EKS Fargate Guincorn Error

What is the bug?
I am trying to deploy airflow using this helm chart on AWS EKS backed by Fargate. The problem I am facing is that airflow-scheduler gets deployed correctly, I am able to check the logs to verify as well but, airflow-web UI, Gunicorn, keeps failing/timing out and restarting the airflow-web UI. I also am not able to access my logs on airflow-web, I get airflow-web: net/http: TLS handshake timeout
03:05:17    [2020-04-03 03:05:17 +0000] [8] [INFO] Booting worker with pid: 8
03:05:17    [2020-04-03 03:05:17 +0000] [9] [INFO] Booting worker with pid: 9
03:05:17    [2020-04-03 03:05:17 +0000] [1] [DEBUG] 2 workers
03:07:17    [2020-04-03 03:07:17 +0000] [1] [CRITICAL] WORKER TIMEOUT (pid:8)
03:07:17    [2020-04-03 03:07:17 +0000] [1] [CRITICAL] WORKER TIMEOUT (pid:9)
03:07:17    [2020-04-03 03:07:17 +0000] [12] [INFO] Booting worker with pid: 12
03:07:18    [2020-04-03 03:07:18 +0000] [13] [INFO] Booting worker with pid: 13

I've looked into the Gunicorn error time out error that others have fixed by either using gevent or updating gunicorn.conf for:
workers = 1
threads = 8
worker_class = 'sync'
worker_connections = 1000
timeout = 30
keepalive = 2

What are your Helm values?

Scheduler deployment runs, airflow-web deployment fails to deploy. It does get to the airflow-web I can check logs before it terminates.

###################################
# Airflow - Common Configs
###################################
airflow:
  ## configs for the docker image of the web/scheduler/worker
  ##
  image:
    repository: airflow-test
    tag: "1.0.0"

    ## values: Always or IfNotPresent
    ## For local development with minikube use Never
    pullPolicy: Always

    ##
    #pullSecret: my-registry

  ## the airflow executor type to use
  ##
  ## NOTE:
  ## - this should be `CeleryExecutor` or `KubernetesExecutor`
  ## - if set to `KubernetesExecutor`:
  ##   - ensure that `workers.enabled` is `false`
  ##   - ensure that `flower.enabled` is `false`
  ##   - ensure that `redis.enabled` is `false`
  ##   - ensure that K8S configs are set in `airflow.config`
  ##   - we set these configs automatically:
  ##     - `AIRFLOW__KUBERNETES__NAMESPACE`
  ##     - `AIRFLOW__KUBERNETES__WORKER_SERVICE_ACCOUNT_NAME`
  ##     - `AIRFLOW__KUBERNETES__ENV_FROM_CONFIGMAP_REF`
  ##
  executor: KubernetesExecutor

  ## the fernet key used to encrypt the connections/variables in the database
  ##
  ## WARNING:
  ## - you MUST customise this value, otherwise the encryption will be somewhat pointless
  ##
  ## NOTE:
  ## - to prevent this value being stored in your values.yaml (and airflow-env ConfigMap),
  ##   consider using `airflow.extraEnv` to define it from a pre-created secret
  ##
  ## GENERATE:
  ##   python -c "from cryptography.fernet import Fernet; FERNET_KEY = Fernet.generate_key().decode(); print(FERNET_KEY)"
  ##
  fernetKey: ""

  ## environment variables for the web/scheduler/worker Pods (for airflow configs)
  ##
  ## WARNING:
  ## - don't include sensitive variables in here, instead make use of `airflow.extraEnv` with Secrets
  ## - don't specify `AIRFLOW__CORE__SQL_ALCHEMY_CONN`, `AIRFLOW__CELERY__RESULT_BACKEND`,
  ##   or `AIRFLOW__CELERY__BROKER_URL`, they are dynamically created from chart values
  ##
  ## NOTE:
  ## - airflow allows environment configs to be set as environment variables
  ## - they take the form: AIRFLOW__<section>__<key>
  ## - see the Airflow documentation: https://airflow.apache.org/docs/stable/howto/set-config.html
  ##
  ## EXAMPLE:
  ##   config:
  ##     ## Security
  ##     AIRFLOW__CORE__SECURE_MODE: "True"
  ##     AIRFLOW__API__AUTH_BACKEND: "airflow.api.auth.backend.deny_all"
  ##     AIRFLOW__WEBSERVER__EXPOSE_CONFIG: "False"
  ##     AIRFLOW__WEBSERVER__RBAC: "False"
  ##
  ##     ## DAGS
  ##     AIRFLOW__SCHEDULER__DAG_DIR_LIST_INTERVAL: "30"
  ##     AIRFLOW__CORE__LOAD_EXAMPLES: "False"
  ##
  ##     ## Email (SMTP)
  ##     AIRFLOW__EMAIL__EMAIL_BACKEND: "airflow.utils.email.send_email_smtp"
  ##     AIRFLOW__SMTP__SMTP_HOST: "smtpmail.example.com"
  ##     AIRFLOW__SMTP__SMTP_STARTTLS: "False"
  ##     AIRFLOW__SMTP__SMTP_SSL: "False"
  ##     AIRFLOW__SMTP__SMTP_PORT: "25"
  ##     AIRFLOW__SMTP__SMTP_MAIL_FROM<EMAIL_ADDRESS>  ##
  ##     ## Disable noisy "Handling signal: ttou" Gunicorn log messages
  ##     GUNICORN_CMD_ARGS: "--log-level WARNING"
  ##
  ##     ## Proxy Config
  ##     HTTP_PROXY: "http://proxy.example.com:8080"
  ##
  config:
    AIRFLOW__CORE__LOAD_EXAMPLES: "False"
    AIRFLOW__KUBERNETES__DAGS_IN_IMAGE: "True"
    AIRFLOW__WEBSERVER__EXPOSE_CONFIG: "True"
    # AIRFLOW__WEBSERVER__RBAC: "True"
    # AIRFLOW__CORE__SQL_ALCHEMY_CONN: "mysql://airflow:airflow@<HOST_IP_ADDR>:3306/airflow"

  ## extra annotations for the web/scheduler/worker Pods
  ##
  ## EXAMPLE:
  ##   podAnnotations:
  ##     iam.amazonaws.com/role: "airflow-Role"
  ##
  podAnnotations: {}

  ## extra environment variables for the web/scheduler/worker (AND flower) Pods
  ##
  ## EXAMPLE:
  ##   extraEnv:
  ##     - name: AIRFLOW__CORE__FERNET_KEY
  ##       valueFrom:
  ##         secretKeyRef:
  ##           name: airflow-fernet-key
  ##           key: value
  ##     - name: AIRFLOW__LDAP__BIND_PASSWORD
  ##       valueFrom:
  ##         secretKeyRef:
  ##           name: airflow-ldap-password
  ##           key: value
  ##
  extraEnv: []

  ## extra configMap volumeMounts for the web/scheduler/worker Pods
  ##
  ## EXAMPLE:
  ##   extraConfigmapMounts:
  ##     - name: airflow-webserver-config
  ##       mountPath: /opt/airflow/webserver_config.py
  ##       configMap: airflow-webserver-config
  ##       readOnly: true
  ##       subPath: webserver_config.py
  ##
  extraConfigmapMounts: []

  ## extra containers for the web/scheduler/worker Pods
  ##
  ## EXAMPLE: (a sidecar that syncs DAGs from object storage)
  ##   extraContainers:
  ##     - name: s3-sync
  ##       image: my-user/s3sync:latest
  ##       volumeMounts:
  ##     - name: synchronised-dags
  ##       mountPath: /dags
  ##
  extraContainers: []

  ## extra pip packages to install in the web/scheduler/worker Pods
  ##
  ## EXAMPLE:
  ##   extraPipPackages:
  ##     - "airflow-exporter==1.3.1"
  ##
  extraPipPackages: []

  ## extra volumeMounts for the web/scheduler/worker Pods
  ##
  ## EXAMPLE:
  ##   extraVolumeMounts:
  ##     - name: synchronised-dags
  ##       mountPath: /opt/airflow/dags
  ##
  extraVolumeMounts: []

  ## extra volumes for the web/scheduler/worker Pods
  ##
  ## EXAMPLE:
  ##   extraVolumes:
  ##     - name: synchronised-dags
  ##       emptyDir: {}
  ##
  extraVolumes: []

###################################
# Airflow - Scheduler Configs
###################################
scheduler:
  ## resource requests/limits for the scheduler Pod
  ##
  ## EXAMPLE:
  ##   resources:
  ##     requests:
  ##       cpu: "1000m"
  ##       memory: "1Gi"
  ##
  resources: {}

  ## the nodeSelector configs for the scheduler Pods
  ##
  nodeSelector: {}

  ## the affinity configs for the scheduler Pods
  ##
  affinity: {}

  ## the toleration configs for the scheduler Pods
  ##
  tolerations: []

  ## the security context for the scheduler Pods
  ##
  securityContext: {}

  ## labels for the scheduler Deployment
  ##
  labels: {}

  ## Pod labels for the scheduler Deployment
  ##
  podLabels: {}

  ## annotations for the scheduler Deployment
  ##
  annotations: {}

  ## Pod Annotations for the scheduler Deployment
  ##
  podAnnotations: {}

  ## if we should tell Kubernetes Autoscaler that its safe to evict these Pods
  ##
  safeToEvict: true

  ## configs for the PodDisruptionBudget of the scheduler
  ##
  podDisruptionBudget:
    ## if a PodDisruptionBudget resource is created for the scheduler
    ##
    enabled: true

    ## the maximum unavailable pods/percentage for the scheduler
    ##
    ## NOTE:
    ## - as there is only ever a single scheduler Pod,
    ##   this must be 100% for Kubernetes to be able to migrate it
    ##
    maxUnavailable: "100%"

    ## the minimum available pods/percentage for the scheduler
    ##
    minAvailable: ""

  ## custom airflow connections for the airflow scheduler
  ##
  ## EXAMPLE:
  ##   connections:
  ##     - id: my_aws
  ##       type: aws
  ##       extra: |
  ##         {
  ##           "aws_access_key_id": "XXXXXXXX",
  ##           "aws_secret_access_key": "XXXXXXXX",
  ##           "region_name":"eu-central-1"
  ##         }
  ##
  connections: []

  ## if `scheduler.connections` are deleted and re-added after each scheduler restart
  ##
  refreshConnections: true

  ## the name of an existing Secret containing an `add-connections.sh` script to run on scheduler start
  ##
  ## NOTE:
  ##  - if this is non-empty, `scheduler.connections` will be ignored
  ##  - use this if you don't want to store connections in your values.yaml
  ##
  ## EXAMPLE SECRET:
  ##   apiVersion: v1
  ##   kind: Secret
  ##   metadata:
  ##     name: my-airflow-connections
  ##   type: Opaque
  ##   stringData:
  ##     add-connections.sh: |
  ##       #!/usr/bin/env bash
  ##
  ##       # remove any existing connection
  ##       airflow connections --delete \
  ##         --conn_id "my_aws"
  ##
  ##       # re-add your custom connection
  ##       airflow connections --add \
  ##         --conn_id "my_aws" \
  ##         --conn_type "aws" \
  ##         --conn_extra "{\"region_name\":\"eu-central-1\"}"
  ##
  existingSecretConnections: ""

  ## custom airflow variables for the airflow scheduler
  ##
  ## NOTE:
  ## - THIS IS A STRING, containing a JSON object, with your variables in it
  ##
  ## EXAMPLE:
  ##   variables: |
  ##     { "environment": "dev" }
  ##
  variables: |
    {}

  ## custom airflow pools for the airflow scheduler
  ##
  ## NOTE:
  ## - THIS IS A STRING, containing a JSON object, with your pools in it
  ##
  ## EXAMPLE:
  ##   pools: |
  ##     {
  ##       "example": {
  ##         "description": "This is an example pool with 2 slots.",
  ##         "slots": 2
  ##       }
  ##     }
  ##
  pools: |
    {}

  ## the value of the `airflow --num_runs` parameter used to run the airflow scheduler
  ##
  ## NOTE:
  ## - this is the number of 'dag refreshes' before the airflow scheduler process will exit
  ## - if not set to `-1`, the scheduler Pod will restart regularly
  ## - for most environments, `-1` will be an acceptable value
  ##
  numRuns: -1

  ## if we run `airflow initdb` when the scheduler starts
  ##
  initdb: true

  ## if we run `airflow initdb` inside a special initContainer
  ##
  ## NOTE:
  ## - may be needed if you have custom database hooks configured that will be pulled in by git-sync
  ##
  preinitdb: false

  ## the number of seconds to wait (in bash) before starting the scheduler container
  ##
  initialStartupDelay: 0

  ## configs for the scheduler liveness probe
  ##
  ## NOTE:
  ## - the maximum number of seconds the scheduler can be unhealthy =
  ##   `livenessProbe.periodSeconds` x `livenessProbe.failureThreshold`
  ##
  livenessProbe:
    enabled: true
    ## the number of seconds to wait before checking pod health
    ##
    ## NOTE:
    ## - make larger if you are installing many packages with:
    ##   `airflow.extraPipPackages`, `web.extraPipPackages`, or `dags.installRequirements`
    ##
    initialDelaySeconds: 300
    periodSeconds: 30
    failureThreshold: 5

  ## extra init containers to run before the scheduler Pod
  ##
  ## EXAMPLE:
  ##   extraInitContainers:
  ##     - name: volume-mount-hack
  ##       image: busybox
  ##       command: ["sh", "-c", "chown -R 1000:1000 logs"]
  ##       volumeMounts:
  ##         - mountPath: /opt/airflow/logs
  ##           name: logs-data
  ##
  extraInitContainers: []

###################################
# Airflow - WebUI Configs
###################################
web:
  ## resource requests/limits for the airflow web Pods
  ##
  ## EXAMPLE:
  ##   resources:
  ##     requests:
  ##       cpu: "500m"
  ##       memory: "1Gi"
  ##
  resources: {}

  ## the number of web Pods to run
  ##
  replicas: 1

  ## the nodeSelector configs for the web Pods
  ##
  nodeSelector: {}

  ## the affinity configs for the web Pods
  ##
  affinity: {}

  ## the toleration configs for the web Pods
  ##
  tolerations: []

  ## the security context for the web Pods
  ##
  securityContext: {}

  ## labels for the web Deployment
  ##
  labels: {}

  ## Pod labels for the web Deployment
  ##
  podLabels: {}

  ## annotations for the web Deployment
  ##
  annotations: {}

  ## Pod annotations for the web Deployment
  ##
  podAnnotations: {}

  ## if we should tell Kubernetes Autoscaler that its safe to evict these Pods
  ##
  safeToEvict: true

  ## configs for the PodDisruptionBudget of the web Deployment
  ##
  podDisruptionBudget:
    ## if a PodDisruptionBudget resource is created for the web Deployment
    ##
    ## WARNING:
    ## - if you enable a PodDisruptionBudget, you should set `web.replicas` to a value
    ##   large enough for Kubernetes to evict at least 1 Pod at a time
    ##
    enabled: false

    ## the maximum unavailable pods/percentage for the web Deployment
    ##
    maxUnavailable: ""

    ## the minimum available pods/percentage for the web Deployment
    ##
    minAvailable: ""

  ## configs for the Service of the web Pods
  ##
  service:
    annotations: {}
    sessionAffinity: "None"
    sessionAffinityConfig: {}
    type: ClusterIP
    externalPort: 8080
    loadBalancerIP: ""
    loadBalancerSourceRanges: []
    nodePort:
      http: ""

  ## sets `AIRFLOW__WEBSERVER__BASE_URL`
  ##
  ## NOTE:
  ## - should be compatible with `ingress.web.path` config

  ## Ive tested multiple scenarios with base url removed and using a alb address nothing works
  ## http://localhost:8080"

  baseUrl: ""

  ## sets `AIRFLOW__CORE__STORE_SERIALIZED_DAGS`
  ##
  ## NOTE:
  ## - setting true will disable `git-sync` and `git-clone` containers in the web Pod
  ## - Docs: https://airflow.apache.org/docs/stable/dag-serialization.html
  ##
  serializeDAGs: false

  ## extra pip packages to install in the web container
  ##
  ## EXAMPLE: ( packages used by RBAC UI for OAuth )
  ##   extraPipPackages:
  ##     - "apache-airflow[google_auth]==1.10.10"
  ##
  extraPipPackages: []

  ## the number of seconds to wait (in bash) before starting the web container
  ##
  initialStartupDelay: 0

  ## the number of seconds to wait before declaring a new Pod available
  ##
  minReadySeconds: 5

  ## configs for the web Service readiness probe
  ##
  readinessProbe:
    enabled: false
    scheme: HTTP
    initialDelaySeconds: 10
    periodSeconds: 10
    timeoutSeconds: 1
    successThreshold: 1
    failureThreshold: 3

  ## configs for the web Service liveness probe
  ##
  livenessProbe:
    enabled: true
    scheme: HTTP
    ## the number of seconds to wait before checking pod health
    ##
    ## NOTE:
    ## - make larger if you are installing many packages with:
    ##   `airflow.extraPipPackages`, `web.extraPipPackages`, or `dags.installRequirements`
    ##
    initialDelaySeconds: 300
    periodSeconds: 30
    timeoutSeconds: 3
    successThreshold: 1
    failureThreshold: 2

  ## the directory in which to mount secrets on web containers
  ##
  secretsDir: /var/airflow/secrets

  ## the names of existing Kubernetes Secrets to mount as files at `{workers.secretsDir}/<secret_name>/<keys_in_secret>`
  ##
  secrets: []

  ## the name of an existing Kubernetes Secret to mount as files to `{web.secretsDir}/<keys_in_secret>`
  ##
  ## NOTE:
  ##  - overrides `web.secrets`
  ##
  secretsMap: ""

###################################
# Airflow - Worker Configs
###################################
workers:
  ## if the airflow workers StatefulSet should be deployed
  ##
  enabled: false

  ## resource requests/limits for the airflow worker Pods
  ##
  ## EXAMPLE:
  ##   resources:
  ##     requests:
  ##       cpu: "1000m"
  ##       memory: "2Gi"
  ##
  resources: {}

  ## the number of workers Pods to run
  ##
  ## NOTE:
  ## - when `workers.autoscaling.enabled` is true, this is the minimum
  ##
  replicas: 1

  ## the nodeSelector configs for the worker Pods
  ##
  nodeSelector: {}

  ## the affinity configs for the worker Pods
  ##
  affinity: {}

  ## the toleration configs for the worker Pods
  ##
  tolerations: []

  ## the security context for the worker Pods
  ##
  securityContext: {}

  ## labels for the worker StatefulSet
  ##
  labels: {}

  ## Pod labels for the worker StatefulSet
  ##
  podLabels: {}

  ## annotations for the worker StatefulSet
  ##
  annotations: {}

  ## Pod annotations for the worker StatefulSet
  ##
  podAnnotations: {}

  ## if we should tell Kubernetes Autoscaler that its safe to evict these Pods
  ##
  safeToEvict: true

  ## configs for the PodDisruptionBudget of the worker StatefulSet
  ##
  podDisruptionBudget:
    ## if a PodDisruptionBudget resource is created for the worker StatefulSet
    ##
    ## WARNING:
    ## - if you enable a PodDisruptionBudget, you should set `workers.replicas` to a value
    ##   large enough for Kubernetes to evict at least 1 Pod at a time
    ## - if you enable `workers.celery.gracefullTermination`, you should consider
    ##   specifying a `workers.podDisruptionBudget.minAvailable` to prevent there
    ##   not being enough available workers during graceful termination waiting periods
    ##
    enabled: false

    ## the maximum unavailable pods/percentage for the worker StatefulSet
    ##
    maxUnavailable: ""

    ## the minimum available pods/percentage for the worker StatefulSet
    ##
    minAvailable: ""

  ## configs for the HorizontalPodAutoscaler of the worker Pods
  ##
  ## EXAMPLE:
  ##   autoscaling:
  ##     enabled: true
  ##     maxReplicas: 16
  ##     metrics:
  ##     - type: Resource
  ##       resource:
  ##         name: memory
  ##         target:
  ##           type: Utilization
  ##           averageUtilization: 80
  ##
  autoscaling:
    enabled: false
    maxReplicas: 2
    metrics: []

  ## the number of seconds to wait (in bash) before starting each worker container
  ##
  initialStartupDelay: 0

  ## configs for the celery worker Pods
  ##
  ## NOTE:
  ## - only takes effect if `airflow.executor` is `CeleryExecutor`
  ##
  celery:
    ## the number of tasks each celery worker can run at a time
    ##
    ## NOTE:
    ## - sets AIRFLOW__CELERY__WORKER_CONCURRENCY
    ##
    instances: 16

    ## if we should wait for tasks to finish before SIGTERM of the celery worker
    ##
    ## WARNING:
    ## - consider using `workers.podDisruptionBudget.*` to prevent there not being
    ##   enough available workers during graceful termination waiting periods
    ##
    gracefullTermination: false

    ## how many seconds to wait for tasks to finish before SIGTERM of the celery worker
    ##
    ## graceful shutdown lifecycle:
    ##   1. prevent worker accepting new tasks
    ##   2. wait AT MOST `workers.celery.gracefullTerminationPeriod` for tasks to finish
    ##   3. send SIGTERM to worker
    ##   4. wait AT MOST `workers.terminationPeriod` for kill to finish
    ##   5. send SIGKILL to worker
    ##
    gracefullTerminationPeriod: 600

  ## how many seconds to wait after SIGTERM before SIGKILL of the celery worker
  ##
  ## WARNING:
  ## - tasks that are still running during SIGKILL will be orphaned, this is important
  ##   to understand with KubernetesPodOperator(), as Pods may continue running
  ##
  terminationPeriod: 60

  ## directory in which to mount secrets on worker containers
  ##
  secretsDir: /var/airflow/secrets

  ## the names of existing Kubernetes Secrets to mount as files at `{workers.secretsDir}/<secret_name>/<keys_in_secret>`
  ##
  secrets: []

  ## the name of an existing Kubernetes Secret to mount as files to `{web.secretsDir}/<keys_in_secret>`
  ##
  ## NOTE:
  ##  - overrides `worker.secrets`
  ##
  secretsMap: ""

###################################
# Airflow - Flower Configs
###################################
flower:
  ## if the Flower UI should be deployed
  ##
  ## NOTE:
  ## - only takes effect if `airflow.executor` is `CeleryExecutor`
  ##
  enabled: false

  ## resource requests/limits for the flower Pods
  ##
  ## EXAMPLE:
  ##   resources:
  ##     requests:
  ##       cpu: "100m"
  ##       memory: "126Mi"
  ##
  resources: {}

  ## the number of flower Pods to run
  ##
  replicas: 1

  ## the nodeSelector configs for the flower Pods
  ##
  nodeSelector: {}

  ## the affinity configs for the flower Pods
  ##
  affinity: {}

  ## the toleration configs for the flower Pods
  ##
  tolerations: []

  ## the security context for the flower Pods
  ##
  securityContext: {}

  ## labels for the flower Deployment
  ##
  labels: {}

  ## Pod labels for the flower Deployment
  ##
  podLabels: {}

  ## annotations for the flower Deployment
  ##
  annotations: {}

  ## Pod annotations for the flower Deployment
  ##
  podAnnotations: {}

  ## if we should tell Kubernetes Autoscaler that its safe to evict these Pods
  ##
  safeToEvict: true

  ## configs for the PodDisruptionBudget of the flower Deployment
  ##
  podDisruptionBudget:
    ## if a PodDisruptionBudget resource is created for the flower Deployment
    ##
    ## WARNING:
    ## - if you enable a PodDisruptionBudget, you should set `flower.replicas` to a value
    ##   large enough for Kubernetes to evict at least 1 Pod at a time
    ##
    enabled: false

    ## the maximum unavailable pods/percentage for the flower Deployment
    ##
    maxUnavailable: ""

    ## the minimum available pods/percentage for the flower Deployment
    ##
    minAvailable: ""

  ## the value of the flower `--auth` argument
  ##
  ## NOTE:
  ##  - see flower docs: https://flower.readthedocs.io/en/latest/auth.html#google-oauth-2-0
  ##
  oauthDomains: ""

  ## the name of a pre-created secret containing the basic authentication value for flower
  ##
  ## NOTE:
  ## - This sets `AIRFLOW__CELERY__FLOWER_BASIC_AUTH`
  ##
  basicAuthSecret: ""

  ## the key within `flower.basicAuthSecret` containing the basic authentication string
  ##
  basicAuthSecretKey: ""

  ## sets `AIRFLOW__CELERY__FLOWER_URL_PREFIX`
  ##
  ## NOTE:
  ## - should match `ingress.flower.path` config
  ##
  urlPrefix: ""

  ## configs for the Service of the flower Pods
  ##
  service:
    annotations: {}
    type: ClusterIP
    externalPort: 5555
    loadBalancerIP: ""
    loadBalancerSourceRanges: []
    nodePort:
      http: ""

  ## the number of seconds to wait (in bash) before starting the flower container
  ##
  initialStartupDelay: 0

  ## the number of seconds to wait before declaring a new Pod available
  ##
  minReadySeconds: 5

  ## extra ConfigMaps to mount on the flower Pods
  ##
  ## EXAMPLE:
  ##   extraConfigmapMounts:
  ##     - name: extra-cert
  ##       mountPath: /etc/ssl/certs/extra-cert.pem
  ##       configMap: extra-certificates
  ##       readOnly: true
  ##       subPath: extra-cert.pem
  ##
  extraConfigmapMounts: []

###################################
# Airflow - Logs Configs
###################################
logs:
  ## the airflow logs folder
  ##
  path: /opt/airflow/logs

  ## configs for the logs PVC
  ##
  persistence:
    ## if a persistent volume is mounted at `logs.path`
    ##
    enabled: false

    ## the name of an existing PVC to use
    ##
    existingClaim: ""

    ## sub-path under `logs.persistence.existingClaim` to use
    ##
    subPath: ""

    ## the name of the StorageClass used by the PVC
    ##
    ## NOTE:
    ## - if set to "", then `PersistentVolumeClaim/spec.storageClassName` is omitted
    ## - if set to "-", then `PersistentVolumeClaim/spec.storageClassName` is set to ""
    ##
    storageClass: ""

    ## the access mode of the PVC
    ##
    ## WARNING:
    ## - must be: `ReadWriteMany`
    ##
    ## NOTE:
    ## - different StorageClass support different access modes:
    ##   https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes
    ##
    accessMode: ReadWriteMany

    ## the size of PVC to request
    ##
    size: 1Gi

###################################
# Airflow - DAGs Configs
###################################
dags:
  ## the airflow dags folder
  ##
  path: /opt/airflow/dags

  ## whether to disable pickling dags from the scheduler to workers
  ##
  ## NOTE:
  ## - sets AIRFLOW__CORE__DONOT_PICKLE
  ##
  doNotPickle: false

  ## install any Python `requirements.txt` at the root of `dags.path` automatically
  ##
  ## WARNING:
  ## - if set to true, and you are using `dags.git.gitSync`, you must also enable
  ## `dags.initContainer` to ensure the requirements.txt is available at Pod start
  ##
  installRequirements: false

  ## configs for the dags PVC
  ##
  persistence:
    ## if a persistent volume is mounted at `dags.path`
    ##
    enabled: false

    ## the name of an existing PVC to use
    ##
    existingClaim: ""

    ## sub-path under `dags.persistence.existingClaim` to use
    ##
    subPath: ""

    ## the name of the StorageClass used by the PVC
    ##
    ## NOTE:
    ## - if set to "", then `PersistentVolumeClaim/spec.storageClassName` is omitted
    ## - if set to "-", then `PersistentVolumeClaim/spec.storageClassName` is set to ""
    ##
    storageClass: ""

    ## the access mode of the PVC
    ##
    ## WARNING:
    ## - must be one of: `ReadOnlyMany` or `ReadWriteMany`
    ##
    ## NOTE:
    ## - different StorageClass support different access modes:
    ##   https://kubernetes.io/docs/concepts/storage/persistent-volumes/#access-modes
    ##
    accessMode: ReadOnlyMany

    ## the size of PVC to request
    ##
    size: 1Gi

  ## configs for the DAG git repository & sync container
  ##
  git:
    ## url of the git repository
    ##
    ## EXAMPLE: (HTTP)
    ##   url: "https://github.com/torvalds/linux.git"
    ##
    ## EXAMPLE: (SSH)
    ##   url: "ssh://git@github.com:torvalds/linux.git"
    ##
    url: ""

    ## the branch/tag/sha1 which we clone
    ##
    ref: master

    ## the name of a pre-created secret containing files for ~/.ssh/
    ##
    ## NOTE:
    ## - this is ONLY RELEVANT for SSH git repos
    ## - the secret commonly includes files: id_rsa, id_rsa.pub, known_hosts
    ## - known_hosts is NOT NEEDED if `git.sshKeyscan` is true
    ##
    secret: ""

    ## if we should implicitly trust [git.repoHost]:git.repoPort, by auto creating a ~/.ssh/known_hosts
    ##
    ## WARNING:
    ## - setting true will increase your vulnerability ot a repo spoofing attack
    ##
    ## NOTE:
    ## - this is ONLY RELEVANT for SSH git repos
    ## - this is not needed if known_hosts is provided in `git.secret`
    ## - git.repoHost and git.repoPort ARE REQUIRED for this to work
    ##
    sshKeyscan: false

    ## the name of the private key file in your `git.secret`
    ##
    ## NOTE:
    ## - this is ONLY RELEVANT for PRIVATE SSH git repos
    ##
    privateKeyName: id_rsa

    ## the host name of the git repo
    ##
    ## NOTE:
    ## - this is ONLY REQUIRED for SSH git repos
    ##
    ## EXAMPLE:
    ##   repoHost: "github.com"
    ##
    repoHost: ""

    ## the port of the git repo
    ##
    ## NOTE:
    ## - this is ONLY REQUIRED for SSH git repos
    ##
    repoPort: 22

    ## configs for the git-sync container
    ##
    gitSync:
      ## enable the git-sync sidecar container
      ##
      enabled: false

      ## resource requests/limits for the git-sync container
      ##
      ## NOTE:
      ## - when `workers.autoscaling` is true, YOU MUST SPECIFY a resource request
      ##
      ## EXAMPLE:
      ##   resources:
      ##     requests:
      ##       cpu: "50m"
      ##       memory: "64Mi"
      ##
      resources: {}

      ## the docker image for the git-sync container
      image:
        repository: alpine/git
        tag: latest
        ## values: Always or IfNotPresent
        pullPolicy: Always

      ## the git sync interval in seconds
      ##
      refreshTime: 60

  ## configs for the git-clone container
  ##
  ## NOTE:
  ## - use this container if you want to only clone the external git repo
  ##   at Pod start-time, and not keep it synchronised afterwards
  ##
  initContainer:
    ## enable the git-clone sidecar container
    ##
    ## NOTE:
    ## - this is NOT required for the git-sync sidecar to work
    ## - this is mostly used for when `dags.installRequirements` is true to ensure that
    ##   requirements.txt is available at Pod start
    ##
    enabled: false

    ## resource requests/limits for the git-clone container
    ##
    ## EXAMPLE:
    ##   resources:
    ##     requests:
    ##       cpu: "50m"
    ##       memory: "64Mi"
    ##
    resources: {}

    ## the docker image for the git-clone container
    image:
      repository: alpine/git
      tag: latest
      ## values: Always or IfNotPresent
      pullPolicy: Always

    ## path to mount dags-data volume to
    ##
    ## WARNING:
    ## - this path is also used by the git-sync container
    ##
    mountPath: "/dags"

    ## sub-path under `dags.initContainer.mountPath` to sync dags to
    ##
    ## WARNING:
    ## - this path is also used by the git-sync container
    ## - this MUST INCLUDE the leading /
    ##
    ## EXAMPLE:
    ##   syncSubPath: "/subdirWithDags"
    ##
    syncSubPath: ""

###################################
# Kubernetes - Ingress Configs
###################################
ingress:
  ## if we should deploy Ingress resources
  ##
  ## NOTE:
  ## - if you want to change url prefix for web ui or flower (even if you do not use this Ingress),
  ##   you can change `web.baseUrl` and `flower.urlPrefix`
  ##
  enabled: false

  ## configs for the Ingress of the web Service
  ##
  web:
    ## annotations for the web Ingress
    ##
    annotations: {}

    ## additional labels for the web Ingress
    ##
    labels: {}

    ## the path for the web Ingress
    ##
    ## WARNING:
    ## - do NOT include the trailing slash (for root, set an empty string)
    ##
    ## NOTE:
    ## - should be compatible with `web.baseUrl` config
    ##
    ## EXAMPLE: (if set to "/airflow")
    ## - UI:     http://example.com/airflow/admin
    ## - API:    http://example.com/airflow/api
    ## - HEALTH: http://example.com/airflow/health
    ##
    path: ""

    ## the hostname for the web Ingress
    ##
    host: ""

    ## the livenessPath for the web Ingress
    ##
    ## NOTE:
    ## - if set to "", defaults to: `{ingress.web.path}/health`
    ##
    livenessPath: ""

    ## configs for web Ingress TLS
    ##
    tls:
      ## enable TLS termination for the web Ingress
      ##
      enabled: false

      ## the name of a pre-created Secret containing a TLS private key and certificate
      ##
      ## NOTE:
      ## - this MUST be specified if `ingress.web.tls.enabled` is true
      ##
      secretName: ""

    ## http paths to add to the web Ingress before the default path
    ##
    ## EXAMPLE:
    ##   precedingPaths:
    ##     - path: "/*"
    ##       serviceName: "ssl-redirect"
    ##       servicePort: "use-annotation"
    ##
    precedingPaths: []

    ## http paths to add to the web Ingress after the default path
    ##
    ## EXAMPLE:
    ##   succeedingPaths:
    ##     - path: "/extra-service"
    ##       serviceName: "extra-service"
    ##       servicePort: "use-annotation"
    ##
    succeedingPaths: []

  ## configs for the Ingress of the flower Service
  ##
  flower:
    ## annotations for the flower Ingress
    ##
    annotations: {}

    ## additional labels for the flower Ingress
    ##
    labels: {}

    ## the path for the flower Ingress
    ##
    ## WARNING:
    ## - do NOT include the trailing slash (for root, set an empty string)
    ##
    ## NOTE:
    ## - should match `flower.urlPrefix` config
    ##
    ## EXAMPLE: (if set to "/airflow/flower")
    ## - UI: http://example.com/airflow/flower
    ##
    path: ""

    ## the hostname for the flower Ingress
    ##
    host: ""

    ## the livenessPath for the flower Ingress
    ##
    ## WARNING:
    ## - keep the trailing slash
    ##
    ## NOTE:
    ## - if set to "", defaults to: `{ingress.flower.path}/`
    ##
    livenessPath: ""

    ## configs for flower Ingress TLS
    ##
    tls:
      ## enable TLS termination for the flower Ingress
      ##
      enabled: false

      ## the name of a pre-created Secret containing a TLS private key and certificate
      ##
      ## NOTE:
      ## - this MUST be specified if `ingress.flower.tls.enabled` is true
      ##
      secretName: ""

    ## http paths to add to the flower Ingress before the default path
    ##
    ## EXAMPLE:
    ##   precedingPaths:
    ##     - path: "/*"
    ##       serviceName: "ssl-redirect"
    ##       servicePort: "use-annotation"
    ##
    precedingPaths: []

    ## http paths to add to the flower Ingress after the default path
    ##
    ## EXAMPLE:
    ##   succeedingPaths:
    ##     - path: "/extra-service"
    ##       serviceName: "extra-service"
    ##       servicePort: "use-annotation"
    ##
    succeedingPaths: []

###################################
# Kubernetes - RBAC
###################################
rbac:
  ## if Kubernetes RBAC resources are created
  ##
  ## NOTE:
  ## - these allow the service account to create/delete Pods in the airflow namespace,
  ##   which is required for the KubernetesPodOperator() to function
  ##
  create: true

  ## if the created RBAC Role has GET/LIST on Event resources
  ##
  ## NOTE:
  ## - this is needed for KubernetesPodOperator() to use `log_events_on_failure=True`
  ##
  events: false

###################################
# Kubernetes - Service Account
###################################
serviceAccount:
  ## if a Kubernetes ServiceAccount is created
  ##
  ## NOTE:
  ## - if false, you must create the service account outside of this helm chart,
  ##   with the name: `serviceAccount.name`
  ##
  create: true

  ## the name of the ServiceAccount
  ##
  ## NOTE:
  ## - by default the name is generated using the `airflow.serviceAccountName` template in `_helpers.tpl`
  ##
  name: ""

  ## annotations for the ServiceAccount
  ##
  ## EXAMPLE: (to use WorkloadIdentity in Google Cloud)
  ##   annotations:
  ##     iam.gke.io/gcp-service-account<EMAIL_ADDRESS>  ##
  annotations: {}

###################################
# Kubernetes - Extra Manifests
###################################
## additional Kubernetes manifests to include with this chart
##
## EXAMPLE:
##   extraManifests:
##    - apiVersion: cloud.google.com/v1beta1
##      kind: BackendConfig
##      metadata:
##        name: "{{ .Release.Name }}-test"
##      spec:
##        securityPolicy:
##          name: "gcp-cloud-armor-policy-test"
##
extraManifests: []

###################################
# Database - PostgreSQL Chart
# - https://github.com/helm/charts/tree/master/stable/postgresql
###################################
postgresql:
  ## if the `stable/postgresql` chart is used
  ##
  ## WARNING:
  ## - this is NOT SUITABLE for production deployments of Airflow,
  ##   you should seriously consider using an external database service,
  ##   which can be configured with values under: `externalDatabase`
  ##
  ## NOTE:
  ## - set to `false` if using an external database
  ##
  enabled: false

  # ## the postgres database to use
  # ##
  # postgresqlDatabase: airflow

  # ## the postgres user to create
  # ##
  # postgresqlUsername: postgres

  # ## the postgres user's password
  # ##
  # ## WARNING:
  # ## - you should NOT use this, instead specify `postgresql.existingSecret`
  # ##
  # postgresqlPassword: airflow

  # ## the name of a pre-created secret containing the postgres password
  # ##
  # existingSecret: "airflow-postgresql"

  # ## the key within `postgresql.existingSecret` containing the password string
  # ##
  # existingSecretKey: "postgresql-password"

  # ## configs for the PVC of postgresql
  # ##
  # persistence:
  #   ## if postgres will use Persistent Volume Claims to store data
  #   ##
  #   ## WARNING:
  #   ## - if false, data will be LOST as postgres Pods restart
  #   ##
  #   enabled: true

  #   ## the name of the StorageClass used by the PVC
  #   ##
  #   storageClass: ""

  #   ## the access modes of the PVC
  #   ##
  #   accessModes:
  #     - ReadWriteOnce

  #   ## the size of PVC to request
  #   ##
  #   size: 8Gi

  # ## configs for the postgres StatefulSet
  # master:
  #   ## annotations for the postgres Pod
  #   ##
  #   podAnnotations:
  #     cluster-autoscaler.kubernetes.io/safe-to-evict: "true"

###################################
# Database - External Database
# - these configs are only used when `postgresql.enabled` is false
###################################
externalDatabase:
  ## the type of external database: {mysql,postgres}
  ##
  type: mysql

  ## the host of the external database
  ##
  host: <YOUR IP if using local minikube eg. 192.XXX.XX.XX else use cloud_DB uri>

  ## the port of the external database
  ##
  port: 3306

  ## the database/scheme to use within the the external database
  ##
  database: airflow

  ## the user of the external database
  ##
  user: airflow

  ## the name of a pre-created secret containing the external database password
  ##
  passwordSecret: "airflow-mysql"

  ## the key within `externalDatabase.passwordSecret` containing the password string
  ##
  passwordSecretKey: "mysql-password"

  ## the connection properties for external database, e.g. "?sslmode=require"
  ##properties: ""

###################################
# Database - Redis Chart
# - https://github.com/helm/charts/tree/master/stable/redis
###################################
redis:
  ## if the `stable/redis` chart is used
  ##
  ## NOTE:
  ## - set to `false` if using an external redis database
  ## - set to `false` if `airflow.executor` is `KubernetesExecutor`
  ##
  enabled: false

  ## the redis password
  ##
  ## WARNING:
  ## - you should NOT use this, instead specify `redis.existingSecret`
  ##
  password: airflow

  ## the name of a pre-created secret containing the redis password
  ##
  existingSecret: ""

  ## the key within `redis.existingSecret` containing the password string
  ##
  existingSecretPasswordKey: "redis-password"

  ## configs for redis cluster mode
  ##
  cluster:
    ## if redis runs in cluster mode
    ##
    enabled: false

    ## the number of redis slaves
    ##
    slaveCount: 1

  ## configs for the redis master
  ##
  master:
    ## resource requests/limits for the master Pod
    ##
    ## EXAMPLE:
    ##   resources:
    ##     requests:
    ##       cpu: "100m"
    ##       memory: "256Mi"
    ##
    resources: {}

    ## annotations for the master Pod
    ##
    podAnnotations:
      cluster-autoscaler.kubernetes.io/safe-to-evict: "true"

    ## configs for the PVC of the redis master
    ##
    persistence:
      ## use a PVC to persist data
      ##
      enabled: false

      ## the name of the StorageClass used by the PVC
      ##
      storageClass: ""

      ## the access mode of the PVC
      ##
      accessModes:
      - ReadWriteOnce

      ## the size of PVC to request
      ##
      size: 8Gi

  ## configs for the redis slaves
  ##
  slave:
    ## resource requests/limits for the slave Pods
    ##
    ## EXAMPLE:
    ##   resources:
    ##     requests:
    ##       cpu: "100m"
    ##       memory: "256Mi"
    ##
    resources: {}

    ## annotations for the slave Pods
    ##
    podAnnotations:
      cluster-autoscaler.kubernetes.io/safe-to-evict: "true"

    ## configs for the PVC of the redis slaves
    ##
    persistence:
      ## use a PVC to persist data
      ##
      enabled: false

      ## the name of the StorageClass used by the PVC
      ##
      storageClass: ""

      ## the access mode of the PVC
      ##
      accessModes:
        - ReadWriteOnce

      ## the size of PVC to request
      ##
      size: 8Gi

###################################
# Database - External Database
# - these configs are only used when `redis.enabled` is false
###################################
externalRedis:
  ## the host of the external redis
  ##
  host: localhost

  ## the port of the external redis
  ##
  port: 6379

  ## the database number to use within the the external redis
  ##
  databaseNumber: 1

  ## the name of a pre-created secret containing the external redis password
  ##
  passwordSecret: ""

  ## the key within `externalRedis.passwordSecret` containing the password string
  ##
  passwordSecretKey: "redis-password"

###################################
# Prometheus - ServiceMonitor
###################################
serviceMonitor:
  ## if the ServiceMonitor resources should be deployed
  ##
  ## WARNING:
  ## - you will need an exporter in your airflow docker container, for example:
  ##   https://github.com/epoch8/airflow-exporter
  ##
  ## NOTE:
  ## - you can install pip packages with `airflow.extraPipPackages`
  ## - ServiceMonitor is a resource from: https://github.com/coreos/prometheus-operator
  ##
  enabled: false

  ## labels for ServiceMonitor, so that Prometheus can select it
  ##
  selector:
    prometheus: kube-prometheus

  ## the ServiceMonitor web endpoint path
  ##
  path: /admin/metrics

  ## the ServiceMonitor web endpoint interval
  ##
  interval: "30s"

###################################
# Prometheus - PrometheusRule
###################################
prometheusRule:
  ## if the PrometheusRule resources should be deployed
  ##
  ## WARNING:
  ## - you will need an exporter in your airflow docker container, for example:
  ##   https://github.com/epoch8/airflow-exporter
  ##
  ## NOTE:
  ## - you can install pip packages with `airflow.extraPipPackages`
  ## - PrometheusRule a resource from: https://github.com/coreos/prometheus-operator
  ##
  enabled: false

  ## labels for PrometheusRule, so that Prometheus can select it
  ##
  additionalLabels: {}

  ## alerting rules for Prometheus
  ##
  ## NOTE:
  ## - documentation: https://prometheus.io/docs/prometheus/latest/configuration/alerting_rules/
  ##
  groups: []

@darsi-an use the GUNICORN_CMD_ARGS environment variable to try those gunicorn.conf configs you think will work, see here for the list of gunicorn command line configs.
NOTE: you can set environment variables with the airflow.config value.
If you figure out a set of configs are important for EKS, please report back.

I will, once I get it running. Deploying this locally works btw.
I have some questions,

What would prevent airflow-web from failing to deploy on a basic EKS deployment? Are there any resource requirements for the airflow-web deployment?
I am unable to expose the webserver through ingress, from what I'm told airflow-stable does not support multiple ingress annotations which is needed to exposes the web-service correctly by way of an ingress resource #12619.
Have you seen or know anyone that got it deployed on EKS backed up Fargate?

Does the heml chart support include cluster role bindings?

Does the heml chart support include cluster role bindings?

Cluster role binding is missing for 1.10.12, I'll open a separate discussion and PR support Airflow 2.0. I am closing this issue for now.

Cluster role binding is missing for 1.10.12, I'll open a separate discussion and PR support Airflow 2.0. I am closing this issue for now.

@darsi-an it seems like some of the questions you raised should be put into their own issues.
For example, your comment about the multiple ingress annotations and fargate.


NixOS: nixos-rebuild fails with memory allocation for gzip -d

Describe the bug
nixos-rebuild fails with install-info: Cannot allocate memory for gzip -d
This should not be an actual OOM error since my system has 32GB of ram and was using around 4GB at the time of trying to switch
To Reproduce
Steps to reproduce the behavior:

Update to the latest nixos-unstable from the nixpkgs github (if you're on flakes)
Change configuration and attempt to rebuild

Expected behavior
A clear and concise description of what you expected to happen.
For the system to rebuild and properly switch
Metadata
 - system: `"x86_64-linux"`
 - host os: `Linux 5.11.16-zen1, NixOS, 21.05+patch-01ba471 (Okapi)`
 - multi-user?: `yes`
 - sandbox: `yes`
 - version: `nix-env (Nix) 2.4pre20210503_6d2553a`
 - nixpkgs: `/nix/var/nix/profiles/per-user/root/channels/nixos`

I have also have what appears to be the same problem . I updated my flake today (also on unstable), and since doing so I am unable to rebuild and switch. I get the following error:
error: builder for '/nix/store/b2h9l993pxf6r2rib50v72ryy8kkz6dl-user-environment.drv' failed with exit code 1;
       last 2 log lines:
> created 332 symlinks in user environment
> install-info: Cannot allocate memory for gzip -d
       For full logs, run 'nix log /nix/store/b2h9l993pxf6r2rib50v72ryy8kkz6dl-user-environment.drv'.
error: 1 dependencies of derivation '/nix/store/9af961nx18fbljiaqi8y0gdv0ixpyff1-etc.drv' failed to build
error: 1 dependencies of derivation '/nix/store/6yv7lrlzgbxyq8w9d18r8w4zwciq60pn-nixos-system-noddo-21.05.20210523.900115a.drv' failed to build
error: getting status of '/tmp/nixos-rebuild.6bYmNV/result': No such file or directory

Likewise, I do not believe this to be an actual OOM. Using a VM with 4GB RAM. Fresh startup with RAM usage sitting at ~500MB. Memory usage on htop doesn't go above 1.35GB. The same config, previously working before updating flake, was fine on a VM with only 3GB...

I'm having this issue after updating my flake inputs recently. The computer I'm having this issue on also uses 32GB of RAM.
I have another computer using the same flake that builds it fine and has 16GB of RAM.

I am having this issue in a non-flakes environment. There's been some fun discussion over on the #nix:nixos.org Matrix room. This is not an OOM, there's some other issue. I'm going to try and bisect.

@sumnerevans I got the error as far back as a73020b2a150322c9832b50baeb0296ba3b13dd7 which is 1 month ago. That makes me think that my nix store or something has been put in a bad state by the recent nixpkgs update?

@codygman I think you are right. I'm seeing the same thing. Let me try and figure out how to fix the store...

Right running sudo nix store repair --all fails with error: cannot repair path '/nix/store/*-source.drv'

@cidkidnix I get the same error, but with:
error: cannot repair path '/nix/store/000sn4jyizvclw51bdkn4vj05b4pzy5m-texlive-pgf-3.1.8b.drv'

Assuming that it is an issue with the nix store being corrupted or borked, we probably should use this as a tracking issue as this is probably caused by something else.

Right I'm running a doas nix-store --verify --check-contents right now to see if any paths are messed up, repairing the store path that fails for me with doas nix store repair /nix/store/path doesn't actually do anything

doas nix-store --verify --check-contents doesn't output anything of any worry

I used sudo nix-channel --rollback multiple times to get to older versions of nixpkgs that were known to work for my config in the past, but I'm getting errors. It seems like any time I have to rebuild any of the system, it fails.

documentation.info.enable = false; Fixes it but that means that GNU Texlive is broken in nixpkgs at the moment and probably needs to be fixed and pushed ASAP

I'm affected by this issue as well. Currently cannot deploy to any of my systems due to it.
I attempted  documentation.info.enable = false, but it had no effect on the issue for me on my AArch64 systems. It does, however, work around the problem on my x86 systems.

Not sure if its related but as mentioned here when I encounter this issue the result of nix show-config | grep sandbox-paths is sandbox-paths = (empty value). If I rollback to a previous generation it fixes the issue and indeed nix show-config | grep sandbox-paths yields sandbox-paths = /bin/sh=/nix/store/br5d32rv4y1qpm3bibwwn7birmpjf0hk-busybox-static-x86_64-unknown-linux-musl-1.32.1/bin/busybox.

I also have this issue seems related with #107216
however, I tried to change turn off sandbox option rebuild success then I can build with sandbox :confused:

I can confirm that the solution from worldofpeace  (nix.sandboxPaths = [ "/bin/sh" ];) has fixed the problem for me - so far at least (thanks for the hint @mdevlamynck)

also cc @NixOS/release-engineers
@sumnerevans does "non-flake" environment mean that you're on Nix 2.3? If yes, then this is a blocker.

This is already fixed on master: #124237
If you are unable to nixos-rebuild switch, then you need to manually remove the sandbox-paths = option from /etc/nix/nix.conf first.

I can confirm that the solution from worldofpeace (nix.sandboxPaths = [ "/bin/sh=${pkgs.bash}/bin/sh" ];) has fixed the problem for me - so far at least (thanks for the hint @mdevlamynck)

Also I can confirm (nix.sandboxPaths = [ "/bin/sh=${pkgs.bash}/bin/sh" ];) solved almost same issue for me...
I had something like...
building the system configuration... system-path> created 8688 symlinks in user environment system-path> install-info: Cannot allocate memory for gzip -d error: builder for '/nix/store/ixc1zymaf5pgvd56gv3hm128pdx4m50c-system-path.drv' failed with exit code 1 error: 1 dependencies of derivation '/nix/store/y4kljqbyb3g0vdywlhaf3rq8q6gs6zr9-nixos-system-nixos-21.05.20210523.900115a.drv' failed to build error: getting status of '/tmp/nixos-rebuild.bF5ER4/result': No such file or directory

It didn't work for me in devos, but I think that's an issue with my lack of knowledge :sweat_smile:

@sumnerevans does "non-flake" environment mean that you're on Nix 2.3? If yes, then this is a blocker.

I am on Nix 2.4pre20210503_6d2553a, but I am not using flakes for my config.

It didn't work for me in devos, but I think that's an issue with my lack of knowledge

so first go ahead and update the nixos input @codygman, but since this issue is messing up your existing nix.conf, you'll also need to call nixos-rebuild with an extra option: --option extra-sandbox-paths "/bin/sh=/nix/store/<bash-derivation>/bin/sh", this should update your system to a revision that includes the fix

I'm getting a ./configure: /bin/sh: bad interpreter: No such file or directory even when running with --option extra-sandbox-paths ... for different derivations (currently lucidatypewriter)

An even easier workaround is to just roll back your NixOS version to one without broken nix-daemon.

Only reason I didn't do that is because I deleted my previous generations yesterday :sweat_smile:

I'm getting a ./configure: /bin/sh: bad interpreter: No such file or directory even when running with --option extra-sandbox-paths ... for different derivations (currently lucidatypewriter)

hmm, so that's the exact error that I got before I used the extra-sandbox-paths option. Does your <bash-derivaton> contain a full path to sh living in the nix/store? For example, mine was:
"/bin/sh=/nix/store/fgbzvd4c6nly9m4dpczrxybdpkm8mnk3-bash-interactive-4.4-p23/bin/sh"

I'm getting a ./configure: /bin/sh: bad interpreter: No such file or directory even when running with --option extra-sandbox-paths ... for different derivations (currently lucidatypewriter)

This has never worked, you need to do patchShebangs configure, or if the command is embedded, you would need to do a substituteInPlace

install-info: Cannot allocate memory for gzip -d

To workaround this problem:

Set your system to master.
Activate it using it:
nixos-rebuild switch --option extra-sandbox-paths "/bin/sh=$(readlink -f $(which bash))"

It works.

An even easier workaround is to just roll back your NixOS version to one without broken nix-daemon.
Even temporarily is enough: sudo /nix/var/nix/profiles/system-version-before-update/bin/switch-to-configuration test

I had already deleted mine since on my other machine there where no problems 😆

Can we pin this issue for a few days or something? Its rather important for all ppl that follow master closely.

This issue has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/install-info-cannot-allocate-memory-for-gzip-d/13343/2

This issue has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/getting-help-with-dulwich-build-failure-on-unstable/13321/2

This issue has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/getting-help-with-dulwich-build-failure-on-unstable/13321/4

This issue has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/getting-help-with-dulwich-build-failure-on-unstable/13321/5

Encountered on standalone nixos using Armbian 24.2.1 for OLIMEX Teres-I while trying to install NixOS
[nix-shell:/mnt/etc/nixos]# nixos-install --root /mnt --keep-going
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
building the configuration in /mnt/etc/nixos/configuration.nix...
these 17 derivations will be built:
  /nix/store/1znl8y6c2bxl56jvfig0zjpa0l4q22y6-xsession-wrapper.drv
  /nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv
  /nix/store/4s73mynh921qlzd48jdi2kl1bva4cp1j-etc-pam-environment.drv
  /nix/store/jk140xzg32svpv8j0wfa7vbm2m3s8w7b-set-environment.drv
  /nix/store/5qdvhi9l1b8m20j71nnd9i04jkv4pfm3-etc-profile.drv
  /nix/store/75lk75zxihb0ipryqh7i5pldkah9s14v-unit-accounts-daemon.service.drv
  /nix/store/z24d1h5m7p757a45mnq7gvc62gv7p8r3-X-Restart-Triggers-polkit.drv
  /nix/store/85bmcdl7m20p5v8hmgi53w5283mf39zb-unit-polkit.service.drv
  /nix/store/8dq9f84pj7kr01d0qg39zvdp1ms8ayx9-dbus-1.drv
  /nix/store/jbji9x6mb6rjfkpi7nn7xfizsxgzq3pr-X-Restart-Triggers-dbus.drv
  /nix/store/hn4qckrngcr7krbjy3l4sb47wcfzrazz-unit-dbus.service.drv
  /nix/store/66593hd41ga21c1arj5ch7izakv9ls9q-system-units.drv
  /nix/store/7s7zlyn2wklcjmp7sx97bdnzvl3583r0-xscreensaver.pam.drv
  /nix/store/6ys8isl32s5yxxpj5z2sff5vv3r7ad34-unit-dbus.service.drv
  /nix/store/pc69zlqpnzqxwnhb4qi38wax9whjc491-user-units.drv
  /nix/store/gqvlfbqn77bx2brgacpxc1kh8lw52vk5-etc.drv
  /nix/store/0drd1k1g1v2r380a2ib74vi8fcsbkmxk-nixos-system-tsvetan-23.11.7181.bacb8503d3a5.drv
building '/nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv'...
created 15422 symlinks in user environment
install-info: No such file or directory for gzip -d
error: builder for '/nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv' failed with exit code 1
error: 1 dependencies of derivation '/nix/store/z24d1h5m7p757a45mnq7gvc62gv7p8r3-X-Restart-Triggers-polkit.drv' failed to build
error: 1 dependencies of derivation '/nix/store/8dq9f84pj7kr01d0qg39zvdp1ms8ayx9-dbus-1.drv' failed to build
error: 1 dependencies of derivation '/nix/store/4s73mynh921qlzd48jdi2kl1bva4cp1j-etc-pam-environment.drv' failed to build
error: 1 dependencies of derivation '/nix/store/jk140xzg32svpv8j0wfa7vbm2m3s8w7b-set-environment.drv' failed to build
error: 1 dependencies of derivation '/nix/store/75lk75zxihb0ipryqh7i5pldkah9s14v-unit-accounts-daemon.service.drv' failed to build
error: 1 dependencies of derivation '/nix/store/jbji9x6mb6rjfkpi7nn7xfizsxgzq3pr-X-Restart-Triggers-dbus.drv' failed to build
error: 1 dependencies of derivation '/nix/store/5qdvhi9l1b8m20j71nnd9i04jkv4pfm3-etc-profile.drv' failed to build
error: 1 dependencies of derivation '/nix/store/85bmcdl7m20p5v8hmgi53w5283mf39zb-unit-polkit.service.drv' failed to build
building '/nix/store/7s7zlyn2wklcjmp7sx97bdnzvl3583r0-xscreensaver.pam.drv'...
error: 1 dependencies of derivation '/nix/store/6ys8isl32s5yxxpj5z2sff5vv3r7ad34-unit-dbus.service.drv' failed to build
error: 1 dependencies of derivation '/nix/store/hn4qckrngcr7krbjy3l4sb47wcfzrazz-unit-dbus.service.drv' failed to build
error: 3 dependencies of derivation '/nix/store/66593hd41ga21c1arj5ch7izakv9ls9q-system-units.drv' failed to build
error: 1 dependencies of derivation '/nix/store/pc69zlqpnzqxwnhb4qi38wax9whjc491-user-units.drv' failed to build
building '/nix/store/1znl8y6c2bxl56jvfig0zjpa0l4q22y6-xsession-wrapper.drv'...
error: 7 dependencies of derivation '/nix/store/gqvlfbqn77bx2brgacpxc1kh8lw52vk5-etc.drv' failed to build
error: 2 dependencies of derivation '/nix/store/0drd1k1g1v2r380a2ib74vi8fcsbkmxk-nixos-system-tsvetan-23.11.7181.bacb8503d3a5.drv' failed to build

[nix-shell:/mnt/etc/nixos]# nix log /nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv
error: path '/nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv' is not a valid store path

[nix-shell:/mnt/etc/nixos]# nix store repair --all
error: cannot repair path '/nix/store/1xghqp6fb131ybs5akb78p6kw4rqrl5l-bootstrap-stage0-stdenv-linux.drv'

[nix-shell:/mnt/etc/nixos]# doas nix-store --verify --check-contents
bash: doas: command not found

[nix-shell:/mnt/etc/nixos]# nix-store --verify --check-contents
reading the Nix store...
checking path existence...
checking link hashes...
checking store hashes...

[nix-shell:/mnt/etc/nixos]# vim /mnt/etc/^C

[nix-shell:/mnt/etc/nixos]# vim configuration.nix

[nix-shell:/mnt/etc/nixos]# nixos-install --root /mnt --option extra-sandbox-paths "/bin/sh=$(readlink -f $(which bash))"
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
building the configuration in /mnt/etc/nixos/configuration.nix...
these 15 derivations will be built:
  /nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv
  /nix/store/4s73mynh921qlzd48jdi2kl1bva4cp1j-etc-pam-environment.drv
  /nix/store/jk140xzg32svpv8j0wfa7vbm2m3s8w7b-set-environment.drv
  /nix/store/5qdvhi9l1b8m20j71nnd9i04jkv4pfm3-etc-profile.drv
  /nix/store/75lk75zxihb0ipryqh7i5pldkah9s14v-unit-accounts-daemon.service.drv
  /nix/store/z24d1h5m7p757a45mnq7gvc62gv7p8r3-X-Restart-Triggers-polkit.drv
  /nix/store/85bmcdl7m20p5v8hmgi53w5283mf39zb-unit-polkit.service.drv
  /nix/store/8dq9f84pj7kr01d0qg39zvdp1ms8ayx9-dbus-1.drv
  /nix/store/jbji9x6mb6rjfkpi7nn7xfizsxgzq3pr-X-Restart-Triggers-dbus.drv
  /nix/store/hn4qckrngcr7krbjy3l4sb47wcfzrazz-unit-dbus.service.drv
  /nix/store/66593hd41ga21c1arj5ch7izakv9ls9q-system-units.drv
  /nix/store/6ys8isl32s5yxxpj5z2sff5vv3r7ad34-unit-dbus.service.drv
  /nix/store/pc69zlqpnzqxwnhb4qi38wax9whjc491-user-units.drv
  /nix/store/gqvlfbqn77bx2brgacpxc1kh8lw52vk5-etc.drv
  /nix/store/0drd1k1g1v2r380a2ib74vi8fcsbkmxk-nixos-system-tsvetan-23.11.7181.bacb8503d3a5.drv
building '/nix/store/hghxhjjmwc4mrp6szrfhv2x7l2i8gnvv-system-path.drv'...
created 15422 symlinks in user environment
gtk-update-icon-cache: Cache file created successfully.
building '/nix/store/z24d1h5m7p757a45mnq7gvc62gv7p8r3-X-Restart-Triggers-polkit.drv'...
building '/nix/store/8dq9f84pj7kr01d0qg39zvdp1ms8ayx9-dbus-1.drv'...
building '/nix/store/4s73mynh921qlzd48jdi2kl1bva4cp1j-etc-pam-environment.drv'...
building '/nix/store/jbji9x6mb6rjfkpi7nn7xfizsxgzq3pr-X-Restart-Triggers-dbus.drv'...
building '/nix/store/jk140xzg32svpv8j0wfa7vbm2m3s8w7b-set-environment.drv'...
building '/nix/store/75lk75zxihb0ipryqh7i5pldkah9s14v-unit-accounts-daemon.service.drv'...
building '/nix/store/5qdvhi9l1b8m20j71nnd9i04jkv4pfm3-etc-profile.drv'...
building '/nix/store/6ys8isl32s5yxxpj5z2sff5vv3r7ad34-unit-dbus.service.drv'...
building '/nix/store/hn4qckrngcr7krbjy3l4sb47wcfzrazz-unit-dbus.service.drv'...
building '/nix/store/85bmcdl7m20p5v8hmgi53w5283mf39zb-unit-polkit.service.drv'...
building '/nix/store/pc69zlqpnzqxwnhb4qi38wax9whjc491-user-units.drv'...
building '/nix/store/66593hd41ga21c1arj5ch7izakv9ls9q-system-units.drv'...
building '/nix/store/gqvlfbqn77bx2brgacpxc1kh8lw52vk5-etc.drv'...
building '/nix/store/0drd1k1g1v2r380a2ib74vi8fcsbkmxk-nixos-system-tsvetan-23.11.7181.bacb8503d3a5.drv'...
/nix/store/dinb0xw1izk7wyh7ign2ds2ki2zi5ii7-nixos-system-tsvetan-23.11.7181.bacb8503d3a5
installing the boot loader...
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
setting up /etc...
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
/nix/var/nix/profiles/system/sw/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
Initializing machine ID from random generator.
File system "/dev/mmcblk2p2" has wrong type for an EFI System Partition (ESP).
Traceback (most recent call last):
  File "/nix/store/wxz9ap7mlklyfnhphb1q8s8i5131b5sg-systemd-boot/bin/systemd-boot-builder", line 343, in <module>
    main()
  File "/nix/store/wxz9ap7mlklyfnhphb1q8s8i5131b5sg-systemd-boot/bin/systemd-boot-builder", line 331, in main
    install_bootloader(args)
  File "/nix/store/wxz9ap7mlklyfnhphb1q8s8i5131b5sg-systemd-boot/bin/systemd-boot-builder", line 256, in install_bootloader
    subprocess.check_call(["/nix/store/l533347li9f4zikb3lw9hpdcvxf2i811-systemd-254.10/bin/bootctl", "--esp-path=/boot"] + bootctl_flags + ["install"])
  File "/nix/store/ag5i94r7jjlyws36jmyl4kw0ps4lfgaw-python3-3.11.8/lib/python3.11/subprocess.py", line 413, in check_call
    raise CalledProcessError(retcode, cmd)
subprocess.CalledProcessError: Command '['/nix/store/l533347li9f4zikb3lw9hpdcvxf2i811-systemd-254.10/bin/bootctl', '--esp-path=/boot', '--no-variables', 'install']' returned non-zero exit status 1.
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
setting up /etc...
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
/nix/var/nix/profiles/system/sw/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
setting up /etc...
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
	LANGUAGE = "en_US.UTF-8",
	LC_ALL = "cs_CZ.UTF-8",
	LC_MESSAGES = "en_US.UTF-8",
	LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
/nix/var/nix/profiles/system/sw/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
setting root password...
New password:
Retype new password:
passwd: password updated successfully
installation finished!

[nix-shell:/mnt/etc/nixos]# cat /etc/os-release
PRETTY_NAME="Armbian 24.2.1 bookworm"
NAME="Debian GNU/Linux"
VERSION_ID="12"
VERSION="12 (bookworm)"
VERSION_CODENAME=bookworm
ID=debian
HOME_URL="https://www.armbian.com"
SUPPORT_URL="https://forum.armbian.com"
BUG_REPORT_URL="https://www.armbian.com/bugs"
ARMBIAN_PRETTY_NAME="Armbian 24.2.1 bookworm"

[nix-shell:/mnt/etc/nixos]# nix-shell -p nix-info --run "nix-info -m"
bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
/nix/store/0c337gsdfjf3162avbkchh0yh4qbs2s3-bash-5.2-p15/bin/bash: warning: setlocale: LC_ALL: cannot change locale (cs_CZ.UTF-8)
 - system: `"aarch64-linux"`
 - host os: `Linux 6.6.16-current-sunxi64, Debian GNU/Linux, 12 (bookworm), nobuild`
 - multi-user?: `yes`
 - sandbox: `no`
 - version: `nix-env (Nix) 2.8.0`
 - channels(root): `"nixpkgs-23.11"`
 - nixpkgs: `/root/.nix-defexpr/channels/nixpkgs`


UI is not compatible with ES 5.6.9

Hit "500 Internal Server Error"  for Executions pages

Please provide a complete stack trace or error logs to help debug this.
Closing this issue for now as it has been dormant for a while and we haven't been able to reproduce this. Please reopen if you still run into this.


Notes sample with CustomEditor API

Feature/component description
Can you provide notes example with CustomEditor API like below one
https://github.com/microsoft/vscode-webview-ui-toolkit-samples/tree/main/default/notepad
Use case

I am creator of Thunder Client extension, I can't find example how to use CustomEditor api with virtual document similar to Notes app

related https://github.com/microsoft/vscode-extension-samples/issues/477

Hey @rangav, thanks for filing this sample request!
With that said, would you mind closing and moving this issue to our sample extension repo since that's where we track all our sample related work and I don't want this to get lost amongst other toolkit issues?

Hi @hawkticehurst sure
moved to samples https://github.com/microsoft/vscode-webview-ui-toolkit-samples/issues/60

Awesome, thanks so much for doing that!


Status request

What is the status if this project?  It seems to use a REALLY old Grafana, yet there have been somewhat (less than a year ago) commits.  With Grafana moving toward React an upgrade might take some work.

Thank you, I didn't know how else to contact you, sorry for making noise :)


Support for 12mm - 12.5mm power switches

This would be nice. Requested by Level Fun Games via Twitter.

Would require a new base version, but there is only one front base version ATM.
Would also add more universal base versions...
Maybe done as front panel option? Offer a version of the base without a switch?
Gives the option of a reset button next to it (which won't fit in the base).

Targeting release after 0.9.9.

I've added a version of this to unstable: https://github.com/jon-harper/OmniBox/commit/1496ec4ccc7531d10752d829810a0926ec6c3f15
I've done a fit test with a 12mm switch and have updated the 0.9.10 BOM. Closing for now.


05/29/2018 23:58 : Create Pull Request for branch master -> prTesting1_2018052923

:white_check_mark: Validation status: passed

File
Status
Preview URL
Details

split/updateTestCon1.md
:white_check_mark:Succeeded

For more details, please refer to the build report.
Note: If you changed an existing file name or deleted a file, broken links in other files to the deleted or renamed file are listed only in the full build report.


[css] option to hide all CSS vendor prefixes in intellisense

A lot of people now use Post CSS autoprefixer rather than going to the bother of manually writing out prefixes themselves. It's a far better workflow. As such, prefixes being in-your-face as code auto-completion suggestions is a very annoying feature of VSCode. Is there an easy way to remove prefixes from appearing in the code-completion suggestions? If there is not then there should be.

Vendor specific properties are now sorted after the regular properties.


License?

Thanks for sharing this script! I'm trying to solve a problem with dynamic devices in Docker and I'd like to use or adapt this script. If that's ok could you please add a license? Thanks!

Hello! Thanks, I've added the licence


Add ECR build repository

Ticket
Resolves #136
Changes

Add reusable child module infra/modules/container-image-repository
Add infra/app/build-repository root module
Implement make release-publish with new script bin/publish-release.sh
Rename account_setup_test.go to template_infra_test.go
Setup, validate, and tear down build repository in template infra test
Fix dev environment root module
Misc small tweaks and fixes

Context for reviewers
Add ECR and tests for setting up and tearing down ECR.
There is probably value in also having an infra integration test suite that is copied over to the project rather than only run as part of template-only tests for template development, but for that test suite I think we don't want to set up and tear down all the resources every time, but instead we want to just run the validate steps after changes to infra (e.g. validating that we can build and publish an image to ECR).
Testing
Test make -f template-only.mak test

Test make -f template-only.mak clean

Sorry for the deluge of PRs, promise no new PRs rest of this week.

@shawnvanderjagt thanks so much for the review! I made the rest of the changes you suggested, so I think there's just one remaining comment thread to resolve. It sounds like you're pushing for having ecr be defined in accounts/account.tf, so I'll go ahead and make that change.


Permissions pr

Added new permissions to the User type.

abandoning these permissions changes, we'll need to consider alternative permissions as we implement api services


DOC: Fix trivial typo.

Reference issue

What does this implement/fix?

Additional information

For future reference please skip the relevant CI jobs for doc-only changes; this is using a lot of computing power for one typo fix. See https://docs.scipy.org/doc/scipy/dev/contributor/continuous_integration.html#skipping


[Bug]:

Steps for reproducing the issue

add user to video group
reboot
Install wluma from AUR (on Manjaro i3)
run wluma

What is the buggy behavior?
thread 'predictor-eDP-1' panicked at 'called `Result::unwrap()` on an `Err` value: NoCompositorListening', src/frame/capturer/wlroots.rs:70:49
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

What is the expected behavior?
running process without errors, adjusting brightness
Logs
[2022-11-26T08:44:09Z DEBUG wluma] Using Config {
        als: Iio {
            path: "/sys/bus/iio/devices",
            thresholds: {
                250: "normal",
                80: "dim",
                20: "dark",
                0: "night",
                800: "outdoors",
                500: "bright",
            },
        },
        output: [
            Backlight(
                BacklightOutput {
                    name: "eDP-1",
                    path: "/sys/class/backlight/intel_backlight",
                    capturer: Wlroots,
                    min_brightness: 1,
                },
            ),
            Backlight(
                BacklightOutput {
                    name: "keyboard-dell",
                    path: "/sys/bus/platform/devices/dell-laptop/leds/dell::kbd_backlight",
                    capturer: None,
                    min_brightness: 0,
                },
            ),
        ],
    }
thread 'predictor-eDP-1' panicked at 'called `Result::unwrap()` on an `Err` value: NoCompositorListening', src/frame/capturer/wlroots.rs:70:49
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace

Version
4.1.2-1
Environment
LSB Version:	n/a
Distributor ID:	ManjaroLinux
Description:	Manjaro Linux
Release:	22.0.0
Codename:	Sikaris
Linux kindle 5.15.76-1-MANJARO #1 SMP PREEMPT Sat Oct 29 14:22:16 UTC 2022 x86_64 GNU/Linux
egrep: warning: egrep is obsolescent; using grep -E
clang 14.0.6-3
lib32-vulkan-icd-loader 1.3.226-1
lib32-vulkan-intel 22.2.3-1
lib32-vulkan-radeon 22.2.3-1
rust 1:1.65.0-1
rust-analyzer 20221107-1
rust-src 1:1.65.0-1
vulkan-headers 1:1.3.227-1
vulkan-icd-loader 1.3.226-1
vulkan-intel 22.2.3-1
zsh: command not found: dpkg
egrep: warning: egrep is obsolescent; using grep -E

Hello, at the moment the app supports running only under wlroots-based compositors such as sway, for supporting other desktop environments please follow #5

👍


Issue installing the package

I am trying to download & install the Scriptable-Framework but doesn't appear in the packager manager, i added the code to the manifest.json file in my 2 projects from Unity 2019.3.3f1 / 2018.4.17f1 and still not luck.
I was able to add in Unity 2018.4.12f1 updated my project to 2018.4.17f1 replaced my manifest.jsjon and now that i tried to reinstall, isn't appearing again.
Idk if i am missing something, some newbie error or unity is messing up something
This how it looks my manifest.json file

So if my pc/unity problem what is the best way to manual install Scriptable-Framework?. The main folder goes in PackagesCache or Assets folder of project?.

Hi Elias,
So this is a known issue with Unity's package manager and scoped registries which they haven't fixed yet. It comes down to how the UPM initialises itself. Fixes range from restarting your PC to creating a new Unity project.
Your manifest looks correct to me so this is definitely a Unity issue.
Your options are to:

Try making unity fix itself like I described above
Keep the scoped registry and add this line to your dependencies to manually force the package to install:
"com.open.scriptable-framework": "1.2.12"
Clone / download a zip of the master branch and in the package manager UI, click the + icon to add it as a local package and select the package.json file under "Scriptable Framework/Assets/Scriptable Framework" (if you're using source control and collaborating with others, don't use this option as unity will make a hard reference to the path found on your computer)
Clone / download a zip of the master branch and copy the whole "Scriptable Framework/Assets/Scriptable Framework" folder into your project's packages folder (where your manifest is)
Copy that same folder directly into your assets folder

Let me know how that goes and thanks for using Scriptable Framework. If you have any further problems or feature requests just let me know! I'll be accepting pull requests as well if you decide any of your own additions would be good for it.

Hi pablo
Thanks for the details

Didn't work even checked Windows Firewall/AV making exceptions for Unity Editor and upm-win process checking is someone is blocking him, so maybe unity problem at their side.

THIS worked, was able to detect, download and install, so ready to use.

worked too, thanks for the extra details about hard refs/path, because i am using git as source control

Didn't tried this method because was already satisfied with first two methods.

Neither tested

Thanks again, just discovered ScriptableObjects and by luck founded your repo framework for Scriptable, so know will be able to use/learn about Scriptable using the project, yeah when something appears again will let know with a close future for PR too.

@EliasMasche Scriptable framework is now available via open upm of you prefer that to the scoped registry approach!

Thanks for the detail. just tested in Unity 2019.3.11f1 / 2018.4.22f1 in my personal project and a blank projects in both versions and working out of box now.


add a Deploy To Heroku button

when I want a relaxation thing

(to be clear: this isn't even vaguely important to have)


If "exiftool -all= img.heic" is used to strip metadata, makelive crashes

Steps to reproduce:
On a test heic and mov file, run exiftool -all= test.heic.  This removes the entire metadata dictionary (and is something you should do as it also removes the color profile). Then run makelive test.*.  This results in a crash:
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/makelive/__main__.py", line 135, in <module>
    main()
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/click/core.py", line 1157, in __call__
    return self.main(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/click/core.py", line 1078, in main
    rv = self.invoke(ctx)
         ^^^^^^^^^^^^^^^^
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/click/core.py", line 1434, in invoke
    return ctx.invoke(self.callback, **ctx.params)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/click/core.py", line 783, in invoke
    return __callback(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/makelive/__main__.py", line 127, in main
    asset_id = make_live_photo(image, video)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/makelive/makelive.py", line 269, in make_live_photo
    add_asset_id_to_image_file(image_path, asset_id)
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/makelive/makelive.py", line 128, in add_asset_id_to_image_file
    metadata = metadata_dict_for_asset_id(image_data, asset_id)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/rhet/Library/Application Support/pyapp/makelive/8517997354123992902/0.5.0/lib/python3.11/site-packages/makelive/makelive.py", line 106, in metadata_dict_for_asset_id
    metadata_as_mutable = metadata.mutableCopy()
                          ^^^^^^^^^^^^^^^^^^^^
AttributeError: 'NoneType' object has no attribute 'mutableCopy'

I tried creating an empty metadata dict if none was found but that results an 0-byte file when written.

I had a go and it also crashed. I wonder if we could detect the empty metadata status, and if it's empty, manually add an entry of metadata (for example, something as simple as exif version or a user comment) to restore the metadata dict.

I had a go and it also crashed. I wonder if we could detect the empty metadata status, and if it's empty, manually add an entry of metadata (for example, something as simple as exif version or a user comment) to restore the metadata dict.

That's a good idea. Maybe ProcessingSoftware?
The name and version of the software used to post-process the picture.

Sounds good! I will take a look at this problem and see if I can create a patch.

Hi @RhetTbull ! Long time no see - I had a quite busy July & just got back on coding stuff.
I wonder what's your thought on introducing exiftools to this project. Or I should just use Core Graphic & AV Foundation?
Cheers.

Hi @am1006 I'd prefer to keep this as a native library without external dependencies. The entire reason I created this was exiftool could not create the necessary metadata but now that I have it's nice to be able to use this without calling exiftool (and in some use cases I have planned, calling an external process won't be possible due to app sandboxing).


Support for queue

Really like it because is lightweight and would be great to support queue.
In addition, transition does not continue were it was if you fire animation twice, but resets?

I'm not sure to understand what you mean by firing the animation twice.
But, if you need to pause and then continue the animation were it stopped, use the playback API: http://codepen.io/juliangarnier/pen/RRKpgq

Thanks for your answer. I mean for instance, for transitions that run between states and depends on user clicks.
Just wondering would be nice to support something like VelocityJS where you got your queue boolean. But anyways, apart from this, Velocity does not interrupt animations if you give a different property value when the element has not finished the animation.
As I said, I really like the fact that Anime is lightweight.

Ok I see, but I don't plan to implement this anytime soon.
This looks too specific for Anime, and I really want to keep the library super lightweight.


Properly implements IDisposable

Cause who doesn't love being too paranoid about memory leaks?

This also fixes #784

@BlueRaja It's blatenly obvious this shouldn't require testing as it only changes how resources are managed and how Bot's logger is stored. But incase you say otherwise, I have tested it and it works.


Add Mean Radius to tortuosity CSV file

To support analysis of vessels based on radius, please save the mean radius for each vessel analyzed in the output CSV file.

The issue is fixed in pull request #108


Allow array as sx value to have conditional 'sub-classes'

Instead of declaring inline object it's sometimes useful to declare multiple sub-classes and toggle them depending on props.

[x] I have searched the issues of this repository and believe that this is not a duplicate.

Summary 💡
sx property should accept array as value.
Each element is considered as normal style object and overrides previous element's properties in case of conflict (same as classes in css).
Falsey elements of such array should be silently ignored.
Examples 🌈
If styles not heavily depend on props - I usually do not declare styles inline in sx but out of render method (in makeStyles fashion)
const classes = {
  body: {
    display: 'flex',
    flexGrow: 1,
  },
  vertical: {
    flexDirection: 'column',
    alignItems: 'center',
  },
  horizontal: {
    flexWrap: 'wrap',
  },
  disabled: {
    opacity: 0.4,
    pointerEvents: 'none'
  }
};

then in render method I combine them conditionally using destructuring:
<Box
        sx={{
          ...classes.body,
          ...(orientation === 'vertical' ? classes.vertical : classes.horizontal),
          ...(disabled?classes.disabled:{})
        }}
      >
//....

And as I am suggesting:
<Box
        sx={[
          classes.body,
          orientation === 'vertical' ? classes.vertical : classes.horizontal,
          disabled&&classes.disablled // if it resolves to false/null/undefined/etc - then just ignored.
        ]}
      >
//....

Motivation 🔦

readability - with arrays it looks better and takes less characters
performance(?) - you could benefit from fast reference comparison:
if objects were declared once out from render method - internally you could have some WeakMap cache and do not parse all the chunks on each render call but first make sure there are really some changes (some references not found or found in new order)

+1 for option 2 that matches how styled-components and emotion handles the problem, I believe they flatten.

One risk of the latest sx array support: it will lead to more usage in people's applications, cases where styled is equally good. But sx is significantly slower than styled (x2?). Hopefully in the future, we will make the sx utils available in styled, and make the sx transformation functions fast.

If mui team is interested in feedback:
I decided to get back to SCSS in my project.
In v4 I used to use JSS and there were difficulties with SSR on Next.js, you know that css class names mismatch, but they were fixed by some magic cleanup code.
In v5 while MUI itself seems to work fine with SSR, when I use makeStyles to customize something - this "mismatch" issue comes back and cleanup magic doesn't help anymore.
I had a hope if I will migrate to sx as recommended in docs - it will go, but no, it still appears here and there.
So I am wondering why to impact performance, have SSR issues and take opinionated syntax sugar in exchange, which looks pretty similar to using style prop?
In case of heavy customized use-case JSX code looks really bloated.

So maybe mui team will also consider to support such an "old school" approach and will add some official scss theme generator?
Alternatively it could also be pure css based on custom properties.

Here is my quick and dirty generator for above SCSS code:
import { each, isObject, isFunction, map } from 'lodash';

import theme from '../src/theme';

const fs = require('fs-extra');

let res = `// styles generated by styles/theme.js //

// == spacing == //
  $sp: 8px;

  $sp0125: 1px;
  $sp025: 2px;
  $sp05: 4px;

  $sp-0125: -1px;
  $sp-025: -2px;
  $sp-05: -4px;

`;

for (let i = 2; i <= 17; i++) {
  res += `  $sp${i}: ${i * 8}px;\n`;
}

res += '\n';

for (let i = -2; i >= -17; i--) {
  res += `  $sp${i}: ${i * 8}px;\n`;
}

res += render({ breakpoints: { '': theme.breakpoints.values } }, 'breakpoints', 'px');
res += render(theme, 'palette');
res += render(
  {
    transitions: {
      easing: theme.transitions.easing,
    },
  },
  'transitions',
);

res += render(
  {
    '': {
      duration: theme.transitions.duration,
    },
  },
  '',
  'ms',
);

res += render({ other: { shadows: theme.shadows, z: theme.zIndex } }, 'other');

fs.writeFileSync(`styles/_theme.scss`, res);
console.log('done');

function render(theme, sub, suffix = '') {
  let res = '';
  if (sub) {
    res += `\n// === ${sub} === //\n`;
  }
  each(theme[sub], (values, category) => {
    if (isObject(values) && !isFunction(values)) {
      if (category) {
        res += `\n  // -- ${category} -- //\n`;
      }
      each(values, (value, key) => {
        if (category) {
          res += `  $${category}-${key}: ${value + suffix};\n`;
        } else {
          res += `  $${key}: ${value + suffix};\n`;
        }
      });
    }
  });
  return res;
}

P.S. It feels really good :relieved: to write clean SCSS without all this kebab-camel conversions, quoting keywords etc

On https://github.com/mui-org/material-ui/issues/29274#issuecomment-953980228 I wuld go with Option 3. My reasoning:

Option 1 - Do nothing and let developers handle the conversion and add it to the docs before this section.

Not the best DX. If we are aware that developers would hit some issue, we rather be prepared and provide something to solve it rather than ignore it.

Option 2 - sx should be recursively flattened internally (But I don't want to make SxProps in TS as recursive type which might have perf impact)

I wouldn't do this because, it would mean that we encourage this API. Making it manual, would kind of indicate to developers that the prop is not intended to be used to define 10 different styles and merge them in the sx prop. It makes sense for the styled() utility, but not here.

Option 3 - provide a utility that makes sx compatible with MUI component. Developers don't need to know how it works, they just need to always wrap sx prop with spreadSx utility.

This seems like the best from the two worlds. We don't make it default, but provide a way of how it can be done with a proper documentation of course.


[WIP] Adding more distributions

Will be adding more distributions (continuous as well as discrete) and tests here. Plan to use helper functions and classes as in pymc3/test_distributions.py

I've changed the base branch to the observed branch since we point these changes there. It should simplify the review omitting commits from observed

This PR seems to be outdated. We've added some distributions but made other major API changes. I'll close this but feel free to open a new PR of you are interested in adding some distributions that are currently missing.


fix glitch when reloading

Wanted to check in on this and see if there are any updates actively being worked on with this?

fixing a few things a I'll merge into prod


Save to local storage

https://stackabuse.com/storing-data-in-the-browser-with-localstorage/

save entries so far for today's puzzle
save last date completed
save counts of each score (eg seven different counts)

Use json to write and read.

on load, check if completed, and restore state
on load, check if guesses have been made, and restore state
update when enter is pressed, adding to stored guesses
update when game is completed, updating counter


Re-activate bpfman integration in our github actions

Bpfd recently changed it's name to bpfman which has broken our platform integration tests in order to fix them we'll need to pin to a version of bpfman AFTER the name change and fix a few other things.
For now the tests are temporarily disabled.

Closing as a duplicate to #77, the context has been shared over there.


Using IDataProtector to decrypt jwt/bearer tokens

Hi,
I have a question relating to aspnet core 2.1.
I use the same key to encrypt the data between services  as I do to encrypt my auth bearer tokens. I'm hoping to wire up jwt authentication to use dataprotector to decrypt the tokens automatically so I can access the claims and User.Identity. Something like the code sample below :
services.AddDataProtection()
                    .SetApplicationName("MyProtector")
                    .PersistKeysToAzureBlobStorage(new Uri(blobStorageUrl));

var **protector** = provider.CreateProtector("MyProtector");
services.AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
        .AddJwtBearer(options =>
        {
          options.TokenValidationParameters = new TokenValidationParameters
          {
            ValidateIssuer = true,
            ValidateAudience = true,
            ValidateLifetime = true,
            ValidateIssuerSigningKey = true,
            ValidIssuer = Configuration["Jwt:Issuer"],
            ValidAudience = Configuration["Jwt:Issuer"],
            IssuerSigningKey = **protector**
          };
        });

Is there any way to do this? If not what would be the alternative recommendation? Create a middleware and decrypt the tokens manually?
Any advice appreciated,
Thanks,
Colin

@blowdart / @Tratcher - thoughts on this?

No there's no way, this isn't what data protection is meant for. The design for data protection involves never exposing the key material, and to always encrypt and sign, rather than just sign like JWT usually needs.

You'd probobly have to implement a ISecurityTokenValidator that wrapped JwtSecurityTokenHandler:
https://github.com/aspnet/Security/blob/3fae140900fa837094c052b15a132816e0caa477/src/Microsoft.AspNetCore.Authentication.JwtBearer/JwtBearerOptions.cs#L92

Where I found DataProtection fits well into the equation, is when you need to persist a generated signing key. You can use IDataProtector to protect the key itself, when you write it to disk, and unprotect the key when you load it from disk. It's still a seperate key that you have to generate for the purposes of signing JWT's, but atleast that key is protected by DataProtection at rest.


avx512:implement mm512_insertf32x8,64x2 with mask(z)

Implemented mm512_insertf32x8, mm512_mask_insertf32x8, mm512_maskz_insertf32x8, mm512_insertf64x2, mm512_mask_insertf64x2, mm512_maskz_insertf64x2.
All tests were generated using intel-all-gcc-10. Implementation was tested on intel-all-gcc-10, emscripten, gcc-10 , clang-11

Looks good, thanks!
Good job dealing with CI; as you've seen it can be a bit of a pain to get everything to pass on all compilers and architectures, but a better way to look at is that it finds lots of bugs that would otherwise slip through unnoticed ☺


Error: Exception: Homepage URL has no valid host: https://www.example.com

In a request for /api/packages/versions/newUploadFinish, the following exception occurred:
pubserver.shelf_pubserver: An error occured while finishing upload.

Error:
    Exception: Homepage URL has no valid host: https://www.example.com

Stack:
    #0      syntaxCheckHomepageUrl (package:pub_dartlang_org/shared/urls.dart:111:5)
    #1      _parseAndValidateUpload (package:pub_dartlang_org/frontend/backend.dart:715:3)
    <asynchronous suspension>
    #2      GCloudPackageRepository._performTarballUpload (package:pub_dartlang_org/frontend/backend.dart:308:15)
    <asynchronous suspension>
    #3      GCloudPackageRepository.finishAsyncUpload.<anonymous closure>.<anonymous closure> (package:pub_dartlang_org/frontend/backend.dart:290:16)
    <asynchronous suspension>
    #4      withTempDirectory.<anonymous closure> (package:pub_dartlang_org/shared/utils.dart:46:16)

However, this is a user error (HTTP 400) rather than an event that should be logged as a warning.

Interesting, on subsequent retries this happened:
Error:
    DetailedApiRequestError(status: 404, message: No error details. HTTP status was: 404.)

Could this be the cause of #1680?

Oh, very likely as the pubspec has just that URL: https://github.com/jodinathan/input_mask/blob/master/pubspec.yaml

I think I know understand the sequence of events:

On the first attempt to finish the upload, we throw a non-typed exception, and

We clean up the uploaded package archive.
It gets translated to a status code of 500.

the pub client see the response and retries it another time:

The package archive is not there, we fail to read it, and throw a different non-typed exception.

the pub client keeps retrying (5 times total)

Couple of moving parts were causing this effect:

Prior to May/June, this wasn't an issue, because pub client did not retry on 500, only on 502, 503...
There was also a change in pub_server that made a distinction between client-side problems and server issues. Client side issues get status code 400 and pub won't retry them.
We have migrated most of our exceptions at that time, but some validation was added later that didn't follow that pattern and/or some validation were not migrated.

To fix this, I'll submit a PR that will use the proper exception for pub_server.

I've checked with a dummy publishing, and the pub client now displays the root cause:
Homepage URL has no valid host: https://www.example.com.


[Auctions] Adds responsiveness and iPad support to layout

This includes various UI tweaks and fixes

The text on the top tab bar is now centered correctly
Added spacing between the title and live icon on auction item cards
"Register by" is now on its own line

iPad

iPhone 6 Plus

Fails

:no_entry_sign:

No CHANGELOG added.

  Generated by :no_entry_sign: dangerJS

Fails

:no_entry_sign:

No CHANGELOG added.

  Generated by :no_entry_sign: dangerJS


Support string functions LEFT() and RIGHT()

Unlike other functions LEFT() and RIGHT() are not working in the selection of a query:
`sqlParser.parse('SELECT LEFT(a, 3) FROM b')`

returns a parseError

@stefanreimers  supported at<EMAIL_ADDRESS>sqlParser.parse('SELECT `LEFT`(a, 3) FROM b')


Is it possible to continue learning from any epoch?

Hey!
Thanks for your work!
I have a question: can I continue training the model from the epoch before which the model was trained?
I mean, I started training from scratch, after the training was interrupted, and after a while, can I continue training (maybe using existed .pkl file)?
I'm trying to connect mobilenet_v2 as a backbone, but it needs distillation and experimentation to improve. But the training process is long, so I want to be able to train up to epoch 10 (for example), and after other experiments, continue training from epoch 10 (the same model and with the same source code as before)

@ArtiX-GP
Sorry for the late reply.
I don't get it.
To fine-tune an existing model, please set, for example, in v1.yml.
https://github.com/Arthur151/ROMP/blob/7b4734270672e602f4fc5659d37479478e72b78b/configs/v1.yml#L18
fine_tune: True
model_path: /path/to/model.pkl


Not able to ping though borderrouter to link-local

Hi, i have set up my border router and i amm able to ping to a global server by using the well-known prefix:
> ping 64:ff9b::0808:0808
> 16 bytes from 64:ff9b:0:0:0:0:808:808: icmp_seq=55 hlim=51 time=26ms

My problem is pinging link-local addresses such as this one:
wlo1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet <IP_ADDRESS>  netmask <IP_ADDRESS>  broadcast <IP_ADDRESS>
        **inet6 fe80::593d:100:f1d8:44f**  prefixlen 64  scopeid 0x20<link>
        ether ac:b5:7d:26:2f:ba  txqueuelen 1000  (Ethernet)
        RX packets 180966  bytes 161395680 (161.3 MB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 117698  bytes 18161299 (18.1 MB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

(this is on my border router laptop)
when i try to ping from a node a respond never returns
>state
leader
Done
> ping fe80::8817:3ff:fe80:61fa

Is what im trying to do possible?

It seems that you are trying to ping a link-local address of a non-Thread interface on the border router. IPv6 link-local addressing explicitly prohibits this use case.
RFC 4007 states:
   o  Link-local scope, for uniquely identifying interfaces within
      (i.e., attached to) a single link only.

RFC 4291 states:
   Routers must not forward any packets with Link-Local source or
   destination addresses to other links.

in that case, how are you supposed to ping non mesh adresses on the local network, and ping a specific node from the outside.

You need to use an IPv6 address with a larger (e.g. global) scope.
On the OpenThread Border Router, you can configure prefixes that have global scope for the interfaces you want to communicate between.
For example:
$ sudo ip -6 addr add fd11:22:33:1::1/64 dev wpan0
$ sudo ip -6 addr add fd11:22:33:2::1/64 dev wlo1

would that be the interfaces between two border routers in my case?  such as "veth159d65" which appears when running docker (method used in an example at the openthread site), and likewise the interface used on my raspberry pi.


FI-1637: Include profile version in bulk validation

This branch updates the bulk validation tests to include the profile version in their validation calls.

Assuming the MedicationRequest/Observation validation skip/failure have to do with the resources not meeting USCore v4? Similar skip/ when running single-patient

Yes, those are both related to US Core changes.


Remove note claiming no support for private repos

Earlier in the README, docs are provided for copying private repos.

Correct me if I'm wrong. It looks like private repos are supported?


New Avatar Component

Summary of changes

Setup new Avatar component
Setup new AvatarGroup component

Reference issue to close (if applicable)

Closes https://github.com/webb-tools/webb-dapp/issues/507

Code Checklist

[x] Tested
[x] Documented

Screenshots

@AtelyPham just address conflicted files please