Managing SQL AAD based authentication with secret rotation

[Enter feedback here]
Hi,
I'm from the Azure Log Analytics team. According to the docs, the way to implement AAD based authentication to SQL is by using service principal id and key, but there's no easy way to auto rotate the key both in AAD and Key Vault.
Can you please provide some guidance on how to achieve such scenario?
Thanks, Arik.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 9075f4a4-f8ca-9143-8998-41e2be0b39b8
Version Independent ID: 60c67249-9bd5-0a3c-10e3-839d44922d2e
Content: Managed identity for Data Factory - Azure Data Factory
Content Source: articles/data-factory/data-factory-service-identity.md
Service: data-factory
GitHub Login: @linda33wj
Microsoft Alias: jingwang

Thank you for your detailed feedback.  We are looking into the issue, and we will respond when we have more information.

@arolshan We will now proceed to close this thread. If there are further questions regarding this matter, please reopen it and we will gladly continue the discussion.


Smarter Run Command | Node Queries

Proposed change
Currently, when you try to deploy a workload, the nex binary does not validate that the node your sending to can support the particular workload you are providing.  This was originally an intentional design, as no-sandbox mode didn't exist and the target OS/Arch was much smaller.  Now, we have to ensure ELFs aren't sent to Windows, arm64 isnt send to arm64, etc.
This issue proposed asking a node if it is able to run a workload prior to tasking.  The "PING" endpoint currently has enough data to assist in this decision, but that puts the task of deciding on the CLI (CLI -> PING -> Parse Responses -> Deploy)
A better approach might be to send a request with details of the workload and have the nodes ACK/NACK if they can support.  This will enable us to go beyond native binaries and as nodes if they can support cetain workloads (not everything can support V8 for example)...tags, etc.
Use case
Adds more protection to deploying workloads
Contribution
No response

Work in #235 to be leveraged with this

To add some more specific requirements to this, what we're describing here is the "auction" pattern (this pattern also goes by many other names). One thing with this pattern is we don't want to reuse existing PING endpoints because ping's contract implies that any listening node will/must reply. Auction candidates only reply if they meet the criteria.
I propose that we have another endpoint, $NEX.AUCTION.{namespace}. Namespace here implies the intended namespace of the candidate workload.
Auction Request
Clients making an auction request should supply the following JSON:
{
    "workload_name": "xxx",
    "workload_bytes": "xxx",
    "workload_type": "[v8|wasm|elf/native]",
    "required_tags": [],
}

All fields in this payload are required. If there are no required tags, pass an empty list []. Only nodes that think they can run the expected workload candidate should reply. The reply doesn't matter, but it will be the string OK when in multi-node auction mode.
Note that we don't need a boolean flag here to indicate acceptance because the existence of a reply on its own constitutes an acceptance. There is no reply to indicate a rejection by the node.
Reasons for rejection (non-response):

Node has reached workload capacity (number)
Node has reached workload capacity (bytes/resource consumption)
Node type mismatch
Node tags mismatch
Workload with desired name is already running in the desired namespace on the target node

If you want the reason why a specific node does not want to run a workload (typically used when a UI or other consumer gets no positive replies to an auction), then you can re-run the auction request on the target node: $NEX.AUCTION.{node_id}.{namespace}. This will return the auction response payload shown below:
{
    "accepted": [true|false],
    "rejections": [
         "string",
    ]
}

It's worth noting that the auction is a lightweight process. No actual workload bytes are submitted for auction, as those will be validated by the node during its real deployment process.


fix dns cannot remove domain bug

What type of PR is this?
/kind bug

What this PR does / why we need it:

Stow solution. should send dnsClusters to DNS resolver even if it is empty so that the resolver could remove unwatched domains.
Which issue(s) this PR fixes:
Fixes #
Special notes for your reviewer:
Does this PR introduce a user-facing change?:

LG
Do we have a case covering the domain can be removed correctly

added ut for  checking the domain can be removed correctly

@PerforMance308 Could you update the tests and we can merge


Infer copyright from LICENSE file

We already do this for the license itself, so extending this to copyright is a natural continuation of DRYing up things.

An other option would be to generate the LICENSE file from license and copyright.  In a way this would be more convenient, as you could maintain all the information in package.yaml to get an up-to-date LICENSE file.
I certainly like it.  However, it is less consistent with how hpack currently operates: Currently we look at package.yaml + other source files and generate a .cabal file.  That is, currently we don't generate any other files but .cabal.  If we break with this convention, we could even consider to generate things like Setup.lhs or even add extension points for third-party plug-ins (think test/Spec.hs for hspec-discover).  But not sure yet if this is the right direction.
Feedback welcome!

An other option would be to generate the LICENSE file from license and copyright.  In a way this would be more convenient, as you could maintain all the information in package.yaml to get an up-to-date LICENSE file.
I certainly like it.  However, it is less consistent with how hpack currently operates: Currently we look at package.yaml + other source files and generate a .cabal file.  That is, currently we don't generate any other files but .cabal.  If we break with this convention, we could even consider to generate things like Setup.lhs or even add extension points for third-party plug-ins (think test/Spec.hs for hspec-discover).  But not sure yet if this is the right direction.
Feedback welcome!


v-if with slot

Version
2.6.0
Reproduction link
http://jsfiddle.net/decademoon/hasupd08/8/
Steps to reproduce
Run the fiddle.
What is expected?
No error should occur.
What is actually happening?
An error occurs:
Property or method "value" is not defined on the instance but referenced during render.

Is 2.6.x supposed to be fully compatible with 2.5.x? The generated render function is different, and it looks like v-if has different priority than slot.
For reference, this fiddle shows it working in 2.5.16.
Might be related to #9391.

The new syntax does work differently (v-if on the slot no longer has access to the slot scope and instead controls the existence of the entire slot), but the old syntax should indeed retain the old behavior.


fix: use_kubelet metrics was not working

Q
A

Bug fix?
yes

New feature?
no

API breaks?
no

Deprecations?
no

Related tickets
fixes #X

License
Apache 2.0

What's in this PR?

add rbac to get metrics from kubelet
add HostNetwork and DNSpolicy to allow fluent bit DaemonSet to call Kubelet locally

source:
https://docs.fluentbit.io/manual/v/1.8/pipeline/filters/kubernetes#optional-feature-using-kubelet-to-get-metadata
Why?

fluent-bit cannot get metrics from kubelet
Additional context

Checklist

[x] Code meets the Developer Guide
[x] User guide and development docs updated (if needed)
[x] Related Helm chart(s) updated (if needed)

To Do

[x] If the PR is not complete but you want to discuss the approach, list what remains to be done here

@cyril-corbon could you please this pr ?

done :smile:


Fix an issue in function areProducedByTransposeOp when input is a block argument

Signed-off-by: Tung D. Le<EMAIL_ADDRESS>

Jenkins Linux ppc64le Build #4406 [push] Fix an issue in function... started at 22:11

Jenkins Linux amd64 Build #5269 [push] Fix an issue in function... started at 21:07

Jenkins Linux s390x Build #5285 [push] Fix an issue in function... started at 22:08

Jenkins Linux s390x Build #5285 [push] Fix an issue in function... passed after 1 hr 0 min

Jenkins Linux ppc64le Build #4406 [push] Fix an issue in function... passed after 1 hr 2 min

Jenkins Linux amd64 Build #5269 [push] Fix an issue in function... passed after 1 hr 7 min


AWSCredentials.GetCredentials() will hang indefinitely with a credential_process profile when cmd.exe is disabled

Description
On Windows, when using an AWS credential profile that sources the credentials from an external process using the credential_process feature, the AWSCredentials.GetCredentials() call will hang indefinitely if cmd.exe has been disabled via a Group Policy for the current user.
On Windows, aws-sdk-net will run the credential_process process inside of a cmd.exe shell: https://github.com/aws/aws-sdk-net/blob/13bd83ed856609040c6482d25394a0d39339c6b0/sdk/src/Core/Amazon.Runtime/Credentials/ProcessAWSCredentials.cs#L59
But when cmd.exe has been disabled through a group policy, the cmd.exe process will start, show a message indicating that an administrator has disabled the command prompt, and then wait indefinitely on a "press any key to continue" prompt. Unfortunately, the AWS .NET SDK will wait indefinitely for the cmd.exe process to exit. AWSCredentials.GetCredentials() will essentially be deadlocked, waiting for cmd.exe to exit, which it never will.
Reproduction Steps

On Windows, disable cmd.exe by running gpedit.msc, navigating to User Administration\System and setting the Prevent access to the command prompt policy to Enabled.
Run cmd.exe manually to verify that the command prompt shows a message about being disabled and waits for user input.
Configure %USER_RROFILE%/.aws/config with a profile called my_test_profile that uses a credential_process per the documentation here: https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html
Run a .NET program that uses the configured profile in some way, e.g., create an S3 client and get an object. The program will hang indefinitely. Using a tool like ProcMon you can also clearly see that cmd.exe is running as a child process of your .NET program.

Simple reproduction code (.NET Framework 4.6.2):
using Amazon.Runtime;
using Amazon.Runtime.CredentialManagement;
using Amazon.S3;
using System;

namespace ConsoleApp1
{
    class Program
    {
        static void Main(string[] args)
        {
            var profileName = "my_test_profile";
            var region = Amazon.RegionEndpoint.GetBySystemName("us-east-1");
            var bucket = "some-bucket";
            var key = "some-key";

            var sharedFile = new SharedCredentialsFile();
            var profile_exists = sharedFile.TryGetProfile(profileName, out CredentialProfile profile);
            Console.WriteLine("Profile exists: " + profile_exists.ToString());
            var credentials_created = AWSCredentialsFactory.TryGetAWSCredentials(profile, sharedFile, out AWSCredentials credentials);
            Console.WriteLine("AWSCredentials created: " + credentials_created.ToString());
            if (credentials_created)
            {
                Console.WriteLine("Created AWSCredentials of type " + credentials.GetType().ToString());
                Console.WriteLine("Found access key ID: " + credentials.GetCredentials().AccessKey.ToString());
                var s3 = new AmazonS3Client(credentials, region);
                var response = s3.GetObject(bucket, key);
                Console.WriteLine("response: " + response.ToString());
            }
        }
    }
}

Environment

SDK Version: AWSSDK.Core <IP_ADDRESS> / AWSSDK.S3 <IP_ADDRESS>
Package Version: AWSSDK.Core / AWSSDK.S3 <IP_ADDRESS>
OS Info: Windows 10 Pro / Windows Server 2019 (Amazon AppStream 2.0)
Build Environment: VIsual Studio Professional 2019
Targeted .NET Platform:  .NET Framework 4.6.2

Resolution
The best solution is probably to just invoke the credential_process directly rather than wrapping it inside of a cmd.exe.

This is a :bug: bug-report

Hi @GoneWacko,
Good afternoon.
Thanks for reporting the issue. Could you please check and share the default program for .cmd file type in your system?
Regards,
Ashish

@ashishdhingra Hello,
It looks like the file type is associated with cmd.exe. The Windows Server 2019 "Choose default apps by file type' settings pane shows no actual application associated with the file type, but when running a .cmd file, I see the process tree is conhost.exe as a child of cmd.exe.
It's worth noting that, for unprivileged users, we also configured our Windows image to have a software restriction policy that prevents execution of .cmd files that are not in specific paths of the file system. But of course this is less of a concern; if the idea is to make the SDK generate a .cmd script, we can set up an exclusion in the restriction policy that so that it can still be executed.
And I don't think it matters, but for what it's worth: We're mostly running into this issue inside of an Amazon AppStream 2.0 session where we don't want end-users to start cmd.exe/powershell, to avoid abuse.
For now I think we can work around the problem by simply running the credential process ourselves, parsing the JSON output, and giving the credentials to the SDK 'manually'.


Missing export declarations

Some interfaces are not exported. For instance InputFile is missing, even though it is referenced in the exported FileUploadOptions onDragAccepted method signature.

Sorry for late.
please try install<EMAIL_ADDRESS>


Send an error back to client when dispatch misbehaves (fixes #2649)

There is now a test with a body implementation panicking. Should the error kind be "canceled", or something else?

Should the error kind be "canceled", or something else?

Probably not canceled. I've mostly tried to keep that error kind to mean the request was stopped before any part of it made it to the IO transport, so it could be retried.

Probably not canceled. I've mostly tried to keep that error kind to mean the request was stopped before any part of it made it to the IO transport, so it could be retried.

I introduced a new User variant for the error.


error with giscus when using Next.js v14.1.0

Discussion: https://github.com/giscus/giscus-component/issues/1976

Hi, see you again. I got a hack way to solve this issue.
https://github.com/giscus/giscus-component/issues/1976#issuecomment-1937429577

Hi, see you again. Remember me? You have given me some suggestions before. shenlu89/shenlu.me#3 (comment)
I got a hack way to solve this issue.
giscus/giscus-component#1976 (comment)

https://github.com/shenlu89/shenlu.me/commit/74cb9b75f5a0022b2d88c0014152df1709e527d4#diff-d3a29a9b14e6921438a2e83dfb261e2fec2b6f85fc112991ba63a59b80095039
I see that you moved the library to a local file and added a @ts-ignore directive to it? That's actually clever and straightforward. I might try this. Thank you


ErlangR24: init at 24.0

Motivation for this change
Erlang R24 was just released.
Things done

[ ] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
[x] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[ ] Fits CONTRIBUTING.md.

All checks appear to have passed, but I am trying to run nixpkgs-review pr 122723 and I am getting an error saying
checking for OpenSSL in /nix/store/8iyzxj2ysxnknxc7jrldcsk2zzhv7ff1-openssl-1.1.1k-dev... configure: error: neither static nor dynamic crypto library found in /nix/store/8iyzxj2ysxnknxc7jrldcsk2zzhv7ff1-openssl-1.1.1k-dev
ERROR: /build/source/lib/crypto/configure failed!

I am trying to run on this on NixOS.

Result of nixpkgs-review pr 122723 at c0b55a2e run on aarch64-linux 1

1 package failed to build:

erlangR24

Note that build failures may predate this PR, and could be nondeterministic or hardware dependent.
Please exercise your independent judgement. Does something look off? Please file an issue or reach out on IRC.

Also, this does not switch the default Erlang to 24, it keeps it at 23. I don't know the full repercussions for changing the default. We can do that in a different PR.

This seems to be a known issue. I will wait for erlang/otp#4821 to be resolved and I will get this fixed afterwards.

on my box I applied the config change they sugggested
    configureFlags = [ "--disable-parallel-configure" ];
but it seems to not be able to find ssl regardless
configure: WARNING: No (usable) OpenSSL found, skipping ssl, ssh and crypto applications

There was a new configure flag that was added to Erlang's build system. We need to tell it about the dev headers, as well as the actual lib location now. These recent changes should fix the build.

Looks great, thanks for this!
Running the nixpkgs-review on darwin.
It looks good to me as far as I'm concerned!
I definitely that in order to switch to the default version of erlang we should at least wait a couple of months.

Result of nixpkgs-review pr 122723 run on x86_64-darwin 1

6 packages marked as broken and skipped:

couchdb3
cuter
erlangR18
erlangR19
erlang_basho_R16B02
lfe_1_2

24 packages built:

asls
elixir (elixir_1_11)
elixir_1_10
elixir_1_7
elixir_1_8
elixir_1_9
elixir_ls
erlang (erlangR23)
erlang-ls
erlangR20
erlangR21
erlangR22
erlangR24
erlang_javac
erlang_nox
erlang_odbc
erlang_odbc_javac
lfe (lfe_1_3)
mercury
rabbitmq-server
rebar
rebar3
relxExe
tsung

I will do a patch to drop R18, R19 and 20 this week. So let's ignore it.
Bashor16 being broken is a pain and i am beginning to think we need to drop riak...
So i think that we mostly need to fix lfe , couch and cuter.

There's Riak KV v2.3.3 which is compatible with newer Erlang versions. We might want to upgrade it instead of dropping it.

downstream package updates can be done in subsequent PRs. I think this PR is good as-is.

Super keen on dropping older versions of erlang, this build took a looooooooooooong time.
Regarding fixing the other packages, I'm not against it, but we will need somebody to maintain them. Unless somebody wants to add themselves as a maintainer, wouldn't it be better to leave them marked as broken until somebody shows up wanting to maintain them?
Perhaps we can do a call for maintainers? Post an issue on the relevant projects or something?
Regarding this PR, personally this is good to merge. @ankhers let me know if you want me to merge it, otherwise I'll leave you to merge it when you think it's right.

I already merged it. It's just a package addition in it's current form.

I'm not able to build R23 on x86_64-darwin after this was merged. Pinning to yesterday's nixpkgs fixed that for me.
You can reproduce the issue by running nix build .#erlang on master. Rolling back to a commit from yesterday builds successfully.

@joedevivo thanks for reporting!
There is an update on R23 here https://github.com/NixOS/nixpkgs/pull/122536
Would you mind trying that version when you have a moment?
I am on darwin too and posted the result of nixpkgs-review up top.
I wonder what could be the difference between our two systems.

Here's what I've figured out so far.
If I delete the line    ++ [ "--with-ssl-incl=${lib.getDev opensslPackage}" ] # This flag was introduced in R24 from interpreters/erlang/generic-builder.nix I can get 23.3.2 building again.
When I check out your branch, it attempts to build 23.3.4, and throws the same error around hipe
=== Entering application hipe
make[3]: Entering directory '/private/tmp/nix-build-erlang-23.3.4.drv-0/source/lib/hipe/rtl'
 ERLC   ../ebin/hipe_rtl_liveness.beam
 GEN    hipe_literals.hrl
make[4]: Entering directory '/private/tmp/nix-build-erlang-23.3.4.drv-0/source/lib/hipe/main'
 ERLC   ../ebin/hipe_rtl_cleanup_const.beam
 ERLC   ../ebin/hipe_rtl_binary.beam
 ERLC   ../ebin/hipe_rtl_verify_gcsafe.beam
 ERLC   ../ebin/hipe_rtl_binary_match.beam
 ERLC   ../ebin/hipe_rtl_arch.beam
 ERLC   ../ebin/hipe_tagscheme.beam
 ERLC   ../ebin/hipe_rtl_symbolic.beam
../flow/liveness.inc:46: can't find include file "../main/hipe.hrl"
make[3]: *** [/private/tmp/nix-build-erlang-23.3.4.drv-0/source/make/x86_64-apple-darwin20.4.0/otp.mk:137: ../ebin/hipe_rtl_liveness.beam] Error 1
make[3]: *** Waiting for unfinished jobs....
 VSN    hipe.hrl
make[4]: Leaving directory '/private/tmp/nix-build-erlang-23.3.4.drv-0/source/lib/hipe/main'
make[3]: Leaving directory '/private/tmp/nix-build-erlang-23.3.4.drv-0/source/lib/hipe/rtl'
make[2]: *** [/private/tmp/nix-build-erlang-23.3.4.drv-0/source/make/otp_subdir.mk:29: opt] Error 2
make[2]: Leaving directory '/private/tmp/nix-build-erlang-23.3.4.drv-0/source/lib/hipe'
make[1]: *** [/private/tmp/nix-build-erlang-23.3.4.drv-0/source/make/otp_subdir.mk:29: opt] Error 2
make[1]: Leaving directory '/private/tmp/nix-build-erlang-23.3.4.drv-0/source/lib'
make: *** [Makefile:607: secondary_bootstrap_build] Error 2

These builds are long, so this is all I'll have for you tonight, but let me know if there's anything you want me to try in the morning.

thanks a lot for testing.
We know that it is something that happens on your computer, which is a darwin x86_64
Just briefly looking at the error, it seems to be some hipe related thing that is not found. Perhaps it has to do with a dependency that is missing on your machine. Did you override any of the default options of the generic builder?
(I also have darwin x86_64 and haven't made any override).
What is weird to me, is that if I try to build now, nix will find the binary cache build for darwin and use that. It seems to me that you must have something different than the default options otherwise nix would try to fetch from the binary cache.
Another thing to test, would be trying without hipe. Could you disable hipe ? (or remove line 84 of generic builder if it
s easier for you).

@gleber i tried, but quite simply it is a lot of work to update to that from what i gathered and noone is really interested to update Riak

@happysalada My plan is to override at some point, but I'm able to reproduce this with a clean checkout of your branch at 23.3.4. Because my plan is to override, I need to be able to build it myself.
Since #122536 has been merged, my nix build .#erlang works because it's in the binary cache, but I still can't build it myself when I run nix build .#erlang --option substitute false. That should pull in every dependency I need, right?
With regards to disabling hipe, I can't make any sense of it. It's still trying to build hipe and failing.
I did get it to pass by changing another setting, parallelBuild = false. If you thought the build ran long before, try it single threaded. It took my laptop 29m18s.
I think the following things are happening:

Removing --enable-hipe doesn't stop hipe from compiling

It's possible we'd need to --disable-hipe to make that happen
It could also be that it builds whether it's enabled or not, but we could maybe get around that with --without-hipe

hipe.hrl is generated from a hipe.hrl.src file. The parallel build could be hitting the thing that wants it before it's been generated.

It may be that my laptop, which is a 2019 6-Core i7, has too many parallel builders, and fewer might compensate for this race condition
It may have been a coincidence that before introducing that additional --with-ssl-incl= flag, it slowed down something earlier in the build which cascaded down to this point.
It's worth noting that while the comment in the generic-builder suggests this is a new flag, I can see it documented going back to at least R22, so it can have some effect on earlier versions.

If you run nix build .#erlang --option substitute false --keep-failed it'll tell you where the tmp dir is was building to is, but spoiler: it'll be the only one with erlang in the name under /tmp. In there you'll see an env-vars file. The good news is that it'll get created real fast, so you won't have to wait out the whole build to see it. Can you tell me what yours sets NIX_BUILD_CORES to? Mine is set to 12.
Erlang Configure Flags for reference

@happysalada it turns out that nix-darwin is setting nix.conf's cores=0 if I don't specify an option, but nix itself defaults to cores=1. I'm going to try lowering my core count a few different times to see what I can get away with. What I don't understand is how I can build with -j12 if I'm building with asdf from the same erlang source.

cores=2 saved me whopping 75 seconds :/

I have this setting in my darwin con     buildCores = 4; but echo $NIX_BUILD_CORES returns nothing, so that variable is not set in my environment.
However, when you say that the build takes 28 min, for me that would be super fast.
When I ran the build for this PR, to build everything it took about 6-7 hours. I usually run it before I go to sleep.
my laptop is a 2015 macbook pro, so that might be the case then.
looking at the generic.nix file, parallelBuild defaults to false. Maybe that is the problem then. Did you override this on your laptop?
There is also a comment
On some machines, parallel build reliably crashes on GEN    asn1ct_eval_ext.erl step
Maybe you found another failure mode for parallel build.


Split bundle to smaller chunks

Basically I split big bundle to 2 files

app
vendor (react, material etc..)


Codeblock copy adds empty lines

Hi, I'm running into an issue where using the copy-button from a codeblock adds empty lines to the copied text.
Example codeblock:
docker run --name justanexample \
  -p 8080 \
   abcde:0.1.0

Output after using the copy-button:
docker run --name justanexample \

-p 8080 \

 abcde:0.1.0

Unfortunately that breaks bash commands when adding multi-line scripts. Is there some configuration I can set to prevent it from happening?
Geekdoc version: v0.39.4

Thanks for your report.

Can you please test the latest release and let me know what browser you use? I can't reproduce it on Firefox and Chrome using the latest version.

Same issue on the latest release :(
I'm using Chrome 118.0.5993.88 on macOS 13.3.1

Hmm, strange, I have no idea how to debug it further.
screencast.webm

Very strange indeed. On the geekdocs website itself it works for me but it does not on my site using hugo server and neither on our netlify deployment

Ok so this doesn't seem to be a browser/client issue I can reproduce it with your deployment as well. Is the source for this deployment accessible somewhere as well?

I know it worked before so I went through our latest changes and found the culprit:
(in hugo.toml)
[markup.goldmark.renderer]
unsafe = true # Allow HTML in md files

However, if I remove this one, then my images don't work anymore. The way I include them is like this in the .md file:
<img src="streamvisor-box.svg" alt="streamvisor all-in-one logo" height="50"/>

and the .svg file itself is placed in the same directory as the .md file - Is this wrong somehow?

Thanks! Good find, will take a closer look.

Hmm, I stuck again... We use the unsafe renderer for geekdocs.de as well, see https://github.com/thegeeklab/hugo-geekdoc/blob/main/exampleSite/config/_default/config.yaml#L21 and even with that setting everything works as expected.

Which Hugo version do you use?

After spending some time with it today I was able to fix it by moving the goldmark config to the very end of our hugo.toml.
In case you still want to reproduce the issue, this was the state of the hugo.toml where it would break before
baseURL = ""
relativeURLs = "True"
languageCode = 'en-us'
title = 'Streamvisor Docs'
theme = 'hugo-geekdoc'

[markup.goldmark.renderer]
  unsafe = true # Allow HTML in md files

# Geekdoc required configuration
pygmentsUseClasses = true
pygmentsCodeFences = true
disablePathToLower = true

pluralizelisttitles = false

# Required if you want to render robots.txt template
enableRobotsTXT = true

[params]
  geekdocCollapseAllSections = true
  geekdocToC = 3
  geekdocDarkModeToggle = false

Argh... This sounds like a Hugo issue then, the order of the config values should not matter. Glad you found it, and thanks for letting me know.

Sure, also thanks a lot for being so responsive. Very much appreciated!


node_modules folder missing

Hello,
I'm running GPM locally, directly through Python. However, when I want to access the webpage, I'm missing the "node_modules" folder, in "static". Thus, all the CSS and JS are missing. I suppose it is supposed to be generated at runtime, but I'm not familiar with web environment.
Is there a way to generate that folder while running GPM with Python ?

Hi @hkerma
You need to run npm install inside the app/static folder. I'll update the development part of the README with these instructions. Thanks for pointing it out.
If you want to just run the app locally and you don't want to develop or modify anything, it will be much simpler to use the docker image, see this part of the readme
Let me know how it goes...
PS: Tomorrow will be releasing v0.5.0, just for you information ;-)

Hello @ralgozino
Thank you for that very quick answer. It worked perfectly.
I'll update to 0.5.0 tomorrow then 👍

Thanks for the confirmation. Closing this issue now, please feel free to contact us again if you find any issues :)


Different containers are running after server reboots

Required information

Distribution: Ubuntu Server and Ubuntu MATE (2 machines), after updating to lxd 2.21
Distribution version: 16.04
The output of "lxc info" or if that fails: https://gist.github.com/akarelas/c250968f75d4913a2158a434ef3971a1 (this is for the Ubuntnu Server)
I am using the backports repository, as suggested by lxd update itself when it reached 2.20

Issue description
When I reboot and some containers are running, after reboot a different set of containers is running (not necessarilly the same number of containers as originally). Also I think (though not sure) that certain containers I had deleted re-appeared in lxc list.
Steps to reproduce

lxc start some containers
sudo reboot
lxc list, observe which containers are running. They are different EVERY TIME.

Information to attach
This is the lxc info log of a container that didn't launch, when it should:
root@immense ~ # lxc info databases --show-log
Name: databases
Remote: unix://
Architecture: x86_64
Created: 2017/07/01 11:23 UTC
Status: Stopped
Type: persistent
Profiles: default
Snapshots:
  snap0 (taken at 2017/07/02 21:30 UTC) (stateless)
  snap1 (taken at 2017/08/12 09:35 UTC) (stateless)
  snap2 (taken at 2017/09/18 18:18 UTC) (stateless)
  snap3 (taken at 2017/09/23 15:59 UTC) (stateless)

Log:

            lxc<PHONE_NUMBER>4313.927 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.
            lxc<PHONE_NUMBER>4313.927 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.
            lxc<PHONE_NUMBER>4314.490 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.
            lxc<PHONE_NUMBER>4314.490 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.
            lxc<PHONE_NUMBER>5237.137 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.
            lxc<PHONE_NUMBER>5237.172 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.
            lxc<PHONE_NUMBER>5237.971 WARN     lxc_monitor - monitor.c:lxc_monitor_fifo_send:111 - Failed to open fifo to send message: No such file or directory.

If you need any other information, please ask me and I will provide. Thanks.

I have this same issue on backport 16.04 2.21. Not sure what version will address this.
Thank you all for the work that you do on this project.

Yeah, we need to do some cherry-picking into the 2.21 package, so far this has been resolved in the snap.


Skipping due to encountered error: Failed to create torrent

I spent hours setting up this script and it's not working despite all the efforts I've tried. First thing I want to point out is that --debug flag is useless and doesn't provide a debug.log file or doesn't show debug info in shell either. It makes it very complicated and frustrating to troubleshoot.
I'm running the script from my home folder at /home/***/Data/red_oxide
All of the files are in that folder except the torrent directory which is on an NFS share. I made sure that my user have read and write permissions to that share by creating and deleting a folder.
Here's my configuration file:
{
  "api_key": "***",
  "torrent_directory": "/home/***/Data/red_oxide/torrent",
  "content_directory": "/mnt/red_oxide", # NFS SHARE
  "transcode_directory": "/home/***/Data/red_oxide/transcode",
  "spectrogram_directory": "/home/***/Data/red_oxide/spectrogram",
  "move_transcode_to_content": true,
  "automatic_upload": true,
  "skip_hash_check": false,
  "skip_spectrogram": false,
  "allowed_transcode_formats": ["Flac", "Mp3320", "Mp3V0"],
  "concurrency": 16
}

Here's the shell output with the Failed to create torrent:
***@ubuntu:~/Data/red_oxide$ ./red_oxide transcode https://redacted.ch/torrents.php?id\=***\&torrentid\=***\#torrent***
[✅] Logged in as *** on the Redacted API
[✅] Got torrent *** from group ***
[✅] Found missing format(s) MP3 320,MP3 V0, for torrent *** in group ***
[✅] Local file torrent hash check succeeded for torrent *** in group ***
[⏸] Created Spectrograms at /home/***/Data/red_oxide/spectrogram/***, please manual check if FLAC is lossless before continuing!
Do those spectrograms look good? yes
[✅] Transcoding Done!
[❌] Skipping due to encountered error: Failed to create torrent

I got intermodal, sox, flac and lame installed and added to path. I confirmed this by entering their name in console and I could see their version and information for each app.
I believe the script is broken. My friend who used the script successfully tried for the past 3 hours and wasn't able to figure out why I'm getting this error.
Please help me out, thank you!

@gravelfreeman Have you tried putting trailing / onto your paths in your config.json file? I ran into that issue myself and it needed the trailing slash

@gravelfreeman I actually encountered a similar problem to yours. I am running all the directories off of an SMB share and ran into a plethora of problems. There seems to be something wrong with permissions over shared drives.
Try opening 2 Windows Explorers and drag files across your content_directory and torrent_directory or anywhere between your share and computer. I had a pop-up saying "These files might be harmful to your computer."
It allows you to bypass with a button, but I'm assuming the code isn't given an option. I fixed this by adding the address of the share to Internet Properties->Security->Local intranet->Sites->Advanced and rebooting.

I figured it out: it is because the 2 torrents (mp3,v0) already exists in the torrent_directory named in the config.json. Clean everything that redb generated, and try again, it just runs smooth~ Also remember to clean the mp3320/v0 content in the previous failed commands. This program seems do not overwrite previous failed-command-generated files (spectrums, generated mp3320/v0, torrents),  during the redb process and therefore causes error @DevYukine @gravelfreeman


Is there a situation with the Java version?

Java version 16.
There is an error when I use the rpgitem command, what should I do?
(1.16.5)

What should I do, Producer?

You have to add --illegal-access=permit to jvm flag to use rpgitem with java 16.
But I don't know it will be work fine with next java version.


E-commerce data not flowing.

Hello!
I'm trying to implement php-ga in my web application, I wouldn't normally write here but I'm in really big dead end. In short, my e-commerce data ain't flowing to the analytics site (I get a notification). Of course there can be plenty of reasons why it's that way , but, I made same implementation on testing environment and everything there works fine.
There is already javascript implementation of analytics on this app, also I'm using clientID obtained on google developers API console, while I should be using client ID from ga cookie? Could someone give me some tips or possible cause of this problem?
This is what I'm getting from hit validator:
--- DEBUG: '{"hitParsingResult":[{"valid":true,"parserMessage":[],"hit":"\\/debug\\/collect?v=1&tid=UA-4XXXXXXX-1&cid=149XXXXXX-e6aXXXXXXXXXXXXXXXXa.apps.googleusercontent.com&ti=DSHMEGZQ65CR34K&tr=4001.00&cu=PLN&t=transaction"}],"parserMessage":[{"messageType":"INFO","description":"Found 1 hit in the request."}]}

--- DEBUG: '{"hitParsingResult":[{"valid":true,"parserMessage":[],"hit":"\\/debug\\/collect?v=1&tid=UA-4XXXXXXXX-1&cid=149XXXXXXX-e6XXXXXXXXXXXXX.apps.googleusercontent.com&ti=DSHMEGZQ65CR34K&tr=4001.00&cu=PLN&t=item&in=paymentReceived&ic=885&iv=transfer&ip=4001.00&iq=1"}],"parserMessage":[{"messageType":"INFO","description":"Found 1 hit in the request."}]}

And the implementation itself looks like that:
        $analytics = new Analytics(true);
        $amount = $this->currencyConversionToPLN($eventValue, $currency);
         $analytics
            ->setProtocolVersion('1')
            ->setTrackingId($trackingId)
            ->setClientId($clientId)
            ->setTransactionId($transactionID)
            ->setRevenue($amount)
            ->setAsyncRequest(true)
            ->setCurrencyCode('PLN')
            ->sendTransaction();

        $analytics
            ->setTransactionId($transactionID)
            ->setItemName($eventName)
            ->setItemCode($userSKU)
            ->setItemCategory($eventCategory)
            ->setItemPrice($amount)
            ->setAsyncRequest(true)
            ->setCurrencyCode('PLN')
            ->setItemQuantity(1)
            ->sendItem();

I would really love if someone could give me any tip or clue why it might not be working.

I'm using  Enhanced E-commerce, try this (change to your data)
$analytics = new Analytics(true);
$amount = $this->currencyConversionToPLN($eventValue, $currency);
$analytics
       ->setProtocolVersion('1')
       ->setTrackingId($trackingId)
       ->setClientId($clientId)
       ->setTransactionId($transactionID)
       ->setRevenue($amount)
       ->setAsyncRequest(true)
       ->setCurrencyCode('PLN');

$analytics->addProduct([
	'sku' => $product->sku,
	'name' => $product->name,
	'category' => $product->category->name,
	'price' => $product->price * $product->vat,
	'quantity' => $product->amount,
	'position' => 1,
]);

// Don't forget to set the product action, in this case to PURCHASE
$analytics->setProductActionToPurchase();

// Finally, you must send a hit, in this case we send an Event
$analytics->setEventCategory('Checkout')
    ->setEventAction('Purchase')
    ->sendEvent();

Ah thank you will try to do that this way :)

Ayee! It's working thanks! By the way, do you maybe have custom events implementation? :)

np, no i havent custom events, I have this https://github.com/theiconic/php-ga-measurement-protocol/issues/59#issuecomment-383075119 with foreach for addProduct
I like it works ;)

Sweet, thanks again, I've been fighting with that for quite some time :)

np, I gladly helped  ;)

Hi, I got some similar problem here.
I trigger my event and see the event into the real-time dashboard but somehow their no any data into
Ecommerce Overview.
Here is my code:
	$TrackingId 	= 'UA-10371710-1';
	$Affiliation 	= 'Addcn';

	$analytics = new \TheIconic\Tracking\GoogleAnalytics\Analytics(true);
	$analytics->setProtocolVersion('1')->setTrackingId($TrackingId)->setUserId('2-00000043')->setTransactionId('123456')
	       	  ->setAffiliation($Affiliation)->setTax(6300*0.05)->setShipping(0)->setRevenue(6300)->setAsyncRequest(true)->setCurrencyCode('TWD');
	$analytics->addProduct(['sku' => '12345','name' => 'testData','category' => 'testData/subTest','price' => 6300,'quantity' => 1,'position' => 1,]);

	$analytics->setProductActionToPurchase();
	$analytics->setEventCategory('Purchase')->setEventAction('debug')->sendEvent();

	$response = $analytics->setDebug(true)->sendPageview();
	$debugResponse = $response->getDebugResponse();
	print_r($debugResponse);

The result of print_r($debugResponse) is an empty array which is really confusing me. Why will I get an empty array if the event does get in the real-time dashboard?
If anyone can get me a hand that I will be really appreciated.

the solution above is not working only the event gets sent but I get no data in e-commerce overview in the dashboard

I've seen 2 situations where transactions and items did not register:

When using a user ID
When using an invalid Client ID (must be UUID version 4)

It seems user IDs are no longer allowed for E-commerce transactions and client IDs must adhere to RCF 4122. See William's answer at https://stackoverflow.com/questions/2040240/php-function-to-generate-v4-uuid#2040279 for a small function to generate compliant UUID's.

Hi all, i have same problems above.. ecommerce data is not tracked on Analitycs
https://pastebin.com/igmP16zb
Just for test, i cloned this script and changed TRACKINGID but is not working
https://php-ga-measurement-protocol.readthedocs.io/en/latest/#order-tracking-with-enhanced-e-commerce
Enhanced ecommerce is activated
Debug response seems correct
https://pastebin.com/g2hSCpMw
anyone can help me?

Has someone already figured out what could be wrong? Most likely that with the debug mode enabled, no events are sent at all?
initialize and set params code...
$analytics->setDebug(true)->sendEvent();

Although the validation itself sending in this mode says that everything is ok.
Validation
"hitParsingResult": [
    {
        "valid": true,
        "parserMessage": [],
        "hit": "/debug/collect?v=1&tid=myTID&cid=myCID&ti=221243&ta=Online%20payment&tr=779&tt=0&ea=Purchase&pa=purchase&ec=Enhanced%20Ecommerce&ts=0&cu=UAH&t=event&pr1id=tnfT93345-JK3&pr1nm=The%20North%20Face%20Guardian%20Etip%20Glove&pr1ca=perchatki&pr1pr=779.00&pr1br=The%20North%20Face&pr1qt=1"
    }
],
"parserMessage": [
    {
        "messageType": "INFO",
        "description": "Found 1 hit in the request."
    }
]

Send event
"getHttpStatusCode": 200,
"getDebugResponse": {
    "hitParsingResult": [
        {
            "valid": true,
            "parserMessage": [],
            "hit": "/debug/collect?v=1&tid=myTID&cid=myCID&ti=221243&ta=Online%20payment&tr=779&tt=0&ea=Purchase&pa=purchase&ec=Enhanced%20Ecommerce&ts=0&cu=UAH&t=event&pr1id=tnfT93345-JK3&pr1nm=The%20North%20Face%20Guardian%20Etip%20Glove&pr1ca=perchatki&pr1pr=779.00&pr1br=The%20North%20Face&pr1qt=1"
        }
    ],
    "parserMessage": [
        {
            "messageType": "INFO",
            "description": "Found 1 hit in the request."
        }
    ]
}

On debug-page and hit-builder seams ok...

Any updates here? E-commerce still not working

There is a delay of a few hours for analytics to process the information. After more than 5 hours the information appears

I'm using Enhanced E-commerce, try this (change to your data)
$analytics = new Analytics(true);
$amount = $this->currencyConversionToPLN($eventValue, $currency);
$analytics
       ->setProtocolVersion('1')
       ->setTrackingId($trackingId)
       ->setClientId($clientId)
       ->setTransactionId($transactionID)
       ->setRevenue($amount)
       ->setAsyncRequest(true)
       ->setCurrencyCode('PLN');

$analytics->addProduct([
	'sku' => $product->sku,
	'name' => $product->name,
	'category' => $product->category->name,
	'price' => $product->price * $product->vat,
	'quantity' => $product->amount,
	'position' => 1,
]);

// Don't forget to set the product action, in this case to PURCHASE
$analytics->setProductActionToPurchase();

// Finally, you must send a hit, in this case we send an Event
$analytics->setEventCategory('Checkout')
    ->setEventAction('Purchase')
    ->sendEvent();

I have implemented enhanced e-commerce but is not showing on the analytics dashboard. I used the same code but is not working.  What must I be doing wrong?

Hello !
I've got the same problem, nothing appears on analytics dashboard. Hit is valid, i tried curl on command line too, everything seems ok.
Did you find a way to sort it out ?
Thanks :)
Sebastien

Hey again !
I found what was missing (even if the Hit Builder was considering my hit was OK and the debug url returned that everything was OK too), the client id (cid) is mandatory.
The documentation says (https://developers.google.com/analytics/devguides/collection/protocol/v1/parameters#cid) "This field is required if User ID (uid) is not specified in the request. ", but even with a uid, it does not work (!).
If it can help somebody...
Sebastien


Can we have DNN7.x.x compatible version of the latest realese?

The latest version is not getting installed with DNN 7.x.x, may be because it is compiled with DNN 8 .dll file.
However, I don't see any DNN8 specific features.
Can we have the current version compiled agaist DNN 7.x.x? so that it can be installed via ~/Install/Install.aspx?mode=InstallResources ?
Basically we need 6.4.4 version which can be installed via ~/Install/Install.aspx?mode=InstallResources

The existing 6.4.3 version will work for DNN7?

Hi EPT, the existing 6.4.3 version does work, however, for some reason, it does not get installed via ~/Install/Install.aspx?mode=InstallResources hence cannot be installed when the site is being installed the very first time (then ofcourse, you can install it via Host -> Extension)

Any error messages being displayed? Any hints on what is wrong with the install zip?

No error, it just doesn't get installed. The file remains in the ~/Install/ folder

Does that happens with other (non standard) modules as well?

NO, this happens only with this version of Feedback only. I guess, something is wrong in the manifest file

I see that the EVS also hangs on checking the extension.
I think I have found the problem. Line 3 in the .dnn6 manifest show a package version# of "<IP_ADDRESS>". This should be "06.04.03".
In my test I  also renamed the manifest file from
"DotNetNuke.Modules.Feedback.dnn6" to
"DotNetNuke.Modules.Feedback.dnn"
If you rename/edit the manifest file and put it in the install zip. Can you try it again?. I have attached my modified install zip, so you can use that one as well.
DotNetNuke.Modules.Feedback_06.04.03_Install.zip

It now works !!! :+1: Thanks

You are welcome.


Add AWS Batch job retries and failure reporting to Rollbar via AWS Lambda

Overview

Set all jobs to retry up to 3 times in an attempt to automatically recover from transient issues that may cause a job to fail.
Set up job failure notifications by setting up a CloudWatch event to detect failures and connecting that event to a Lambda function that posts the details of the failure to Rollbar.

Connects #457
Demo
Tasks being retried

Job failure reported in Rollbar

Notes
The batch processing management command is designed to only process items in a
specific state so rerunning a partially completed job will not process any items
multiple times.
Posting job failures to Rollbar via a Lambda function has been use successfully in another project.
Testing Instructions
This must be deployed to staging as batch processing only works in AWS.
There is a testing commit that makes jobs fail 80% of the time that will be dropped prior to merging.
This was tested on staging by manually deploying 71045fd.
I verify that dependent jobs do not fail until all of the retries of the parent job have also failed.

Register and confirm an account
Upload a facility list

Verify in the AWS Batch console that failed jobs are retried.
Verify that job failures are reported to Rollbar.

Checklist

[ ] fixup! commits have been squashed
[ ] CI passes after rebase
[ ] CHANGELOG.md updated with summary of features or fixes, following Keep a Changelog guidelines

Thanks for the review, and for running terraform fmt. I squashed that into the main terraform commit.


Long SQL queries should be truncated in JetBrains extension

Currently, long SQL queries are displayed in their entirety in the Explore AppMaps instruction page:

Weird, I though I made that change. Perhaps I forgot to push :(

Fixed by https://github.com/applandinc/appmap-intellij-plugin/pull/81/commits/ac8c7f48b273c63c19ef71daef8ff11f19cd0dce for the next preview

Fixed with 0.11.0-2, please reopen if it's still a bug on your machine.
https://github.com/applandinc/appmap-intellij-plugin/releases/tag/install-guide-preview


fst plotting works except subsetting

added fst plotting with code for dynamic chromosome and bp subset select options.  subsetting isn't working for some reason

added the fasta plotting as well

also added snp calling options to the 2dsfs script for fst


Split Node3DGizmos into dedicated files

Splits Node3DGizmos into dedicated files.

I am not able to review this promptly, but I strongly appreciate this work and think it should be merged.

I would go for just gizmos and if we need further separation at some point, we can add gizmos/3d in the future.

Thanks!


Use Conan or Vcpkg to manage third-party dependencies

Hi!
This PR replaces all of the vendored libraries under lib/ with integrated Conan support to manage the dependencies and an additional optional Vcpkg manifest, which can alternatively be used as well.
There are a few benefits to using a dedicated package manager instead of vendoring the libraries:

Prevents possible multiple-definition issues and version conflicts for common libraries like nlohmann-json and spdlog for the users of novatel_edie who rely on these as well.
Provides more flexibility for the user to select whether the third-party libs should be linked as static, shared or header-only libs.
Easier for the user to update the dependencies, if necessary. To provide fixes for security vulnerabilities, for example.
Makes the library much easier to package.

Some limitations of this approach:

Requires Python with Conan installed to be present.
Automatic use of Conan in CMake requires CMake v3.24+. There are hacky workarounds for this, but I did not want to go there.
Should add a lock file to pin the package versions and revisions, since the ConanCenter packages are updated from time-to-time to bump dependency versions, for example, which can sometimes break the build.

The included conanfile.py does a bit more than the CMakeLists.txt is currently capable of in this PR. I left the installation of the novatel_edie libraries and third-party libs for a separate later PR.
I also tweaked the root CMakeLists.txt a bit to get rid of some artificial limitations that did not seem justified to me - building on unexpected OS-s, with unexpected compilers (such as AppleClang) or without Git being present. -Werror is generally better left for development and CI builds as well, since it can easily break the build for unexpected warnings added by newer compiler versions.

I would like to merge this one before opening a PR for the Ptyhon bindings. Would cause too many conflicts otherwise.

I'm new to vcpkg and conan, and I also have an open PR that attempts to install the dependencies we currently house within the lib folder. I was trying to get it to work with just a conanfile.txt, but I was running into issues with gtest. Are you able to accomplish what you've done in this PR with a conanfile.txt instead of a .py?

Yes, the conanfile.txt you used is more or less sufficient. Only a couple of tweaks are needed that I added as comments under that PR.
conanfile.py becomes necessary when you want to provide support for conan create . to create a Conan package from the project. It also provides finer control over option handling and validation. This becomes more relevant with the Python bindings, where I don't want to use shared linkage with spdlog (which is a reasonable default otherwise) and statically link everything instead to keep Python packaging simpler.

@jonathanmcdermid I fixed all of the CI failures and the PR should be ready to be merged as far as I'm concerned. I had to disable the MinGW compilers because the shared build of spdlog seems to have issues with exporting symbols correctly when built using these compilers. I can look into it into a follow-up PR.

@jonathanmcdermid I fixed the issues with MinGW GCC - the tests failed due to a missing C++ runtime DLL - and replaced MinGW Clang with ClangCL. The latter is better supported on Windows and probably the more popular choice as well.

Sorry it took me a while to get to this! I need to update my github notifications so these dont go under the radar for me. I appreciate you simplifying the conanfile. I'll be working my way through this PR this week.


Don't list hidden type inputs in focus trap

The focus trap bugs if there is an hidden type input on first or last position.
Since there are not focusable, don't list them.

Thanks a lot my friend ;)


Do not print execution time in headless mode in Go linter task

What does this PR do?

Do not print execution time in headless mode in Go linter task.
Motivation

The goal of headless mode is to not have extra printed lines, so the durations should not be printed.
Additional Notes

Possible Drawbacks / Trade-offs

Describe how to test/QA your changes

/merge


Use abstract class to compare with immutable type

Since immutable data type (frozenset, nirum.datastructures.List) isn't equivalent with set or list, validate_type have to compare value with its abstract class.
https://github.com/spoqa/nirum/pull/123 test will be succeeded, after this PR merged & released.

@dahlia  Review kudasai!


nRF7002 shields: align COEX interface

Move out the independent COEX interface from the wifi/control interface of the nrf700x series of chips.
The COEX interface is used independently by cores like nrf5340/cpunet, which don't/can't use the the SPI/QSPI based wifi/control interface.
This PR splits the interface into its own binding, which represents the hardware model of the COEX interface.

@muraliThokala please review

Rebased to address removed nrf7002dk ns variant

@muraliThokala please review

@krish2718, Looks good to me.


Add codetour for new contributors

fixes: #149
Signed-off-by: Harsh Vardhan<EMAIL_ADDRESS>

Codecov Report

Merging #150 (7037c50) into develop (294fa8a) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff            @@
##           develop     #150   +/-   ##
========================================
  Coverage    69.92%   69.92%
========================================
  Files           26       26
  Lines         2148     2148
========================================
  Hits          1502     1502
  Misses         630      630
  Partials        16       16

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 294fa8a...7037c50. Read the comment docs.


Continuing lines of msgid wrongly added to msgctxt

There's a parsing bug that makes continuing lines from msgid be added to msgctxt instead.
Sample .po that triggers the error:
msgctxt "multiline_msgid"
msgid "Blabla\n"
"Blablabla"
msgstr "Pouet pouet"
"Pouet"
I'm going to submit a pull request for the fix.

Fixed in https://github.com/maddingue/Locale-Maketext-Lexicon-Getcontext/pull/2

Thanks for finding & fixing the bug. Version 0.04 is on its way to the CPAN
» https://metacpan.org/release/SAPER/Locale-Maketext-Lexicon-Getcontext-0.04


X apps with native wayland desktop (GNOME + mutter)

Again, thank you very much for this project. I use it on a day by day basis, over a year and it works flawlessly. I installed Arch Linux with GNOME and the X dependencies and weston and mutter (GNOME wayland window manager) on my notebook (Lenovo W510) and now I can test wayland sessions because I don't use proprietary NVIDIA drivers.
I try to run Chromium with GPU support but it doesn't work well in this case. Did I miss something or should I use another start option? There are some interesting messages in the log file x11docker.log

Did not find a nice solution to run a seamless application with option --gpu

I have installed weston, Xwayland and xdotool.

Could not detect a host window manager

Can you add support for mutter too?

I use it on a day by day basis, over a year and it works flawlessly.

Glad to hear that. :-)
Thank you for your blog post about x11docker!

I try to run Chromium with GPU support but it doesn't work well in this case.

Did it start up at all? Or what else did not work well?
The error messages seem to be DBus related. They might get away with --dbus-system or --systemd.

I have installed weston, Xwayland and xdotool.

If you also install xpra you get seamless windows instead of a Weston window.
You can also use --hostdisplay. I thought x11docker would use it automatically with --gpu if xpra is missing. I'll look at that.

Can you add support for mutter too?

I once removed mutter because it segfaults quite often. I did a test again yet and it did not crash. Maybe something was fixed in the meantime. I can add it again. However, in my test it resized a Xephyr window up to unusable size so I still cannot recommend it.
For a first test you can set --wm mutter.

Thank you for your blog post about x11docker!

I thought that I don't need xpra for wayland or xwayland apps. --wm mutter works and it uses weston-xwayland.
If I use --xpra-xwayland it produces GetVSyncParametersIfAvailable errors. This looks like Chromium related. If I installed libglvnd additionally in the Chromium container this error goes away but the container doesn't start anymore. The start command is wrong Running image command: /x11docker/tini -- /usr/local/bin/start --ignore-gpu-blacklist --enable-native-gpu-memory-buffers --enable-features=VizDisplayCompositor --force-gpu-rasterization --enable-checker-imaging.
Do you have any idea why this happened? There is some EGL log output at line 837. See x11docker.log

I thought that I don't need xpra for wayland or xwayland apps.

You would not need it for --hostwayland (that I consider to be safe), but that works only for applications that support Wayland.
For Xwayland it is the same as with Xorg; you can use insecure --hostdisplay or have to use other X servers with e.g. --xpra to avoid X security leaks.

The start command is wrong

There seems to be an issue in your start script:
/usr/local/bin/start: line 3: exec: --: invalid option
exec: usage: exec [-cl] [-a name] [command [arguments ...]] [redirection ...]

Check which command it produces. Check also whether x11docker submits the correct arguments to your script. I'm not sure at which point this goes wrong. Maybe show me /usr/local/bin/start.
Does it work without all arguments? I assume it is a wrapper for chromium doing some setup.

I'm going to close this now, because I think it has nothing to do with x11docker. The exec error was on my site. Maybe I have to install some other packages or chromium works only with --hostdisplay. It looks vlc works so far.

I did a test yet with jess/chromium.
So far I found:

Fails with --cap-default --sys-admin. That once worked.
Succeeds with chromium option --no-sandbox. (With --xpra --gpu)
I can confirm GetVSyncParametersIfAvailable error. Maybe I should add libglvnd to OpenGL dependencies in the documentation.
Fails with the bunch of chromium options even with --no-sandbox if running with --xpra --gpu. But succeeds with --hostdisplay. Maybe here is something I can look after.

I have same sandbox issue with jess/chromium  but --cap-default --sys-admin works with my own Arch Linux Chromium Docker image. Maybe it's Debian related.
The libglvnd package, which is included in mesa does not solve my problems or it has no hardware acceleration. What is the output of chrome://gpu  if you use --xpra --gpu? Compare it with --hostdisplay. As I said, maybe this is only a Chromium issue, because vlc works (but I have some warnings).

jess/chromium without libglvnd:
With --xpra --gpu it is terribly slow. With --hostdisplay --gpu the speed is ok. Output of both is the same at the top, did not compare the rest yet:
Graphics Feature Status
Canvas: Hardware accelerated
Flash: Hardware accelerated
Flash Stage3D: Hardware accelerated
Flash Stage3D Baseline profile: Hardware accelerated
Compositing: Hardware accelerated
Multiple Raster Threads: Enabled
Native GpuMemoryBuffers: Software only. Hardware acceleration disabled
Out-of-process Rasterization: Disabled
Hardware Protected Video Decode: Hardware accelerated
Rasterization: Software only. Hardware acceleration disabled
Skia Deferred Display List: Disabled
Skia Renderer: Disabled
Surface Control: Disabled
Surface Synchronization: Enabled
Video Decode: Hardware accelerated
Viz Service Display Compositor: Disabled
WebGL: Hardware accelerated
WebGL2: Hardware accelerated

With --xpra --gpu it is terribly slow. With --hostdisplay --gpu the speed is ok

Same here. The --xpra option uses --xpra-xwayland on my system. The slow speed comes from the Chromium GetVSyncParametersIfAvailable errors. To enable more hardware acceleration I use the Chromium options: --ignore-gpu-blacklist --enable-native-gpu-memory-buffers --enable-features=VizDisplayCompositor --force-gpu-rasterization --enable-checker-imaging. The option --ignore-gpu-blacklist is necessary for me, otherwise I don't have hardware acceleration at all. To display FPS you can add the option --show-fps-counter.
It looks like vlc has no hardware acceleration on my system. I think I have to setup VDPAU too. It was easier with NVIDIA. ;-)

It looks like vlc has no hardware acceleration on my system.

You might need to change settings in Einstellungen->Video->Ausgabe


from_tensors support for VideoClassification

What does this PR do?
Addresses #1356. A sample script to try it out:
import torch
from flash.video import VideoClassifier, VideoClassificationData
import flash

# 5 number of frames, 3 channels, height = 10 and width = 10
mock_tensors = torch.randint(size=(3, 5, 10, 10), low=0, high=255)
datamodule = VideoClassificationData.from_tensors(
    "data",
    "target",
    train_data={"data": torch.stack((mock_tensors, mock_tensors)), "target": ["Patient", "Doctor"]},
    predict_data={"data": torch.stack((mock_tensors, mock_tensors)), "target": ["Patient", "Doctor"]},
    batch_size=1,
)

for sample in datamodule.train_dataset.data:
    expected_t_shape = 5
    assert sample["video"].shape[1] == expected_t_shape

assert len(datamodule.labels) == 2, f"Expected number of labels to be 2 but found {len(datamodule.labels)}"

model = VideoClassifier(num_classes=datamodule.num_classes, pretrained=False, backbone="slow_r50", labels=datamodule.labels)
trainer = flash.Trainer(fast_dev_run=True)
trainer.finetune(model, datamodule=datamodule)

Output:
  | Name          | Type       | Params
---------------------------------------------
0 | train_metrics | ModuleDict | 0
1 | val_metrics   | ModuleDict | 0
2 | test_metrics  | ModuleDict | 0
3 | backbone      | Net        | 32.5 M
4 | head          | Sequential | 802
---------------------------------------------
32.5 M    Trainable params
0         Non-trainable params
32.5 M    Total params
129.820   Total estimated model params size (MB)
/home/krshrimali/anaconda3/envs/pl-17/lib/python3.9/site-packages/pytorch_lightning/trainer/connectors/data_connector.py:240: PossibleUserWarning: The dataloader, train_dataloader, does not have many workers which may be a bottleneck. Consider increasing the value of the `num_workers` argument` (try 24 which is the number of cpus on this machine) in the `DataLoader` init to improve performance.
  rank_zero_warn(
/home/krshrimali/anaconda3/envs/pl-17/lib/python3.9/site-packages/pytorch_lightning/trainer/trainer.py:1938: PossibleUserWarning: The number of training samples (1) is smaller than the logging interval Trainer(log_every_n_steps=50). Set a lower value for log_every_n_steps if you want to see logs for the training epoch.
  rank_zero_warn(
Epoch 0: 100%|█| 1/1.0 [00:01<00:00,  1.60s/it, loss=0.744, v_num=, train_accuracy_step=0.000, train_cross_entropy_step=0.744,

Before submitting

[ ] Was this discussed/approved via a Github issue? (no need for typos and docs improvements)
[ ] Did you read the contributor guideline, Pull Request section?
[ ] Did you make sure your PR does only one thing, instead of bundling different changes together?
[ ] Did you make sure to update the documentation with your changes?
[ ] Did you write any new necessary tests? [not needed for typos/docs]
[ ] Did you verify new and existing tests pass locally with your changes?
[ ] If you made a notable change (that affects users), did you update the CHANGELOG?

PR review

[ ] Is this pull request ready for review? (if not, please submit in draft mode)

Anyone in the community is free to review the PR once the tests have passed.
If we didn't discuss your PR in Github issues there's a high chance it will not be merged.
Did you have fun?
Make sure you had fun coding 🙃

Added an example script in the PR description for you to try it out! :) cc: @ethanwharris - whenever you find the time. Also if any questions, please feel free to leave review comments.


Waiting for server response... tunnelblick

Hi thanks for creating the script!
I've followed your setup procedures (among other openvpn tutorials) at least a half dozen times now, but I'm still not able to access my vpn remotely.  I keep getting "Waiting for server response" from tunnelblick to no avail.  I'm running a raspberry pi 3 with the latest version of Jesse.  I've double checked my port forwarding rules.  I'd really love for this to work.  Any help would be appreciated.

Def seems like you aren't getting through your network to your pi.  What port did you setup in pivpn?  if you want to screen cap your port forward UI so I can check.  and how are you connecting to it, what external IP?  you don't need to tell me just from your home go to whatismyip.com and check that is where tunnelblick is trying to connect.

I also forwarded TCP just for kicks, I realize I should only need UDP 1194.

Shouldn't you select the always box under port forwarding?
On Jun 18, 2016 9:58 PM, "Drew McCalmont"<EMAIL_ADDRESS>wrote:

[image: screenshot]
https://cloud.githubusercontent.com/assets/8175680/16174747/bfa7eadc-359f-11e6-9941-7205b5b1448f.png
I also forwarded TCP just for kicks, I realize I should only need UDP 1194.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/pivpn/pivpn/issues/49#issuecomment-226974945, or mute
the thread
https://github.com/notifications/unsubscribe/ADc_mHfdpjNgnRPHP8FmcZ9NGM9c6Szhks5qNKJigaJpZM4I5BAa
.

Oops...Good catch.  That did the trick.  Works like a charm.  Thank you!!

Hi,
I am totally new to VPN. I have a Netgear Nighthawk router and I enabled VPN on it. Downloaded and installed Tunnelblick. Forwarded the port to 8000 on the router. When I click connect on the Tunnelblick app, it shows "Waiting for server response ..." and doesn't connect.
Below is the log:
*Tunnelblick: OS X 10.12.5; Tunnelblick 3.7.1a (build 4812); Admin user
git commit e70dc14d7a954d6fe0040b3b8c9007feb98ee29d
Configuration myVPN
"Sanitized" condensed configuration file for /Library/Application Support/Tunnelblick/Shared/myVPN.tblk:
client
dev tap
proto udp
remote <IP_ADDRESS> 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5
================================================================================
Non-Apple kexts that are loaded:
Index Refs Address            Size       Wired      Name (Version) UUID
146    0 0xffffff7f80ec4000 0x5000     0x5000     com.Apowersoft.driver.AudioDevice (1.6.7) EDEB490C-96A8-34E2-BC40-D74C2AACEFF2 <113 5 4 3>
151    3 0xffffff7f83359000 0x61000    0x61000    org.virtualbox.kext.VBoxDrv (5.1.22) 93316754-E074-3CE2-9464-DDA4356FF02E <7 5 4 3 1>
157    0 0xffffff7f833ba000 0x8000     0x8000     org.virtualbox.kext.VBoxUSB (5.1.22) D956DCFA-4E4F-320A-BEBC-E4823501B1FF <156 151 49 7 5 4 3 1>
158    0 0xffffff7f833c2000 0x5000     0x5000     org.virtualbox.kext.VBoxNetFlt (5.1.22) 446923A0-E855-3E75-9173-66FA4CE2474A <151 7 5 4 3 1>
159    0 0xffffff7f833c7000 0x6000     0x6000     org.virtualbox.kext.VBoxNetAdp (5.1.22) 4A6C39E1-5D90-3E34-9673-57B0DD779CD7 <151 5 4 1>
182    0 0xffffff7f83447000 0x7000     0x7000     net.tunnelblick.tap (4812.3) 7CADB84E-01B1-3CD4-8FE3-CA4D2BE6C67E <7 5 4 1>
================================================================================
There are no unusual files in myVPN.tblk
================================================================================
Configuration preferences:
autoConnect = 1
-onSystemStart = 1
-doNotDisconnectOnFastUserSwitch = 1
-doNotReconnectOnFastUserSwitch = 1
-credentialsGroup = Common
-doNotDisconnectOnSleep = 1
-lastConnectionSucceeded = 0
-tunnelDownSoundName = Speak
-tunnelUpSoundName = Speak
================================================================================
Wildcard preferences:
================================================================================
Program preferences:
launchAtNextLogin = 1
notOKToCheckThatIPAddressDidNotChangeAfterConnection = 0
askedUserIfOKToCheckThatIPAddressDidNotChangeAfterConnection = 1
tunnelblickVersionHistory = (
"3.7.1a (build 4812)"
)
lastLaunchTime = 517508190.820802
showConnectedDurations = 1
lastLanguageAtLaunchWasRTL = 0
connectionWindowDisplayCriteria = showWhenConnecting
maxLogDisplaySize = 102400
keyboardShortcutIndex = 1
namedCredentialsThatAllConfigurationsUse = Common
updateCheckAutomatically = 1
updateSendProfileInfo = 1
NSWindow Frame ConnectingWindow = 445 443 389 187 0 0 1280 777
detailsWindowFrameVersion = 4812
detailsWindowFrame = {{180, 232}, {920, 468}}
detailsWindowLeftFrame = {{0, 0}, {165, 350}}
detailsWindowViewIndex = 0
detailsWindowConfigurationsTabIdentifier = settings
leftNavSelectedDisplayName = myVPN
AdvancedWindowTabIdentifier = connectingAndDisconnecting
haveDealtWithSparkle1dot5b6 = 1
haveDealtWithOldTunTapPreferences = 1
haveDealtWithOldLoginItem = 1
SUEnableAutomaticChecks = 1
SUScheduledCheckInterval = 86400
SUSendProfileInfo = 1
SULastCheckTime = 2017-05-26 16:16:09 +0000
SULastProfileSubmissionDate = 2017-05-26 16:16:08 +0000
SUHasLaunchedBefore = 1
WebKitDefaultFontSize = 16
WebKitStandardFont = Times
================================================================================
Tunnelblick Log:
2017-05-26 16:49:36 OpenVPN 2.3.16 x86_64-apple-darwin [SSL (OpenSSL)] [LZO] [PKCS11] [MH] [IPv6] built on May 19 2017
2017-05-26 16:49:36 library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
2017-05-26 16:49:36 MANAGEMENT: TCP Socket listening on [AF_INET]<IP_ADDRESS>:1337
2017-05-26 16:49:36 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2017-05-26 16:49:36 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-05-26 16:49:36 Socket Buffers: R=[196724->196724] S=[9216->9216]
2017-05-26 16:49:36 UDPv4 link local: [undef]
2017-05-26 16:49:36 UDPv4 link remote: [AF_INET]<IP_ADDRESS>:12974
2017-05-26 16:49:36 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
*Tunnelblick: OS X 10.12.5; Tunnelblick 3.7.1a (build 4812)
2017-05-26 16:49:35 *Tunnelblick: Attempting connection with myVPN; Set nameserver = 769; monitoring connection
2017-05-26 16:49:35 *Tunnelblick: openvpnstart start myVPN.tblk 1337 769 0 3 0 1048946 -ptADGNWradsgnw 2.3.16-openssl-1.0.2k
2017-05-26 16:49:37 *Tunnelblick: openvpnstart log:
Warning: The bitMask setting to disable OpenVPN logging is being ignored because the configuration is starting when the computer startsLoading tap-signed.kext
The Internet (host 'www.tunnelblick.net') is reachable; flags = 0x2
OpenVPN started successfully. Command used to start OpenVPN (one argument per displayed line):
      /Applications/Tunnelblick.app/Contents/Resources/openvpn/openvpn-2.3.16-openssl-1.0.2k/openvpn
      --daemon
      --log
      /Library/Application Support/Tunnelblick/Logs/-SLibrary-SApplication Support-STunnelblick-SShared-SmyVPN.tblk-SContents-SResources-Sconfig.ovpn.769_0_3_0_1048946.1337.openvpn.log
      --cd
      /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources
      --verb
      3
      --config
      /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources/config.ovpn
      --verb
      3
      --cd
      /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources
      --management
      <IP_ADDRESS>
      1337
      --script-security
      2
      --up
      /Applications/Tunnelblick.app/Contents/Resources/client.up.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
      --down
      /Applications/Tunnelblick.app/Contents/Resources/client.down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw
      --route-pre-down
      /Applications/Tunnelblick.app/Contents/Resources/client.route-pre-down.tunnelblick.sh -9 -a -d -f -m -w -ptADGNWradsgnw

2017-05-26 16:49:35 *Tunnelblick: openvpnstart starting OpenVPN
2017-05-26 16:49:37 MANAGEMENT: Client connected from [AF_INET]<IP_ADDRESS>:1337
2017-05-26 16:49:37 MANAGEMENT: CMD 'pid'
2017-05-26 16:49:37 MANAGEMENT: CMD 'state on'
2017-05-26 16:49:37 *Tunnelblick: Established communication with OpenVPN
2017-05-26 16:49:37 MANAGEMENT: CMD 'state'
2017-05-26 16:49:37 MANAGEMENT: CMD 'bytecount 1'
2017-05-26 16:49:37 MANAGEMENT: CMD 'hold release'
2017-05-26 16:49:38 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:49:41 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:49:43 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:49:50 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:49:51 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:06 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:07 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:36 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
2017-05-26 16:50:36 TLS Error: TLS handshake failed
2017-05-26 16:50:36 SIGUSR1[soft,tls-error] received, process restarting
2017-05-26 16:50:36 MANAGEMENT: >STATE:1495835436,RECONNECTING,tls-error,,
2017-05-26 16:50:36 Restart pause, 2 second(s)
2017-05-26 16:50:36 MANAGEMENT: CMD 'hold release'
2017-05-26 16:50:38 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
2017-05-26 16:50:38 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2017-05-26 16:50:38 Socket Buffers: R=[196724->196724] S=[9216->9216]
2017-05-26 16:50:38 UDPv4 link local: [undef]
2017-05-26 16:50:38 UDPv4 link remote: [AF_INET]<IP_ADDRESS>:12974
2017-05-26 16:50:38 MANAGEMENT: >STATE:1495835438,WAIT,,,
2017-05-26 16:50:38 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:40 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:41 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:44 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:52 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:50:53 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:51:08 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
2017-05-26 16:51:08 TCP/UDP: Incoming packet rejected from [AF_INET]<IP_ADDRESS>:12974[2], expected peer address: [AF_INET]<IP_ADDRESS>:12974 (allow this incoming source address/port by removing --remote or adding --float)
================================================================================
"Sanitized" full configuration file
client
dev tap
proto udp
remote <IP_ADDRESS> 12974
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
cipher AES-128-CBC
comp-lzo
verb 5
================================================================================
ifconfig output:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
options=1203<RXCSUM,TXCSUM,TXSTATUS,SW_TIMESTAMP>
inet <IP_ADDRESS> netmask 0xff000000
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x1
nd6 options=201<PERFORMNUD,DAD>
gif0: flags=8010<POINTOPOINT,MULTICAST> mtu 1280
stf0: flags=0<> mtu 1280
en0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=10b<RXCSUM,TXCSUM,VLAN_HWTAGGING,AV>
ether 3c:07:54:4e:36:05
nd6 options=201<PERFORMNUD,DAD>
media: autoselect (none)
status: inactive
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 60:c5:47:98:b5:1e
inet6 fe80::e:f0ba:fa81:3a4d%en1 prefixlen 64 secured scopeid 0x5
inet <IP_ADDRESS> netmask 0xffffff00 broadcast <IP_ADDRESS>
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: active
fw0: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 4078
lladdr a4:b1:97:ff:fe:c1:a4:4c
nd6 options=201<PERFORMNUD,DAD>
media: autoselect
status: inactive
en2: flags=963<UP,BROADCAST,SMART,RUNNING,PROMISC,SIMPLEX> mtu 1500
options=60<TSO4,TSO6>
ether d2:00:1c:1a:44:c0
media: autoselect
status: inactive
p2p0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 2304
ether 02:c5:47:98:b5:1e
media: autoselect
status: inactive
bridge0: flags=8822<BROADCAST,SMART,SIMPLEX,MULTICAST> mtu 1500
options=63<RXCSUM,TXCSUM,TSO4,TSO6>
ether d2:00:1c:1a:44:c0
Configuration:
id 0:0:0:0:0:0 priority 0 hellotime 0 fwddelay 0
maxage 0 holdcnt 0 proto stp maxaddr 100 timeout 1200
root id 0:0:0:0:0:0 priority 0 ifcost 0 port 0
ipfilter disabled flags 0x2
member: en2 flags=3<LEARNING,DISCOVER>
ifmaxaddr 0 port 7 priority 0 path cost 0
media:
status: inactive
utun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 2000
inet6 fe80::2471:2c4f:6f0d:35%utun0 prefixlen 64 scopeid 0xa
nd6 options=201<PERFORMNUD,DAD>
================================================================================
Console Log:
2017-05-26 11:15:47 Tunnelblick[3266] Tunnelblick: OS X 10.12.5; Tunnelblick 3.7.1a (build 4812)
2017-05-26 11:15:48 Tunnelblick[3266] Tunnelblick cannot run when it is on /Volumes because the volume has the MNT_NOSUID statfs flag set.
2017-05-26 11:15:55 Tunnelblick[3266] Tunnelblick needs to:
• Be installed in /Applications as Tunnelblick
• Change ownership and permissions of the program to secure it
• Secure configurations
2017-05-26 11:15:55 Tunnelblick[3266] Beginning installation or repair
2017-05-26 11:16:03 Tunnelblick[3266] Installation or repair succeeded; Log:
Tunnelblick installer started 2017-05-26 11:15:55. 1 arguments: 0x0017
Created directory /Library/Application Support/Tunnelblick with owner 0:80 and permissions 755
Changed ownership of /Library/Application Support/Tunnelblick from 0:80 to 0:0
Created directory /Library/Application Support/Tunnelblick/Logs with owner 0:0 and permissions 755
Created directory /var/log/Tunnelblick with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Shared with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Tblks with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Users with owner 0:0 and permissions 755
Created directory /Library/Application Support/Tunnelblick/Users/simaanbarday with owner 0:0 and permissions 755
Changed ownership of /Users/simaanbarday/Library/Application Support/Tunnelblick from 501:20 to 501:80
Changed ownership of /Users/simaanbarday/Library/Application Support/Tunnelblick/Configurations from 501:20 to 501:80
Copied /Volumes/Tunnelblick/Tunnelblick.app to /Applications/Tunnelblick.app
Removed all 'com.apple.quarantine' extended attributes
Changed ownership of /Applications/Tunnelblick.app and its contents from 501:80 to 0:0
Need to replace and/or reload 'tunnelblickd':
tunnelblickdHashOK   = NO
launchctlPlistHashOK = NO
tunnelblickdPlistOK  = NO
socketOK             = NO
Installed /Library/LaunchDaemons/net.tunnelblick.tunnelblick.tunnelblickd.plist
Used launchctl to load tunnelblickd
Tunnelblick installer finished without error
2017-05-26 11:16:03 Tunnelblick[3266] applicationShouldTerminate: termination because of Quit; delayed until 'shutdownTunnelblick' finishes
2017-05-26 11:16:03 Tunnelblick[3276] Tunnelblick: OS X 10.12.5; Tunnelblick 3.7.1a (build 4812)
2017-05-26 11:16:03 Tunnelblick[3266] Finished shutting down Tunnelblick; allowing termination
2017-05-26 11:16:04 Tunnelblick[3276] Launching a thread to remove the old login item (if any) so we can use the new mechanism that controls Tunnelblick's launch on login
2017-05-26 11:16:04 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/LaunchAgents
2017-05-26 11:16:04 Tunnelblick[3276] Copied our 'net.tunnelblick.tunnelblick.LaunchAtLogin.plist' into ~/Library/LaunchAgents
2017-05-26 11:16:04 Tunnelblick[3276] No old login item to remove
2017-05-26 11:16:09 Tunnelblick[3276] Sparkle: ===== Tunnelblick =====
2017-05-26 11:16:09 Tunnelblick[3276] Sparkle: Verified appcast signature
2017-05-26 11:16:30 Tunnelblick[3276] Copied easy-rsa
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-ca
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-dh
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-inter
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-key
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-key-pass
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-key-pkcs12
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-key-server
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-req
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/build-req-pass
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/clean-all
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/ChangeLog
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/COPYING
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Advanced.md
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Readme.md
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/EasyRSA-Upgrade-Notes.md
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Hacking.md
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/Intro-To-PKI.md
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/doc/TODO
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/easyrsa
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 600 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/openssl-1.0.cnf
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/vars.example
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/ca
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/client
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/COMMON
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/easyrsa3/x509-types/server
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/KNOWN_ISSUES
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 700 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/Licensing/gpl-2.0.txt
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/EasyRSA-3/README.quickstart.md
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/inherit-inter
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/list-crl
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 600 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.6.cnf
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 600 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/openssl-0.9.8.cnf
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 600 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/openssl-1.0.0.cnf
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/pkitool
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/README
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/revoke-full
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/sign-req
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/TB-version.txt
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 644 to 400 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/v3version.txt
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 600 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/vars
2017-05-26 11:16:30 Tunnelblick[3276] Changed permissions from 755 to 500 on /Users/simaanbarday/Library/Application Support/Tunnelblick/easy-rsa/whichopensslcnf
2017-05-26 11:18:27 Tunnelblick[3276] Changed permissions from 700 to 750 on /private/var/folders/g3/0011kt6n62g5z6y3k7llmxdh0000gn/T
2017-05-26 11:18:27 Tunnelblick[3276] Converting/Installing /Users/simaanbarday/Desktop/myVPN.tblk/client2.conf at line 9: Copied ca.crt
2017-05-26 11:18:27 Tunnelblick[3276] Changed permissions from 644 to 740 on /private/var/folders/g3/0011kt6n62g5z6y3k7llmxdh0000gn/T/Tunnelblick-SfKhuV/myVPN.tblk/Contents/Resources/ca.crt
2017-05-26 11:18:27 Tunnelblick[3276] Converting/Installing /Users/simaanbarday/Desktop/myVPN.tblk/client2.conf at line 10: Copied client.crt
2017-05-26 11:18:27 Tunnelblick[3276] Changed permissions from 644 to 740 on /private/var/folders/g3/0011kt6n62g5z6y3k7llmxdh0000gn/T/Tunnelblick-SfKhuV/myVPN.tblk/Contents/Resources/client.crt
2017-05-26 11:18:27 Tunnelblick[3276] Converting/Installing /Users/simaanbarday/Desktop/myVPN.tblk/client2.conf at line 11: Copied client.key
2017-05-26 11:18:27 Tunnelblick[3276] Changed permissions from 644 to 740 on /private/var/folders/g3/0011kt6n62g5z6y3k7llmxdh0000gn/T/Tunnelblick-SfKhuV/myVPN.tblk/Contents/Resources/client.key
2017-05-26 11:18:27 Tunnelblick[3276] Converting/Installing /Users/simaanbarday/Desktop/myVPN.tblk/client2.conf: Converted OpenVPN configuration
2017-05-26 11:18:37 Tunnelblick[3276] localNameFromDisplayName: 'myVPN' is not a known displayName
2017-05-26 11:18:37 Tunnelblick[3276] Tunnelblick needs to perform an action that requires administrator authorization.
2017-05-26 11:18:37 Tunnelblick[3276] Beginning installation or repair
2017-05-26 11:18:37 Tunnelblick[3276] Installation or repair succeeded; Log:
Tunnelblick installer started 2017-05-26 11:18:37. 3 arguments: 0x0001
/Library/Application Support/Tunnelblick/Shared/myVPN.tblk
/private/var/folders/g3/0011kt6n62g5z6y3k7llmxdh0000gn/T/Tunnelblick-SfKhuV/myVPN.tblk
Copied /private/var/folders/g3/0011kt6n62g5z6y3k7llmxdh0000gn/T/Tunnelblick-SfKhuV/myVPN.tblk
to /Library/Application Support/Tunnelblick/Shared/myVPN.tblk.temp
Renamed /Library/Application Support/Tunnelblick/Shared/myVPN.tblk.temp
to /Library/Application Support/Tunnelblick/Shared/myVPN.tblk
Changed ownership of /Library/Application Support/Tunnelblick/Shared/myVPN.tblk and its contents from 501:20 to 0:0
Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk
Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents
Changed permissions from 750 to 755 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources
Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources/ca.crt
Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources/client.crt
Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources/client.key
Changed permissions from 740 to 700 on /Library/Application Support/Tunnelblick/Shared/myVPN.tblk/Contents/Resources/config.ovpn
Tunnelblick installer finished without error
2017-05-26 12:15:36 Tunnelblick[3276] myVPN will be connected when the computer starts
2017-05-26 16:35:57 Tunnelblick[3276] BUG in libdispatch client: kevent[EVFILT_MACHPORT] monitored resource vanished before the source cancel handler was invoked
Please help!
Thank you.


Test and explicitly support Python 3.12

I'm going to have to pause this, because 3.12 is only supported in gevent 23.7.0, which in turn requires greenlet 3.0 and that is only available as an RC release (greenlet-3.0.0rc3).
I could make this work (it would cause some incompatibilities with Playwright though), but I couldnt make geventhttpclient work (from gevent.ssl import match_hostname fails because match_hostname is gone).


Create hello-world in different language

Create hello-world in different language

Hi @Akash11092002, I assume this PR was done by mistake. I'm closing it :)


ISPN-10091 Documentation for DNS_PING

Second commit Jira ID needs updating

@rigazilla @oraNod I've rebased the two commits as one and pushed to master. Might be worth just cherry-picking https://github.com/infinispan/infinispan/commit/553e7d361eed29b33e67ea1480e642fa7ded5fea to the 9.4.x branch so it's the same.


Old ui edits

changes to old ui and correction to call to installRuleset function

Looks good.
pe.installRuleset should be pe.installRID that was my bad so I'll make that change


Remove sources from schema and consolidate its URL field into caseReference

Sorry it's so huge :\ I tried to break commits up somewhat logically
Note: I made caseReference required, as well as caseReference.sourceUrl

 Schema: Consolidate sources and CaseReference fields


Migrated export modal and adding export-data option in builder

Basically using the same export-modal we had, just replacing the new modals and done.

cc @nobuti

Hadsfaslkdjfalñsdfj, I forgot to translate modal template strings, on it.

Frontend tests passed, merging!