Any plans to incorporate various compliance/control frameworks?

Would be nice if there was a way to configure queries based on the various compliance frameworks, such as the Cloud Security Alliance (CSA) CCM instead of just the Center for Internet Security (CIS) benchmark standards.
Something similar to what Prisma Cloud can do from a policy standpoint.

just checking in to see if maybe this was on the roadmap. :D

Hi @corydorning thanks for your question!
Compliance related features are being considered for the enterprise version of KICS (meaning, KICS running on Checkmarx's platform).
Of course, any query added to cover the mentioned guidelines will be added to KICS open source, for general usage!
We'd love if you could use our Github Discussions panel for questions/suggestions like these. WDYT?

Our plan is to likely use the Enterprise version. Assuming that, is there an ETA on such compliance related features?
Sent from my iPhone

On May 11, 2022, at 4:40 AM, Nuno Oliveira @.***> wrote:

Hi @corydorning thanks for your question!
Compliance related features are being considered for the enterprise version of KICS (meaning, KICS running on Checkmarx's platform).
Of course, any query added to cover the mentioned guidelines will be added to KICS open source, for general usage!
We'd love if you could use our Github Discussions panel for questions/suggestions like these. WDYT?
—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you were mentioned.


gov.uk subdomain exemption form

See https://www.gov.uk/guidance/content-design/planning-content#getting-an-exemption and instruction from HO Assurance team

sent - waiting on response from assurance team


Remove context from element.

This change is

Review status: all files reviewed at latest revision, all discussions resolved.

Comments from Reviewable


connect to remote database server

PHP Version
8.0
CodeIgniter4 Version
4.4.1
CodeIgniter4 Installation Method
Composer (using codeigniter4/appstarter)
Which operating systems have you tested for this bug?
Windows, Linux
Which server did you use?
apache
Database
Mysql5.6
What happened?
I want connect other database [remote] . but :
Error connecting to the database: mysqli_sql_exception: Connection refused
Next CodeIgniter\Database\Exceptions\DatabaseException: Connection refused
Unable to connect to the database.
Main connection [MySQLi]: Connection refused
Steps to Reproduce
I try edit database config array like this
$met_conf = [
            'hostname' => 'example.com',
            'username' => 'example',
            'password' => 'example&123distant',
            'database' => 'example',
            'DBDriver' => 'MySQLi',
            'DBPrefix' => '',
            'pConnect' => false,
            'DBDebug' => true,
            'charset' => 'utf8',
            'DBCollat' => 'utf8_general_ci',
            'swapPre' => '',
            'encrypt' => false,
            'compress' => false,
            'strictOn' => false,
            'port' => 3306,
            'numberNative' => false,
        ];

because this conection always need  but this user only have "select" Permissions. so I create a function belowed  common.php
to connect this database. but always return error. and I connect this database successfully  on the terminal
Expected Output
nothing
Anything else?
No response

We use GitHub issues to track BUGS and to track approved DEVELOPMENT work packages. We use our forum to provide SUPPORT and to discuss FEATURE REQUESTS.

We use GitHub issues to track BUGS and to track approved DEVELOPMENT work packages. We use our forum to provide SUPPORT and to discuss FEATURE REQUESTS.

Posted but not resolved.

If you can connect to the database server with plain PHP code, it is surely a bug in CodeIgniter.


Solutions engineer - Sam Cipriani PR

Hello,
This is my PR to finish the technical exercise Jake gave me last week. Thank you again for the chat and the opportunity.
-Sam

Closing PR because I forgot the Final Question and to link to my dashboards.. Final PR coming soon.


Align doesn't work in university theme

Hey,
when trying to use #align in the university theme like this:
#import "@preview/polylux:0.3.1": *
#import themes.university: *

#show: university-theme.with()

#slide(title: [Title])[
#align(bottom)[
Demo text
]
]

The text would continue to stick to the top of the slides like this:

However, when using the simple theme, this would work.
Unfortunately, I don't understand enough Typst to debug, why this doesn't work. Can someone help?

That's quite strange indeed. In the meantime, maybe try putting #v(1fr) at the top of your slide's content.

I've found that the cause of this bug is that, in slide, body is wrapped in pad(x, y, ...) rather than block(inset: (x, y), ...). I'm planning to figure out how to make a PR for that in a couple days, but just changing that isn't too big a deal for now.

I can confirm this issue as well.

So I tried @Andrew-Schwartz's solution and it didn't seem to work for me. I changed line 106 of themes/university.typ to let body = block(inset: (x: 2em, y: .5em), body) and tested with the following slide:
#slide(
  title: [Testing],
  align(horizon, [Testing])
)

The result was that the text was still not horizontally aligned. If I remove line 106 and leave body just as it is passed to the function the text becomes horizontally aligned but the content goes right to the edges of the page (as you'd expect without padding).
I'm not quite savvy enough about the internals of Typst to know how we can apply the align function to the outside of the pad function. Any thoughts?


Allow specification of IP prefix arrays for firewall rules

So that we do not need to repeat config sections for rules that apply to many prefixes (e.g. Fastly).
The diff only needs to show expanded IPs, not grouped.

Thank you for your interest in this project but we now consider it
both feature complete for our own usage and in maintenance mode.
While we will not be investing any more development time in this
project we may still include pull requests.


Main go process exits and forks off SC cmds

Main process should exit and cede control of the terminal back to the user.  See if forking is possible.

https://groups.google.com/forum/#!topic/golang-nuts/shST-SDqIp4 <- intercept the CTRL-C (SIGINT) signal and instead of killing parent and children just kill parent.

no benefit at the moment.  closing.


getting error on release apk, debug apk works fine

Flutter: Unhandled exception: MissingPluginException(No implementation found for method getAll on channel plugins.flutter.io/package_info)

Hi @jithinjoycy,
Please provide flutter doctor -v, a minimal complete reproducible code sample that shows the issue along with pubspec.yaml.
Thanks.

@jithinjoycy,
Please provide the earlier and downgraded gradle versions that you used.
Thanks.

same issue on release apk 😭

same issue on release apk 😭

@darshankawar do you have any solution?

I used  package_info: '>=0.4.3 <2.0.0'

full error
2020-09-15 16:53:41.813 1467-1491/? E/ANDR-PERF-JNI: com_qualcomm_qtiperformance_native_perf_io_prefetch_start
2020-09-15 16:53:41.813 1467-1491/? E/ANDR-PERF-JNI: gIOPHAl initialized
2020-09-15 16:53:41.814 4097-4170/? E/flutter: [ERROR:flutter/lib/ui/ui_dart_state.cc(166)] Unhandled Exception: MissingPluginException(No implementation found for method getAll on channel plugins.flutter.io/package_info)
    #0      MethodChannel._invokeMethod (package:flutter/src/services/platform_channel.dart:159)
    <asynchronous suspension>
    #1      MethodChannel.invokeMapMethod (package:flutter/src/services/platform_channel.dart:361)
    <asynchronous suspension>
    #2      PackageInfo.fromPlatform (package:package_info/package_info.dart:43)
    <asynchronous suspension>
    #3      SplashLogic.versionCheck (package:orel_go_driver/screens/Splash/logic/splashLogic.dart:15)
    <asynchronous suspension>
    #4      _SplashState.initState.<anonymous closure>.<anonymous closure> (package:orel_go_driver/screens/Splash/splash.dart:21)
    <asynchronous suspension>

@bhanuka96 since this is a closed issue, please consider opening a new one by providing all required details.
Thanks.

@darshankawar okay I will do it.
it's working when I am installing like this
flutter build apk --no-shrink
Is it okay to build apk/appbundle for production level(publish to play store)?


Fix rake dependency

rake 11.1.2 requires ruby 1.9.3 or greater. Doing a switch based on RUBY_VERSION was the only way I found to handle specifying different versions of the same gem. Both :platforms and :install_if complain (understandably) if specifying different versions of the same gem:
[!] There was an error parsing `Gemfile`: You cannot specify the same gem twice with different version requirements.
You specified: rake (< 11.1.2) and rake (>= 0). Bundler cannot continue.

 #  from /Users/larry/Code/zk/Gemfile:17
 #  -------------------------------------------
 #    gem 'rake', '< 11.1.2', :platforms => [ :ruby_18, :ruby_19 ]
 >    gem 'rake', :platforms => :ruby_20
 #  end
 #  -------------------------------------------

Verified with the CI builds that 1.9.2, 1.8.7, and ree all install rake 10.5.0 while the rest install 11.1.2.


Angle Converter

Sounds great, Go ahead
Deadline: 23 April 2021

It is already there in the unit convertor section. You can close this issue @apekshamanchanda @shrishti-c

Oh, I missed it
Will close it


doc: rewrite domain-specific examples

For example, in the 'Popper in Data Science' guide:

This was very confusing for me. What is the goal of the CLI? Is it
someone looking at someone else's popper repo and wanting to re-run
an experiment? Is it me starting a new project?
What does popper experiment jupyter-bww myexperiment do? Pull
stuff from the internet, re-run stuff?

In general, the guides give the impression that in order to understand
it you need to already be familiar with Popper. Isn't the goal of a
guide to familiarize the reader with Popper?

done


vscode falsely reports successful deploy for Python function when errors occur

While trying to use the vscode azure function extension to deploy a python-based function app, I ran into a series of issues.
Case 1: When trying to deploy a function app without functions and deploying a new HTTP trigger-based Python function, it would report successful deployment but not find any http triggers upon syncing.
Case 2:  When first deploying a "Hello Name" python-based function and trying to subsequently deploy a specific python-based function, it would report successful deployment for the "Hello World" function.  This would occur even if I deleted the function from the function app and seemingly erase every evidence of its existence.
However,  when using "func azure functionapp publish xxxx", it would fail fast and point out that my requirements.txt had an error.  Upon, in this case, removing "json" from requirements.txt, the deployment would now work successfully in both places.
This is easily reproducible and highly frustrating.
Creating archive for current directory...
Performing remote build for functions project.
Uploading 175.44 KB [#############################################################################]
Remote build in progress, please wait...
Updating submodules.
Preparing deployment for commit id '2a4dd411b7'.
Repository path is /tmp/zipdeploy/extracted
Running oryx build...
Command: oryx build /tmp/zipdeploy/extracted -o /home/site/wwwroot --platform python --platform-version 3.7 -p packagedir=.python_packages/lib/site-packages
Build orchestrated by Microsoft Oryx, https://github.com/Microsoft/Oryx
You can report issues at https://github.com/Microsoft/Oryx/issues
Oryx Version      : 0.2.20200114.13, Commit: 204922f30f8e8d41f5241b8c218425ef89106d1d, ReleaseTagName: 20200114.13
Build Operation ID: |ddAgrZinqq4=.a2a958e7_
Repository Commit : 2a4dd411b7144aaeaa17b55dda22f8cf
Source directory     : /tmp/zipdeploy/extracted
Destination directory: /home/site/wwwroot
Python Version: /opt/python/3.7.5/bin/python3
Running pip install...
[13:59:45+0000] Collecting azure-functions
[13:59:45+0000]   Downloading https://files.pythonhosted.org/packages/5b/6d/67a219c38be7e4eae7c001a9bf83ab059dcf497644ccc6c5f696ea4155fa/azure_functions-1.2.1-py3-none-any.whl (114kB)
[13:59:45+0000] Collecting azure-storage-blob
ERROR: Could not find a version that satisfies the requirement json (from -r requirements.txt (line 3)) (from versions: none)
ERROR: No matching distribution found for json (from -r requirements.txt (line 3))
WARNING: You are using pip version 19.3.1; however, version 20.1 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.
[13:59:46+0000]   Downloading https://files.pythonhosted.org/packages/48/ce/14a3bb145a1daeec5eb74fadfe0ad246e0416af372cb22d2497484a12522/azure_storage_blob-12.3.1-py2.py3-none-any.whl (279kB)
[13:59:46+0000] Cleaning up...
Done in 3 sec(s).
ERROR: Could not find a version that satisfies the requirement json (from -r requirements.txt (line 3)) (from versions: none)\nERROR: No matching distribution found for json (from -r requirements.txt (line 3))\nWARNING: You are using pip version 19.3.1; however, version 20.1 is available.\nYou should consider upgrading via the 'pip install --upgrade pip' command.\n/opt/Kudu/Scripts/starter.sh oryx build /tmp/zipdeploy/extracted -o /home/site/wwwroot --platform python --platform-version 3.7 -p packagedir=.python_packages/lib/site-packages
Remote build failed!
(cnn) C:\Users\chhighma\source\repos\res\test>func azure functionapp publish priusresult
Getting site publishing info...
Creating archive for current directory...
Performing remote build for functions project.
Deleting the old .python_packages directory
Uploading 175.44 KB [#############################################################################]
Remote build in progress, please wait...
Updating submodules.
Preparing deployment for commit id '19781e7767'.
Repository path is /tmp/zipdeploy/extracted
Running oryx build...
Command: oryx build /tmp/zipdeploy/extracted -o /home/site/wwwroot --platform python --platform-version 3.7 -p packagedir=.python_packages/lib/site-packages
Build orchestrated by Microsoft Oryx, https://github.com/Microsoft/Oryx
You can report issues at https://github.com/Microsoft/Oryx/issues
Oryx Version      : 0.2.20200114.13, Commit: 204922f30f8e8d41f5241b8c218425ef89106d1d, ReleaseTagName: 20200114.13
Build Operation ID: |TpmckRnwVmQ=.bb74b80b_
Repository Commit : 19781e7767f848caa51d826d7b148ab2
Source directory     : /tmp/zipdeploy/extracted
Destination directory: /home/site/wwwroot
Python Version: /opt/python/3.7.5/bin/python3
Running pip install...
[14:00:36+0000] Collecting azure-functions
[14:00:36+0000]   Using cached https://files.pythonhosted.org/packages/5b/6d/67a219c38be7e4eae7c001a9bf83ab059dcf497644ccc6c5f696ea4155fa/azure_functions-1.2.1-py3-none-any.whl
[14:00:36+0000] Collecting azure-storage-blob
[14:00:36+0000]   Using cached https://files.pythonhosted.org/packages/48/ce/14a3bb145a1daeec5eb74fadfe0ad246e0416af372cb22d2497484a12522/azure_storage_blob-12.3.1-py2.py3-none-any.whl
[14:00:36+0000] Collecting azure-core<2.0.0,>=1.4.0
[14:00:36+0000]   Downloading https://files.pythonhosted.org/packages/7b/11/9c7b177c559124f957d0e56182e2f13119531f7227367b1b649095ebc49a/azure_core-1.4.0-py2.py3-none-any.whl (114kB)
[14:00:37+0000] Collecting cryptography>=2.1.4
[14:00:37+0000]   Downloading https://files.pythonhosted.org/packages/3c/04/686efee2dcdd25aecf357992e7d9362f443eb182ecd623f882bc9f7a6bba/cryptography-2.9.2-cp35-abi3-manylinux2010_x86_64.whl (2.7MB)
[14:00:38+0000] Collecting msrest>=0.6.10
[14:00:38+0000]   Downloading https://files.pythonhosted.org/packages/56/f2/e2f9e4dc72884fff27e68ceaf027b9a3b80ba16f5757fc2916cb5d9117bd/msrest-0.6.13-py2.py3-none-any.whl (83kB)
[14:00:38+0000] Collecting requests>=2.18.4
[14:00:38+0000]   Downloading https://files.pythonhosted.org/packages/1a/70/1935c770cb3be6e3a8b78ced23d7e0f3b187f5cbfab4749523ed65d7c9b1/requests-2.23.0-py2.py3-none-any.whl (58kB)
[14:00:38+0000] Collecting six>=1.6
[14:00:38+0000]   Downloading https://files.pythonhosted.org/packages/65/eb/1f97cb97bfc2390a276969c6fae16075da282f5058082d4cb10c6c5c1dba/six-1.14.0-py2.py3-none-any.whl
[14:00:39+0000] Collecting cffi!=1.11.3,>=1.8
[14:00:39+0000]   Downloading https://files.pythonhosted.org/packages/ff/1d/0b743dadcdf4980b717163fd2d24cd18c1c0c7a78a076268afd7e0e2c25e/cffi-1.14.0-cp37-cp37m-manylinux1_x86_64.whl (400kB)
[14:00:39+0000] Collecting isodate>=0.6.0
[14:00:39+0000]   Downloading https://files.pythonhosted.org/packages/9b/9f/b36f7774ff5ea8e428fdcfc4bb332c39ee5b9362ddd3d40d9516a55221b2/isodate-0.6.0-py2.py3-none-any.whl (45kB)
[14:00:39+0000] Collecting requests-oauthlib>=0.5.0
[14:00:39+0000]   Downloading https://files.pythonhosted.org/packages/a3/12/b92740d845ab62ea4edf04d2f4164d82532b5a0b03836d4d4e71c6f3d379/requests_oauthlib-1.3.0-py2.py3-none-any.whl
[14:00:39+0000] Collecting certifi>=2017.4.17
[14:00:39+0000]   Downloading https://files.pythonhosted.org/packages/57/2b/26e37a4b034800c960a00c4e1b3d9ca5d7014e983e6e729e33ea2f36426c/certifi-2<IP_ADDRESS>-py2.py3-none-any.whl (157kB)
[14:00:39+0000] Collecting chardet<4,>=3.0.2
[14:00:39+0000]   Downloading https://files.pythonhosted.org/packages/bc/a9/01ffebfb562e4274b6487b4bb1ddec7ca55ec7510b22e4c51f14098443b8/chardet-3.0.4-py2.py3-none-any.whl (133kB)
[14:00:39+0000] Collecting idna<3,>=2.5
[14:00:39+0000]   Downloading https://files.pythonhosted.org/packages/89/e3/afebe61c546d18fb1709a61bee788254b40e736cff7271c7de5de2dc4128/idna-2.9-py2.py3-none-any.whl (58kB)
[14:00:40+0000] Collecting urllib3!=1.25.0,!=1.25.1,<1.26,>=1.21.1
[14:00:40+0000]   Downloading https://files.pythonhosted.org/packages/e1/e5/df302e8017440f111c11cc41a6b432838672f5a70aa29227bf58149dc72f/urllib3-1.25.9-py2.py3-none-any.whl (126kB)
[14:00:40+0000] Collecting pycparser
[14:00:40+0000]   Downloading https://files.pythonhosted.org/packages/ae/e7/d9c3a176ca4b02024debf82342dab36efadfc5776f9c8db077e8f6e71821/pycparser-2.20-py2.py3-none-any.whl (112kB)
[14:00:40+0000] Collecting oauthlib>=3.0.0
[14:00:40+0000]   Downloading https://files.pythonhosted.org/packages/05/57/ce2e7a8fa7c0afb54a0581b14a65b56e62b5759dbc98e80627142b8a3704/oauthlib-3.1.0-py2.py3-none-any.whl (147kB)
[14:00:40+0000] Installing collected packages: azure-functions, chardet, certifi, idna, urllib3, requests, six, azure-core, pycparser, cffi, cryptography, isodate, oauthlib, requests-oauthlib, msrest, azure-storage-blob
[14:00:42+0000] Successfully installed azure-core-1.4.0 azure-functions-1.2.1 azure-storage-blob-12.3.1 certifi-2<IP_ADDRESS> cffi-1.14.0 chardet-3.0.4 cryptography-2.9.2 idna-2.9 isodate-0.6.0 msrest-0.6.13 oauthlib-3.1.0 pycparser-2.20 requests-2.23.0 requests-oauthlib-1.3.0 six-1.14.0 urllib3-1.25.9
[14:00:42+0000] Cleaning up...
WARNING: You are using pip version 19.3.1; however, version 20.1 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.
Done in 8 sec(s).
Done running pip install.
Copying files to destination directory '/home/site/wwwroot'...
Done in 0 sec(s).
Removing existing manifest file
Creating a manifest file...
Manifest file created.
Done in 8 sec(s).
Running post deployment command(s)...
Triggering recycle (preview mode disabled).
Creating placeholder blob for linux consumption function app...
SCM_RUN_FROM_PACKAGE placeholder blob scm-latest-priusresult.zip located
Writing the artifacts to a squashfs file
Parallel mksquashfs: Using 1 processor
Creating 4.0 filesystem on /home/site/deployments/functionappartifact.squashfs, block size 131072.
[=============================================================-] 1234/1234 100%
Exportable Squashfs 4.0 filesystem, gzip compressed, data block size 131072
compressed data, compressed metadata, compressed fragments, compressed xattrs
duplicates are removed
Filesystem size 5706.04 Kbytes (5.57 Mbytes)
25.93% of uncompressed filesystem size (22004.59 Kbytes)
Inode table size 12656 bytes (12.36 Kbytes)
29.21% of uncompressed inode table size (43328 bytes)
Directory table size 12773 bytes (12.47 Kbytes)
35.87% of uncompressed directory table size (35608 bytes)
Number of duplicate files found 43
Number of inodes 1342
Number of files 1163
Number of fragments 102
Number of symbolic links  0
Number of device nodes 0
Number of fifo nodes 0
Number of socket nodes 0
Number of directories 179
Number of ids (unique uids + gids) 1
Number of uids 1
root (0)
Number of gids 1
root (0)
Uploading built content /home/site/deployments/functionappartifact.squashfs for linux consumption function app...
Resetting all workers for priusresult.azurewebsites.net
Deployment successful.
Remote build succeeded!
Syncing triggers...
Functions in priusresult:
HttpTrigger2 - [httpTrigger]
Invoke url: https://priusresult.azurewebsites.net/api/httptrigger2
HttpTrigger3 - [httpTrigger]
    Invoke url: https://priusresult.azurewebsites.net/api/httptrigger3

PriusTrigger - [httpTrigger]
    Invoke url: https://priusresult.azurewebsites.net/api/priustrigger

(cnn) C:\Users\chhighma\source\repos\res\test>func azure functionapp publish priusresult

Note, vscode also indicates a successful deployment notification.
Bad

6:57:32 AM priusresult: Oryx Version : 0.2.20200114.13, Commit: 204922f30f8e8d41f5241b8c218425ef89106d1d, ReleaseTagName: 20200114.13
6:57:32 AM priusresult: Build Operation ID: |769DrMtthM0=.f11d9817_
6:57:32 AM priusresult: Repository Commit : d33b5338d244444da8615ea834776392
6:57:55 AM priusresult: Syncing triggers...

Good

7:17:39 AM priusresult: Command: oryx build /tmp/zipdeploy/extracted -o /home/site/wwwroot --platform python --platform-version 3.7 -p packagedir=.python_packages/lib/site-packages
7:17:55 AM priusresult: Running post deployment command(s)...
...
7:18:15 AM priusresult: Syncing triggers...

Not familiar with the code but I don't see any particular handling that would account for a remote build failure.
getPythonValidateOptions
validateRemoteBuild
These were the only two candidates that stood out as potential options provided pip install is associated with the initial (as expected task) and the latter seeks to validate the remote build itself but nothing specific for python.

Thanks for the details - I can repro with those steps. Not sure why we're different from the func cli, but I'll look into it

@cchighman FYI we just released v0.22.1 of the extension, which should include the fix for this issue. Thanks again for filing with detailed information!

Thank you!


python3Packages.libclang: init at 16.0.6

Description of changes

Things done

Built on platform(s)

[X] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[X] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[ ] Fits CONTRIBUTING.md.

Related: https://github.com/NixOS/nixpkgs/issues/89214

I hadn't seen this PR when I made mine, but there is a build that uses our own libclang in #261113


Android 9: Button not working after app resume from background

https://user-images.githubusercontent.com/6112111/218619802-5bcb7d6e-60b4-4f13-9080-9550bfc6f3db.mp4

are you on the latest version?

@adospace

Tested with the Emulator Android 9.0 API 28 and version 104 seems working fine.
Anyway, it's clear that in it doesn't: the app is not receiving the resume event so that MauiReactor loop remains paused.
I think I fixed the issue by removing the suspension code in version 105.
Please update the MauiReactor version to latest and kindly report if it fixes your scenario, thanks

Version 105 works fine, thanks.


Update action's branch to fix deprecation warning

Fixes a deprecation warning at https://github.com/jazzband/geojson/actions/runs/4012584880

> PyPA publish to PyPI GHA: UNSUPPORTED GITHUB ACTION VERSION <<#L1
You are using "pypa/gh-action-pypi-publish@master". The "master" branch of this project has been sunset and will not receive any updates, not even security bug fixes. Please, make sure to use a supported version. If you want to pin to v1 major version, use "pypa/gh-action-pypi-publish@release/v1". If you feel adventurous, you may opt to use use "pypa/gh-action-pypi-publish@unstable/v1" instead. A more general recommendation is to pin to exact tags or commit shas.

Docs: https://github.com/pypa/gh-action-pypi-publish#-master-branch-sunset-

Also bump other GitHub Actions, should fix some or all of the other warnings:

Node.js 12 actions are deprecated. Please update the following actions to use Node.js 16: actions/checkout@v2, actions/setup-python@v2, actions/cache@v2. For more information see: https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/.

The set-output command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

The save-state command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

And simplify config:

Change guard to github.repository_owner == 'jazzband', makes it easier to compare files across Jazzband repos, makes easier to maintain
Use actions/setup-python's own builtin pip caching

Thanks @hugovk


How to add the account for team?

the error come when i buding in my iPhone
"No account for team "MGCEKGP4Y4". Add a new account in the Accounts preference pane or verify that your accounts have valid credentials."

The Xcode project is set up to use my development account. You should choose your own instead (in the Project/Target Settings screen).


Gam print orgs is not a valid argument

Hi ,
Currently encounter issue when I try to export OU only ,
Error : name is not a valid argument for " gam print orgs"
May i know is gam no longer support to export orgs to csv file ?

Issue resolved after upgrading to the latest version 👍


What is the meaning of 'model_id'? / Using this model in Colab

Hello! I'm beginner in this area and trying to use TimesNet model to do time series forecast.
It's great for me your TimesNet_tutorial.ipynb. I've learned a great deal thanks to you.
I have some questions about TimesNet.
If it's not too much trouble, could you explain what the 'model_id' hyperparameter means? The default value of model_id is 'test' and 'ETTh1_96_96' in tutorial, but I want to train the model from scratch using my own data. I feel a little silly asking this, but I'm eager to use your model and I need to know this. And I want to train this model in Colab and save it for future predictions. Can you provide some guidance on this?
Thanks for helping me out, and I hope your day goes well!

Yeah now i know 'model_id' just a name of my model.. im so shamed :(

Thank you for using TSlib. Good Luck~


Is perfetto not support Android13 Developer Preview?

Hello Perfetto team
I flashed Pixel5 device with Android13 preview and then tried to recording perfetto using "Record new trace" menu in perfetto ui.
But there are no atrace slices in slice table.(I enabled all of atrace tag. But there are only about binder transaction)
Is perfetto doesn't support Android13 preview?

@ddiproietto ^

The problem has been fixed now, I'll let you know when you can try another build of Android 13 with the fix applied.

I think the statement here is: will be fixed in the next Android 13 Developer Preview (DP2). DP1 was cut at an unfortunate time and that bug was caught in.

Thank you for your quick response. :)
I really hope to using perfetto in next preview image.


run error

hello, I want to run your code,but when i scanner" ./script.sh $0''，there is not any reaction,I fellow your instructions before ,I do not kown why?
(active_learn) root@interactive49465:/opt/data/private/ps/workspace/MI-AOD# ./script.sh $0
(active_learn) root@interactive49465:/opt/data/private/ps/workspace/MI-AOD#

When you run the bash file "script.sh", the code is executed in the background. You can view the output log by running this command in the root directory:
vim log_nohup/nohup_0.log
Or, if you want to directly output the running log in the foreground, you can run the following command in the code root directory:
tools/dist_train.sh configs/MIAOD.py 1
Before each run, please modify the PORT in Line 5 of tools/dist_train.sh to a five-digit port number, which is different from the last run.


Optimize math library

The Math utils library can be optimized using bit shifts and bitwise and operations in place of division and modulo by 2, respectively.  Tests should be added before updating.

Required steps:

Create MathMock contract for testing Math library
Test MathMock
Use bit shifts

Ensure that the optimization does not cause overflows or underflows.


Know which side is used (specifically with flip)

After reading the docs and giving a quick glance at the code, I didn't see a way to find out which side was chosen by flip() (and possibly other positioning middleware).
My motivation is that when a floating element is flipped, I may want to add a class/change its visual appearance slightly.
For instance, I have this dropdown control that lacks a border on top when it's flipped (usually it's at the bottom):

Thanks, that's good enough for me to migrate from data-popper-placement!


Adding Key A and Key B management

Refer to this issue: https://github.com/davetcc/tcMenuLib/issues/59

@davetcc Thank you for your feedback. Sorry but I'm not a programmer C. I fixed what you suggested. I hope it goes well.
Please let me know.

@davetcc Thank you for your feedback. Sorry but I'm not a programmer C. I fixed what you suggested. I hope it goes well.
Please let me know.

No problem at all, that's how we learn, by trying things and asking people for feedback. Many thanks for submitting the change.

@davetcc Thank you for your feedback. Sorry but I'm not a programmer C. I fixed what you suggested. I hope it goes well.
Please let me know.

No problem at all, that's how we learn, by trying things and asking people for feedback. Many thanks for submitting the change.

Many thanks to you for giving this wonderful library and the enteire ecosystem around it to the community.


mkShell: introduce packages argument

Motivation for this change
The distinction between the inputs doesn't really make sense in the
mkShell context.  Technically speaking, we should be using the
nativeBuildInputs most of the time.
So in order to make this function more beginner-friendly, add "packages"
as an attribute, that maps to nativeBuildInputs.
This commit also updates all the uses in nixpkgs.
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

I guess it was to be expected to get bikeshedding reviews. Since it's a matter of preference and I am the author of mkShell I will just go ahead and merge this.

I guess it was to be expected to get bikeshedding reviews. Since it's a matter of preference and I am the author of mkShell I will just go ahead and merge this.

Go for it. Don't let mere ideas and opinions get in the way of improvement.

I would like to request some clarification. As someone who enjoys popping up a cross-compilation mkShell from time to time to play with things, this struck me as weird, as mkShell is only a mkDerivation that can't be built:

The distinction between the inputs doesn't really make sense in the
mkShell context.

Whereas this one seems to be at odds with a lot of what I've been doing

Technically speaking, we should be using the
nativeBuildInputs most of the time.

After giving it some thought, I think maybe mkShell has a few competing use cases that should be handled separately.

Providing libraries for a development environment
Providing build tools for a development environment
Providing programs for the user to run in a shell environment

It seems that the first two cases are already handled by buildInputs, nativeBuildInputs. (The other more advanced, so to speak, depsFooBar parameters can be used if needed). They are the same as the ones used in stdenv.mkDerivation, requires no additional effort to learn if you already knew mkDerivation, and matches up with the idea of 'runtime' and 'build-time' dependencies quite well.
The last use case, however, seems to be the one this PR focuses on, like a nix-shell -p. The user here has no intention of using the mkShell as an environment for compiling/building anything, and just needs a shell with some packages provided.
Is that a correct understanding of the purpose of this pull request?

Additionally, there may be the slight issue that the various nativeBuildInputs etc only work when the packages are passed in by callPackage. Otherwise they are all handled as if they were buildInputs. I'm wondering if this one is relevant to the claim that 'the disctinction between the inputs doesn't really make sense in the mkShell context'.

It's perfectly fine to use stdenv.mkDerivation for all the use-cases above. mkShell is just supposed to be a little sugar on top.

I see, thanks for the explanation


Improve formatting

Fixes #225.
This is a large one, so apologies for the heavy review load.
Changes include the following:

Ran Black on all Python files

Ran Pylint and addressed most issues. There are some pylint: disable markers that can be cleaned up, but would be better done outside this PR.

Actions workflow changes:

Updated Python version to 3.9 in all workflows
Added pre-commit config and workflow to run black and pylint

Beyond automated tests, the following were tested (the rest are currently hard to test):

adabot/update_cp_org_libraries.py (with -o)
adabot/circuitpython_library_patches.py (with --dry-run & --dry-run --local)
adabot/circuitpython_library_download_stats.py (with -o)
adabot/lib/assign_hacktober_label.py

I've got a small list of new issues to address some of the pylint: disable markers, and some other stuff I came across. I'll get those filed soon.

Oh wow, thanks so much for doing this. Yeah, there were an absurd amount of things that needed to be linted here.

Testing the scripts:

[ ] arduino_libraries
[ ] update_cp_org_libraries
[ ] circuitpython_libraries
[ ] circuitpython_library_download_stats

Ok. Just finished running all 4 of the scripts that we can run locally and they all worked as expected.

I'm ok with merging this and if we were supposed to pin Pylint, we can handle it in another PR.
Thank you for testing, Dylan!
Thanks so much for this whole thing, sommersoft!


Fix Vue warning when displaying a transparent ColorInput

Vue generates a warning when displaying transparent ColourInput (frontend/src/components/widgets/inputs/ColorInput.vue 85:18)  because it is expecting a type: String but gets undefined. The type json entry cannot be a union, so perhaps it should be an Object that is then limited by the as PropType<string | undefined>?

I can't reproduce this (in dev mode) by setting a color to transparent. Is it perhaps fixed?

Closing it for now, but reopen if it's still an issue.


Request for 'Editing GPU memory usage' update

Hello.
Firstly, I would like to thank you for your great work.
My request is, the editing methods supported by EasyEdit has increased, but the 'Editing GPU memory usage' part remains the same.
Do you have any plans to add GPU memory usage of GRACE, AdaLoRA, etc?
Thanks.

thanks for your advice, we would add this part recently.

Thank you for your attention to EasyEdit, we have updated the GPU memory requirements of AdaLoRA, GRACE. For details, please see ReadME


not working give working example please

please give working Jupyter notebook example or python code , not working
i use example and it not working, have rtx 3090
error:
`NameError                                 Traceback (most recent call last)
 in
20
21 # show results
---> 22 f, ax = plt.subplots(2,4, figsize=(12,6))
23 for i, (pil_img, pred_label) in enumerate(zip(images, pred_labels)):
24     ax[i//4, i%4].imshow(pil_img)
NameError: name 'plt' is not defined
`

https://github.com/sberbank-ai/ru-clip/commit/1695f998599e28d966249100dc639854eb2109aa


Add IOST

@lispc can you rebase against the master? we don't commit generated code anymore

could you please keep code format in TWCoinTypeConfiguration.cpp? too many unrelated changes

this file is empty src/IOST/Address.cpp

@alejandro-isaza updated the codes here


passing the full path to each invocation for Bitcoind

Issue Fixed : #1857
Removed cp misc/test/bitcoin.conf $FM_BTC_DIR instead added .arg("-conf=path/to/bitcoind.conf") to the // spawn bitcoind
code. I've tried to fix the issue with my best understanding of the problem, do let me know, If I'm missing out on something.

You don't have to close pull requests to update them. Just force push to the branch to update it. git push -f <remove> <branch>


Adding netbeans and netbeans-l10n as submodules

Added netbeans and l10n as  submodules and  made required changes to support them.

LGTM


[Snapshot] Add wait/no-wait support for snapshots.

See #1528.

This checklist is used to make sure that common guidelines for a pull request are followed.

[X] The PR has modified HISTORY.rst describing any customer-facing, functional changes. Note that this does not include changes only to help content. (see Modifying change log).

[X] I adhere to the Command Guidelines.

👍


chore: Update CI template for tap cookiecutter

I just built a fresh tap using the cookiecutter template (which was super cool by the way!), and had to update some parts of the workflow template as below to fix github complaints (and use latest versions of python and poetry).

:books: Documentation preview :books:: https://meltano-sdk--1476.org.readthedocs.build/en/1476/

Just saw your other PR @WillDaSilva closing this as not needed anymore, but please let me know if I missed anything.


StringLiterals emit?

A string literal annotation currently emits:
https://github.com/Microsoft/TypeScript/blob/78197ed60b92ca54b6b88c044e7016d1f6090e09/tests/baselines/reference/parserErrorRecovery_IncompleteMemberVariable1.js#L41
Is this a bug?
If it is, good have the fix :smile:

A string literal annotation currently isn't syntactically valid TypeScript, and we don't make any guarantees of emit in the presence of syntactic invalidity, so it's not a bug.

@DanielRosenwasser is right.  Your code is syntactically incorrect.  If you compile it, you should see:
File.ts(12,21): error TS1110: Type expected.
We emit the file as we interpreted it.  In this case, we interpreted the code as having a missing type annotation, with a string literal initializer.


reassigning a var to a new type does not return an error

var test int = 0;
var test float = 0.5;

function test(a : int) (int){
    return a;
}

this code should return an error, but it works fine and reassigns the test var

solved for functions in issue #125


Article is in the incorrect Section

Via the Documentation Table of Contents, the article titled "Standard rules engine reference for Azure CDN" is listed under
How-to guides -> CDN -> Verizon -> Standard -> Manage -> Enforce HTTPS by using the Standard rules engine
Even though the article states "The rules engine that's described in this article is available only for Standard Azure CDN from Microsoft.", the placement of the article in the Table of Contents make it seem like its applicable to Standard Verizon.
Ask: In the Table of Contents, can you please remove the article  Enforce HTTPS by using the Standard rules engine from How-to guides -> CDN -> Verizon -> Standard -> Manage  ?

Document Details
⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

ID: 7f7c20cf-3978-d4e5-cd89-e77ae59f4afb
Version Independent ID: 70019c90-4f00-6592-f0f7-25930287837e
Content: Use a rules engine to enforce HTTPS in Standard Azure CDN
Content Source: articles/cdn/cdn-standard-rules-engine.md
Service: azure-cdn
GitHub Login: @duongau
Microsoft Alias: duau

@josgonz231
Thanks for your feedback! We will investigate and update as appropriate.

@josgonz231
Thank you for your feedback! We have assigned this issue to the author to review further and take the next course of action.
@duongau looks like toc file need an update.

Hello @josgonz231, I have removed the article from the Verizon section to avoid confusion. Thank you again for you feedback. #please-close


3 datasets for Greek

Consider contacting the authors of the following datasets to see if they would be interested in integrating their description in the catalog:

https://zenodo.org/records/5595669#.YaneoLoxVPY
https://zenodo.org/records/5578136#.YaneuboxVPY
https://zenodo.org/records/5578251#.YaneyboxVPY

They're all cited in https://www.mdpi.com/2313-433X/7/12/260

Consider also contacting the authors for this repo https://github.com/vivianpl/HPGTR, also in ancient greek
Cited in https://aclanthology.org/2022.lrec-1.708/

Fixed by #156


add sequence number

@Kelvin-M Potentially missing:

add row in table in README
update examples in README
changelog/upgrade entry


Fix internal reference in docs

Labels that are not placed before a section title need an explicit
title.
SpiceyPy/docs/basics.rst:7: WARNING: undefined label: installation (if the link has no caption the label must precede a section header)

Coverage remained the same at 99.791% when pulling b3dfa7afecb10ad4bc21f81dbe64e2b22d849ad7 on migueldvb:docs into 96e8d3cab724782d74822b696d3ecd0658313949 on AndrewAnnex:master.

great thanks for the contribution, I'm fixing some other sphinx warnings in another pr that will be posted soon.


openssl command not responding when create key in linux

I tried to create key in my linux server below openssl command, I don't get any response from openssl. It is waiting for longtime. I don't get any error message. Even if I wait for 1hr I don't see any error/response message.
openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/C=""/ST=""/L=""/O=""/CN=sim.nsr.ssg.tnsi.com" -keyout server.key -out server.cert
Generating a RSA private key

I have attached the output of "perl configdata.pm --dump" command
Here is openssl version intalled:

[root@asb-dev-idh-rs01 openssl-OpenSSL_1_1_1-stable]# openssl version
OpenSSL 1.1.1h-dev  xx XXX xxxx
[root@asb-dev-idh-rs01 openssl-OpenSSL_1_1_1-stable]# openssl version -a
OpenSSL 1.1.1h-dev  xx XXX xxxx
built on: Wed May 27 07:28:07 2020 UTC
platform: linux-x86_64
options:  bn(64,64) rc4(16x,int) des(int) idea(int) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG
OPENSSLDIR: "/usr/local/ssl"
ENGINESDIR: "/usr/local/lib64/engines-1.1"
Seeding source: os-specific
[root@asb-dev-idh-rs01 openssl-OpenSSL_1_1_1-stable]#

Could someone help me why I am unable to generate key?
Actually I trying to upgrade my python script to support TLS1.2 version. my python script hangs while creating SSLContext(). I suspect this issue also due to openssl.
I need really help to resolve this openssl issue. Advance Thanks!!
Report.txt

I cannot reproduce your issue, neither with 1.1.1h-dev nor with the 3.0 master.
Maybe your installation suffers from a mixup of dynamically loaded libs. Does
ldd `which openssl`

give the expected result?
If so, you could try prepending strace to your openssl call and see how far it gets.
Sometimes openssl apps appear to hang on unexpectedly trying to read from stdin.

Here is the ldd output:
ldd `which openssl`
        linux-vdso.so.1 =>  (0x00007ffc8ddfe000)
        libssl.so.1.1 => /app/tnstaf/openssl-OpenSSL_1_1_1-stable/libssl.so.1.1 (0x00007feeef833000)
        libcrypto.so.1.1 => /app/tnstaf/openssl-OpenSSL_1_1_1-stable/libcrypto.so.1.1 (0x00007feeef36b000)
        libdl.so.2 => /lib64/libdl.so.2 (0x0000003172400000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x0000003172c00000)
        libc.so.6 => /lib64/libc.so.6 (0x0000003172800000)
        /lib64/ld-linux-x86-64.so.2 (0x0000003172000000)

Here is my strace output:
[tnstaf@asb-dev-idh-rs01 Python]$ strace openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/C=""/ST=""/L=""/O=""/CN=sim.nsr.ssg.tnsi.com"                 -keyout server.key -out server.cert
execve("/usr/local/bin/openssl", ["openssl", "req", "-new", "-newkey", "rsa:4096", "-days", "365", "-nodes", "-x509", "-subj", "/C=/ST=/L=/O=/CN=sim.nsr                .ssg.tns"..., "-keyout", "server.key", "-out", "server.cert"], [/* 26 vars */]) = 0
brk(0)                                  = 0x233f000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1658795000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("tls/x86_64/libssl.so.1.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("tls/libssl.so.1.1", O_RDONLY)     = -1 ENOENT (No such file or directory)
open("x86_64/libssl.so.1.1", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("libssl.so.1.1", O_RDONLY)         = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/tls/x86_64/libssl.so.1.1", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/tls/x86_64", 0x7fff4793ee20) = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/tls/libssl.so.1.1", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/tls", 0x7fff4793ee20) = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/x86_64/libssl.so.1.1", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/x86_64", 0x7fff4793ee20) = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/libssl.so.1.1", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \330\1\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=678288, ...}) = 0
mmap(NULL, 2685472, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1658505000
mprotect(0x7f1658589000, 2093056, PROT_NONE) = 0
mmap(0x7f1658788000, 53248, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x83000) = 0x7f1658788000
close(3)                                = 0
open("tls/x86_64/libcrypto.so.1.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("tls/libcrypto.so.1.1", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("x86_64/libcrypto.so.1.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("libcrypto.so.1.1", O_RDONLY)      = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/libcrypto.so.1.1", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\220\7\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=3244938, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1658504000
mmap(NULL, 5007136, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f165803d000
mprotect(0x7f16582d2000, 2097152, PROT_NONE) = 0
mmap(0x7f16584d2000, 188416, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x295000) = 0x7f16584d2000
mmap(0x7f1658500000, 14112, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f1658500000
close(3)                                = 0
open("tls/x86_64/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("tls/libdl.so.2", O_RDONLY)        = -1 ENOENT (No such file or directory)
open("x86_64/libdl.so.2", O_RDONLY)     = -1 ENOENT (No such file or directory)
open("libdl.so.2", O_RDONLY)            = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib64/tls/x86_64/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/usr/lib64/tls/x86_64", 0x7fff4793edc0) = -1 ENOENT (No such file or directory)
open("/usr/lib64/tls/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/usr/lib64/tls", {st_mode=S_IFDIR|0555, st_size=4096, ...}) = 0
open("/usr/lib64/x86_64/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/usr/lib64/x86_64", 0x7fff4793edc0) = -1 ENOENT (No such file or directory)
open("/usr/lib64/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
stat("/usr/lib64", {st_mode=S_IFDIR|0555, st_size=24576, ...}) = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=36981, ...}) = 0
mmap(NULL, 36981, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f1658033000
close(3)                                = 0
open("/lib64/libdl.so.2", O_RDONLY)     = 3
read(3<EMAIL_ADDRESS>832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=23088, ...}) = 0
mmap(0x3172400000, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3172400000
mprotect(0x3172402000, 2097152, PROT_NONE) = 0
mmap(0x3172602000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x3172602000
close(3)                                = 0
open("tls/x86_64/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("tls/libpthread.so.0", O_RDONLY)   = -1 ENOENT (No such file or directory)
open("x86_64/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("libpthread.so.0", O_RDONLY)       = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib64/tls/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib64/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib64/libpthread.so.0", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000^\300r1\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=146592, ...}) = 0
mmap(0x3172c00000, 2212848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3172c00000
mprotect(0x3172c17000, 2097152, PROT_NONE) = 0
mmap(0x3172e17000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x3172e17000
mmap(0x3172e19000, 13296, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3172e19000
close(3)                                = 0
open("tls/x86_64/libc.so.6", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("tls/libc.so.6", O_RDONLY)         = -1 ENOENT (No such file or directory)
open("x86_64/libc.so.6", O_RDONLY)      = -1 ENOENT (No such file or directory)
open("libc.so.6", O_RDONLY)             = -1 ENOENT (No such file or directory)
open("/app/tnstaf/openssl-OpenSSL_1_1_1-stable/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib64/tls/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib64/libc.so.6", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("/lib64/libc.so.6", O_RDONLY)      = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\356\201r1\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1930416, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1658032000
mmap(0x3172800000, 3750184, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3172800000
mprotect(0x317298a000, 2097152, PROT_NONE) = 0
mmap(0x3172b8a000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18a000) = 0x3172b8a000
mmap(0x3172b90000, 14632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3172b90000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1658031000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1658030000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f165802f000
arch_prctl(ARCH_SET_FS, 0x7f1658030700) = 0
mprotect(0x3172b8a000, 16384, PROT_READ) = 0
mprotect(0x3172e17000, 4096, PROT_READ) = 0
mprotect(0x3172602000, 4096, PROT_READ) = 0
mprotect(0x317221f000, 8192, PROT_READ) = 0
munmap(0x7f1658033000, 36981)           = 0
set_tid_address(0x7f16580309d0)         = 18559
set_robust_list(0x7f16580309e0, 24)     = 0
futex(0x7fff4793f71c, FUTEX_WAKE_PRIVATE, 1) = 0
futex(0x7fff4793f71c, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, 7f1658030700) = -1 EAGAIN (Resource temporarily unavailable)
rt_sigaction(SIGRTMIN, {0x3172c05cb0, [], SA_RESTORER|SA_SIGINFO, 0x3172c0f7e0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x3172c05d40, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x3172c0f7e0}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM64_INFINITY}) = 0
brk(0)                                  = 0x233f000
brk(0x2360000)                          = 0x2360000
futex(0x7f1658501eec, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501ef4, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501efc, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501e08, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x3172832660}, {SIG_DFL, [], 0}, 8) = 0
futex(0x7f1658502048, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501f0c, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501f14, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501f48, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f16584ff3a0, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f16584ff470, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f16584ff460, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501f04, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
futex(0x7f1658501f50, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
getuid()                                = 33001
geteuid()                               = 33001
getgid()                                = 33001
getegid()                               = 33001
open("/usr/local/ssl/openssl.cnf", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=10909, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f165803c000
read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
read(3, "# WARNING: ancient versions of N"..., 4096) = 4096
read(3, "es of the usage of nsCertType. I"..., 4096) = 2717
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x7f165803c000, 4096)            = 0
futex(0x7f1658501f1c, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
open("/proc/meminfo", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f165803c000
read(3, "MemTotal:       16333940 kB\nMemF"..., 1024) = 1024
close(3)                                = 0
munmap(0x7f165803c000, 4096)            = 0
futex(0x7f16587949b0, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
open("/usr/local/ssl/openssl.cnf", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=10909, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f165803c000
read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
read(3, "# WARNING: ancient versions of N"..., 4096) = 4096
read(3, "es of the usage of nsCertType. I"..., 4096) = 2717
brk(0x2381000)                          = 0x2381000
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x7f165803c000, 4096)            = 0
write(2, "Generating a RSA private key\n", 29Generating a RSA private key
) = 29
futex(0x7f1658502098, FUTEX_WAKE_PRIVATE,<PHONE_NUMBER>) = 0
syscall_318(0x2362910, 0x20, 0, 0x30, 0x101010101010101, 0) = -1 (errno 38)
shmget(0x72, 1, 0)                      = -1 ENOENT (No such file or directory)
uname({sys="Linux", node="asb-dev-idh-rs01", ...}) = 0
open("/dev/random", O_RDONLY)           = 3
select(4, [3], NULL, NULL, NULL)        = ? ERESTARTNOHAND (To be restarted if no handler)
--- SIGWINCH {si_signo=SIGWINCH, si_code=SI_KERNEL} ---
select(4, [3], NULL, NULL, NULL

It hangs at select command.

It looks like your system does not have any random data available.
/proc/sys/kernel/random/entropy_avail will probably indicate 0, or
a very low number. You will somehow need to make entropy available
to it.

Thanks for all your response.
Inside the file /proc/sys/kernel/random/entropy_avail, I see value 38.
[root@asb-dev-idh-rs01 openssl-OpenSSL_1_1_1-stable]# ls -lrt /proc/sys/kernel/random/entropy_avail
-r--r--r-- 1 root root 0 Jun  5 07:53 /proc/sys/kernel/random/entropy_avail
[root@asb-dev-idh-rs01 openssl-OpenSSL_1_1_1-stable]# cat /proc/sys/kernel/random/entropy_avail
38
[root@asb-dev-idh-rs01 openssl-OpenSSL_1_1_1-stable]#

What should I do now? I am clueless.
Currently I have below openssl package in my server.
$ yum list installed | grep -i openssl
openssl.i686                       1.0.1e-48.el6                    @tnsi-tsd-os
openssl.x86_64                     1.0.1e-48.el6                    @tnsi-tsd-os
pyOpenSSL.x86_64                   0.13.1-2.el6                     @anaconda-RedHatEnterpriseLinux-201604140956.x86_64/6.8
xmlsec1-openssl.x86_64             1.2.20-4.el6                     @tnsi-tsd-os
$

Is this the stable version?
Shall I uninstall and install again open ssl package?

The problem is not with the software, but with the environment.
The kernel needs to collect entropy. By default it uses things
like interupts to collect it, for instance from the hard disk,
keyboard, mouse, network traffic.
If you are in some virtual machine, colletion of such entropy is
harder, but there are things like virtio-rng that can be used to
transfer entropy from the host to the guest. Details depend on the
sofware being used.
An other case where it's harder to collect entropy is embedded
devices, they might also not have sufficient sources of entropy.
The best thing to do there is to have a hardware random number
generator.
Note that since you're using an x86_64 CPU, your CPU probably comes
with a hardware random number generate build it, using instructions
like rdrand and rdseed. You can either tell the kernel to use them,
and never kernels should use them by default, or you can configure
openssl to use it instead of the kernel using the configure option
--with-rand-seed=rdcpu
Please let us know more about your environment so we can give
better adivce.

Thanks for the detailed explanation.
I am not familiar much about kernel.
what environment details you want? could you please tell me the command and from which path I should run the command? I will run and give the output for debugging more.

should I run "./config --with-rang-seed=rdrang"?
Please give me exact command I will try it.

Things like:

Is this in a VM? If so, which one?
Kernel version (uname -a)
Is this a PC, server, or something embedded?

Below are the details which you requested:
Here is dmidecode output:
$ sudo dmidecode | egrep -i 'manufacturer|product'
        Manufacturer: VMware, Inc.
        Product Name: VMware Virtual Platform
        Manufacturer: Intel Corporation
        Product Name: 440BX Desktop Reference Platform
        Manufacturer: No Enclosure
        Manufacturer: GenuineIntel
        Manufacturer: GenuineIntel
        Manufacturer: GenuineIntel
        Manufacturer: GenuineIntel
        Manufacturer: Not Specified
        Manufacturer: Not Specified
        Manufacturer: Not Specified
        Manufacturer: Not Specified
        Manufacturer Name: Intel
]$

uname output:
$ uname -a
Linux asb-dev-idh-rs01 2.6.32-642.el6.x86_64 #1 SMP Wed Apr 13 00:51:26 EDT 2016 x86_64 x86_64 x86_64 GNU/Linux
$

It is server. It is application testing server. But It is not production server.

As far as I know, VMware does not provide any entropy to the guest
unlike other virtual machine software. The options I see are:

Set something up as entropybroker
Use a more recent kernel. The 4.19 kernel in Debian buster works
for me, but I'm not sure why.
Be patient, after some time you might get enough entropy
If you're sure your CPU will always support the RDRAND
instruction, you can use "./config --with-rand-seed=rdcpu"
But I only recommend that if none of the other options work.

If you search the internet, you will probably find some people
suggest haveged, which is a bad idea.

"- Be patient, after some time you might get enough entropy"
Will it automatically increase? How long do I need to wait?
"- If you're sure your CPU will always support the RDRAND"
How do I find my cpu support RDRAND? Is there any command to find it?

"- Be patient, after some time you might get enough entropy"
Will it automatically increase? How long do I need to wait?

It will slowly increase, and at some point the program will
continue. More activity in the VM can speed it up.

"- If you're sure your CPU will always support the RDRAND"
How do I find my cpu support RDRAND? Is there any command to find it?

cat /proc/cpuinfo
It should show "rdrand" in flags.

ok.
I don't see rdrand in /proc/cpuinfo. My bad luck. :(
$ cat /proc/cpuinfo | grep -i flag
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc unfair_spinlock pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm arat
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc unfair_spinlock pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm arat
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc unfair_spinlock pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm arat
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc unfair_spinlock pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic popcnt tsc_deadline_timer aes xsave avx hypervisor lahf_lm arat
$

we have another Virtual Machine. I see entropy value as 187. openssl command also works there. But it has version 1.0.0
$ openssl version
OpenSSL 1.0.0-fips 29 Mar 2010
$

will this version of openssl support TLS1.2?
Brief background about my project:
Actually Im updating my python(3.6 version) simulator to support for tls1.2 version. python3.6 code trying to create SSLContext for tls1.2 version. At this place it hangs. When I tried to debug, I found openssl is hanging forever due to that my python simulator also hangs.
Earlier we had tls1.0 security. Our simulator was working in python2.6 version. Without any issues it is working till now.
since python2.6 did not support tls1.2, we upgraded our python to 3.6. the same code does not work in python3.6. It hangs at openssl library. This is background of my issue.
I am trying for more than 10days to make it work. I am struct at same issue.
will openssl 1.0.0 version support TLS1.2 security? If it works I can try at the another vm server.

Older versions of openssl just use /dev/urandom. They don't check if
the system had enough entropy. This might result in the generation
of predictable random numbers, which compromises the security of
the system. Since OpenSSL 1.1.1 we check that enough entropy was
added by looking at /dev/random.
TLS 1.2 is supported since OpenSSL version 1.0.1. But version 1.0.1 is no
longer supported.

ok. I understand.
shall I update openssl 1.0.0 to 1.1.1 in my other vm server where entropy value is more? will it work in my other vm server?
If yes, do I need to check anyother information before updating openssl to 1.1.1?

TLS 1.2 is really a minimum requirement now. But if you do need to
change things anyway, I suggest you get support for TLS 1.3 too,
which was added in OpenSSL 1.1.1.
I don't know if the other VM will have enough entropy. As far as I
know it need to collect 128 bits before you can read from it, so
it might work (until you reboot).

Thanks for your patience and explaining me all.
We have two more vm servers where openssl command is working.
vm server 1: entropy value 187 and version: OpenSSL 1.0.0-fips 29 Mar 2010
vm server 2: entrophy value 63 and OpenSSL 1.0.1e-fips 11 Feb 2013
can I update openssl 1.1.1 on these two servers?

I can only suggest that you try, and make sure that you try
rebooting.

open("/dev/random", O_RDONLY)           = 3
select(4, [3], NULL, NULL, NULL

It hangs at select command.

It looks like your system does not have any random data available.

I think that in order to cope better with such situations the OpenSSL PRNG should somehow indicate this issue to the user, rather than simply blocking indefinitely without the user getting any hint why.
So it may give a warning/info that collection of entropy takes longer than expected,
and in my view it should give up with an error after some reasonable (configurable) timeout.

I can only suggest that you try, and make sure that you try rebooting.

Sure. I will try updating openssl. Thanks for all your help.

open("/dev/random", O_RDONLY)           = 3
select(4, [3], NULL, NULL, NULL

It hangs at select command.

It looks like your system does not have any random data available.

I think that in order to cope better with such situations the OpenSSL PRNG should somehow indicate this issue to the user, rather than simply blocking indefinitely without the user getting any hint why.
So it may give a warning/info that collection of entropy takes longer than expected,
and in my view it should give up with an error after some reasonable (configurable) timeout.

Correct. It should have atleast some log information like "Generating random number.. please wait."
Without any log information, error or timeout, It put me in confused state. I had tried re-installing openssl, python and debugged all my code, tried many things.... almost 10 days I wasted in finding this.

Please be aware that updating the system openssl (i.e. replace the openssl in /usr/lib64 and /usr/lib) with the 1.1.1 version will break the system because 1.0.x and 1.1.x versions are not ABI compatible.
You can of course add another build of openssl in /usr/local but you must ensure that the software that is supposed to be using the new version is properly linked against the new version.
Also I would recommend updating the system on these VMs to some newer OS as you are apparently having some old unsupported CentOS or RHEL operating system version there. You should use RHEL or CentOS 8 if you want to have up-to-date openssl. That version would also solve your entropy problems as it seeds via the getrandom() syscall which does not require always-new entropy as /dev/random needs but needs it only for the first initialization of the kernel entropy pool.

Please be aware that updating the system openssl (i.e. replace the openssl in /usr/lib64 and /usr/lib) with the 1.1.1 version will break the system because 1.0.x and 1.1.x versions are not ABI compatible.
You can of course add another build of openssl in /usr/local but you must ensure that the software that is supposed to be using the new version is properly linked against the new version.
Also I would recommend updating the system on these VMs to some newer OS as you are apparently having some old unsupported CentOS or RHEL operating system version there. You should use RHEL or CentOS 8 if you want to have up-to-date openssl. That version would also solve your entropy problems as it seeds via the getrandom() syscall which does not require always-new entropy as /dev/random needs but needs it only for the first initialization of the kernel entropy pool.

Thank you very much for the input. I should consider updating the OS. I will do that.

Hi kroeckx,
Your fix worked for me :)
I did below two steps after that entropy value increased from 38 to 137 ;)

"./config --with-rand-seed=rdcpu"
reboot

Now openssl is running without hanging. And my python application also run with TLS1.2.
Thanks for all your tips.
Thanks DDvO and t8m for supporting me.
This is my first github request. You three are awesome. You are savior. Sorry I didn't know your name, I used user name to thank you.
:) :)

Correct. It should have atleast some log information like "Generating random number.. please wait."
Without any log information, error or timeout, It put me in confused state. I had tried re-installing openssl, python and debugged all my code, tried many things.... almost 10 days I wasted in finding this.

libcrypto is a low-/system-level library, and many people do not like such library code to produce such "unexpected" output of any form.
Also, if RAND_bytes was to return failure (and no output) after a timeout in such cases, there is a risk that the consuming application would not check for the error return and proceed on the assumption that random bytes had been obtained, when in fact using quite predictable bytes.  The cost/benefit analysis suggests that blocking indefinitely until random bytes can be obtained is the safer option.
Also also, I will close the issue now, since you seem to have your deployment running successfully.

Hi @rangpec,

Thanks DDvO and t8m for supporting me.
This is my first github request. You three are awesome. You are savior.

very pleased that you are happy with the support and solution(s) we provided.

Sorry I didn't know your name, I used user name to thank you.

You can usually see the users' real names by hovering with the mouse pointer over the user name or avatar/icon.

@kaduk,

Correct. It should have at least some log information like "Generating random number.. please wait."
Without any log information, error or timeout, It put me in confused state. I had tried re-installing openssl, python and debugged all my code, tried many things.... almost 10 days I wasted in finding this.

libcrypto is a low-/system-level library, and many people do not like such library code to produce such "unexpected" output of any form.

I am aware of this. That's why I would not add log/warning output at library level, but only for the respective apps, which are typically used interactively and already contain similar warnings, such as dsaparam:
Generating DH parameters, %d bit long safe prime, generator %d
This is going to take a long time

I've just produced a PR that does so: #12095.

Also, if RAND_bytes was to return failure (and no output) after a timeout in such cases, there is a risk that the consuming application would not check for the error return
and proceed on the assumption that random bytes had been obtained, when in fact using quite predictable bytes. The cost/benefit analysis suggests that blocking indefinitely until random bytes can be obtained is the safer option.

Good point (though of course apps that ignore errors would be lost anyway).
Yet for the CLI, often used casually by inexperienced users, a warning should be helpful.
@rangpec, with the proposed warning added,
apps/openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/CN=sim.nsr.ssg.tnsi.com"

now prints:
Generating a RSA private key
Generating random key material might take long time if the system has a poor entropy source

I'm wondering if we can use RAND_status() for this

I'm wondering if we can use RAND_status() for this

Good thought! So I've revised #12095 accordingly.
Let's do any further discussion there, also because this issue has already been closed.

Correct. It should have atleast some log information like "Generating random number.. please wait."
Without any log information, error or timeout, It put me in confused state. I had tried re-installing openssl, python and debugged all my code, tried many things.... almost 10 days I wasted in finding this.

libcrypto is a low-/system-level library, and many people do not like such library code to produce such "unexpected" output of any form.
Also, if RAND_bytes was to return failure (and no output) after a timeout in such cases, there is a risk that the consuming application would not check for the error return and proceed on the assumption that random bytes had been obtained, when in fact using quite predictable bytes. The cost/benefit analysis suggests that blocking indefinitely until random bytes can be obtained is the safer option.
Also also, I will close the issue now, since you seem to have your deployment running successfully.

Ok. Thanks for your clarification.

@kaduk,

Correct. It should have at least some log information like "Generating random number.. please wait."
Without any log information, error or timeout, It put me in confused state. I had tried re-installing openssl, python and debugged all my code, tried many things.... almost 10 days I wasted in finding this.

libcrypto is a low-/system-level library, and many people do not like such library code to produce such "unexpected" output of any form.

I am aware of this. That's why I would not add log/warning output at library level, but only for the respective apps, which are typically used interactively and already contain similar warnings, such as dsaparam:
Generating DH parameters, %d bit long safe prime, generator %d
This is going to take a long time

I've just produced a PR that does so: #12095.

Also, if RAND_bytes was to return failure (and no output) after a timeout in such cases, there is a risk that the consuming application would not check for the error return
and proceed on the assumption that random bytes had been obtained, when in fact using quite predictable bytes. The cost/benefit analysis suggests that blocking indefinitely until random bytes can be obtained is the safer option.

Good point (though of course apps that ignore errors would be lost anyway).
Yet for the CLI, often used casually by inexperienced users, a warning should be helpful.
@rangpec, with the proposed warning added,
apps/openssl req -new -newkey rsa:4096 -days 365 -nodes -x509 -subj "/CN=sim.nsr.ssg.tnsi.com"

now prints:
Generating a RSA private key
Generating random key material might take long time if the system has a poor entropy source

Thanks David :). You guys are so quick in fixing issues. Good work 👍


Simplify static Builder builderXXXX() methods of Metadata

v0.3.8, com.kazurayam.materialstore.metadata.Metadata class has 3 signagures of builderXXX() that returns a Builder object.
    // ---------------- factory method ---------------------
    static Builder builder() {
        return new Builder()
    }

    static Builder builderWithUrl(URL url) {
        return new Builder(url)
    }

    static Builder builderWithMap(Map map) {
        return new Builder(map)
    }

I think that I should simplify these:
static Builder builder() ...

static Builder builder(URL url) ...

static Builder builder(Map map) ...

It's easier to remember ...

done in v0.4.0-SNAPSHOT


ffmpeg play video on demand stream not found

i've set up the rtmp.conf for my nginx server as follows
rtmp {
    server {
        listen 1935;
        application vod {
            live on;

            play /media/70TB_ingest/s3/files;
            allow play all;
            allow publish all;
           notify_method get;
        }
    }
}

but when i try to play a file in that folder via ffmpeg to test it,
$ ffmpeg -loglevel debug  -i rtmp://<IP_ADDRESS>:1935/vod/ft_1000041_5320882a688ba.mov                                                                                [13:19:43]
ffmpeg version 2.1.4 Copyright (c) 2000-2014 the FFmpeg developers
  built on Mar  2 2014 13:38:24 with Apple LLVM version 5.0 (clang-500.2.79) (based on LLVM 3.3svn)
  configuration: --prefix=/usr/local/Cellar/ffmpeg/2.1.4 --enable-shared --enable-pthreads --enable-gpl --enable-version3 --enable-nonfree --enable-hardcoded-tables --enable-avresample --enable-vda --cc=clang --host-cflags= --host-ldflags= --enable-libx264 --enable-libfaac --enable-libmp3lame --enable-libxvid
  libavutil      52. 48.101 / 52. 48.101
  libavcodec     55. 39.101 / 55. 39.101
  libavformat    55. 19.104 / 55. 19.104
  libavdevice    55.  5.100 / 55.  5.100
  libavfilter     3. 90.100 /  3. 90.100
  libavresample   1.  1.  0 /  1.  1.  0
  libswscale      2.  5.101 /  2.  5.101
  libswresample   0. 17.104 /  0. 17.104
  libpostproc    52.  3.100 / 52.  3.100
Splitting the commandline.
Reading option '-loglevel' ... matched as option 'loglevel' (set logging level) with argument 'debug'.
Reading option '-i' ... matched as input file with argument 'rtmp://<IP_ADDRESS>:1935/vod/ft_1000041_5320882a688ba.mov'.
Finished splitting the commandline.
Parsing a group of options: global .
Applying option loglevel (set logging level) with argument debug.
Successfully parsed a group of options.
Parsing a group of options: input file rtmp://<IP_ADDRESS>:1935/vod/ft_1000041_5320882a688ba.mov.
Successfully parsed a group of options.
Opening an input file: rtmp://<IP_ADDRESS>:1935/vod/ft_1000041_5320882a688ba.mov.
[rtmp @ 0x7fa92140a3a0] Handshaking...
[rtmp @ 0x7fa92140a3a0] Type answer 3
[rtmp @ 0x7fa92140a3a0] Server version <IP_ADDRESS>
[rtmp @ 0x7fa92140a3a0] Proto = rtmp, path = /vod/ft_1000041_5320882a688ba.mov, app = vod, fname = ft_1000041_5320882a688ba.mov
[rtmp @ 0x7fa92140a3a0] Server bandwidth = 5000000
[rtmp @ 0x7fa92140a3a0] Client bandwidth = 5000000
[rtmp @ 0x7fa92140a3a0] New incoming chunk size = 4096
[rtmp @ 0x7fa92140a3a0] Creating stream...
[rtmp @ 0x7fa92140a3a0] Sending play command for 'ft_1000041_5320882a688ba.mov'
[rtmp @ 0x7fa92140a3a0] Server error: Video on demand stream not found
rtmp://<IP_ADDRESS>:1935/vod/ft_1000041_5320882a688ba.mov: Operation not permitted

but i know the file exists because i can play it from the http url for the same file.
the port is open because from the nginx access log i can see the PLAY request for the file
but i still cant seem to play the file in vlc / ffmpeg cli

the same problem

anyone know how to resolve it?

I have found that it maybe cause by nfs.
I mount a nfs path to my vod dir, then I can't play the rtmp stream.
Since I umount it, and upload a mp4 video, then it work.


Help needed: support null values of referenced fields

Need help with null values when using reference fields.
I have a NewsFeed schema that contains a Product, or a Post, or a Video. Defined as follows:
NewsFeed = new mongoose.Schema({
  date: { type: Date, required: true, default: Date.now },
  product: { type: ObjectId, ref: 'Product', required: false},
  post: { type: ObjectId, ref: 'Post', required: false },
  video: { type: ObjectId, ref: 'Post', required: false },
});

This means that aNewsFeed document contains a date and one element (one of product, post or video).
Ideally I what to use the GraphQL query bellow and fetch my newsfeed ordered by date and containing the applicable newsfeed element with the other elements absent or null.
query{
  viewer{
    homenewsfeeds(first:5,orderBy:DATE_DESC){
      count,
      edges{
        node{
          date,
          product {
            id,
            name
          },
          post{
            id,
            title,
            author {
              id,
              name
            }
          }
          video{
            id,
            title,
            duration,
          }
        }
      }
    }
  }
}

However I get the following error:
"statusCode": 400,
  "error": "Bad Request",
  "message": "Cannot read property 'toString' of null\nCannot read property 'toString' of null\nCannot read property 'toString' of null\nCannot read property 'toString' of null\nCannot read property 'toString' of null"

My understating is that GraphQl is trying to load the referenced object even if is not in the current element.
I've already attempted to re-create the newsfeed forcing the elements to be required defaulting to null, with no success. I'm getting the same error
NewsFeed = new mongoose.Schema({
  date: { type: Date, required: true, default: Date.now },
  product: { type: ObjectId, ref: 'Product', required: true, default: null},
  post: { type: ObjectId, ref: 'Post', required: true, default: null},
  video: { type: ObjectId, ref: 'Post', required: true, default: null },
});

Another option would be refactor the NewsFeed as described bellow. However this will defeat the purpose of simpler GraphQL queries.
NewsFeed = new mongoose.Schema({
  date: { type: Date, required: true, default: Date.now },
  target: { type: ObjectId},
  type: { type: String, enum: ['Post','Product','Video']},
});

Comments? This is a limitation of GraphQL or current Mongoose-GraphQl implementation?

@sibeliusseraphini

I'll test this again latter this week using latest releases..

With #100 my use case described above works


Feature/sht 5366 dynamically initialize posthog

:bulb: Motivation and Context
Posthog initialization can only be done natively from android manifest and info.plist. However, there are cases where user want to configure dynamically from the dart side.
A good example is loading the posthog api key and host from some 3rd party(say api or firebase remote config) and then setting up posthog.
The current setup does not allow
This PR aims at  solving the above described issue.
:green_heart: How did you test it?
With the example code, on an emulator.
:pencil: Checklist

[x] I reviewed the submitted code.
[ ] I added tests to verify the changes.
[x] I updated the docs if needed.
[x] No breaking change or entry added to the changelog.

Hello! Any reason why this PR was closed?
Thanks!

I need to sync our version https://github.com/shuttlershq/posthog-flutter with https://github.com/PostHog/posthog-flutter. Then create the PR again.


Issue with symbolic link after installation

After installation and symbolic link creation, I can't run it.
/home/nhoizey/.local/bin/ is in my $PATH but I can't run update-certificate:
nhoizey@ssh:~$ update-certificate
-bash: update-certificate: command not found

When I try with the absolute path, there's another issue:
nhoizey@ssh:~$ /home/nhoizey/.local/bin/update-certificate
-bash: /home/nhoizey/.local/bin/update-certificate: Too many levels of symbolic links

The symbolic link is not good, but I think I followed the instructions…

I am reworking it to only rely on extending the value of $PATH, looks safer.

It should be solved by #5.
It should also be easier to install.

I'll try ASAP, thanks!

I guess this one is solved now :-)

Indeed!


Feat/#32 update page periodically

Closes #32

@njochens I just checked that nothing crashed and verified with a log statement that the backend was repeatedly called.
The one thing left to verify is that the page actually updates

For me the container details page gets automatically updated but not the list views, is that intended?

Since it is embedded in the route layout that is not how that should work.
I'll investigate that tomorrow

Okay, so the problem is the way our list is designed.
Since we copy the initial prop value into the state, it gets cached there between router.reloads.
The correct way to do this is to store the filter and sort config as state and then combine the state and the props when rendering
I'll do this in the afternoon

@lifesbest23 please confirm that this works as you expect it now


Naming conflict with git-extras

git-town fails to install through brew install git-town because of a naming conflict with git-extras:
$ brew install git-town
Error: Cannot install git-town because conflicting formulae are installed.

  git-extras: because git-town also ships a git-sync binary

Please `brew unlink git-extras` before continuing.

Unlinking removes a formula's symlinks from /usr/local. You can
link the formula again after the install finishes. You can --force this
install, but the build may fail or cause obscure side-effects in the
resulting software.

Here's what a dry run tells me:
$ brew link --overwrite --dry-run git-town
Would remove:
/usr/local/bin/git-sync -> /usr/local/Cellar/git-extras/4.1.0/bin/git-sync
/usr/local/share/man/man1/git-sync.1 -> /usr/local/Cellar/git-extras/4.1.0/share/man/man1/git-sync.1

Yeah we've had issues with naming conflicting with them before. @kevgo thoughts on moving forward with #515 in order to resolve this? I also think it would beneficial if git extras did something similar.

Yes, let's implement #515. Git-Extras will keep breaking us as they add more Git Town-like commands.

Fixed in 2.0.0 which namespaces all commands with town-

Thanks for notifying us about this @schlessera!


As a user, I want different styles for the main title and subtitle on search results so that I can visually distinguish titles.

testing notes

works with subtitles should display both title and subtitle
main titles should be bold; subtitles should be italic
you can see this on the main archive search page in this design
you can also see it on the search within work page in this design

@thatbudakguy latest develop code should display subtitles on results page after you reindex works in Solr.

For works that have a title and a subtitle, the formatting is correct across devices on the results and item detail pages: title appears bold and subtitle appears in italics.


Basic-Station: get null time in uplink message

[x] The issue is present in the latest release.
[x] I have searched the issues of this repository and believe that this is not a duplicate.

What happened?
we have enabled GPS in our basic-station gateway but we are not getting time in the uplink message.
Can we use rxtime for uplink time if GPS is not available?
Could you share your log output?

Your Environment

Component
Version

Gateway Bridge
v3.10.0

@brocaar
any update on this issue? should I make PR for this?

@sagar-patel-sls a PR would be very welcome :) Could you check if the gpstime is correctly set (if this value is parsed at all)?
https://doc.sm.tc/station/tcproto.html#radio-metadata
https://github.com/brocaar/lorawan/tree/master/gps provides functions to convert the GPS time to a time.Time type (for setting the time field). I think both should be exposed in the RxInfo. Failing that, if the fake rx time is enabled, just set the time with time.Now().

{"msgtype":"updf","MHdr":64,"DevAddr":xxxxxxxx,"FCtrl":0,"FCnt":10,"FOpts":"","FPort":2,"FRMPayload":"B3354E4C7F7C4356CE207E51AF7C4F","MIC":-433357060,"RefTime":0.000000,"DR":0,"Freq":865062500,"upinfo":{"rctx":0,"xtime":7599824395191180,"gpstime":0,"fts":-1,"rssi":-109,"snr":-2.5,"rxtime":1613033399.383087}}
currently, basic station sending the above payload with a GPS value of 0. I think we need to take time from rxtime using the below math function so we can convert it to Unix time.
sec, nsec := math.Modf(rmd.UpInfo.RxTime)

Looks like that field is not documented (see my previous link). In that case it makes sense to map the rxtime to time (if not 0) and gpstime (if not 0) to time_since_gps_epoch instead of doing any gps time > time.Time conversions.


Warning in Swift 4

Can you please release a new version so that we can remove the warning for use of characters that was fixed here:
https://github.com/kylef/JSONWebToken.swift/commit/69866e1cb1f72d6a61ebaa45615f4bc6c4350ee7#diff-919b43a5ac759b7a00af61a3a6798f6b

This issue was fixed quite some time ago by the owner but no release was ever published. I’ve made a fork of this repo and published a release that, among more significant changes, resolves that warning.


Sourcemaps show local folder location

Is this a bug report?
Yes

Can you also reproduce the problem with npm 4.x?

Yes
Which terms did you search for in User Guide?

Environment

node -v: v6.4.0
npm -v: 3.10.3
yarn --version (if you use Yarn): 0.24.5
npm ls react-scripts (if you haven’t ejected): I have not ejected

Then, specify:

Operating system: macOS Sierra
Browser and version (if relevant): All browsers

Steps to Reproduce

(Write your steps here:)

Import a stylesheet somewhere in the app
Run yarn run build
The JS sourcemaps show local user folder strings as the location (eg. /Users/user/cra-folder/src/ComponentFolder/style.css)

Expected Behavior

Sourcemaps should not show local data.
Actual Behavior

After running yarn run build the JS sourcemaps show local folder paths (eg. /Users/user/cra-folder/src/ComponentFolder/style.css)

Reproducible Demo

This was intentional, but I can understand it being frustrating in production.
What path would you suggest? Happy to accept a pull request.

Maybe let’s remove this altogether? I don’t understand what problem it solved. I was hoping adding this resolving would aid Chrome with its “workspace” feature but I couldn’t get it to work at all.

In development it made click to open source work nicely. Not required at all in production; so fine to remove.

Oh right. Thanks for reminding.

I can’t reproduce this though.
@tobyl
Do you mind filling out which version of react-scripts you are using in package.json?
You missed this in the issue template.


Fix issue of return status of delete and restore

Problem was on return parent function

Does this fix #742?

let me test that !!! @milosdakic

that issue really not bug ... any time you use some trait that have conflict in implementation of same method , you should override that function manually ... @milosdakic

https://github.com/Zizaco/entrust/commit/5a83c57f0f3a5f7490f6ef76c88bc166b00fdc06


Ignore $out/bin/*.lock files during buildPhase makeWrapper

Since Ruby 3.3.5, the bin/ dir contains a non-executable *.lock file per executable -- unclear if this is intentional, but it means makeWrapper fails the build when those files are encountered.

Running a tight schedule lately, sorry for the delay. I will try replicating this on 3.3.5

This is happening for me as well and I've avoided upgrading to 3.3.5 till things can get ironed out.

Looks like this was a problem with rubygems that has been corrected. This PR could work around the issue, but I wonder if we could also bring in a more recent version of rubygems and/or bundler to help out.


fix: update component source revision during override

When promoting components from an override Snapshot, update the component source revision if available

Maintainers will complete the following section

[ ] Commit messages are descriptive enough (hints)
[ ] Code coverage from testing does not decrease and new code is covered (check the PR coverage on codecov)
[ ] Controllers diagrams are updated when PR changes controllers code  (if applicable)

/test integration-service-e2e

Thanks Kruno! Let me commit update to docs and integration-example repo

/test integration-service-e2e

Codecov Report
Attention: Patch coverage is 33.33333% with 2 lines in your changes missing coverage. Please review.

Please upload report for BASE (main@1a94837). Learn more about missing BASE report.

Files
Patch %
Lines

internal/controller/snapshot/snapshot_adapter.go
33.33%
1 Missing and 1 partial :warning:

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #782   +/-   ##
=======================================
  Coverage        ?   73.33%
=======================================
  Files           ?       42
  Lines           ?     4054
  Branches        ?        0
=======================================
  Hits            ?     2973
  Misses          ?      780
  Partials        ?      301

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


docs: Update arguments.md

The --ossIndexRemoteErrorWarnOnly parameter needs a true/false as an argument according to https://github.com/jeremylong/DependencyCheck/blob/main/cli/src/main/java/org/owasp/dependencycheck/CliParser.java#L400
This is a change to the documentation to reflect that.
Have test cases been added to cover the new functionality?
no

Thanks!