HDDS-1284. Adjust default values of pipline recovery for more resilient service restart

As of now we have a following algorithm to handle node failures:

In case of a missing node the leader of the pipline or the scm can detected the missing heartbeats.
SCM will start to close the pipeline (CLOSING state) and try to close the containers with the remaining nodes in the pipeline
After 5 minutes the pipeline will be destroyed (CLOSED) and a new pipeline can be created from the healthy nodes (one node can be part only one pipwline in the same time).

While this algorithm can work well with a big cluster it doesn't provide very good usability on small clusters:
Use case1:
Given 3 nodes, in case of a service restart, if the restart takes more than 90s, the pipline will be moved to the CLOSING state. For the next 5 minutes (ozone.scm.pipeline.destroy.timeout) the container will remain in the CLOSING state. As there are no more nodes and we can't assign the same node to two different pipeline, the cluster will be unavailable for 5 minutes.
Use case2:
Given 90 nodes and 30 pipelines where all the pipelines are spread across 3 racks. Let's stop one rack. As all the pipelines are affected, all the pipelines will be moved to the CLOSING state. We have no free nodes, therefore we need to wait for 5 minutes to write any data to the cluster.
These problems can be solved in multiple ways:
1.) Instead of waiting 5 minutes, destroy the pipeline when all the containers are reported to be closed. (Most of the time it's enough, but some container report can be missing)
2.) Support multi-raft and open a pipeline as soon as we have enough nodes (even if the nodes already have a CLOSING pipelines).
Both the options require more work on the pipeline management side. For 0.4.0 we can adjust the following parameters to get better user experience:
{code}

ozone.scm.pipeline.destroy.timeout
60s
OZONE, SCM, PIPELINE

Once a pipeline is closed, SCM should wait for the above configured time
before destroying a pipeline.

ozone.scm.stale.node.interval
90s
OZONE, MANAGEMENT

      The interval for stale node flagging. Please
      see ozone.scm.heartbeat.thread.interval before changing this value.

 {code}
First of all, we can be more optimistic and mark node to stale only after 5 mins instead of 90s. 5 mins should be enough most of the time to recover the nodes.
Second: we can decrease the time of ozone.scm.pipeline.destroy.timeout. Ideally the close command is sent by the scm to the datanode with a HB. Between two HB we have enough time to close all the containers via ratis. With the next HB, datanode can report the successful datanode. (If the containers can be closed the scm can manage the QUASI_CLOSED containers)
We need to wait 29 seconds (worst case) for the next HB, and 29+30 seconds for the confirmation. --> 66 seconds seems to be a safe choice (assuming that 6 seconds is enough to process the report about the successful closing)
See: https://issues.apache.org/jira/browse/HDDS-1284

:broken_heart: -1 overall

Vote
Subsystem
Runtime
Comment

0
reexec
851
Docker mode activated.

_ Prechecks _

+1
@author
0
The patch does not contain any @author tags.

-1
test4tests
0
The patch doesn't appear to include any new or modified tests.  Please justify why no new tests are needed for this patch. Also please list what manual steps were performed to verify this patch.

_ trunk Compile Tests _

+1
mvninstall
1306
trunk passed

+1
compile
66
trunk passed

+1
checkstyle
21
trunk passed

+1
mvnsite
43
trunk passed

+1
shadedclient
736
branch has no errors when building and testing our client artifacts.

+1
findbugs
80
trunk passed

+1
javadoc
39
trunk passed

_ Patch Compile Tests _

+1
mvninstall
44
the patch passed

+1
compile
33
the patch passed

+1
javac
33
the patch passed

+1
checkstyle
15
the patch passed

+1
mvnsite
36
the patch passed

+1
whitespace
0
The patch has no whitespace issues.

+1
xml
1
The patch has no ill-formed XML file.

+1
shadedclient
744
patch has no errors when building and testing our client artifacts.

+1
findbugs
81
the patch passed

+1
javadoc
35
the patch passed

_ Other Tests _

+1
unit
85
common in the patch passed.

+1
asflicense
32
The patch does not generate ASF License warnings.

4315

Subsystem
Report/Notes

Docker
Client=17.05.0-ce Server=17.05.0-ce base: https://builds.apache.org/job/hadoop-multibranch/job/PR-733/1/artifact/out/Dockerfile

GITHUB PR
https://github.com/apache/hadoop/pull/733

Optional Tests
dupname  asflicense  compile  javac  javadoc  mvninstall  mvnsite  unit  shadedclient  findbugs  checkstyle  xml

uname
Linux 630e39838fbf 4.4.0-138-generic #164-Ubuntu SMP Tue Oct 2 17:16:02 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Build tool
maven

Personality
personality/hadoop.sh

git revision
trunk / abace70

maven
version: Apache Maven 3.3.9

Default Java
1.8.0_191

findbugs
v3.1.0-RC1

Test Results
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/1/testReport/

Max. process+thread count
440 (vs. ulimit of 5500)

modules
C: hadoop-hdds/common U: hadoop-hdds/common

Console output
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/1/console

Powered by
Apache Yetus 0.9.0 http://yetus.apache.org

This message was automatically generated.

The original commit (which was reverted) was fixed by @linyiqun in HDDS-1297 (thx here again) I applied it to this branch to prove that the two commits together don't cause any problem.
In case of merge please don't squash the two commits just rebase this branch.

:broken_heart: -1 overall

Vote
Subsystem
Runtime
Comment

0
reexec
40
Docker mode activated.

_ Prechecks _

+1
@author
0
The patch does not contain any @author tags.

+1
test4tests
0
The patch appears to include 1 new or modified test files.

_ trunk Compile Tests _

0
mvndep
27
Maven dependency ordering for branch

+1
mvninstall
1185
trunk passed

+1
compile
78
trunk passed

+1
checkstyle
30
trunk passed

+1
mvnsite
136
trunk passed

+1
shadedclient
899
branch has no errors when building and testing our client artifacts.

+1
findbugs
194
trunk passed

+1
javadoc
106
trunk passed

_ Patch Compile Tests _

0
mvndep
12
Maven dependency ordering for patch

-1
mvninstall
23
server-scm in the patch failed.

-1
compile
66
hadoop-hdds in the patch failed.

-1
javac
66
hadoop-hdds in the patch failed.

-0
checkstyle
25
hadoop-hdds: The patch generated 3 new + 0 unchanged - 0 fixed = 3 total (was 0)

-1
mvnsite
26
server-scm in the patch failed.

+1
whitespace
0
The patch has no whitespace issues.

+1
xml
1
The patch has no ill-formed XML file.

+1
shadedclient
820
patch has no errors when building and testing our client artifacts.

-1
findbugs
24
server-scm in the patch failed.

+1
javadoc
97
the patch passed

_ Other Tests _

+1
unit
75
common in the patch passed.

+1
unit
31
framework in the patch passed.

+1
unit
63
container-service in the patch passed.

-1
unit
27
server-scm in the patch failed.

+1
asflicense
26
The patch does not generate ASF License warnings.

4368

Subsystem
Report/Notes

Docker
Client=17.05.0-ce Server=17.05.0-ce base: https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/Dockerfile

GITHUB PR
https://github.com/apache/hadoop/pull/733

Optional Tests
dupname  asflicense  compile  javac  javadoc  mvninstall  mvnsite  unit  shadedclient  findbugs  checkstyle  xml

uname
Linux a444bdbf61a0 4.4.0-144-generic #170~14.04.1-Ubuntu SMP Mon Mar 18 15:02:05 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

Build tool
maven

Personality
personality/hadoop.sh

git revision
trunk / d608be6

maven
version: Apache Maven 3.3.9

Default Java
1.8.0_191

findbugs
v3.1.0-RC1

mvninstall
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/patch-mvninstall-hadoop-hdds_server-scm.txt

compile
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/patch-compile-hadoop-hdds.txt

javac
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/patch-compile-hadoop-hdds.txt

checkstyle
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/diff-checkstyle-hadoop-hdds.txt

mvnsite
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/patch-mvnsite-hadoop-hdds_server-scm.txt

findbugs
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/patch-findbugs-hadoop-hdds_server-scm.txt

unit
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/artifact/out/patch-unit-hadoop-hdds_server-scm.txt

Test Results
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/testReport/

Max. process+thread count
341 (vs. ulimit of 5500)

modules
C: hadoop-hdds/common hadoop-hdds/framework hadoop-hdds/container-service hadoop-hdds/server-scm U: hadoop-hdds

Console output
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/2/console

Powered by
Apache Yetus 0.9.0 http://yetus.apache.org

This message was automatically generated.

:broken_heart: -1 overall

Vote
Subsystem
Runtime
Comment

0
reexec
57
Docker mode activated.

_ Prechecks _

+1
@author
0
The patch does not contain any @author tags.

+1
test4tests
0
The patch appears to include 1 new or modified test files.

_ trunk Compile Tests _

0
mvndep
38
Maven dependency ordering for branch

+1
mvninstall
1186
trunk passed

+1
compile
90
trunk passed

+1
checkstyle
35
trunk passed

+1
mvnsite
152
trunk passed

+1
shadedclient
941
branch has no errors when building and testing our client artifacts.

+1
findbugs
199
trunk passed

+1
javadoc
108
trunk passed

_ Patch Compile Tests _

0
mvndep
11
Maven dependency ordering for patch

+1
mvninstall
133
the patch passed

+1
compile
67
the patch passed

+1
javac
67
the patch passed

-0
checkstyle
25
hadoop-hdds: The patch generated 3 new + 0 unchanged - 0 fixed = 3 total (was 0)

+1
mvnsite
110
the patch passed

+1
whitespace
0
The patch has no whitespace issues.

+1
xml
1
The patch has no ill-formed XML file.

+1
shadedclient
816
patch has no errors when building and testing our client artifacts.

+1
findbugs
215
the patch passed

+1
javadoc
97
the patch passed

_ Other Tests _

+1
unit
74
common in the patch passed.

+1
unit
31
framework in the patch passed.

+1
unit
55
container-service in the patch passed.

-1
unit
111
server-scm in the patch failed.

+1
asflicense
27
The patch does not generate ASF License warnings.

4564

Reason
Tests

Failed junit tests
hadoop.hdds.scm.node.TestSCMNodeManager

Subsystem
Report/Notes

Docker
Client=17.05.0-ce Server=17.05.0-ce base: https://builds.apache.org/job/hadoop-multibranch/job/PR-733/3/artifact/out/Dockerfile

GITHUB PR
https://github.com/apache/hadoop/pull/733

Optional Tests
dupname  asflicense  compile  javac  javadoc  mvninstall  mvnsite  unit  shadedclient  findbugs  checkstyle  xml

uname
Linux 270564ca6d65 4.4.0-141-generic #167~14.04.1-Ubuntu SMP Mon Dec 10 13:20:24 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Build tool
maven

Personality
personality/hadoop.sh

git revision
trunk / d608be6

maven
version: Apache Maven 3.3.9

Default Java
1.8.0_191

findbugs
v3.1.0-RC1

checkstyle
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/3/artifact/out/diff-checkstyle-hadoop-hdds.txt

unit
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/3/artifact/out/patch-unit-hadoop-hdds_server-scm.txt

Test Results
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/3/testReport/

Max. process+thread count
349 (vs. ulimit of 5500)

modules
C: hadoop-hdds/common hadoop-hdds/framework hadoop-hdds/container-service hadoop-hdds/server-scm U: hadoop-hdds

Console output
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/3/console

Powered by
Apache Yetus 0.9.0 http://yetus.apache.org

This message was automatically generated.

:broken_heart: -1 overall

Vote
Subsystem
Runtime
Comment

0
reexec
28
Docker mode activated.

_ Prechecks _

+1
@author
0
The patch does not contain any @author tags.

+1
test4tests
0
The patch appears to include 2 new or modified test files.

_ trunk Compile Tests _

0
mvndep
22
Maven dependency ordering for branch

+1
mvninstall
1080
trunk passed

+1
compile
82
trunk passed

+1
checkstyle
28
trunk passed

+1
mvnsite
138
trunk passed

+1
shadedclient
814
branch has no errors when building and testing our client artifacts.

+1
findbugs
195
trunk passed

+1
javadoc
98
trunk passed

_ Patch Compile Tests _

0
mvndep
13
Maven dependency ordering for patch

+1
mvninstall
134
the patch passed

+1
compile
67
the patch passed

+1
javac
67
the patch passed

-0
checkstyle
23
hadoop-hdds: The patch generated 1 new + 0 unchanged - 0 fixed = 1 total (was 0)

+1
mvnsite
122
the patch passed

+1
whitespace
0
The patch has no whitespace issues.

+1
xml
1
The patch has no ill-formed XML file.

+1
shadedclient
744
patch has no errors when building and testing our client artifacts.

+1
findbugs
222
the patch passed

+1
javadoc
100
the patch passed

_ Other Tests _

+1
unit
75
common in the patch passed.

+1
unit
34
framework in the patch passed.

+1
unit
59
container-service in the patch passed.

-1
unit
95
server-scm in the patch failed.

+1
asflicense
29
The patch does not generate ASF License warnings.

4201

Subsystem
Report/Notes

Docker
Client=17.05.0-ce Server=17.05.0-ce base: https://builds.apache.org/job/hadoop-multibranch/job/PR-733/4/artifact/out/Dockerfile

GITHUB PR
https://github.com/apache/hadoop/pull/733

Optional Tests
dupname  asflicense  compile  javac  javadoc  mvninstall  mvnsite  unit  shadedclient  findbugs  checkstyle  xml

uname
Linux dadbccbe879f 4.4.0-138-generic #164-Ubuntu SMP Tue Oct 2 17:16:02 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Build tool
maven

Personality
personality/hadoop.sh

git revision
trunk / b979fdd

maven
version: Apache Maven 3.3.9

Default Java
1.8.0_191

findbugs
v3.1.0-RC1

checkstyle
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/4/artifact/out/diff-checkstyle-hadoop-hdds.txt

unit
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/4/artifact/out/patch-unit-hadoop-hdds_server-scm.txt

Test Results
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/4/testReport/

Max. process+thread count
465 (vs. ulimit of 5500)

modules
C: hadoop-hdds/common hadoop-hdds/framework hadoop-hdds/container-service hadoop-hdds/server-scm U: hadoop-hdds

Console output
https://builds.apache.org/job/hadoop-multibranch/job/PR-733/4/console

Powered by
Apache Yetus 0.9.0 http://yetus.apache.org

This message was automatically generated.

Just merged.


Add a spec to make sure environment works on hab_build

This Pull Request was opened by Chef Automate user Nathan Smith
Wrote this just to make sure it's working. It is.
Signed-off-by: Nathan L Smith<EMAIL_ADDRESS>Ready to merge? View this change in Chef Automate and click the Approve button: https://delivery.chef.co/e/chef/#/organizations/Delivery-Build-Cookbooks/projects/habitat-build/changes/72d33b15-3303-4b0b-bed4-ca2be48a172a

@delivery approve


WebApp:Error when trying to enable client certificates for app service.

This is autogenerated. Please review and update as needed.
Describe the bug
Command Name
az webapp update
Errors:
'NoneType' object has no attribute 'kind'
Traceback (most recent call last):
Temp\pip-install-363drsgw\knack\knack\cli.py, ln 215, in invoke
azure\cli\core\commands\__init__.py, ln 654, in execute
azure\cli\core\commands\__init__.py, ln 718, in _run_jobs_serially
azure\cli\core\commands\__init__.py, ln 711, in _run_job
Local\Temp\pip-install-363drsgw\six\six.py, ln 703, in reraise
azure\cli\core\commands\__init__.py, ln 688, in _run_job
azure\cli\core\commands\__init__.py, ln 325, in __call__
azure\cli\core\commands\arm.py, ln 527, in handler
azure\cli\command_modules\appservice\custom.py, ln 599, in update_webapp
AttributeError: 'NoneType' object has no attribute 'kind'

To Reproduce:

az webapp update --set clientCertEnabled=true --name {} --resource-group {}

Expected Behavior
I expected to enable client certificates for my app service. I was following the guide at:
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth
Environment Summary
Windows-10-10.0.19041-SP0
Python 3.6.6
Installer: MSI

azure-cli 2.8.0 *

Extensions:
azure-devops 0.18.0
front-door 1.0.9

Additional Context
I was able to perform the action from https://portal.azure.com/

webapp

https://github.com/Azure/azure-cli/issues/14287

@indrehus please try the command as
az webapp update --set clientCertEnabled=true --name  --resource-group  --subscription  & let us know if you still see the same issue. Thanks!

@indrehus Please let us know if the above solved your issue. Thanks!

closing due to lack of response and answer provided by service team


Comparing string content, more than just string length?

Is there any way to do this in the existing code?  Has anyone thought about an addition to the existing code?  Please contact me.

@bnb012008 could you elaborate more on what you are trying to achieve? Row level validation lets you compare the raw contents of columns regardless of their datatype. String length is calculated by default in order to be passed to an aggregate function as a "summary" of validating string quality e.g. a SUM(len(string)) can quickly identify truncation or similar.
https://github.com/GoogleCloudPlatform/professional-services-data-validator#row-validations
Please let me know if you have any questions.

Is it okay to prepare and share a 'view only' linked google doc?

Source system DB2, column type varchar, target system BQ, created via an AVRO file in a GS bucket, target column string.  Number and string length compares generally work.  String/varchar content does not compare using the process described.  I produced an initial yaml file and then edited it to correct it mainly case corrections on column names.  I used: data-validation validate row -sc db2edt1d -tc bqv -tbls EDTDM.DIMENSION_DATE=bnb01_test.DIMENSION_DATE -pk 'dt_sk' -rr -rbs '10' -comp-fields 'row_src_id' -c yamlrc01_RS.yaml.  I can provide the -v output that was created with the corrected yaml file if needed.

Row level validation is only supported for BigQuery, Hive, and Teradata as of now. For DB2, string length is the most granular validation for string columns currently.


layoutlib_data target contains unused .so libraries

Hello @comius, Closing this issue as the changes in the PR are not available in the intellij code base. Please feel free to reopen if  the issue still persists.


OSX prompt to overwrite when changing letter case in file names

Feature request:
When: the user changes the case of a file or directory name in the VS Code EXPLORER on OSX
Result: prompt the user, warning that they are actually over-writing the same file
Rationale:
The OSX filesystem is internally case in-sensitive. When you change the case of a filename on the command line, it gives you a reminder of this fact:
mv DIR1 dir1
overwrite dir1? (y/n [n]) y

However the VS Code EXPLORER hides this warning. This re-enforces the incorrect belief that the user is working on a case-sensitive filesystem, when in fact they aren't.
This can lead to various problems, for example with deployments of the code onto case sensitive platforms, or with git (note that trying to work around the git issues with ignorecase leads to further problems and inconsistencies; see https://stackoverflow.com/questions/52369109/git-core-ignorecase-false-in-mac-os-x/52369235#52369235).
I believe that the correct behaviour is to remind the user that they are working on a case insensitive filesystem, rather than hide that fact.

Let me get the steps clear first:

Have a file named "file.txt"
Rename the file to "File.txt"
Expect a warning prompt, however nothing happens

Please confirm if those are trully the steps you are trying to explaing here
Mac finder does not do this. Windows explorer does not do this. Nor does any explorer I know show a warning. Thus we should also not warn.
Users are aware of what file system they are working on, we can not remind that of that fact always

When you say it like that, it seems like a silly request :-(
I was hoping for an option to enable the same behaviour as on the command line, which is as you describe.

Unfortunetly this is out of our scope for now.
Thank you for understanding.


Suggestion:Energy Shield

Since never Version the most mods are adding special shields and i thought what about adding an energy shield like the guardian shield from the legend of zelda breath of the wild

Good Suggestion! 🛡  I agree. Or a forcefield that shows when you hit a player. Like around him


Accessibility, screen reader supprt, Windows Narrator

Interesting developments:
https://github.com/MicrosoftEdge/MSEdgeExplainers/blob/master/UIA/i2i.md
...hopefully: first in Edge, then contributed shortly thereafter to Chromium core, then finally into a future Electron release.
CC @llemeurfr

Related issue:
https://github.com/readium/r2-testapp-js/issues/20#issuecomment-472526902

Quick note: I’ve added Edg (so Chrome Edge or Chredge, Edg is how it presents itself in the UA string) to my browsers’ list for manual testing, and am paying particular attention to a11y so do not hesitate to ping me if I can help with testing that.


Screenshot 404s upon

https://til.simonwillison.net/til/til/firefox_search-across-all-resources.md
I use https://ohdear.app/ to keep tabs on my link rot. Not sure there is a better way?

Thanks, fixed that page. I could add some tests for that as part of the build script - may do that next time I'm tweaking it.

Ah you store/serve media from Github? Was curious about https://github.com/simonw/til/blob/main/metadata.yaml#L9

That's just for the screenshots of the posts that I use in the social media cards - they go in SQLite BLOBs. The images in posts currently go straight in the repository.


Store Translations in Dynamo DB ?

Explore what storing the translation in dynamo DB looks like to see if it might be a better option than a global variable in the index.js file.

For an app of this scale a DB seems like overkill. Using session attributes instead.


Week3 lab

Still confused about what numbers in the wine data set are input values
and output values and where the hidden layers are.
Somehow, i managed to define a network that works by using the class identifier as
the output layer neuron number and number of other scores in a row as
the input layer neuron number.
Somehow, the hidden layers can be changed to any number...
I was confused about how to do the training data and testing data split. I changed trainingSplit = int(.7 * len(data)) to trainingSplit = int(.8 * len(data)), and it seemed to do the trick...

@yw2896 your solution looks good.
For the network structure, the number of input neurons should match the features in the data, which in this case is 13, and the number of outputs should match the number of categories you are trying to predict (in this case 3).
The number of hidden layers is up to you, and basically describes how complex the model is. Any number will work here, but the right number depends on the problem you're trying to solve and can be found through experimentation.
The split is also up to you. In general, a higher number provides more training data, at the expense of less test data, which can lead to overfitting.
Hope that helps, and good work!


Strange issue reading contract file

For some reason any time pact node attempts to retrieve a contract file (via http or file system) there is an error reading the contract.
Error: reading pact at /path/to/json.json
What I know is:

I've tried multiple contract files on the file system/http requests to no success.
Doing a manual GET request to the HTTP URLs I'm using works fine.
Permissions of the contract files on the file system are fine.
Happens in both 4.7.0 and 4.8.0 and really only just started happening without any change to my environment.
The contracts themselves are valid JSON and look correct as far as structure.
Looks like the same issue if you skip pact-node and go straight to the verifier.

Not much to go on, but have you seen this before?

Closing this as I've realised Error: reading pact at is basically a blanket message if there are errors with the provider verification - it's not actually an error "reading" the pact so to speak.

Hm, we might want to fix that error message then to be more specific.
Please keep this open.
On Tue, Feb 28, 2017, 3:03 AM Jon Cleary<EMAIL_ADDRESS>wrote:

Closing this as I've realised Error: reading pact at is basically a
blanket message if there are errors with the provider verification - it's
not actually an error "reading" the pact so to speak.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/pact-foundation/pact-node/issues/32#issuecomment-283010084,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AAjA5JlsWIgn5nU0tYSQsi3Ra3nErBXqks5rg_7ogaJpZM4MOOzr
.


How to list policy assignments applied to management group.

I try to list policy assignments applied to management group.
> $ az policy assignment list --scope /managementGroups/management-group-id
However, I get this error.
> usage error --scope: must be a fully qualified ARM ID.
Could you tell me how to get the list ?
For your reference, I can list policy assignment applied to subscriptions.
> $ az policy assignment list --scope /subscriptions/subscription-id

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 1c6760bb-c278-da56-a95c-4e82e221f1e8
Version Independent ID: e25cbd2a-b415-214f-7d50-c403992c9361
Content: az policy assignment
Content Source: src/azure-cli/azure/cli/command_modules/resource/_help.py
Service: azure-resource-manager
GitHub Login: @rloutlaw
Microsoft Alias: routlaw

HI @jiasli could you pls have a look? thanks.

For your reference, I can list policy assignment applied to subscriptions.

$ az policy assignment list --scope /subscriptions/subscription-id

I tried some pattern and found out that I can only list policy assignment applied to the current active subscription.

add to S166.

@na2ko-ucym Hi, this is a known issue. It's the same problem as https://github.com/Azure/azure-cli/issues/9067 and the relevant team is repairing.

@na2ko-ucym Hello, this issue has been fixed in the latest version of azure-cli (2.2.0), please download the latest version of the package to try.
If there are any questions, please feel free to give us feedback~

This issue is not fixed:

@Wiszanyel
Use the complete ID
az policy assignment list --scope /providers/Microsoft.Management/managementGroups/<management group id>


📖 Catch-up for the relase process doc

Summary
This PR updates the release process doc, mainly covering changes we have made since this doc was last updated. This primarily concerns getting the website back in business and the policy for release branches.
Related issue(s)
Fixes #

/cc @pdettori
/cc @effi-ofer
/cc @ezrasilvera
/cc @nirrozenbaum
/cc @clubanderson

/lgtm
/approve


Backend docker not working

As per the instruction installed docker for Mongodb m backend and Frontend.  But the backend docker doesnot run .
Also when I do docker exec -it backend ps -a   no service is running .
I tried executing start_server,sh 0.10.0  command as well it build successfully but still does not run any service.

Same here, I configure the docker-compose.yml to run with official latest images:
version: '3'

services:
  mongo:
    image: mongo:3.4
    networks:
      default:
        aliases:
          - mongo
    ports:
      - "27017:27017"
  backend:
    image: mitdbg/modeldb-backend:latest
    networks:
      default:
        aliases:
          - backend
    ports:
      - "6543:6543"
    command: ["mongo"]
  frontend:
    image: mitdbg/modeldb-frontend:latest
    networks:
      default:
        aliases:
          - frontend
    ports:
      - "3000:3000"
    command: ["backend"]

and I get the follow log when docker-compose up
backend_1   | MongoDB is up - executing command
backend_1   | here
backend_1   | touch: cannot touch '/db/some': No such file or directory

after the last line the container of backend crash


Implement debian image build via FAI tool

This workflow is separated from the ones of bootstrap-vz because debian-cloud's
scripts don't support jessie.
Below the deviations from the generated image and the GCE official jessie image:

sshd's PermitRootLogin is the default prohibit-password instead of desired NO
NTP is not installed (so it's not configured to use metadata.google.internal server)
cmdline arguments:

no biosdevname=0
no scsi_mod.use_blk_mq=Y
console=ttyS0,115200 instead of console=ttyS0,38400n8

Also note that buster is not working at the moment due to missing oslogin package on google repository. Whenever that dependency is solved, the scripts should work for creating a buster image.

/ok-to-test

just wait a sec, the output image is not booting...

there you go

I guess flake8 is wrongly flagging this PR, right?

btw, I hope to fix those deviations directly on debian-cloud's scripts so there would be no change here.

note: approved but not merged


Tilemap accept only .xml tileset

I am following this tutorial.
And so I have export the tileset with the extension .res but when I try to load it in the TileMap it do nothing. However, if I export it with the .xml extension it's working properly.
Is it intended ?
I am using Godot 1.0.

Maybe you can try building the newest version from git, in case it is fixed (somehow)?

You are rigth completly forgot to test it.


Python version requirements

https://docs.mbed.com/docs/mbed-os-handbook/en/5.1/dev_tools/cli/ say that mbed CLI was tested with Python 2.7, without specifying the minor version.
I've observed that it doesn't work with Python versions older than 2.7.6; or with Python 3 altogether.
You may want to update the docs, or better yet, produce a diagnostic message when mbed CLI is run with an unsupported version of Python.

The requirement for >= 2.7.9 is mentioned in https://docs.mbed.com/docs/mbedmicro-api/en/latest/api/md_README.html but I agree it should be in the document you cited.
In fact, I found that the attached patch allows me to run the mbed CLI with python 2.7.3
regexp-fix.patch.txt

Thanks for reporting this

This is now supported in the latest version of mbed CLI (0.9.5)


Extend Knot.x Templating Engine by custom tags processing

Custom tags will be placed inside snippet and should be interpreted by Knot.x Templating Engine after Handlebars processing.
Inside custom tags developer will put JSON object that describes tag configuration.
Custom <knotx> tags should never be rendered in the final page.
Example of custom tags:

One script tag can contain many different knotx custom tags.
One script tag can contain at most one particular knotx custom tag.
What do you think about that implementation simplification?

Closing as we will go towards different approach


Comments not allowed on macro invocations

Needs rework as part has been applied

yeah sorry about that, mail-archives was down, and I did not see this at the time.


The characters will overlap when exported as image, especially for chinese

There must be some problems with github uploader. I can't upload the screenshot.

I have seen this bug before. But it now works correctly on my machine. Can you still reproduce it?

过两天会跟其他 fix 一起 release


[NF] Automated simulation GUI window

Hello everyone,
I want to propose a new tab for the GUI. My idea is that in this tab you can easily call simulations with the press of a button. For example the simulation with FEMM as explained in the tutorials would be a good start. Since these types of simulations always require similar code to perform.
Now i have toyed around with creating a seperate GUI for this, but implementing it within the existing GUI would make more sense.
For this the window would need some general inputs in the form of bullit points, dropout menus or text fields.

The motor file location (which is loaded anyway in the GUI)

The wanted simulation (dropdown: Magnetic, Electric, Structural, Force, Acoustic)

Rotorspeed (text field)

Stator current (text field)

Simulation time (text field)

Angular and time discretization (text fields)

Wanted output plots (Bullet points)

For the different modules you may need some other inputs, but that should not be a problem. If it works for the tutorial it should be fairly easy to expand to cover everything.
Now here's the thing, this shouldn't take too long, however i can't figure out the orginisation of your GUI code. It seems everything is initialized from .ui files, but i don't exactly how it works. Could someone perhaps explain me the general idea? Then i will move on to making the GUI add-on.
All the best,
Menno

Hello,
We haven't add the time to write the how to contribute to the GUI tutorial. But the short version is:

First you need to define a .ui file with Qt designer => This file define all the widgets and layout (composition/content of the GUI)
Then we have gen_list.json which enables to create link between the csv doc and the GUI (to set tooltips, min/max) - this file is not mandatory (if none of the widget are listed in the csv)
Finally there is the class file that defines all the signals and slot of the widget (what the GUI does when you click on X button)

The class generator also contains a GUI generator. For a widget like PWSlot10. The class generator convert PWSlot10.ui to Ui_PWSlot10.py that contains a Ui_PWSlot10 object. The class generator convert gen_list.json to Gen_PWSlot10.py that contains a Gen_PWSlot10 object that inherit from Ui_PWSlot10. Finally the PWSlot10.py is a file we have written that define a class PWSlot10 that inherit from Gen_PWSlot10 and that is used in the GUI. Take a look a this class, this is a basic example to understand the 3 file layers.
Best regards,
Pierre

Thanks Pierre! I'll take a look at it right away. This was precisely the information i was looking for.

Alright, quite some time has passed now, but i finally have somewhat of a "working" widget. I only did some basic algorithms for SCIMs but i am running into a problem.
I made a script which works when i run it from the cmd prompt, but when i link it to a button in the gui it somehow doesn't work anymore. I always get an error from FEMM that it can't excess a file (pyleecan/results/EEC compparameters/FEMM/SCIM_010_example_machine_model_3) Sometimes there is a random other error.
I have tried and tried again, but somehow it never really works... If i call the function from another basic gui (one button in a window) it does work, so i think it must have something to do with the pyleecan GUI but i can't figure it out. Does anyone have an idea? I'll attach my files so far to this message.
SCIMSimu files.zip
Short explanation of how to get to my error:
-The SimuWidget folder should be placed in pyleecan/GUI/tools
-for now i have the SCIM folder in the pyleecan/pyleecan folder, which is messy but for now it's okay
-Run the run_GUI.py script and the widget should turn up.
-load a motor (i did SCIM_010). click the specific speed radio button. Plug in some random values for voltage frquency and speed and press start
-If all goes well FEMM should now start and after some point you hear a sound and a pop up says that there is some error

Hello Menno,
I think you missed to zip your version of run_GUI.
Nevertheless, would you mind to commit your changes to a dedicated feature branch in your repo. Otherwise there may be version issues, since everyone how download your zip may have an other commit state.
Best regards, Sebastian

Alright, i updated my pyleecan directory to the current version and that seemed to have fixed the problem. Consider my question answered, even though i still don't know what went wrong


QUIC: Rename SSL_set_initial_peer_addr to SSL_set1_initial_peer_addr

Fixes #21701

Updated.

This pull request is ready to merge

Pushed. Thanks.


GOBBLIN-1352: Ensure Helix workflows are cleaned up on cluster start up in centralized mode

Dear Gobblin maintainers,
Please accept this PR. I understand that it will not be reviewed until I have checked off all the steps below!
JIRA

[x] My PR addresses the following Gobblin JIRA issues and references them in the PR title. For example, "[GOBBLIN-XXX] My Gobblin PR"

https://issues.apache.org/jira/browse/GOBBLIN-1352

Description

[x] Here are some details about my PR, including screenshots (if applicable):
As part of the changes introduced in GOBBLIN-1319, the Helix workflow names were modified to include a special prefix. However, this prefix is intended for use in distributed mode. As a consequence of this change, the workflows are no longer being cleaned up on cluster start up leading to a leak in Znodes. Further, since the workflows are left in the START state, the Yarn autoscaling manager requests more containers than needed.

Tests

[x] My PR adds the following unit tests OR does not need testing for this extremely good reason:
Added unit test.

Commits

[x] My commits all reference JIRA issues in their subject lines, and I have squashed multiple commits if they address the same issue. In addition, my commits follow the guidelines from "How to write a good git commit message":

Subject is separated from body by a blank line
Subject is limited to 50 characters
Subject does not end with a period
Subject uses the imperative mood ("add", not "adding")
Body wraps at 72 characters
Body explains "what" and "why", not "how"

@autumnust @ZihanLi58 Please review.

@autumnust @ZihanLi58 Please review.

Codecov Report

Merging #3191 (480f796) into master (b1006b4) will decrease coverage by 37.07%.
The diff coverage is 0.00%.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b1006b4...480f796. Read the comment docs.

Codecov Report

Merging #3191 (480f796) into master (b1006b4) will decrease coverage by 37.07%.
The diff coverage is 0.00%.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b1006b4...480f796. Read the comment docs.


Autocomplete is really slow and linter is confused using atom 1.0.19 and atom-typescript 7.6.3 on Ubuntu 15.04

The autocomplete and the linter are acting weird and slow.
Let me know if any other info could be useful.
Here's some recording of what I'm talking about:

Thanks :+1:

Tried rebooting and it appears to be working correctly :confused:


Don't add entry to differences if difference is empty (sourceValue = undefined)

const sourceSchema = await Schema.fromJson({
$schema: "https://dev.bentley.com/json_schemas/ec/32/ecschema",
name: "SourceSchema",
version: "1.0.0",
alias: "source",
items: {
TestItem: {
schemaItemType: "EntityClass",
properties: [
{
name: "Name",
type: "PrimitiveProperty",
description: "name of item",
label: "Name",
priority: 0,
typeName: "string",
},
],
},
},
}, new SchemaContext());
const targetSchema = await Schema.fromJson({
  $schema: "[https://dev.bentley.com/json_schemas/ec/32/ecschema"](https://dev.bentley.com/json_schemas/ec/32/ecschema%22),
  name: "TargetSchema",
  version: "1.0.0",
  alias: "target",
  items: {
    TestPropertyCategory: {
      schemaItemType:"PropertyCategory",
      label:"Property Category",
      priority: 100000,
    },
    TestItem: {
      schemaItemType: "EntityClass",
      properties: [
        {
          name: "Name",
          type: "PrimitiveProperty",
          description: "name of item",
          label: "Name",
          priority: 0,
          typeName: "string",
          category: "TargetSchema.TestPropertyCategory",
        },
      ],
    },
  },
}, new SchemaContext());

returns  an empty difference {
changeType: "modify",
schemaType: "Property",
itemName: "TestItem",
path: "Name",
difference: {
},
}
Either we need to show it as conflict when source property value is undefined, and target - not undefined, or ignore it.


Deadlock during ssl_stream::async_handshake when turning off network with running zscaler client connector

During testing the behavior of some software components when network is turned off I experienced a deadlock during the ssl_stream::async_handshake of boost.beast. I did only experience this deadlock with running Zscaler client connector and did not test if this issue also occurs using other VPN's. Below a minimal compiling program, the log output, and a step-by-step guide on how to reproduce the deadlock. Let me know if you experience similar issues or if I am doing something wrong. Thanks in advance for your input and support!
Version of Beast and Asio
boost.asio: 1.28.0
boost.beast: 347
Steps necessary to reproduce the problem
See here for a minimal compiling program and see deadlock.log for the full program output with BOOST_ASIO_ENABLE_HANDLER_TRACKING enabled where the deadlock occured.
The following steps reproduce the deadlock on my machine:

Start Zscaler Client Connector.
Start program with BOOST_ASIO_ENABLE_HANDLER_TRACKING=ON
Turn Off network on OS level.
Wait until program gets stuck and does not connect anymore.
Mess around with Zscaler -> Turn off/on.
Wait for about 1 minute.
Turn-on network.
At this point I would expect the program to connect again. However, it is stuck at<EMAIL_ADDRESS>and does not recover (at least not within 20min).

All relevant compiler information
OS: Ubuntu 22.04.1
GCC: 11.3.0
CMake: 3.25.2
Ninja: 1.10.2
Possible Workaround
Use boost::asio::use_future for the async_connect and async_handshake calls and detach the io_context thread if the future does not return after e.g. 30s. However, this is no proper solution and does leak memory. It would be much better to tackle this deadlock on library level and prevent it from happening at all.

This would be a boost.asio issue, not boost.beast. Since you call this is a dead-lock, where exactly does it hang? Can you step in with a debugger? Did you try per-op cancellation?

I did not yet experiment with per-op cancellation but stepping in with a debugger shows that the io_context thread is stuck at the following line: https://github.com/chriskohlhoff/asio/blob/c465349fa5cd91a64bb369f5131ceacab2c0c1c3/asio/include/asio/detail/impl/epoll_reactor.ipp#L509. I opened an issue in asio repo including this additional information: https://github.com/chriskohlhoff/asio/issues/1325. Therefore I close this one.


Change curl to error out gracefully for user experience

Addresses https://github.com/istio/istio/issues/21464
[ ] Configuration Infrastructure
[ x] Docs
[ x] Installation
[ ] Networking
[ ] Performance and Scalability
[ ] Policies and Telemetry
[ ] Security
[ ] Test and Release
[ ] User Experience
[ ] Developer Infrastructure

/cherry-pick release-1.5

@dgn: new pull request created: #21764

In response to this:

/cherry-pick release-1.5

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.


test: add test for standalone snapshot

Description
Fixes #8034
Adds the following test for a backed-up snapshot (original template and VM deleted beforehand):

Create volume from snapshot
Create a template from the snapshot and deploy a VM using it

Types of changes

[ ] Breaking change (fix or feature that would cause existing functionality to change)
[ ] New feature (non-breaking change which adds functionality)
[ ] Bug fix (non-breaking change which fixes an issue)
[ ] Enhancement (improves an existing feature and functionality)
[x] Cleanup (Code refactoring and cleanup, that may add test cases)
[ ] build/CI

Feature/Enhancement Scale or Bug Severity
Feature/Enhancement Scale

[ ] Major
[ ] Minor

Bug Severity

[ ] BLOCKER
[ ] Critical
[ ] Major
[ ] Minor
[ ] Trivial

Screenshots (if appropriate):
How Has This Been Tested?

How did you try to break this feature and the system with this change?

@blueorangutan package

@shwstppr a [SF] Jenkins job has been kicked to build packages. It will be bundled with  KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

ui build fails with
npm ERR! This is an error with npm itself. Please report this error at:
npm ERR!     <https://npm.community/>

npm ERR! A complete log of this run can be found in:
npm ERR!     /home/runner/.npm/_logs/2023-10-16T13_06_23_305Z-debug.log

I didn´t see this one before, but might mean we need to upgrade npm??? cc @rohityadavcloud ?

@blueorangutan test

@DaanHoogland a [SF] Trillian-Jenkins test job (centos7 mgmt + kvm-centos7) has been kicked to run smoke tests

[SF] Trillian test result (tid-7983)
Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
Total time taken: 49266 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr8104-t7983-kvm-centos7.zip
Smoke tests completed. 111 look OK, 2 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test
Result
Time (s)
Test File

test_02_upgrade_kubernetes_cluster
Failure
576.50
test_kubernetes_clusters.py

test_08_upgrade_kubernetes_ha_cluster
Failure
623.90
test_kubernetes_clusters.py

test_03_deploy_vm_wrong_checksum
Error
40.70
test_templates.py

test_09_list_templates_download_details
Failure
0.05
test_templates.py

Template failures are unrelated and have been fixed in #8096

@blueorangutan package

@shwstppr a [SF] Jenkins job has been kicked to build packages. It will be bundled with  KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

@blueorangutan test

@blueorangutan package

@shwstppr a [SF] Jenkins job has been kicked to build packages. It will be bundled with  KVM, XenServer and VMware SystemVM templates. I'll keep you posted as I make progress.

Packaging result [SF]: :heavy_check_mark: el7 :heavy_check_mark: el8 :heavy_check_mark: el9 :heavy_check_mark: debian :heavy_check_mark: suse15. SL-JID 7410

@blueorangutan test

@shwstppr a [SF] Trillian-Jenkins test job (centos7 mgmt + kvm-centos7) has been kicked to run smoke tests

[SF] Trillian test result (tid-7996)
Environment: kvm-centos7 (x2), Advanced Networking with Mgmt server 7
Total time taken: 45074 seconds
Marvin logs: https://github.com/blueorangutan/acs-prs/releases/download/trillian/pr8104-t7996-kvm-centos7.zip
Smoke tests completed. 107 look OK, 1 have errors, 0 did not run
Only failed and skipped tests results shown below:

Test
Result
Time (s)
Test File

test_03_deploy_vm_wrong_checksum
Error
40.61
test_templates.py

test_09_list_templates_download_details
Failure
0.04
test_templates.py

Merging this based on the test results


CFFL

CFFL

Linter check found the following problems:
The following problems have been found:
ERROR: /tmp/abs_36vq_fwtvk/clone/recipe/meta.yaml:14: pip_install_args: pip install should be run with --no-deps.
ERROR: /tmp/abs_36vq_fwtvk/clone/recipe/meta.yaml:20: missing_wheel: For pypi packages, wheel should be present in the host section
WARNING: /tmp/abs_36vq_fwtvk/clone/recipe/meta.yaml:36: missing_description: The recipe is missing a description
ERROR: /tmp/abs_36vq_fwtvk/clone/recipe/meta.yaml:36: missing_documentation: The recipe is missing a doc_url or doc_source_url
ERROR: /tmp/abs_36vq_fwtvk/clone/recipe/meta.yaml:36: missing_dev_url: The recipe is missing a dev_url
ERROR: /tmp/abs_36vq_fwtvk/clone/recipe/meta.yaml:36: missing_license_family: The recipe is missing the about/license_family key.
Errors were found


⚠ File access (beta) has degraded performance

In ca4f5ef, File access (beta) (https://beta.fyle.uk/file/fish) experienced degraded performance:

HTTP code: 200
Response time: 2255 ms

Resolved: File access (beta) performance has improved in a088a12.


[Bug]: HTTPClient SSL Flag Does Not Work As Expected

What happened?
While using client-server mode of the Chroma, the HTTPClient does not work with self-signed certificates. Disabling ssl verification does not work either.
My chroma server is behind the OpenShift reverse proxy. The certificate that I am using is for this OpenShift cluster, and it works for other applications.
For example, below raw requests does work as expected:
import requests

chroma_server_url = ... # Your Chroma server url here

requests.get(chroma_server_url + '/api/v1/tenants/default_tenant', verify=True) # Does work as expected, gives self-signed certificate error
requests.get(chroma_server_url + '/api/v1/tenants/default_tenant', verify=False) # Works as certification is disabled
requests.get(chroma_server_url + '/api/v1/tenants/default_tenant', verify='ca.crt') # Works as ca.crt contains corporate certificate chain

However, using the HttpClient does not work as expected for ssl=False and certificate passing.

import chromadb

chroma_server_url = ... # Your Chroma server url here

client = chromadb.HttpClient(chroma_server_url, ssl=True) # Does work as expected, gives self-signed certificate error
client = chromadb.HttpClient(chroma_server_url, ssl=False) # Does not work, gives self-signed certificate error
client = chromadb.HttpClient(chroma_server_url, ssl=True, settings=Settings(chroma_server_ssl_verify='ca.crt')) # Does not work again

Reproduction Steps:

Install OpenSSL to your system and testcontainers to Python.
Run openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes -subj '/CN=localhost'
Run the script below:

import time
from testcontainers.core.container import DockerContainer
from testcontainers.compose import DockerCompose
import requests
import os
import chromadb

# Define the Docker Compose setup using testcontainers
class ChromaDBTest:
    def __init__(self):
        self.compose = DockerCompose(os.getcwd())

    def start(self):
        self.compose.start()

    def stop(self):
        self.compose.stop()

# Create Docker Compose file content
docker_compose_content = """
version: '3'

services:
  chromadb:
    image: chromadb/chroma
    ports:
      - "8000:8000"

  nginx-proxy:
    image: nginx:latest
    depends_on:
      - chromadb
    ports:
      - "443:443"
    volumes:
      - ./nginx.conf:/etc/nginx/conf.d/default.conf
      - ./certs:/etc/nginx/certs
"""

# Create necessary directories and files
os.makedirs("certs", exist_ok=True)
os.makedirs("nginx", exist_ok=True)
with open("certs/cert.pem", "w") as cert_file:
    with open("cert.pem", "r") as source_cert:
        cert_file.write(source_cert.read())
with open("certs/key.pem", "w") as key_file:
    with open("key.pem", "r") as source_key:
        key_file.write(source_key.read())
with open("nginx.conf", "w") as nginx_conf_file:
    nginx_conf_file.write("""
server {
    listen 443 ssl;
    server_name localhost;

    ssl_certificate /etc/nginx/certs/cert.pem;
    ssl_certificate_key /etc/nginx/certs/key.pem;

    location / {
        proxy_pass http://chromadb:8000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}
""")

with open("docker-compose.yml", "w") as compose_file:
    compose_file.write(docker_compose_content)

# Test the connection
def test_chromadb():
    chromadb_test = ChromaDBTest()
    try:
        chromadb_test.start()
        time.sleep(10)  # Wait for services to start

        try:
            response = requests.get("https://localhost:443", verify=True)
            print(response.text)
        except requests.exceptions.SSLError as e:
            print(f"SSL Error: {e}")

        try:
            client = chromadb.HttpClient("https://localhost", port=443, ssl=False)
        except requests.exceptions.SSLError as e:
            print(f"SSL Error for HTTP Client : {e}")

    finally:
        chromadb_test.stop()

if __name__ == "__main__":
    test_chromadb()

Result of the reproduction script is below:
Versions
Chroma v0.5.4, Python3.11, CentOS 8
Reproduction: Chroma v0.5.4, Python3.11, Windows 10
Relevant log output
SSL Error: HTTPSConnectionPool(host='localhost', port=443): Max retries exceeded with url: / (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1006)')))
Traceback (most recent call last):
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connectionpool.py", line 467, in _make_request
    self._validate_conn(conn)
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connectionpool.py", line 1092, in _validate_conn
    conn.connect()
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connection.py", line 642, in connect
    sock_and_verified = _ssl_wrap_socket_and_match_hostname(
                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connection.py", line 783, in _ssl_wrap_socket_and_match_hostname
    ssl_sock = ssl_wrap_socket(
               ^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\util\ssl_.py", line 469, in ssl_wrap_socket
    ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls, server_hostname)
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\util\ssl_.py", line 513, in _ssl_wrap_socket_impl
    return ssl_context.wrap_socket(sock, server_hostname=server_hostname)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\ssl.py", line 1108, in _create
    self.do_handshake()
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\ssl.py", line 1379, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1006)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connectionpool.py", line 790, in urlopen
    response = self._make_request(
               ^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connectionpool.py", line 491, in _make_request
    raise new_e
urllib3.exceptions.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1006)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\requests\adapters.py", line 486, in send
    resp = conn.urlopen(
           ^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\connectionpool.py", line 844, in urlopen
    retries = retries.increment(
              ^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\urllib3\util\retry.py", line 515, in increment
    raise MaxRetryError(_pool, url, reason) from reason  # type: ignore[arg-type]
    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='localhost', port=443): Max retries exceeded with url: /api/v1/tenants/default_tenant (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1006)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\api\client.py", line 438, in _validate_tenant_database
    self._admin_client.get_tenant(name=tenant)
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\api\client.py", line 486, in get_tenant
    return self._server.get_tenant(name=name)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\telemetry\opentelemetry\__init__.py", line 143, in wrapper
    return f(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\api\fastapi.py", line 182, in get_tenant
    resp = self._session.get(
           ^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\requests\sessions.py", line 602, in get
    return self.request("GET", url, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\requests\sessions.py", line 589, in request
    resp = self.send(prep, **send_kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\requests\sessions.py", line 703, in send
    r = adapter.send(request, **kwargs)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\requests\adapters.py", line 517, in send
    raise SSLError(e, request=request)
requests.exceptions.SSLError: HTTPSConnectionPool(host='localhost', port=443): Max retries exceeded with url: /api/v1/tenants/default_tenant (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1006)')))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Users\SnA\Desktop\ttkom\debug-chroma\debug.py", line 97, in <module>
    test_chromadb()
  File "C:\Users\SnA\Desktop\ttkom\debug-chroma\debug.py", line 88, in test_chromadb
    client = chromadb.HttpClient("https://localhost", port=443, ssl=False)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\__init__.py", line 197, in HttpClient
    return ClientCreator(tenant=tenant, database=database, settings=settings)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\api\client.py", line 144, in __init__
    self._validate_tenant_database(tenant=tenant, database=database)
  File "C:\Users\SnA\AppData\Local\Programs\Python\Python311\Lib\site-packages\chromadb\api\client.py", line 440, in _validate_tenant_database
    raise ValueError(
ValueError: Could not connect to a Chroma server. Are you sure it is running?

@erincetin, thanks for reporting this. We've recently refactored the HttpClient and started using httpx, although our SSL-related tests seem to be passing. I will investigate further, suggest an approach, or create a PR to fix the problem.

@tazarov Thanks for your reply. This was my first issue in Github, glad I contributed.
For the meantime, I want to downgrade Chromadb for my client-side. Do you know the latest version of Chromadb that did not use httpx for httpclient?

Tested versions from 0.5.3 to 0.4.12 with tox. Latest version that seems to work fine is 0.4.14, while from 0.4.15 to 0.5.3 fails. I have used the reproduction script that I have added above.

@erincetin, I remember that when adding this feature to Chroma client we faced the exact same issue.
The root cause why the below won't work (assuming both self-signed cert or private PKI):
client = chromadb.HttpClient(host="https://localhost", ssl=True, settings=Settings(chroma_server_ssl_verify='certs-no-san/servercert.pem')) # Does not work again

would be the lack of SAN (Subject Alternative Names). We have a config example here - https://github.com/chroma-core/chroma/blob/main/chromadb/test/openssl.cnf.
The second example you have is expected to fail with self-signed or private PKI.
client = chromadb.HttpClient(host="https://localhost", ssl=False) # Does not work, gives self-signed certificate error

I've tested certs with both SAN and without SAN and it works as intended with the SAN.
Try generating certs with this command:
openssl req -x509 -newkey rsa:4096 -keyout serverkey.pem -out servercert.pem -days 365 -nodes -subj "/CN=localhost" -config "chromadb/test/openssl.cnf"

Note: Update/replace the openssl.cnf as needed.

@erincetin, did adding SAN to your SSL cert solve the issue?

@tazarov, unfortunately I am using a corporate network for my project and they are issuing their certificates. So I cannot add SAN as I am not the person who creates or administers it.

@erincetin, this is super strange. In corporate SANs, this should be an essential requirement as they increase security. For example, k8s won't work with certs without SANs.
It is fine for the PKI to issue certs; however, I imagine that someone initiates the process with a CSR; if that is in your control, then SANs can be added to the CSR, too. Let me know if you need help with that.


WIP: try to address warnings about constant redefinitions

example:
  $ bundle exec rake test
  ... snip ...
  /Users/alexdean/.rvm/rubies/ruby-2.6.4/lib/ruby/2.6.0/net/protocol.rb:30: warning: method redefined; discarding old protocol_param
  /Users/alexdean/.rvm/gems/ruby-2.6.4/gems/net-protocol-0.2.1/lib/net/protocol.rb:32: warning: previous definition of protocol_param was here
  /Users/alexdean/.rvm/rubies/ruby-2.6.4/lib/ruby/2.6.0/net/protocol.rb:38: warning: method redefined; discarding old ssl_socket_connect
  /Users/alexdean/.rvm/gems/ruby-2.6.4/gems/net-protocol-0.2.1/lib/net/protocol.rb:40: warning: previous definition of ssl_socket_connect was here
  /Users/alexdean/.rvm/rubies/ruby-2.6.4/lib/ruby/2.6.0/net/protocol.rb:66: warning: already initialized constant Net::ProtocRetryError
  /Users/alexdean/.rvm/gems/ruby-2.6.4/gems/net-protocol-0.2.1/lib/net/protocol.rb:68: warning: previous definition of ProtocRetryError was here
  /Users/alexdean/.rvm/rubies/ruby-2.6.4/lib/ruby/2.6.0/net/protocol.rb:79: warning: method redefined; discarding old initialize
  /Users/alexdean/.rvm/gems/ruby-2.6.4/gems/net-protocol-0.2.1/lib/net/protocol.rb:81: warning: previous definition of initialize was here
  /Users/alexdean/.rvm/rubies/ruby-2.6.4/lib/ruby/2.6.0/net/protocol.rb:82: warning: method redefined; discarding old io
  /Users/alexdean/.rvm/rubies/ruby-2.6.4/lib/ruby/2.6.0/net/protocol.rb:84: warning: method redefined; discarding old message

changes made so far don't seem to resolve the error, so this might not be useful.
unsure, but it seems like these might be due to bug in mail and/or rubygems. https://github.com/mikel/mail/pull/1439

this is due to changes in ruby stdlib & is solved on later rubies. no action needed in this project.


Russian language polishing

Changed not good looking long "Save Changes" into "Apply" translation varriation which looks better, means the same and fits into the button size. Also replaced English "Bitcoin" term into translated Russian Bitcoin spelling.

Closed by #356


Adding custom head on all pages

Checklist

[X ] I have read the newlest tutorials and know the correct effect of the functional design.
[X ] There is no similar question on existing issues (including closed ones).
[X ] I have tried to find the answer on Jekyll Forum and StackOverflow.
[X ] My question is based on the latest code of the master branch.

Description

Hi there,
I have been looking on multiple places to see if I can resolve this myself.
From what I understand the website which gets generated picks some files from the Chirpy static assets git to build the pages.
I want to add a script into the head of each page being created. I tried doing this with the assets, but ofcourse this is not going to be pickedup while building the files. Could anyone point me into a direction on how I could add this to each head of a page?

Thanks in advance for the effort.

The <head> is defined in _includes/head.html, where you can apply the JS to site-wide pages.

Downloading the  _includes and edit the head resolved my question. I was not aware that I could just download the folder without defining it somewhere.
Thanks Cotes for the support. Much appriciated!


[RFC] Implement Boolean-to-Prop coercion using Bool.asProp

A while ago, Sebastian suggested[1] that we should redefine the Boolean-to-Prop coercion using a dedicated function.  This recently came up again[3] because we're porting material about List.filter, which is now defined on Booleans and thus exercises the coercion heavily.
def Bool.asProp (b : Bool) : Prop :=
  b = true

instance : Coe Bool Prop where
  coe := Bool.asProp

Pros:

No accidental simplification of ¬ b = true to b = false (which requires duplication of simp lemmas).
decide b = b is defeq (after #2038)
Pretty-printing and norm_cast work out-of-the-box.

Cons:

simp only [h] no longer works as well for a hypothesis h : b with b : Bool.

Original proposal: [1] https://leanprover.zulipchat.com/#narrow/stream/270676-lean4/topic/rfc.3A.20theorem.20names/near/240161960
Other threads:
[2] https://leanprover.zulipchat.com/#narrow/stream/270676-lean4/topic/BEq.20Subtype/near/296650727
[3] https://leanprover.zulipchat.com/#narrow/stream/287929-mathlib4/topic/Prop.20-.3E.20Bool.20regression/near/321996465

Additional proposal:

Make simp [h] add show b = true from h to the simp set if h : Bool.asProp b.


Custom language extension support

I think this would be a useful prettier plugin for Jinja templates which also have a twig-like syntax.
Only issue is that Flask generally uses the .html extension for HTML files: https://github.com/pallets/flask/blob/38eb5d3b49d628785a470e2e773fc5ac82e3c8e4/src/flask/app.py#L803-L811.
Is it possible to get this plugin to override the prettier default HTML functionality?

You can achieve this either by using the CLI option --parser (e.g. prettier --parser melody '**/*.html', or prettier --parser melody '**/*.njk' for Nunjucks, etc) or by defining an override in your Prettier config:
{
  // ...
  "prettier": {
    // ...
    "overrides": [
      {
        "files": "**/*.html",
        "options": {
          "parser": "melody"
        }
      }
    ]
  }
}


Chore do not retry query when catched UserException and cloud mode is off

Proposed changes
do not retry query when catched UserException and cloud mode is off

run buildall

run buildall

run buildall


English Edit Suggestions

Add a period at the end of "Aspyre GUI is a simple application to make Aspyre GT available as a service online"
Change "compatible for import" to "compatible with importation" in the following sentence. "Aspyre GT is a pipeline to make Ground Truth exported from Transkribus compatible for import into eScriptorium using ALTO XML as a pivotal format."
Add "the" in the following sentence: "Use the Transkribus export option to download a ZIP file containing image files, ALTO XML files and a METS XML file"
To remain consistent with the previous step, add an "s" to the following": "you may need to remove the image files from the ZIP file in..."
Add punctuation: "initially checking the "Image" option on Transkribus**,** however**,** is necessary in order to get a properly documented METS XML file..."

About pages 404 and 500, you also pointed that

it should be "Go back to the main page"

Alrighty, many thanks, I fixed the typos. 👍
Any chance you could do this again on the README here too?
➡  https://github.com/alix-tz/aspyre-gt/blob/master/README.md

[x] correcting home
[x] correcting 404
[x] correcting 500
[ ] correcting readme?


Ability to provide email to register certificates against

I'm wondering if there's a way to provide the email address that Let's Encrypt requires for registering domains?

Yes, this should be possible using a custom dehydrated config file. I've added documentation about how to do that: https://github.com/GUI/lua-resty-auto-ssl#advanced-lets-encrypt-configuration But let me know if that doesn't work for you.

Thanks @GUI :) That's very helpful. I'll give it a whirl and see how it goes.


Modules for components

PR Checklist
Please check if your PR fulfills the following requirements:

[x] The commit message follows our guidelines: https://github.com/graycoreio/daffodil/blob/master/CONTRIBUTING.md#commit
[ ] Tests for the changes have been added (for bug fixes / features)
[ ] Docs have been added / updated (for bug fixes / features)

PR Type
What kind of change does this PR introduce?
[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[x] Refactoring (no functional changes, no api changes)
[ ] Build related changes
[ ] CI related changes
[ ] Documentation content changes
[ ] Other... Please describe:

What is the new behavior?
All components are now exported through their own module.ts file
Does this PR introduce a breaking change?
[ ] Yes
[x] No

This PR is working toward removing linting errors from foundation-demo in a future PR.


Add option for derivative at a certain point

One sometimes needs to specify the point / time at which one takes the derivative, using a vertical bar.
In typst, this can be approximated using
dv(,t)| _(t=0) f(t)

which kind of works but looks ugly since the bar is too short. It would be nice if one could use something like dv(,t, t=0) or dv(,t, at=(t=0)) which automatically yields a proper rending of the bar.
Looking at the code, typst seems to use the method stretch_vertical to increase the length of lines/bars.

Here's a workaround.
#import "@preview/physica:0.9.3": dv, eval
$ eval(dv(,t))_(t=0) f(t) $

Thanks, the above snippet is not merely a workaround, it's actually the intended usage.
I feel it's better not to couple different semantics together, but I welcome more inputs in this to convince me - no promise:)

Typst v0.8.0 changelog:

Removed support for automatic matching of fences like | and || as there were too many false positives. You can use functions like abs or norm or an explicit lr call instead. (Breaking change)

Therefore I guess the activate character is impossible without changing the typst compiler.

Besides, I've updated https://github.com/Leedehai/typst-physics/issues/28#issuecomment-2087891080 with 2 example functions. Hope they satisfy your need.

Thanks!
As another data point, the https://typst.app/universe/package/diverential package has an eval argument for derivatives and the example reads quite nice
dv(f, x, deg: 2, eval: 0)

But I will not argue further if you think the eval method is already sufficient 🦊


"Change PITR backup retention period using the Azure portal" instructions are outdated

There is no "Configure backup retention" choice on the Overview blade for an Azure SQL Database. I do not see a current location for this function in the portal at this time. Is this only configurable through PowerShell or the API now?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 9492cedc-cea0-af9d-29a0-52cbca8c5e21
Version Independent ID: 969a8654-8f95-d5de-351d-73c8e02e5d3a
Content: Azure SQL Database automatic, geo-redundant backups
Content Source: articles/sql-database/sql-database-automated-backups.md
Service: sql-database
GitHub Login: @anosov1960
Microsoft Alias: sashan

@m60freeman Thank you very much for the detailed feedback. I see the discrepancy. The screen image is from a Managed Instance but the documentation does not infer a specific PaaS instance of Azure SQL Database, and appears to apply to all deployment options. I believe this is a doc-bug and am assigning it to the content owner to evaluate and update as appropriate. Thank you!

Agreed. None of the options mentioned in the doc are available. (I can restore but not determine backup schedule in place or retention period.)

@anosov1960 @CarlRabeler Making this a doc-bug and removing product-question label.

@Mike-Ubezzi-MSFT please assign to @mashamsft

@MashaMSFT fixed issue yesterday - @Mike-Ubezzi-MSFT please close

We will now proceed to close this thread. If there are further questions regarding this matter, please comment and we will gladly continue the discussion.

The doc  was updated with images for both logical servers, and for managed instance. @m60freeman , thanks for bringing this to our attention! Can you please confirm this better suits your needs?

Looks good, although the date in the header (at https://docs.microsoft.com/en-us/azure/sql-database/sql-database-automated-backups) still shows as "12/09/2018" and that date is also shown in the Google search results. If I was looking only for more recent articles, I wouldn't find this one. But the content of the article itself is fine now.


avoid non-inclusive language in buildbot configuration

In particular the term "master", when not referring to a branch.

There's only so much we can do here as buildbot itself uses the terms "master" and "worker" IIRC.


Add update methods for resources and tests

This change adds and update method to the Resource instance as well as similar methods to the Resource class.

This fixes #193.


Please merge revision e9e9835afc4633a0f4bb881c09a5dfb6d14fbc19 into dev channel

@whesse @mit-mit @kasperl
Update the Changelog for the new function type syntax.
e9e9835afc4633a0f4bb881c09a5dfb6d14fbc19
This merged cleanly

Merged to dev in revision 4417d85


microfetch: init at unstable-2024-08-04

Description of changes
Addition of microfetch:

A stupidly simple fetch tool, written in Rust. Runs in a fraction of a
second, displays most nonsense people on r/unixporn care about. Aims
to replace fastfetch on my system, but probably not on yours. Though
you are more than welcome to use it on your system: it's fast.

Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Add a :+1: reaction to pull requests you find important.

I've officially released a tag (v0.3.0) which should be the last one for a while, until I can squeeze in more performance somehow - we may use the tagged release and add an update script since future releases will be tagged as well.

I've officially released a tag (v0.3.0) which should be the last one for a while, until I can squeeze in more performance somehow - we may use the tagged release and add an update script since future releases will be tagged as well.

I have updated the tracked ref


React-native for android platform

When can we use react-native for android platform?
Thanks.

See here: http://www.reactnativeandroid.com/ :)

Cool! Thx @mavenave

@brentvatne pre-closearama-close.

Hope for react native for android


build: Update to header 1.3.279

Update known-good
Generate source

CI Vulkan-Tools build queued with queue ID 142989.

CI Vulkan-Tools build # 1378 running.

CI Vulkan-Tools build # 1378 failed.

CI Vulkan-Tools build queued with queue ID 143036.

Seems that CI failed due to v1.3.279 not being a known vulkan-loader tag?

whoops!

CI Vulkan-Tools build # 1379 passed.


Fix build warning: initialize order

warning: field 'initialized_' will be initialized after
field 'library_path_' [-Wreorder]

lgtm


Orangehrm password

What this PR does / why we need it:
Latest OrangeHRM version requires a password which contains letters, numbers and symbols. This PR ensures the password randomly generated had every character kind.
The way to ensure this password is a little hacky. I created the issue https://github.com/Masterminds/sprig/issues/99 on Sprig to have a proper way to generate this kind of passwords.
It also updates the MariaDB requirement.
Which issue this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close that issue when PR gets merged): fixes #

/assign @mattfarina @carrodher @tompizmor

/ok-to-test

/lgtm


add 4th byte of IP to regex condition

add 4th byte of IP to regex condition for ${SERVER_WG_IPV4} variable entries

Not sure what this PR is about anymore 🙂


BoringSSL supported features

Hi , all
From the "QAT_Engine/docs/features.md", qat_sw Features support RSA/ECDH/ECDSA/SM3/AES128-GCM/AES192-GCM/AES256-GCM
and from "QAT_Engine/docs/bssl_support.md" qat_sw Features only support RSA/ECDSA
my question is whether QAT_Engine for boringssl support ECDH/AES128-GCM/AES192-GCM/AES256-GCM or not?
Thanks a lot

Hi @yfaker QAT Engine for BoringSSL only support RSA and ECDSA. Other algorithms are not supported for boringSSL.

Hi @Yogaraj-Alamenda  thanks for your reply~
Wonder why other algorithms not supported, or is there any plan to support those algorithms?
Thanks a lot~~~

As related to this question, I am wondering if QAT engine can accelerate the two methods using async mode.
OPENSSL_EXPORT int X25519(uint8_t out_shared_key[32],
const uint8_t private_key[32],
const uint8_t peer_public_value[32]);
OPENSSL_EXPORT int EVP_DigestSign(EVP_MD_CTX *ctx, uint8_t *out_sig,
size_t *out_sig_len, const uint8_t *data,
size_t data_len);


Docs for proposed HMM-based segmentation

Like the other docs PR no need for review just yet.

@mbabadi Could you take a look at these notes?

Definiely, sorry for slacking about it :)
On Apr 15, 2016 6:09 PM, "David Benjamin"<EMAIL_ADDRESS>wrote:
@mbabadi https://github.com/mbabadi Could you take a look at these notes?
—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub
https://github.com/broadinstitute/gatk-protected/pull/422#issuecomment-210665146

@mbabadi It's not slacking if I hadn't asked you about it!

. . . which I hadn't until now.

By the way, I would appreciate not just a check of correctness but also a critical eye toward the use of an HMM for this.

@mbabadi I just pushed a revision that I believe is mathematically equivalent but eliminates the need to explicitly augment the hidden state with a binary indicator of memory loss.  This will make the code much more transparent.

Closed by PR #596.


SUBMARINE-701. Support Tensorboard in Experiment

What is this PR for?
Support new feature in 0.6.0: tensorboard integration.

Usage

Create a job request that uses tensorboard
Write tensorboard log to /logs/mylog (The subpath is required due to this issue in tensorflow https://github.com/kubeflow/tf-operator/issues/1053. We cannot directly write log file to mountPath.)
Link to http://<host>:<ip>/tfboard-${job-name}, and you can monitor the tensorboard with ease!

Implementation
When creating a new job, the backend will not only create original experiment but also several k8s resources required in tensorboard
The resources can be classified into two categories:

Storage
Tensorboard serving

Storage
The resources required for storage are persistent volume and persistent volume claim.
I set the storage path of persistent volume on host path, and mount this path to MLjob (enable job to generate logs to volume) and Tensorboard (enable tfboard to access logs).
Tensorboard Serving
The resources required here are deployments, service, and ingressroute.
I create the tensorboard apps with deployments and service, and then redirect it to custom path with the help of ingressroute.

Example

tensorboard-example.json
{
  "meta": {
    "name": "tensorflow-dist-mnist-byron-1234",
    "namespace": "default",
    "framework": "TensorFlow",
    "cmd": "python /var/tf_mnist/mnist_with_summaries.py --log_dir=/logs/mylog --learning_rate=0.01 --batch_size=20",
    "envVars": {
      "ENV_1": "ENV1"
    }
  },
  "environment": {
    "image": "apache/submarine:tf-mnist-with-summaries-1.0"
  },
  "spec": {
    "Worker": {
      "replicas": 1,
      "resources": "cpu=1,memory=1024M"
    }
  }
}

What type of PR is it?
[Feature]
Todos

[ ] Frontend support
[ ] The logs of job cannot be written directly on the mountPath (As describe in above). We should fix this problem.
[ ] Make log path configurable (Currently, it is hard-coded as /logs )
[ ] Support smb-server for shared storage

What is the Jira issue?
https://issues.apache.org/jira/projects/SUBMARINE/issues/SUBMARINE-701
How should this be tested?
https://travis-ci.org/github/ByronHsu/submarine/jobs/751658488
Questions:

Does the licenses files need update? No
Is there breaking changes for older versions? No
Does this needs documentation? No

@lowc1012 @jiwq @xunliu @pingsutw please help me review the code. Thanks!


Move from using etcd to a SQL DB (Cockroach DB?)

This is obviously not a short-term goal, but my impression is there are a lot of places where pach code has additional complexity, because of using etcd rather than a SQL DB. I'm going to start collecting them here (rather than just talking with @msteffen about them)

multi-column indices -- sorting an individual collection by a secondary column requires an in-mem sort (eg. this came up recently with the open commit collection). This makes pagination difficult. If each collection were an individual table, this would be solved by an index
DELETE CASCASE -- @msteffen believes we are not properly cascading deletes of repos, for example, so if a given repo name is created again, some state (branches etc.?) will still be present and cause problems (points at non-existent commit)
-...

My understanding is that the standard way to "watch" in (postgre)SQL is either using
LISTEN/NOTIFY or triggers, but AFAIU you're right that some notion of leases on keys would probably require client-side changes (unless you're just talking about something like SELECT FOR UPDATE?)
Re: graph DBs -- probably a bit early to use this, but it looks pretty interesting: https://github.com/indradb/indradb

Haven't done a ton of digging, but I've had my eye on: https://github.com/arangodb/arangodb for a while.

That looks cool, and it seems to support a first-class notion of relationships, which is really a lot of what I'd want from making a shift away from etcd


Interaction tic tac toe

Relevant Issues

closes GH-976

Description

switched to using interactions for tic tac toe
Update 19/12/2021:
The interface was redone, and the user now has a different interface.
I've edited the screenshots to be up to date
start of game

in progress

game over, win

game over, tie

Did you:

[x] Join the Python Discord Community?
[x] Read all the comments in this template?
[x] Ensure there is an issue open, or link relevant discord discussions?
[x] Read and agree to the contributing guidelines?

@onerandomusername will you be completing this PR?

I'll be closing this PR due to staleness. If this PR is going to be completed, please ping me, along with re-opening.


Roll engine 86aa01442b5d..bf15bd080314 (5 commits)

https://github.com/flutter/engine/compare/86aa01442b5d...bf15bd080314
git log 86aa01442b5d5a6b9b16ff3cf15d529a92d9d75c..bf15bd0803142ffc3500f8e5ad4d37aca34246ff --no-merges --oneline
bf15bd080 Add the key event source, vendorId, and productId from Android (flutter/engine#9186)
d4c7c30fd Roll src/third_party/skia a4bb02063672..346f82c1c3e0 (6 commits) (flutter/engine#9188)
7746e2e7f Compile the physical_shape_layer_unittests.cc TU. (flutter/engine#9187)
12f48f760 Allow for whitelisted flags to be passed to the Dart VM (flutter/engine#9148)
b304dabc3 [scene_host] Cleanup scene_host closures (flutter/engine#9061)
The AutoRoll server is located here: https://autoroll.skia.org/r/flutter-engine-flutter-autoroll
Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+/master/autoroll/README.md
If the roll is causing failures, please contact the current sheriff (bmparr@google.com), and stop
the roller if necessary.

Auto-roller completed checks. About to merge.


poc(Button): display svg icon path on button hover

This is just an experiment to learn how Button with Icon is supposed to be used in order to implement button which contains an icon which is 'filled' on hover.
Requirements (@200%):
| normal | :hover
-- | -- | --
light |    |
dark |  |
hc |   |
Proposed implementation concerns

Proposed implementation works fine for light and dark theme, I do not know how to implement that for HC theme.
It uses static class name (ui-icon__filled)

@codepretty - could you please review this to verify it is in line with your changes/plans on SVG icons?

Closing this for now, will create a new PR once #478 is merged.


outputformat set is not including duplicate objects in the delete statements when used with type=address-merger

Describe the bug
When using type=address-merger to merge duplicate objects and when using outputformatset as an option, the delete commands that are generated in the output file do not include specific objects in the source or destination fields in the rule-base. They simply delete the entire source or the entire destination.
Expected behavior
The expected behavior is to only delete the duplicate objects that are referenced in the policies.
Current behavior
The script appears to be generating one delete command per instance of duplicate object, it is just missing the output of the duplicate address name in each statement.  Whichever variable is being used to store the name value of the duplicate addresses, reference this in the delete statement output. There are multiple delete statements per rule so this tells me that the loop iteration is correct, the value of the duplicate object is simply missing.
Steps to reproduce
Run pan-os-php type=address-merger against a configuration file that contains duplicate address objects. Use the argument "outputformatset" to generate set commands that delete the duplicate objects and add the replacement objects. CTRL+F for the delete statements in the rulebases. It affects all rulebases from what I can see. My config has NAT policies and Security policies.
Screenshots

Context
I am running this against a very large config to assist my environment with address deduplication. We cannot use the set commands in the change tracking system because of the risk of deleting legitimate non-duplicated objects.
Your Environment
It's big. Multiple Panoramas and this is part of an environment-wide deduplication effort.

Version used:
PAN-OS-PHP version: 2.0.40 [UNIX]
PHP version: 7.4.3

thanks Tom for finding this bug:
fixed with PR:
#569


2 storyshots libraries???

Why are there 2 storyshots libraries? Which one should I use. Its  seems they are different versions also.
npm i -D @kadira/storyshots
npm i -D storyshots

Please use the storyshots module


Added UMD definition

Hey i closed #33 because I had another issue, and I wanted to create seperate PR's.

@esbenp I agree, we should add a UMD definition. I apologize for not accepting this PR (thanks for putting in the time!), but with switching to ES6 and off of Grunt, I think it makes more sense to delay adding UMD until we get that done.
I've added an issue for this: https://github.com/immense/knockout-datatable/issues/44


Request for sponsorship?

My employer, Sentry, contributes annually to open source projects (https://opensourcepledge.com/). We have an internal process where we nominate open source projects to receive funding.
I'd like to nominate keyring. Would the maintainers here be open to flipping on the Sponsorship bit in their GitHub profiles? :)

Wow, that’s very sweet of you, thanks!
I haven’t heard from Walther in forever, so I can’t speak for him. Do you
need both of us to agree, or just one of us?
I have no idea how Sponsorship works, so let me do some research and I’ll
get back to you. -d.
Dan – pronouns he/him
On Oct 8, 2024 at 8:40:09 AM, Matthew T @.***> wrote:

My employer, Sentry, contributes annually to open source projects (
https://opensourcepledge.com/). We have an internal process where we
nominate open source projects to receive funding.
I'd like to nominate keyring. Would the maintainers here be open to
flipping on the Sponsorship bit in their GitHub profiles? :)
—
Reply to this email directly, view it on GitHub
https://github.com/hwchen/keyring-rs/issues/219, or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAFIL7PP6N67ZQ4T22QA6EDZ2P4FTAVCNFSM6AAAAABPSSABKCVHI2DSMVQWIX3LMV43ASLTON2WKOZSGU3TGNJXGA3TCNY
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

We do not need both to agree. We'll sponsor who we can (either via GitHub Sponsors or OpenCollective).
As maintainers, you all can split the sponsorship as you see fit of course. :) Ideally it'd be nice to give to both of you, but that's up to you.

I'm happy to have the sponsorship for keyring go to @brotskydotcom, as I'm no longer involved in maintaining this crate. I do peek in every now and then and see all the heavy lifting that's being done, I'm just happy that keyring is in good hands :)

OK @mdtro, let's go ahead with this. I have changed my profile to allow sponsorships, and I will try adding a sponsor badge to this repository.  Thanks so much, again, for your generosity.

OK, I managed to give us a sponsorship badge. Thanks again.


Replace explicit /stable links with named version

Using a Liquid snippet
This PR also updates a lot of CC links that were referencing
outdated versions of CRDB docs (e.g., v20.1).

This change is

This should also take care of #9701
Thanks Jesse!


⚠ Secret Website 3 has degraded performance

In db54f33, Secret Website 3 ($SECRET_WEBSITE_3) experienced degraded performance:

HTTP code: 200
Response time: 2124 ms

Resolved: Secret Website 3 performance has improved in 4d0db9c.


tinyYoloV2 making my code collapse

Hi,
I'm using your faceExpressionsNet and when i start my code it immediately collapses and shows the following error:

Do you have any idea what might solve it?

Sounds like you didn't load the model before actually trying to use it.

I did, it doesn't work
On Mon, Jun 8, 2020, 10:40 AM Ulrira2k<EMAIL_ADDRESS>wrote:

Sounds like you didn't load the model before actually trying to use it.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
https://github.com/justadudewhohacks/face-api.js/issues/628#issuecomment-640425548,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AK7XGJH752LDNXZAEIPHME3RVSIVJANCNFSM4NPTZCKQ
.

Yeah, I figured. Just saw another issue where somebody said he had loaded the model but got this error. That's why I deleted my comment again, seeming as that was probably not the reason ;)


What's next?

How do I use the system? Is there any documentation other than the Readme?

No other documentation I'm afraid, but to create a discussion you need to fit create a group which the message states. Are you not able to see a "New Group" button anywhere like on the /groups (groups index) route?

Closing this issue as it's not really a bug and more a question of how you create a group/get started as a user. If you have more questions, feel free to post here and I'll respond.


Migrate IAC blog site

In this PR, the contents of the IAC blog has moved to the DevX site. Appropriate changes have been made to the content and structure of the DevX site to facilitate these changes.

Looking good!
There is a CODEOWNERS in static/ that seems to be invalid
https://github.com/puppetlabs/devx/pull/99/files#diff-f75cc701da6d755b46bbbbf6c15c49c186c6cb128c9f9c96e923f784f789e858. Do we need it there given that there is one in root?
Also can you add a .gitignore entry for .DS_Store files?

Runs locally and looks great 😄  An about page has appeared though. Do we need to fill this in?


Suddenly sendgrid module unable to find / Google Cloud Function

Issue Summary
I'm writing a Cloud Function on GCP using SendGrid.
I'm using the embedded GCP editor to update my cloud function.
After a few versions, it's no more possible to use sendgrid. I get the error
Did you list all required modules in the package.json dependencies?
Detailed stack trace: Error: Cannot find module 'sendgrid'
at Function.Module._resolveFilename (module.js:476:15)
at Function.Module._load (module.js:424:25)
at Module.require (module.js:504:17)
at require (internal/module.js:20:19)
at Object. (/user_code/index.js:8:18)
at Module._compile (module.js:577:32)
at Object.Module._extensions..js (module.js:586:10)
at Module.load (module.js:494:32)
at tryModuleLoad (module.js:453:12)
at Function.Module.load (module.js:445:3)
The .json is unchanged. And even using a former version of my code, it has the same issue.
The package.json contains
{
"name": "send email alerts",
"version": "0.0.2",
"engines": {
"node": "0.10.x",
"npm": "1.2.x"
},
"dependencies": {
"dotenv": "^0.5.1",
"nodemailer": "^1.3.0",
"sendgrid": "^1.5.0",
"@sendgrid/mail": "^6.0.0",
"smtpapi": "^1.0.5"
}
}
The index.js contains
const sendgrid = require('sendgrid');
const sendgridAlertBillingApiKey = 'xxxxxxxx'
exports.sendmail = (event, callback) => {
const pubsubMessage = event.data;
const name = pubsubMessage.data ? Buffer.from(pubsubMessage.data, 'base64').toString() : 'World';
console.log(Message received from Pub : ${name}!);
const sgMail = require('@sendgrid/mail');
sgMail.setApiKey(sendgridAlertBillingApiKey);
var msg = {};
msg.to      =<EMAIL_ADDRESS>msg.from    =<EMAIL_ADDRESS>msg.subject = 'Billing Alert 2';
msg.html    =
${name}

Automatic billing alert generated by Pub/Sub & CloudFunction on node.js
;
sgMail.send(msg);
console.log('Mail sent')
callback();
};_
Steps to Reproduce

Create a new cloud function
Update it many times.
After a while , the error occurs.

I wonder if the sendgrid module are always online ?
Technical details:

sendgrid-nodejs Version: master (latest commit: [commit number])
Node.js Version: 6

Hello @mldmld68,
Could you please try removing this line "sendgrid": "^1.5.0",. Thanks!
With Best Regards,
Elmer