...

As I added below the hr above a few minutes later before your reply... it's catching the highlighted image in the try.conf just not the iframes until you mentioned the whole domain blockage to remove the iframes themselves. Here's an example of what it "normally" looks like and it's url:
.
Can't speak for the hosts since I'm not using that for educational testing atm.

AAhh that was the reference to try.conf :smile: well spottet :100: :medal_sports:
I should it was a local script of yours :scroll:

@BugHunt3rM4x are your problem solved by adding
<IP_ADDRESS> services.bilsyndication.com
<IP_ADDRESS> biltag.bilsyndication.com
<IP_ADDRESS> assets.bilsyndication.com

to your hosts file?


Move operations out of lock in Bind functions

Fixes #21210
Also fix a guarded-by annotation.

Thanks for the review! I've clarified the TODOs. Hoping that @veblush gives us ABSL use soon and we can start using variant .

ABSL is going to be an absolute greatness.  :D


idp claim is missing

I have a client that did work fine with IdentityServer v 2.0.0 . I update the package to v 2.0.4 and  encounter with this error :
idp claim is missing
My question is where I can set idp?  or where it come from?
Thanks

This error sounds like it's coming from somewhere in the login UI hosted in IdentityServer. Compare your UI with the quickstart UI to see if there's some missing piece. We expect you to issue a sub claim when you issue the cookie in IdentityServer.

I inspect the user claims and it contains sub claim. but the idp not exists.

How do you sign in the user in IdentityServer (code)

I change
  await HttpContext.SignInAsync(result.User.Id.ToString(), result.User.UserName, props);
to
 await HttpContext.SignInAsync(result.User.Id.ToString(), result.User.UserName, "local", props);
And work fine.
Bu I don't know hos to get the IdentityProvider from login controller?

So in essence you are doing this:
https://github.com/IdentityServer/IdentityServer4/blob/8e7a4061582ac6bb822238897348f4393fa0e580/src/Host/Quickstart/Account/AccountController.cs#L119
Which I just also tried, and I get an idp claim with value "local". So I can't repro with the info I have right now.

Any more info?

I ran into this myself this week while showing IdentityServer. It was because I had claims and cookie issued before I had put IdentityServer in the pipeline, I then added IdentityServer and given that I was still logged in, when the token was being issued the old cookie had not been populated via IdentityServer with the right claims (idp).

Any update on the issue? closing for now - feel free to re-open if it needs further discussion.

I too am getting this error.


Adjust the backup organization structure (pingcap/tidb#30087)

Signed-off-by: Gaoming<EMAIL_ADDRESS>
What is changed and how it works?

Issue Number: Close #pingcap/tidb#30087
What's Changed:

Adjust the backup organization structure and add a store_id related prefix under the backup path.

Related changes
None

Check List
Tests

Manual test (add detailed scripts or steps below)

Manual test

run tiup br backup db to backup the db to S3.
drop the backup db.
Run tiup br restore db to restore the backup on S3.
Compatibility Test Case 1: Use the pre-modified br for backup, and the after-modified br for recovery.
Compatibility Test Case 2: Use the after-modified br for backup, and the pre-modified br for recovery.

Test output

the directory

run tiup br restore db successfully.
Compatibility Test Case 1 passed.
Compatibility Test Case 2 passed.

Release note
In the new backup organization structure, we will see:

./br backup --pd "<IP_ADDRESS>:2379" -s "s3://backup/20220621"
  - After br command finished, we will have the structure below.
➜  backup tree .
.
└── 20220621
    ├── backupmeta
    ├── store1
    │   └── backup-xxx.sst
    ├── store100
    │   └── backup-yyy.sst
    ├── store2
    │   └── backup-zzz.sst
    ├── store3
    ├── store4
    └── store5

/run-integration-br-tests

/run-integration-br-tests

/run-integration-br-tests

/rebuild

/run-integration-br-tests

/run-integration-br-tests

/run-build

/run-integration-br-tests

/run-build

/run-build

/run-build

/run-integration-br-tests

Unit test test_backup_huge_range_and_import failed.
https://github.com/tikv/tikv/blob/59c9676795d08a5ff2e35c899e3c3d30611bd2b9/tests/integrations/backup/mod.rs#L28
Reason: In fn assert_same_file_name, two filenames are split using '_' to generate two vectors, and then assert_eq each element of these two vectors, except the element at index 4. Because the element at index 4 is timestamp-based.
e.g., 2_1_1_abc_16094_write.sst -> [2, 1, 1, abc, 16094, write.sst], the skipped element is 16094.
But after adjusting the local backup file organization, the filename becomes 2/1_1_abc_16094_write_sst. The element at index 4 is write_sst, and the timestamp-based element 16094 will not be skipped.

/run-tests

/merge


Feature Request: Implement getTree for Uint and Bitfield

In order to generate proofs for beacon states, we need uint and bitfield support. Currently, this panics with unimplemented when trying to generate fastssz code on the Prysm BeaconStateAltair struct due to uint and bitfields missing.

Are you using the experimental flag for the proofs?

Hi @ferranbt some guidance on how we could implement this for bitlist would be super helpful. Thank you

Hi! Sorry for the delay. You can ping me next time over Discord if it is a hurry. I will try to take a look at this over the weekend.
The first thing to fix is the hashing of the BeaconState itself. As commented in #61, since you had already a custom BeaconState implementation and your fork of fastssz for Altair (I think) did not implemented it either I did not add neither uints and bitfields to the hashing to pass the BeaconState. I will try to figure that our first and then we can move to the proof.

Do you have the sizes of all the BeaconState fields for the Altair minimal config? I cannot find it anywhere. I want to check if all these lengths are correct.

Hi @ferranbt check out https://github.com/prysmaticlabs/prysm/blob/develop/proto/ssz_proto_library.bzl

In #64 I added some important modifications to the proof system. Now, fastssz reuses the same generated code for hashing to compute the proof. All the spec structs pass as intended.
However, there is a slight problem with BeaconState. At this step, the prober generates an array with the size of the max limit for a list, in the case of BeaconState.Validators that max size is huge<PHONE_NUMBER>776). An array of that size cannot be created in Go and it panics.
Even if this can be optimized (since much of these items are empty now) I am not sure if it will ever be optimal to keep the BeaconState in this tree data structure for the proofs.

Closing the issue since there is already support for uint and bitfield types on sszgen. Please open another issue if you feel necessary to track BeaconState proofs.


[Question]: Can we split query engine's query

Question Validation

[X] I have searched both the documentation and discord for an answer.

Question
I have a inference pipeline deployed on serverless google cloud function where i am getting stored index from a cloud bucket and then it has alibaba nlp embedding model and llama3 llm .
My problem is that while doing inference I need to set embedding model in settings.embed_model . My embedding model is hosted on vertex ai , now to fulfil this requirement , i need to again load the model and this adds up in each inference. Is there a way I can just get the embeddings of query and get the response ?

I'm not sure what you mean?
Initializing a vertex ai embedding model should be zero cost. It's just creating a client?
And in any case, you need the embedding model to get the embeddings of the query no?

so , embedding model( Alibaba NLP gte-large-en) is deployed on vertex ai . Using vertex ai sdk and initializing client  , we wont get the model object itself which needs to be set up in Settings . So , extra time will be spent in loading the model again . Please let me know if it is clear now .

So what do you want instead?
(Ideally you only have to initialize it once, and again, its not setting up anything except an api connection)


Add MM/YYYY and MM/YY

MM/YY is a common format for dates in India,UK and other parts of the world.Have added testcases in Time/EN/corpus.hs ,however it conflicts with one of the original(2/15 is output now as Feb. 2015 and not the 15th of February).

Thanks @ChiralCarbon!
I've reverted present and the rule to only handle MM/YYYY for now as MM/YY conflicts with MM/DD which is a breaking change.


Update write_dwc() so it works from non-published datasets

I.e. not requiring a DOI.

Current implementation:
write_dwc <- function(
  package,
  directory = ".",
  doi = package$id,
  contact = NULL,
  rights_holder = package$rightsHolder
) {

Suggestion:
write_dwc <- function(
  package,
  directory = ".",
  eml = TRUE,
  contact = NULL,
  rights_holder = package$rightsHolder
) {

When eml=TRUE, the function will attempt to create an eml.xml. This could be based on:

Metadata of an already published dataset. It needs a DOI for that, which can be provided in metadata.id of the package. @damianooldoni do you think that is sufficient for the user or should this be more clearly communicated by retaining doi as a function parameter?
Metadata it find in the package. It might not be sufficient to create a valid eml.xml, but it can do a best attempt.

In the data, some Darwin Core terms are also derived from the metadata:

license: dataset.license > metadata.license > NULL
rightsHolder: param rightsHolder > metadata.rightsHolder > NULL
datasetID: dataset.doi > metadata.id > NULL
collectionCode: metadata.platform > NULL
datasetName: dataset.title > metadata.title > NULL

Combinations with two parameters:

eml=FALSE, doi=NULL: no eml.xml, 5 fields in DwC are attempted to be populated from package
eml=FALSE, doi="...": no eml.xml, 5 fields in DwC are set from dataset at DOI
eml=TRUE, doi=NULL: eml.xml and 5 fields in DwC are set based on package info
eml=TRUE, doi="...":  eml.xml and 5 fields in DwC are set based on dataset at DOI

Alternatively, we could split in write_dwc() and write_eml().

Metadata of an already published dataset. It needs a DOI for that, which can be provided in metadata.id of the package. @damianooldoni do you think that is sufficient for the user or should this be more clearly communicated by retaining doi as a function parameter?

I think so, as long as it is documented in the Roxygen and is part of a vignette (see #118). And I think it's a very clean approach: if a DOI is assigned, then it's good practice to mention it in the metadata of the package, isn't?

Alternatively, we could split in write_dwc() and write_eml()

I think it's always nice to split functions in subfunctions anytime the scopes are well defined.


ISPN-11958 Infinispan Archetypes Getting Started Docs

https://issues.redhat.com/browse/ISPN-11958

integrated! thanks @oraNod !


Python 3.10 support

Python 3.10 has been released for more than 1 year, do we have any timelines to update the targeted python version?

Which OS are you using?

Python 3.10 has been released for more than 1 year, do we have any timelines to update the targeted python version?

Python 3.10 support will be added to the upcoming release 0.7 for all supported OS.


ADTs Guide

📖 Documentation
In the documentation there's a suggestion on how to implement ADTs with TypeScript:
interface Bar {
  readonly _tag: 'Bar'
  readonly value: string
}

interface Baz {
  readonly _tag: 'Baz'
  readonly value: boolean
}

// type
type Foo = Bar | Baz

// constructors
const Bar = (value: string): Foo => ({ _tag: 'Bar', value })

const Baz = (value: boolean): Foo => ({ _tag: 'Baz', value })

I wonder why can't we use classes instead? They come with a constructor for free:
class Bar {
  readonly _tag = 'Bar';
  constructor(readonly value: string) {}
}

class Baz {
  readonly _tag = 'Baz';
  constructor(readonly value: boolean) {}
}

// type
type Foo = Bar | Baz

What can go wrong and what are the limitations of this approach?

Class-based approached was abandoned in previous versions of fp-ts because of limitations of js/ts.

@SRachamim I usually use classes as members of ADTs as you described and I am not aware of any limitation.
The class-based approach in reference above from which fp-ts migrated away refers to fluent APIs that are indeed very problematic.


moment().isBefore() Crashes in Internet Explorer 8

Description of the Issue and Steps to Reproduce:
A fatal error, "Object doesn't support this property or method", is received when calling isBefore with a granularity argument.
i.e.
moment().isBefore(moment(), 'year');

Environment:
I've only been able to recreate this issue on Internet Explorer 8 running on Windows XP.
Other information that may be helpful:
It appears that the offending code is in this isDurationValid function at line 2658. The use of Array's indexOf method is the problem, as that doesn't exist in IE8. I've modified my MomentJS library and replaced it with the custom indexOf function that's defined earlier in the file and that solves the issue.

Currently the following browsers are used for the ci system: Chrome on Windows XP, IE 8, 9, and 10 on Windows 7, IE 11 on Windows 10, latest Firefox on Linux, and latest Safari on OSX 10.8 and 10.11.

This is known so it is not much of an issue and it is debatable whether to build in more support for IE on windows XP.

While I"m not delighted with spending tons of time on this, there is a simple fix. Use the IndexOf function inside the utils folder that defaults back to iterative code if the Indexof function doesn't exist. Will mark up for grabs.

actually closed #4079


yaml log configuration

Hi,
How to implement in yaml configuration file setting for the LOG_LEVEL, LOG_JSON, LOG_COLOR?
Also, a log location like /var/log/wg-portal/wg-portal.log?
Thank you.

this is currently not possible, I will create yaml config-options in v2


Is possible to change proxy behaviour on fly without restart ?

Hi!
Can I change addons/proxy behaviour in process running without restart it?
For example I would be replace some text in response in one case and in another case I would be replace same text to another one.
Thanks ^)

You can update mitmproxy options during runtime and those changes should be processed by all addons. For further support and how-to questions, please use StackOverflow. Thanks!

How to update mitmproxy options in the way of python?

I searched everywhere and got nothing, please help me !


fix: AU-1566: Fixed profile links for the application search

AU-1566
What was done
This pull request implements a minor fix for "Application search" links on user profiles.
How to install
Make sure your instance is up and running on the correct branch.

git checkout fix/AU-1566-profile-link-fix
make fresh
make drush-cr

How to test

[ ] Login with a test user and edit the profile page with all the different roles. You should be presented with a working link to the Application search after saving the profile page.

@oskarimysteerio Saakko tän stagelle? I don't know how :D


Issue with k8s.io/docs/reference/setup-tools/kubeadm/kubeadm-join/ giving insecure advice

This is a Bug Report

Problem:
The docs mentions (emphasis mine)

Requires that you have some way to carry the discovery information from the control-plane node to the bootstrapping nodes. This might be possible, for example, via your cloud provider or provisioning tool. The information in this file is not secret, but HTTPS or equivalent is required to ensure its integrity.

But this is not true anymore. if the discovery file contains credentials, then kubeadm will use them. If it doesn't contain credentials an extra --tls-bootstrap-token needs to be provided. As it says a few sentences up:

In case the discovery file does not contain credentials, the TLS discovery token will be used.

Proposed Solution:
Either remove the part about the file not being secret.  Or mention very clearly that if you put credentials in the kubeconfig, then you can skip the --tls-bootstrap-token step but you should treat the file as a secret
Page to Update:
https://kubernetes.io/docs/reference/setup-tools/kubeadm/kubeadm-join/

/assign
/sig cluster-lifecycle

/priority backlog


T-8 merge release-4.8 into master

Merging release-4.8 changes into master

For these webapp merge PRs can we actually discard any changes to yarn.lock? It usually gets us pointing at the wrong branch for mattermost-redux since the release branch needs to point at the mattermost-redux release branch

Oh and same for package.json as well

No problem @jwilander but I feel like doing that as a matter of process would be dangerous also? Will there ever be a change made in a release branch that requires a dependency change, or is that generally a no-no?

Generally the answer is we shouldn't being adding/modifying dependencies in a release branch but it does happen.
Maybe a better process is to just run the right yarn commands on this branch to point mattermost-redux back to master

I will start a different PR and pluck those 2 files out before the merge commit

I like that suggestion @jwilander i'll get this one done with pulling those then I can look at integrating yarn commands.

Sounds good
On Mar 8, 2018 08:08, "Derrick Anderson"<EMAIL_ADDRESS>wrote:

I like that suggestion @jwilander https://github.com/jwilander i'll get
this one done with pulling those then I can look at integrating yarn
commands.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/mattermost/mattermost-webapp/pull/908#issuecomment-371481573,
or mute the thread
https://github.com/notifications/unsubscribe-auth/ACjF4htqKxZLu_xSB5q59M_T48AP8c3dks5tcS0ygaJpZM4Sil4S
.


Second Subscription rule

https://github.com/reactive-streams/reactive-streams-jvm/blob/master/tck/src/main/java/org/reactivestreams/tck/SubscriberWhiteboxVerification.java#L216-L219
This rule and this test make no sense.
Publisher is allowed to observe cancellation "eventually". Publisher is allowed to call onError or onComplete without receiving request. on* methods do not distinguish which Subscripiton it is for. So if the Subscriber receives two onSubscribe, it may still receive various on* that will break the specification. (One Publisher does onComplete another Publisher does onNext)
In other words, there is no defence against non-conformant Publisher, or the systems that permit such a racy subscription to happen.

First of all, Rule 1.3 requires serial signaling thus if a Subscriber is reused, the second Publisher is not allowed to signal until the onSubscribe call it issued has returned. Yes, a Publisher can ignore the cancellation and still signal onComplete - there is no defense for that in this setup. Now imagine there was a cancel confirmation happening anyway...
The test is there to verify if the proper cancellation is happening for at least the non-racing scenario and helps detecting certain type of reuse bugs.
Sometimes, you can safely reuse the same Subscriber, for example, in concatMap where the you can reset the internals in onComplete to receive a fresh onSubscribe. For flatMap though, you need individual inner Subscribers.

I read 1.3 as pertaining to a single Publisher, not all Publisher s past, concurrent, and future. There is no way to enforce anything else, because the state transitions are internalized.

I read your comments on that flatMap commit and not sure what the problem is.
Is it that the inner subscriber is failing the TCK because of it implements a relaxed ruleset? Just don't test it with the TCK then.
Is it trust issues regarding Flow.Publishers violating the spec? You have to decide to either trust all, distrust all or trust only your own implementations.
All in all the TCK lets you verify conformant behavior in a limited way and I don't think it should be removed just because someone's use case doesn't fit it.

The inner subscriber can be written without that check. The runtime overhead is low, but the reasoning is harder when there are more things to think about.
The issue is that that rule does not improve Subscriber s life even if it implements it.

Then ignore it if you still see value in the other verification methods.

Oh, I see why the concern. Some of your project's own code wouldn't pass the TCK.

There are several things that are done incorrectly in that project. But getting it to a better level requires a sensible set of rules.

The rules have been fine, although not optimal, since the release of the spec/api/TCK. Some properties of the spec/TCK can be worked around just as fine.
So what action do you think reactive-streams-jvm should take regarding your issue?
(On a side-note, I'd really like to know, were these free and voluntary contributions or were they written by people paid to be working on the project?)

Regarding the legal status of the contributions to that other project - you better contact the owners of the project.
I think it would be satisfactory to downgrade the MUST to SHOULD or something. On our side we can pick the tests that we like, or implement the strict check, it is not that expensive, just quirky and not much help.

Given that it is illegal by spec to attach the same Subscriber instance twice, that is already a spec violation in itself.
Worth remembering is that the spec is between unknown Publisher-Subscriber combinations, if your Publisher implementation can do things differently by checking the runtime type of the Subscriber, then you are free to do as you want, as long as the different behavior cannot be observed when attaching a generic Subscriber.

It is ok to require that no one expects arbitrary Publisher s and arbitrary Subscriber s to be reusable. Requiring that all Subscriber s disallow reuse (under the pain of being branded as the spec violators), is backwards.

@olotenko Publishers are reusable by spec. Regarding Subscribers, if you know that a Subscriber is reusable, and you can clearly tell when it is safe to be reused, then you are of course free to do so. This is the same situation as with Iterators, only when knowing strictly more than simple Iterator is it safe to call next once hasNext has returned false. (for instance, you might have some reset method on it)

Sure. But you see the point, right? That the spec says "for all", whereas it should say "exists".

I can see what you mean when expanding the scope to all uses of these interfaces. The intended scope, as documented in the preamble, is to define behavior for the interaction of Publishers and Subscribers across boundaries, both async and organizational; the main goal is interoperability. This goal is only achieved by saying “all conforming implementations do X”, otherwise one implementor cannot rely on the behavior to be displayed by another implementation when plugged together by a third party.

The flaw in reasoning is that "all conforming implementations do X" does not mean every "do" applies to every "X".
Eg if you reword the requirement as "all conforming Publisher s must handle the case of Subscriber cancelling the Subscription when more than one onSubscribe is invoked", it becomes moot, because conforming Publisher s don't do more than one onSuscribe. Also, "exists" covers this case perfectly well ("there exist Subscriber s that will cancel Subscription upon receipt of the second onSubscribe" is enough to enforce conformant behaviour in conformant Publisher)
Instead, the spec is defining a required handling of non-conforming Publisher s by all Subscriber s.

@olotenko The reason for the symmetric check is to have a better chance of detecting violations on both sides of the fence (Publisher or Subscriber). If we were to rely on everything always doing the right thing, no TCK would ever be needed, because everyone would do what is expected of them, at all time. My experience in the software industry tells me that bugs and misinterpretation is commonplace, and therefor the TCK tries to do its best to avoid both of them. At least that's the rationale behind my reasoning.

@viktorklang :) it doesn't mean the spec is good.
Subscription.cancel() is in the future from the invocation of onSubscribe. How far in the future? Can it be after onSubscribe returns? This quickly spins out of the plane of reasonable conformant implementations.

@olotenko From the perspective of the Subscriber, it is already cancelled. So I'm not sure how that matters? A generic Subscriber should never receive two onSubscribe calls.

@viktorklang :) in the context of cancelling the second Subscription? Of course, it matters! That's the whole point of my argument!
Say, normally a Subscriber has only one Subscription. When the Subscription is cancelled, all Subscription s are cancelled (because there is only one).
Abnormally the Subscriber receives the second Subscription. Even if it gets cancelled, not all Subscription s are cancelled. The Subscriber does not enter the same state of "I'll ignore everything now".

Back to the original question.  @olotenko points out that the tck test is too strict. The spec implies "eventually", but the check is immediate. This is a classic testing issue; the usual compromise is to wait (sleep) long enough that "eventually" is sure to have happened in the testing context. Here, maybe a few seconds.

I imply more than that. Not calling request guarantees a conformant Publisher that happens to be in the mix will not call spurious onNext. Calling cancel does not guarantee anything even from a conformant Publisher. Why require calling cancel?

@DougLea Adding some sort of polling cycle until a timeout is definitely possible.


Documentation for creating store/product relationships

That is pretty clear for me, thanks :+1:

I appreciate the pull-request, but I don't think this documentation is necessary in the README. The association between products and stores is a simple has_and_belongs_to_many. As such, all of the typical means of assigning a product to a store or vice versa (a store to a product) will work.
As an aside, there's also a section on the edit page for products to choose which store they belong to.

I know it's not pretty, but that's a different issue altogether.
I could see something like this making a good wiki entry. Perhaps under a "Getting Started" section. I'll make a note for myself to set something up for making contributions to that sort of thing easier/possible.


volume-migration: remove restriction for the hotplug volumes

What this PR does
Before this PR:
Volume migration wasn't allowed for hotplugged volumes
After this PR:
Enable volume migration for volume hotplug

Fixes #
Why we need it and why it was done in this way
The following tradeoffs were made:
The following alternatives were considered:
Links to places where the discussion took place:
Special notes for your reviewer

Checklist
This checklist is not enforcing, but it's a reminder of items that could be relevant to every PR.
Approvers are expected to review this list.

[ ] Design: A design document was considered and is present (link) or not required
[ ] PR: The PR description is expressive enough and will help future contributors
[ ] Code: Write code that humans can understand and Keep it simple
[ ] Refactor: You have left the code cleaner than you found it (Boy Scout Rule)
[ ] Upgrade: Impact of this change on upgrade flows was considered and addressed if required
[ ] Testing: New code requires new unit tests. New features and bug fixes require at least on e2e test
[ ] Documentation: A user-guide update was considered and is present (link) or not required. You want a user-guide update if it's a user facing feature / API change.
[ ] Community: Announcement to kubevirt-dev was considered

Release note

Enable volume migration for hotplugged volumes

/uncc @EdDev @victortoso

@mhenriks PTAL

@mhenriks @lyarwood can you please take a look again to this?

/retest-required

/approve

/retest

/retest

/cherry-pick release-1.4

/cherrypick release-1.4


⚠ Bofrost.de has degraded performance

In 3027219, Bofrost.de (https://www.bofrost.de) experienced degraded performance:

HTTP code: 200
Response time: 2037 ms

Resolved: Bofrost.de performance has improved in 2b4baf9 after 4 hours, 1 minute.


Fix build-time tokenization of FreyaXmlVersion.

I think we should fix the two strings in the src/templates/FreyaXmlVersion.tmpl instead

Done. Changed the tokens in FreyaXmlVersion.tmpl.


How to increase Modal width or change color

i need to change Modal width to '650px'

components: Modal
reactstrap version #5.0.0-alpha.3
react version #16.0.0
bootstrap version #4.0.0-beta.2

What is happening?
I added my inline style in Modal or ModalBody
style={{width:'600px'}}
or
style={{background-color:transparent}}
but this is not working. then I checked in browser, div tag with .modal-content css class is middle in Modal and ModalBody.
so, where should I write this css style and className

Duplicate of #595

We have only been creating special props to apply classes to various elements within the more complex components. Modal allows you to add a class to pretty much any of the elements it generates. Through the class, you can apply various styles.
This is from the docs:

className: PropTypes.string,
wrapClassName: PropTypes.string,
modalClassName: PropTypes.string,
backdropClassName: PropTypes.string,
contentClassName: PropTypes.string,

In #595, it is mentioned how to use other props (such as size) to create custom classes, matching bootstraps class convention and thus allowing you to extend the bootstrap framework.

ok, sorry for duplicate question
we can change size of modal with add props size="lg"
now How to change color of modal
I added props
contentClassName={modalContent}
and modalContent is a object
const modalContent = {   backgroundColor: 'transparent' }
but contentClassName should be string
then how to use this
Please give a example

You do not have to overwrite the '.modal-content' class.
When you add the contentClassName="bg-light" prop, you will get:

...content

you just need to add the bg-light class to your custom css file.
Demo: https://www.webpackbin.com/bins/-KyPdCLBEfrxygiRVaB3

yes, it's working but i want background color transparent
so, how to use transparent color

You can create a new class (something like bg-transparent) and add it to your stylesheet. Then add that class to contentClassName.

How do I make it larger than the "lg" size.  the lg size is still quite small.

bootstrap only has "sm" and "lg", but you can can use size="xl" if you add .modal-xl to your custom stylesheet and give it a value.
See https://github.com/reactstrap/reactstrap/issues/595#issuecomment-332658152

I'm closing this since the the issue is no longer active and it appear it was answered above. Please comment and it will be opened if you feel the issue has not been resolved / the question has not been answered

Is it possible to owerride
@media (min-width: 576px) {     .modal-dialog {       max-width: 500px;     }   }
in order to set max-width to a higher value?

You do not have to overwrite the '.modal-content' class.
When you add the contentClassName="bg-light" prop, you will get:

...content

you just need to add the bg-light class to your custom css file.
Demo: https://www.webpackbin.com/bins/-KyPdCLBEfrxygiRVaB3

Hi, can you explain furthermore, the Demo link seems broken


Update _select.clarity.scss

Fix for https://github.com/vmware/clarity/issues/3398
Signed-off-by: Nagaraja Markapuram<EMAIL_ADDRESS>

Hello @nmarkapuram-vmw and thanks for the contribution!
There are some tests failing - I retriggered the Netlify deployment tests for you, we seem to have some build issues that we're working with Netlify to resolve.
But you will have to update your visual tests to reflect the new way the select component looks.
What you need to do is:

Have Docker installed
npm run visual:fix
Verify that the screenshots which you will find as modified in your git changes reflect the changes you intended.
Commit and push the updated screenshots. This is enough to trigger our CI builds again.

You can find some references here: https://github.com/vmware/clarity/blob/master/BUILD.md

@nmarkapuram-vmw Any updates on getting the tests passing? Reach out if you need any assistance, we'd love to get this closed out.

Hi Jeremy,
Thanks for responding back to me.
I have completed the first two steps ("Docker installation" and "npm run visual:fix"). But still, I see old screenshots in the Gemini screenshots section. I got stuck there.
Any inputs will help me complete the PR.
Thanks

Lately I observed that visual:fix needs the sets to run explicitly defined, or runs with [ ], while it has to be [ set1, set2, set3, set4 ]
Some background:
For parallelization of the visual tests they are grouped in 4 separate sets. You can run sets explicitly by providing them as parameters. In your case, sets 2 and 3 are failing, so you have to run:
npm run visual:fix set2 set3
Hope this helps

Thanks. It helped.

Also you'll need to update your branch, as some of the screenshots were already changed at vmware/clarity

[ ] fetch your upstream remote (you may need to add the upstream if you have not)
[ ] merge from upstream master into your local code. It's fine that it will create new commit
[ ] when gemini screens show conflict, accept any - either yours or the new files
[ ] rerun the npm run visual:fix set2 set3 :( to generate the updated screens
[ ] push to origin

Sorry if the above checklist is too obvious, I have no idea what's your experience with github. Please ask if you need any help with the above steps.

@nmarkapuram-vmw Just following up, can you address the conflicts and feedback to get this resolved? Thanks.

Just following up, will you have a chance to fix this up soon @nmarkapuram-vmw?

Hi Jeremy, I have seen the last comment as "Needs UX Input" and didn't follow up on the ticket. I will close this asap. Sorry for the inconvenience caused.

The label was about the bottom border underline being blue instead of red for the select, which we discussed and it should be red like @Jinnie says when focused and in error state. Fix that up, and I think the fix is what we want.

@gnomeontherun actually my point was that if we make it red, then we're losing any visual focus indication. Though even if we keep it blue, it's a bit confusing. So I hope we may benefit from some UX feedback on this.

@gnomeontherun
No, it is still 1px line, but in different color:
multiselect-wrapper select.clr-focus {
    border-bottom: 1px solid #0095d3;

we can make it thicker, but that's not what we'll have with the non-error focus indication

I think we got some wires crossed talking about this. Here is the expected outcome we want.

Error for a single select should show the underline (this appears to be working)
Error for multi select should just have a red outline (this is wrong currently)

I know the concept of focus isn't clear enough, but that is beyond the scope of this fix. We can fix this and get it closed out without a focus design change at the moment.

Let's finish this as suggested by Jeremy.
I'll file a separate issue for the focus problem.
@nmarkapuram-vmw could you please also update the screenshots on your project, too. Sorry for the delay.

@gnomeontherun the linked PR fixes nicely the multi-select state, but closing this we skip this part:
.clr-error select {
    border-color: $clr-forms-invalid-color;

which should be taking care for the single select bottom border


[FEAT]: Detect github-enterprise URL before migrating it or allow explicit definition of github integration type to ignore github-enterprise integrations

Is there an existing feature request for this?

[X] I have searched the existing feature requests

Description
The default settings of the tool assume github-enterprise integration is used. Our company has multiple instances of github enterprise server installed, so it's safe to assume most github-enterprise integrations are NOT going towards github.com. Also because snyk only allows one integration type per organization, that itself poses some significant limitation to our use cases.
We are now migrating to github cloud app to get rid of the personal github integrations, but we can't blanket migrate github-enterprise integrations to the github cloud app as they are likely linked to our internal enterprise server instances.

Instead of defaulting to github-enterprise with an option to include github, there should be a mechanism to explicitly specify specific integration type to migrate to make it easy to exclude github-enterprise without hacking the code and then having the option to migrate all.

Advanced method could be to actually detect the target of the github enterprise integration and if it's not pointing to github.com, ignore it. It's not super clear how you can get this information using the public snyk API at the moment.

The public integration settings API does not include the account settings portion of the github enterprise integration which would contain the actual URL of the instance, which is far from optimal for this use-case. https://snyk.docs.apiary.io/#reference/integrations/integration-settings/retrieve
Additional Information
No response

i'm working on this feature and i'll create a pull request for it.


set flutter_secure_storage to version 8.0.0

Closes #117

@rultor merge it.

@rultor merge it.

@rafamizes OK, I'll try to merge now. You can check the progress of the merge here

@rultor merge it.

@rafamizes Done! FYI, the full log is here (took me 5min)


Make python3 alias to python?

using asdf global python 3.9.4 makes python --version print out 3.9.4 but does nothing to python3. Is there a way to make python3 also link to the asdf version?

Whoops. It was aliased. Not sure what happened.


After UDP burst in stress test get_mem does not answer immediately.

With the current release 0.9.0 when running the stress test on an ubuntu medium flavor on openstack the test tends to hang after the initial UDP burst.
To reproduce just run a stress test from the 0.9.0 release build. I don't know how hardware dependent this bug is.
In order to solve this hanging issue a sleep was added to the get_mem function, before it attempts to send the memsize\n string to the VM.
I don't view this as a long time solution as there seems like the VM is overloaded by the UDP burst, and is not able to answer the following TCP request. It might also be possible that this is a python specific issue.

Is this still the case?

Hi @fwsGonzo not sure if this is related, but I found a similar issue when running these tests, after a while the VM becomes unresponsive and QEMU goes to 100% CPU

I saw your PR. Nice stuff. It's hard to say from here whether or not it still happens. We have services that have been running for a long time while being bombarded. So, perhaps we need to setup a machine whos only purpose is to run UDP or ARP bombardment against an instance.