kube-ovn-pinger is stuck on ContainerCreating state

(Thank you very much for all maintainers and contributors for Kube-OVN.)
Expected Behavior
If I am not wrong, it would be expected that all kube-ovn-cni*, kube-ovn-controller*, kube-ovn-monitor*, kube-ovn-pinger*, ovn-central* and ovs-ovn* pods to be running normally after an installation of Kube-OVN.
Actual Behavior
One of the kube-ovn-pinger pods is stuck in the ContainerCreating state for a long time:

Steps to Reproduce the Problem
I am not sure how to reproduce this problem, I noticed recently a node in the cluster having problems to run the kube-ovn-pinger pod after restarting the machines that are part of the cluster.
Please let me know if you have any suggestion on how to start creating a reproducer for this problem...

I installed the cluster using kubeadmin, based on the containerd runtime. I followed the tutorial in https://www.howtogeek.com/devops/how-to-start-a-kubernetes-cluster-from-scratch-with-kubeadm-and-kubectl/ as a baseline. I also allowed the master node to host pods:> sudo apt update –y
> sudo apt upgrade –y
> sudo apt install -y openvswitch-common openvswitch-switch openvswitch-vtep openvswitch-ipsec openvswitch-pki kubeadm kubectl kubelet jq ovn-common arping tcpdump net-tools iperf3 httperf
> sudo apt-mark hold kubeadm kubectl kubelet

> sudo swapoff -a  # For all nodes
> sudo sysctl net.ipv4.ip_forward=1  # For all nodes
> sudo reboot  # For all nodes

> sudo kubeadm init --service-cidr=<IP_ADDRESS>/24 --cri-socket unix:///var/run/containerd/containerd.sock
> mkdir -p $HOME/.kube
> sudo cp -i /etc/kubernetes/admin.conf $HOME/.kube/config
> sudo chown $(id -u):$(id -g) $HOME/.kube/config
> kubectl taint nodes --all node-role.kubernetes.io/control-plane-

I installed the Kube-OVN based on the instructions in https://kubeovn.github.io/docs/v1.11.x/en/start/one-step-install/

I modified the following installation parameters SVC_CIDR, JOIN_CIDR, PINGER_EXTERNAL_ADDRESS and PINGER_EXTERNAL_DOMAIN:> wget https://raw.githubusercontent.com/kubeovn/kube-ovn/release-1.10/dist/images/install.sh
> sed -i 's~<IP_ADDRESS>/12~<IP_ADDRESS>/24~g' install.sh
> sed -i 's~<IP_ADDRESS>/16~<IP_ADDRESS>/24~g' install.sh
> sed -i 's~<IP_ADDRESS>/16~<IP_ADDRESS>/24~g' install.sh
> sed -i 's~<IP_ADDRESS>~<IP_ADDRESS>~g' install.sh
> sed -i 's~alauda.cn~bristol.ac.uk~g' install.sh
> bash install.sh

I added the nodes to the cluster:> sudo kubeadm join …:6443 --token … --discovery-token-ca-cert-hash …

I installed multus based on the instructions in https://github.com/k8snetworkplumbingwg/multus-cni/blob/master/docs/quickstart.md> git clone https://github.com/k8snetworkplumbingwg/multus-cni.git && cd multus-cni
> cat ./deployments/multus-daemonset-thick.yml | kubectl apply -f -

Additional Info

Kubernetes version:
Output of kubectl version:
  clientVersion:
    buildDate: "2023-03-15T13:40:17Z"
    compiler: gc
    gitCommit: 9e644106593f3f4aa98f8a84b23db5fa378900bd
    gitTreeState: clean
    gitVersion: v1.26.3
    goVersion: go1.19.7
    major: "1"
    minor: "26"
    platform: linux/amd64
  kustomizeVersion: v4.5.7
  serverVersion:
    buildDate: "2023-03-15T13:33:12Z"
    compiler: gc
    gitCommit: 9e644106593f3f4aa98f8a84b23db5fa378900bd
    gitTreeState: clean
    gitVersion: v1.26.3
    goVersion: go1.19.7
    major: "1"
    minor: "26"
    platform: linux/amd64

kube-ovn version:
kubeovn/kube-ovn:v1.10.10 (Images of the pods)

operation-system/kernel version:
Output of awk -F '=' '/PRETTY_NAME/ { print $2 }' /etc/os-release: Ubuntu 22.04.2 LTS
Output of uname -r: 5.15.0-1030-kvm

$ kubectl describe pod kube-ovn-pinger-l7vg2 -n kube-system
Name:             kube-ovn-pinger-l7vg2
Namespace:        kube-system
Priority:         0
Service Account:  ovn
Node:             kube-master/<IP_ADDRESS>
Start Time:       Wed, 24 May 2023 09:40:01 +0000
Labels:           app=kube-ovn-pinger
                  component=network
                  controller-revision-hash=54dd6c89dc
                  pod-template-generation=4
                  type=infra
Annotations:      kubectl.kubernetes.io/restartedAt: 2023-05-22T17:19:47Z
                  ovn.kubernetes.io/allocated: true
                  ovn.kubernetes.io/cidr: <IP_ADDRESS>/24
                  ovn.kubernetes.io/gateway: <IP_ADDRESS>
                  ovn.kubernetes.io/ip_address: <IP_ADDRESS>
                  ovn.kubernetes.io/logical_router: ovn-cluster
                  ovn.kubernetes.io/logical_switch: ovn-default
                  ovn.kubernetes.io/mac_address: 00:00:00:41:5B:08
                  ovn.kubernetes.io/pod_nic_type: veth-pair
                  ovn.kubernetes.io/routed: true
Status:           Pending
IP:
IPs:              <none>
Controlled By:    DaemonSet/kube-ovn-pinger
Containers:
  pinger:
    Container ID:
    Image:         kubeovn/kube-ovn:v1.10.10
    Image ID:
    Port:          <none>
    Host Port:     <none>
    Command:
      /kube-ovn/kube-ovn-pinger
    Args:
      --external-address=<IP_ADDRESS>
      --external-dns=bristol.ac.uk
      --logtostderr=false
      --alsologtostderr=true
      --log_file=/var/log/kube-ovn/kube-ovn-pinger.log
      --log_file_max_size=0
    State:          Waiting
      Reason:       ContainerCreating
    Ready:          False
    Restart Count:  0
    Limits:
      cpu:     200m
      memory:  400Mi
    Requests:
      cpu:     100m
      memory:  100Mi
    Environment:
      ENABLE_SSL:  false
      POD_IP:       (v1:status.podIP)
      HOST_IP:      (v1:status.hostIP)
      POD_NAME:    kube-ovn-pinger-l7vg2 (v1:metadata.name)
      NODE_NAME:    (v1:spec.nodeName)
    Mounts:
      /etc/localtime from localtime (rw)
      /etc/openvswitch from host-config-openvswitch (rw)
      /lib/modules from host-modules (ro)
      /run/openvswitch from host-run-ovs (rw)
      /sys from host-sys (ro)
      /var/log/kube-ovn from kube-ovn-log (rw)
      /var/log/openvswitch from host-log-ovs (rw)
      /var/log/ovn from host-log-ovn (rw)
      /var/run/openvswitch from host-run-ovs (rw)
      /var/run/ovn from host-run-ovn (rw)
      /var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-phwf4 (ro)
      /var/run/tls from kube-ovn-tls (rw)
Conditions:
  Type              Status
  Initialized       True
  Ready             False
  ContainersReady   False
  PodScheduled      True
Volumes:
  host-modules:
    Type:          HostPath (bare host directory volume)
    Path:          /lib/modules
    HostPathType:
  host-run-ovs:
    Type:          HostPath (bare host directory volume)
    Path:          /run/openvswitch
    HostPathType:
  host-run-ovn:
    Type:          HostPath (bare host directory volume)
    Path:          /run/ovn
    HostPathType:
  host-sys:
    Type:          HostPath (bare host directory volume)
    Path:          /sys
    HostPathType:
  host-config-openvswitch:
    Type:          HostPath (bare host directory volume)
    Path:          /etc/origin/openvswitch
    HostPathType:
  host-log-ovs:
    Type:          HostPath (bare host directory volume)
    Path:          /var/log/openvswitch
    HostPathType:
  kube-ovn-log:
    Type:          HostPath (bare host directory volume)
    Path:          /var/log/kube-ovn
    HostPathType:
  host-log-ovn:
    Type:          HostPath (bare host directory volume)
    Path:          /var/log/ovn
    HostPathType:
  localtime:
    Type:          HostPath (bare host directory volume)
    Path:          /etc/localtime
    HostPathType:
  kube-ovn-tls:
    Type:        Secret (a volume populated by a Secret)
    SecretName:  kube-ovn-tls
    Optional:    true
  kube-api-access-phwf4:
    Type:                    Projected (a volume that contains injected data from multiple sources)
    TokenExpirationSeconds:  3607
    ConfigMapName:           kube-root-ca.crt
    ConfigMapOptional:       <nil>
    DownwardAPI:             true
QoS Class:                   Burstable
Node-Selectors:              kubernetes.io/os=linux
Tolerations:                 node.kubernetes.io/disk-pressure:NoSchedule op=Exists
                             node.kubernetes.io/memory-pressure:NoSchedule op=Exists
                             node.kubernetes.io/not-ready:NoExecute op=Exists
                             node.kubernetes.io/pid-pressure:NoSchedule op=Exists
                             node.kubernetes.io/unreachable:NoExecute op=Exists
                             node.kubernetes.io/unschedulable:NoSchedule op=Exists
Events:
  Type    Reason          Age                    From     Message
  ----    ------          ----                   ----     -------
  Normal  SandboxChanged  109s (x6740 over 24h)  kubelet  Pod sandbox changed, it will be killed and re-created.

(CC @JuanMaParraU)

Can you attach the log of kube-ovn-cni on the node that the pinger cannot start

@abravalheri the kube-ovn-cni didn't recieve the add pod request form kubelet, you need to check the log of kubelet to see why it didn't call cni to add network

I will close this issue for now. I decided to reinstall everything from scratch and things seem to be working now.
Thank you very much for the help


Replcate hamburger menu link with correct url

When clicking the nav hamburger menu, you're directed to http://titco.org/ which is a blank page.
It appears that this link is intended to point to the home page.

I suggest removing or hiding the hamburger menu until we’ve got something to put there.

Removed the hamburger menu. Refactored the 's CSS and HTML. changed the style of the 'records' link to make it look more like a button located in the nav. Open to feedback about this change.


Remove 'illuminate/support' package in favor of just arrays

Fixes #62!
PHPUnit 5.7.23 by Sebastian Bergmann and contributors.

........................                                          24 / 24 (100%)

Time: 243 ms, Memory: 8.00MB

OK (24 tests, 27 assertions)

Codecov Report

Merging #63 into master will not change coverage.
The diff coverage is 100%.

@@           Coverage Diff           @@
##             master    #63   +/-   ##
=======================================
  Coverage       100%   100%
+ Complexity       67     66    -1
=======================================
  Files             7      7
  Lines           166    185   +19
=======================================
+ Hits            166    185   +19

Impacted Files
Coverage Δ
Complexity Δ

src/RestClient.php
100% <100%> (ø)
40 <0> (-1)
:arrow_down:

src/Exception/InvalidRoute.php
100% <0%> (ø)
1% <0%> (ø)
:arrow_down:

src/RestPool.php
100% <0%> (ø)
8% <0%> (ø)
:arrow_down:

src/RestResource.php
100% <0%> (ø)
10% <0%> (ø)
:arrow_down:

src/Exception/ResourceNotImplemented.php
100% <0%> (ø)
1% <0%> (ø)
:arrow_down:

src/Auth/BearerAuth.php
100% <0%> (ø)
3% <0%> (ø)
:arrow_down:

src/Auth/BasicAuth.php
100% <0%> (ø)
3% <0%> (ø)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b7a73d4...619059c. Read the comment docs.

@hernandev what do you think about this refactor? Sounds pretty good for me!

I don't mind the change since it's little code using collections, I personally prefer to do $foo->get('bar', default here) instead of array key gets and whatever.
One idea:
Illuminate/support has a array_get function that may be used instead of the array_key_exists and others.
Creating a pollyfill for this function would allow illuminate support to be optional.

If theres no other places where collections are used, go aheas

If theres no other places where collections are used, go aheas

Based on that, we're moving forward.


cirq.google.api is the new cirq.api.google

Exterminate all cirq.api.google references
Welcome to our new cirq.google.api

Are we going to delete the cirq/api/google directory in the future?

Yes.  Do you foresee a problem with that?


No git tags since v0.265.0

Package

[ ] lucide
[ ] lucide-angular
[ ] lucide-flutter
[ ] lucide-preact
[ ] lucide-react
[ ] lucide-react-native
[ ] lucide-solid
[ ] lucide-svelte
[ ] lucide-vue
[ ] lucide-vue-next
[ ] Figma plugin
[X] source/main
[ ] other/not relevant

Version
All versions after v0.265.0
Browser

[ ] Chrome/Chromium
[ ] Firefox
[ ] Safari
[ ] Edge
[ ] iOS Safari
[ ] Opera
[ ] Other/not relevant

Operating system

[ ] Windows
[ ] Linux
[ ] macOS
[ ] Other/not relevant

Description
There are no git tags set anymore for versions after v0.265.0. Is this intended? Currently only the GitHub Releases can be used to determine which commit belongs to which version.
Steps to reproduce
Look at the git tags of this repository and compare to latest released version of lucide
Checklist

[X] I have searched if someone has submitted a similar issue before and there weren't any. (Please make sure to also search closed issues, as this issue might already have been resolved.)

I can see the latest tags alright: https://github.com/lucide-icons/lucide/tags

I am sorry, I did not notice that you removed the v prefix in the tag name. I was looking at an alphabetically sorted list of all tags, that is why the tags didn't appear.


Add the javascript application for ledger

Add the asset-transfer-ledger-queries javascript application.
Update the CI script to run it against go and javascript chaincode.
Signed-off-by: Bret Harrison<EMAIL_ADDRESS>

@harrisob It looks like nothing was changed in the last force push, maybe you forgot to add the files...


werf: 1.2.198 -> 1.2.199

Automatic update generated by nixpkgs-update tools. This update was made based on information from https://github.com/werf/werf/releases.
meta.description for werf is: GitOps delivery tool
meta.homepage for werf is: https://werf.io
meta.changelog for werf is: https://github.com/werf/werf/releases/tag/v1.2.199
Updates performed

Golang update

To inspect upstream changes

Release on GitHub

Compare changes on GitHub

Impact

Checks done (click to expand)

built on NixOS
The tests defined in passthru.tests, if any, passed
found 1.2.199 with grep in /nix/store/fg25fam5iidrj2f7nbq0mnavmp5cad2z-werf-1.2.199
found 1.2.199 in filename of file in /nix/store/fg25fam5iidrj2f7nbq0mnavmp5cad2z-werf-1.2.199

Rebuild report (if merged into master) (click to expand)

1 total rebuild path(s)

1 package rebuild(s)

First fifty rebuilds by attrpath
werf

Instructions to test this update (click to expand)

Either download from Cachix:
nix-store -r /nix/store/fg25fam5iidrj2f7nbq0mnavmp5cad2z-werf-1.2.199 \
  --option binary-caches 'https://cache.nixos.org/ https://nix-community.cachix.org/' \
  --option trusted-public-keys '
  nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(The Cachix cache is only trusted for this store-path realization.)
For the Cachix download to work, your user must be in the trusted-users list or you can use sudo since root is effectively trusted.
Or, build yourself:
nix-build -A werf https://github.com/r-ryantm/nixpkgs/archive/98e5bdd02ed4d7f61fc851ad36bc29863731dcdd.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:
ls -la /nix/store/fg25fam5iidrj2f7nbq0mnavmp5cad2z-werf-1.2.199
ls -la /nix/store/fg25fam5iidrj2f7nbq0mnavmp5cad2z-werf-1.2.199/bin

Pre-merge build results
We have automatically built all packages that will get rebuilt due to
this change.
This gives evidence on whether the upgrade will break dependent packages.
Note sometimes packages show up as failed to build independent of the
change, simply because they are already broken on the target branch.
Result of nixpkgs-review run on x86_64-linux 1

1 package built:

werf

Maintainer pings
cc @azahi for testing.

@ofborg build werf werf.passthru.tests

Result of nixpkgs-review pr 214435 run on x86_64-linux 1

1 package built:

werf


🐛 Updated dark theme style for change theme dropdown

fixes #17342

Removed margin in the dropdown to make it symmetric
Added style for dark theme

Screengrab
https://github.com/TryGhost/Ghost/assets/34619861/592fedf8-6511-435a-b32a-2edfaab09109

🤖 Generated by Copilot at af0a1e9
This pull request improves the appearance and alignment of dropdowns in the dark theme of the admin app. It updates the app-dark.css and components/dropdowns.css files with new and modified CSS rules.

@minimaluminium Any update on the merge status

We've released an updated settings UI, so this is no longer needed 🙂


Fix #7

Here is an attempt at fixing #7 (and fixing the file permissions while I'm at it)

Looks good. Thanks a lot.


allow adding characters without a sprite

This will make it possible to add invisible objects to tiles and simplifies interaction with them.

Closed with Version 2.17.0.
Be aware that even though characters without sprites can be added, those characters can't be moved in the normal way (calling move or one of the automatic movement methods like moveTo or moveRandomly), but only relocated via setTilePosition.


generic feed detection

https://perishablepress.com (by Jeff Starr) is a WordPress site, so i don't know what Jeff did here, but the feed is not detected - there is a link in the HTML however...
RSS
i'm not suggesting that a feed parser be written for this specific website, however i wonder if a generic parser for such a case may be useful elsewhere - given i don't know JS at all, i'm not able to write one, but i'm thinking along the lines of...
(?i)href="(feed|rss|atom)"
...and then just prepending the domain

i'll take a look and try to find out, why the feed isn't being detected.

Hi again.
i recently added a new default rule, which tries to detect rss links which dont have any type identifiers (like the one on the wordpress site). But it only gets added on the inital addon installation, which is why you havent seen it yet. But you can simply add it. Here are the relevant parts.
JS Code
const feeds = [];
document.querySelectorAll('a').forEach( (link) => {
if(typeof link.href === 'string'){
	for( word of ['rss','feed','atom'] ){
		if(link.innerText.toLowerCase().indexOf(word) > -1){
			feeds.push(link.href);
		}
	}
}
});
return feeds;

URL RegEx:
^https:\/\/.*
Both can also be found in the custom-feed-detectors.json
The result should look like this:

Thanks again for the feedback.

ha! i looked in custom-feed-detectors.json before i opened this issue for such a rule but i apparently missed it - sorry about that :)


The env gym_super_mario_bros.

Hello，I can't find the env gym_super_mario_bros.
Is that the gym env written by yourself?
And could I have a copy?
My Email is<EMAIL_ADDRESS>Best wishes!

Hello，I can't find the env gym_super_mario_bros.
Is that the gym env written by yourself?
And could I have a copy?
My Email is<EMAIL_ADDRESS>Best wishes!

you can find the environment in this address: gym-super-mario-bros

you can find the environment in this address: gym-super-mario-bros

That's it! You solve my problem. Thank you very much!


Error with go1.16 in TestChunkDiskMapper_WriteChunk_Chunk_IterateChunks

@eclipseo reported

I've got another error following:

github.com/prometheus/prometheus/tsdb/chunks
--- FAIL: TestChunkDiskMapper_WriteChunk_Chunk_IterateChunks (0.01s)
panic: runtime error: slice bounds out of range [:104326] with capacity 104293 [recovered]
	panic: runtime error: slice bounds out of range [:104326] with capacity 104293

goroutine 20 [running]:
testing.tRunner.func1.2(0x555db3ac0a40, 0xc0000d20d8)
	/usr/lib/golang/src/testing/testing.go:1144 +0x332
testing.tRunner.func1(0xc000086900)
	/usr/lib/golang/src/testing/testing.go:1147 +0x4b6
panic(0x555db3ac0a40, 0xc0000d20d8)
	/usr/lib/golang/src/runtime/panic.go:965 +0x1b9
github.com/prometheus/prometheus/tsdb/chunks.TestChunkDiskMapper_WriteChunk_Chunk_IterateChunks(0xc000086900)
	/builddir/build/BUILD/prometheus-2.24.1/_build/src/github.com/prometheus/prometheus/tsdb/chunks/head_chunks_test.go:122 +0xc9c
testing.tRunner(0xc000086900, 0x555db3ad7188)
	/usr/lib/golang/src/testing/testing.go:1194 +0xef
created by testing.(*T).Run
	/usr/lib/golang/src/testing/testing.go:1239 +0x2b3
exit status 2
FAIL	github.com/prometheus/prometheus/tsdb/chunks	0.015s

Originally posted by @eclipseo in https://github.com/prometheus/prometheus/issues/8393#issuecomment-764948396

@codesome I can reproduce this locallhy with go1.16beta1. We need to triage that ASAP to know if it is a bug on our end or a regression in go that we have to report before the final release.

@codesome I can reproduce this locallhy with go1.16beta1. We need to triage that ASAP to know if it is a bug on our end or a regression in go that we have to report before the final release.

Still present with the final go1.16, @bwplotka @codesome can you have a look here? Thanks!

Since go1.16
The byte slice returned by ioutil.ReadFile no longer has an extra 512 bytes capacity.
https://github.com/golang/go/commit/3d913a926675d8d6fcdc3cfaefd3136dfeba06e1
The crashed test expects that the 34 bytes extra capacity to be 0 padded.
https://github.com/prometheus/prometheus/pull/6830

Since go1.16
The byte slice returned by ioutil.ReadFile no longer has an extra 512 bytes capacity.
golang/go@3d913a9
The crashed test expects that the 34 bytes extra capacity to be 0 padded.
#6830

Awesome finding! Are you willing to propose a fix?

I'm not familiar deep inside the tsdb.
Why do we need to check that the capacity is 0 padded?
https://github.com/prometheus/prometheus/blob/1fac1c783bf6bc19d6883e7cb413fbf0f6f1381a/tsdb/chunks/head_chunks_test.go#L121-L124

Why do we need to check that the capacities are 0 padded?

The files are preallocated in Windows but the file might not be full. So all 0 header marks the end of the file.

Why do we need to check that the capacities are 0 padded?

The files are preallocated in Windows but the file might not be full. So all 0 header marks the end of the file.

This is not the same files. Those specific files are also preallocated on linux.

Ack, I can take a look

Fixed https://github.com/prometheus/prometheus/pull/8538
Rest of tsdb tests passed for me on Go1.6


Add PodRun Model

// specific implementation of how this maintains a log of run metrics is up to implementation
// likely to be stored in memory as this is likely quite cheap
pub struct RunMetricsLogging {
   // pod memory, cpu etc usage metric info
}

pub struct PodRun<'a, T: Orchestrator> {
	orchestrator: &'a T
	pod_job: &'a PodJob
        metric_logging: RunMetricsLogging
}

impl PodRun {
    fn new()
    fn get_status() -> RunStatus;
    fn memory_usage_history() -> Vec<<TimeStamp, u64>>; // fix the signature
    fn cpu_usage_history() -> Vec<<TimeStamp, u64>>; // fix the signature
    // if they are to be probed together, they ought to be returned together

    // concurrency / asynchronous interface
    fn check_result() -> Option<PodResult>  // non-hanging
    fn wait_for_result() -> PodResult // hanging
}

impl OrcaHash for PodRun {...}

PodRun corresponds to an on-going or completed execution of a PodJob, and is orchestrator specific. Notably PodRun structure will only be maintained in memory and will not be stored in an OrcaStore.

Will likely require revisiting list_model since the standard flow of creating a PodRun won't include annotation info. That would break with the current requirement that annotation must be present on save_model.

Summary from 11/23/24 - 11/27/24 meetings:

a


Implement observe

Fixes #15. The implementation of observeMany is sooooo much nicer now.

oooh, that explains why it worked on Travis but not Appveyor. Thanks. Opened https://github.com/sveltejs/svelte-extras/pull/17


Exceptions in subscribe() are not handled by executor

Hello!
When testing the subscriptions we've noticed that exceptions raised subscribe() are not handled by the query executor, instead they come back up outside of graphql, when we are consuming the results to create an HTTP response, with Task exception was never retrieved being logged by Python to console.
Quick fix we did for this was wrapping whole loop in try/except and handling those exceptions there, but this has obvious downside of not having GraphQLError with path and location.

Thanks for reporting. Will look into this when I find some time.

Here is repro: https://github.com/rafalp/graphql-core-next-30

Hi @rafalp - finally found some time to look into this. I understand your problem, but as far as I see, this is the expected behavior and in line with the spec.
When you provide a response function to produce the response stream, then errors are in fact passed to the client (see points 5. and 6.) as part of the GraphQLResult. But the subscribe function in your example is used for creating the source stream. As far as I see, the specs do not say explicitly what should be done with errors in the source stream. But there is nothing about passing them to the response stream.
The reference implementation passes errors in the response stream to the client and errors in the source stream to the server. You can see this is the expected behavior in these tests in GraphQL.js: It should handle error during execution of source event but it should pass through error thrown in source event stream. Your example corresponds to the second test - that's why the error is passed through to you.
You could argue that the specs should be amended and errors should be handed over to the response stream. But you will need to create a GraphQL.js issue for this. The goal of graphql-core-next is to just replicate the behavior of GraphQL.js.


docs: provide other package managers for init commands

Is your feature request related to a problem? Please describe.
no problem
Describe the solution you'd like to see
add copiable buttons in the homepage for other package managers too.

yarn create t3-app
pnpm create t3-app
cnpm? (I just noticed this pm recently)

Describe alternate solutions
There are no alternate solutions actually.
Additional information
CLI already knows which package manager runs create-t3-app and suggests that npm install, yarn, or pnpm install depending on the package manager.

btw it is already in the readme, but not on docs page

It's here: https://create.t3.gg/en/installation
As for the landing page, npm is the "right" default - adding tabs for the others will look cluttered.


Github actions + vagrant

Research how to integrate github actions with vagrant

Starts here: https://github.com/fredrikhgrelland/vagrant-hashistack/issues/11

Ready for action!


Modularity to Resume update

https://github.com/vinayak19th/vinayak19th.github.io/blob/08d0bacdc4a74d9a92f096e8b224554303a14530/_includes/intro.html#L4
This could be made more modular by replacing it with {{ site.resume | escape }}
https://github.com/vinayak19th/vinayak19th.github.io/blob/08d0bacdc4a74d9a92f096e8b224554303a14530/_config.yml#L8
and adding resume: link after website link

Did you test this on mobile devices?

Will intregrate this in


fix(designer): Parameter default value from manifest should be honored at load time

Please check if the PR fulfills these requirements

[x] The commit message follows our guidelines
[ ] Tests for the changes have been added (for bug fixes/features)
[ ] Docs have been added / updated (for bug fixes / features)

What kind of change does this PR introduce? (Bug fix, feature, docs update, ...)

Bug fix

What is the current behavior? (You can also link to an open issue here)

Default values from manifests are being ignored when loading parameters.

What is the new behavior (if this is a feature change)?

Fixed, see screenshots. Closes #3699 (cc @speray).

Does this PR introduce a breaking change? (What changes might users need to make in their application due to this PR?)

No

Please Include Screenshots or Videos of the intended change:

Checking with @speray to make sure this fix works as expected in his test case.

Confirmed a repro case with @speray and was able to test that it fails before this fix, and works after.


Price Filter is not responsive in Category Page both RTL and LTR view.

Terms

[X] Before you openning this issue, i have checked if the issue has already been reported.

Bagisto Version(s) affected
2.1.0
Issue Description
When we check the price filter, there we  can see that the price filter is not responsive and also price is showing some issues as well. checked the concern in both RTL and LTR view.
Preconditions

Categories must be created.
Categories must have products added in them.

Steps to reproduce

Go to Shop Front -> Select Category -> Price filter -> Strech to the end
There we can see that the issue is appearing and we are unable to reset the slider.
Now switch to RTL and then check the response is not accurate.

Expected Result
The Price filter slider should work properly. In both RTL and LTR View.
Actual Result
Currently it is not responsive. Please check the video for reference.
Video
https://github.com/bagisto/bagisto/assets/92721837/47be984c-e303-449b-872e-186ab8923e10
Screenshots
No response
Additional context
No response

@suraj-webkul
Please check the PR again as issue is still appearing.

Checked and Found that the Category Filter is working fine and PR have been merged.
Video
https://github.com/bagisto/bagisto/assets/92721837/755a4a21-d53d-4d91-a4bb-6245dbcc8faa


Update sharepoint-site-theming-overview.md

Added Periwinkle as a option, updated navigation to site themes, updated screenshot to represent new theme.
Category

[x] Content fix
[ ] New article

Related issues

N/A

What's in this Pull Request?
Added Periwinkle as a option, updated navigation to site themes, providing updated screenshot to represent new theme.
I do not have permissions to upload the new screenshot for the themes so I am attaching the file here. The attached image should replace the existing theme-defaults.png image in ../../images/theme-defaults.png

Learn Build status updates of commit 8e8ea4b:
:warning: Validation status: warnings

File
Status
Preview URL
Details

docs/general-development/sharepoint-search-rest-api-overview.md
:warning:Warning
View
Details

docs/declarative-customization/site-theming/sharepoint-site-theming-overview.md
:white_check_mark:Succeeded
View

docs/general-development/sharepoint-search-rest-api-overview.md

Line 1147, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: '      <WhiteList xmlns:a="http://schemas.microsoft.com/2003/10/Serialization/Arrays">'
Line 1160, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: '      </WhiteList>'
Line 1176, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: '- **WhiteList** element'
Line 1180, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: 'hat's specified in the **QueryProperties** element. Then, all the properties that are listed in the whitelist are copied from the incoming query to the newly constructed query object.'

For more details, please refer to the build report.
If you see build warnings/errors with permission issues, it might be due to single sign-on (SSO) enabled on Microsoft's GitHub organizations. Please follow instructions here to re-authorize your GitHub account to Learn Build.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel

Learn Build status updates of commit 2863a20:
:warning: Validation status: warnings

File
Status
Preview URL
Details

docs/general-development/sharepoint-search-rest-api-overview.md
:warning:Warning
View
Details

docs/declarative-customization/site-theming/sharepoint-site-theming-overview.md
:white_check_mark:Succeeded
View

docs/general-development/sharepoint-search-rest-api-overview.md

Line 1147, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: '      <WhiteList xmlns:a="http://schemas.microsoft.com/2003/10/Serialization/Arrays">'
Line 1160, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: '      </WhiteList>'
Line 1176, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: '- **WhiteList** element'
Line 1180, Column 1: [Warning: sensitive-language-wl - See documentation] Term 'whitelist' is sensitive and should not be used in content or code. Usage: 'hat's specified in the **QueryProperties** element. Then, all the properties that are listed in the whitelist are copied from the incoming query to the newly constructed query object.'

For more details, please refer to the build report.
If you see build warnings/errors with permission issues, it might be due to single sign-on (SSO) enabled on Microsoft's GitHub organizations. Please follow instructions here to re-authorize your GitHub account to Learn Build.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
Note: Your PR may contain errors or warnings or suggestions unrelated to the files you changed. This happens when external dependencies like GitHub alias, Microsoft alias, cross repo links are updated. Please use these instructions to resolve them.
For any questions, please:Try searching the learn.microsoft.com contributor guidesPost your question in the Learn support channel


I am working on a awesome-python-htmx, seeking your feedback

A few of us at PyCon this year got together and brainstormed a new Web Stack that we are calling PyHAT (Python, htmx, ASGI, TailwindCSS). The first thing we set out to do is create awesome-python-htmx; a collection of active tools/libraries/projects in that space.
I like the look of your project, specifically I like that it is trying to be more general (most other projects in this space are build specifically for one framework), but it seems development may have stalled?
In addition to that, if you could also participate in https://github.com/PyHAT-stack/awesome-python-htmx/discussions/1 that would be greatly appreciated!

Hi @benjamin-kirkbride
Thanks for the heads up!
I haven't given this much extra functionality since the last pass, indeed.
This is basically because I didn't get the chance to have a use case off of which to work on.
Professionally, I've been brought to the PHP world lately. It's a fun detour. We did go the "HTML on whatever you like" ("HOWL stack") route on one project, although with Turbo instead, as Symfony provided out of the box integration with that. From initial experiments, I anticipate there's not much that can be done with Turbo that can't be done with htmx, though. We like the opinionated aspect to Turbo, though.
I enjoy seeing the Python community expand and structure its "but HTML over the wire was nice" faction. :)
Like most of my asgi-* packages, the aim was indeed to keep a framework-agnostic approach and provide an htmx integration with ASGI the spec.
I believe this is more relevant in some cases than others. In the case of htmx, the need for language-specific integration seems fairly reduced, doesn't it?
I tend to agree with the comment here, even with "Turbo" replaced with "htmx" and "Django" with "ASGI / whichever framework": https://github.com/hotwire-django/turbo-django/issues/78#issuecomment-1454742899

The vast majority of Turbo's benefits can be realized without an additional library. And what we need even more at the moment is a library of patterns with demos on how to best implement Turbo in a Django project.

@florimondmanca thanks so much for your well thought out response.

This is basically because I didn't get the chance to have a use case off of which to work on.

A lot of projects in this space have suffered a similar fate, so I'm not surprised to hear this.

From initial experiments, I anticipate there's not much that can be done with Turbo that can't be done with htmx.

I think this is true as well :) though it seems like (understandably) on the Python Side, htmx has more mindshare, for better or worse.

We do like the opinionated aspect to Turbo, though. Because we don't do SPA or JS as much doesn't mean we should be able to do anything we like and break expected behaviors or spec expectations

This is part of what I hope to address with this initiative. There are projects out there building solutions that help address this, as well as people creating reusable patterns, but the efforts are very disparate at this time. Projects like https://www.forgepackages.com/docs/forge-htmx/ encourage sane, standards compliant behavior.

from an a11y perspective...

This is a great point, and something I don't see discussed much at all. Probably should carve out a section to discuss this. Unfortunately I don't think I'm qualified to discuss it intelligently, so I will either need to find someone who can (wink wink nudge nudge) or spend some time figuring it out.

I enjoy seeing the Python community expand and structure its "but HTML over the wire was nice" faction

Yes, PHP is way ahead of Python on this train, but we are getting there!

Like most of my asgi-* packages, the aim was indeed to keep a framework-agnostic approach and provide an htmx integration with ASGI the spec.

Do you happen to know if it works with Django? My understanding is Django can run on ASGI, but my guess is there are too many asterisks to have this work out of the box.

In the case of htmx, the need for language-specific integration seems fairly reduced, doesn't it?

Depends on what you want. See forge-htmx above for instance. Another example is most Python templating engines don't support partial rendering by default, so unless you are okay with a million template fragment files, you need some tooling.
It's not really about htmx per-se, really more general to HOWL not being a pattern anyone is thinking about when building frameworks.

Again thanks so much for your detailed response. I realize you are not working on PyHAT-type projects right now, but you certainly have a lot of insight into general HOWL principles, and I would really love if you were involved in the initiative, even if just to keep us noobs to the architecture in check ;)
Discussion to introduce yourself: https://github.com/PyHAT-stack/awesome-python-htmx/discussions/2
Discussion calling people to action and laying out our needs: https://github.com/PyHAT-stack/awesome-python-htmx/discussions/1

I agree with this approach, broadly: https://github.com/spookylukey/django-htmx-patterns/blob/master/approach.rst
But I think that not every developer needs to go through the same "step 2 at least 3 or 4 times" for someone (us) to come up with some helper libs/meta frameworks.


use canvas label as thumbnail Number

references #4486
Displaying the canvas label on thumbnails (page Number) rather than the image number. Is the label always the page number?
What do we do about displaying image x/y at the top of the Viewer. Does this still make sense?

@gestchild  The number differences make sense to me - the Viewer number is how many images there are in the work, the thumbnail number is the actual page number. Would be good to find out if users understand that difference though!

@gestchild This PR has been open for too long, can it be closed or merged?


There is no error message after executing "Azure Container Apps: Activate Revision" command for one container app which the revision mode is "Single"

OS: All
Build Version: 20230329.6
Regression: Previous release
Repro Steps:

F1 -> Azure Container Apps: Activate Revision -> Select a container app which the revision mode is "Single".
Check whether there is an error message.

Expect:
There is an error message.

Actual:
There is no error message.
More Info:
This issue also reproduces after executing "Deactivate Revision/Restart Revision" command from command palette.

Could you try this again with a different image? I was experiencing this issue but found out it was because my image was no longer in my Container Registry. After making a new image I no longer ran into this issue.

I can't seem to reproduce this. Could you try again with a different image?

@motm32  Verified this issue on the latest main build 20230331.3., it doesn't reproduce.


Fix build when JSON_USE_EXCEPTION == 0

🎉 New feature
Summary
Redo of #309.
Newer versions of jsoncpp do not provide exception classes when JSON_USE_EXCEPTION is off.
Updating the #if directives in JSONParse.cc allows this file to compile against jsoncpp configured to not throw.
Checklist

[ ] Signed all commits for DCO
[ ] Added tests
[ ] Added example and/or tutorial
[ ] Updated documentation (as needed)
[ ] Updated migration guide (as needed)
[ ] Consider updating Python bindings (if the library has them)
[ ] codecheck passed (See contributing)
[ ] All tests passed (See test coverage)
[ ] While waiting for a review on your PR, please help review another open pull request to support the maintainers

Note to maintainers: Remember to use Squash-Merge and edit the commit message to match the pull request summary while retaining Signed-off-by messages.

The failing tests are related to the fuel server download reliability.


Error while trying to install ocaml on windows

I have no idea what to say, so I have just pasted the outcome below.
Ran "setup-diskuv-ocaml-windows_x86_64-1.0.1.exe", the most recent thing
Setup did not complete because an error occurred.
Win32 command failed! Exited with 1. Command was: C:\WINDOWS\system32\cmd.exe /c call "C:\Users\matth\AppData\Local\Temp\PA23B0~1\0\inotify-win\compile.bat".

at Invoke-Win32CommandWithProgress, C:\Users\matth\AppData\Local\Temp\7z0E2D1364\sg\network-ocamlcompiler\windows_x86_64\setup-userprofile.ps1: line 738
at <ScriptBlock>, C:\Users\matth\AppData\Local\Temp\7z0E2D1364\sg\network-ocamlcompiler\windows_x86_64\setup-userprofile.ps1: line 866
at <ScriptBlock>, <No file>: line 1
at <ScriptBlock>, <No file>: line 1

Bug Reports can be filed at https://github.com/diskuv/dkml-installer-ocaml/issues
Please copy the error message and attach the log file available at
  C:\Users\matth\AppData\Local\Programs\DISKUV~1\0\setup-userprofile.full.log

FATAL [a0d16230]. A transient failure occurred.

Root cause: The conformant command had exit code 1:
                                           C:\Users\matth\AppData\Local\Temp\7z0E2D1364\sg\network-ocamlcompiler\windows_x86_64\setup-userprofile.bat
                                             -AllowRunAsAdmin
                                             -InstallationPrefix
                                             C:\Users\matth\AppData\Local\Programs\DISKUV~1
                                             -MSYS2Dir
                                             C:\Users\matth\AppData\Local\Programs\DISKUV~1\tools\MSYS2
                                             -OpamBinDir
                                             C:\Users\matth\AppData\Local\Temp\PA23B0~1\opam
                                             -DkmlPath
                                             C:\Users\matth\AppData\Local\Temp\7Z0E2D~1\sg\NETWOR~1\WINDOW~1\dkmldir
                                             -DkmlHostAbi windows_x86_64
                                             -TempParentPath
                                             C:\Users\matth\AppData\Local\Temp\PA23B0~1
                                             -SkipProgress

>>> A transient failure occurred. <<<

dkml-package.bc: [ERROR] FATAL [5f927a8b].
                         A transient failure occurred.

                         Root cause: The command had exit code 20:
                                                                    C:\Users\matth\AppData\Local\Temp\7z0E2D1364\bin\dkml-install-user-runner.exe
                                                                      install-user-network-ocamlcompiler
                                                                      --verbosity=info --color=always
                                                                      --prefix
                                                                      C:\Users\matth\AppData\Local\Programs\DiskuvOCaml
                                                                      --staging-files
                                                                      C:\Users\matth\AppData\Local\Temp\7z0E2D1364\sg

                         >>> A transient failure occurred. <<<

Please copy the error message and attach the log file available at
C:\Users\matth\AppData\Local\Programs\DISKUV~1\0\setup-userprofile.full.log

Can you attach that log file? Thanks!

One more ask: Did you already have Visual Studio installed on your machine before you ran the Diskuv OCaml installer?

Done, it is attached at the bottom.
I did, yes, and I made sure the necessary build tools were installed. This error happened after the part concerning visual studio, which proceeded smoothly.

This may not be the issue, but it's an idea at least. Do you think this requirement from this could be the issue?:

Administrator access on your computer to install the Microsoft C compilers. If you use a shared or restricted PC, please ask your PC administrator if they can follow the Windows Administrator Installation instructions; after that you and others on the PC can install without Administrator access.

The error did seem to hint that it was some issue with compilation. May not be it, but it's something.
setup-userprofile.full.log

Happy Case
Here is what I see when I open Command Prompt and run some commands:
Microsoft Windows [Version 10.0.22621.819]
(c) Microsoft Corporation. All rights reserved.

C:\Users\NAME>"C:\DiskuvOCaml\BuildTools\Common7\Tools\vsdevcmd.bat" -no_logo -vcvars_ver=14.26 -winsdk=10.0.18362.0

C:\Users\NAME>csc.exe /version
3.11.0-4.21403.6 (ae1fff34)

C:\Users\NAME>where.exe csc.exe
C:\DiskuvOCaml\BuildTools\MSBuild\Current\Bin\Roslyn\csc.exe
C:\Windows\Microsoft.NET\Framework\v4.0.30319\csc.exe

The logs indicate your machine would say something else!
To narrow things down considerably, can you tell me which scenario below corresponds to your machine?
Scenario 1
Microsoft Windows [Version 10.0.22621.819]
(c) Microsoft Corporation. All rights reserved.

C:\Users\NAME>"C:\DiskuvOCaml\BuildTools\Common7\Tools\vsdevcmd.bat" -no_logo -vcvars_ver=14.26 -winsdk=10.0.18362.0

C:\Users\NAME>csc.exe /version
The system cannot find the path specified.

Scenario 2
Microsoft Windows [Version 10.0.22621.819]
(c) Microsoft Corporation. All rights reserved.

C:\Users\NAME>"C:\DiskuvOCaml\BuildTools\Common7\Tools\vsdevcmd.bat" -no_logo -vcvars_ver=14.26 -winsdk=10.0.18362.0
The system cannot find the path specified.

Sorry for the following questions ... somewhere I'm documenting something wrong:

You manually installed Visual Studio, right? The Diskuv OCaml installer will automatically install Visual Studio for you at C:\DiskuvOCaml\BuildTools but only if it doesn't find a compatible Visual Studio on your machine. That means you could uninstall your existing Visual Studio, and then rerun the Diskuv OCaml installer. If that works for you, I think I know where the real bug is
If you did manually install Visual Studio, did some documentation of mine imply that you should manually install it? If so, can you tell me where that is in the documentation?
If there was another reason to manually install Visual Studio (perhaps you wanted to audit what was happening during the install, or you are a C++ developer and wanted the control, etc.), could you tell me?

Thanks for your patience!

Root Cause 1: There were double quotes embedded in the system PATH. Something like (each PATH entry is on its own line):
C:\WINDOWS\System32\Wbem
...
"C:\WINDOWS\System32\WindowsPowerShell\v1.0\;...\jdk1.8.0_282\bin"
...
C:\Users\beckf\.dotnet\tools

That was likely due to an old, bad Windows installer (unrelated to Diskuv OCaml; perhaps the Java 8 installer) that corrupted your system PATH. That caused the Visual Studio Command Prompt not to work, which we could see by running Visual Studio's x64 Native Tools Command Prompt for VS 2019 launcher directly.

There was nothing that could have fixed that except the manual removal of those quotes from the system PATH.

So close! Got pretty darn far before this lovely message:
<><> Fetching repository information ><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
Set to 'wget' the field download-command in global configuration
[diskuv-1.0.1] Initialised
The directory is not empty.
C:\Users\matth\AppData\Local\Temp\PA347A~1\0\DKMLW~1.33N\opam-18116-424794\index.tar.gz - Access is denied.
[ERROR] Could not update repository "default": Cannot remove C:\Users\matth\AppData\Local\Temp\PA347A~1\0\DKMLW~1.33N\opam-18116-424794 (error 145).
[ERROR] Initial repository fetch failed
rm: cannot remove '/c/Users/matth/AppData/Local/Temp/PA347A~1/0/dkmlw.33nTl/opam-18116-424794/index.tar.gz': Permission denied
Setup did not complete because an error occurred.
MSYS2 command failed! Exited with 1. Command was: export DKML_TMP_PARENTDIR='/c/Users/matth/AppData/Local/Temp/PA347A~1/0' && export PATH='/c/Program Files/Git/cmd':"$PATH" && env DiskuvOCamlVarsVersion=2 DiskuvOCamlHome='/c/Users/matth/AppData/Local/Programs/DISKUV~1/0' DiskuvOCamlBinaryPaths='/c/Users/matth/AppData/Local/Programs/DISKUV~1/0/usr/bin:/c/Users/matth/AppData/Local/Programs/DISKUV~1/0/bin' DiskuvOCamlMSYS2Dir='/' DiskuvOCamlDeploymentId='v-1.0.1;ocaml-4.12.1;opam-2.2.0~alpha~dev;inotify-36d18f3dfe042b21d7136a1479f08f0d8e30e2f9;msys2-999CED2C8F5FF6A2;docker-B01818D2C9F9286A;pkgs-41F2F26E25F649A6;bins-A13EC471D2E2F24D;stubs-4E6958B274EAB043;toplevels-80941AA1C64DA259' DiskuvOCamlVersion='1.0.1' WITHDKML_ENABLE=OFF OCAMLLIB= TOPDIR='/c/Users/matth/AppData/Local/Temp/7ZFA25~1/sg/NETWOR~1/WINDOW~1/dkmldir/vendor/drc/all/emptytop' 'C:\Users\matth\AppData\Local\Temp\7ZFA25~1\sg\NETWOR~1\WINDOW~1\dkmldir\vendor\drd\src\unix\private\init-opam-root.sh' -p 'windows_x86_64' -o '/c/Users/matth/AppData/Local/Programs/DISKUV~1/0' -v '/c/Users/matth/AppData/Local/Programs/DISKUV~1/0'

at Invoke-MSYS2Command, C:\Users\matth\AppData\Local\Temp\7zFA25496C\sg\network-ocamlcompiler\windows_x86_64\dkmldir\vendor\drd\src\windows\UnixInvokers\UnixInvokers.psm1: line 152
at Invoke-MSYS2CommandWithProgress, C:\Users\matth\AppData\Local\Temp\7zFA25496C\sg\network-ocamlcompiler\windows_x86_64\setup-userprofile.ps1: line 822
at <ScriptBlock>, C:\Users\matth\AppData\Local\Temp\7zFA25496C\sg\network-ocamlcompiler\windows_x86_64\setup-userprofile.ps1: line 1283
at <ScriptBlock>, <No file>: line 1
at <ScriptBlock>, <No file>: line 1

[Advanced] MSYS2 commands can be run with: C:\Users\matth\AppData\Local\Programs\DISKUV~1\tools\MSYS2\msys2_shell.cmd

Bug Reports can be filed at https://github.com/diskuv/dkml-installer-ocaml/issues
Please copy the error message and attach the log file available at
  C:\Users\matth\AppData\Local\Programs\DISKUV~1\0\setup-userprofile.full.log

FATAL [a0d16230]. A transient failure occurred.

Root cause: The conformant command had exit code 1:
                                           C:\Users\matth\AppData\Local\Temp\7zFA25496C\sg\network-ocamlcompiler\windows_x86_64\setup-userprofile.bat
                                             -AllowRunAsAdmin
                                             -InstallationPrefix
                                             C:\Users\matth\AppData\Local\Programs\DISKUV~1
                                             -MSYS2Dir
                                             C:\Users\matth\AppData\Local\Programs\DISKUV~1\tools\MSYS2
                                             -OpamBinDir
                                             C:\Users\matth\AppData\Local\Temp\PA347A~1\opam
                                             -DkmlPath
                                             C:\Users\matth\AppData\Local\Temp\7ZFA25~1\sg\NETWOR~1\WINDOW~1\dkmldir
                                             -DkmlHostAbi windows_x86_64
                                             -TempParentPath
                                             C:\Users\matth\AppData\Local\Temp\PA347A~1
                                             -SkipProgress

>>> A transient failure occurred. <<<

dkml-package.bc: [ERROR] FATAL [5f927a8b].
                         A transient failure occurred.

                         Root cause: The command had exit code 20:
                                                                    C:\Users\matth\AppData\Local\Temp\7zFA25496C\bin\dkml-install-user-runner.exe
                                                                      install-user-network-ocamlcompiler
                                                                      --verbosity=info --color=always
                                                                      --prefix
                                                                      C:\Users\matth\AppData\Local\Programs\DiskuvOCaml
                                                                      --staging-files
                                                                      C:\Users\matth\AppData\Local\Temp\7zFA25496C\sg

                         >>> A transient failure occurred. <<<

Press "y" and ENTER to exit the installer.
\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Strawberry\c\bin;C:\Strawberry\perl\site\bin;C:\Strawberry\perl\bin;C:\Program Files\Git\cmd;C:\Program Files (x86)\Microsoft SQL Server\150\DTS\Binn\;C:\Program Files\Azure Data Studio\bin;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Program Files\Microsoft SQL Server\150\Tools\Binn\;C:\Program Files\dotnet\;%NVM_HOME%;%NVM_SYMLINK%;C:\Program Files\nodejs\C:\Python311\Scripts\;C:\Python311\;C:\Program Files\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Python38\Scripts\;C:\Python38\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files\Java\jdk-14.0.1\bin;C:\Program Files (x86)\Java\jre1.8.0_251\bin;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\ProgramData\chocolatey\bin;JAVA_HOME\bin;C:\Program Files (x86)\Java\jre1.8.0_251\bin;C:

Looking at what came after the "exit installer", looks absolutely like another wonky PATH variable. But what do you think? Log attached.
setup-userprofile.full.log

That doesn't look like a PATH problem. I honestly don't know what it is, but it looks like a real bug in opam (just not sure why it is triggering on your computer). Would need another session to see what it is (you can schedule one if you need).
First thing though:

You may want to delete the directory  C:\Users\matth\AppData\Local\Temp\PA347A~1 (any directory that starts with PA347A) completely with the File Explorer
If you have anti-virus software, please disable it temporarily during the install

Then redo the install. Sorry, but there is still a lot more of the install left to go.

To save time, please leave the installer window open (that is, do not exit the installer). That way we can inspect the temporary files.

Nevermind, nevermind! I tried it again doing what you said. I deleted that folder + turned off my antivirus (mcaffee). I was able to make it through the entire installation no problem once I did that. So perhaps it was my antivirus. You may mark this issue as solved now.


After updating to 1.1.x from 1.0.1 build fails when a package is npm-linked

Bug Report or Feature Request (mark with an x)
- [x] bug report -> please search issues before submitting
- [ ] feature request

Versions.
@angular/cli: 1.1.2 (tried 1.1.1 as well)
node: 8.0.0
os: win32 x64

Repro steps.
This seems to only affect our teams own UI-Component Library - I could not reproduce it with a fresh installation
This repository is not public but I can provide any information needed, I just don't know where to look anymore...
How does this happen:

Checkout application / npm install
Checkout library / npm install
npm link library into the application
Run npm start
Build process fails at 92% (asset optimization)

The log given by the failure.
The message below is just one example. It seems that almost every source path is broken after updating from 1.0.1 to 1.1.x
WARNING in C:/workspace/ui-components/~/apollo-client/index.js
(Emitted value instead of an instance of Error) Cannot find source file '../../src/index.ts': Error: Can't resolve '../../src/index.ts' in 'C:\workspace\ui-components\node_modules\apollo-client'
 @ C:/workspace/ui-components/src/lib/apollo/apollo-helper.ts 1:0-69
 @ C:/workspace/ui-components/index.ts
 @ ./src/main.ts
 @ multi webpack-dev-server/client?http://localhost:4200 ./src/main.ts

Desired functionality.
A sucessful build
Mention any other details that might be useful.

Without npm link the project build completes without any issues
As mentioned, it works with 1.0.1
I ng new a fresh project and bumped our package.json versions to those angular cli is currently relying on
The app and lib package.json are using the same version of every dependency that comes with a fresh ng cli project
I'm wondering why webpack is trying to use a path like this: ui-components/~/apollo-client/index.js - Where is the '~' coming from?

I would appreciate any help! We stuck on ng cli 1.0.1 until there's a way to solve this

Can you please follow the steps here and confirm everything is in order then report back here on this issue?

I've made the lib aot-ready and compiled it with ngc - I now have an aot and a dist folder; package.json main points to dist/index.js
I also moved the angular deps to devDeps and peerDeps and edited tsconfig as mentioned in your linked article
Result: Still the same issue - no further or different errors/infos

same issue here. need help.

@nisimjoseph we also have apollo-client installed - have you tried it without? Does it work?

We use apollo-client as well. Not sure it it's only apollo-client, though.
I'll try to npm start without, tomorrow - if it's just apollo we should create an issue on their repo

are you using TypeScript in your project?

Yes

ok, so I took the apollo-client & react-apollo from GitHub, it is written in TypeScript as a source. added them as library folder inside the project.

I needed to add a few packages to package.json file. you have them in "dependencies" section.
some of the .ts files will have the wrong location for apollo-client package,  now it not in node_modules.

it works for me until the fix for TypeScript will be ready.

Can confirm, I've removed apollo-client and daterangepicker (https://github.com/kekeh/mydatepicker)
After that the messages were gone
@nisimjoseph if you have fixed it for your project, could you tell us the fix or even better create an issue on https://github.com/apollographql/apollo-client with a reference to this issue?

ok

Tried to reproduce it with a fresh cli 1.1.3 project plus a library example with apollo-client installed
Could not produce this error - are you sure apollo-client produced the issue or is just a symptom?

I found out, that e.g. apillo-client has wrong source map paths
As example
index.js.map
{
  "version": 3,
  "file": "index.js",
  "sourceRoot": "",
  "sources": [
    "../../src/index.ts"
  ], ...

But in my case "../../src" would be outside node_modules
Am I on the right track @Brocco ?
Were there any changes in displaying warnings after angular-cli 1.0.3?
Maybe this issue existed long before angular-cli 1.1.0 and is an apollo-client issue
On the other hand, as mentioned before, I could not reproduce this with a fresh ng new testapp and apollo-client installed
Any ideas? :/

@Brocco I found out that when I move the content of node_modules of my (npm linked) library to another location, then start the app, then move all node_modules back into my library, everything's working like a charm
can you imagine any unwanted side effects using this approach? If not - why not ignoring "node_modules" of npm link packages when angular-cli calls ng serve?
Is this something angular-cli can archieve or is this a webpack thing?

Hi, Angular CLI version 1, is not longer supported and the current LTS is version 6.
Please update to the most recent Angular CLI version.
If the problem persists after upgrading, please open a new issue, provide a simple repository reproducing the problem, and describe the difference between the expected and current behavior.


How to use this library to highlight a rectangular shape?

I am not able to use this library to highlight a rectangular shape. Can anyone help me?

have you find a work arround ?

You can take a look at my fork warehouse, I just implemented it briefly, see if it helps you

@huaweikai Thank you. Love what you've done.


enter private key (rather than metamask)

@leithaus would prefer not to use metamask; is comfortable giving a private key to software he can audit.
@dckc sees too much UX risk to take on the coding
custom deploy with @tgrospic 's tool remains an option

While I said I won't write code that manages (real) private keys, I must admit thinking about resuming work on https://github.com/rchain-community/RSign .
I'm thinking about using TOTP.
I think @tgrospic said something about WebAuthn.


fixing scroll issue with mobile nav

Adds conditional checks for mobile nav to be rendered on page at all; prevents scrolling issue that was causing it to flicker on page as identified in #69.
Closes #69

This change is

http://cockroach-docs-review.s3-website-us-east-1.amazonaws.com/03901b38a08c69145e437cfde39d168f0b3f5566/

@dt Care to retest this for me? link

👍


Splunk Logging Driver: raw format

DO NOT MERGE, FOR INTERNAL CODE REVIEW!
In version 6.4 Http Event Collector added support for incoming raw
format. Use can specify with splunk-format=json|raw which format he
wants to use when sending events to Splunk.
Raw format prepends tag and attrs to each message, like
627710de10d7 test=foo message.
In this change I also added option to skip verification for Splunk url
with splunk-verifyconnection=true|false.

LGTM. What real benefit do you see for adding raw? Timestamp extraction? Smaller payload?

@outcoldman one other change you might consider for 6.4 is we allow metadata to be passed in the querystring. So you can have a url of services/raw?source=foo&sourcetype=bar.

Never mind, I see now you already handled the metadata for raw.

Great to see you added disabling the network verification :+1:

Fields extraction will be the main benefit
Thanks,
Den (from my phone)
On Thu, Jun 9, 2016 at 9:51 PM -0700, "Glenn Block" <notifications<EMAIL_ADDRESS>wrote:
LGTM. What real benefit do you see for adding raw? Timestamp extraction? Smaller payload?

You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHubhttps://github.com/splunk/docker/pull/2#issuecomment-225092651, or mute the threadhttps://github.com/notifications/unsubscribe/AAkcpqHzO1rBjfik2GDSIbsuSRMVCQgpks5qKO0-gaJpZM4Iym6X.

Only diff is timestamp and breaking rules. JSON field extraction still
doesn't work. Regex extractions work with the standard protocol.
On Fri, Jun 10, 2016 at 5:30 AM Denis Gladkikh<EMAIL_ADDRESS>wrote:

Fields extraction will be the main benefit
Thanks,
Den (from my phone)
On Thu, Jun 9, 2016 at 9:51 PM -0700, "Glenn Block" <
notifications<EMAIL_ADDRESS>wrote:
LGTM. What real benefit do you see for adding raw? Timestamp extraction?
Smaller payload?

You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub<
https://github.com/splunk/docker/pull/2#issuecomment-225092651>, or mute
the thread<
https://github.com/notifications/unsubscribe/AAkcpqHzO1rBjfik2GDSIbsuSRMVCQgpks5qKO0-gaJpZM4Iym6X

.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/splunk/docker/pull/2#issuecomment-225169484, or mute
the thread
https://github.com/notifications/unsubscribe/AAInRPVdlsSOFtTsK3gUcTevoeI_wE5zks5qKVkAgaJpZM4Iym6X
.

Declined because of  https://github.com/splunk/docker/pull/3


DOCS: Fix failing ReadTheDocs build, pin Sphinx dependencies

I noticed the docs have started failing unexpectedly. It seems the issue is that the theme we use is not compatible with Sphinx v7.
Related:

https://github.com/readthedocs/readthedocs.org/issues/10279
https://github.com/readthedocs/sphinx_rtd_theme/issues/1463

As a fix, this pins the sphinx packages dependencies to a recent working version.
For reference, there are suggestions on reproducible builds in the ReadTheDocs [guide to reproducible builds](https://docs.readthedocs.io/en/stable/guides/reproducible-builds.html].
Alternatively, we could consider switching to a Sphinx theme that is apparently better supported, like furo

@thatlittleboy given the docs are currently failing on all PRs, I shall merge this bugfix PR now to fix the build. Hoping we can discuss next week to see if we're on the same page on pinning dependencies 👍

Seems like sphinx 7 is now supported https://github.com/readthedocs/sphinx_rtd_theme/pull/1464


Changed color red

Pull Request Type
What kind of change does this PR introduce?
[ ] Solved an issue/task
[ ] Code style update (formatting, local variables)
What is the current behavior?

What is the new behavior?

Merged

This is an automated message from Fork, Commit, Merge [BOT].

Thank you for your contribution! Your pull request has been merged. The files have been reset for the next contributor.
What's next?
If you're looking for more ways to contribute, I invite you to check out our forkcommitmerge.io website repository. The repository contain real issues that you can help to resolve or create some of your own if you see any bugs or want to add new features to the site, etc. You can also check out the Influences section in the README to find more projects similar to this one.
Also please leave a star to this project if you feel it helped you, i would really appreciate it.
I look forward to seeing your contributions!


[WIP] Addon readme

What I did
Created an addon based on the notes addon for adding a readme to all stories within a storiesOf via a decorator, including github-style formatting
Why this is necessary
The notes addon is designed to allow users to add a note to a particular story, this is designed to allow for a readme that applies to a whole component (or group of components)
The ReadMe panel clearly delineates between general notes and a ReadMe file that teams can use to document things like implementation details, why a decision was made, etc.
Universal support - as this does not have any impact on rendering it should work across all of the app platforms (I need to confirm this)
Example:
import React from 'react';
import { withReadMe } from '@storybook/addon-readme';
import { storiesOf } from '@storybook/react';
import BaseButton from '../components/BaseButton';
import readMe from './notes/readme.md';

storiesOf('Addons|ReadMe', module)
  .addDecorator(withReadMe(readMe))
  .add('with text', () => <BaseButton label="Button with readme" />);

Screenshot

How to test
Is this testable with jest or storyshots?
Does this need a new example in the kitchen sink apps?
yes
Does this need an update to the documentation?
yes
If your answer is yes to any of these, please make sure to include it in your PR.
TODO:

[x] Add an example to the storybook-official app
[ ] Update documentation
[ ] Add a proper README
[ ] Add tests

I'm going to close this for now, as I just had a kid and won't have time to work on this.

@dangreenisrael, Congrats on kid 👶  =)

Thanks @igor-dv


dfhack is mysteriously the wrong version

Issue description
dfhack obtained from the binary cache, and built by myself, is at version 0.44.05-alpha1 despite its nix-expression indicating it should be at version 0.44.05-r2:
let
  dfVersion = "0.44.05";
  version = "${dfVersion}-r2";
  rev = "refs/tags/${version}";
  sha256 = "1hr3qsx7rd36syw7dfp4lh8kpmz1pvva757za2yn34hj1jm4nh52";

is in <nixpkgs>/pkgs/games/dwarf-fortress/dfhack/default.nix.
I don't think this is a bug on my machine alone, and I have no idea what is causing it.
A workaround is to change the rev and sha256 above:
diff --git a/pkgs/games/dwarf-fortress/dfhack/default.nix b/pkgs/games/dwarf-fortress/dfhack/default.nix
index ca64045b185..c6e6c7f354f 100644
--- a/pkgs/games/dwarf-fortress/dfhack/default.nix
+++ b/pkgs/games/dwarf-fortress/dfhack/default.nix
@@ -6,8 +6,8 @@
 let
   dfVersion = "0.44.05";
   version = "${dfVersion}-r2";
-  rev = "refs/tags/${version}";
-  sha256 = "1hr3qsx7rd36syw7dfp4lh8kpmz1pvva757za2yn34hj1jm4nh52";
+  rev = "0e7ab27850821993ebc317bed9dc0135f030a3e5";
+  sha256 = "1cwifdhi48a976xc472nf6q2k0ibwqffil5a4llcymcxdbgxdcc9";

   # revision of library/xml submodule
   xmlRev = "2794f8a6d7405d4858bac486a0bb17b94740c142";

(This really ought not to fix things though because the revs should be the same!)
Steps to reproduce
In a nixpkgs checkout, at version cc4677c36ee8d880e881459ad114fd2224b3ac1c (currently where nixos-unstable points to):
 ❯ nix-build -A dwarf-fortress-packages.dfhack
/nix/store/fpr89xjrh0f0ll817ylkvwnckslb1q77-dfhack-0.44.05-r2

 ❯ nix-build -A dwarf-fortress-packages.dfhack --check
checking outputs of '/nix/store/9ci9ym0arqfcyqi77kgc7nbsdjk2kc3d-dfhack-0.44.05-r2.drv'...
unpacking sources
unpacking source archive /nix/store/byg9jvvdr8w02pjk5m8af03wbbivw2jc-dfhack
source root is dfhack
patching sources
applying patch /nix/store/g3rhdrcw6y8lafibyxlan9k4yh7qyk78-fix-stonesense.patch
…

Then observe the version information in /nix/store/byg9jvvdr8w02pjk5m8af03wbbivw2jc-dfhack/CMakeLists.txt indicates the source is outdated:
 ❯ grep DFHACK_RELEASE /nix/store/byg9jvvdr8w02pjk5m8af03wbbivw2jc-dfhack/CMakeLists.txt
set(DFHACK_RELEASE "alpha1")
set(DFHACK_VERSION "${DF_VERSION}-${DFHACK_RELEASE}")

Technical details
Please run nix-shell -p nix-info --run "nix-info -m" and paste the
results.

system: "x86_64-linux"
host os: Linux 4.15.7, NixOS, 18.03pre130932.cc4677c36ee (Impala)
multi-user?: yes
sandbox: yes
version: nix-env (Nix) 2.0
channels(root): "nixos"
channels(nick): "nixpkgs-18.03pre130569.7a04c2ca296"
nixpkgs: /nix/var/nix/profiles/per-user/root/channels/nixos/nixpkgs

It looks like the commit that updated the package to r2 didn't change the checksum of the source - 00ad7c0c7bc9b9548b48efb1077ea3ff95ad4b47? (so Nix doesn'tt bother downloading a fresh copy and  uses the older source). /cc @abbradar

Fixed in master (will be closed automatically)! Sorry for this -- seems I've cherry-picked a commit without a fixup. Just in case tested it again, seems to work.

Thanks!


Fix panic when no connection during reload

Checklist

[x] commits conform to the Commit message format

Squash commit message
Error instead of panic if no connection during reload
Info
Closes #675

hmm wait, maybe we should check connection too?

Yes, let's do that.


⚠ ClamAV has degraded performance

In 5c1a5ea, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 424 ms

Resolved: ClamAV performance has improved in 7a0b1d9.


Add docsConvert.js to npm run build

Need to combine + cleanup scripts before this can be added
transform.sh
docsConvert.js
objectConvert.js
and if anything changes for #1732


[Dead code] Remove references to synthetic cluster code

Please describe the Improvement and/or Feature Request
Remove references to synthetic cluster which is no longer required or used.
https://github.com/openservicemesh/osm/search?q=getSyntheticCluster

@shashankram Should I remove the lines marked in the image below?

Hey @adithyaakrishna, yes those lines and also the associated functions getSyntheticCluster and corresponding tests. I'll assign this one to you, thanks

Okay Sure :)


how to save progress if you started with specific base private key

Hello
i salute you for the amazing program
i wonder ho to save the progress of a bruteforce starting with specific base key
Is there a way to save the current base key or even to show it along with the stats ???

use -M to show all the output.


Window titles are not logged in cinnamon

When using cinnamon, all windows are logged as "__LOCKEDSCREEN".

Hi,
Hum OK.

Are you sure you installed all the dependencies, as specified here. I'm thinking about "On other Linux distribution, install them also, and you may also need gnome-screensaver".
 As a one-time setup" in the homepage ?
Thanks

Does your fix 06c2c4d works for you? I don't have cinnamon so of course I cannot test.
Thanks for reporting (and fixing!) this!

My fix works for me. I'm using Linux Mint 19 Cinnamon with the default configuration.
By the way: The 2>&1 /dev/null construct didn't work for me (and also didn't make sense to me after quickly googling it), which is why i replaced it with 2> /dev/null. Did you test the script under gnome?
Also great job maintaining the original scripts and adding new features (and pokemons)!

OK thanks.
Regarding 2>&1, it's a perfectly valid bash trick, to redirect stderr (error messages) to stdout. See https://stackoverflow.com/questions/818255/in-the-shell-what-does-21-mean#818284.
It is totally independent of the desktop environment, and only requires a recent Bash version (any version >= 4.0 I think).
Thanks.


Make the last part of the run-cli instructions produce results

Either we should have the demo repo use something other than AndroidLint, or we should make it work with one of the other analyzers. I know it works with CTADetector, though it has to be run directly on the eclipse project directory.

I changed the instructions to use ExtendJ, and have sample code that works with ExtendJ.


Encryption of Data at rest [moved]

I would like to use OrientDB for a healthcare application in the U.S. One of the requirements is that the data be encrypted at rest. This could probably be done through writing drivers for a particular OS. We are currently using MySQL and have a third party driver to accomplish encryption at rest. It would be great if OrientDB had a built in capability to do this.

@lvca this should probably be re-opened. This is not about encryption-on-the-wire (SSL), but rather storage encryption for data at rest. (e.g., on disk, or perhaps even in memory). See the mongodb docs @ http://docs.mongodb.org/manual/core/security-introduction/ - "To encrypt document or field level data, write custom encryption and decryption routines or use a commercial solutions such as the Vormetric Data Security Platform."  I think that's more or less what this particular ticket is after.

@lvca I agree with @mandrachek - this issue should probably be reopened.
We're using Baasbox (http://www.baasbox.com/), which incorporates OrientDB, on a project. The stipulated ISMS requirements from our client at that data is encrypted at rest.
This is different from either encryption on the wire (SSL) and filesystem encryption. See http://www.teamshatter.com/topics/general/team-shatter-exclusive/encrypting-data-at-rest/ for some further reasons why it's important.
What do you think?

Reopened. Guys, this is quite easy to support but we'd need a few days. Any chance to receive a sponsorship to develop it?

Thanks @lvca. Would love to offer sponsorship if we could but sadly there's no capacity in our project budget :(

@lvca we are interested in this and depending by the necessary effort, we could develop it, if you will give us the right advices.
Please drop me an email....

@giastfader it would be great: a new feature by BaasBox ;-)
You can write an implementation of com.orientechnologies.orient.core.compression.OCompression interface and register into OCompressionFactory singleton. Example, you call your implementation as "encrypted". In order to activate it on a new cluster use:
ALTER CLUSTER MyCluster COMPRESSION encrypted

We store the database compression inside storage configuration, but we never exposed it on ALTER DATABASE command.

Where do we store the key?

@giastfader Thanks for your reply. As @lvca says, direct BaasBox contributions to OrientDB would be great and is very encouraging from our point of view.
As we're using BaasBox as a product, please could DB encryption be enabled/disabled via arguments passed to the start script or similar, i.e. not needing us to recompile the Play project.
Could you store the key in a Java keystore?

We already have config/cert folder, what best place?

Hi @lvca I'm working on this issue.
Since there are a lot of different kind of Exceptions that can be thrown during the crypt/decrypt  process what do the methods of OCompression* classes are supposed to do?
I see that, for example, into the OZIPCompression.compress() method an IllegalStateException is raised if an IO operation goes wrong.
Is it fine to raise always that exception ?

You could also raise OSecurityException.

Hey @giastfader I was merging this in develop, but unfortunately you didn't sign the clahub agreement (for the Apache2 license). Please could you do that? Thanks in advance.

Waiting for you to electronic signing the CLA, I saw you use 2 new global settings:
STORAGE_ENCRYPTION_DES_KEY("encryption.des_key",
"The simmetric key to use to encrypt/descript data at rest using the DES alghorithm, stored in BASE64. The key must be 64 bits long. Default is "T1JJRU5UREI=" (ORIENTDB).",String.class,"T1JJRU5UREI="),
STORAGE_ENCRYPTION_AES_KEY("encryption.aes_key",
"The simmetric key to use to encrypt/descript data at rest using the AES alghorithm, stored in BASE64. The key must be 128 or 256 bits. Default is "T1JJRU5UREJfSVNfQ09PTA==" (ORIENTDB_IS_COOL).",String.class,"T1JJRU5UREJfSVNfQ09PTA=="),
I think it would be much better don't setting any password by default and check if password is null, an exception is raised. In this way the user can't do mistakes. WDYT?

Spelling:  "simmetric" should be "symmetric"

@compensator you're right, I copied the original piece of code with no paying attention to the names.

Hi guys, I'm merging this PR today.

After reviewing it, keys are global, so if you have 2 database you can't have different keys. This should be per-db/storage.

Ok, done. The password now can be passed as "STORAGE_COMPRESSION_OPTIONS" setting before creating the database.
    final ODatabase db = new ODatabaseDocumentTx("plocal:target/testCreatedAESEncryptedDatabase");
    db.setProperty(OGlobalConfiguration.STORAGE_COMPRESSION_OPTIONS.getKey(), "T1JJRU5UREJfSVNfQ09PTA==");
    db.create();
    db.command(new OCommandSQL("create class TestEncryption")).execute();
    db.command(new OCommandSQL("alter cluster TestEncryption compression aes-encrypted")).execute();

And the same for opening it:
    db.setProperty(OGlobalConfiguration.STORAGE_COMPRESSION_OPTIONS.getKey(), "T1JJRU5UREJfSVNfQ09PTA==");
    db.open("admin", "admin");

But if not specified, global setting is taken. There are no 2 different settings for DES and AES, but just STORAGE_COMPRESSION_OPTIONS .

I'm updating the docs...

Done: http://orientdb.com/docs/last/Database-Encryption.html

Is there any impact to indexed searching to include Lucene?

I've got a couple of quick questions for this, because we would love to use this instead of self-implementing hooks for an upcoming release.

If you encrypt at the cluster level and not the whole database, then will related indexes for those clusters also get encrypted at rest (or do indexes actually persist to disk?)?

We're scouring our security requirements because we currently have our code using CBC instead of the ECB mode Orient is using.  Any chance you guys could add that as a third config option (DES, AES, AES-CBC)?

@compensator Good question, @maggiolo00 is not using encryption on Lucene because it's outside the OrientDB storage scope. @maggiolo00 do you have any idea?
@jrspriggs (1) indexes are not encrypted, but we could support it. (2) Please could you show the Java code you'd use for your encryption? For AES we do:
theKey = new SecretKeySpec(key, "AES");
cipher = Cipher.getInstance("AES/ECB/PKCS5Padding");

Ok, the idea of using the compression API and names is horrible. I prefer to refactor it to use ad-hoc names.

Actually, dug through our requirements and found that the library I'm even using isn't compliant.  It turns out our encryption requirements need to be Fips 140-2 compliant.  There aren't a lot of libraries that do that, and I've not found anything to convince me that the base javax.crypto.cipher class is.

I can make this encryption pluggable if you can find a Java lib that can do what you need.

Actually there is.   RSA BSafe Crypto-J library is FIPS 140-2 certified.  If you could make the encryption pluggable, it would probably make it very easy for us to pop this library in and just let it go at that.  The downside for anyone using it in their application is going to end up being the cost.  Usage licensing from what I've read for just 1-2 of their algorithms is around $58,500, but I am still waiting for a quote from them directly to confirm.
Given Orient is offered open-source, I'm doubting it's a cost Orient Technologies would be open to taking on to make Orient's encryption at rest meet the FIPS certification for using it in applications with the federal government, but would it be something you would possibly take on to add to the Enterprise edition since you charge licensing on that?  It could widen your sales opportunities for devs writing software for use with government agencies and easily compliant for health care applications as well.

@jrspriggs cool, please keep us updated on this issue, so any further users could read it. About the pluggability I'm completing the API, they are almost done, in 3 hours documentation should be updated and the API should be final.

@jrspriggs,  If any of what I state after this not relevant to your situation, my apologies in advance.
I was working on the FIPS 140-2 crypto compliance issue last month for a customer and where we arrived is that while you must use a certified implementation, the certification alone doesn't guarantee that you are implementing only the ciphers and algorithms that you should.  You'll need to modify the java.security properties file to disable anything you don't want to support.  I tested OrientDB for SSLv3 denial using OpenSSL and it complied (it only responded successfully to TLS and denied renegotiation to SSLv3).  You can download, compile, and install the Mozilla NSS lib into your JRE if you are using Java only as a FIPS 140-2 certified implementation for free.  I haven't dug deeply into the NSS implementation, nor have I tested it yet since I've been focused on other items since then.

@compensator I would love to see a tutorial or guide on that if you have a link to implement that.  Our applications tend to be used by state and federal agencies, so the FIPS 140-2 is pretty important.  We do have a contact for security at the federal level to run ideas by to make sure they will float well, so any guide or documentation you can point me to and I can pass along would be greatly appreciated!

Ok, refactoring done and documentation updated. encryption is apart than compression, so you could have both set. For more info look at: http://orientdb.com/docs/last/Database-Encryption.html
@compensator and @jrspriggs I think it would be cool adding at documentation the steps to have a "FIPS 140-2" working with OrientDB. If you have some material, please let me know.

@jrspriggs It sounds as though your organization should hire an InfoSec engineer who has hands-on experience.  Since OrientDB executes on a JVM, you must get the JVM to a FIPS compliant state in terms of encryption.  The issue is the use of a FIPS 140-2 certified module.  Here is the statement by the NIH on the subject:  https://ocio.nih.gov/aboutus/publicinfosecurity/Pages/encryption.aspx
You'll notice that they don't specify the Level of certification required.  NSS is certified up to Level 2.
This is the link to [FIPS 140-2 JSSE enablement in Java 8] (http://docs.oracle.com/javase/8/docs/technotes/guides/security/jsse/FIPS.html) for the JRE at Oracle.  You'll see at the bottom (I've inserted a hyperlink to an Intel site that contains instructions):
"When SunJSSE is configured in FIPS 140 compliant mode together with an appropriate FIPS 140 certified cryptographic provider, for example Network Security Services (NSS) in its FIPS mode, SunJSSE is FIPS 140 compliant."
While this primarily discusses encryption in transit, configuring the JRE to use the the FIPS certified cryptographic provider covers the requirement.  Bear in mind that this is only addressing   JRE-based cryptographic module compliance.  In the spirit of actually securing access to and data within OrientDB, all avenues of access need to be assessed.
Mozilla NSS Project
This is a nice cheat sheet from OWASP Cryptographic Storage Cheat Sheet.
One enhancement that I'd like to see in OrientDB is the ability to load certificates/keys from a URL rather than the file system to enable vault integration.  OrientDB would load the public key of the remote vault to enable HTTPS connectivity to the vault and retrieve its private certificates/keys.

@compensator loading the certificates from a URL sounds simple, what do you think about creating a specific issue or that?

@compensator the FIPS compliance mode document for Java is a good resource, but I believe we are already doing that in regards to our SSL/TLS usage.  That part hasn't been as concerning to us as much as the concern about encrypting data at rest so that the encryption package used is FIPS 140-2 certified.

@compensator what was the OS/JRE you were using?  We've been talking internally about just jumping Orient onto a RedHat Server, which we could then use some of IBM's FIPS 140-2 certified cryptography modules to meet our needs.

@jrspriggs I'm going to do a data dump here.
You've stated that you want to make OrientDB FIPS 140-2 compliant.  OrientDB runs on the JRE, so configuring the JRE to execute in FIPS compliant mode via a FIPS 140-2 certified library, one that is certified at the required level (1, 2, 3, or 4; in your case, HHS only states FIPS "140-2 certified" with no certification level and "NSA approved" both with no date range), achieves that goal since OrientDB is using the JRE for encryption which will subsequently use the FIPS 140-2 certified library.  Red Hat's NIST FIPS 140-2 Certification was based upon...the Mozilla NSS Library.  Here is a post by someone on configuring the JRE to be FIPS 140-2 compliant on a Linux server using NSS:  [Configure a FIPS 140-2 Compliant Java Provider on RedHat/CentOS/Fedora](Configure a FIPS 140-2 Compliant Java Provider on RedHat/CentOS/Fedora).
Bear in mind that this list shows the last date of test for certification along with the configuration of the environment in which the test was performed at the time along with the Level of Certification AND that the certification only applies if the module is executed on the exact same configuration (likely not going to happen unless the certification occurred within the past year):
NIST 140-2 Certified Cryptographic Modules/Products
What does this mean to you in terms of IBM's Java JCE FIPS 140-2 Cryptographic Module
(Software Version: 1.71)?  Well here is the certification environment:
-Operational Environment: Tested as meeting Level 1 with IBM AIX 7.1 on IBM JVM 1.6 running on IBM 9117-570, Windows 7 32-bit on IBM JVM 1.6 running on Dell Optiplex 755, Solaris 11.0 on IBM JVM 1.6 running on Dell Optiplex 755 (single-user mode)
-FIPS Approved algorithms: AES (Cert. #2107); DRBG (Cert. #228); DSA (Cert. #657); ECDSA (Cert. #314); HMAC (Cert. #1281); RNG (Cert. #1082); RSA (Cert. #1081); SHS (Cert. #1830); Triple-DES (Cert. #1342)
Are you able to run on any of those configurations?
What the certification does provide is the checkbox on NSA approved algorithms, but that list is broad and you should configure the JRE to disable algorithms that are not the strongest where possible.  You'll also want to install the Unlimited Strength Jurisdiction Policy Files
Also of note for IBM's JCE is that it is listed in 2013, but not in 2015; however, on the 2013 page, they enter a 2015 date.  I'd send NIST question on that.  The JCE doesn't list AES-NI if that is desired.
As you peruse the NIST FIPS 140-2 site, you note that products/modules generally don't go through the certification process every year.  The last year that Mozilla NSS went through the process is 2012.  You can see this in the chart.  You'll also see that RedHat, Sun, and Mozilla all contributed in the 2010 listing.
If you want the host operating system to also be FIPS 140-2 compliant, then you have to execute whatever steps are required to set the operating system to use a FIPS 140-2 certified encryption module.
You'll also notice in RedHat's own documentation for JBoss FIPS compliance, that they reference the use of the Mozilla NSS library:
RedHat JBoss FIPS Configuration
On that same page, they reference this Knowledge Base article:
How can I make RHEL 6 FIPS compliant?
In the RHEL 7 Security Guide, you'll see that they reference Libreswan.  Libreswan merely calls the Mozilla NSS crypto library.
RHEL 7 Security Guide

@lvca I will create an issue for the URL loading.  Before I do that, I would like to download and test a key management product to verify the requirements.  I will initially use Hashicorp's Vault since it's free.

@lvca is there a timeline for when 2.2 will be released?  I know you're in alpha right now, but is there a date you are shooting for to have the GA out?

Take a look at our roadmap: http://orientdb.com/docs/last/Roadmap.html: we're quite good and on time. We're waiting for incremental backup to freeze features, then start with the Release Candidates.

Thanks @lvca!  also, @lvca or @compensator do either of you know if there are any EU specific standards like FIPS 140-2 certification?  Or does EU try to just piggy back on that?

http://www.privacytrust.org/guidance/safe_harbor.html

I read the encryption code, and here are my thoughts:

DES is a outdated and broken algorithm where one can brute-force all possible keys to decrypt the data: https://en.wikipedia.org/wiki/Data_Encryption_Standard#Brute_force_attack
ECB mode is not safe for any cipher -- see the famous penguin encryption example and note how one can still trivially tell that it's a penguin despite the "encryption": https://en.wikipedia.org/wiki/Block_cipher_mode_of_operation#Electronic_Codebook_.28ECB.29
Ideally, the database should use an authenticated encryption mode like GCM to confirm the authenticity of data as well as its confidentiality.
Indexes and all other data in the DB should be encrypted -- otherwise, there would be an encrypted and an unencrypted copy of the same data on the same machine, which is confusing and doesn't sound desirable.

See www.cryptopals.com for some crypto exercises that show why not to use ECB mode and how quickly and easily it can be broken.

So instead of AES encryption what do you would suggest?

The AES part is great, but the cipher mode (AES-ECB) is the problem.
AES-GCM would be ideal if possible, with a 128-bit authentication tag and at least a 96-bit initialization vector (IV) as recommended by NIST. The IV must be securely randomly generated and different for each record being encrypted -- if the IV is ever reused, all sorts of attacks become trivially doable.

I agree that the choice of ECB mode was incorrect.  As stated document at the OWASP URL in my post above which includes references to NIST, ECB should not be used.  If for some reason you are not able to implement AES-GCM, CTR mode with should be the minimum.
As for encrypted indexes, this is a different, more difficult problem and, in my opinion, a user of OrientDB can opt to not index if they have such security requirements until Orient has a feasible solution in that area.

Hi guys, I'd like to return on this to ask if you have a clear solution for the management of the key. Right now the key has to be entered in the server's console at startup. I see MongoDB, MariaDB and other DBMS asks for the key to an external server. Is there any standard we can rely on for this?

This is why I mentioned Hashicorp Vault as a test case.  It's on Github [https://github.com/hashicorp/vault].

For users of the Lucene index, they might want to look at the Credeon SDK.  I haven't dug into it deeply.

Asking an external server is a good idea, similarly to MariaDB / MongoDB and others. It's better than entering the key manually into the console, as then it would be difficult to build e.g. an auto-restarting docker container with OrientDB in it.

So going by the status of this thread, is it safe to encrypt an OrientDB database using this guide?
Also, can one encrypt an existing OrientDB database?

It's safe, but you can't encrypt an existing database unless you export and reimport into an encrypted one.

@finid Unless I am very much mistaken, most of the concerns I raised in my above posts (like the use of AES-ECB, or the fact that indexes are not encrypted) have not yet been resolved. So if "safe" means "secure against a knowledgeable attacker stealing your raw data", my answer would be "no".

Thanks @lvca and @obi1kenobi

If the encryption mode is not sufficient, just change it and rebuild.

@compensator it's not nearly that simple. For example, AES-ECB does not use an IV nor an authentication tag, whereas AES-GCM requires both of these things. Each encrypted record requires its own IV and auth tag, but OrientDB lacks the support for these additional fields in every encrypted record.
These are just some of the problems that need to be solved before OrientDB can implement a stronger encryption mode.

I didn't mean to gloss over those details.  But it's good to point that out for those who haven't implemented encryption before and I appreciate having a wingman on this thead.  Perhaps I'll have time to work on some of this someday amid everything on my plate.  Unfortunately, I don't work for free.  :)


Parallel backup

Hello @ricardosdias! Thanks for opening this PR.

In the file dbaas/backup/tasks.py:

Line 146:101: E501 line too long (130 > 100 characters)
Line 310:5: E265 block comment should start with '# '
Line 558:5: E265 block comment should start with '# '
Line 760:101: E501 line too long (106 > 100 characters)
Line 762:101: E501 line too long (109 > 100 characters)

In the file dbaas/drivers/mongodb.py:

Line 215:9: E122 continuation line missing indentation or outdented

Do see the Hitchhiker's guide to code style