Ingress - Unable to connect to LB on port 80

Following the examples mentioned here:
https://github.com/kubernetes/contrib/tree/master/ingress/controllers/nginx
I get everything created and running, however when I try and connect to my host on its external IP address and port 80, I just get connection refused.
Even trying to curl http://<IP_ADDRESS> on the machine itself returns connection refused, so its like the load balancing Pod is not actually listening on the hosts port 80.
Anyone have any suggestions as to how to go about debugging?
Thanks a lot

@microadam how are you running the controller? can you post your yaml file?

@aledbf I'm seeing the same symptoms. I'm using the yaml from https://github.com/kubernetes/contrib/blob/master/ingress/controllers/nginx/examples/default/rc-default.yaml verbatim.
The echo service is working if I hit it straight on the NodePort. If it helps, when I do kubectl get ing I see that the address is not assigned. http://kubernetes.io/docs/user-guide/ingress/#simple-fanout seems to suggest that I should see an address

@MariusVolkhart can you test if using aledbf/nginx-third-party:0.11 you see the same behavior (that image contains https://github.com/kubernetes/contrib/pull/707)

After some digging, this doesn't appear to be container related.
Logs for the LB pod show main.go:102] failed to create client: open /var/run/secrets/kubernetes.io/serviceaccount/token: no such file or directory, and a search led me to look into the admission-controllers flag. This led me to https://github.com/kubernetes/kubernetes/pull/22957 which suggests this is a problem with the default vSphere setup (that's what I've got).
Will try adding the flag and see if that fixes things.

I am using the same Yaml file as Marius (rc-default.yaml from the nginx echoheaders example folder).
I am running a different setup to Marius though and I do have addresses assigned to the ingress, so I think this maybe two different issues.
Not sure if this could be related to this: https://github.com/kubernetes/kubernetes/issues/23920 ? It seems like the same underlying issue
Also tried using aledbf/nginx-third-party:0.11 and have the same issue

@microadam please use the latest version gcr.io/google_containers/nginx-ingress-controller:0.5

@aledbf Thats the image I have been using and having the issues with

@microadam which kubernetes are you using and where (GCE,AWS,etc)?

Even trying to curl http://<IP_ADDRESS>

That will not work, the examples do not use hostNetwork: true. You need to check the announced IP in the Ingress rule/s (kubectl get ing)

@aledbf I am on k8s 1.2.0 currently. Running on a Linode VM. The setup I am using is done via ansible using this repo:
https://github.com/microadam/ansible-kubernetes-tinc
The IP address that I get from kubectl get ing is the public IP address of the machine that is running the ingress controller. Curling that from anywhere has the same issue...
Please let me know if there is anything else I can provide to help debug.
Assuming that I shouldn't expect to see anything listening on port 80 on the host machine when running netstat? (still trying to understand how various bits k8s work, especially the networking)
Thanks

Same issue with k8s 1.4.3 on CoreOS cluster and gcr.io/google_containers/nginx-ingress-controller:0.8.3 ingress controller image.
I can reach nginx pod from inside the cluster curling its IP, but can't reach it from inside or outside the cluster using node IP.

I have also seen this issue testing with k8s 1.4.4 + gcr.io/google_containers/nginx-ingress-controller:0.8.3, running on an Ubuntu cluster.
The nginx pod IP responds and forwards to echoheaders as expected:
# kubectl describe po -l name=nginx-ingress-lb | grep IP
IP:		<IP_ADDRESS>

# curl <IP_ADDRESS>/foo -H 'Host: foo.bar.com'
CLIENT VALUES:
client_address=<IP_ADDRESS>
command=GET
real path=/foo
query=nil
request_version=1.1
request_uri=http://foo.bar.com:8080/foo

SERVER VALUES:
server_version=nginx: 1.10.0 - lua: 10001

HEADERS RECEIVED:
accept=*/*
connection=close
host=foo.bar.com
user-agent=curl/7.47.0
x-forwarded-for=<IP_ADDRESS>
x-forwarded-host=foo.bar.com
x-forwarded-port=80
x-forwarded-proto=http
x-real-ip=<IP_ADDRESS>
BODY:
-no body in request-

The node IP does not respond, even from another host on the same network or from the node itself:
# kubectl describe po -l name=nginx-ingress-lb | grep Node
Node:		k8s-node-3/<IP_ADDRESS>

# kubectl describe ing
Name:			echomap
Namespace:		default
Address:		<IP_ADDRESS>
Default backend:	default-http-backend:80 (<none>)
Rules:
  Host		Path	Backends
  ----		----	--------
  foo.bar.com
    		/foo 	echoheaders-x:80 (<none>)
  bar.baz.com
    		/bar 	echoheaders-y:80 (<none>)
    		/foo 	echoheaders-x:80 (<none>)
Annotations:
No events.

# curl <IP_ADDRESS>/foo -H 'Host: foo.bar.com'
curl: (7) Failed to connect to <IP_ADDRESS> port 80: Connection refused

I suspect this is a known issue, documented here: https://github.com/kubernetes/kubernetes/issues/35875

This issue was moved to kubernetes/ingress#552


Page performance: reduce time to paint

The page takes several seconds to show up currently. Can be 5..7 seconds, PageSpeed measures e.g. 5.3s to Largest Contentful Paint on Desktop:
https://pagespeed.web.dev/analysis/https-w-m-github-io-3dgs-compression-survey/yc4hidmskn?form_factor=desktop
And 29 seconds on Mobile 😬.
Our goal should be to have the first contentful paint well below 1 second on Desktop and Mobile. Going through the diagnostics step from PageSpeed step by step should help. Focus should be on displaying the table as fast as possible (as it's the top visible element), and then getting started on adding in the plots, hopefully on a background thread.
The plot drawing needs some investigation. Why does the main script.js spend 4.5s in the main thread. At 12 plots, that's 375 ms per plot, that seems a lot for these few 2D lines?

[x] eliminate render-blocking resources (PageSpeed)
[x] remove unused JavaScript (PageSpeed)
[x] investigate how to start drawing plots after page load (requires placeholder not to move page layout after?)
[x] the table styling is currently applied after the table has shown up for the first time. can this be improved, to show the table instantly in the final style?
[x] profile scripts.js to find why it takes 4.5s to draw the plots
[x] prioritize PSNR plot drawing -> should show up as soon as they are done, LPIPS and SSIM can be done after
[ ] investigate excessive DOM size (PageSpeed) -> artefact of plotly, or can we reduce this?
[ ] properly size images (PageSpeed)
[x] serve images in next-gen formats (PageSpeed)
[x] explicit width and height for image elements to reduce layout shifts (PageSpeed)

It’s great that the page now loads quickly. But if I scroll down, the images appear one by one. Is it possible to download the images after the first render, so they are already loaded when I scroll down but don't slow down the initial load?
In any case, the images should get explicit widths and heights so that the design doesn’t jump when the image is loaded.


WIP Cleanup meta functions

To support xviews  on xscalar, we need to have non-const accessors on xscalar, in the case of a non-const closure type.


Cannot Start Scenario without Ego Vehicle Defined and Spawned

Describe our question or idea
According to https://github.com/carla-simulator/scenario_runner/issues/515 , even without an ego_vehicle defined, scenarios should still be able to be run with a trigger_point behavior or similar if we want to spawn our own ego vehicle at own location with the correct tags(hero, etc).
Expected behavior
Expected to be able to run without an ego_vehicle defined or at least spawned.
Screenshots
If applicable, add screenshots to help explain your problem.
Desktop (please complete the following information):

OS: Ubuntu 20.04
CARLA Version 0.9.15
Python version 3.7
Version 0.9.15

Is there any error message?


Prerender and Remain default values

Prerender and remain default values are not working.
If I don't set a value for prerender prop the component won't render any node.

fixed at 0.3.1

Great tested!


Added support for editing ports

little bit refactored ports component, removed not used code
removed not necessary display field in response object
tweaked style for input at ports component

Let me know if you have any questions
Vojta ;)
Signed-off-by: Vojta Bartos<EMAIL_ADDRESS>

Awesome! Thanks for the PR.
Code LGTM
@mchiang0610 can you LGTM functionality?

@VojtechBartos Thanks for the PR! This is an awesome feature.
We'd need some error checking for the port numbers before we can merge.

@mchiang0610 yeah, will do that. Do you have any standardised way how to show errors to user ?

@mchiang0610 added all validation what you have suggested. Error message is gonna show on right side from port input. Hopefully is it ok. cc @jeffdm

Code LGTM

@VojtechBartos  Can we not allow - ports 22 and 2376 ?  These are the ports that Kitematic / Docker uses.
LGTM otherwise. :)

@mchiang0610 sure, done :)

@VojtechBartos Thanks! Just one more bug that I noticed:
The port is correctly mapped when I checked via command line but it's not showing up in Kitematic.

@mchiang0610 Hey, i have merged current master, so check it out styling and etc.
About the bug, i haven't been able to replicate it. Have tried download some images what is in Recommended page. It works. Also have tried create new container from command line and map only one of three ports
docker run -it -p 8080:80 vojtechbartos/dev
Rest of the ports has not been mapped, but in Kitematic you could easily override it.
Screenshot
Can you give me more info about bug, please ? ;)

Hey @mchiang0610, any updates ? :)

@VojtechBartos It works. Do you think we should block common ports from being used? For example if you try the hello-world-nginx image from Kitematic, and change to port 123 (NTP), it would just not run.
(ie. https://technet.microsoft.com/en-us/library/cc959828.aspx)

In my opinion, blocking common port is not a good idea as you could have a use case for having a docker image using it. What would be useful thought is a warning saying that the port selected is known as a common port (or already used by the system) and may cause conflicts.

@mchiang0610 sorry for my late response. I agree with @gpapin, we should not block it but just show up some warning on same place where is normally error message. I will do that but it is not gonna be in next couple days, because my schedule is pretty full at the moment. Question is, can you release it without it and i can create another separate PR later or you want to rather wait ?

I've been using this PR for a few days and can say I'm loving the functionality. I'd vote for releasing it and, as you mention, subsequently create an additional feature enhancement to add additional messaging.

I merged this with Master and did a little bit of QA along with container linking - LGTM :+1:

@TeckniX great review. Yeah this seems like an outside error.
Taking another quick look at the code. Sorry for the long delay on getting this merged, @VojtechBartos.

Any updates?

@louy It seems the branch has a few conflicts that need to be resolved along with enhancements to make it work as expected -

@louy @FrenchBen sorry guys, my schedule was pretty full last couple weeks. I hope i will have free time to finish it during weekend.

:+1: Thanks @VojtechBartos

This will be a great feature @VojtechBartos, thanks ! :+1:

Any idea on when this will be merged ?

@rwatts3 Reviewing this asap, but it depends on if there is more work required for that PR to be merged.

As seen above there are currently conflicts that @VojtechBartos will be updating - Currently he is unable to do so.
@rwatts3 Feel free to fork his Ports edit and make the necessary changes so that it can be merged :)

Grabbed all relevant code to get everything up to date and tweaked a few things, as seen here:
https://github.com/kitematic/kitematic/pull/962
#close

Closing for #962
@VojtechBartos @FrenchBen huge thanks for your work on this, and apologies on the delay in getting it merged. Glad to see it come together. I'll make sure to give credit where it's due in the release notes.

Sorry guys that i have drop ball on this. I am currently finishing my master thesis and it takes a lot of time. But i am happy that this feature is finally in !

@VojtechBartos No problem, thanks for doing the heavy lifting on it - Looks good!


React test

Add unit tests for  operate.js and calculate.js using Jest.
Create unit tests for React components.

@Cabraham1 I don't have a coding partner. I was working alone on the projects.


update docs around volumes

Please provide documentation on how to properly create a bind between the container and the host machine.

Hi!
Please read this important information about creating issues.
If you are reporting a new issue, make sure that we do not have any duplicates already open. You can ensure this by searching the issue list for this repository. If there is a duplicate, please close your issue and add a comment to the existing issue instead.
If you suspect your issue is a bug, please edit your issue description to include the BUG REPORT INFORMATION shown below. If you fail to provide this information within 7 days, we cannot debug your issue and will close it. We will, however, reopen it if you later provide the information.
This is an automated, informational response.
Thank you.
For more information about reporting issues, see https://github.com/docker/docker/blob/master/CONTRIBUTING.md#reporting-other-issues

BUG REPORT INFORMATION
Use the commands below to provide key information from your environment:
docker version:
docker info:
uname -a:
Provide additional environment details (AWS, VirtualBox, physical, etc.):
List the steps to reproduce the issue:
1.
2.
3.
Describe the results you received:
Describe the results you expected:
Provide additional info you think is important:
----------END REPORT ---------
#ENEEDMOREINFO

@rwatts3 First of all, pull requests are always welcome if you find something is missing. This is a community supported project, with thousands of hours poured into it by the community.
Second, if there is a some missing docs, lets keep this issue focused on that.
For support, please see #docker on IRC, the docker-user mailing list, or forums.docker.com
That said, the API is documented here: https://docs.docker.com/reference/api/docker_remote_api_v1.19/#create-a-container
Specifically, to mount a file/folder from the host into the container, see the section on "Binds", in HostConfig.Binds.
A basic configuration looks like so:
{
    "Image": "busybox",
    "HostConfig": {
        "Binds": [
            "/tmp:/host_temp"
         ]
    }
}

Thank you , this helps and I see where documentation may have been updated to better explain this process.  I have another question however.
What is the process for starting a container using a container_settings.json file.  In the file I'll define the port and host name that I want to use to run my instance.  Essentially I am trying to get to my site running in docker but going to mydomain.com instead of the ip address of my vps

@rwatts3 : docker does not handle that. You should look at the nginx web server and the server_name directive to handle your issue.
@thaJeztah : I think this issue can be closed.

@rwatts3 for an easy to use solution, you might be interested in https://github.com/jwilder/nginx-proxy, which maps domain-names to containers. However, the GitHub issue tracker is not a support forum, so if you need more help, please use one of these; https://github.com/docker/docker#talking-to-other-docker-users-and-contributors
I'm closing this issue, because I think your question(s) have been answered (Thanks for the ping, @ankushagarwal )


Asv test support

These changes add support for benchmarking leveraging the Air Speed Velocity framework to display benchmarks over time. This will be extremely helpful in catch regressions in performance while also ensuring any new changes do not adversely affect our selected benchmarks.

rerun tests

rerun tests

rerun tests

rerun tests


Update Webhook button not working

Describe the bug
Clicking on the Update Webhook button does nothing.
To Reproduce
Steps to reproduce the behavior:

Go to the "Manage" option at the top menu bar
Click on the "Webhooks" tab
Create a new Webhook or skip this step if you already have a Webhook
Edit the Webhook
Make changes to the Webhook and try to save the changes by clicking the "Update Webhook" button
See that nothing happens. NO call to the API nor related console error.

Expected behavior
Clicking the "Update Webhook" button while editing a Webhook should save the changes to the BE.
Screenshots

How are you running Flagsmith?

[] Self Hosted with Docker
[ ] Self Hosted with Kubernetes
[X] SaaS at flagsmith.com
[X] Some other way (Local dev env)

@novakzaballa  This issue still exists for environment webhooks


repl panics with undefined variable

Original title: repl panics with string interpolation of undefined variable
If I do "$(a)" without previously defining the variable a on REPL it crashes:
thread 'main' panicked at 'not yet implemented: immediate subtractions with values greater than 12bits', crates/compiler/gen_dev/src/generic64/aarch64.rs:1861:13
note: run with RUST_BACKTRACE=1 environment variable to display a backtrace
Edit: It's a more general issue: it also happens with Str.concat a "" and b + 1, but not with a.
Tested on roc_nightly-macos_apple_silicon-2024-02-16-943d7a3cdf
This may be related to #5708, I'm not sure if it should be a different issue as the error message is different.

This is a caused by a todo!, it's just not implemented yet. Specifically this one: https://github.com/roc-lang/roc/blob/22423ca98bef41e2f55ae54e11c632bd0610c241/crates/compiler/gen_dev/src/generic64/aarch64.rs#L1861
Someone else ran into the same todo! here: https://github.com/roc-lang/roc/issues/6810
Since there's a todo in the source code to remind us to implement it some time, I don't think we need an issue to stay open for it, so I'm closing this issue.


Move Invite Contributors into Account DropDown

Invite Contributors is currently a dialog so it needs to be converted into a dropdown so sign out can be added.


Two Feature Requests

Two hopefully simple feature requests.
1 - Name the sensors more descriptive than just their values. Like instead of "sensor.free_chlorine" it's "sensor.leslies_free_chlorine" - This is mostly just for collision purposes. Right now I've got WaterGuru, PoolMath and Leslies integrations, and they all have similar named sensors.
2 - Include a "last tested" value. It'd be nice to both know and set automations to remind myself to take water to the store for further testing.
3 - (Bonus?) In Store vs At Home notation. I don't have the home device, but it seems like you might and that data works as well. Might be good to know which data is which.

Polled device would be cool. One of the things I tried doing was setting a footer in the cards that was FC or PH (example below). As none of the integrations I have track that data over time, it's the most boring graph ever. I think polled device would solve that?


Scroll Controller

it is possible to add list controller to CustomDropdown.multiSelectSearchRequest ?
What I will do
1-I will dedect bottom of listview.
2- then will get new data from endpoint.
3- then I will add new items to list

Hey @enes-kal Yeah, good idea. listController property will be available in the next release!

Hey @enes-kal
itemsListController is now available in the latest release 3.1.0. You can check. Thanks 😊


Missing tabs on gene feature page

I was seeing this a lot last night, and now I'm seeing it again.  I click on a gene from the search results and while the information appears to load, the tabs across the top of the page that give me access to the genome browser, compare region viewer, etc. are all missing.  This is VERY annoying as there are few times that I want to look at the genome browser, but this happens to be one of them.

Harry , I saw the same think just now [tabs disappeared], when I pinged you on skype and you told me jaboss having problem.
I wonder if the disappearance of the tabs is related to the jboss problems!!
-Maulik


Data Preparation Pipeline/Code

Hi, pySuStaIn is a great work, thanks for your effort!
I hope to use SuStaIn to subtype patients from our private Alzheimer's Disease structure MRI dataset.
However, I find it hard to implement the data preparation part (i.e. how to obtain z-scores from the raw MRI images).
Could you share your AD MRI data preparation code? or maybe provide some more detailed pipeline instructions of it?
(I checked the instruction provided in your Nat.Comm. paper, but found it too coarse to reproduce.)
Grateful for your help.

Extract biomarkers from your raw MRI, e.g. regional volumes of GM tissue.
Identify your control group => calculate mean of controls m and standard deviation of controls s for each biomarker
For each biomarker x, calculate z = (x - m)/s
Make sure that z increases with progression => swap sign if necessary

Hi, sorry to bother again.
I notice, in ADNI, the control group is defined as those CN subjects with CSF Abeta 1-42 > 192 pg/ml.
I do not understand why we need the restriction of CSF Abeta 1-42 > 192 pg/ml ?
Since we currently do not have the CSF data, can we just use all CN subjects as our control groups?
Thx.

Hope this doesn't sound too brutal, but you're asking about a study design choice, not pySuStaIn. This is not the place for that.
For the record, amyloid pathology is a hallmark of Alzheimer's disease and so CN individuals with low Abeta in CSF have high Abeta in the brain and therefore may develop Alzheimer's disease.

My apologies.
I know this is not an appropriate place to ask problems about the SuStaIn paper. I asked here only because I failed to receive any respondence from Dr. Young (both [at]ucl.ac.uk and [at]kcl.ac.uk) for about a weak. Any suggestions?


Authentication support for prompt=none and id_token_hint

[x] I read and understood how to enable logging

Issue / Steps to reproduce the problem
Here is our situation:

We have a desktop application which can render a login form in a web browser control.
After the user logs in to the STS, they are redirected to a page that loads the access and identity tokens into JavaScript variables.
The desktop application can then read these tokens and make requests to services.
Later, the user wants to open a Web UI in a full browser.
We would like to pass the identity token in the URL, and bypass the login screen

Now, I realize there are several missing pieces that are not part of Identity Server:

The web UI's OpenID Connect middleware would likely not (out of the box) take the ID Token and then change the STS authentication URL to include prompt=none and id_token_hint. We could work around that.
The Identity Server, by default, I believe just stores logged-in users in cookies, so it would have no idea this user had recently logged in, and have no knowledge of it's identity token. Perhaps there is a Identity Server provider we can write to store session in a DB to solve this.

Perhaps there is another way to handle this flow...
Relevant parts of the log file
<log goes here>

You should read the "native apps" spec - and use the system browser for both login and other web UI.
https://tools.ietf.org/wg/oauth/draft-ietf-oauth-native-apps/
this library can help you with that:
https://github.com/IdentityModel/IdentityModel.OidcClient2

@leastprivilege, Thank you for that suggestion. From my research, I can expect us to encounter many difficulties (sharing cookies) with that approach when using IE, and it is likely impossible with Chrome.
Does the OpenID Connect spec intend for prompt=none combined with id_token_hint to be a method for continuing a current identity session? It's unclear to me whether that is the case.

One strategy I had not considered, and that I believe is used by password managers, is the loopback interface redirect mentioned in the spec you referenced.
https://tools.ietf.org/html/draft-ietf-oauth-native-apps-07#appendix-B.3

yep - which is a possible approach with OidcClient - check the "ConsoleWithBrowser" sample in the repo.

Thanks, but I can't find anything by the name, ConsoleWithBrowser.

lmgtfy ;)
https://github.com/IdentityModel/IdentityModel.OidcClient2/tree/dev/clients/ConsoleClientWithBrowser


PIC ON VSC

please more details  about this beacuse i can't run it and i have xc8 compiler

Sorry for delay to write back.
Can you specify what is your problem exactly?
Anyways for troubleshooting, Make sure %XC_DIR% environment variable is set. It must point to XC8 compiler directory.

yes it is set
i have to change the path in the

c_cpp_properties

file

If you are using v2.10 use the path "...../Microchip/xc8/v2.10/pic/include/*" and I also change the intelliSenseMode to clang-x64. I did  that and it works


will direct downloading work

the normal instructions for the malware installer are not working, can i just download the project as a .zip file, unpack it, and use it from there??

In what way the instructions aren't working? since downloading the code (.zip file) would result in having the same code, we'd need more information on what you're doing

i downloaded the zip file from the Github source, then I extracted the folder. I tried to setup the thing, but at the end it gave me an error message. what am i doing wrong? i filled out all the required boxes together and made sure that none of the files were damaged by Windows Defender.

Could you show me the error message?

download now works through file.io - closing issue due to inactivity


[FR]: Native node:test support in js_test

What is the current behavior?
js_test requires an entrypoint to run, you can run NodeJS native tests (https://nodejs.org/api/test.html) by setting the entrypoint as your test file, but you can't have multiple files, or you need one js_test per test file
js_test(
    name = "lib_js_testrun",
    size = "small",
    chdir = package_name(),
    data = [":lib_js_test"],
    entry_point = "testfile.test.mjs",
    node_options = [
        "--test",
        "--test-reporter",
        "spec",
    ],
)

Another workaround is to use a main test file importing other files:
import "./first.test.mjs";
import "./second.test.mjs";

and putting this as the entry_point, but it doesn't scale well for bigger projects
Describe the feature
Allowing a different flag to run node tests on the current folder would be enough for simple use cases, but maybe a separate macro js_node_test would make more sense to simplify attribute types would make more sense in the long term

You could generate that one entry file since you know all the paths to import.
Or can this --test API still accept a separate (maybe empty) entry point? node empty.js --test t1.js t2.js? I've never used the API and haven't explored it yet so I'm not sure.

Probably could generate that file indeed, and as I said it's already working for me now.
It is more of a "nice-to-have" feature, as node is integrating tests natively now, we could have a rule that play nice with it like for Jest and Jasmine, not requiring any dependency for simple tests.
You can either node --test in which case it looks recursively for test files in your current folder and subfolders, or a list of files to tests (probably more appropriate for Bazel determinism), but the entrypoint of js_test accept only 1 file right now

We have another case where we generate a test entry point that points to all the test files, over here in python https://github.com/aspect-build/rules_py/blob/main/docs/rules.md#py_pytest_main
so yeah, that's one possible answer, a node_test_main rule or something to generate the entry point.
It's also possible to use list comprehensions in BUILD along with glob so you could just do something like
[
  js_test(
    name = "test_" + i,
    entry_point = s
 ...
] for i, s in enumerate(glob(["*.spec.cjs"]))


🎨  logging improvements

refs #7116
This PR contains small improvements to our logging component.
I already marked the TODOS in the issue #7116 !
If you go step by step through the commits, every single change is hopefully clear. Please read the commit description.
My favourite way of developing with node:
LEVEL=error MODE=long node index.js
It only prints errors and all request/response information.

ready for review

https://github.com/TryGhost/Ghost/pull/7597/commits/74a8e2901b99159466ead854c991b23000f5bd77
Removed req.ip from log output.
Removed response-time dependency.

pushed moving request logging into a middleware
https://github.com/TryGhost/Ghost/pull/7597/commits/82f9265a1141d1ed753a55d271ba162196403951

I have added a new commit: https://github.com/TryGhost/Ghost/pull/7597/commits/d7389e4bb13d909f7e19348a96aa6f5f19250f02
See commit description. We add a requestId and userId to each log entry if available.
If there is no userId available, it will show null right now.

Removed cuid for requestId as suggested. Using uuid now instead 👍 Thanks


Is there a way to: upgrade server connection from HTTP/1 to h2?

In 0.14.x:
https://github.com/hyperium/hyper/blob/d77c2599bc023b258b90a17f5b633c8b7b0cbd4b/src/server/conn.rs#L133-L135
But after hyper 1.0 with splited http1 / http2 module, I have not found this function provided. Should this be a part of hyper, or an sample program to do this in /example ?

Dumplicate of #2852


invalid ELF header

Reported from kibana-mithril.com
Hi, I am unable to install this 2FA with version 6.6.0 of Kibana.
Initially using the default kbn-authentication-plugin.zip package, I ran into the error message 6.6.0 is not compatible with 6.3.2. Thus, I changed the version from 6.3.2 to 6.6.0 in the package.json file.
I reran the plugin installation and this time the following error message showed up:  FATAL  Error: /usr/share/kibana/plugins/kbn-authentication-plugin/node_modules/ref-napi/build/Release/binding.node: invalid ELF header
Please let me know if there is anything I am doing incorrectly and what needs to be corrected for me to make this work. Thank you for your help!

I had the same problem. This is due to the fact that 'node_modules' in this package made for Windows. You need to remove the 'node_modules' directory and rebuild it under Linux. Repack and try again.
But at me on Ubuntu Server 16.04 gives the following error:
FATAL  Error: Optimizations failure.
5058 modules
ERROR in ./plugins/kbn-authentication-plugin/public/app.jade 2:10
Module parse failed: Unexpected token (2:10)
You may need an appropriate loader to handle this file type.
| style
>   include style/style.css
|   include style/app.css
|

I don't know what to do next...

Thanks for the info.
@FrancDeGir which version of Kibana are you using?

@codingchili tried on 6.5.4 and 6.6.0 version.

I'm trying on 6.6.0 now, not able to install the plugin. It seems to get stuck while "optimizing browser bundles." Maybe I just need more verbose logging.

I have all kiabna error log.
Kibana_Error_Log.txt

Thanks!.
There's a lot of related issues
https://github.com/babel/babel-loader/issues/173
Maybe there's some webpack configuration bundled with kibana that needs a poke.
Also, there's a bunch of plugin related issues to check
https://github.com/elastic/kibana/issues/19678
https://github.com/elastic/kibana/issues/6495
I will try to reproduce with more verbose logging and under Linux.

@FrancDeGir opened #32 for the loader issue.
Closing this as we are going to automate releases of windows/unix builds.


Create V2.0 Branch

Seems like release 2.0 has been on hold for a little while now and important updates like #35 have not been implemented yet.
@thebigredgeek  shall we create a v2 branch and start merging features like #35 ?
Not sure what the correct workflow should be for that.

Yeah I think that's a good idea.  I think we should try to get as many breaking changes as possible out of the way in v2, including spec compliance.

Alright done let's try and those into version-2
https://github.com/thebigredgeek/apollo-errors/tree/version-2


*: audit operator actions to hostPath volume

Partially addresses #1205
The operator will now audit the following actions for a self-hosted cluster to a hostPath volume:

Create an etcd pod
Delete an etcd pod
A spec update to the cluster
Deleting a failed cluster

To enable the auditing a hostPath volume must be mounted to the mountPath /var/tmp/etcd-operator as shown below. The hostPath itself can be anything but should ideally be /var/tmp so the operator container can write to the volume even when running as non-root.
spec:
  containers:
  - name: etcd-operator
    volumeMounts:
    - mountPath: /var/tmp/etcd-operator
      name: audit-volume
  volumes:
  - name: audit-volume
    hostPath:
      path: /var/tmp/

The audit file will be named <cluster-name>.log .
If no volume is mounted at the desired mountPath the operator will not audit and function normally as before.

Any examples what the audit log looks like?

These logs were generated from a non-self hosted cluster creating the audit logs during testing. It was easier to perform more actions on a non-self hosted cluster to generate the audit.
I'm generating more detailed logs for a self-hosted cluster via bootkube at the moment. Will post them here once I'm done.

@xiang90 @hongchaodeng Made the changes requested. The debug logger is now a separate object that appends to a log file for the cluster.
To turn on the debug logging the following need to be true:

The cluster must be self hosted
A volume must be mounted at the path /var/tmp/etcd-operator/debug
The etcd-operator flag debug must be set to true

The pod spec is not printed for pods added/deleted because that makes the output too verbose.
An update in the cluster spec is logged since that helps make sense of the other actions(pod creation/deletion) that the etcd-operator logs. However that can be removed if not neeeded.
Logs for a 4 master node self hosted cluster. The following actions were performed:

Resize the cluster from 1->4 pods after its creation
Delete one pod manually
Resize the cluster from 4->3 pods
The messages prepended with ########## were added by me to indicate certain events like the operator restarting.

The pod spec is not printed for pods added/deleted because that makes the output too verbose.

i think it is still worth to add even though it can be verbose.

More verbose logs which print pod spec for every pod created.

lgtm after addressing the flag merge issue discussed offline. thanks!

@hongchaodeng please take a final look. I've tested it manually on a self hosted cluster.
The debug logging will now be enabled if:

Cluster is self-hosted
And the flag debug-logfile-path is set


Add missing .lastIndexOf method

Node.js documentation for .lastIndexOf: https://nodejs.org/api/buffer.html#buffer_buf_lastindexof_value_byteoffset_encoding

Identical to Buffer#indexOf(), but searches the Buffer from back to front instead of front to back. Returns the starting index position of value in Buffer or -1 if the Buffer does not contain value. The value can be a String, Buffer or Number. Strings are by default interpreted as UTF8. If byteOffset is provided, will return the last match that begins at or before byteOffset.

@dcposch's PR: https://github.com/nodejs/node/pull/4846

@dcposch -- any interest in sending a PR to implement this? ;)

lol k

Yo @dcposch, no pressure, but this issue is still open if you want it 😉

sure, on it

Awesome! Fixed by #127


Switching profiles correctly updates the file access metadata

Using the --profile option made Kerblam! rename the files without updating the last modification time. This made switching profiles useless with make as it would not be aware that the input files were changed at all.
This patch fixes it, but introduces a new issue: running the same profile back-to-back updates the modification times again, causing make to treat them as new files (even though they are not).
This could be fixed by some caching mechanism whereby Kerblam! remembers the last profile used and skips updating times when the current profile is the same as the last.
(perhaps a .kerblam_cache file in ./data/in? or maybe in /tmp/...?)
TODO
Before merging, tick all of these boxes:

[X] cargo check passes without errors or warnings.
[X] @all-contributors is made aware of this PR.

The issue described in the PR was converted to issue #40


Updated godoc

Description
Updated godoc
Type of change

Documentation update

Testing steps
N/A
Checklist

[ ] make before_commit passes
[ ] updated documentation wherever necessary
[ ] added or modified tests if necessary
[ ] updated schemas and validators in insights-data-schemas in case of input/output change

Codecov Report

Merging #236 (1c98051) into master (cedf355) will not change coverage.
The diff coverage is n/a.

@@          Coverage Diff           @@
##           master    #236   +/-   ##
======================================
  Coverage    2.00%   2.00%
======================================
  Files          12      12
  Lines         650     650
======================================
  Hits           13      13
  Misses        637     637

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update cedf355...1c98051. Read the comment docs.


Add specs for Set#compare_by_identity

New methods: Set#compare_by_identity and Set#compare_by_identity?. Feature #12210
Related issue https://github.com/ruby/spec/issues/473

Thank you for the new specs!
I'll add some examples from #510 as well.


[intel_hpu]Fused new ropy custom OPs

Apply new fused OPs:

fused_get_rotary_embedding
fused_rms_qkv_rope_v2

remove cos/sin/position_ids for fused_rms_qkv_rope, use rotary_embs instead in V2.

add @zongwave @JianyuLi01 @LeoZhao-Intel to review
add @xiaoguoguo626807 to review


webpack4 warning

DeprecationWarning: Tapable.plugin is deprecated. Use new API on .hooks instead

some loader or plugin should be upgraded.

webpack transform modules warn. Thanks.

<EMAIL_ADDRESS>fixed this warn.


make difficulty_float general to all network

Fix #2783

Thanks for your contribution! The current code is surprising because difficulty_float does not look  the same as difficulty (docs and code). Please either make it more similar or justify the differences.

Reasons for the difference between the two->

First I have not handled the case when self.0 will be 0 -> as that was not handled even before.
https://github.com/rust-bitcoin/rust-bitcoin/blob/3c87d0c5a3b3f2b8bc32b74b62b1c8089e180413/bitcoin/src/pow.rs#L272

max.0.to_f64() / self.0.to_f64()
I have choosen this instead of->

(max.0/ self.0).to_f64()

as currently we have ->
 TARGET_MAX_F64 / self.0.to_f64()

which is similar to what I have code.

Thanks, I was really talking about the panics stuff, including documenting it.

Though I didn't understood why we are not making it panic if denominator is 0 as done in difficulty fun case?

I'm doing my best not to just tell you the whole solution mate, its a three line function that needs improving to be the same as the other one.

I'm doing my best not to just tell you the whole solution mate, its a three line function that needs improving to be the same as the other one.

I got the reason:

Basically having target value = 0 means an invalid state (as then no one can get the required block hash i.e difficulty  -> oo) ->  thus the func difficulty&difficulty_float`  handles this situation in different manner.
In difficulty func-> since we require the value in u128 which can't represent infinity -> therefore it just panics out ensures the program halts in an invalid state.
while in float func case -> return value is of f64 type which can represent infinity -> indicating an invalid state.

Why change the unit tests to use Signet values?
use Mainnet to keep the cleaner values that are able to be visually verified (the hex literal and the expected literal are easily relatable if you know what the mainnet difficulty).
You can add the Signet version of the tests in addition to the Mainnet ones if you’d like.

Heads up that the API tests are broken on master because I did some merges that broke them.
I will PR to fix it but I need to improve my local tooling first.

Also, rebase on master if you want to get past CI.

OMG, I have got egg all over my face. The code I posted yesterday is total rubbish because floats don't panic on divide by zero, which I didn't realise yesterday even though it is stated right there in the rustdocs that I cut'n'pasted, the original which I also personally wrote. Profuse apologies @15IITian, feels like I did more harm reviewing this work than if I'd done nothing. No wonder you didn't understand me originally, turns out I've had tunnel vision and been talking rubbish right since the start of this PR.
I'm fine to merge as is because the problems are all caused by me, and then I"ll PR to fix it. Or @15IITian could change this back to how he originally had it and I'll pull my head in.

I think "make difficulty and difficulty_float both panic on 0 target" is reasonable even though f64s don't panic when dividing by 0. Especially as a 0 target is basically impossible to obtain by any "normal" means.

Agreed, how about we update to
        // We want to explicitly panic to match `Self::difficulty` (float division by zero does not
        // panic). Note, target 0 is basically impossible to obtain by any "normal" means.
        assert_ne!(self.0, U256::ZERO, "divide by zero");

Yep, that sounds reasonable. Should we hold up this PR for that change?

 Are you ok to use the suggestion please @15IITian ?

The code I posted yesterday is total rubbish because floats don't panic on divide by zero, which I didn't realise yesterday even though it is stated right there in the rustdocs that I cut'n'pasted,

This I also try to explain here also ->
https://github.com/rust-bitcoin/rust-bitcoin/pull/2816#issuecomment-2154454360

Profuse apologies @15IITian, feels like I did more harm reviewing this work than if I'd done nothing.

No worries mate, even I also make blunders , after all we all are humans.

Are you ok to use the suggestion please @15IITian ?

Well, I agree with apoelstra's suggestion because ->

If we return f64::INFINITY for such an abnormal case, then other downstream functions will need to handle this error, which adds complexity. So, panicking when the denominator is zero simplifies the situation.


 This generally means that you are using server rendering and the markup generated on the server was not what the client was expecting. React injected new markup to compensate which works but you have lost many of the benefits of server rendering. Instead, figure out why the markup being generated is different on the client or server:
 (client) x" data-reactid=".0"><paper-toolbar data
 (server) x" data-reactid=".0" mode="standard"><pawarning @ warning.js:45ReactMount._mountImageIntoNode @ ReactMount.js:807wrapper @ ReactPerf.js:66mountComponentIntoNode @ ReactMount.js:268Mixin.perform @ Transaction.js:136batchedMountComponentIntoNode @ ReactMount.js:282Mixin.perform @ Transaction.js:136ReactDefaultBatchingStrategy.batchedUpdates @ ReactDefaultBatchingStrategy:62batchedUpdates @ ReactUpdates.js:94ReactMount._renderNewRootComponent @ ReactMount.js:476wrapper @ ReactPerf.js:66ReactMount._renderSubtreeIntoContainer @ ReactMount.js:550ReactMount.render @ ReactMount.js:570wrapper @ ReactPerf.js:66(anonymous function) @ router.jsx:32runStartupCallbacks @ startup_client.js:30ready @ startup_client.js:32
14polymer-micro.html:191 Uncaught TypeError: Cannot read property 'instanceCount' of undefinedPolymer.Base.createdCallback @ polymer-micro.html:191setInnerHTML @ setInnerHTML:30ReactMount._mountImageIntoNode @ ReactMount.js:820wrapper @ ReactPerf.js:66mountComponentIntoNode @ ReactMount.js:268Mixin.perform @ Transaction.js:136batchedMountComponentIntoNode @ ReactMount.js:282Mixin.perform @ Transaction.js:136ReactDefaultBatchingStrategy.batchedUpdates @ ReactDefaultBatchingStrategy:62batchedUpdates @ ReactUpdates.js:94ReactMount._renderNewRootComponent @ ReactMount.js:476wrapper @ ReactPerf.js:66ReactMount._renderSubtreeIntoContainer @ ReactMount.js:550ReactMount.render @ ReactMount.js:570wrapper @ ReactPerf.js:66(anonymous function) @ router.jsx:32runStartupCallbacks @ startup_client.js:30ready @ startup_client.js:32
5polymer.html:3264 Uncaught TypeError: Polymer.dom is not a function

Here's what I did:

in my project directory, I run:

bower install git@github.com:WebPaperElements/paper-input-autocomplete-chips.git
There were a few version conflicts, but none of them serious - in every case my project was depending on a slightly newer version than the autocomplete widget so I don't think this is the problem. For example I was using paper-item 1.1.3 and autocomplete wanted paper-input 1.0.3.

Add this the line to my config.vulcanize:

"/components/paper-input-autocomplete-chips/paper-input-autocomplete-chips.html",
Note that I can add paper-chip with no problem, its only when I add autocomplete that I get the error.
I've created this branch of my project which exhibits the error:
https://github.com/viridia/colloquy/commit/99bf7bbe4e6617636a1fe27bb5cdf19294789ff6
Let me know if you need further information or examples. I realize that this isn't going to be easy to diagnose remotely.

@viridia I found the problem, it's wrong import reference on the paper-input-autocomplete-chips. I'll publish a new release with the fix.


Add bittorrent-lsd to the webtorrent npm organization

Can you add bittorrent-lsd to the webtorrent npm organization? I think you can click "Add Package" on this page to do it: https://www.npmjs.com/settings/webtorrent/packages
Originally posted by @feross in https://github.com/webtorrent/torrent-discovery/pull/48#issuecomment-722649445

I think I've correctly added the package to the organization 👍
If you see something is missing or incorrect, just let me know 😉

Looks good to me!


Allow spellcheck to work with CamelCase in addition to snake_case

Is your feature request about something that is currently impossible or hard to do? Please describe the problem.
Many languages use lowerCamelCase and upperCamelCase conventions in contrast to snake_case conventions.
Vim already allows to spell check snake_case properly. But it lacks support for spell checking CamelCase versions. So someValidWord will always be false while some_valid_word is okay.
Describe the solution you'd like
I'd like to see native spell checking to work for CamelCase variants as well.
Describe alternatives you've considered
I've searched the internet, issues, pull requests and couldn't find a plugin or anything in that regard.
Additional context
The following screenshot demonstrates the current situation within PHP files:

I'm fine and happy if someone can point me into the right direction, e.g. to a working plugin, polyfill, etc.

Does :set spelloptions+=camel work as intended?

Thanks @zeertzjq that was an easy one. Will close the issue. It might help to reference spelloptions from WORDS section within spell.txt?
I skipped the end of quick start which as a reference, as it looked like there are only keyboard shortcuts and commands to add words. But it's my own fault in the end.


python311Packages.cchardet: fix for python 3.11

The .cpp file released with this package to PyPI was built using an older version of Cython that is incompatible with Python 3.11. This package is not actively maintained, so it's unclear when the fix for this will be merged and released.
In the meantime, we can include a newer version of Cython locally, which will be used instead to regenerate the .cpp file.
Related: https://github.com/PyYoshi/cChardet/issues/81, https://github.com/PyYoshi/cChardet/issues/77, and https://github.com/PyYoshi/cChardet/pull/78
Things done

Built on platform(s)

[ ] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[x] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
22.11 Release Notes (or backporting 22.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[x] Fits CONTRIBUTING.md.

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-ready-for-review/3032/1502

Maybe we should keep that even after the change is merged to make sure the files are always up to date unless it creates more maintenance work than it fixes.


[DONT-REVIEW] Update system demo

Not for review (yet).

You can open a "Draft PR" (click on the arrow next to/in the button to create the PR) instead of marking it with "[DONT-REVIEW]"

@mrBliss, thanks!


docs(content): improve doc on Falco least privileged with Docker container

What type of PR is this?

Uncomment one (or more) /kind <> lines:

/kind bug

/kind cleanup

/kind design

/kind user-interface

/kind content

/kind translation

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area blog

/area documentation

/area videos

What this PR does / why we need it:
This PR tries to better describe how Falco can be run according to the least privileged principle.
First, I removed the note stating that --privileged is required for Falco and eBPF. This is true in part. To be precise, on kernel versions <5.8 the CAP_SYS_ADMIN capability is required to perform the bpf syscall. The --privileged flag adds this capability under the hood, and that's why it works. However, that flag turns off many other security-related options, giving the process running in the container many ways to interact with the host, as if it were a normal process. As per the least privilege principle, it is better to only add CAP_SYS_ADMIN.
The solution with CAP_SYS_ADMIN is a simple one-liner that should work in any kernel version, and it is strictly required on kernel  <5.8. On kernel >5.8, the minimal set of required capabilities is CAP_BPF, CAP_PERFMON, CAP_SYS_RESOURCE, CAP_SYS_PTRACE and CAP_SYS_ADMIN is no longer needed. Unfortunately, depending on docker and runc, CAP_BPF, CAP_PERFMON will be ready to use in the near future. When they will be used, we will complete the transition to running Falco least privileged also in these newer kernel versions. Until that moment, we stick with  CAP_SYS_ADMIN, given that this capability still allows performing the operations granted by the newer CAP_BPF, CAP_PERFMON
Which issue(s) this PR fixes:

Fixes #
Special notes for your reviewer:
In the following, I am trying to better explain why each capability is needed.
To use the eBPF driver, Falco needs to be able to use the bpf syscall to load eBPF programs and create maps, and to open  per-cpu ring buffers, which is done via the perf subsytem. Before kernel 5.8, the ability to perform these operations was bundled together under the CAP_SYS_ADMIN capability. To separate out BPF and perf functionalities from the overloaded CAP_SYS_ADMIN capability, the following two capabilities were introduced starting from kernel 5.8:

CAP_BPF
CAP_PERFMON

Other needed capabilities are:

CAP_SYS_RESOURCE: Falco needs this to call the setrlimit syscall. This syscall is used together with RLIMIT_MEMLOCK flag. Usually, this flag is used to set the amount of memory that can be mlocked into RAM, preventing a possible swap out. On kernel <5.11, eBPF uses locked memory for maps and other things. The default memory limit value is very low, so even a very simple eBPF program will fail to load due to this. The workaround is to increase the default value to something acceptable so that maps and other stuff can be correctly mlocked in memory. After kernel 5.11 the accounting of memory for eBPF programs and maps is done via memory cgroups, so this capability is no more needed because there is no need to change that limit. You can dig deeper reading this blog post and patch.
CAP_SYS_PTRACE: Falco needs this capability because it accesses fields like environ in the proc file system, when it constructs the "state of the world" at initialization. The /proc/<pid>/environ pseudo file operations will retrieve the memory descriptor of the target process to access its memory and retrieve the environment variables. From the userspace standpoint, the permission to do so is mapped to the CAP_SYS_PTRACE capability. For the curious reader, see environ_open and environ_read implementation in the kernel.

Ultimately, CAP_BPF, CAP_PERFMON, CAP_SYS_RESOURCE, CAP_SYS_PTRACE should represent the minimum set of capabilities needed by Falco, but depending on the version of the container runtime of choice, CAP_BPF could not be correctly recognized. Unfortunately in this case, CAP_SYS_ADMIN is required instead.
I intend to write a blog post with this information soon and link it to the documentation

Welcome @loresuso! It looks like this is your first PR to falcosecurity/falco-website 🎉

[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: loresuso
To complete the pull request process, please assign rajakavitha1 after the PR has been reviewed.
You can assign the PR to them by writing /assign @rajakavitha1 in a comment when ready.
The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

/approve

[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: leogr, loresuso
The full list of commands accepted by this bot can be found here.
The pull request process is described here

Needs approval from an approver in each of these files:

OWNERS [leogr]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment


Support Add Connected Service

A connected service defines a wizard UI to configure the service, and a handler for each technology/project type that it supports.
It is possible to add a handler in our VSIX that adds R support for an existing connected service.
Example stub for adding R support for Azure Storage:
    [ConnectedServiceHandlerExport("Microsoft.Azure.Storage", CustomEvaluator = true)]
    class AzureStorageConnectedServiceHandlerR : ConnectedServiceHandler, IVsHierarchyCustomEvaluator {
        public override Task<AddServiceInstanceResult> AddServiceInstanceAsync(ConnectedServiceHandlerContext context, CancellationToken ct) {
            throw new NotImplementedException();
        }

        public bool Evaluate(IVsHierarchy hierarchy) {
            Guid typeGuid;
            hierarchy.GetGuidProperty(VSConstants.VSITEMID_ROOT, (int)__VSHPROPID.VSHPROPID_TypeGuid, out typeGuid);
            object typeName;
            hierarchy.GetProperty(VSConstants.VSITEMID_ROOT, (int)__VSHPROPID.VSHPROPID_TypeName, out typeName);
            bool supported = typeGuid == RGuidList.CpsProjectFactoryGuid && ((string)typeName) == "R";
            return supported;
        }
    }

We need to decide on which connected service we want to support in R.  AFAIK, none of the existing connected services even have R libraries for their service, so it doesn't make sense to add R project support for them until someone creates the R library first.

That one actually may be us :-)
I can imagine Blobs and Tables. Also, there is SalesForce service in VS and it appear to have the adapter https://hiratake55.wordpress.com/2013/03/28/rforcecom/

Also, it looks like R Server can access blobs
https://github.com/Azure/azure-content/blob/master/articles/hdinsight/hdinsight-hadoop-r-server-storage.md
maybe we could borrow some code.

Probably pending creation of Azure SDK for R. We don't have bandwidth to code this ourselves.

Cleaning up backlog


Ruby C API error handling

Currently class static method calls and object method calls are not properly handling errors.
If there's an uncaught exception in Ruby, the program will terminate (segfault).
See issue #53
To solve this, rb_protect must be used:
https://silverhammermba.github.io/emberb/c/#rb_protect

We have added rb_protect to the invokations, I think it should be enough for now, but we should improve this eventually. Let's do it on demand, whenever someone finds a segmentation fault. We have stack unwinding so we can localize the call and rb_protect it when needed.


Add .gitignore

This PR adds a .gitignore file to the project. So far it only avoids node_modules to go through.
PD: I am new in development and in Open Source. If there is another way set in place to control these type of files ignore the PR

Thanks @Miguelerja! 👍


wording switch Cryptographic Holder Binding

replace "Disable to accept Bearer credentials as tickets with low assura,ce"
by
"Disable cryptograpĥic binding for claim based binding credentials"

when the crypto binding is disable, there is no proof in the credential request

not seen in build 2.2.21


[feat]Option to turn off MQTT server

Is your feature request related to a problem? Please describe.
  It seems there is a way to shut off the websocket gateway and just use the MQTT one but not a way to do the reverse.  I can just leave it pointing to localhost but that continues to attempt to connect and refuses filling the logs with unneeded errors.
Describe alternatives you've considered
None
Additional context
Using the new Homeassistant integration and using websockets and not MQTT the MQTT gateway is redundant in my setup

Try the disable gateway toggle.

That also hides all the options for the websocket gateway so I assumed that shut that off as well.
I just quickly tested it and it does seem to shut off the websocket as well as MQTT.

I've been running with "Disable Gateway" ticked, and my Home Assistant instance connecting to it via WebSocket:

Just toggle the disable gateway flag, that's the way to do it. If you are using docker use the dev tag instead of the latest


Cast on particular movie page

i did not understand task

the API have a lot of information regarding a particular movie like actor/actress cast, director information, release dates, etc. The issue is revolving around the usage of this provided information and upgrading the UI of the app with this. Any doubts??

ok now i understand and able to work on this issue please assign me sir 🙂


add mkdir before cp when using accept

Avoiding error when we run clash accept for the first time and the directory doesn't exist.

Good catch, thanks!


Corrected password for trust store access for LDAP configuration.

Description
This PR corrects a bug in the 5.5.x molecule scenario rbac-mtls-provided-ubuntu.  The LDAP password for accessing the trust store to authentication was not set correctly.
Type of change

[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
[ ] This change requires a documentation update

How Has This Been Tested?
This has been validated by running the rbac-mtls-provided-ubuntu scenario on the 5.5.x and validating that verification passes.
Checklist:

[x] My code follows the style guidelines of this project
[x] I have performed a self-review of my own code
[ ] I have commented my code, particularly in hard-to-understand areas
[ ] I have made corresponding changes to the documentation
[x] My changes generate no new warnings
[ ] I have added tests that prove my fix is effective or that my feature works
[ ] Any dependent changes have been merged and published in downstream modules
[ ] Any variable changes have been validated to be backwards compatible

The scenario rbac-scram-custom-rhel also has the same ldap.ssl.truststore.password.
Would that require a change too?
My run of scenario rbac-scram-custom-rhel worked fine with the old one.

Let me test rbac-scram-custom-rhel, will do another PR if it's incorrect.

The rbac-scram-custom-rhel is fine.


wrong arg name for r in self.view.replace of sublime.pyi

In sublime.pyi it's:
self.view.replace(edit, r, text)

not:
self.view.replace(edit, region, text)

it follows the name in .py
    def replace(self, edit, r, text):
        if edit.edit_token == 0:
            raise ValueError("Edit objects may not be used after the TextCommand's run method has returned")

        sublime_api.view_replace(self.view_id, edit.edit_token, r, text)

I know what it should be. The current LSP-pyright chockes on r though and tells me to use region instead.

Oops, there seems to be more things like this. I have to check.

Fixed in 49c0e8b. It turns out to be r is actually the minor. Only 3 places use r. Well spotted!

so, ... do I just clear my cache and restart for a reload?

so, ... do I just clear my cache and restart for a reload?

I didn't tag a release as I think pyright is releasing a new version quite frequently. If you you want to fix it locally now, maybe fix them in Data\Package Storage\LSP-pyright\resources\typings\sublime_text.

ok thanks


[DesignProposal]: towhee command line tool for pipeline serve

Background and Motivation
There are many predefined pipelines and operators on towhee hub. The users may want to deploy the pipelines and operators to cloud platforms.
Design
Provide a command-line tool for pipeline/operator serving:
$ towhee serve -h <IP_ADDRESS> -p 8080 -r /app/myop towhee/image-embedding

towhee serve [-h host] [-p port] [-r route] [-D arg=val -D arg=val] pipeline/operator_name
Pros and Cons
No response
Anything else? (Additional Context)
No response

lgtm


add more explanation to the points

There should probably be two documents: one with succinct checklist and one with more detailed explanations.

There is now checklist, checklist-verbose.


Juniper vqfx lab not saving configs into the default directory

When making changes to the Juniper vqfx configuration these are not saved in the default directory. Instead the configuration changes made are lost whenever the containerlab is destroyed. I am unsure if this is a file permissions issue or just something which isn't yet working for these specific devices. I will ask a colleague to try this as well to confirm this is not a local file permissions issue on my side. However, this would seem unlikely since the folders are created without any problems with file permissions. I will report back on my findings unless this is already a known issue around this. I can see the directory structure is in place (below) but the folders are completely empty.
gary@gary-MS-7B17:~/container_lab/clab-2L2S_vqfx$ ls
ansible-inventory.yml  leaf1  leaf2  spine1  spine2

Also using the containerlab save command does not write the configs to the persistent directory.
gary@gary-MS-7B17:~/container_lab$ sudo containerlab save --topo vqfx.yml
INFO[0000] Parsing & checking topology file: vqfx.yml
INFO[0000] saved leaf1 running configuration to startup configuration file
INFO[0000] saved leaf2 running configuration to startup configuration file
INFO[0000] saved spine2 running configuration to startup configuration file
INFO[0000] saved spine1 running configuration to startup configuration file

If I look in the folders they are empty and there are no files created.

Hi @gwoodwa1
yes, this is a known issue. vQFX doesn't support config persistency, as this is a VM for which nobody added such functionality.
The config save feature should be possible to add rather quickly, if vqfx supports netconf. Do you know if it does?

Hi @hellt, Firstly you guys that came up with this deserve full credit for what is a real game changer. I believe the vqfx should support Netconf since Juniper by default allows you to use the same port as SSH i.e. 22. I will set this up and come back to you to confirm.

Out of the box with default config, Juniper vqfx does indeed support NETCONF over the standard SSH port 22. Hopefully, this might be enough to get the config persistence enabled (see below).
gary@gary-MS-7B17:~/container_lab$ ssh <IP_ADDRESS> -p 22 -l admin -s netconf
The authenticity of host '<IP_ADDRESS> (<IP_ADDRESS>)' can't be established.
ECDSA key fingerprint is SHA256:S5gTisaBW1vp3N2yiMYkQjVzTEbM/DAuFtPNPYrhHno.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '<IP_ADDRESS>' (ECDSA) to the list of known hosts.
Password:
<!-- No zombies were killed during the creation of this user interface -->
<!-- user admin, class j-super-user -->
<nc:hello xmlns:nc="urn:ietf:params:xml:ns:netconf:base:1.0">
   <nc:capabilities>
    <nc:capability>urn:ietf:params:netconf:base:1.0</nc:capability>
    <nc:capability>urn:ietf:params:netconf:capability:candidate:1.0</nc:capability>
    <nc:capability>urn:ietf:params:netconf:capability:confirmed-commit:1.0</nc:capability>
    <nc:capability>urn:ietf:params:netconf:capability:validate:1.0</nc:capability>
    <nc:capability>urn:ietf:params:netconf:capability:url:1.0?scheme=http,ftp,file</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:netconf:base:1.0?module=ietf-netconf&revision=2011-06-01</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:netconf:capability:candidate:1.0</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:netconf:capability:confirmed-commit:1.0</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:netconf:capability:validate:1.0</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:netconf:capability:url:1.0?scheme=http,ftp,file</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:yang:ietf-inet-types?module=ietf-inet-types&revision=2013-07-15</nc:capability>
    <nc:capability>urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring</nc:capability>
    <nc:capability>http://xml.juniper.net/netconf/junos/1.0</nc:capability>
    <nc:capability>http://xml.juniper.net/dmi/system/1.0</nc:capability>
  </nc:capabilities>
  <nc:session-id>3469</nc:session-id>
</nc:hello>
]]>]]>

ah, sorry, the save functionality is already there in vqfx. when you use clab save the running config is saved to startup config.
the problem is though that this startup file is not exposed to a container in any way. meaning that you don't get to see the stratup config in your containerlab host filesystem. The reason is that vqfx is a VM that runs inside a container, so in order to get the file out of a vm you have to use some workarounds, such as keeping the config on an internal ftp/http server. This part is not something that vqfx/vmx has at the moment. Instead of adding it today to vr-vqfx, I'd rather see if someone can add those platforms to boxen project.
One workaround that you can use today, is scp the saved config from the vqfx if you know the location of the startup config file

but, if anyone with python skills wants to address this in the https://github.com/hellt/vrnetlab/tree/master/vqfx then I would gladly review/accept this
basically the idea would be to run a process inside the container that will copy (with scp or something similar) a file from vqfx FS to containers FS to a certain path.
That path we will bind mount to container host so that it will be visible in the lab directory

Sounds tricky, if that's already been done or similar then it should be a case of follow the yellow brick road. However, it sounds like this is something bespoke and there is no reference model or precedent to follow. I will check the other Juniper virtual products to see if this is the same issue. Since if it works on VMX or cRPD then it may not need the wheel re-invented. If not then I could do it but with some hand holding and support.

it is custom, because getting files to/from VM is not possible without tricks like that.
Consider the case where you have vqfx VM deployed on your hypervisor with qemu/kvm or EVE-NG/GNS. The same question would pop up - how to get a file from a VM to your hypervisor? VMs do not have bind mounts to propagate a host file to the VM, you would need to copy it out.
Same applies to containerlab, since vqfx is a VM running inside a container.
there is one alternative approach that we used for SR OS - leverage the tftp/ftp/sftp config location. If vqfx can fetch its config from some server, then it can be added the same way we did with SR OS. If it can't though, then we would need to do it the way I explained in my prev. message

Absolutely right, I can see the active configuration file is there in the vqfx but the file is not exposed to the container itself.
admin@leaf1> file list /config/juniper.conf.gz
/config/juniper.conf.gz
{master:0}
admin@leaf1>

However, I can see a way forward where we either SCP or SFTP the file over using the shell inside the vqfx. Would this help in terms of copying the method you did for SROS?
admin@leaf1> start shell
% sftp
usage: sftp [-1246aCfpqrv] [-B buffer_size] [-b batchfile] [-c cipher]
          [-D sftp_server_path] [-F ssh_config] [-i identity_file] [-l limit]
          [-o ssh_option] [-P port] [-R num_requests] [-S program]
          [-s subsystem | sftp_server] [-JU rt_inst] host
       sftp [user@]host[:file ...]
       sftp [user@]host[:dir[/]]
       sftp -b batchfile [user@]host
% scp
usage: scp [-12346BCpqrv] [-c cipher] [-F ssh_config] [-i identity_file]
           [-l limit] [-o ssh_option] [-P port] [-S program]
           [-JU routing_instance]
           [[user@]host1:]file1 ... [[user@]host2:]file2
%

this helps to get the config in/out the VM, but in SR OS we used a different technique.
In SR OS you can say that you want the VM to find its config on a FTP server, and when the VM boots it will try to fetch the config from this remote location.
I am not sure if VMX has support for remote location of its config... but you can definitely first execute the clab save command to save the running to startup and then just copy it with scp to a container

I think it's possible to something like this
admin@spine1# load override<EMAIL_ADDRESS>source-address <IP_ADDRESS> routing-instance default.inet

My main problem is finding out the networking from my qfx back to my local machine i.e. which IP do I attach to. When you SSH you use a 172.20.20.x IP but this is of course NATed. Going back to my local machine it must be something else, I am looking into this side but I think the above will be a workable solution.

I get the idea of what we are trying to achieve. However, probably missing something here which will make this work. I've add a default route to forward it via <IP_ADDRESS> which is the container IP. I know this is the container IP because if I SSH to <IP_ADDRESS> it brings it back to the qfx. In order for SCP to work then I think we would need a different port because the SSH TCP Port 22 mapping will route back to the qfx. It's little on the complicated side but I will keep looking at it. I've installed some more tools into the container so I can see what is going on.
admin@spine1> show route

inet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)
+ = Active Route, - = Last Active, * = Both

<IP_ADDRESS>/0          *[Static/5] 00:37:18
                    >  to <IP_ADDRESS> via em0.0

admin@spine1> traceroute <IP_ADDRESS>
traceroute to <IP_ADDRESS> (<IP_ADDRESS>), 30 hops max, 40 byte packets
 1  * * *
 2  * * *

yeah, indeed, that is a loop there :D
a socat rule defined here basically forwards everything that comes to container:22 socket towards <IP_ADDRESS>:2022 - https://github.com/hellt/vrnetlab/blob/80bba74d2269eb14215fd4a35e51154644234936/common/vrnetlab.py#L667
then, using the qemu hostfwd rules, this gets routed to <IP_ADDRESS>:22 which is a qemu address - https://github.com/hellt/vrnetlab/blob/80bba74d2269eb14215fd4a35e51154644234936/common/vrnetlab.py#L399
to overcome this I think someone needs to look at the socat config options to check if we can run socat in a way that it will only forward packets incoming from eth0 interface towards <IP_ADDRESS>:22, and will not touch packets that come from internal interface (<IP_ADDRESS>)

Here's my strategy for a solution. I configure the Juniper to use a custom SCP TCP Port e.g. 65022 instead of Port 22. I add an additional socat listener for that port via the vrnetlab.py. I install an SSH server into the container and map that 65022 port into the sshd_config file. If my understanding is correct I would then re-image using that setup instead and re-deploy. When I do the SCP it would be to the <IP_ADDRESS> address using the 65022 custom port which is the container itself. This will take some working through but I can see a path to success somewhere in all this. Thank you for your pointers so far, it seems we're getting closer.

that seems doable, but it is a lot of steps to do
I think it might be way easier to fix the socat redirect rule https://github.com/hellt/vrnetlab/blob/80bba74d2269eb14215fd4a35e51154644234936/common/vrnetlab.py#L667
my idea is to restrict this socat rule to act only on packets incoming to a container, and not from the VM.
It seems, what you can do is to try this snippet which configures the socat to bind to eth0 interface and only then forward it to <IP_ADDRESS>:2022:
run_command(
                ["socat", "TCP-LISTEN:22,fork,so-bindtodevice=eth0", "TCP:<IP_ADDRESS>:2022"], background=True
            )

I hope this will immediately allow for VM to use ssh/scp towards <IP_ADDRESS>:22 as this won't be matched by socat rule and will use the scp/ssh server of a container
PS. you can also do changes in the python file without reimaing the vqfx. You will need to use binds instructions to make the patched common.py to be propagated to the container:
nodes:
  vqfx:
  binds:
    - common.py:/common.py

The Socat rule is working as expected so that's great news. The loop is broken so that side is fixed. Next I've installed the SSH-Server from Ubuntu into the container. I am getting an error if I try it from the Juniper vQFX or even locally on the container.
admin@leaf1> ssh <IP_ADDRESS>
ssh_exchange_identification: read: Connection reset by peer

This is the output showing the socat rule which you sent across to me which is working.
root@leaf1:/# ps -ef
UID          PID    PPID  C STIME TTY          TIME CMD
root           1       0  0 12:42 pts/0    00:00:00 python3 /launch.py --username admin --password admin@
root          17       1  0 12:42 pts/0    00:00:00 socat TCP-LISTEN:22,fork,so-bindtodevice=eth0 TCP:127
root          18       1  0 12:42 pts/0    00:00:00 socat UDP-LISTEN:161,fork UDP:<IP_ADDRESS>:2161
root          19       1  0 12:42 pts/0    00:00:00 socat TCP-LISTEN:830,fork TCP:<IP_ADDRESS>:2830
root          20       1  0 12:42 pts/0    00:00:00 socat TCP-LISTEN:80,fork TCP:<IP_ADDRESS>:2080
root          21       1  0 12:42 pts/0    00:00:00 socat TCP-LISTEN:443,fork TCP:<IP_ADDRESS>:2443
root          22       1  0 12:42 pts/0    00:00:00 socat TCP-LISTEN:6022,fork,so-bindtodevice=eth0 TCP:1
root          23       1 34 12:42 pts/0    00:04:10 qemu-system-x86_64 -enable-kvm -display none -machine
root          43       1 12 12:42 pts/0    00:01:32 qemu-system-x86_64 -enable-kvm -display none -machine
root         162       0  0 12:49 pts/1    00:00:00 bash
root         962      17  0 12:54 pts/0    00:00:00 socat TCP-LISTEN:22,fork,so-bindtodevice=eth0 TCP:127
root         964     162  0 12:54 pts/1    00:00:00 ps -ef

However, we're definitely making progress here. Just need to find a way of getting past this bit around the SSH key exchange.

maybe it is easier to act from the container side?
i.e. inside the container to do scp admin@<IP_ADDRESS>:/path/to/saved/config ./? That way you don't need to have a ssh server inside the container

Much better idea (as you mentioned above) is to use scp from the container towards the Juniper. Now I have successfully done that using the 172.20.20.x address with this dummy config file. Note I couldn't write it into the /config directory where the actual config is stored but it works copying into /var/tmp on the vqfx.
root@leaf1:/# scp juniper1.conf.gz admin@<IP_ADDRESS>:/var/tmp
Password:
juniper1.conf.gz                                                                                100%    0     0.0KB/s   00:00

I need to do some testing to make the process will work with load overrride but this is looking very workable. I will post back once I have done the testing and proved the whole thing working.

Okay so we have a working and tested solution. I will explain what I did in precise detail because there are some things around the edges which will still need to be done.
Step 1
added openssh-server into the vqfx docker file so the image has SCP available. Build image so containers all have SSH and SCP. Configuration for openssh-server left with defaults.
Step 2
SCP the backup config file from the container to the vQFX using the eth0 172.20.20.x IP address. Suggest using /var/tmp directory due to permissions.
root@leaf1:/# scp leaf1_backup.cfg admin@<IP_ADDRESS>:/var/tmp
Password:
leaf1_backup.cfg                                                                                100% 2464     3.9MB/s   00:00

Step 3
From inside the container SSH to the vqfx:
root@leaf1:/# ssh<EMAIL_ADDRESS>Password:
Last login: Tue Feb 15 03:32:09 2022 from <IP_ADDRESS>
--- JUNOS 19.4R1.10 built 2019-12-19 03:54:05 UTC
{master:0}

Step 4
Enter configure mode and to the load-override and commit
admin@leaf11> configure
Entering configuration mode
Users currently editing the configuration:
  admin terminal p0 (pid 2448) on since 2022-02-15 03:24:45 UTC, idle 00:08:16
      {master:0}[edit]

{master:0}[edit]
admin@leaf11# load override /var/tmp/leaf1_backup.cfg
load complete

{master:0}[edit]
admin@leaf11# show | compare
[edit system]
-  host-name leaf11;
+  host-name leaf10;
[edit system services rest http]
-     port 8082;
+     port 1082;
[edit vlans default]
-   vlan-id 1;
+   vlan-id 2;

{master:0}[edit]
admin@leaf11# commit

Step 5
Check the commit is complete
admin@leaf11# commit
configuration check succeeds
commit complete

All Steps Completed
The backup file in /var/tmp has been successfully loaded and overwrote the current running configuration

The process above is how we achieve the overall steps. You're right that going from the container to the Juniper is going to be much easier to work with than the other way around. However, there is a wrap needed to finish this off. For example, we need the persistent configuration directory to be mapped into the container then a script needs to look for any config files present and load these using the process which I went through. This can only be done once the container is fully booted I would assume unless there is a way we can poke the config stanza into the startup config as the container is launched. Anyways we have a process but just need to tie up the loose ends on implementation with containerlab.

Closing this one as there is no immediate fix for that at the moment
We would need a way for vrnetlab/boxen to work with config exposure to the host

In #889 @crankynetman added support for user provided configs for vqfx
Similar approach could have been implemented to a save command to make changes to persist


Cancel selection timeout if Agent is closed

We would always wait 10 seconds even if the ICE Agent was closed,
instead return early right when the agent is closed.
Relates to pion/webrtc#897

Codecov Report

Merging #123 into master will decrease coverage by 0.28%.
The diff coverage is 100%.

@@            Coverage Diff             @@
##           master     #123      +/-   ##
==========================================
- Coverage   77.65%   77.37%   -0.29%
==========================================
  Files          23       23
  Lines        1884     1887       +3
==========================================
- Hits         1463     1460       -3
- Misses        299      305       +6
  Partials      122      122

Impacted Files
Coverage Δ

selection.go
74.56% <100%> (-1.91%)
:arrow_down:

agent.go
78.68% <0%> (-0.33%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 34ef65f...01b6b47. Read the comment docs.


Update service worker setup

This is the next iteration of the ServiceWorker setup, here’s a recap of what’s been done:

Rewrite the ServiceWorker file
We now use the battle-tested Workbox library to handle all requests. This is going to be much easier to add new behaviours to the worker since the library is documented unlike our old code
Add a flag to activate the ServiceWorker
The ServiceWorker was previously enabled by default and could be disabled via an undocumented environment variable used by ember-service-worker. The variable didn’t follow our naming conventions and we also prefer to activate the ServiceWorker only when we really mean it. So now we have a SERVICE_WORKER_ENABLED environment variable which is false by default.
Add a flag to deactivate page caching
We added a SERVICE_WORKER_ENABLE_PAGE_CACHING environment variable to enable page caching. Before it was done by default and we realized that sometimes we want to always render the page via FastBoot to follow redirects or run other middleware. Now the variable is false by default to make sure that it’s a conscious choice.
Add a flag to activate the debug mode
As mentioned above we use Workbox so now we have a SERVICE_WORKER_ENABLE_DEBUGGING environment variable to activate Workbox’s debug mode. By default, the flag is set to true to make sure we don’t miss out on debugging information if we ever forget to enable it.

🦀 Requesting reviewers for this pull request:

@remi (contributor with 1 commits in the last 90 days and 65 commits overall)


Support for IKEA TRADFRI bulb E27 WS opal 980lm

MQTT message:
zigbee2mqtt/Led1545G12 {'state': 'ON', 'device': {'type': 'Router', 'modelId': 'TRADFRI bulb E27 WS opal 980lm', 'friendlyName': 'Led1545G12', 'manufId': 4476, 'ieeeAddr': '0xd0cf5efffe216e85', 'nwkAddr': 54317, 'manufName': 'IKEA of Sweden', 'powerSource': 'Mains (single phase)', 'status': 'online'}}
zigbee2mqtt/<DEVICE_ID>/set
{
  "state": "ON",   "brightness": 255,   "transition": 3, "color_temp": 50
}

Is it possible to add this bulb.

Here are the lines from configuration database.db from zigbee2mqtt. Maybe this will help. This is the data from the 2 bulbs i have of this type of tradfribulb.
{"id":9,"type":"Router","ieeeAddr":"0xd0cf5efffe1dd78e","nwkAddr":18886,"manufId":4476,"manufName":"IKEA of Sweden","powerSource":"Mains (single phase)","modelId":"TRADFRI bulb E27 WS opal 980lm","epList":[1],"status":"online","joinTime":1541364192,"endpoints":{"1":{"profId":49246,"epId":1,"devId":544,"inClusterList":[0,3,4,5,6,8,768,2821,4096],"outClusterList":[5,25,32,4096],"clusters":{"genBasic":{"dir":{"value":1},"attrs":{"10":{},"65533":1,"zclVersion":1,"appVersion":17,"stackVersion":87,"hwVersion":1,"manufacturerName":"IKEA of Sweden","modelId":"TRADFRI bulb E27 WS opal 980lm","dateCode":"20170331","powerSource":1}},"genIdentify":{"dir":{"value":1},"attrs":{"65533":1,"identifyTime":0}},"genGroups":{"dir":{"value":1},"attrs":{"65533":1,"nameSupport":0}},"genScenes":{"dir":{"value":3},"attrs":{"65533":1,"count":0,"currentScene":0,"currentGroup":0,"sceneValid":0,"nameSupport":0}},"genOnOff":{"dir":{"value":1},"attrs":{"16387":1,"65533":1,"onOff":1,"globalSceneCtrl":1,"onTime":0,"offWaitTime":0}},"genLevelCtrl":{"dir":{"value":1},"attrs":{"15":0,"16384":254,"65533":1,"currentLevel":254,"remainingTime":0,"onOffTransitionTime":5,"onLevel":255}},"genOta":{"dir":{"value":2},"attrs":{}},"genPollCtrl":{"dir":{"value":2},"attrs":{}},"lightingColorCtrl":{"dir":{"value":1},"attrs":{"15":0,"16397":0,"16398":370,"65533":1,"remainingTime":0,"currentX":30138,"currentY":26909,"colorTemperature":370,"colorMode":2,"numPrimaries":0,"enhancedColorMode":2,"colorCapabilities":16,"colorTempPhysicalMin":250,"colorTempPhysicalMax":454}},"haDiagnostic":{"dir":{"value":1},"attrs":{"65533":1,"numberOfResets":0,"macRxBcast":0,"macTxBcast":0,"aPSRxBcast":0,"aPSTxBcast":0,"nwkFcFailure":0,"packetBufferAllocateFailures":0,"averageMacRetryPerApsMessageSent":0,"lastMessageLqi":124,"lastMessageRssi":-69}},"lightLink":{"dir":{"value":3},"attrs":{"65533":1}}}}},"_id":"6LZdmmw4Jx81oUef"}
{"id":8,"type":"Router","ieeeAddr":"0x90fd9ffffe08d3ba","nwkAddr":61515,"manufId":4476,"manufName":"IKEA of Sweden","powerSource":"Mains (single phase)","modelId":"TRADFRI bulb E27 WS opal 980lm","epList":[1],"status":"offline","joinTime":null,"endpoints":{"1":{"profId":49246,"epId":1,"devId":544,"inClusterList":[0,3,4,5,6,8,768,2821,4096],"outClusterList":[5,25,32,4096],"clusters":{"genBasic":{"dir":{"value":1},"attrs":{"10":{},"65533":1,"zclVersion":1,"appVersion":17,"stackVersion":87,"hwVersion":1,"manufacturerName":"IKEA of Sweden","modelId":"TRADFRI bulb E27 WS opal 980lm","dateCode":"20170331","powerSource":1}},"genIdentify":{"dir":{"value":1},"attrs":{"65533":1,"identifyTime":0}},"genGroups":{"dir":{"value":1},"attrs":{"65533":1,"nameSupport":0}},"genScenes":{"dir":{"value":3},"attrs":{"65533":1,"count":0,"currentScene":0,"currentGroup":0,"sceneValid":0,"nameSupport":0}},"genOnOff":{"dir":{"value":1},"attrs":{"16387":1,"65533":1,"onOff":1,"globalSceneCtrl":1,"onTime":0,"offWaitTime":0}},"genLevelCtrl":{"dir":{"value":1},"attrs":{}},"genOta":{"dir":{"value":2},"attrs":{}},"genPollCtrl":{"dir":{"value":2},"attrs":{}},"lightingColorCtrl":{"dir":{"value":1},"attrs":{}},"haDiagnostic":{"dir":{"value":1},"attrs":{}},"lightLink":{"dir":{"value":3},"attrs":{}}}}},"_id":"RXM01kAtFU2MVyg8"}

This is Koen Kanters says:
IKEA TRADFRI LED bulb E27 980 lumen, dimmable, white spectrum, opal white (LED1545G12)
{
"state": "ON",
"brightness": 215,
"color_temp": 325
}

Can you explain how?

I am not sure if it is reaching the ultimate level of opal colour. Maybe the color temp should be higher?

Any ideas what is the maximum value?

@stas-demydiuk
This is what i found on a home assistent forum it says something about brightness and color_temp
zigatelog.txt
this is from my domoticz log when i switch brightness and color temp. The color temp does not change.
2018-11-12 22:32:07.643 Status: User: Admin initiated a switch command (10/Zigbee - tradfribulbcol_2/Set Level)
2018-11-12 22:32:09.402 Status: User: Admin initiated a switch command (10/Zigbee - tradfribulbcol_2/On)
2018-11-12 22:32:13.033 Status: setcolbrightnessvalue: ID: a, bri: 99, color: '{m: 2, RGB: 000000, CWWW: 2bd4, CT: 212}'
2018-11-12 22:32:18.084 Status: setcolbrightnessvalue: ID: a, bri: 99, color: '{m: 2, RGB: 000000, CWWW: 1ee1, CT: 225}'
2018-11-12 22:32:18.598 Status: setcolbrightnessvalue: ID: a, bri: 99, color: '{m: 2, RGB: 000000, CWWW: 04fb, CT: 251}'

@Gemies I've increased the range to 500, could you please check now

@stas-demydiuk Now it works perfectly. Thanks for your time and effort.


Add license, repository and bugs information

Package eslint-plugin-excel-custom-functions was missing these fields.
eslint-plugin-excel-custom-functions: npm WARN<EMAIL_ADDRESS>requires a peer of<EMAIL_ADDRESS>but none is installed. You must install peer dependencies yourself.
eslint-plugin-excel-custom-functions: npm WARN<EMAIL_ADDRESS>No repository field.
eslint-plugin-excel-custom-functions: npm WARN<EMAIL_ADDRESS>No license field.

Package office-addin-prettier-config was missing the repository field.
office-addin-prettier-config: npm WARN<EMAIL_ADDRESS>No repository field.

/Azurepipelines run


closesocket() for Win32

Hi, I need to close my TCP socket by using Win32 API closesocket(). Any plans on implementing this?

If you're using the standard library types then this should happen automatically when the socket goes out of scope. Or, if you want to do it explicitly, then drop(socket) will also work.

Which "standard types" do you refer to exactly?

Wait, I see! Now I understand (I think) the magic that happens:
impl Drop for OwnedSocket {
#[inline]
fn drop(&mut self) {
unsafe {
let _ = c::closesocket(self.socket);
}
}
}
Thanks for the help! I will try it.

Not magic, just the Drop trait. You might want to read the following:

https://doc.rust-lang.org/std/ops/trait.Drop.html
https://doc.rust-lang.org/reference/destructors.html
https://doc.rust-lang.org/rust-by-example/trait/drop.html


Replace phrase prefix with constant exact term match.

@atduarte we really need to fix the tests :(


Best practice for inserting search field for site?

[x] This is a question about using the theme.
[ ] I believe this to be a bug with the theme --- not Jekyll, GitHub Pages or one of the bundled plugins.
[ ] This is a feature request.
[x] I have updated all gems with bundle update.
[x] I have tested locally with bundle exec jekyll build.

Environment informations

Minimal Mistakes version: 3.1.8
github-pages or jekyll gem version: gem --version 2.5.1
Operating system: Mac OSX

Expected behavior
I'd like to learn how to add a search field -- do you recommend Google Custom Search or a Jekyll plugin such as https://github.com/PascalW/jekyll_indextank? Since I don't see a _plugins folder I wanted to double-check.

Steps to reproduce the behavior
Intentionally left blank as this is a question.

Depends on where you plan to host. If on GitHub then a plugin is out of the question (that's why there is no _plugins folder in the theme). Google Search is ok but that relies on what Google has indexed of your site which depending on its age might not be much.
I've personally used JavaScript solutions where you build a json file of your post content and that is used for searching. One of my older themes, So Simple has this feature built into it. Most of the Jekyll plugins out there take a similar approach.

Thanks! I'm building the files locally, then pushing flat files (from _site) to a gh-pages branch, so I think a plugin solution will work as long as it builds something that can be deployed as files.


docs: update README with setup instructions

Description
Include a summary of the change and relevant motivation/context. List any dependencies that are required for this change.
Fixes #25 and replace PR#34
Flutter Channel:

[x] I have used the Flutter Beta channel on my local machine

Type of Change:

Documentation

How Has This Been Tested?

running flutter app on VSCode IDE

Checklist:

[x] My PR follows the style guidelines of this project
[x] I have performed a self-review of my own code or materials
[x] I have made corresponding changes to the documentation

why is the travis PR failing 🙃

why is the travis PR failing upside_down_face

That looks like a error on travis side, i have rerun the test lets see

@isabelcosta yep, build was failing due to travis. new results here


Ground truth for the demo data

Hi Michael,
Thanks a lot for sharing your code. I am wondering if the ground truth data is included in the data.yml file or not. BTW, have you ever tested your code using some other public test data, such as EuRoC Mav dataset (http://projects.asl.ethz.ch/datasets/doku.php?id=kmavvisualinertialdatasets)?
Thanks

Hi Thomas,
I'm glad to see that my work may help someone.
To answer your questions, yes, the data.yml file generated by the simulator includes the interesting ground truth information (the position relative to the starting point and the attitude of the body in quaternion).
And, no, due to several delays encountered during the implementation of the filter, I did not have enough time to test the whole code on a public dataset. Also, I did this work in partnership with a company, so I prioritized experimental tests made with their own platform. If you want a complete and detailed overview of what was made and tested, I encourage you to request a copy of my report at the following URL (it free but you have to request it) : http://hdl.handle.net/2268.2/1523 (I updated the main readme with this information).
I hope it answers your questions.

Hi Michael,
Really appreciate that you share the code!
My request for a copy of your report was refused. Could you please email me a copy?
Email address<EMAIL_ADDRESS>Thanks a lot!!!

Hi meyiao,
It appears that the full text can not be distributed as such due to some confidential information given about the partner company (I was unaware of that). In the next days, I will upload a version where all those information are hidden or removed without hurting the core content of my work and which can be freely accessed by everyone. I will post an update on this thread when it is done.

Hi Michael,
Any news regarding a safe copy of your work? I would quite interested!
Thanks,
supitalp


Can you guys convert this loss to the tensorflow/keras version, please

Your work is awesome and very interesting but  Can you guys convert this loss to the TensorFlow/Keras version, please

Thanks a lot, we will try to add this as well.


optima

kia optima  fingerprinting

just ignore this first time doing it sorry

https://github.com/commaai/openpilot/pull/33027


[shapes] DrawPolyEx() Only first three and last two vertices render properly

Example Code
Vector2 testPoly [10] =
{
	{0,0},   //these render properly
	{0,100},
	{75,50},

	{150,100},//These freak out
	{225,50},
	{300,100},
	{375,50},
	{450,100},

	{600,100},  //These render properly
	{600,0}
};
//...... update & draw

DrawPolyEx(testPoly,10,LIGHTGRAY);

pink dots represents what the polygon should look like

doesn't that array have 10 elements ?
what if you change the 8 to a 10 ?
DrawPolyEx(testPoly,10,LIGHTGRAY);

Woops, you're right, they should be a 10. The issue still persists though

Woops, you're right, they should be a 10. The issue still persists though

Ok, checked it. DrawPolyEx() not expected to be used in that way... it is designed to draw triangles from a center point (first provided point) to the next 2 points. Triangle after triangle... but always considering first point as one of the triangle vertex. Here an explanatory image:

Note that third triangle drawn just draws over second triangle.
Solution: Don't use DrawPolyEx(). Just define all required triangles one by one into a Vector2 array (3 vertex by triangle) and draw them using DrawTriangle().


Switch to scala 2.13.0

Waiting for https://github.com/lihaoyi/Ammonite/pull/973, so that completions work fine in 2.13.


admin Login failed

Describe the issue:

When we start wso2 IS and try to access admin dashboard.Wso2 give an error ( Login failed! Please recheck the username and password and try again.)
How to reproduce:

Expected behavior:

Environment information (Please complete the following information; remove  any unnecessary fields) :

Product Version: [e.g., IS 5.10.0, IS 5.9.0]
OS: [e.g., Windows, Linux, Mac]
Database: [e.g., MySQL, H2]
Userstore: [e.g., LDAP, JDBC]

Optional Fields
Related issues:

Suggested labels:

@vialogic-admin Thanks for reporting the issue. Can you give the IS version you tested and which app you are trying to log in?

This issue is being closed due to extended inactivity. Please feel free to reopen it if further attention is needed. Thank you for helping us keep the issue list relevant and focused!


start: Job failed to start on ubuntu 14.04 tls

sudo mkdir /var/www/static-content and then cd into the new directory
sudo apt-get install forever-service
sudo forever-service install static-content --script index.js
sudo start static-content
error: start: Job failed to start

Have you installed forever?

Let me try - thanks for fast response!
On Jan 20, 2015 7:58 AM, "arvind-agarwal"<EMAIL_ADDRESS>wrote:

Have you installed forever?
—
Reply to this email directly or view it on GitHub
https://github.com/zapty/forever-service/issues/15#issuecomment-70649413
.

@vkhazin Did it work for you? If yes, please close the issue.

Fixed: by installing 'forever' package using npm:
sudo npm install forever -g.
My mistake was to assume that 'forever-service' would install 'forever' package as a dependency.

I am having a trouble to 'close' the issue - the only way I could find on
github to close an issue is to commit something.
Any suggestions how do I do that?
On Thu, Jan 22, 2015 at 4:05 AM, arvind-agarwal<EMAIL_ADDRESS>wrote:

@vkhazin https://github.com/vkhazin Did it work for you? If yes, please
close the issue.
—
Reply to this email directly or view it on GitHub
https://github.com/zapty/forever-service/issues/15#issuecomment-70990389
.

--
Sincerely yours,
Vlad Khazin
Email<EMAIL_ADDRESS>Skype: vladimir.khazin
Cell:<PHONE_NUMBER>
Fax:<PHONE_NUMBER>
http://www.linkedin.com/in/vkhazin