SSL error in softether

Are you using SoftEther VPN 5.x?

[X] Yes, I'm using SoftEther VPN 5.x, not 4.x.

Version
5182
Component
VPN Server
Operating system & version
ubuntu22.04
Architecture or Hardware model
No response
Steps to reproduce
when get the ssl with certbot and install into softether got error says need to root ssl ! iam using softether for years and i didnt see this error before

✔ Expected Behavior
No response
❌ Actual Behavior
No response
Anything else?
No response

I'd say it wants "full" LE chain.
however, I wonder why it didn't want earlier...
I'll try to have a look soon

@bobyturk , can you please provide a way how you imported lets encrypt cert ?

@chipitsine thnak you for responding
i am using the simple installation certbot with thiese steps :
apt install certbot -y
certbot certonly --standalone --preferred-challenges http --agree-tos --email EMAIL -d DOMAIN
vpncmd <IP_ADDRESS>:5555
ServerCertSet
/etc/letsencrypt/live/DOMAIN/fullchain.pem
/etc/letsencrypt/live/DOMAIN/privkey.pem
exit
systemctl restart softether-vpnserver

i have checked . in version 5180 is no problem but in 5182 problem exist .

unfortunately, I didn't find time yet ((
repro steps are simple, I even have test vm for that

btw, by 5180 you mean windows build ? or linux (i.e. server) build

in linux . build softether from source .

is it possible the changes is in certbots certificate ? i have an old built softether stable edition , tried to renew the cert with same repro but i got same error . this server made over 1 year ago and before now i have got certificate for that over 5 times without error . but now the same server in same network an old built softether stable edition got error in cert

Recently, I've also encountered this error in the stable version.
apt install certbot -y sudo certbot certonly --standalone --preferred-challenges http --agree-tos --email<EMAIL_ADDRESS>-d subdomain.domain.com --key-type rsa In Ubuntu 24, I use "--key-type rsa."
I have tried multiple ways to obtain the certificate, but the result remains unchanged.

Didn't we change the way we store the chain certs? I remember a discussion about that. That may affect it.

is there any solutions ? i will fall in seriousley trouble in few days when my past certificates has expires

Sorry, still trying to get to this issue ((
Can you please describe your findings, are you able to get it working on
some particular release of SE VPV? On SE VPN Stable? Or something has
changed on LE side and it doesn't work on either release?
On Tue, Jul 23, 2024, 16:08 bobyturk @.***> wrote:

is there any solutions ? i will fall in seriousley trouble in few days
when my past certificates has expires
—
Reply to this email directly, view it on GitHub
https://github.com/SoftEtherVPN/SoftEtherVPN/issues/2030#issuecomment-2245360759,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAQ5KUDCNRYKV4BA5V6OFM3ZNZPUTAVCNFSM6AAAAABKYZNVOSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDENBVGM3DANZVHE
.
You are receiving this because you were mentioned.Message ID:
@.***>

in both of SE and DEV version has problem . in SE it is not working at all and always got error but in DEV edition i checked even the last 5185 and also 5186 version that happens
when you try to get ssl in ubuntu there is NOT any error everithing is normal . but when you trying to connect via openvpn got certificate error . now in DEV version there is 2 different behavior
in some servers with ubuntu 22 all updated when you export and import certificate from inside of softether problem has solved and you can connect
but in some other servers in different datacenters i tried over 50 times export and import it didnt work ! and all times got error when importing and didnt work . the same ubuntu version and the same updates the same softether version

a wild guess, how do you prepare openvpn client config ? just export ?
what if adding Lets Encrypt certificate (probably intermediate one) manually ?

the problem is i gave to many of my studenst the connection files from years ago . now they hasnt access to me and me either . if i have to change old client config files to new ones , too many people loose they access to servers . then i need to old config still working

I wonder how it is possible to use Lets Encrypt certificates that. They are only 3 month long.
does client allow connecting with expired cert ?

the clients files certificate isnt important . i just renew the servers cert every 3 month and then clients can connect with old files . but the server certificate wont be change the type for example when you replacing letsencrypt with zero ssl certificate old file cand connect , but when renew with the certbot there wasnt any problem with 2 or even 3 years agos files to connect .
now all i need is the certbot ssl without error in softether

as far as I recall, in case of OpenVPN, usually you provide server cert in client config file...
but let me play with that a liitle bit.

no it is not depend of client files certs . even you can import cert for another domain in softether !! openvpn will connect with old files . just softether will have valid cert with same issuer

@bobyturk can you give it a try ?
what does the following command show in your case ?
openssl x509 -in /etc/letsencrypt/live/DOMAIN/fullchain.pem -text -noout

is certificate RSA or ECDSA ?
if ECDSA, can you please try to issue a certificate using
certbot certonly --standalone --preferred-challenges http --agree-tos --email EMAIL -d DOMAIN --key-type rsa

?
(it worked for me, but who knows how many difference we have)

@chipitsine
first command returns this
Serial Number:
04:70:54:71:33:c0:a6:d9:e2:e6:c2:e1:19:e7:18:21:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: C = US, O = Let's Encrypt, CN = R10
Validity
Not Before: Jul 23 20:06:36 2024 GMT
Not After : Oct 21 20:06:35 2024 GMT
Subject: CN = DOMAIN
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:d0:fa:a4:f8:b8:fa:c8:dd:2c:c4:f1:70:1f:48:
c7:35:be:71:05:f3:3c:e2:d3:79:d2:3c:dd:ec:4a:
ec:b4:2c:1b:56:ca:75:05:c3:a0:89:43:46:65:b3:
4a:c3:28:3e:05:40:4c:a7:05:b9:a6:56:6e:ce:77:
f1:ee:0c:27:ab:df:39:48:51:cd:49:b1:c3:74:be:
3e:84:22:df:4d:a0:c6:38:aa:c6:61:30:42:ef:3e:
21:4b:6c:2c:0c:0b:42:83:5f:e6:c5:a5:b0:b1:03:
d9:db:32:ae:d9:1e:d9:f9:b5:57:96:76:f8:1f:1e:
0c:5a:6a:70:09:ff:97:e3:cb:e9:25:56:d9:10:9e:
15:ba:fe:ad:51:54:05:d1:9e:b0:10:d9:b5:0a:a5:
37:5c:46:c8:8d:11:bb:be:cd:91:cf:23:c8:e8:1f:
83:e2:7d:20:8b:e1:dc:ff:8f:47:d5:be:4f:41:39:
fb:70:4e:dc:a4:e3:e6:2f:1b:c5:0c:8e:d2:77:04:
42:8c:ed:ab:80:ca:10:3b:0f:3d:33:7a:5f:fa:50:
f6:70:ac:1a:c5:ba:5b:62:95:df:c5:5b:56:52:25:
ae:18:0a:4d:99:e0:0b:ff:6c:ed:98:e8:43:f3:4c:
5b:1e:65:fa:df:b7:fb:79:9e:6b:fb:88:ee:ee:8c:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
40:E1:91:32:8E:87:42:E7:30:9A:48:28:B3:77:0F:0A:6E:A0:00:99
X509v3 Authority Key Identifier:
BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
Authority Information Access:
OCSP - URI:http://r10.o.lencr.org
CA Issuers - URI:http://r10.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:DOMAIN
X509v3 Certificate Policies:
Policy: <IP_ADDRESS>.2.1
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version   : v1 (0x0)
Log ID    : 3F:17:4B:4F:D7:22:47:58:94:1D:65:1C:84:BE:0D:12:
ED:90:37:7F:1F:85:6A:EB:C1:BF:28:85:EC:F8:64:6E
Timestamp : Jul 23 21:06:37.204 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:AD:7B:E1:F9:FA:E1:FC:99:C5:D4:89:
35:DE:B2:9A:17:25:76:35:E0:6E:22:BB:E5:48:0B:5F:
62:CA:95:DD:74:02:20:6F:81:66:FA:63:14:3C:B7:A5:
20:E7:E4:90:F3:E3:7A:1B:92:FD:C0:6A:1F:9A:AD:7B:
17:9D:E5:16:B4:71:98
Signed Certificate Timestamp:
Version   : v1 (0x0)
Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
Timestamp : Jul 23 21:06:37.205 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:44:02:20:3B:36:9E:54:17:A2:7E:5C:6A:4C:3A:A5:
61:B2:0C:30:5F:89:45:52:9F:05:66:EF:5E:F9:FC:96:
FD:0B:D6:C1:02:20:43:31:F1:4B:E7:97:72:6E:E6:DF:
CE:5C:4A:78:A1:E8:7D:90:DE:CA:09:D8:AE:26:8B:D7:
87:E1:BF:08:3E:85
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
c0:1e:91:f7:f4:83:95:f1:f2:52:5b:08:84:f0:f8:99:ba:2c:
6d:64:e6:67:1d:b8:e5:a6:fd:08:83:e9:74:29:91:b4:a3:74:
5c:91:4e:08:2e:47:fd:9c:37:ee:5d:65:c3:44:85:71:bd:f9:
fa:ee:da:60:62:90:24:de:78:19:be:bd:7e:47:e8:a5:5d:4f:
ee:9b:c5:2f:7e:c1:e9:ab:d1:d6:d4:dc:69:34:fa:17:01:56:
df:f3:32:6a:b9:29:4d:6d:fd:13:7a:2a:90:a5:38:63:07:e2:
35:23:d4:a0:30:b4:1b:dc:65:bb:2d:2b:65:73:63:cb:2e:27:
53:0f:5b:9c:00:4a:a9:f0:40:cd:3c:a7:11:1c:38:f3:e5:10:
99:bf:8d:3d:38:ef:3a:f1:0c:6b:a1:c8:7d:b5:ab:19:b3:d3:
7f:e8:e6:83:80:6d:e5:2c:19:8d:f7:83:6d:80:7a:e7:7c:6c:
56:b7:09:30:2d:39:d5:55:95:e6:95:69:01:5d:8c:62:ae:8b:
23:e5:eb:46:e9:df:f2:0e:f7:19:32:72:2c:b1:7f:53:87:35:
fb:b1:00:18:bb:29:ca:2e:f2:62:ca:55:d3:22:01:cb:77:55:
42:c2:88:0d:68:93:38:d4:31:ba:54:99:52:f5:ea:b3:aa:e0:
7c:75:5d:46
and the second command resault is same problem :
The specified SSL certificate is a sub-certificate which was issued by a CA (Certificate Authority).
If you are planning to support either Microsoft SSTP or OpenVPN protocol on this VPN server, you have to install the root certificate and all intermediate certificates (if exists) on this VPN Server.
To install these certificates, copy the root certificate and all intermediate certificate files (in the X.509 format) into the "chain_certs" subdirectory on the directory which is VPN Server has been installed on.
If you don't know how to obtain root and intermediate certificate files for your certificate authority (CA), please refer to the CA's web site or contact technical support staffs of the CA.

hmm, I'm running Fedora 39.
I've an idea that SECLEVEL on Ubuntu is in play.
let me get Ubuntu somewhere...

meanwhile, can you try Fedora ?

@chipitsine i didnt use fedora ever . but i can give you a ubunru server access . tell me how to send you

it would speed up things.
here's my ssh key
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnriy2JJVpymOhWu7xhVFONqQU40elnY5+uiAF2NwDnjGItK31JARfc6bzT1QIpclbgD79hKVoxY7+OLCU5O414sqc7a9O2pvBiXd+m+HsCuloEFneU+400m5fGSUrG2A5W9IPKQppCL10ws9y0mscBgyFgP2LE8OjXyTGD3lyVGVONpGGdcSAv7TlKZ5YhGtdm2tiQ+lja0S1lk+zriPLqct65kQEZC4E6HaA5Qc5FTMkk9367M0nqVChL24FuOT79sZgwjwyFyK4OTzn+hSKJQt7TPVj2XTXVpku8onjFU4/mmqdHBQdd6Ia/acg3ydr9yv+NGFZtAy8jHiB037X imported-openssh-key

other details please send to<EMAIL_ADDRESS>also, it would be nice to understand what is allowed and what is not (I do not want to break something occasionally)

@chipitsine ive sent the server access

@bobyturk privately provided an access to several servers, on neither of them problem was reproduced.
only on one server where 4.x was installed, but we've no idea what to do with that.
I'm closing an issue. feel free to reopen if problem is reproduced

I'm also having this problem on v5186
I can send you my server info for testing if that would help.

so far, we have some repro on some servers,

so far, literally following suggestion The specified SSL certificate is a sub-certificate which was issued by a CA (Certificate Authority).\r\n\r\nIf you are planning to support either Microsoft SSTP or OpenVPN protocol on this VPN server, you have to install the root certificate and all intermediate certificates (if exists) on this VPN Server.\r\n\r\nTo install these certificates, copy the root certificate and all intermediate certificate files (in the X.509 format) into the "chain_certs" subdirectory on the directory which is VPN Server has been installed on.\r\n\r\nIf you don't know how to obtain root and intermediate certificate files for your certificate authority (CA), please refer to the CA's web site or contact technical support staffs of the CA. issue was resolved
@bobyturk , @Pink210 , did you try to follow that suggestion yourself ? which kind of issue did you encounter during that ?

so far, literally following suggestion The specified SSL certificate is a sub-certificate which was issued by a CA (Certificate Authority).\r\n\r\nIf you are planning to support either Microsoft SSTP or OpenVPN protocol on this VPN server, you have to install the root certificate and all intermediate certificates (if exists) on this VPN Server.\r\n\r\nTo install these certificates, copy the root certificate and all intermediate certificate files (in the X.509 format) into the "chain_certs" subdirectory on the directory which is VPN Server has been installed on.\r\n\r\nIf you don't know how to obtain root and intermediate certificate files for your certificate authority (CA), please refer to the CA's web site or contact technical support staffs of the CA. issue was resolved
@bobyturk , @Pink210 , did you try to follow that suggestion yourself ? which kind of issue did you encounter during that ?

Yes sir, I followed the suggestion and tested it on several servers, both SE and DE. I encountered no issues, and everything worked smoothly. I appreciate the guidance.

@chipitsine the problem is when you are getting certificate in another method in softether server , the old connection files get error and didnt connect .

IMPORTANT update
i have tried using cloudflare DNS and the problem has solved !!
<IP_ADDRESS>
<IP_ADDRESS>
with this commands
nano /etc/systemd/resolved.conf
systemctl restart systemd-resolved

it is totally bizarre.
from my observation, the issue is due to new LE certificate chain, which is not trusted.
if we put chain manually, everything works.
it should not be fixed by dns manipulation.
yes, I planned to have a deeper look for updated LE cert (and maybe found a way how to handle it from SE without downloading chain manually)

when combining new chain, as you remember I asked you to run "curl blah-blah-blah" from command line. which means curls utilized dns. and there were no issues....

i have tried in both DE and SE version . changing DNS worked in both . if you want ican giveyou again a access to totally new server you can test everything and in end test changing dns

I planned to play on my own environment first. Maybe next week.
if your observations are correct, that could mean that curl and SE makes dns calls differently, and if that's true, it's bizarre

i have tested in 3 different datacenter . all of them has problem and couldnt import certificate from gui correctly . all 3 servers problem solved with cloudflare dns

Hey,
I got this issue after renewing and reinstalling my Certbot Let's Encrypt certificate. I don't have an issue with SSTP on Windows 11 however OpenVPN does not work with the new cert. One thing I noticed is the new CA in the open VPN config file is a lot shorter. I think Let's Encrypt may have changed something that may have partially broken certificates on SE.
For now I switched back to my old certificate however it expires in a few days and I'm not sure what to do.

@andrewfer000 in softether server change serever DNS to cloudflare problem will solve
<IP_ADDRESS>
<IP_ADDRESS>

@andrewfer000 in softether server change serever DNS to cloudflare problem will solve
<IP_ADDRESS>
<IP_ADDRESS>

This did not work for me. This has to do with LE itself.

what OS system use for softether server ? when you importing the new cert file did you got error ?
i have tested at least in 4 dataceneter and the DNS changes has solved my problem

Please try putting CA pem and intermediate pem to the directory chain_certs
On Wed, Aug 14, 2024, 01:11 Andrew @.***> wrote:

@andrewfer000 https://github.com/andrewfer000 in softether server
change serever DNS to cloudflare problem will solve
<IP_ADDRESS>
<IP_ADDRESS>
This did not work for me. This has to do with LE itself.
—
Reply to this email directly, view it on GitHub
https://github.com/SoftEtherVPN/SoftEtherVPN/issues/2030#issuecomment-2287364107,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAQ5KUB4YGOEO4V4JOMKTCDZRKHDHAVCNFSM6AAAAABKYZNVOSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEOBXGM3DIMJQG4
.
You are receiving this because you were mentioned.Message ID:
@.***>

Please try putting CA pem and intermediate pem to the directory chain_certs

I downloaded them from the browser through the certificate viewer and I placed them in my chain certs folder in my SE install folder and reran the certificate command and it worked.
I pulled in both the PEM Cert and PEM chain from both the E6 and ISRG Root X1 to the chain certs folder but I'm not sure if all those are necessary.
I like to try this to work cleanly and automatically as possible before I document it in the wiki. So if you have any command line tools that can do this or other method that would be great
Btw, The main thing I noticed was that the intermediary changed from R3 to E6 between my old and new certificate.
Thanks.

IMPORTANT update
i have tried using cloudflare DNS and the problem has solved !!
<IP_ADDRESS> <IP_ADDRESS>
with this commands
nano /etc/systemd/resolved.conf systemctl restart systemd-resolved

you maybe be surprised but changing dns not solved anything for me i test it 3 times no results
but anyway, if using certbot (if not just use it):
apt install certbot -y
in ubuntu 24:
sudo certbot certonly --standalone --preferred-challenges http --agree-tos --email<EMAIL_ADDRESS>-d yourdomain.com --key-type rsa
in ubuntu 22 or 20:( you can remove "--key-type rsa" part or not)
sudo certbot certonly --standalone --preferred-challenges http --agree-tos --email<EMAIL_ADDRESS>-d yourdomain.com
in SE:
cp /etc/letsencrypt/live/yourdomain.com/chain.pem  /opt/softether/chain_certs
in DE:
cp /etc/letsencrypt/live/yourdomain.com/chain.pem  /usr/local/libexec/softether/vpnserver/chain_certs
obviously, you have to change yourdomain.com and your email
thanks to chipitsine

when connecting to public servers it freeze on verify and does not Connect

@Shahabs2004 , I really wonder how your issue is related to other issues in this tread.


Updated subscriptions object

Main changes are:

Added new structure for object called subscription-item: https://docs.lemonsqueezy.com/api/subscription-items#the-subscription-item-object. I'll add the service and tests for this object in the future.
Updated subscription object struct to support subscription-item object, subscription tests and stubs to support new object, please check the updated documentation: https://docs.lemonsqueezy.com/api/subscriptions#the-subscription-object.

Thanks @webtaken


Adding .ecf files for Stage 1

Can we get this PR resolved and merged asap?  I've had people asking about missing S1 ecf files.

Will do this first thing tomorrow morning.

Also, ideally this PR or another one soon would add the Stage 1 ecfs to the documentation (see the current code in docs/source/ecf.rst for how to format)


Somehow React Native is getting to line 123 of connectAdvanced.js [cannot call a class as a function]

This isn't react-redux's fault, but I've been bashing my head for an hour, going through source code trying to see how it's even remotely possible that the _connect function was called with 'this' being different from 'Connect'.
I figured some of the contributors would have a better idea of how this could possibly happen.
The surrounding code is:
var Connect = function (_Component) {
    _inherits(Connect, _Component);
        function Connect(props, context) {
        _classCallCheck(this, Connect);
...

Next on the stack trace is CardStack.js, which I am unsure where that would point.
Oh also The second line of the stack trace says "connect(ZHeader)"
The component I'm passing to my react navigator header is called "ZHeader". The code for it is summarized as:
class ZHeader extends React.Component {
    componentWillMount() {
        SecureStore.getItemAsync('activeCategory')
            .then(res => this.props.setAppState({ category: categories[res] }))
            .catch(err => console.log('activeCategory isnt set'));
    }

    render() {
        return (
            ...
        );
    }
}

const mapStateToProps = ({ app: { activeCategory } }) => ({ activeCategory });
export default connect(mapStateToProps, { setAppState })(ZHeader);

I should mention ZHeader worked as a header for the router, before I added redux.

This is a bug tracker, not a support system. For usage questions, please use Stack Overflow or Reactiflux where there are a lot more people ready to help you out. Thanks!

You don't think a generic error message is a bug?

God dammit, I'm getting mad at babel's compilation code ffs.
Sorry, I realize this only after going through react navigators code and realizing they have the exact same error and my error points to babelHelpers now. It's a generic message provided by babel.
WHY AM I THE ONLY ONE GETTING MY FOOT STUCK IN THESE HOLES!


Pulse amplitude representation in pulse library

What is the expected behavior?
From a calibration point of view, pulse amplitude is better to be represented in (float |amp|, float phase) rather than complex amp. Usually I tune pulse amplitude by amplitude sweep followed by error amplification, and then calibrate the phase separately. I often write wrapper function of one in the pulse library to convert (amp, phase) into complex value as an input, but changing the argument of those functions is more straightforward. Since they are public function, is it worth changing the interface?

I don't think what you are doing is standard, typically these are represented as a complex parameter A for the amplitude scaling (see the original DRAG paper for example) and waveforms are taken to be complex as they correspond to proportional Hamiltonian terms which are inherently composed of Hermitian matrices which are complex square matrices. Separating the amplitude and the phase would obfuscate this correlation.

Good point. As you said we need complex value representation for DRAG. However, as written in the ref below, we calibrate phase and amplitude separately for gaussian square, ie CR, pulse. Since the phase controls rotation axis and the amplitude controls rotation angle, (amp, phase) representation is convenient for this type of calibration.
https://arxiv.org/abs/1603.04821

I don't mean changing data representation (sorry for confusing wording), but I just propose to change the interface, or arguments, of pulse library functions and ParametricPulse. Of course it generates complex valued SamplePulse object or complex amplitude for ParametricPulse qobj regardless of my suggestion here.
For, DRAG pulse case, we can intuitively create both X and Y gates with (amp, phase) interface - phase = 0.5*np.pi for Y gates (if electrical length of DAC-mixer's IQ channel is the same).

Another reason why we would not want to encourage this way of defining pulses is that it will result in people using twice as much memory on the device. For example, defining an X and the Y pulse in this way would be more efficiently accomplished with a pre and post frame change around X. I don't see what is so hard about doing (ampnp.exp(-i0.5*np.pi).

The DRAG case is just an example and I agree with using FC is smart solution for phase control. Yes, I always do like amp*np.exp(-0.5j*np.pi) but writing this is little bit of pain. For example, if the interface supports phase, we can store cal parameters as a dict and pass it as **kwargs to create pulse. Currently I need to write new function to receive (amp, phase) to do it, or call pulse lib function and give params one by one with, eg duration=dict.get('duration'), amp=dict.get('amp')*np.exp(-1j*dict.get('phase)), sigma ....
Another trivial reason of using (amp, phase) is the spec of ParameterExpression object. Since it doesn't support complex data, we cannot convert parametrized schedule into circuit when the amplitude is parametrized.
This is not critical issue and just something nice to have. If no one agreed, please close the issue.

For example, if the interface supports phase, we can store cal parameters as a dict and pass it as **kwargs to create pulse

you can store a complex number for the amplitude.

Another trivial reason of using (amp, phase) is the spec of ParameterExpression object. Since it doesn't support complex data, we cannot convert a parametrized schedule into circuit when the amplitude is parametrized.

Fair point although I think this should support operations soon such as multiplication.
If you want to add a phase, I am ok with that as a kwarg that by default is zero. Behind the scenes we will perform the multiplication for the parameterized pulse.


mixin on mixin fails

The following code crashes the generator:
mixin MyMixinBase on Object {
  int prop;
}

mixin MyMixin on MyMixinBase {}

@JsonSerializable()
class MyClass with MyMixinBase, MyMixin {}

I think the direct cause is the usage of isSuperOf() in field_helpers.dart:_FieldsSet::_sortByLocation() which handles extends hierarchy only. At least replacing that call with isAssignableFrom() solved the error.
However I'm not sure this is the proper way to fix it, please check it.
flutter --version
Flutter 1.3.8 • channel beta • https://github.com/flutter/flutter.git
Framework • revision e5b1ed7a7f (5 weeks ago) • 2019-03-06 14:23:37 -0800
Engine • revision f4951df193
Tools • Dart 2.2.1 (build 2.2.1-dev.0.0 571ea80e11)

Can you run the build with --verbose and send me the stack?

Also, attach your pubspec.lock file so I can see versions.

Hi, unfortunately I can't do that before Monday.
Please wait, or just copy-paste my example into your example project and build.
I tried it with the latest version of json_serializable. I also ran the tests with my patch and they're ok.
Stack trace was something like:
_generate
...
collectAllMembers or similar
...
_sortByLibrary or something
...
TypeChecker::isSuperOf
and isSuperOf() tried to access element on a null (it got a mixin, but it assumed it has a base type until Object).
Cheers

Hi, I'm a little bit confused because the example what I sent earlier works now.. wierd.
But in my project still not, so I started to triangle again and this is the minimal requirement:
mixin MyMixin {
  int prop1;
}

@JsonSerializable()
class MyClass with MyMixin {
   int prop2
}

I created a gist from both pubspec.yaml and build runner output.
The issue occurs with properties too.
I used your example project (master / 93f8da4)

Bug found. Fixing now!

PR to fix is open. Will release immediately once that lands

Great, thanks!

https://pub.dartlang.org/packages/json_serializable/versions/2.2.1 😄


[fix] pfe-cta stretch

current flexbox styles stretch CTAs (or other content) horizontally across the card

@starryeyez024 Is this not intended?

@kylebuch8 nope, CTA's should just be whatever width the text is, plus padding.

https://github.com/patternfly/patternfly-elements/pull/854/files?file-filters[]=.scss#diff-235f07a9f47613ded24fdf03b62922561f87b3d82b78bcc90f1384ee5d3b020c


How to solve the problem of permission denied

Hi I run the following script to start a container with my current user ahb
#/bin/bash
docker run -d \
    --privileged=true \
    --log-opt max-size=50m \
    -p 8000:8000 \
    -p 5006:5006 \
    -e DOCKER_USER=`id -un` \
    -e DOCKER_USER_ID=`id -u` \
    -e DOCKER_PASSWORD=`id -un` \
    -e DOCKER_GROUP_ID=`id -g`  \
    -e DOCKER_ADMIN_USER=`id -un` \
    -e USER_MEM_LIMIT=4G \
    -e USER_CPU_LIMIT=1 \
    -v /workdir/`id -un`:/workdir \
    -v /home:/home_host \
    dclong/jupyterhub-ds

then I openup my browser and go to the localhost:8000 , I login successfully.
Then in the jupyterlab console  when I click the notebook it says
Error
Invalid response: 403 Forbidden

and
Launcher Error
Cannot read property 'path' of undefined

But i can lanuch the console successfully.
Here is some output of my container logs that i think is useful
[I 2018-07-19 10:01:36.321 SingleUserNotebookApp handlers:153] Creating new notebook in /
[I 2018-07-19 10:01:36.488 SingleUserNotebookApp sign:396] Writing notebook-signing key to /home/ahb/.local/share/jupyter/notebook_secret
[W 2018-07-19 10:01:36.540 SingleUserNotebookApp web:1618] 403 POST /user/ahb/api/contents/?1531994496298 (<IP_ADDRESS>): Permission denied: Untitled.ipynb
[W 2018-07-19 10:01:36.541 SingleUserNotebookApp handlers:525] Permission denied: Untitled.ipynb
[I 2018-07-19 10:01:39.248 SingleUserNotebookApp handlers:153] Creating new notebook in /
[W 2018-07-19 10:01:39.339 SingleUserNotebookApp web:1618] 403 POST /user/ahb/api/contents/?1531994499223 (<IP_ADDRESS>): Permission denied: Untitled.ipynb
[W 2018-07-19 10:01:39.339 SingleUserNotebookApp handlers:525] Permission denied: Untitled.ipynb

How to fix this problem? Thank you. I need your help

Seems that you don't have permission to create notebooks in the mounted volume. Changing the permission directory on the host to 777 might resolve the issue.

Ok it's a silly question.
Thank you very much.
By the way I wonder in this image can I use tensorflow-gpu library?

Nope, this Docker image is not intended for GPU usage.


api_docs: Add page documenting HTTP headers in the api docs.

Adds a page to the general api documentation about HTTP headers, so that information about the response headers for rate limits have a more logical location in the docs, and so that other HTTP header information can be shared, such as User-Agent conventions. See this CZO chat for more details about adding this documentation page.
Adjusts some text and linking in templates/zerver/api/rest-error-handling.md and templates/zerver/api/rest.md for the addition of the HTTP headers page.
User-Agent conventions section to be filled in during merge.
Screenshots of current updates and additions:

New HTTP Headers page

Changes to Error Handling page

Changes to Overview page of REST API

In the interest of getting this unstuck, I pushed back here with edits filling in the User-Agent section. I think this probably could use a few more passes of editing; among other things, the authentication discussion feels needlessly terse, though maybe that should become its own page anyway. But I think this is definitely better than having nothing, so tagged to merge once CI passes; once this is on chat.zulip.org we can have a thread about what next steps we want to do to improve this part of the site.


Confused between express-sequelize-session and connect-session-sequelize

They both seem to have a similar API, is one a fork of the other?

No idea.  The documentation is greatly lacking and all of it appears un-organized.


CatchUp fails

CatchUp seems to have some base failure rate, so the more times you call it, the greater the chance of failure. It also seems that once you stop catching up, no further attempts to catch up will succeed. This becomes a serious problem when the blockchain grows larger than a few thousand blocks.

CatchUp calls itself in a loop, but it recurses before the state has finished processing all the blocks from the previous CatchUp. This causes knownBlocks to reflect an outdated view of the state, and consequently, SendBlocks will send blocks that the receiver has already received, but hasn't yet processed.
This explains why I was seeing so many KnownBlockErrs, but I'm not sure that it explains why CatchUp is failing.

okay, I think I've traced it. The code is freezing during AcceptBlock. This would indicate a deadlock somewhere in the state. A deadlock would explain why subsequent calls to CatchUp failed as well.

I imagine it will. I think the problem originated from ConsensusSubscribe()


Experiencing the rifts in seamFinder()

Hi Lukas.
Hope you are well!
Another issue!
result with Seamfinder

result without Seamfinder

What's wrong?

maybe it's also a problem with the transparency. Can you plot the result without seam finder with transparency as well?

I had added 14 more images. But the same result and there was only 1 or 2 rifts.

I hope you understand that it's really hard for me to say whats going wrong

Ok, I will find out what's wrong.

Hi @algopert
I've encountered the same. You can try set:
seam_finder = SeamFinder(finder='no')

@phamkhactu could you share the images that lead to the black seams?

@phamkhactu could you share the images that lead to the black seams?

@lukasalexanderweber
here is my link data
I've tried to stitch all image to create full 360 image

maybe you could add your images to https://github.com/OpenStitching/images so the error can be reproduced :)

@phamkhactu did you have luck stitching a full 360 image?

@phamkhactu did you have luck stitching a full 360 image?

Hi @claytonrothschild
I have made full 360 image in good condition. However, I used stitching as a base and used cube360 to stitch top and bottom image.


ants: fix build

Motivation for this change
ANTs was broken by #63270
ZHF (#68361)
Things done

[x] Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS)
Built on platform(s)

[x] NixOS
[ ] macOS
[ ] other Linux distributions

[ ] Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
[ ] Tested compilation of all pkgs that depend on this change using nix-shell -p nix-review --run "nix-review wip"
[ ] Tested execution of all binary files (usually in ./result/bin/)
[ ] Determined the impact on package closure size (by running nix path-info -S before and after)
[ ] Ensured that relevant documentation is up to date
[x] Fits CONTRIBUTING.md.

Notify maintainers
cc @bcdarwin

backported in cfb651c22fc813acd7e965cfabe7a1d21e21cda8, 3fd37b5b98fa8e240c7df62eb3bd1bb5a24521cb


xGroup doesn't work properly on domain controller.

A local user is created under and added to admin group and then machine was promoted to DC. After that consistency checks fails as xGroup resource is not able to resolve local user (now domain controller admin).
Prior to promoting to a DC, the members were all local users and they are resolved using the PrincipalContext for the local system and no credentials are needed.  After promotion, the members are changed to domain users and reported as such.  Since the xGroup resource expects domain credentials to resolve domain entries; it reports an error.

This is probably related to #19

FYI, there also are no local groups after a DC promo.  Should xGroup be allowed on a DC?

I agree that this should not be used on a domain controller, xADGroup could be used to manage the AD groups once promoted. Is there a scenario where it's needed to set local groups prior to promoting a DC?


Thank you very much for the vmdpy template you provided, but I have the following problems when I use it: the length of my original sequence is fifty-nine, but the length of the subsequence obtained after decomposition has become fifty-eight. What is the reason for the situation? Is there any way to solve this problem?

me too.The length of the odd sequence length will be one less after decomposition. Does anyone know how to solve it?

me too.The length of the odd sequence length will be one less after decomposition. Does anyone know how to solve it?

I believe I fixed the issue, (it now does not remove parts of the sequence if odd but I am unaware if the math overall still holds up)  it has to do with directly copy from the matlab reference. In the matlab code
f_mirror(1:T/2) = signal(T/2:-1:1);
f_mirror(T/2+1:3*T/2) = signal;
f_mirror(3*T/2+1:2*T) = signal(T:-1:T/2+1);

the authors did not FLOOR or CEIL T/2 which leads to half steps being rounded up automatically not floored. i.e. 5/2 will be 3.
So to fix this REMOVE (lines 40-41)
 if len(f)%2:
       f = f[:-1]

And REPLACE (lines 46-48)
ltemp = len(f)//2
fMirr =  np.append(np.flip(f[:ltemp],axis = 0),f)
fMirr = np.append(fMirr,np.flip(f[-ltemp:],axis = 0))

WITH
T = length(f)
fMirr = np.array(np.flip(f[0:math.ceil(T/2)]))
fMirr= np.append(fMirr,f)
fMirr = np.append(fMirr,np.flip(f[math.ceil(T/2):]))

You will need to import math and I also converted f to a numpy array as the first thing
ADD
f = np.array(f)

@xuyaojian123 @WenjieXu2000 If you could verify this solution works for you and the math remains unaffected that would be wonderful.

I believe I fixed the issue, (it now does not remove parts of the sequence if odd but I am unaware if the math overall still holds up) it has to do with directly copy from the matlab reference. In the matlab code
f_mirror(1:T/2) = signal(T/2:-1:1);
f_mirror(T/2+1:3*T/2) = signal;
f_mirror(3*T/2+1:2*T) = signal(T:-1:T/2+1);

the authors did not FLOOR or CEIL T/2 which leads to half steps being rounded up automatically not floored. i.e. 5/2 will be 3. So to fix this REMOVE (lines 40-41)
 if len(f)%2:
       f = f[:-1]

And REPLACE (lines 46-48)
ltemp = len(f)//2
fMirr =  np.append(np.flip(f[:ltemp],axis = 0),f)
fMirr = np.append(fMirr,np.flip(f[-ltemp:],axis = 0))

WITH
T = length(f)
fMirr = np.array(np.flip(f[0:math.ceil(T/2)]))
fMirr= np.append(fMirr,f)
fMirr = np.append(fMirr,np.flip(f[math.ceil(T/2):]))

You will need to import math and I also converted f to a numpy array as the first thing ADD
f = np.array(f)

@xuyaojian123 @WenjieXu2000 If you could verify this solution works for you and the math remains unaffected that would be wonderful.

This worked for me. I compared a set of IMFs with even sequence lengths produced by the original code and the new code and the values are identical. And now it can also do odd sequence lengths. Thanks!

万分感谢


C++ support - nanopb_cpp

Hello @PetteriAimonen .
I made very good wrapper for nanopb with C++.
https://github.com/hacker-cb/nanopb_cpp
It can map all of the supported types (scalar types, maps, arrays, union messages, callbacks).
So, it very easy to reuse converters for inner messages.
It has 100% tests with github actions  for all cases. (I hope)
Also it has good README and examples.
Could you please take a look on it?
I suggest to place nanopb_cpp repository to the nanopb organisation if you will satisfied my work. I will continue to maint it there.
A little bit later I will add platfromio support to it.

At a quick look this looks great and I'm willing to have the repo under nanopb organization!
I'll take a closer look and see how to go about the repo transfer in coming days.
Regarding OUTPUT_STREAM_INCREASE_STEP: any single value will not be enough as it would block long strings from being encoded. Instead set stream->max_size to SIZE_MAX initially. It would also be good to document that library user can and should set a lower limit to avoid filling all RAM in case of error.

Ok, done.
https://github.com/hacker-cb/nanopb_cpp/compare/bcc03409ef9ff7741dac93326bb079f1047ae678..6f9200970b0cc3c23bafce955c84ff22d0991538

Thanks. I've sent you an invitation to the nanopb organization and added permissions which should make it possible for you to transfer the repository according to GitHub's help.

I moved and updated docs.
@PetteriAimonen Could you also add me to the nanopb organisation in platformio registry?
https://docs.platformio.org/en/latest/core/userguide/org/index.html#cmd-org
P.S. My Telegram is hackercb - so you contant me there for the future discussions.

@ivankravets Hmm, if I understood correctly the nanopb organization on PlatformIO is currently unmanaged and using something called "legacy sync". Can you help binding it to my username petteriaimonen on PlatformIO?

Hi @PetteriAimonen,
Thanks for pinging me. You are added as the owner of nanopb organization in the PlatformIO Registry. I see there is legacy "autosync" enabled for your library, our crawler monitors "library.json" manifest and updated package in the registry. We recommend manually publish packages to the registry. See https://docs.platformio.org/en/latest/core/userguide/package/cmd_publish.html#cmd-package-publish
pio package publish --owner nanopb

@ivankravets Thanks. I have it on my worklist to reorganize the nanopb CI flow. But for now it will be easier to keep using the library.json, as I'm very short on time lately.
@hacker-cb I added you to the organization on PlatformIO.

@PetteriAimonen thanks.
I will write workflow for publishing nanopb_cpp.
For the nanopb - I think we can reuse same workflow later.

@PetteriAimonen please:

Add organisation secrets:

PLATFORMIO_USERNAME
PLATFORMIO_PASSWORD
with your username/password for pio account login command.
You can create separate pio account for the workflow, if you want...

Allow to use this secrets by the nanopb_cpp and nanopb repositories.

@hacker-cb please don't export PlatformIO username/password for CI services. There is https://docs.platformio.org/en/latest/envvars.html#envvar-PLATFORMIO_AUTH_TOKEN

@ivankravets , ok thanks.
So, @PetteriAimonen , please set PLATFORMIO_AUTH_TOKEN secret in this case.

@hacker-cb I won't have more time to work on nanopb this year except for emergencies. You can open another issue for future CI improvements if needed.


Format code with new rustfmt

New rustfmt.toml file is ready.
Please review and comment on the settings. These are mostly sane defaults.
For feature merge requests it would be obligatory to follow the format, sparing time on manual formatting, having an consistent code and preventing situations where someone accidentally pushes someone else's code that was just reformatted.
Because most of the code is authored by @leenozara , it would be the best for if he could run cargo fmt on the entire project and immediately push the formatted code.
Please note that for rustfmt versions before "1.3.3" fail to format kernel_ref.rs. The required version is available in today's nightly release, or can be downloaded from the rustfmt project repository.

@riemass the settings look good to me.
Give me a couple of days to think when to cargo fmt, whether before 0.3.1 release or after. Thanks!

Sounds good. You're welcome.

Just to update you on this, I'll be merging the config and doing a cargo fmt in the couple of days. Will confirm once I've done it.

@riemass Looks like there is a problem with rust-fmt and clippy on the last few nightly toolchain releases.
rustup component add rustfmt
error: component 'rustfmt' for target 'x86_64-unknown-linux-gnu' is unavailable for download for channel 'nightly'
If you require these components, please install and use the latest successful build version,
which you can find at https://rust-lang-nursery.github.io/rust-toolstate.

After determining the correct date, install it with a command such as:

    rustup toolchain install nightly-2018-12-27

Then you can use the toolchain with commands such as:

    cargo +nightly-2018-12-27 build

This prevents rust-fmt from being installed.
cargo +stable fmt works on the stable toolchain but throws a bunch of errors:
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.
Warning: Unknown configuration option `format_code_in_doc_comments`
Warning: can't set `wrap_comments = true`, unstable features are only available in nightly channel.
Warning: can't set `comment_width = 80`, unstable features are only available in nightly channel.
Warning: can't set `normalize_comments = false`, unstable features are only available in nightly channel.
Warning: can't set `format_strings = true`, unstable features are only available in nightly channel.
Warning: can't set `where_single_line = true`, unstable features are only available in nightly channel.
Warning: can't set `imports_indent = Block`, unstable features are only available in nightly channel.
Warning: can't set `imports_layout = HorizontalVertical`, unstable features are only available in nightly channel.
Warning: can't set `merge_imports = true`, unstable features are only available in nightly channel.
Warning: can't set `reorder_impl_items = true`, unstable features are only available in nightly channel.
Warning: can't set `match_arm_blocks = true`, unstable features are only available in nightly channel.
Warning: can't set `match_block_trailing_comma = true`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_upper_bound = 2`, unstable features are only available in nightly channel.
Warning: can't set `blank_lines_lower_bound = 0`, unstable features are only available in nightly channel.
Warning: can't set `version = Two`, unstable features are only available in nightly channel.
Warning: can't set `unstable_features = true`, unstable features are only available in nightly channel.
Warning: can't set `skip_children = false`, unstable features are only available in nightly channel.

Due to nightly being required. Files do get formatted however - just not using the settings we want.
Do you get the same problem on the latest rustc nightly?

That is a usual problem with tooling on nightly. The releases happen daily and often the tooling build breaks. As seen here not a single nightly in the last week did have both rustfmt and clippy. The release  nightly-2019-07-25 is the latest that features rustfmt.
As you are mentioning rustfmt and clippy, I can confirm that nightly-2019-07-17 formats the project regularly, and has both clippy and rustfmt.
cargo +nightly-2019-07-17 fmt
I tend to update nightly only on days all the plugins I use compile regularly and live with it.
I can make another MR with the unstable features taken out so we can have an easier transition towards stable once async/await gets stable.

Thanks for confirming. Let's go with your suggestion of removing unstable features and revisit once async/await is stable.

New MR created. Unstable had quite useful features. Hope to see them stabilized at some point.


added functions to extract Pixel and Plane metadata fields, useful fo…

added functions to extract Pixel and Plane metadata fields, useful for determining stage position and pixel scale

I added your improvements to the master branch. THx, Sebi


Add platform-android label for all flutter_tools android files

Label PRs that touch any *android* files in flutter_tool with platform-android.  In particular this should catch the template android directories.

[x] I read the Tree Hygiene wiki page, which explains my responsibilities.
[x] I read and followed the Flutter Style Guide, including Features we expect every widget to implement.
[x] I signed the CLA.
[ ] I listed at least one issue that this PR fixes in the description above.
[x] I updated/added relevant documentation (doc comments with ///).
[x] I added new tests to check the change I am making, or this PR is test-exempt.
[x] I followed the breaking change policy and added Data Driven Fixes where supported.
[x] All existing and new tests are passing.

If you need help, consider asking for advice on the #hackers-new channel on Discord.

@andrewkolos If you see tools PRs that are missing platform labels, please feel free to edit the labeler and add paths!

@andrewkolos If you see tools PRs that are missing platform labels, please feel free to edit the labeler and add paths!

TIL about .github/labeler.yml. Thanks!


Multi-GPU training example code has error

When running this code in Training on multiple GPUs with gluon,it has error.

Fixed.


NTR: olfactory sociosexual communication

We don't seem to have a process term to describe the pheromone peptides secreted by mice and other animals, e.g.
Kimoto et al. 2007. Sex- and strain-specific expression and vomeronasal activity of mouse ESP family peptides. Curr Biol. 17(21):1879-84.  PMID:17935991

Male mice secrete exocrine-gland-secreting peptide 1 (ESP1) from the extraorbital lacrimal gland into tear fluid [1]. Other mice detect ESP1 through sensory neurons in the vomeronasal organ (VNO), a secondary olfactory system that senses pheromonal information, including sex, strain, and species.

Please provide as much information as you can:

Suggested term label:
olfactory sociosexual communication

Definition (free text)
The use of external chemical cues called pheromones to send social and sexual information between members of the same species, leading to specific behavioral responses. Pheromones may be detected by two olfactory sensory circuits, the main olfactory pathway and the vomeronasal system.

Reference, in format PMID:#######
PMID:17935991, PMID: 29519850, GOC:krc

Parent term(s)
multi-multicellular organism process - GO:0044706

Children terms (if applicable) Should any existing terms that should be moved underneath this new proposed term?

Synonyms (please specify, EXACT, BROAD, NARROW or RELATED)

Cross-references

For enzymes, please provide RHEA and/or EC numbers.

Can also provide MetaCyc, KEGG, Wikipedia, and other links.

Any other information

Hi @krchristie
This seems to be indeed lacking.
A few thoughts:

Shouldn't 'GO:0071444 cellular response to pheromone' and/or GO:0007635 chemosensory behavior be parents?
In any case I would not use multi-multicellular organism process - GO:0044706 as a parent, as this will go away (see discussion for 'regulation #21432 - for some reason there is not ticket about the non-regulatory terms, or I cannot find it right now). I suggest using 'GO:0051703 biological process involved in intraspecies interaction between organisms' and possibly GO:0019098 reproductive behavior?

Thanks, Pascale

Hi @krchristie
This seems to be indeed lacking.
A few thoughts:
* Shouldn't 'GO:0071444 cellular response to pheromone'

I don't think we want this parentage because I want to be able to annotate the pheromones to the new term as well and it doesn't seem right to annotate the pheromone itself to a "response to pheromone" term.
and/or GO:0007635 chemosensory behavior be parents?
Good point. Looking at the child terms under chemosensory behavior, I think that the more specific term olfactory behavior is even more appropriate.

* In any case I would not use multi-multicellular organism process - GO:0044706 as a parent, as this will go away (see discussion for 'regulation #21432 - for some reason there is not ticket about the non-regulatory terms, or I cannot find it right now). I suggest using 'GO:0051703 biological process involved in intraspecies interaction between organisms' and possibly GO:0019098 reproductive behavior?

GO:0051703 biological process involved in intraspecies interaction between organisms

This term is fine.

and possibly GO:0019098 reproductive behavior?

reproductive behavior would be too specific because I need the new term to cover any social behavior, for example parenting behavior, not just that leading to reproduction. I'll update the definition to include more examples.
Thanks for the great suggestions @pgaudet

Actually, I'm not sure we want olfactory behavior as a parent either because I'm specifically trying to create a term that can be used for the pheromones. It seems odd to annotate the pheromone itself to olfactory behavior
olfactory behavior:
Def: The behavior of an organism in response to an odor.

olfactory behavior is part_of my proposed new term olfactory sociosexual communication though, but I don't think that's true either.

sounds reasonable

reproductive behavior would be too specific because I need the new term to cover any social behavior, for example parenting behavior,

Parenting behavior is a child of reproductive behavior (just pointing that out because it sounds like you had expected them to be separate?) I saw that recently and I was not sure that was right.
Anyhow, just wanted to add that I am OK with your other suggestions, and the main point of my response was about 'multi-multicellular organism process - GO:0044706'.
Thanks, Pascale

reproductive behavior would be too specific because I need the new term to cover any social behavior, for example parenting behavior,

Parenting behavior is a child of reproductive behavior (just pointing that out because it sounds like you had expected them to be separate?) I saw that recently and I was not sure that was right.

I was indeed thinking of reproductive behavior more specifically. Looking at the structure, I don't have any problem with the position of parenting behavior under reproductive behavior. I still don't think I want to assume that the only uses of these pheromones is reproductive behavior. It seems there could be social behaviors that are not reproductive behaviors, perhaps dominance hierarchies between members of the same sex...

Anyhow, just wanted to add that I am OK with your other suggestions, and the main point of my response was about 'multi-multicellular organism process - GO:0044706'.

Thanks for pointing this out. I'll use the parent term you suggested.


libappindicator

libappindicator1 must be installed for the Tray icon to be displayed. If it isn't, when the main window is closed, the app cannot be started again until the process is killed
if this happens I have to "sudo killall spotifywebplayer electron" to be able to restart the application
We have to check that libappindicator is installed before thinking about hiding the application

Fixed with commit aee8113


Bazel fetch issue while compiling Tensorflow

I'm compiling Tensorflow from source. After the configure step I'm facing the following error:

ERROR: com.google.devtools.build.lib.packages.BuildFileContainsErrorsException: error loading package '': Encountered error while reading extension file 'closure/defs.bzl': no such package '@io_bazel_rules_closure//closure': Error downloading [http://bazel-mirror.storage.googleapis.com/github.com/bazelbuild/rules_closure/archive/5ca1dab6df9ad02050f7ba4e816407f88690cf7d.tar.gz, https://github.com/bazelbuild/rules_closure/archive/5ca1dab6df9ad02050f7ba4e816407f88690cf7d.tar.gz] to /home/xyzuser/.cache/bazel/_bazel_xyzuser/cb1e63cb5e61cab49a9fd2f5ba92d003/external/io_bazel_rules_closure/5ca1dab6df9ad02050f7ba4e816407f88690cf7d.tar.gz: All mirrors are down: [java.lang.NullPointerException].

This stems from the bazel_clean_and_fetch() in configure file
bazel fetch "//tensorflow/... -//tensorflow/contrib/nccl/...       -//tensorflow/examples/android/..."
Same error replicates if I do bazel fetch //...
My system is behind a proxy and I've set HTTP_PROXY and HTTPS_PROXY in the env.
git rev-parse HEAD:
e946a6b63979a63f9e5a1d1603f6cc21d8aad1cf
bazel version:
Build label: 0.4.4- (@non-git)
Build target: bazel-out/local-opt/bin/src/main/java/com/google/devtools/build/lib/bazel/BazelServer_deploy.jar
Operating System:
Ubuntu 14.04.5 LTS
Any insights would be helpful as I'm new to Bazel and Tensorflow.
@jart @kchodorow

This looks like a bazel issue rather than a tensorflow issue. Have you seen this issue https://github.com/bazelbuild/bazel/issues/601
If not, I'd suggest filing a bug in the bazel product, because we don't have expertise on proxy settings here. Thanks!

A member of the TensorFlow team wrote Bazel's downloader. So we can continue triaging here for now.
It should absolutely not be doing that.
Can you please edit TensorFlow's WORKSPACE file so rules_closure only has a single URL in the URLs list? Then run bazel fetch again. It should now give you the full NullPointerException stack trace. At least I hope. Once you get that, can you please copy and paste it into this bug?

@jart Doing the above gives:

java.lang.RuntimeException: Unrecoverable error while evaluating node 'REPOSITORY_DIRECTORY:@io_bazel_rules_closure' (requested by nodes 'REPOSITORY:@io_bazel_rules_closure')
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:438)
at com.google.devtools.build.lib.concurrent.AbstractQueueVisitor$WrappedRunnable.run(AbstractQueueVisitor.java:501)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.RuntimeException: java.lang.NullPointerException
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1488)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:3018)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnector.connect(HttpConnector.java:113)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.establishConnection(HttpConnectorMultiplexer.java:301)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.connect(HttpConnectorMultiplexer.java:126)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:197)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:120)
at com.google.devtools.build.lib.bazel.repository.HttpArchiveFunction.fetch(HttpArchiveFunction.java:71)
at com.google.devtools.build.lib.rules.repository.RepositoryDelegatorFunction.compute(RepositoryDelegatorFunction.java:170)
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:373)
... 4 more
Caused by: java.lang.NullPointerException
at com.sun.security.ntlm.Client.type3(Client.java:161)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.buildType3Msg(NTLMAuthentication.java:241)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.setHeaders(NTLMAuthentication.java:216)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1643)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
... 12 more
java.lang.RuntimeException: Unrecoverable error while evaluating node 'REPOSITORY_DIRECTORY:@io_bazel_rules_closure' (requested by nodes 'REPOSITORY:@io_bazel_rules_closure')
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:438)
at com.google.devtools.build.lib.concurrent.AbstractQueueVisitor$WrappedRunnable.run(AbstractQueueVisitor.java:501)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.RuntimeException: java.lang.NullPointerException
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1488)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:3018)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnector.connect(HttpConnector.java:113)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.establishConnection(HttpConnectorMultiplexer.java:301)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.connect(HttpConnectorMultiplexer.java:126)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:197)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:120)
at com.google.devtools.build.lib.bazel.repository.HttpArchiveFunction.fetch(HttpArchiveFunction.java:71)
at com.google.devtools.build.lib.rules.repository.RepositoryDelegatorFunction.compute(RepositoryDelegatorFunction.java:170)
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:373)
... 4 more
Caused by: java.lang.NullPointerException
at com.sun.security.ntlm.Client.type3(Client.java:161)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.buildType3Msg(NTLMAuthentication.java:241)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.setHeaders(NTLMAuthentication.java:216)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1643)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
... 12 more

@jart Doing the above gives:
stacktrace.txt
java.lang.RuntimeException: Unrecoverable error while evaluating node 'REPOSITORY_DIRECTORY:@io_bazel_rules_closure' (requested by nodes 'REPOSITORY:@io_bazel_rules_closure')
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:438)
at com.google.devtools.build.lib.concurrent.AbstractQueueVisitor$WrappedRunnable.run(AbstractQueueVisitor.java:501)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.RuntimeException: java.lang.NullPointerException
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1488)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:3018)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnector.connect(HttpConnector.java:113)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.establishConnection(HttpConnectorMultiplexer.java:301)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.connect(HttpConnectorMultiplexer.java:126)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:197)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:120)
at com.google.devtools.build.lib.bazel.repository.HttpArchiveFunction.fetch(HttpArchiveFunction.java:71)
at com.google.devtools.build.lib.rules.repository.RepositoryDelegatorFunction.compute(RepositoryDelegatorFunction.java:170)
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:373)
... 4 more
Caused by: java.lang.NullPointerException
at com.sun.security.ntlm.Client.type3(Client.java:161)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.buildType3Msg(NTLMAuthentication.java:241)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.setHeaders(NTLMAuthentication.java:216)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1643)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
... 12 more
java.lang.RuntimeException: Unrecoverable error while evaluating node 'REPOSITORY_DIRECTORY:@io_bazel_rules_closure' (requested by nodes 'REPOSITORY:@io_bazel_rules_closure')
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:438)
at com.google.devtools.build.lib.concurrent.AbstractQueueVisitor$WrappedRunnable.run(AbstractQueueVisitor.java:501)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.RuntimeException: java.lang.NullPointerException
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1488)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at sun.net.www.protocol.http.HttpURLConnection.getHeaderField(HttpURLConnection.java:3018)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:489)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnector.connect(HttpConnector.java:113)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.establishConnection(HttpConnectorMultiplexer.java:301)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpConnectorMultiplexer.connect(HttpConnectorMultiplexer.java:126)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:197)
at com.google.devtools.build.lib.bazel.repository.downloader.HttpDownloader.download(HttpDownloader.java:120)
at com.google.devtools.build.lib.bazel.repository.HttpArchiveFunction.fetch(HttpArchiveFunction.java:71)
at com.google.devtools.build.lib.rules.repository.RepositoryDelegatorFunction.compute(RepositoryDelegatorFunction.java:170)
at com.google.devtools.build.skyframe.ParallelEvaluator$Evaluate.run(ParallelEvaluator.java:373)
... 4 more
Caused by: java.lang.NullPointerException
at com.sun.security.ntlm.Client.type3(Client.java:161)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.buildType3Msg(NTLMAuthentication.java:241)
at sun.net.www.protocol.http.ntlm.NTLMAuthentication.setHeaders(NTLMAuthentication.java:216)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream0(HttpURLConnection.java:1643)
at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1474)
at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:480)
... 12 more

Whoa. It looks like Java is having problems interoperating with Windows NT LAN Manager. I'm not sure if there's much Bazel or TensorFlow can do to help you unfortunately. It might be actionable in the sense that we could have done a better job reporting this error. I'll give it some thought and possibly send a patch to Bazel. But aside from that, I hope you don't mind if I close this one out. I'll reopen provided new information.

I solved this problem by using a CNTLM proxy and setting http_proxy and https_proxy like http://<IP_ADDRESS>:3128.
One strange thing is that bazel issued a warning saying that it ignores http_proxy while in fact not.
If you also experience certificate errors, find your cacerts file and insert the required certificate extracted using a browser or a similar tool.

Can you copy-paste the error message you're getting about it ignoring http_proxy?

Here is the output. The first thing is that warning. @kchodorow
But I have to repeat that it is in fact using the proxy information in http_proxy. Normally, our network restricts any connection to the external networks, only through HTTP(S) proxies.
user@hostname:~/tensorflow-1.1.0$ bazel fetch "//tensorflow/... -//tensorflow/contrib/nccl/... -//tensorflow/examples/android/..."
Warning: ignoring http_proxy in environment.
.........
INFO: Downloading http://bazel-mirror.storage.googleapis.com/github.com/google/protobuf/archive/2b7430d96aeff2bb624c8d52182ff5e4b9f7f18a.tar.gz: 626,737 bytes

Ah, yeah, that warning is from the Bazel client. http_proxy is unset because otherwise it could interfere with the gRPC connection Bazel's about to make to its server.  The server (which actually runs the build) still uses http_proxy.
It's harmless, but if you wanted to avoid it you could set HTTP_PROXY instead, the client only checks for http_proxy.

@onurgu hi, I have configured CNTLM and import cert by "keytool -import -alias github.com -keystore /opt/Java/jdk/jdk1.8.0_66/jre/lib/security/cacerts -file /opt/github.com.cer -storepass changeit"
but still report ERROR:
/opt/tensorflow-b1e174e4204e0661c9060dddd8ea7513cf7f9915/tensorflow/tensorboard/bower/BUILD:5:1: no such package '@iron_a11y_announcer//': Error downloading [https://github.com/polymerelements/iron-a11y-announcer/archive/v1.0.5.tar.gz] to /root/.cache/bazel/_bazel_root/c747169b3f42c871e04a0528172b17cb/external/iron_a11y_announcer/v1.0.5.tar.gz: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target and referenced by '//tensorflow/tensorboard/bower:bower'.

That sounds like a system issue and not a Bazel issue. You might have better luck with Stack Overflow.

If you are building tensorflow lite example in Android Studio. Just try command line like this
''
bazel build -c opt  tensorflow/examples/android:tensorflow_native_libs --crosstool_top=//external:android/crosstool --cpu=armeabi-v7a  --host_crosstool_top=@bazel_tools//tools/cpp:toolchain
''
which works for me!

Hi, I wonder if some stable workaround that solves this is available. I am getting
bazel build --config=opt --config=cuda //tensorflow/tools/pip_package:build_pip_package                          WARNING: The following configs were expanded more than once: [cuda]. For repeatable flags, repeats are counted twice and may lead to unexpected behavior. ERROR: error loading package '': Encountered error while reading extension file 'closure/defs.bzl': no such package '@io_bazel_rules_closure//closure': Error downloading [https://mirror.bazel.build/github.com/bazelbuild/rules_closure/archive/08039ba8ca59f64248bb3b6ae016460fe9c9914f.tar.gz, https://github.com/bazelbuild/rules_closure/archive/08039ba8ca59f64248bb3b6ae016460fe9c9914f.tar.gz] to /home/poldap/.cache/bazel/_bazel_poldap/ab48433ec0cf2637a14a5f25391c690d/external/io_bazel_rules_closure/08039ba8ca59f64248bb3b6ae016460fe9c9914f.tar.gz: All mirrors are down: [java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty] ERROR: error loading package '': Encountered error while reading extension file 'closure/defs.bzl': no such package '@io_bazel_rules_closure//closure': Error downloading [https://mirror.bazel.build/github.com/bazelbuild/rules_closure/archive/08039ba8ca59f64248bb3b6ae016460fe9c9914f.tar.gz, https://github.com/bazelbuild/rules_closure/archive/08039ba8ca59f64248bb3b6ae016460fe9c9914f.tar.gz] to /home/poldap/.cache/bazel/_bazel_poldap/ab48433ec0cf2637a14a5f25391c690d/external/io_bazel_rules_closure/08039ba8ca59f64248bb3b6ae016460fe9c9914f.tar.gz: All mirrors are down: [java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty] INFO: Elapsed time: 16.599s INFO: 0 processes.
and have been stuck with this for some hours. The only thing I have not tested (at least not fully) is that of @VictorGaiva since I am reluctant to uninstall CUDA, as my understanding is that it does not depend on the java you're using at all (I have changed to using oracle-java8-installer, however).

@poldap Exactly the same issues and none workaround could solve it for me. :(

It might be possible the Google webserver dropped support for older SSL
clients, or the system JVM favors weak algorithms. In that case we might
want to change the bazel downloader to try different URLs, rather than
aborting.
On Thu, May 10, 2018, 6:44 AM Wei Wang<EMAIL_ADDRESS>wrote:

@poldap https://github.com/poldap Exactly the same issues and none
workaround could solve it for me. :(
—
You are receiving this because you modified the open/close state.
Reply to this email directly, view it on GitHub
https://github.com/tensorflow/tensorflow/issues/7497#issuecomment-388056444,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AADAbg_VmMA-f_AfMvI5K02Gty8_g0Wsks5txERNgaJpZM4MAZ1k
.

Nope. It's just an Ubuntu bug.

https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1396760
https://stackoverflow.com/a/30699960

Run:
sudo /var/lib/dpkg/info/ca-certificates-java.postinst configure

See also:

https://www.ssllabs.com/ssltest/analyze.html?d=mirror.bazel.build&hideResults=on

Thanks @jart. I had found that one already and it wasn't the case, but it surely could have been.
For the lost souls that end up here, the reason why this was happening is that I (wrongly) assumed that the Bazel repo for apt would work just fine for Ubuntu 18.04, but it did not (and severly, too). In fact, installing bazel that way overwrote some critical paths of the openjdk-8-jre or oracle-java8-installer installations, leaving basic functionalities such as keytool unaccessible. The fix was to remove bazel, uninstall / reinstally java, and simply use the recommended installer from Bazel's website, which does not raise these issues. Also, if you don't use Bazel for anything else, I would recommend installing it locally your home folder and with its own openjdk install, which reduces all the java mess to a bare minimum.

@poldap can you elaborate more on this

if you don't use Bazel for anything else, I would recommend installing it locally your home folder and with its own openjdk install, which reduces all the java mess to a bare minimum.

What do you mean exactly? How can I do that?
Thanks

Thank you very much @poldap, I had exactly the same problem and your comment saved me many (more) hours of trial and error ... !

This solved it for me.

Unable to Build getting same error.
WARNING: ignoring http_proxy in environment.
..........
ERROR: error loading package '': Encountered error while reading extension file 'closure/defs.bzl': no such package '@io_bazel_rules_closure//closure': Error downloading [https://mirror.bazel.build/github.com/bazelbuild/rules_closure/archive/dbb96841cc0a5fb2664c37822803b06dab20c7d1.tar.gz, https://github.com/bazelbuild/rules_closure/archive/dbb96841cc0a5fb2664c37822803b06dab20c7d1.tar.gz] to /home/sri/.cache/bazel/_bazel_sri/1675514129b6733b5e90bafa6d74fa17/external/io_bazel_rules_closure/dbb96841cc0a5fb2664c37822803b06dab20c7d1.tar.gz: All mirrors are down: [sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
ERROR: error loading package '': Encountered error while reading extension file 'closure/defs.bzl': no such package '@io_bazel_rules_closure//closure': Error downloading [https://mirror.bazel.build/github.com/bazelbuild/rules_closure/archive/dbb96841cc0a5fb2664c37822803b06dab20c7d1.tar.gz, https://github.com/bazelbuild/rules_closure/archive/dbb96841cc0a5fb2664c37822803b06dab20c7d1.tar.gz] to /home/sri/.cache/bazel/_bazel_sri/1675514129b6733b5e90bafa6d74fa17/external/io_bazel_rules_closure/dbb96841cc0a5fb2664c37822803b06dab20c7d1.tar.gz: All mirrors are down: [sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
INFO: Elapsed time: 19.941s
FAILED: Build did NOT complete successfully (0 packages loaded)
Tried solution by  @poldap

Hi, yours does not seem to be the same problem. In all other cases, something prompted the following error in java:
java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
I don't know if what you're getting is an equivalent complaint from the JDK included in the bazel binary, but then, it would be rather weird that they did not include their own certificate in the cacerts... Are you sure you installed bazel using https://docs.bazel.build/versions/master/install-ubuntu.html#install-with-installer-ubuntu (i.e., section Installing using binary installer).
Hope this helps.

Hi，@poldap，i use the method u said, i still occur the problem like jdk certs problem....
 java.io.IOException: Error downloading [https://github.com/bazelbuild/bazel-skylib/releases/download/0.8.0/bazel-skylib.0.8.0.tar.gz] to /home/x00545628/.cache/bazel/_bazel_x00545628/53dc32336872df9c7e614eb7104489d7/external/bazel_skylib/bazel-skylib.0.8.0.tar.gz: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target


Memory leak issue

As you aware C/C++ does not have automatic garbage collectorer like java. People like me, might use this project for handeling big data and end up with losing 5-10GB of coustly SSD storage in memory leak.
You might achieve garbage collection by using class and object. A possible way is to keep track of pointer reference in class member and in destructor of class free(ref[0]);

This project was made solely for C, hence there is no class as C is not an OOP language. Using classes would make numc unusable in C. However your point is very good, I will see if I can make any garbage collector using struct. For now you can manually free any dynamically allocated memory in main.c, I will try to put in a simple de-allocation in the next commit.
If you wish to use something similar to numc in C++ with class/object, you can also check out this awesome project by David Pilger.

Added function for garbage collection:
https://github.com/oishikm/numc/blob/fe67d573f1ceef79c6bac70d585898fa3337bba9/numc.h#L17


TypeError: numpy_to_image() takes exactly 2 arguments (1 given)

Hi, I am using ros kenetic in Linux 16.04 LTS, and trying to convert numpy array to ros image message. I used the code like:
 img_msg_to_be_publish = ros_numpy.msgify(Image, img_array)

But I get the error:
[ERROR] [1575536397.176668]: bad callback: <bound method Subscriber.callback of <message_filters.Subscriber object at 0x7f03cbe1cbd0>>
Traceback (most recent call last):
  File "/opt/ros/kinetic/lib/python2.7/dist-packages/rospy/topics.py", line 750, in _invoke_callback
    cb(msg)
  File "/opt/ros/kinetic/lib/python2.7/dist-packages/message_filters/__init__.py", line 75, in callback
    self.signalMessage(msg)
  File "/opt/ros/kinetic/lib/python2.7/dist-packages/message_filters/__init__.py", line 57, in signalMessage
    cb(*(msg + args))
  File "/opt/ros/kinetic/lib/python2.7/dist-packages/message_filters/__init__.py", line 224, in add
    self.signalMessage(*msgs)
  File "/opt/ros/kinetic/lib/python2.7/dist-packages/message_filters/__init__.py", line 57, in signalMessage
    cb(*(msg + args))
  File "/home/robot/catkin_ws/src/pose_tracking/scripts/pose_tracker.py", line 87, in callback
    img_msg_to_be_publish = ros_numpy.msgify(Image, processed_img)
  File "/home/robot/catkin_ws/src/ros_numpy/src/ros_numpy/registry.py", line 51, in msgify
    return conv(numpy_obj, *args, **kwargs)
TypeError: numpy_to_image() takes exactly 2 arguments (1 given)

Do I use it in a wrong way? Thank you in advance

Hi mymrblack,
I was able to fix this by supplying the 'encoding' argument. My incoming Image message used the encoding of 'rgb8', so successfully running your function would look like (assuming encoding of 'rgb8'):
img_msg_to_be_publish = ros.numpy.msgify(Image, img_array, encoding='rbg8')


Use higher entropy for the code in the code flow

This issue is imported from pivotal - Originaly created at Nov 19, 2020 by Bart Geesink
The current entropy for the code in the code flow is quite low. At least 128 bits is required:
https://tools.ietf.org/html/rfc6819#section-<IP_ADDRESS>
https://tools.ietf.org/html/rfc6749#section-10.10

It's still too low, and not reaching 128 bits (85 bits is now achieved) (Bart Geesink - Dec 3, 2020)

https://github.com/OpenConext/OpenConext-oidcng/commit/aa40764a49c03ce67e7c3377082fecb0ce0fcb8e (Okke Harsta - Dec 3, 2020)

nearly there, I now have 109 bits of entropy :) (Bart Geesink - Dec 3, 2020)

Yes!  (Bart Geesink - Dec 4, 2020)


Angular 9: Get instance of service to another service without using constructor

I am using microsoft adaptive card 2.0. I need to create some action service and pass that service to adaptive card module and from there it will execute. But while implementing I am facing issue. That action service has dependency on other services and we cant pass that dependencies from constructor.
ActionService.js
import ServiceX from '../'
import ServiceZ from '../'

export Class ActionService{
   constructor(
    private serviceX: ServiceX,
    private serviceZ: ServiceZ
)
 execute(){
   this.serviceX.action()
 }
}

AdaptiveCard service
import { ActionService } from '../'
import * as AC from 'adaptivecards';

export class AdaptiveCardService{
AC.GlobalRegistry.actions.register('name-of-action', ActionService);
}

Here the problem is, from adaptive module calling Action service using NEW keyword and not passing dependencies as arguments. Hence in action service inside execute function, servicex getting undefined.
Is there any way to inject services without calling in constructor .
I referred below url to inject it but it is supported only in Angular 2
Getting instance of service without constructor injection

@dclaux can you take a first pass at this one? Thanks

This looks to be a question about integrating Adaptive Cards into an Angular App; right now, we don't support that scenario out-of-box, so I'd suggest asking the question in an Angular community.


Add LibreOffice Fresh

I have checked that this app does not already have a pending request and has not previously been declined.

Previous (declined) request in #453 was for the tar zipped deb direct from libreoffice.org rather than the Fresh PPA published by Ubuntu's Libreoffice packaging team.

App Name: libreoffice

Download URL: ppa:libreoffice/ppa

Website URL: https://www.libreoffice.org/

App Summary: LibreOffice Fresh is the latest (non-alpha/beta) release of the newest series of LibreOffice — a free and powerful office suite.

When the original request came in, there had been a delay in releasing the 7.4 series to the PPA. This is no longer the case and the PPA is tracking the website closely.
I've not noticed any significant delays previously, so I think the PPA makes a worthwhile substitute for the website and is more easily consumed.

Closed by #620.


engine,execution: range-vector queries with non constant params

TODO:

add predict_linear
allow non-constant parameters
equate - and + Inf in tests ( its a known failure if  we divide by a sum that sums to -0 we return +0 and +inf then )

Making the parameter non-constant in matrix_selector is slightly trickier and is deferred to follow-up PR