Host broker security

Look into a couple things to improve security for the host broker:

Force the host broker to copy its input files into the input_data named Docker volume so that the host mount does not get mounted into the main job container. This possibly sacrifices some performance for security. We might want a broker field indicating whether a file system mount is required for the job container to improve other brokers as well.
Restrict some obvious "bad" paths (such as "/") from being accepted in the host broker validation. Bad paths also need to be restricted for host volumes defined in a JobConfiguration for mounts. Create a standalone utility that checks for bad paths.

Closing all issues > 2 years old.


small typo fix At testAnswer

The text has been changed to use internationalization (i18n) for translation. Therefore, if you want to modify the text, you will need to do so in the i18n files.

@jvJUCA this page is in english no matter what language you use . i18n is not emplemented for this page

I think you have the old develop

I think you have the old develop

i will check


Email with name

@parndt not sure why the checks are passing but I assume we will also need to update the various mail.from tests in due_date_mailer_spec" to match the "email with name"

@parndt not sure why the checks are passing but I assume we will also need to update the various mail.from tests in due_date_mailer_spec" to match the "email with name"

@tmfrnz are the checks passing here because CI doesn't have these values set in .github/workflows/main.yml so it's using the defaults, which the specs expect?


003 change formtastic to simpleform and style basic character info chocie page

I replaced the formtastic gem with simple_form.
I changed the "/choose_hero_class" page view style.

@ciupkajakub yes, but you most prolly created a featured branch of your other feature branch. That's how it works


Ban /host from depending on /devices

This is an idea brainstorm.
I'd rather force all /devices to depend only on /conn and never /host.
The only offender as of d39d5a12cc04a is tm1637 which uses cpu.Nanospin().
I can image other uses cases of cpu.Nanospin and I think it's the only real exception to a blanket ban.
A blanket ban would be simpler to enforce but would require moving /host/cpu out of /host, yet it kinda makes sense to live there.
So all in all, no resolution.

I'll start with the reverse, ban /host from depending on devices. This is simpler. (The initial bug was the reverse).

Actually it doesn't work either way; devices depend on cpu.Nanospin(), host depends on devices.Environment. Closing.

It's possible if structs and interfaces in devices are moved.


Fix various experiment header issues

Fixes for https://github.com/G-Research/fasttrackml/issues/1021 and https://github.com/G-Research/fasttrackml/issues/1022.
#1021
This fixed an issue with the console erroring out on empty metrics query:

Now we get the desired "No Results" page, and no query is done on backend.
#1022
The issue was that when I wrote the ExperimentSelectionHeader, I did not add the selectedExperimentNames as a state within the MetricsBar. The state was working correctly under normal circumstances because the view was getting refreshed anyways when querying. Empty queries are not sent to the server to begin with, therefore no refresh was happening.
Explanation: Added extra state to MetricsBar and set it on the handler function:

onSelectExperimentNamesChange() changes the model and toggles the experiment internally
setSelectedExperiments() updates the view to reflect the recent changes

Note: #1021 was also affected by these changes and has been tested as well.
Extra
I fixed a small misalignment in the SelectFormPopper metrics/params.

@fabiovincenzi It seems I accidentally removed one of your recent changes to the createAppModel.ts getMetricsData() function during my merge conflict resolution:
These were your original changes:

Any ideas on how to reconciliate the changes? 🤔


Feature: Tag a repo to a highlight

Type of feature
🍕 Feature
Current behavior
This feature (https://github.com/open-sauced/insights/pull/843) does not work unless we tag a highlight to a repo. We need a solution designed
Suggested solution
When submitting we can add the tag automatically, but if the user has a different repo to tag. We should add it to the dropdown. Here is the example from Campsite

Additional context
No response
Code of Conduct

[X] I agree to follow this project's Code of Conduct

Contributing Docs

[ ] I agree to follow this project's Contribution Docs

Is this going to work more like tags @bdougie or should it have a new function?

Tag's have now been designed!
[Figma file]

We have a design

What's the difference between the tag icon button and the "Add a repo" button? I'm adding this for now:

 What's the difference between the tag icon button and the "Add a repo" button? I'm adding this below the highlight text for now:

That is a good question. @isabensusan can you clarify the workflow for this feature. I assume use would be able to paste a url or repo when clicked, but not sure how it would look.

This is what I made for now (for tagging and adding blogs).
We can take these components and refactor when we change the highlight creation form.
Quick Question - How many repos can you add to a highlight? https://github.com/diivi/insights/blob/ffde102394bea0e4f857e5deaf38385c27a552c5/components/molecules/CardRepoList/card-repo-list.tsx#L73 Code seems to support an infinite number of repos.

This works, we can improve this in the next iteration.

Quick Question - How many repos can you add to a highlight?

We can limit it 3 for now, but for most use cases one is the norm.


Fix missing RP selection causing 500 error on Landing Page

Jira ticket
Submit users with multiple Responsible Persons, none of them selected as their current and not having 2FA in their session were getting a 500 code error when reaching the Submit landing page.
From what I have manually tested (and our integration/feature specs), the create or join responsible person check should be triggered even if the users have 2FA enabled and haven't 2FA present in their session.

Test scenarios:< In-Progress>

Verify user  should be able to switch between RPs and go to the home page
Verify session time out( remove the 2fa cookie from the browser) and click your cosmetics page. Should prompt the user to enter 2fa code
Verify invite user and create a user with the same email account. On 2fa, the user should be prompted to either create new RP or join the existing invite.
Verify create account form and invite the user with the same email account. should
Verify create an account and before RP creation reset the password- should resend create account link
Verify invite user and try reset password with the same account - should resend invite link


feat: New log level

Please provide the issue number

Issue number: #515
Summary
Changes

Please provide a summary of what's being changed

User experience

Please share what the user experience looks like before and after this change

Checklist
Please leave checklist items unchecked if they do not apply to your change.

[x] Meets tenets criteria
[x] I have performed a self-review of this change
[x] Changes have been tested
[x] Changes are documented
[x] PR title follows conventional commit semantics

Is this a breaking change?
RFC issue number:
Checklist:

[ ] Migration process documented
[ ] Implement warnings (if it can live side by side)

Acknowledgment
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
Disclaimer: We value your time and bandwidth. As such, any pull requests created on non-triaged issues might not be successful.

Codecov Report
Attention: 4 lines in your changes are missing coverage. Please review.

Comparison is base (654de19) 74.41% compared to head (fcb180c) 72.18%.
Report is 19 commits behind head on develop.

Files
Patch %
Lines

...da.Powertools.Logging/Internal/PowertoolsLogger.cs
88.00%
1 Missing and 2 partials :warning:

...tools.Logging/Internal/PowertoolsConfigurations.cs
93.75%
0 Missing and 1 partial :warning:

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@             Coverage Diff             @@
##           develop     #516      +/-   ##
===========================================
- Coverage    74.41%   72.18%   -2.23%
===========================================
  Files          101      101
  Lines         4057     4106      +49
  Branches         0      417     +417
===========================================
- Hits          3019     2964      -55
+ Misses        1038     1025      -13
- Partials         0      117     +117

Flag
Coverage Δ

unittests
72.18% <92.15%> (-2.23%)
:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Fix French translations

Fix French translations for uniformity

Partial translations, some field and wallet type were not translated on upstream project.


aviator

Hey everyone, I'm looking for an interesting and exciting casino game, I'm from India, can anyone recommend something?

I was looking for something new to play when I discovered Aviator. It’s a simple game, but it’s full of excitement, especially when you’re trying to time your cashout. aviator game download, aviator app, aviator game apk https://casino-game.in/en/aviator/ was easy to set up, and now I play it whenever I have some free time here in India. It’s a great way to have fun without getting too complicated!


Modcluster 794

Add test for https://issues.redhat.com/browse/MODCLUSTER-794.
This branch is based on #120 so I'm opening this as a draft until it is merged.

Rebase done. Because the issue has not been fixed yet, I disabled this test as well (in CI).

So this is a test case for MODCLUSTER-794 – I personally prefer to get test cases merged as disabled and the person fixing the issue fixes and enables the test – @jfclere can weigh in.

So this is a test case for MODCLUSTER-794

Yes.

Converted to draft PR since there are 'wip' commits.

Marking ready for review. It's no longer the test only, but there is a fix too.

Marking ready for review. It's no longer the test only, but there is a fix too.

Great. @jfclere please review.

Thnaks @jfclere @jajik


[Prompt/LG] Prompt still take activity not IActivity as input but things like LG can only give IMessageActivity

Github issues should be used for bugs and feature requests. Use Stack Overflow for general "how-to" questions.
Version
What package version of the SDK are you using.
4.6.0-Daily-2019-07-05-01
Describe the bug
When I use LG to build up a prompt, the prompt only take activity not IActivity. So I can only make a cast to make it work.
To Reproduce
Steps to reproduce the behavior:
var result = _lgMultiLangEngine.Generate(sc.Context, "[ReadOut]", new { messageList = state.MessageList });
var activity = await new TextMessageActivityGenerator().CreateActivityFromText(sc.Context, result.Result, null);
return await sc.PromptAsync(Actions.Prompt, new PromptOptions { Prompt = activity as Activity });
Expected behavior
There are two way to make this work:

Change Prompt to accept IActivity and support input hint
Add an extra function named ActivityGenerator to return Activity directly.

Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
Add any other context about the problem here.
[bug]

@DingmaomaoBJTU - can you take a look at this proposal and comment if it addresses your core need? #2325


Progressbar bug

Expected Behavior
Progressbar after all images loaded didnt show again.
Actual Behavior
Some times after all images loaded progressbar appear and start to progress.
Specifications

Image Picker Version:2.2.0
Android OS:7.0
Phone:Galexy S7

This should not exist in 3.0.0 or the latest 2.x version


Added note to indentedSyntax in read.me

Added note to indentedSyntax in read.me to clarify that node-sass can compile mixed libraries even with this set to false.

Thank you very much :tada: !


[Qbittorrent] Not work(non-authoritative)

Hello,
I have a small problem, I can't download anything with a vpn connection.
Tracer error "Host not found (non-authoritative), try again later"
here are the logs:
`[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-aaa_dockerfile_backup.sh: executing...
[cont-init.d] 00-aaa_dockerfile_backup.sh: exited 0.
[cont-init.d] 00-banner.sh: executing...
Add-on: Qbittorrent
qBittorrent is a bittorrent client
Add-on version: 4.4.2-r4-ls189
You are running the latest version of this add-on.
System: Debian GNU/Linux 11 (bullseye)  (armv7 / raspberrypi4)
Home Assistant Core: 2022.4.7
Home Assistant Supervisor: 2022.04.0
Please, share the above information when looking for help
or support in, e.g., GitHub, forums
https://github.com/alexbelgium/hassio-addons
[cont-init.d] 00-banner.sh: exited 0.
[cont-init.d] 00-folders.sh: executing...
[cont-init.d] 00-folders.sh: exited 0.
[cont-init.d] 01-envfile: executing...
[cont-init.d] 01-envfile: exited 0.
[cont-init.d] 01-migrations: executing...
[migrations] started
[migrations] no migrations found
[cont-init.d] 01-migrations: exited 0.
[cont-init.d] 02-tamper-check: executing...
[cont-init.d] 02-tamper-check: exited 0.
[cont-init.d] 10-adduser: executing...
      _         ()
     | |  ___   _    __
     | | / __| | |  /  \
     | | \__ \ | | | () |
     |_| |___/ |_|  \__/

Brought to you by linuxserver.io
To support LSIO projects visit:
https://www.linuxserver.io/donate/
GID/UID
User uid:    0
User gid:    0
[cont-init.d] 10-adduser: exited 0.
[cont-init.d] 30-config: executing...
[cont-init.d] 30-config: exited 0.
[cont-init.d] 30-nginx.sh: executing...
[cont-init.d] 30-nginx.sh: exited 0.
[cont-init.d] 90-custom-folders: executing...
[cont-init.d] 90-custom-folders: exited 0.
[cont-init.d] 90-dns_set.sh: executing...
[15:52:28] INFO: DNS SERVERS set to <IP_ADDRESS>
[cont-init.d] 90-dns_set.sh: exited 0.
[cont-init.d] 91-qbittorrent_configuration.sh: executing...
[15:52:29] INFO: Downloads can be found in /share/qBittorrent
[15:52:29] INFO: Whitelisted subsets will not require a password : localhost,<IP_ADDRESS>,<IP_ADDRESS>/16,<IP_ADDRESS>/16,<IP_ADDRESS>/24
[15:52:31] INFO: WEBUI username set to admin
[15:52:32] INFO: Alternate UI enabled : qb-web. If webui don't work, disable this option
[15:52:35] INFO: Default username/password : admin/adminadmin
[15:52:35] INFO: Configuration can be found in /config/qBittorrent
[cont-init.d] 91-qbittorrent_configuration.sh: exited 0.
[cont-init.d] 92-local_mounts.sh: executing...
[cont-init.d] 92-local_mounts.sh: exited 0.
[cont-init.d] 92-smb_mounts.sh: executing...
[cont-init.d] 92-smb_mounts.sh: exited 0.
[cont-init.d] 93-openvpn.sh: executing...
[15:52:36] INFO: Configuring openvpn
[15:52:36] INFO: openvpn correctly set, qbittorrent will run tunnelled through openvpn
Using interface binding in the qBittorrent app
... deleting previous interface settings
... binding tun0 interface in qBittorrent configuration
... adding route-nopull to your config.ovpn
[cont-init.d] 93-openvpn.sh: exited 0.
[cont-init.d] 99-custom-files: executing...
[custom-init] no custom files found exiting...
[cont-init.d] 99-custom-files: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
[15:52:37] WARNING: The run_duration option is set. The addon will stop after 5d
2022-04-29 15:52:37 DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
2022-04-29 15:52:37 us=292644 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
2022-04-29 15:52:37 us=292814 Current Parameter Settings:
2022-04-29 15:52:37 us=292874   config = '/etc/openvpn/config.ovpn'
2022-04-29 15:52:37 us=292923   mode = 0
2022-04-29 15:52:37 us=292968   persist_config = DISABLED
2022-04-29 15:52:37 us=293013   persist_mode = 1
2022-04-29 15:52:37 us=293063   show_ciphers = DISABLED
2022-04-29 15:52:37 us=293115   show_digests = DISABLED
2022-04-29 15:52:37 us=293163   show_engines = DISABLED
2022-04-29 15:52:37 us=293209   genkey = DISABLED
2022-04-29 15:52:37 us=293254   genkey_filename = '[UNDEF]'
2022-04-29 15:52:37 us=293300   key_pass_file = '[UNDEF]'
2022-04-29 15:52:37 us=293345   show_tls_ciphers = DISABLED
2022-04-29 15:52:37 us=293390   connect_retry_max = 0
2022-04-29 15:52:37 us=293436 Connection profiles [0]:
2022-04-29 15:52:37 us=293482   proto = udp
2022-04-29 15:52:37 us=293527   local = '[UNDEF]'
2022-04-29 15:52:37 us=293572   local_port = '[UNDEF]'
2022-04-29 15:52:37 us=293616   remote = '87-1-fr.cg-dialup.net'
2022-04-29 15:52:37 us=293661   remote_port = '443'
2022-04-29 15:52:37 us=293706   remote_float = DISABLED
2022-04-29 15:52:37 us=293752   bind_defined = DISABLED
2022-04-29 15:52:37 us=293797   bind_local = DISABLED
2022-04-29 15:52:37 us=293842   bind_ipv6_only = DISABLED
2022-04-29 15:52:37 us=293889   connect_retry_seconds = 5
2022-04-29 15:52:37 us=293936   connect_timeout = 120
2022-04-29 15:52:37 us=293983   socks_proxy_server = '[UNDEF]'
2022-04-29 15:52:37 us=294029   socks_proxy_port = '[UNDEF]'
2022-04-29 15:52:37 us=294074   tun_mtu = 1500
2022-04-29 15:52:37 us=294118   tun_mtu_defined = ENABLED
2022-04-29 15:52:37 us=294162   link_mtu = 1500
2022-04-29 15:52:37 us=294207   link_mtu_defined = DISABLED
2022-04-29 15:52:37 us=294255   tun_mtu_extra = 0
2022-04-29 15:52:37 us=294299   tun_mtu_extra_defined = DISABLED
2022-04-29 15:52:37 us=294342   mtu_discover_type = -1
2022-04-29 15:52:37 us=294389   fragment = 0
2022-04-29 15:52:37 us=294434   mssfix = 1450
2022-04-29 15:52:37 us=294481   explicit_exit_notification = 2
2022-04-29 15:52:37 us=294526   tls_auth_file = '[UNDEF]'
2022-04-29 15:52:37 us=294572   key_direction = not set
2022-04-29 15:52:37 us=294617   tls_crypt_file = '[UNDEF]'
2022-04-29 15:52:37 us=294662   tls_crypt_v2_file = '[UNDEF]'
2022-04-29 15:52:37 us=294707 Connection profiles END
2022-04-29 15:52:37 us=294751   remote_random = DISABLED
2022-04-29 15:52:37 us=294795   ipchange = '[UNDEF]'
2022-04-29 15:52:37 us=294840   dev = 'tun'
2022-04-29 15:52:37 us=294884   dev_type = '[UNDEF]'
2022-04-29 15:52:37 us=294927   dev_node = '[UNDEF]'
2022-04-29 15:52:37 us=294974   lladdr = '[UNDEF]'
2022-04-29 15:52:37 us=295020   topology = 1
2022-04-29 15:52:37 us=295063   ifconfig_local = '[UNDEF]'
2022-04-29 15:52:37 us=295108   ifconfig_remote_netmask = '[UNDEF]'
2022-04-29 15:52:37 us=295154   ifconfig_noexec = DISABLED
2022-04-29 15:52:37 us=295197   ifconfig_nowarn = DISABLED
2022-04-29 15:52:37 us=295242   ifconfig_ipv6_local = '[UNDEF]'
2022-04-29 15:52:37 us=295285   ifconfig_ipv6_netbits = 0
2022-04-29 15:52:37 us=295329   ifconfig_ipv6_remote = '[UNDEF]'
2022-04-29 15:52:37 us=295373   shaper = 0
2022-04-29 15:52:37 us=295418   mtu_test = 0
2022-04-29 15:52:37 us=295462   mlock = DISABLED
2022-04-29 15:52:37 us=295506   keepalive_ping = 0
2022-04-29 15:52:37 us=295551   keepalive_timeout = 0
2022-04-29 15:52:37 us=295597   inactivity_timeout = 0
2022-04-29 15:52:37 us=295641   inactivity_minimum_bytes = 0
2022-04-29 15:52:37 us=295685   ping_send_timeout = 5
2022-04-29 15:52:37 us=295729   ping_rec_timeout = 60
2022-04-29 15:52:37 us=295773   ping_rec_timeout_action = 1
2022-04-29 15:52:37 us=295818   ping_timer_remote = ENABLED
2022-04-29 15:52:37 us=295862   remap_sigusr1 = 0
2022-04-29 15:52:37 us=295905   persist_tun = ENABLED
2022-04-29 15:52:37 us=295950   persist_local_ip = DISABLED
2022-04-29 15:52:37 us=295995   persist_remote_ip = DISABLED
2022-04-29 15:52:37 us=296039   persist_key = ENABLED
2022-04-29 15:52:37 us=296082   passtos = DISABLED
2022-04-29 15:52:37 us=296127   resolve_retry_seconds =<PHONE_NUMBER>
2022-04-29 15:52:37 us=296207   resolve_in_advance = DISABLED
2022-04-29 15:52:37 us=296258   username = '[UNDEF]'
2022-04-29 15:52:37 us=296304   groupname = '[UNDEF]'
2022-04-29 15:52:37 us=296349   chroot_dir = '[UNDEF]'
2022-04-29 15:52:37 us=296394   cd_dir = '[UNDEF]'
2022-04-29 15:52:37 us=296440   writepid = '[UNDEF]'
2022-04-29 15:52:37 us=296496   up_script = '/etc/openvpn/up.sh'
2022-04-29 15:52:37 us=296563   down_script = '/etc/openvpn/down.sh'
2022-04-29 15:52:37 us=296630   down_pre = DISABLED
2022-04-29 15:52:37 us=296694   up_restart = DISABLED
2022-04-29 15:52:37 us=296757   up_delay = DISABLED
2022-04-29 15:52:37 us=296824   daemon = DISABLED
2022-04-29 15:52:37 us=296871   inetd = 0
2022-04-29 15:52:37 us=296917   log = DISABLED
2022-04-29 15:52:37 us=296962   suppress_timestamps = DISABLED
2022-04-29 15:52:37 us=297006   machine_readable_output = DISABLED
2022-04-29 15:52:37 us=297049   nice = 0
2022-04-29 15:52:37 us=297094   verbosity = 4
2022-04-29 15:52:37 us=297138   mute = 0
2022-04-29 15:52:37 us=297183   gremlin = 0
2022-04-29 15:52:37 us=297228   status_file = '[UNDEF]'
2022-04-29 15:52:37 us=297271   status_file_version = 1
2022-04-29 15:52:37 us=297316   status_file_update_freq = 60
2022-04-29 15:52:37 us=297362   occ = ENABLED
2022-04-29 15:52:37 us=297381   rcvbuf = 0
2022-04-29 15:52:37 us=297397   sndbuf = 0
2022-04-29 15:52:37 us=297412   mark = 0
2022-04-29 15:52:37 us=297428   sockflags = 0
2022-04-29 15:52:37 us=297443   fast_io = DISABLED
2022-04-29 15:52:37 us=297458   comp.alg = 0
2022-04-29 15:52:37 us=297472   comp.flags = 0
2022-04-29 15:52:37 us=297487   route_script = '[UNDEF]'
2022-04-29 15:52:37 us=297502   route_default_gateway = '[UNDEF]'
2022-04-29 15:52:37 us=297517   route_default_metric = 0
2022-04-29 15:52:37 us=297531   route_noexec = DISABLED
2022-04-29 15:52:37 us=297546   route_delay = 5
2022-04-29 15:52:37 us=297561   route_delay_window = 30
2022-04-29 15:52:37 us=297577   route_delay_defined = ENABLED
2022-04-29 15:52:37 us=297592   route_nopull = DISABLED
2022-04-29 15:52:37 us=297607   route_gateway_via_dhcp = DISABLED
2022-04-29 15:52:37 us=297621   allow_pull_fqdn = DISABLED
2022-04-29 15:52:37 us=297636   Pull filters:
2022-04-29 15:52:37 us=297651     ignore "dhcp-option DNS6"
2022-04-29 15:52:37 us=297667     ignore "tun-ipv6"
2022-04-29 15:52:37 us=297682     ignore "ifconfig-ipv6"
2022-04-29 15:52:37 us=297698   [redirect_default_gateway local=0]
2022-04-29 15:52:37 us=297715   route <IP_ADDRESS>/<IP_ADDRESS>/net_gateway/default (not set)
2022-04-29 15:52:37 us=297731   management_addr = '[UNDEF]'
2022-04-29 15:52:37 us=297745   management_port = '[UNDEF]'
2022-04-29 15:52:37 us=297759   management_user_pass = '[UNDEF]'
2022-04-29 15:52:37 us=297774   management_log_history_cache = 250
2022-04-29 15:52:37 us=297789   management_echo_buffer_size = 100
2022-04-29 15:52:37 us=297805   management_write_peer_info_file = '[UNDEF]'
2022-04-29 15:52:37 us=297819   management_client_user = '[UNDEF]'
2022-04-29 15:52:37 us=297834   management_client_group = '[UNDEF]'
2022-04-29 15:52:37 us=297848   management_flags = 0
2022-04-29 15:52:37 us=297862   shared_secret_file = '[UNDEF]'
2022-04-29 15:52:37 us=297877   key_direction = not set
2022-04-29 15:52:37 us=297892   ciphername = 'AES-256-CBC'
2022-04-29 15:52:37 us=297906   ncp_enabled = DISABLED
2022-04-29 15:52:37 us=297921   ncp_ciphers = 'AES-256-GCM:AES-128-GCM:AES-256-CBC'
2022-04-29 15:52:37 us=297935   authname = 'SHA256'
2022-04-29 15:52:37 us=297950   prng_hash = 'SHA1'
2022-04-29 15:52:37 us=297964   prng_nonce_secret_len = 16
2022-04-29 15:52:37 us=297978   keysize = 0
2022-04-29 15:52:37 us=297992   engine = DISABLED
2022-04-29 15:52:37 us=298007   replay = ENABLED
2022-04-29 15:52:37 us=298022   mute_replay_warnings = DISABLED
2022-04-29 15:52:37 us=298036   replay_window = 64
2022-04-29 15:52:37 us=298050   replay_time = 15
2022-04-29 15:52:37 us=298064   packet_id_file = '[UNDEF]'
2022-04-29 15:52:37 us=298078   test_crypto = DISABLED
2022-04-29 15:52:37 us=298092   tls_server = DISABLED
2022-04-29 15:52:37 us=298106   tls_client = ENABLED
2022-04-29 15:52:37 us=298120   ca_file = '[INLINE]'
2022-04-29 15:52:37 us=298193   ca_path = '[UNDEF]'
2022-04-29 15:52:37 us=298216   dh_file = '[UNDEF]'
2022-04-29 15:52:37 us=298231   cert_file = '[INLINE]'
2022-04-29 15:52:37 us=298246   extra_certs_file = '[UNDEF]'
2022-04-29 15:52:37 us=298260   priv_key_file = '[INLINE]'
2022-04-29 15:52:37 us=298274   pkcs12_file = '[UNDEF]'
2022-04-29 15:52:37 us=298288   cipher_list = '[UNDEF]'
2022-04-29 15:52:37 us=298302   cipher_list_tls13 = '[UNDEF]'
2022-04-29 15:52:37 us=298319   tls_cert_profile = '[UNDEF]'
2022-04-29 15:52:37 us=298333   tls_verify = '[UNDEF]'
2022-04-29 15:52:37 us=298349   tls_export_cert = '[UNDEF]'
2022-04-29 15:52:37 us=298363   verify_x509_type = 0
2022-04-29 15:52:37 us=298378   verify_x509_name = '[UNDEF]'
2022-04-29 15:52:37 us=298392   crl_file = '[UNDEF]'
2022-04-29 15:52:37 us=298407   ns_cert_type = 0
2022-04-29 15:52:37 us=298422   remote_cert_ku[i] = 65535
2022-04-29 15:52:37 us=298436   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298450   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298464   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298478   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298492   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298505   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298519   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298533   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298547   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298561   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298575   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298589   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298603   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298617   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298630   remote_cert_ku[i] = 0
2022-04-29 15:52:37 us=298645   remote_cert_eku = 'TLS Web Server Authentication'
2022-04-29 15:52:37 us=298660   ssl_flags = 0
2022-04-29 15:52:37 us=298674   tls_timeout = 2
2022-04-29 15:52:37 us=298688   renegotiate_bytes = -1
2022-04-29 15:52:37 us=298702   renegotiate_packets = 0
2022-04-29 15:52:37 us=298716   renegotiate_seconds = 3600
2022-04-29 15:52:37 us=298730   handshake_window = 60
2022-04-29 15:52:37 us=298745   transition_window = 3600
2022-04-29 15:52:37 us=298759   single_session = DISABLED
2022-04-29 15:52:37 us=298773   push_peer_info = DISABLED
2022-04-29 15:52:37 us=298787   tls_exit = DISABLED
2022-04-29 15:52:37 us=298802   tls_crypt_v2_metadata = '[UNDEF]'
2022-04-29 15:52:37 us=298821   server_network = <IP_ADDRESS>
2022-04-29 15:52:37 us=298838   server_netmask = <IP_ADDRESS>
2022-04-29 15:52:37 us=298859   server_network_ipv6 = ::
2022-04-29 15:52:37 us=298873   server_netbits_ipv6 = 0
2022-04-29 15:52:37 us=298891   server_bridge_ip = <IP_ADDRESS>
2022-04-29 15:52:37 us=298908   server_bridge_netmask = <IP_ADDRESS>
2022-04-29 15:52:37 us=298925   server_bridge_pool_start = <IP_ADDRESS>
2022-04-29 15:52:37 us=298943   server_bridge_pool_end = <IP_ADDRESS>
2022-04-29 15:52:37 us=298957   ifconfig_pool_defined = DISABLED
2022-04-29 15:52:37 us=299038   ifconfig_pool_start = <IP_ADDRESS>
2022-04-29 15:52:37 us=299062   ifconfig_pool_end = <IP_ADDRESS>
2022-04-29 15:52:37 us=299079   ifconfig_pool_netmask = <IP_ADDRESS>
2022-04-29 15:52:37 us=299094   ifconfig_pool_persist_filename = '[UNDEF]'
2022-04-29 15:52:37 us=299110   ifconfig_pool_persist_refresh_freq = 600
2022-04-29 15:52:37 us=299124   ifconfig_ipv6_pool_defined = DISABLED
2022-04-29 15:52:37 us=299144   ifconfig_ipv6_pool_base = ::
2022-04-29 15:52:37 us=299159   ifconfig_ipv6_pool_netbits = 0
2022-04-29 15:52:37 us=299173   n_bcast_buf = 256
2022-04-29 15:52:37 us=299187   tcp_queue_limit = 64
2022-04-29 15:52:37 us=299201   real_hash_size = 256
2022-04-29 15:52:37 us=299215   virtual_hash_size = 256
2022-04-29 15:52:37 us=299229   client_connect_script = '[UNDEF]'
2022-04-29 15:52:37 us=299243   learn_address_script = '[UNDEF]'
2022-04-29 15:52:37 us=299258   client_disconnect_script = '[UNDEF]'
2022-04-29 15:52:37 us=299272   client_config_dir = '[UNDEF]'
2022-04-29 15:52:37 us=299286   ccd_exclusive = DISABLED
2022-04-29 15:52:37 us=299300   tmp_dir = '/tmp'
2022-04-29 15:52:37 us=299315   push_ifconfig_defined = DISABLED
2022-04-29 15:52:37 us=299332   push_ifconfig_local = <IP_ADDRESS>
2022-04-29 15:52:37 us=299349   push_ifconfig_remote_netmask = <IP_ADDRESS>
2022-04-29 15:52:37 us=299364   push_ifconfig_ipv6_defined = DISABLED
2022-04-29 15:52:37 us=299384   push_ifconfig_ipv6_local = ::/0
2022-04-29 15:52:37 us=299406   push_ifconfig_ipv6_remote = ::
2022-04-29 15:52:37 us=299421   enable_c2c = DISABLED
2022-04-29 15:52:37 us=299436   duplicate_cn = DISABLED
2022-04-29 15:52:37 us=299451   cf_max = 0
2022-04-29 15:52:37 us=299466   cf_per = 0
2022-04-29 15:52:37 us=299481   max_clients = 1024
2022-04-29 15:52:37 us=299496   max_routes_per_client = 256
2022-04-29 15:52:37 us=299511   auth_user_pass_verify_script = '[UNDEF]'
2022-04-29 15:52:37 us=299526   auth_user_pass_verify_script_via_file = DISABLED
2022-04-29 15:52:37 us=299542   auth_token_generate = DISABLED
2022-04-29 15:52:37 us=299557   auth_token_lifetime = 0
2022-04-29 15:52:37 us=299572   auth_token_secret_file = '[UNDEF]'
2022-04-29 15:52:37 us=299587   port_share_host = '[UNDEF]'
2022-04-29 15:52:37 us=299602   port_share_port = '[UNDEF]'
2022-04-29 15:52:37 us=299617   vlan_tagging = DISABLED
2022-04-29 15:52:37 us=299633   vlan_accept = all
2022-04-29 15:52:37 us=299648   vlan_pvid = 1
2022-04-29 15:52:37 us=299662   client = ENABLED
2022-04-29 15:52:37 us=299676   pull = ENABLED
2022-04-29 15:52:37 us=299691   auth_user_pass_file = '/etc/openvpn/credentials'
2022-04-29 15:52:37 us=299711 OpenVPN 2.5.6 armv7-alpine-linux-musleabihf [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Apr 17 2022
2022-04-29 15:52:37 us=299743 library versions: OpenSSL 1.1.1n  15 Mar 2022, LZO 2.10
2022-04-29 15:52:37 us=300098 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
2022-04-29 15:52:37 us=303692 Control Channel MTU parms [ L:1621 D:1212 EF:38 EB:0 ET:0 EL:3 ]
2022-04-29 15:52:37 us=354463 Data Channel MTU parms [ L:1621 D:1450 EF:121 EB:406 ET:0 EL:3 ]
2022-04-29 15:52:37 us=354680 Local Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-client'
2022-04-29 15:52:37 us=354713 Expected Remote Options String (VER=V4): 'V4,dev-type tun,link-mtu 1569,tun-mtu 1500,proto UDPv4,cipher AES-256-CBC,auth SHA256,keysize 256,key-method 2,tls-server'
2022-04-29 15:52:37 us=354798 TCP/UDP: Preserving recently used remote address: [AF_INET]<IP_ADDRESS>:443
2022-04-29 15:52:37 us=354876 Socket Buffers: R=[212992->212992] S=[212992->212992]
2022-04-29 15:52:37 us=354952 UDP link local: (not bound)
2022-04-29 15:52:37 us=354979 UDP link remote: [AF_INET]<IP_ADDRESS>:443
2022-04-29 15:52:37 us=368074 TLS: Initial packet from [AF_INET]<IP_ADDRESS>:443, sid=286180f5 dddfc798
2022-04-29 15:52:37 us=397868 VERIFY OK: depth=1, C=RO, L=Bucharest, O=CyberGhost S.A., CN=CyberGhost Root CA<EMAIL_ADDRESS>2022-04-29 15:52:37 us=400019 VERIFY KU OK
2022-04-29 15:52:37 us=400129 Validating certificate extended key usage
2022-04-29 15:52:37 us=400186 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2022-04-29 15:52:37 us=400255 VERIFY EKU OK
2022-04-29 15:52:37 us=400292 VERIFY OK: depth=0, CN=paris-rack402.nodes.gen4.ninja
2022-04-29 15:52:37 us=543409 WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1569', remote='link-mtu 1553'
2022-04-29 15:52:37 us=543576 WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
2022-04-29 15:52:37 us=544048 Control Channel: TLSv1.3, cipher TLSv1.3 TLS_AES_256_GCM_SHA384, peer certificate: 4096 bit RSA, signature: RSA-SHA256
2022-04-29 15:52:37 us=544280 [paris-rack402.nodes.gen4.ninja] Peer Connection Initiated with [AF_INET]<IP_ADDRESS>:443
2022-04-29 15:52:37 us=557504 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,route-ipv6 2000::/3,dhcp-option DNS <IP_ADDRESS>,route-gateway <IP_ADDRESS>,topology subnet,ping 10,ping-restart 60,ifconfig <IP_ADDRESS> <IP_ADDRESS>,peer-id 15'
2022-04-29 15:52:37 us=557621 WARNING: You have specified redirect-gateway and redirect-private at the same time (or the same option multiple times). This is not well supported and may lead to unexpected results
2022-04-29 15:52:37 us=557812 OPTIONS IMPORT: timers and/or timeouts modified
2022-04-29 15:52:37 us=557847 OPTIONS IMPORT: --ifconfig/up options modified
2022-04-29 15:52:37 us=557866 OPTIONS IMPORT: route options modified
2022-04-29 15:52:37 us=557883 OPTIONS IMPORT: route-related options modified
2022-04-29 15:52:37 us=557899 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2022-04-29 15:52:37 us=557914 OPTIONS IMPORT: peer-id set
2022-04-29 15:52:37 us=557931 OPTIONS IMPORT: adjusting link_mtu to 1624
2022-04-29 15:52:37 us=558258 Outgoing Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2022-04-29 15:52:37 us=558322 Outgoing Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2022-04-29 15:52:37 us=558352 Incoming Data Channel: Cipher 'AES-256-CBC' initialized with 256 bit key
2022-04-29 15:52:37 us=558385 Incoming Data Channel: Using 256 bit message hash 'SHA256' for HMAC authentication
2022-04-29 15:52:37 us=558922 ROUTE_GATEWAY <IP_ADDRESS>/<IP_ADDRESS> IFACE=eth0 HWADDR=02:42:ac:1e:21:03
2022-04-29 15:52:37 us=559085 GDG6: remote_host_ipv6=n/a
2022-04-29 15:52:37 us=559122 net_route_v6_best_gw query: dst ::
2022-04-29 15:52:37 us=559340 sitnl_send: rtnl: generic error (-101): Network unreachable
2022-04-29 15:52:37 us=559405 ROUTE6: default_gateway=UNDEF
2022-04-29 15:52:37 us=560507 TUN/TAP device tun0 opened
2022-04-29 15:52:37 us=560589 do_ifconfig, ipv4=1, ipv6=0
2022-04-29 15:52:37 us=560654 /sbin/ip link set dev tun0 up mtu 1500
2022-04-29 15:52:37 us=569328 /sbin/ip link set dev tun0 up
2022-04-29 15:52:37 us=574044 /sbin/ip addr add dev tun0 <IP_ADDRESS>/24
2022-04-29 15:52:37 us=577687 /etc/openvpn/up.sh tun0 1500 1624 <IP_ADDRESS> <IP_ADDRESS> init
******** Information ********
Pour contrôler qBittorrent, accédez à l’interface Web à : http://localhost:8080
[15:52:38] INFO: Starting NGinx...
2022-04-29 15:52:42 us=638829 /sbin/ip route add <IP_ADDRESS>/32 via <IP_ADDRESS>
2022-04-29 15:52:42 us=642741 /sbin/ip route add <IP_ADDRESS>/1 via <IP_ADDRESS>
2022-04-29 15:52:42 us=645932 /sbin/ip route add <IP_ADDRESS>/1 via <IP_ADDRESS>
2022-04-29 15:52:42 us=649130 /sbin/ip route add <IP_ADDRESS>/24 via <IP_ADDRESS>
2022-04-29 15:52:42 us=652251 WARNING: OpenVPN was configured to add an IPv6 route. However, no IPv6 has been configured for tun0, therefore the route installation may fail or may not work as expected.
2022-04-29 15:52:42 us=652332 add_route_ipv6(2000::/3 -> :: metric -1) dev tun0
2022-04-29 15:52:42 us=652380 /sbin/ip -6 route add 2000::/3 dev tun0
Error: IPv6 is disabled on nexthop device.
2022-04-29 15:52:42 us=655560 ERROR: Linux route -6 add command failed: external program exited with error status: 2
2022-04-29 15:52:42 us=655659 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2022-04-29 15:52:42 us=655678 Initialization Sequence Completed`

Hi,
Thanks for the log. This means you can't connect - are you sure of your openvpn config? For example it says that you have ipv6 configured which should probably be removed

Hi,
Thanks for the answer, so I disabled ipv6 perform a reboot, just like I tried with ipv6 enabled it doesn't change my problem.
For the configuration of the .opvn file I'm not 100% sure since I'm starting with this type of file.
I must have missed something, but I don't know what.
Vpn : cyberghost
the command cat /proc/sys/net/ipv6/conf/all/disable_ipv6 gives me 0 which means that under debian (rpi) ipv6 is enabled
Here is my configuration.
`client
remote SERVEUR 443
dev tun
proto udp
auth-user-pass /credentials.txt
resolv-retry infinite
#redirect-gateway def1
persist-key
persist-tun
nobind
cipher AES-256-CBC
#ncp-disable
auth SHA256
ping 5
ping-exit 60
ping-timer-rem
explicit-exit-notify 2
script-security 2
remote-cert-tls server
route-delay 5
verb 4
route <IP_ADDRESS> <IP_ADDRESS> net_gateway
--pull-filter ignore "dhcp-option DNS6"
--pull-filter ignore "tun-ipv6"
--pull-filter ignore "ifconfig-ipv6"
#--ifconfig-ipv6 fd15:53b6:dead::2/64 fd15:53b6:dead::1 #activate or disable = not working
--block-ipv6 #activate or disable = not working

`

Honestly I don't use openvpn but I'll try to search for this type of error. A first Google search seems to indicate a dns unavailability, which should be avoided by the fact of setting <IP_ADDRESS>.except if the issue is with openvpn which is why I was thinking about that.
Just to be sure to pinpoint the issue : is qbittorrent working fine without openvpn, like to download a free file such as a Linux distribution? Also, have you tried the openvpn alternative mode? Alternative/normal vpn modes work by setting openvpn either at container or app level.
Thanks!

Hi!
So I put <IP_ADDRESS> as it was the default.
For the connection without vpn it works perfectly.
For openvpn I am already on the alternative (Cyberghost).
After I can try to change the dns by something else if needed.
I'm not at all used to using docker so it's not easy for me.

VPN is broken for me.. the weird thing is i roll back to last working version 4.4.1 it still broken.. I could not figure out what wrong.
From the tun0, i can reach the internet, traceroute also works. Only inside QBT, it does not work.
root@HassDebian:~# docker exec -it addon_db21ed7f_qbittorrent /bin/bash
root@db21ed7f-qbittorrent:/$ traceroute -i tun0 <IP_ADDRESS>
traceroute to <IP_ADDRESS> (<IP_ADDRESS>), 30 hops max, 46 byte packets
1  <IP_ADDRESS> (<IP_ADDRESS>)  242.484 ms  243.064 ms  241.452 ms
===========removed============================
5  <IP_ADDRESS> (<IP_ADDRESS>)  243.315 ms  <IP_ADDRESS> (<IP_ADDRESS>)  242.610 ms  242.411 ms
6  <IP_ADDRESS> (<IP_ADDRESS>)  241.847 ms  <IP_ADDRESS> (<IP_ADDRESS>)  241.706 ms  <IP_ADDRESS> (<IP_ADDRESS>)  241.586 ms
7  dns.google (<IP_ADDRESS>)  242.169 ms  242.640 ms  241.648 ms
root@db21ed7f-qbittorrent:/$ ping -I tun0 <IP_ADDRESS>
PING <IP_ADDRESS> (<IP_ADDRESS>): 56 data bytes
64 bytes from <IP_ADDRESS>: seq=0 ttl=118 time=247.546 ms
64 bytes from <IP_ADDRESS>: seq=1 ttl=118 time=242.582 ms
64 bytes from <IP_ADDRESS>: seq=2 ttl=118 time=242.743 ms
All the tracker unreachable and QBT seems has no internet connection.
Last working was 23/4/2022. I dont remember any changes beside upgrade to 4.4.2 on 28/4/2022
I rollback the whole homeassistant to 18/4/2022 and it still broken
I believe it has something to do with this. I have no idea how to fix it
022-05-02 11:54:59 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.

Hi, well I don't use openvpn so I'm not the biggest expert but I'll look at what I can find.
Do you have a way to find if your openvpn config works outside of this addon? Like for example, is it working if you connect with openvpn through another app ? This would make sure it is still valid, and that the issue is within the addon (probable if you both have the issue).
Have you tried checking or not the "openvpn alt mode" option ? This was my last change to the script - it adds (or removes) the "no-pull" directive to your openvpn config file to ensure that it works...
As you say that rolling back to a previous version doesn't work, I've looked at openvpn releases logs, but didn't see anything that seemed relevant...

Hi, well I don't use openvpn so I'm not the biggest expert but I'll look at what I can find.
Do you have a way to find if your openvpn config works outside of this addon? Like for example, is it working if you connect with openvpn through another app ? This would make sure it is still valid, and that the issue is within the addon (probable if you both have the issue).
Have you tried checking or not the "openvpn alt mode" option ? This was my last change to the script - it adds (or removes) the "no-pull" directive to your openvpn config file to ensure that it works...
As you say that rolling back to a previous version doesn't work, I've looked at openvpn releases logs, but didn't see anything that seemed relevant...

Honestly. After 1 whole google researching.... i doubt this has anything to do with your container.. It is either QBT bug or docker bug and i still trying to find out...i will post update if i found any solution.
I have rollback 4 version before you fixed the ip address leak and it still not working. From networking(i am network enginner) perspective everything seems to be correct. I gonna try to load Home Assistant backup before 2022 and see if it works.. and that gonna mess up lots of my stuff. I need a maintenance windows.
@alexbelgium if you wanna try out i can give you my openvpn access to try tinkling with it

Thanks, I've created a dev environment and can replicate. I'll check this asap

Actually, I'm using the free openvpn from "https://www.freeopenvpn.org/connect.php?lang=en", with the public username and password, and it allows downloading the ubuntu https://releases.ubuntu.com/22.04/ubuntu-22.04-desktop-amd64.iso.torrent
So actually I was wrong - I can't reproduce, the latest version is working for me!
Here is my config :
DNS_server: <IP_ADDRESS>,<IP_ADDRESS>
PGID: 0
PUID: 0
SavePath: /mnt/NAS/downloads
Username: admin3
certfile: fullchain.pem
customUI: vuetorrent
keyfile: privkey.pem
ssl: true
whitelist: localhost,<IP_ADDRESS>,<IP_ADDRESS>/16,<IP_ADDRESS>/16
localdisks: NAS
openvpn_enabled: true
silent: true
openvpn_config: config.ovpn
openvpn_username: freeopenvpn
openvpn_password: '767629894'
openvpn_alt_mode: false

alt_mode works but it is not secure.. all the connect going out without vpn.

I was trying to check that - if the nopull option is correctly set

i can see the source and destination ip on the router.. so it definitely not secure...
Another sign, it going at my fiber speed with never happen over vpn.

I'll look for the alt_mode and either remove it or check how it can securely pull the connection
However, with the main mode I can connect fine to the free vpn I was linking above. And it truly works - downloads are at a crawl ;-)

do you mind sharing what your HA installation ? HAOS / DEBIAN  over VM/VMWARE/PROXMOX.
I think i suspect proxmox because i rules out everything till whole Debian backup in 1st April.
Another thing, what else change beside route-nopull ?
Your logs is missing these line
[21:18:55] INFO: openvpn correctly set, qbittorrent will run tunnelled through openvpn
Using interface binding in the qBittorrent app
... deleting previous interface settings
... binding tun0 interface in qBittorrent configuration
... adding route-nopull to your config.ovpn

I'm using HAos indeed on an rpi4b

So a bit more infos :

Normal mode :

Log : https://pastebin.com/ntRgGgH4
Check external ip from command line : curl ipecho.net/plain shows my internal ip (expected as the vpn only applies to qbittorrent)
qBittorrent downloads speed 100kbps

Alt-mode :

Log : https://pastebin.com/xH3ntdq9
Check external ip from command line : curl ipecho.net/plain shows the vpn ip
qBittorrent downloads speed 2 Mbps

Could you please try to 1) stop qbittorrent, 2) rename /config/qbittorrent to something else, 3) restart and readd a torrent ?
I've done that and I think it allowed to download the Ubuntu torrent linked above with openvpn turned on? Thanks! Or it was just a coincidence ')

I spin up the whole new Virtual Machine HA supervisor install and it does not work.
Yes, I have tried your steps. Deleting the whole config/qbittorrent folder and let it recreate.
I will they physical Pi4 when possible and update it.
Alt mode work for now but i still seeing the IP on the router which is not secure.
Funny is RSS works. Just tracker and traffic does not work.
Do it has anything to do with app armor?

It's strange indeed... Ping works, downloading works if some metadata are already available (like starting a download without vpn, then continuing with vpn), but not accessing the hosts directly in most case. However, in some case, I was able to make the vpn work but I can't replicate (I tried deleting the folder, right clicking rzannounce, force check... And sometime bam it just starts working again).
I will continue investigating. I think it's due to dns, as if metadata are already downloaded it seems to download using peers, but if a new torrent is added it can't resolve the host (with the initial error message in the title).
I think openvpn messes with /etc/resolvr as at one moment I opened this file and there was this text :

It's strange indeed... Ping works, downloading works if some metadata are already available (like starting a download without vpn, then continuing with vpn), but not accessing the hosts directly in most case. However, in some case, I was able to make the vpn work but I can't replicate (I tried deleting the folder, right clicking rzannounce, force check... And sometime bam it just starts working again).
I will continue investigating. I think it's due to dns, as if metadata are already downloaded it seems to download using peers, but if a new torrent is added it can't resolve the host (with the initial error message in the title).
I think openvpn messes with /etc/resolv.conf as at one moment I opened this file and there was this text :
# Generated by openvpn for interface tun0
nameserver <IP_ADDRESS>

Edit :
* probably alt mode is dependent on the ovpn config, as I could check from command line and with a downloaded test torrent that with my config it is indeed protected by vpn

* apparmor is always a big unknown to me, but seeing the addon works without vpn I think we can rule that out. It should really be about something in the addon.

* I'll try to restore an old version of the addon on my test repo to see if it works, but I have low hope as you already tested that

Edit2 : Ah ah, by connecting with portainer to qbittorrent running openvpn in alt mode (so with the whole container behind vpn in my case), I can ping google.com, I can ping ubuntu.com, but I CANT ping torrents.ubuntu.com. So it seems that openvpn SPECIFICALLY prevents to connect to torrents hosts! not sure why. I've tested several DNS (<IP_ADDRESS>, <IP_ADDRESS>, ...) and it gives the same result - I can ping sites except for torrent trackers
Edit3 : pinging doesn't work for torrent sites in names resolution, but works with ip. It is truly a DNS issue
ping yahoo.com
> PING yahoo.com (<IP_ADDRESS>): 56 data bytes
db21ed7f-qbittorrent ~ # ping torrent.ubuntu.com
> ping: bad address 'torrent.ubuntu.com'
ping <IP_ADDRESS> # the ip of torrent.ubuntu.com
> PING <IP_ADDRESS> (<IP_ADDRESS>): 56 data bytes

It might your vpn host blocking the torrent site mean while my vpn provider is for torrent traffic

It might your vpn host blocking the torrent site mean while my vpn provider is for torrent traffic

When my vpn works, I can download torrents. Furthermore, the ping works for the torrent.ubuntu.com ip, it only doesn't work for the name resolution (pinging torrent.ubuntu.com). And third, if I download the metadata without vpn, I can download with vpn enabled
So I really think that there is something wrong with openvpn messing with DNS but I can't see why... I see that the last release of openvpn is from 2 weeks ago, I'll try pinning an old one to see if it helps

Huge thanks for the feedback!
It still doesn't work for me but I don't use vpn usually so it doesn't matter ;)
For alt_mode I think I'll add a message in the log that shows the ip used to communicate externally so the owner can check if vpn is correctly set or not... Probably I can compare ip before / after starting openvpn and stop the addon if it is the same!
Hi @ProBreizh, how is it going for you? Is it working now or not?
Thanks

The troubleshooting failed for me as my vpn provider allow traffic to major site but blocking torrent traffic.. That why i cant figure out why it is not working for qbt and working for other page.

I've pushed a new version that securizes the alt mode : it notes in a file the ip address before starting the vpn, then after. If it is the same, it stops the addon and puts an error message. If you install it and start it in alt mode it should normally stop automatically :)

Here is the message showing if vpn works in alt_mode :
[19:50:12] INFO: VPN is up and running with ip <IP_ADDRESS>
[19:50:12] INFO: Starting NGinx...

Hello,
@alexbelgium ,Sorry for the delay in responding.
For the moment it seems to work perfectly.
"To control qBittorrent, access the web interface at: http://localhost:8080
[18:01:33] INFO: Starting NGinx...
2022-05-06 18:01:37 us=484026 /sbin/ip route add <IP_ADDRESS>/32 via <IP_ADDRESS>
2022-05-06 18:01:37 us=488387 /sbin/ip route add <IP_ADDRESS>/1 via <IP_ADDRESS>
2022-05-06 18:01:37 us=491619 /sbin/ip route add <IP_ADDRESS>/1 via <IP_ADDRESS>
2022-05-06 18:01:37 us=494730 /sbin/ip route add <IP_ADDRESS>/24 via <IP_ADDRESS>
Error: Invalid prefix for the given prefix length.
2022-05-06 18:01:37 us=498102 ERROR: The Linux route add command failed: the external program exited with error status 2.
2022-05-06 18:01:37 us=498308 WARNING: This configuration may cache passwords in memory -- use the auth-nocache option to avoid this."

Is it normal that I have recursive routes in my logs now?
us=101030 Recursive routing detected, drop tun packet to "IP"

Good news! For recursive routes I have no idea, I don't know openvpn much... Reading on Google it seems possibly linked to having dht enabled? But I don't know the impact or lack of

Hello,
@alexbelgium ,Sorry for the delay in responding.
For the moment it seems to work perfectly.
"To control qBittorrent, access the web interface at: http://localhost:8080
[18:01:33] INFO: Starting NGinx...
2022-05-06 18:01:37 us=484026 /sbin/ip route add <IP_ADDRESS>/32 via <IP_ADDRESS>
2022-05-06 18:01:37 us=488387 /sbin/ip route add <IP_ADDRESS>/1 via <IP_ADDRESS>
2022-05-06 18:01:37 us=491619 /sbin/ip route add <IP_ADDRESS>/1 via <IP_ADDRESS>
2022-05-06 18:01:37 us=494730 /sbin/ip route add <IP_ADDRESS>/24 via <IP_ADDRESS>
Error: Invalid prefix for the given prefix length.
2022-05-06 18:01:37 us=498102 ERROR: The Linux route add command failed: the external program exited with error status 2.
2022-05-06 18:01:37 us=498308 WARNING: This configuration may cache passwords in memory -- use the auth-nocache option to avoid this."

Is it normal that I have recursive routes in my logs now?
us=101030 Recursive routing detected, drop tun packet to "IP"

Remove this from you qbittorrent configuration
<IP_ADDRESS>/24

hello,
@tyjtyj ,After checking I have nothing that indicates <IP_ADDRESS>/24 in the qbitorrent configuration. The only place where it is indicated is in the openvpn configuration with this line "route <IP_ADDRESS> <IP_ADDRESS> net_gateway".
Should I delete the line?
@alexbelgium  Thanks for the update that corrected the problem :D

hello,
@tyjtyj ,After checking I have nothing that indicates <IP_ADDRESS>/24 in the qbitorrent configuration. The only place where it is indicated is in the openvpn configuration with this line "route <IP_ADDRESS> <IP_ADDRESS> net_gateway".
Should I delete the line?
@alexbelgium Thanks for the update that corrected the problem :D

If it is working.. Just leave it.
BTW. I am referring to the home assistant qbittorrent configuration section. Where you put the vpn username and password
Under whitelist there is localhost,<IP_ADDRESS>,<IP_ADDRESS>/16,<IP_ADDRESS>/16,<IP_ADDRESS>/24 based on your initial log. Remove 192.168.2/24 if it is still there

Thanks for your answer, since the initial configuration yes I deleted the <IP_ADDRESS>/24.
I checked on the first web interface of qbitorrent, the selected connection is well tun so I am well under bpn I think.

Hi, if you use openvpn as normal mode, the interface is changed to tun0. If you use alt mode, interface is default. In both case, the script checks if qbittorrent is correctly covered by vpn at boot, and stops the addon if it is misconfigured.glas to now everything goes fine! I'll close the issue. Thanks for the feedback and support!


(A11y severity 2) Make push notifications accessible

Whenever an action is completed (e.g., uploading a file, deleting a file, invoking an error, etc.) a banner briefly appears.
This information is not presented to screen reader users. This can be accomplished setting role="alert" on the element. This will cause it to be read immediately when the element appears and the alert role is set.

Ensure that the alert role is reset (i.e., set to a new element, or the role changed or removed if using one element with differing content) after the information has been presented to the user. Not resetting the alert can lead to subsequent alerts not being read by screen readers.
Alternatively, focus can be set directly to the notification area. In this case, the element must not automatically disappear after a period of time. Instead, the user must be allowed to read the notification text and manually dismiss it (or perhaps automatically close it if focus moves away from the notification area).

ready for @nicolaasmatthijs review

Looks good. Merged.


Does this use the video analysis?

Hi,
Out of curiosity, is the real time video stream simply taking snapshots, or actually analyzing video?

Hello, this project does not actually use video analysis because video API requires uploading full video.
In this project, frames are grabbed in every fixed duration and uses photo API to find face in the photo. Also, there is a max rate per minute (free plan), so the rate of capture per minute is not too high.

Thanks for the rapid reply man. After closer examination of the documentation, I don't think the video version is that good, as it averages and reports out a SINGLE value for each emotion.
I will implement something similiar for java, thanks again

Great! By the way if you are using paid plan, you should be able to grab more frames per minutes to analyze.


Build with node 7x

I saw this on roi build:
npm ERR<EMAIL_ADDRESS>install: `node-pre-gyp install --fallback-to-build`
npm ERR! Exit status 1

Maybe is good to add node 7 on CI to start looking all bgold projects ?
@lance @lholmquist @balunasj ?

i want to say yes,  but it did just get released,  and will never be an LTS,  but why not.

you right, but this can also mean: change 5 to 7 ?
https://raw.githubusercontent.com/nodejs/LTS/master/schedule.png

👍  lets do it

related to that error on the v8-profiler module:
https://github.com/node-inspector/v8-profiler/issues/99
https://github.com/node-inspector/v8-profiler/issues/98

From the doc:
"node_abi: The node C++ ABI number. This value is available in Javascript as process.versions.modules"
( https://www.npmjs.com/package/node-pre-gyp#versioning )
hf@archT440 ~/p/genet ±master⚡ » node
> console.log(process.versions.modules);
51
undefined
> console.log(process.versions);
{ http_parser: '2.7.0',
  node: '7.0.0',
  v8: '5.4.500.36',
  uv: '1.9.1',
  zlib: '1.2.8',
  ares: '1.10.1-DEV',
  icu: '57.1',
  modules: '51',
  openssl: '1.0.2j' }
undefined
>

node-pre-gyp ERR! Tried to download(404):
node-inspector.s3.amazonaws.com/profiler/v5.6.5/node-v**51**-linux-x64.tar.gz
The latest is 48
<Contents>
<Key>profiler/v5.6.5/node-v48-linux-x64.tar.gz</Key>
<LastModified>2016-05-15T20:27:46.000Z</LastModified>
<ETag>"541c27744673866278a6eee2ec76d7ac"</ETag>
<Size>23321</Size>
<StorageClass>STANDARD</StorageClass>
</Contents>

( https://node-inspector.s3.amazonaws.com/ )

[x] opossum
[x] szero
[x] huilu
[ ] roi
[ ] lightbright
[ ] fidelity
[ ] litoria

Hi Helio - I've moved this to Milestone 5, and Lance and I would like you to test these with the more recent updates with Node 7.

https://github.com/node-inspector/v8-profiler/issues/98#issuecomment-274327673

@helio-frota that looks like a good solution to this issue. FWIW, Rising Stack is the company that hosts NodeConf Budapest - I think they are a good and responsible bunch who won't leave you in the lurch with an unmaintained dependency.

Additional info:

We need at minimum ubuntu trusty tahr on travis:
https://github.com/bucharest-gold/genet/blob/master/.travis.yml#L2

hey folks I'm going to close this issue because seems lightbright has some things with node 7x
https://github.com/bucharest-gold/lightbright/issues/15


[WIP] Fix atom mapping

This PR attempts to prevent hydrogens from being mapped to halides by (#363) via the simple fix suggested in https://github.com/choderalab/perses/issues/363#issuecomment-349759342
The MCSS expression is changed to:
DEFAULT_ATOM_EXPRESSION = oechem.OEExprOpts_Aromaticity | oechem.OEExprOpts_RingMember | oechem.OEExprOpts_Degree | oechem.OEExprOpts_AtomicNumber | oechem.OEExprOpts_EqAromatic | oechem.OEExprOpts_EqHalogen | oechem.OEExprOpts_EqCAliphaticONS

I've also added a test (test_molecular_atom_mapping()) that checks to make sure SmallMoleculeSetProposalEngine._get_mol_atom_map() is not mapping hydrogens to non-hydrogens by running through a bunch of transformations for all of the ligand sets from the Schrödinger JACS relative transformation benchmark dataset.
The test was failing, so I also added perses.tests.utils.render_atom_mapping() to render the transformations associated with failures. Here is the current failing output:
======================================================================
ERROR: Test the creation of atom maps between pairs of molecules.
----------------------------------------------------------------------
Traceback (most recent call last):
  File "/Users/choderaj/miniconda/lib/python3.6/site-packages/nose/case.py", line 197, in runTest
    self.test(*self.arg)
  File "/Users/choderaj/github/choderalab/perses/perses/perses/tests/test_topology_proposal.py", line 608, in test_molecular_atom_mapping
    raise Exception(msg)
Exception: Atom atomic number 1 is being mapped to atomic number 16
molecule 1 : CS(=O)(=O)c1ccc(cc1)Nc2nc3c(c(n2)OCC4CCCCC4)nc[nH]3
molecule 2 : COc1cc(ccc1S(=O)(=O)N)Nc2nc3c(c(n2)OCC4CCCCC4)nc[nH]3
Wrote atom mapping to mapping-error.png for inspection; please check this.{0: 0, 1: 1, 2: 2, 3: 3, 8: 4, 7: 5, 6: 6, 5: 7, 4: 8, 11: 9, 10: 10, 9: 11, 23: 12, 13: 13, 14: 14, 15: 15, 16: 16, 17: 17, 18: 18, 19: 19, 20: 20, 21: 21, 22: 22, 12: 23, 24: 24, 26: 25, 25: 26, 27: 27, 36: 28, 37: 29, 35: 30, 34: 31, 33: 32, 32: 33, 30: 34, 31: 35, 29: 36, 28: 37, 38: 39, 42: 40, 40: 41, 41: 42, 39: 43, 43: 44, 45: 45, 44: 46}

and the failed mapping:

The mapping looks pretty crazy. Trying to debug...

For future reference, we may be able to use OEPrepareAlignedDepiction and a scheme similar to this to render the molecules more easily in exactly the mapped orientation (without ring flips), but we'd need to preserve the OEIter over OEMatch returned by MCSS to do that.

Found the bug. I was just misinterpreting the output of _get_mol_atom_map() as an old-to-new mapping instead of the documented new-to-old mapping. Fixing that allows the test to pass.
This should be ready to review @pgrinaway. I've verified we are no longer mapping hydrogens to non-hydrogens on a bunch of transformations from the JACS set (which we can continue to test on now that we've pulled it into the repo).


Fix unbound result variable in SlimChannelConverter

result was moved inside an if statement in SlimChannelConverter, causing it to be unbound if ctx.guild is None
Rationale

Bugfix, that's all
Summary of changes made

Set result to None before the first if statement
Checklist

[x] This PR changes the jishaku module/cog codebase

[ ] These changes add new functionality to the module/cog
[x] These changes fix an issue or bug in the module/cog
[x] I have tested that these changes work on a production bot codebase
[ ] I have tested these changes against the CI/CD test suite
[ ] I have updated the documentation to reflect these changes

[ ] This PR changes the CI/CD test suite

[ ] I have tested my suite changes are well-formed (all tests can be discovered)
[ ] These changes adjust existing test cases
[ ] These changes add new test cases

[ ] This PR changes prose (such as the documentation, README or other Markdown/RST documents)

[ ] I have proofread my changes for grammar and spelling issues
[ ] I have tested that any changes regarding Markdown/RST syntax result in a well formed document

regression introduced by #221


Can everything be nested under a specified parent?

Is your feature request related to a problem? Please describe.
No.
Describe the solution you'd like
Nest all uploaded documents under a specified parent page by its name or ID.
Describe alternatives you've considered
None.
Additional context
Can all uploaded documents be nested under a specified parent by its name or ID? If not, then this would be a good feature to add.

Never mind, the issue was that if a Markdown page being uploaded to Confluence has its title conflicting with an existing page, and the ancestry given is different than the conflicting page, then Mark will say there's an error in the ancestry, when it's really just a conflicting page name.
If the pages have the same ancestry, then most likely the page will be overwritten with the new one (which is why it's important to specify the ancestry manually, and ensure the space doesn't have a conflicting page name, since Confluence doesn't allow duplicate page names in different trees within the same space).


How do I leave the input empty after selecting a suggestion?

How do I leave the input empty after selecting a suggestion?
I couldn't find out how to do it.

Resolved
Adding the void "value" solves.
  onSuggestionsClearRequested = () => {
    this.setState({
      value: "",
      suggestions: [],
    });
  };


feat: rewrite parameter validation using types

@AkiraUra
This PR includes the following changes:

Simplifies parameter validation by type.

Please take a review on it.

@AkiraUra
We have taken additional measures based on the following PR.
https://github.com/sapientml/core/pull/55


Unable to covert to 2020 data

I am trying to covert my map from 2010 to 2020 census data. When I press "Yes, copy to my account", it pops up with "Something went wrong, please try again". This has been going on for the past week.

.

After some debugging, it seems this was caused by the crosswalk files for a few states not having the right permissions in S3. I was able to fix this by making everything publicly accessible.
@wofchristian thank you for the reporting this! The problem should be fixed now 🙂


ref(proxy registry): track proxy-service relations async

Description:
This change modifies the KubeProxyServiceMapper used by the proxy
registry to maintain its own cache that maps proxies to which services
they back. It responds to add/update/delete events on k8s pods and
services, updates its cache, then schedules a new proxy update
broadcast.
Fixes #3273

Affected area:

Functional Area

New Functionality
[ ]

Documentation
[ ]

Install
[ ]

CLI Tool
[ ]

Certificate Management
[ ]

Control Plane
[X]

Ingress
[ ]

Egress
[ ]

Networking
[ ]

Observability
[ ]

SMI Policy
[ ]

Sidecar Injection
[ ]

Security
[ ]

Upgrade
[ ]

Tests
[ ]

CI System
[ ]

Demo
[ ]

Performance
[ ]

Other
[ ]

Please answer the following questions with yes/no.

Does this change contain code from or inspired by another project? No

Did you notify the maintainers and provide attribution?

Is this a breaking change? No

Codecov Report

Merging #3400 (9629202) into main (8c812c8) will increase coverage by 0.37%.
The diff coverage is 95.37%.

@@            Coverage Diff             @@
##             main    #3400      +/-   ##
==========================================
+ Coverage   65.82%   66.20%   +0.37%
==========================================
  Files         169      169
  Lines        7886     7983      +97
==========================================
+ Hits         5191     5285      +94
- Misses       2664     2667       +3
  Partials       31       31

Flag
Coverage Δ

unittests
66.20% <95.37%> (+0.37%)
:arrow_up:

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

cmd/osm-controller/osm-controller.go
16.91% <0.00%> (-0.26%)
:arrow_down:

pkg/envoy/registry/services.go
96.09% <98.09%> (+11.24%)
:arrow_up:

pkg/kubernetes/announcement_handlers.go
71.42% <0.00%> (-5.72%)
:arrow_down:

pkg/endpoint/providers/kube/client.go
79.20% <0.00%> (+0.99%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 8c812c8...9629202. Read the comment docs.


Renamed InputMap.get_action_list to InputMap.get_action_events

InputMap's get_action_list function implies getting a list of all actions but instead returns a list of all InputEvents for a specific action.This is unintuitive.
This PR changes this functions name to get_action_events which is way more describing of what this function is supposed to do.

Sure, that makes sense.

Juni 2020, 10:49 von<EMAIL_ADDRESS>

@akien-mga>  commented on this pull request.
In > core/input/input_map.cpp https://github.com/godotengine/godot/pull/39439#discussion_r439291807> :

@@ -48,7 +48,7 @@ void InputMap::_bind_methods() { 	ClassDB::bind_method(D_METHOD("action_has_event", "action", "event"), &InputMap::action_has_event); 	ClassDB::bind_method(D_METHOD("action_erase_event", "action", "event"), &InputMap::action_erase_event); 	ClassDB::bind_method(D_METHOD("action_erase_events", "action"), &InputMap::action_erase_events);-	ClassDB::bind_method(D_METHOD("get_action_list", "action"), &InputMap::_get_action_list);+	ClassDB::bind_method(D_METHOD("get_action_events", "action"), &InputMap::_get_action_events);

I think it might be better to name it > action_get_events>  to match the convention used in other methods of this class (all methods which relate to a specific action start with > action_> , like > action_has_event> ).
—
You are receiving this because you authored the thread.
Reply to this email directly, > view it on GitHub https://github.com/godotengine/godot/pull/39439#pullrequestreview-429570068> , or > unsubscribe https://github.com/notifications/unsubscribe-auth/AET2CELCYDSNTZNXGIQ62MLRWHTYRANCNFSM4N2RDGZQ> .

Ok I changed the function to action_get_events

Thanks!


Q: BulkRead  - How To?

I couldn't realize how do I  BulkRead the following
var items = _dbContext.Students.Where(x => x.Age < 3).ToList();
I appreciate any help. Thanks

BulkRead can not used for that, nor would it have purpose since simple read from Db like this is not slow.
There is more info in the ReadMe, at the bottom, about when an how it can be used.
Essentially you need list of some unique properties which will be loaded with entities, and there it is used instead of WHERE-IN that would be slow for large lists.


Package not found during publish

I recently updated my dev machine and now I am running Visual Studio and Windows 11.  Whenever I try to publish I keep getting the message that the package can not be found.  When I watch the temp location I don't see the zip file being created.  I am running Visual Studio as an Administrator.
I was able to setup my credentials and it sees my application environment, but the zip file is not created.  Not sure what I am doing wrong, any help would be appreciated.
This is what I see in the logs
Publishing 'http://dev.webstrands.design' to Amazon Web Services
...building deployment package 'C:\Users\tkemory\AppData\Local\Temp\AWSDeploymentArchive_http://dev.webstrands.design_v20230908205602.zip'
...invoking 'C:\Program Files\IIS\Microsoft Web Deploy V3\msdeploy.exe -verb:sync -source:manifest="C:\Users\tkemory\AppData\Local\Temp\tmp633.tmp" -dest:package="C:\Users\tkemory\AppData\Local\Temp\AWSDeploymentArchive_http://dev.webstrands.design_v20230908205602.zip" -declareParam:name="IIS Web Application Name",kind="ProviderPath",scope="IisApp",match="^C:\inetpub\wwwroot\Webstrands.design",defaultValue="webstrands/",tags=IisApp -declareParam:name="IIS Web Application Name",kind="ProviderPath",scope="setAcl",match="^C:\inetpub\wwwroot\Webstrands.design",tags=IisApp', working folder 'C:\inetpub\wwwroot\Webstrands.design'
...error, package 'C:\Users\tkemory\AppData\Local\Temp\AWSDeploymentArchive_http://dev.webstrands.design_v20230908205602.zip' could not be found
..build fail, unable to find expected deployment package.
..build of project archive failed, abandoning deployment
Reloaded AWS Credential Profiles
Profiles found: 1

Hi @webstrandsdev , it looks like the system is trying to produce an invalid filename. The path it appears to be using C:\Users\tkemory\AppData\Local\Temp\AWSDeploymentArchive_http://dev.webstrands.design_v20230908205602.zip contains "://" which is suspect.
Is there anything unusual about your project name/location? What steps are you taking to perform the publish?

Excellent catch, thanks so much.  I will change my project name.  Thank you @awschristou !


Documentation when installer types change

When installer types change between versions of packages, WinGet displays:
A newer version was found, but the install technology is different from the current version installed. Please uninstall the package and install the newer version.
This causes users to be frustrated and or confused. Documentation should be added to Microsoft Learn for this case so users can be informed about the options, and the reasons for WinGet's behavior. In addition, an aka.ms URL should be added to the error message output so users can get more information and understand their options.

The choice was made to handle installer type changes by informing the user. If the manifest indicated "uninstall previous" was the default behavior, then the previous version would be removed and the newer version would be installed. This is a case where a user might want "both" versions to remain, or the user might "need" both versions to remain (at least until any package specific data was migrated).

WinGet needs to have some "default" behavior in cases where the consequences of installing a newer version of an arbitrary package might not be well understood. Arguments like "--force" and "--uninstall-previous" are present so a user can control WinGet's behavior.

I completely get the frustration here, and I encounter it myself regularly when installing and updating all kinds of packages. WinGet doesn't special-case behaviors for specific packages or publishers (not even Microsoft as a publisher). Our goal is to make the best "default" choice, so users aren't sad/mad/frustrated. Sometimes there isn't a single best solution, and in those cases, we defer to the user.

Dealing with decades of entropy in terms of legacy installers, and a world of change isn't easy. I don't have all the answers. That's one of the primary benefits of being open source and having these kinds of discussions. If we can come up with better solutions together, everyone benefits.

I do appreciate the honest feedback, even when it's negative. Thank you for taking the time to share it.

Originally posted by @denelon in https://github.com/microsoft/winget-cli/discussions/2155#discussioncomment-9168359

Would it also be a good idea to detect and inform the user what the other "installer technology" is, even if only possible part of the time?

I'm open to that. I don't know users necessarily understand, but if we're linking to documentation with guidance they could certainly learn. WinGet does know the installer type for the currently installed version in almost every case, and it does know the new type based on the manifest for the newer version, otherwise the error message wouldn't be possible.

I think it would go a long way. I don't have a problem with having to uninstall. I just have a problem with not knowing what the next step is. If I knew how something was installed, I'd have a better idea of what to do next

I would say users would be more likely to understand "technology has changed from X to Y" significantly more than the vague "It's changed, but we're not going to tell you what from or to!"


supports llama-dybatch-V1

PR types

New features
PR changes

Models
Description

supports llama-dybatch-V1

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.lizhenyu04 seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.You have signed the CLA already but the status is still pending? Let us recheck it.

截止目前，完成了 InferenceModel：

[x] 单卡动态图、动转静和静态图验证
[x] 多卡动态图、动转静和静态图验证
[x] REAMD 文档的调整
[x] inferenceModel 的调整


Install dotenv package and replace the explictly mentioned database host path with process.env.MONGODB_URI

Install dotenv package using npm i dotenv
Create a new file .env and add MONGODB_URI=mongodb://localhost:27017/blogDB or your local/remote equivalent
Replace mongoose.connect("mongodb://localhost:27017/blogDB", {useNewUrlParser: true, useUnifiedTopology: true}); with mongoose.connect(process.env.MONGODB_URI, {useNewUrlParser: true, useUnifiedTopology: true}); in app.js
Do not forget to add .env to .gitignore file.

Hey! @tusharkhatriofficial can you assign me this task as a part of hacktoberfest

Hi @Ujjawal3 yes I will!
Please hold your pull request until the event starts... the main idea of this is to add the dotenv package in the package.json and replace the explicitly mentioned MongoDB URI in the app.js file. I will also come up with a few more issues before the event starts, you can check them out as well.

Hi @tusharkhatriofficial  as hacktoberfest has started today so can I start working on this now ?

Thank You for working on this :)


[table] clicking on a row with a checkbox used as a cell template in a column checks/unchecks the checkbox

Describe the bug:
When using a checkbox input inside of a custom cell template for a column, while also allowing row clicks, is checking/unchecking the checkbox input when clicking on the row.
To Reproduce:
Steps to reproduce the behavior:

Set up a table with a custom cell template for a column in the non-first column
Enable allow-row-click
Ensure select is not enabled
Click anywhere on the row (not the checkbox) and observe the checkbox toggling its checked state inadvertently

Expected behavior:
The component should ignore anything in a custom cell template, but also it should only automatically check/uncheck the checkbox if select is enabled (the first row of built-in selection checkboxes).
Additional context:
This is due to the component automatically attempting to locate the built-in select checkbox for the row and it's not scoped enough.

Closing. Unable to reproduce.

This was just a side effect of the component re-rendering upon clicking on the row without keeping track of the selection state... False alarm.


Help installing Postfix Exporter

Please, i need help to install Prometheus Postfix Exporter
My services are:
1 server Ubuntu 18.04: Prometheus - Grafana
1 server Debian 8.11: Postfix - Dovecot - Roundcube
I don't understand how I can install it

Some information would be helpful.
Does it only run in a docker container? I found the package prometheus-postfix-exporter, but can't install it with apt.


when building against latest hacl-star compilation fails due to missing Hacl_Streaming_Blake2_blocks_state_len

this function was removed from hacl-star in commit bcb83db69fff47dcf3c4a683c46183750efb1219

@pnmadelaine is there any way we could put Noise* under nightly (or weekly) CI so that we catch these errors more easily?


Composer installs appear to be cached incorrectly

Hooray for introducing my own issues! This leads on from https://github.com/silverstripe-labs/silverstripe-travis-support/pull/35.
When running a travis build using the new --prefer-source option, Composer attempts to download the source version of the package and sometimes fails - falling back to the dist version.
Travis build log:
- Installing silverstripe/framework (3.3.x-dev de61551)
    Cloning de6155188552003c294f115588dcdab9a79cef44
    Failed to download silverstripe/framework from source: Failed to execute git checkout 'de6155188552003c294f115588dcdab9a79cef44' -- && git reset --hard 'de6155188552003c294f115588dcdab9a79cef44' --

fatal: Not a git repository (or any of the parent directories): .git

    Now trying to download from dist
  - Installing silverstripe/framework (3.3.x-dev de61551)
    Downloading
    Extracting archive

I’ve got no idea why that would fail, the commit definitely exists and --verbose doesn’t give any more info than the above. You can see from the rest of the log that some packages work and some don’t (it doesn’t seem to be related to whether they’re using tags or commit hashes).
I’ve copied the generated composer.json and run it locally and it works absolutely fine. That, and the Not a git repository error message, makes me think some caching is going on that’s downloading the dist copy when Composer thinks it’s downloading the source copy.
I don’t know if this is an issue with this repo, Travis, Composer, or me 😆.

It normally happens when rate limited; You can get around it sometimes by setting up a github api key against your travis repo.
Try doing this on https://travis-ci.org/bigfork/silverstripe-oauth-login/settings

And create your token from github. In the top menu to the right, click the tools icon (Account Settings).
Click on “Applications” in the sidebar (to the left). In the box with the title “Personal Access Tokens”, press the “Create new token” button.
Nothing is cached because travis ci instances are thrown away, so no caches persist between builds. You can get around it, but we opt to not do so, as we end up with stale builds more often than not...
Anyway, ping me if you get stuck. :)

I’m still struggling 😢. I added the token, but it’s still loading some repos from dist instead of source. I’ve opened an issue on the Composer repo too https://github.com/composer/composer/issues/5546

Yeah there's still some problem going on here.
    Failed to download silverstripe/framework from source: Failed to execute git checkout '96b061ffffd472f917273b43790f5aaa2f9f89b4' -- && git reset --hard '96b061ffffd472f917273b43790f5aaa2f9f89b4' --

Ah, maybe there is an issue with composer... regarding that ticket you raised. Hope it bears some fruit. :)


Is there any description about the dataset that you provided in the Google Cloud?

@Tycho-Xue
First of all, thank you for your amazing and interesting work!
When I try to download the triplet dataset created by ULIP-2 for ShapeNet or ModelNet40, I saw there are a lot of files on Google Cloud and I'm really confused https://console.cloud.google.com/storage/browser/sfr-ulip-code-release-research.
It would be great if you could have a README to descripe all the files on the cloud, and maybe provide some instructions on how to use your triplet dataset.
Thanks!

@iLori-Jiang sorry for the late reply, i missed this message previously. which datasets are you specifically looking for?


Setting up Mutual TLS with MQ failed

Hello,
Working with distributed worker where the distributed worker properties file has the keystore and truststore with certs needed for kafka broker connectivity. While setting up mutual TLS for MQ, I am getting
AT QUEUE MANAGER AMQ9637E: Channel is lacking a certificate.
AT DISTRIBUTED WORKER AMQ9503: Channel negotiation failed
I started the distributed worker process without any Djavax.net.ssl.keyStore or Djavax.net.ssl.trustStore attributes being specified in  EXTRA_ARGS  env variable and only added the mq.ssl.keystore.location/mq.ssl.trustorestore.location (along with password attributes) to the connector [Start the distributed worker process---->issue the curl input to create a connector and in this input pass keystore and truststore with certs specific to MQ]
This attempt fails with above error.
However if I do not specify any SSL related information in the connector via the variables mq.ssl.keystore.location/mq.ssl.trustorestore.location and only specify the keystore/truststore details for worker process via below process, the mutual SSL works
export EXTRA_ARGS="-Dcom.ibm.mq.cfg.useIBMCipherMappings=false -Djavax.net.ssl.keyStore='key.jks' -Djavax.net.ssl.keyStorePassword='' -Djavax.net.debug=all -Djavax.net.ssl.trustStore=truststore.jks -Djavax.net.ssl.trustStorePassword="
Then start the distributed worker--->create a new connector and do not specify the keystore/truststore details via mq.ssl.keystore.location/mq.ssl.trustorestore.location attributes------>The connector works and MQ channel is started in Mutual SSL mode
Do we need to still export the keystore and truststore with EXTRA_ARGS if we are already passing the truststore and keystore on the connector. The documentation says -
"You will need to put the public part of the client's certificate in the queue manager's key repository. You will also need to configure the worker's JVM with the location and password for the keystore containing the client's certificate. Alternatively, you can configure a separate keystore and truststore for the connector."
I guess if I am passing the keystore and truststore in the connector ideally there should not be any requirement to pass the same   via EXTRA_ARGS

You should be able to do it all with the configuration parameters for keystore and truststore location these days.

Sorry Andrew, but could not understand the point you made
My distributed worker properties file have all the ssl details - ssl.key* , producer.key* and communication with Kafka endpoints is working fine as well. Communication with MQ also works in Mutual SSL mode but only post exporting the env variable "EXTRA_ARGS" with keystore / truststore details. I want to implement mutual SSL with MQ by passing these details to connector process rather than in EXTRA_ARGS (at worker JVM level).
I did add all the parameters in the connector -
mq.ssl.keystore.location
mq.ssl.keystore.password
mq.ssl.truststore.location
mq.ssl.truststore.password
but getting error.

Closing dormant issue.


esco-content-menu: favorites content evolutions

Users asked to have a really smaller "cards" on the favorite's area to be able to see more than 3 items (they have small desktop screen for the main part). I think to show cards always as "small", the option is calculated depending on the area size (it was for small devices) and that can be forced from parent component (maybe a better property configuration can be wrote from the content-menu), or defining a smaller breakpoint calculation will be the good way ?

Depending on the previous need, how can we keep the favorite action ? to be able to remove the item from favorites (as in "small" view we hide the favorite button action) without navigating from the list of services (the content-grid).

In a middle time we plan to implement an ordering system for favorites. We don't know how, but I think that we will need an other action button, and for small devices (like phones) placing all actions buttons into a submenu. Do you have a better way ?

Users asked to have a really smaller "cards" on the favorite's area to be able to see more than 3 items (they have small desktop screen for the main part). I think to show cards always as "small"

Cuesta is using esco-content-grid and uses the is-small attribute to use the compact layout on desktop.

Depending on the previous need, how can we keep the favorite action ? to be able to remove the item from favorites (as in "small" view we hide the favorite button action) without navigating from the list of services (the content-grid).

thinking out loud here, could adding a double click/double tap listener that would toggle favorites work?

In a middle time we plan to implement an ordering system for favorites.

What do you want to order by?

Could we super-impose a star (top-right, probably) even on the is-small view?  Would it fit?

Users asked to have a really smaller "cards" on the favorite's area to be able to see more than 3 items (they have small desktop screen for the main part). I think to show cards always as "small"

Cuesta is using esco-content-grid and uses the is-small attribute to use the compact layout on desktop.

Ok so they have always the property is-small to true.

They are also interested in a smaller design, something the could display around 12 icons across.

After it depends on the screen size, but having 12 icons isn't too much on the same line ? We can reduce the size on cards or icons, but we need a minimum size for small devices to be able to touch without problems icons.

Depending on the previous need, how can we keep the favorite action ? to be able to remove the item from favorites (as in "small" view we hide the favorite button action) without navigating from the list of services (the content-grid).

thinking out loud here, could adding a double click/double tap listener that would toggle favorites work?

yes but is it easy to understand ? more on desktop devices (that's why we removed into esup-filemanager the use of the double-click, but kept it as an option) ? On an other way we asked about that to our ergonomist (he is on holidays), so waiting and see...

In a middle time we plan to implement an ordering system for favorites.

What do you want to order by?

We want to offer a way to change the order of favorites from left to right, with a drag and drop

Could we super-impose a star (top-right, probably) even on the is-small view? Would it fit?
That's the problem, mainly on small devices you need at least 36px (and it's the minimum, material design talk about 48dp ie around 48px) to be able to touch an element. An icon have a size of 83px + 48px begin to make a lot even if we try to "super-impose". On an other side we could have a problem on titles, we can't have too much words and characters. We have some test to do !
After on small devices, what do you think about opening a menu to ask what to do (adding to favorites, and other stuff if there is) if the user make a double tap ? On smartphone this is more natural than on desktop.

On the is-small the size of a card is 120px, we can reduce a bit, but the problem will be on titles after, I would like to avoid to apply the ellipsis... And we need to keep titles on 2 lines maximum


Images Not Proxied Correctly

Problem: Unable to Proxy to the url of an image
If I try to proxy to an image, (https://cors-anywhere.herokuapp.com/https://upload.wikimedia.org/wikipedia/commons/thumb/b/b6/Image_created_with_a_mobile_phone.png/1200px-Image_created_with_a_mobile_phone.png) for example, I receive a page that has the following error:
The image “https://cors-anywhere.herokuapp.com/https://upload.wikimedia.org/wikipedia/commons/thumb/b/b6/Image_created_with_a_mobile_phone.png/1200px-Image_created_with_a_mobile_phone.png” cannot be displayed because it contains errors.
I'm seeing this when I run cors-anywhere locally as well. Could it be a setting that I missed somehow?

This is in Firefox, right? have you opened the developer tools? The console shows:

GEThttps://cors-anywhere.herokuapp.com/https://upload.wikimedia.org/wikipedia/commons/thumb/b/b6/Image_created_with_a_mobile_phone.png/1200px-Image_created_with_a_mobile_phone.png
[HTTP/1.1 400 Header required 140ms]

The response body is:

Missing required request header. Must specify one of: origin,x-requested-with

Image requests aren't with cors by default. If you want to enable CORS, set the crossorigin attribute on the <img> tag (CORS Anywhere only supports "anonymous" / "").
See https://developer.mozilla.org/en-US/docs/Web/API/HTMLImageElement/crossOrigin and https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/crossorigin

Oh, that makes sense - thanks @Rob--W!


Add pyproject.toml for Custom Node Registry

We are working with dr.lt.data and comfyanon to build a global registry for custom nodes (similar to PyPI). Eventually, the registry will be used as a backend for the UI-manager. All nodes go through a verification process before being published to users.
The main benefits are that authors can

publish nodes by version and users can safely update nodes knowing ahead of time if their workflows will break or not
automate testing against new commits in the comfy repo and existing workflows through our CI/CD dashboard

Action Required:

[ ] Go to the registry. Login and create a publisher id. Add the publisher id into the pyproject.toml file.
[ ] Write a short description.
[ ] Merge the separate Github Actions PR and run the workflow.

If you want to publish the node manually, install the cli and run comfy node publish
Check out our docs if you want to know more about the registry. Otherwise, feel free to message me on discord at haohao_81202 or join our server if you have any questions!

hey @osi1880vr, wanted to send a small nudge and ask if you had any questions!

@osi1880vr, wondering if there's any way we can support you on this PR!


hack/e2e/e2e-up.sh only supports darwin/arm64, not darwin/amd64

Describe the Bug
$ go env GOOS
darwin
$ go env GOARCH
amd64
$ sh hack/e2e/e2e-up.sh
Support amd64/arm64 CPU arch only

  if [ "$(arch)" == "amd64" ];then
    HOST_ARCH="arm64"
  elif [ "$(arch)" == "arm64" ];then
    HOST_ARCH="amd64"
  else
    echo "Support amd64/arm64 CPU arch only"
    exit 1
  fi

@IronCore864 Could you please execute the command arch and pause the output here. the $(arch) maybe not equals to amd64 at your env.

tiexin@Tiexins-Mac-mini ~/work/stream $ make e2e-up
sh hack/e2e/e2e-up.sh
Support amd64/arm64 CPU arch only
make: *** [e2e-up] Error 1
tiexin@Tiexins-Mac-mini ~/work/stream $ go env
GO111MODULE=""
GOARCH="amd64"
GOBIN=""
GOCACHE="/Users/tiexin/Library/Caches/go-build"
GOENV="/Users/tiexin/Library/Application Support/go/env"
GOEXE=""
GOEXPERIMENT=""
GOFLAGS=""
GOHOSTARCH="amd64"
GOHOSTOS="darwin"
GOINSECURE=""
GOMODCACHE="/Users/tiexin/go/pkg/mod"
GONOPROXY=""
GONOSUMDB=""
GOOS="darwin"
GOPATH="/Users/tiexin/go"
GOPRIVATE=""
GOPROXY="https://proxy.golang.org,direct"
GOROOT="/usr/local/go"
GOSUMDB="sum.golang.org"
GOTMPDIR=""
GOTOOLDIR="/usr/local/go/pkg/tool/darwin_amd64"
GOVCS=""
GOVERSION="go1.17.6"
GCCGO="gccgo"
AR="ar"
CC="clang"
CXX="clang++"
CGO_ENABLED="1"
GOMOD="/Users/tiexin/work/stream/go.mod"
CGO_CFLAGS="-g -O2"
CGO_CPPFLAGS=""
CGO_CXXFLAGS="-g -O2"
CGO_FFLAGS="-g -O2"
CGO_LDFLAGS="-g -O2"
PKG_CONFIG="pkg-config"
GOGCCFLAGS="-fPIC -arch x86_64 -m64 -pthread -fno-caret-diagnostics -Qunused-arguments -fmessage-length=0 -fdebug-prefix-map=/var/folders/jh/mjqznc052vv0mvx05n3xdc3m0000gn/T/go-build4017100536=/tmp/go-build -gno-record-gcc-switches -fno-common"

Yes, I saw the GOHOSTARCH="amd64" & GOARCH="amd64" at the output with go env, but the script uses "$(arch)" == "arm64" to determine whether the arch is amd64 or not. So you need to confirm what will be return when execute the arch command.

/close stale


Subquery not works

From docs
var query = new Query().From("Users")
                .Select("Id")
                .Select(q => q.From("Visits").Where("UserId", 10).Count(), "VisitsCount");

Expected:
SELECT "Id",
  (
    SELECT COUNT(*) FROM "Visits" WHERE "UserId" = 10
  ) AS "VisitsCount"
FROM "Users"

Actual:
SELECT "Id" FROM "Users"
It seems like QueryColumn("column" component) just ignored here and not handled in Columnize

Thanks for reporting, fixed now in this commit c89f9a5

Thanks!


Feat/new tabs component

This PR Adds a new Tabs component for later use in logged-in profile and tokens pages.

:tada: This PR is included in version 1.0.0 :tada:
The release is available on GitHub release
Your semantic-release bot :package::rocket:


Todoist regression: scrolls when window is short and the task context menu is opened

One of the more recent todoist updates auto-scrolls downwards when the context menu is opened and the task menu is opened.  Pretty sure this wasn't the old behavior.  In this circumstance, it should prioritize keeping the task visible.

This was always there AFAIK.

Ah, yes, I think you're right.  I think it is probably possible for the extension to hack around this by overriding the scrolling function and selectively disabling it.  However, it would be better if the scrolling behavior was adjusted :)


Create Crypto Contribution Modal - First two Pages (Contribution and Your Info)

Depends on https://github.com/opencollective/opencollective/issues/4456
When the user clicks to donate on the Crypto contribution tier, we need to show the crypto contribution modal. The figma design for this is given at, https://www.figma.com/file/ZQBMWhnGGtRWeIZknFW1eP/[OC-Design]-Production-Ready-✅?node-id=13104%3A204710

[ ] Create the Contribution and Your Info sections of the crypto modal.
[ ] Add validation to make sure all the fields in these two sections are mandatory; according to the api documentation it seems that unless the contribution is anonymous (which we are not supporting at this point) all the address fields given above are required.

This is no longer valid since we decided to use the contribution flow instead of a dedicated modal; therefore I am closing this. 🙂


feat(isValueMapper): add isValueMapper into mappers

Closes #59

@Siemienik should we name it isValueMapper or just isValue ?

@Siemienik should we name it isValueMapper or just isValue ?

just isValue is ok 👍

Thank you for great contribution  Looks good for me, even if I have one comment below and one additional request
As IsValue has different interface from others mappers - it is a factory function witch build and return proper mapper - I think that should be great do add example how to use it.
WDYT about:?
import { upperCaseMapper, isEmpty, isFilled, isValue } from 'xlsx-import/lib/mappers';

    const config = {
        // ...
        owner: {
            worksheet: 'About list owner',
            type: 'object',
            fields:[
                {row: 2, col: 1, key: 'FirstName'},
                {row: 2, col: 2, key: 'SecondName', mapper: upperCaseMapper},
                {row: 3, col: 1, key: 'Age', mapper: Number.parseInt},

                // three fields based on one cell but with different mapper
                {row: 2, col: 3, key: 'EmployedIn'},
                {row: 2, col: 3, key: 'IsUnemployed', mapper: isEmpty},
                {row: 2, col: 3, key: 'IsEmployed', mapper: isFilled},

                // isValue: assert / check the value
                {row: 2, col: 3, key: 'isMale', mapper: isValue(['male', 'm']) },
                {row: 2, col: 3, key: 'isFemale', mapper: isValue(['female', 'f']) },
            ]
        },
    };

LGTM, maybe a different approach could be
const isMale = isValue(['male', 'm'])
const isFemale = isValue(['female', 'f'])

const config = {
  // ...
  owner: {
      //...
      fields: [
          // isValue: assert / check the value
          { row: 2, col: 3, key: 'isMale', mapper: isMale },
          { row: 2, col: 3, key: 'isFemale', mapper: isFemale },
      ]
  },

this way the specialized mapper from isValue can be reused in other fields, what you think about it ?

this way the specialized mapper from isValue can be reused in other fields, what you think about it ?

right!  🚀


CLEAN_USERNAME_REGEX  error

In https://github.com/omab/python-social-auth/blob/master/social/storage/base.py,  the CLEAN_USERNAME_REGEX maybe error.
CLEAN_USERNAME_REGEX = re.compile(r'[^\w.@+-_]+', re.UNICODE)

The - in [] means range of characters, if we want to match literal -, we can escape it or put it in the end.
The correct expression is
CLEAN_USERNAME_REGEX = re.compile(r'[^\w.@+_-]+', re.UNICODE)

or
CLEAN_USERNAME_REGEX = re.compile(r'[^\w.@+\-_]+', re.UNICODE)
ref: https://docs.python.org/3.4/library/re.html#regular-expression-syntax

Fixed, thanks!