Sudo without password and unprotected rsa-keys

Hi!
Meteor-up is very helpful tool, but security reasons stops me to use it: unprotected sudo and unprotected RSA-key

AFAIK sudo access needs only once during new server setup: to install node, mongo, etc. It will be more like to ask sudo password in case if it actually needs than permanent unprotected sudo

Unprotected RSA key is a huge security leak I think. I have no idea about key protecting mechanism in different environments / operating systems (eg on OS X various apps can use RSA-key asking passphrase time to time) – so maybe it is difficult to implement. But unprotected private key is really-really bad.

We use root only to bind to port 80. Then we use downgrade permission of
the app. It's possible to change that anyway:
https://github.com/arunoda/meteor-up/wiki/Using-Meteor-Up-with-NginX-vhosts#mupjson-environment-settings
We've no solution for this at the moment.

On Thu Feb 12 2015 at 1:45:05 PM Oleg Fomin<EMAIL_ADDRESS>wrote:

Hi!
Meteor-up is very helpful tool, but security reasons stops me to use it:
unprotected sudo and unprotected RSA-key

AFAIK sudo access needs only once during new server setup: to install
node, mongo, etc. It will be more like to ask sudo password in case
if it actually needs than permanent unprotected sudo
2.
Unprotected RSA key is a huge security leak I think. I have no idea
about key protecting mechanism in different environments / operating
systems (eg on OS X various apps can use RSA-key asking passphrase time to
time) – so maybe it is difficult to implement. But unprotected private key
is really-really bad.
—
Reply to this email directly or view it on GitHub
https://github.com/arunoda/meteor-up/issues/261.


zathura crashes when :info is run on a non-PDF document (such as an EPUB)

On GitLab by @blankie on Oct 22, 2023, 07:13

Thank you, merged.


Create working doc for manuscript

[x] create separate doc for extraneous ideas
[x] move content out of manuscript into new doc

Working doc
Manuscript


breaking(go): upgrade ergonomics of prompt definition and calling

Can you add code snippets to the PR description? Can copy most of what I put in the issue, it's mostly updated -- just so people can see at a glance what changed.


Add Organization Owners

Ensure 'thelinuxfoundation' and 'caniszczyk' are added as initial org owners, this helps us make sure we have continuity of GH ownership

Done.


[bug] v1.13.0 fails to load on ARM alpine linux

Running nokogiri v1.13.0 on alpine arm images fails to load likely because it requires a musl compiled package
Help us reproduce what you're seeing
docker run --rm -it ruby:2.7.5-alpine sh
gem install nokogiri
irb
require 'nokogiri'

->> LoadError (cannot load such file -- nokogiri/nokogiri)

Additional context
It works perfectly fine on the docker ruby bullsye images

Hey all -- commenting in that I'm getting a 403 at RubyGems with gem install nokogiri starting yesterday, both locally and in builds. Possibly related.
$ gem install nokogiri
ERROR:  While executing gem ... (Gem::RemoteFetcher::FetchError)
    bad response Forbidden 403 (https://api.rubygems.org/quick/Marshal.4.8/nokogiri-1.13.0-x64-unknown.gemspec.rz)

Hey all -- commenting in that I'm getting a 403 at RubyGems with gem install nokogiri starting yesterday, both locally and in builds. Possibly related.
Snippet from WSL1 Ubuntu
$ gem install nokogiri
ERROR:  While executing gem ... (Gem::RemoteFetcher::FetchError)
    bad response Forbidden 403 (https://api.rubygems.org/quick/Marshal.4.8/nokogiri-1.13.0-x64-unknown.gemspec.rz)

Looks like WSL linux is not reporting the OS properly here, think this probably a different issue

@navied Thanks for opening a new issue.
Unfortunately I don't know if I'm reproducing what you're seeing because you haven't provided enough information. The point of me asking you to open a new issue was to have you fill out the template so that I wouldn't have to ask a bunch of questions and do a back-and-forth.
So I'll tell you what I did, and you tell me what you're doing differently.

I fire up a Graviton instance
I install docker
I invoke a shell in an alpine docker container on that Graviton instance
apk add gcompat
gem install nokogiri
nokogiri -v

If I don't install gcompat, I get an error about loading ld-linux-aarch64.so.1. Is that the error you're seeing? If not, please answer the questions from https://raw.githubusercontent.com/sparklemotion/nokogiri/main/.github/ISSUE_TEMPLATE/1-installation-difficulties.md

I've added a new section to the installation page detailing the gcompat workaround:
https://nokogiri.org/tutorials/installing_nokogiri.html#linux-musl-error-loading-shared-library
Please let me know if that's helpful?

@flavorjones the missing gcompat was it! Sorry should have done more googling into it clearly, I will close the issue now thanks for looking into it.


error: Error calling 'lxd forkstart gitlab /var/lib/lxd/containers /var/log/lxd/gitlab/lxc.conf': err='exit status 1'

Required information

Distribution:
Ubuntu Server 16.04
Distribution version:
16.04
The output of "lxc info":
apicompat: 0
auth: trusted
environment:
addresses:

<IP_ADDRESS>:8443
<IP_ADDRESS>:8443
architectures:
x86_64
i686
certificate: |
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
driver: lxc
driverversion: 2.0.0
kernel: Linux
kernelarchitecture: x86_64
kernelversion: 4.4.0-21-generic
server: lxd
serverpid: 3818
serverversion: 2.0.2
storage: zfs
storageversion: "5"
config:
core.https_address: <IP_ADDRESS>:8443
core.trust_password: true
storage.zfs_pool_name: lxd
public: false

Kernel version:
4.4.0-24-generic
LXC version:
2.0.2
LXD version:
2.0.2
Storage backend in use:
ZFS

Issue description
LXC container doesn't start anymore after calling "reboot" inside it. The only application inside it is gitlab. The following error raises:
error: Error calling 'lxd forkstart gitlab /var/lib/lxd/containers /var/log/lxd/gitlab/lxc.conf': err='exit status 1'
Try lxc info --show-log gitlab for more info
Though, when issuing a copy of the container with lxc copy gitlab gitlab2, the new container starts normally.
A brief description of what failed or what could be improved.
When
Steps to reproduce
Couldn't reproduce the error. When using reboot inside a brand new ubuntu:16.04 container, the container restarts and keeps on working normally.
Information to attach
uname -a:
Linux nubark 4.4.0-21-generic #37-Ubuntu SMP Mon Apr 18 18:33:37 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
lxc info --show-log gitlab:
Name: gitlab
Architecture: x86_64
Created: 2016/05/16 14:13 UTC
Status: Stopped
Type: persistent
Profiles: default
Log:
        lxc<PHONE_NUMBER>5115.309 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 3
        lxc<PHONE_NUMBER>5115.309 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 10
        lxc<PHONE_NUMBER>5115.313 INFO     lxc_container - lxccontainer.c:do_lxcapi_start:797 - Attempting to set proc title to [lxc monitor] /var/lib/lxd/containers gitlab
        lxc<PHONE_NUMBER>5115.314 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 10
        lxc<PHONE_NUMBER>5115.315 INFO     lxc_lsm - lsm/lsm.c:lsm_init:48 - LSM security driver AppArmor
        lxc<PHONE_NUMBER>5115.315 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .reject_force_umount  # comment this to allow umount -f;  not recommended.
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for reject_force_umount action 0
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:do_resolve_add_rule:216 - Setting seccomp rule to reject force umounts

        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for reject_force_umount action 0
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:do_resolve_add_rule:216 - Setting seccomp rule to reject force umounts

        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .[all].
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .kexec_load errno 1.
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for kexec_load action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for kexec_load action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .open_by_handle_at errno 1.
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for open_by_handle_at action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for open_by_handle_at action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .init_module errno 1.
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for init_module action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for init_module action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .finit_module errno 1.
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for finit_module action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for finit_module action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:342 - processing: .delete_module errno 1.
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:446 - Adding native rule for delete_module action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:449 - Adding compat rule for delete_module action 327681
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_seccomp - seccomp.c:parse_config_v2:456 - Merging in the compat seccomp ctx into the main one
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook /var/lib/lxd 3 start' for container 'gitlab', config section 'lxc'
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 3
        lxc<PHONE_NUMBER>5115.316 INFO     lxc_start - start.c:lxc_check_inherited:251 - closed inherited fd 10
        lxc<PHONE_NUMBER>5115.319 INFO     lxc_monitor - monitor.c:lxc_monitor_sock_name:178 - using monitor sock name lxc/d78a9d7e97b4b375//var/lib/lxd/containers
        lxc<PHONE_NUMBER>5115.373 DEBUG    lxc_start - start.c:setup_signal_fd:289 - sigchild handler set
        lxc<PHONE_NUMBER>5115.374 DEBUG    lxc_console - console.c:lxc_console_peer_default:469 - no console peer
        lxc<PHONE_NUMBER>5115.374 INFO     lxc_start - start.c:lxc_init:488 - 'gitlab' is initialized
        lxc<PHONE_NUMBER>5115.375 DEBUG    lxc_start - start.c:__lxc_start:1326 - Not dropping cap_sys_boot or watching utmp
        lxc<PHONE_NUMBER>5115.375 INFO     lxc_start - start.c:resolve_clone_flags:1013 - Cloning a new user namespace
        lxc<PHONE_NUMBER>5115.380 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5115.380 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5115.384 DEBUG    lxc_conf - conf.c:instantiate_veth:2614 - instantiated veth 'vethQ4UJEG/vethJS9WS0', index is '33'
        lxc<PHONE_NUMBER>5115.384 INFO     lxc_cgroup - cgroup.c:cgroup_init:68 - cgroup driver cgroupfs-ng initing for gitlab
        lxc<PHONE_NUMBER>5115.449 DEBUG    lxc_conf - conf.c:lxc_assign_network:3048 - move 'eth0' to '8576'
        lxc<PHONE_NUMBER>5115.449 NOTICE   lxc_start - start.c:do_start:777 - switching to gid/uid 0/0 in new user namespace
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:mount_rootfs:807 - No such file or directory - failed to get real path for '/var/lib/lxd/containers/gitlab/rootfs'
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:setup_rootfs:1221 - failed to mount rootfs
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:do_rootfs_setup:3612 - failed to setup rootfs for 'gitlab'
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:lxc_setup:3694 - Error setting up rootfs mount after spawn
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_start - start.c:do_start:833 - failed to setup the container
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_sync - sync.c:__sync_wait:57 - An error occurred in another process (expected sequence number 3)
        lxc<PHONE_NUMBER>5115.450 WARN     lxc_conf - conf.c:lxc_delete_network:2909 - failed to remove interface 33 'eth0'
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_start - start.c:__lxc_start:1353 - failed to spawn 'gitlab'
        lxc<PHONE_NUMBER>5115.473 INFO     lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/share/lxcfs/lxc.reboot.hook' for container 'gitlab', config section 'lxc'
        lxc<PHONE_NUMBER>5115.976 INFO     lxc_conf - conf.c:run_script_argv:367 - Executing script '/usr/bin/lxd callhook /var/lib/lxd 3 stop' for container 'gitlab', config section 'lxc'
        lxc<PHONE_NUMBER>5116.102 WARN     lxc_commands - commands.c:lxc_cmd_rsp_recv:172 - command get_cgroup failed to receive response
        lxc<PHONE_NUMBER>5116.102 WARN     lxc_commands - commands.c:lxc_cmd_rsp_recv:172 - command get_cgroup failed to receive response
        lxc<PHONE_NUMBER>5116.116 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5116.116 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5127.096 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5127.096 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5127.108 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type u nsid 0 hostid 100000 range 65536
        lxc<PHONE_NUMBER>5127.108 INFO     lxc_confile - confile.c:config_idmap:1498 - read uid map: type g nsid 0 hostid 100000 range 65536

On Wed, Jun 15, 2016 at 06:56:07AM -0700, Esteban Echeverry wrote:

        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:setup_rootfs:1221 - failed to mount rootfs
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:do_rootfs_setup:3612 - failed to setup rootfs for 'gitlab'
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_conf - conf.c:lxc_setup:3694 - Error setting up rootfs mount after spawn
        lxc<PHONE_NUMBER>5115.450 ERROR    lxc_start - start.c:do_start:833 - failed to setup the container

Looks like something went wrong in the LXD storage driver. Do you have
the lxd logs as well?

@tycho0 Unfortunately I had to delete the container and keep on working in the copy I made of it. Everything seems working fine right now. If the problem shows up again, I will post it here again. Thanks.

I'm 99% sure that this is our "usual" zfs unmount bug where the container rootfs sometimes gets unmounted by ZFS for no good reason.
I did include a "fix" for this issue in 2.0.3 which now simply issues a "zfs mount" whenever it detects a container isn't mounted at startup time.
Assuming this is fixed now and so closing it.

The error happened again today and I confirm that after upgrading from version 2.0.2 to 2.0.3 the problem is gone and the failing container now starts normally. Awesome! Thanks a lot!

cool


Show a "systems displayed" count on datamap map & table reporting page

Closes PROD-1893
Description Of Changes
This adds a new "systems displayed" count to the top header of the datamap map & table views to quickly see how many systems have been hidden by various filters. This also provides a better place to put the info box about the hidden GVL/AC vendors, which was too large and alarming before which was confusing users!
This "systems displayed" count shows the current number of filtered systems out of the total systems (e.g. 10 of 15 systems displayed. When Compass is enabled, it also shows a tooltip to explain why, in some cases, a large number of systems may be permanently hidden from this report, since it is common to enable 100s of GVL systems but those are purposely hidden on this page to avoid crowding the results. The real solution for this is our new "Reporting" page (which is currently behind a feature flag), which eliminates the need for hiding those systems in the first place by giving more control!
https://www.loom.com/share/2dba121e2fd34d0083d3eb7979a1af20?sid=8e99d45f-ddc5-4cd4-abab-24621a0bfbe5
Preview Environment
You can test this out on the Preview site here, which has Compass enabled and over 1000 hidden systems: https://fides-plus-nightly-git-ns-move-gvl-datamap-notice-ethyca.vercel.app/datamap
(use the login for https://fides-plus-nightly.fides-staging.ethyca.com/)
UAT Screenshots

Screenshot

Before

All Systems Shown

Filtered

Compass Enabled, Tooltip Hover

Empty State

Code Changes

[X] Remove GVLDatamapNotice
[X] Update SettingsBar to include "systems displayed" count
[X] Add optional tooltip when Compass is enabled

Steps to Confirm

[X] With Compass enabled, view the data map page
[X] With Compass disabled, view the data map page

Pre-Merge Checklist

[x] All CI Pipelines Succeeded
Documentation:

[ ] documentation complete, PR opened in fidesdocs
[ ] documentation issue created in fidesdocs

[X] Issue Requirements are Met
[x] Relevant Follow-Up Issues Created
[x] Update CHANGELOG.md
[ ] For API changes, the Postman collection has been updated

LGTM!


HTTP Bug

In TeamCity.cs the TeamCityConnectionSettingsBuilder's method UsingSSL() should be given the argument usingSSL. Currently there is no way to specify the builder to use standard http and not https. I believe line 10 should  be the following
var connectionConfig = new TeamCityConnectionSettingsBuilder().ToHost(host).UsingSSL(usingSSL).AsUser(userName, password).Build();

@krs43 thanks for noticing, I fixed it

Thanks for the quick fix!!


Implement hook to check if macro is referenced

Ok the scope seems to be correct. The comments on the old branch still apply 😄


Persisting selected LicenseModel in RDS instances

Fixes #999

Coverage remained the same at 93.461% when pulling c3d9f4e056013b8844f64789c9268b89a332848f on JackDanger:rds2-license-models into 8f2a0a83a1225668d21aa84c0f379fd57b8bff2e on spulec:master.


.driveignore doesn't handle absolute paths

I'd like to exclude specific folders from being pushed to remote drive, but it seems that I can only exclude files/folders by their basename:
# mkdir test/b -p
# touch test/a
# touch test/b/c
# echo 'b' > .driveignore
# drive push test
Resolving...
+ /test
+ /test/a
Addition count 2
Proceed with the changes? [Y/n]:^C
# echo 'b/c' > .driveignore
# drive push test
Resolving...
+ /test
+ /test/a
+ /test/b
+ /test/b/c
Addition count 4
Proceed with the changes? [Y/n]:^C
# echo '/test/a' > .driveignore
# drive push test
Resolving...
+ /test
+ /test/a
+ /test/b
+ /test/b/c
Addition count 4
Proceed with the changes? [Y/n]:^C

I also tried escaping '/' with single or multiple backslashes, but that had no effect either. May you please add this feature or point out, what am I doing wrong?
Thanks in advance!

Hello @asmisha, thank you for reporting this and welcome to drive!
Yes you are right, this is bug in the ignore checking done on. PR coming up in a second.

Please get the latest from master. Addressed by PR https://github.com/odeke-em/drive/pull/272.
Thank you for reporting this issue.


Add Hyperledger code of conduct

Required as a part of the Hyperledger common repo structure
Signed-off-by: Andrea Gunderson<EMAIL_ADDRESS>

When would sawtooth-seth be EOL'd?


Remove the PublishingAPI namespace.

Remove the namespace publishing_api.
This is causing multiple issues with Rails autoload in Development mode.
The reason is that it conflicts with the class PublishingApi in Gds adapters.
This is the second refactor in a series for Improve readability, maintainability and increase test coverage for the integration with Publishing API

 (5) Improve readability, maintainability and increase test coverage for the integration with Publishing API


CIS Scans fail on passing junk/invalid values in the config map from the UI

What kind of request is this (question/bug/enhancement/feature request): bug
Steps to reproduce (least amount of steps as possible):

Go to Cluster --> System Project --> Config --> Config map --> Edit
Currently we are allowed to input invalid values. Enter invalid values and click on save.
Run Scans again on the cluster.
Scan fails to generate report

Actual Result:
Scan fails to generate report
Other details that may be helpful:
Environment information

Rancher version (rancher/rancher/rancher/server image tag or shown bottom left in the UI): master-head - latest
Installation option (single install/HA): single

Cluster information

Cluster type (Hosted/Infrastructure Provider/Custom/Imported): custom
Kubernetes version (use kubectl version):

1.16.3

Passing malformed or invalid skip information used to cause an exception resulting in a scan failure. With the fix, the invalid information is ignored and the scan proceeds.

Verified on master-head - commit id: 61b78ddf7

Go to Cluster --> System Project --> Config --> Config map --> Edit
Currently we are allowed to input invalid values. Enter invalid values and click on save.
Run Scans again on the cluster.
Scan is run on the cluster successfully and the invalid value is ignored.
Go to Cluster --> System Project --> Config --> Config map --> Edit
Enter valid skip avlues.
Run Scans again on the cluster.
Scan is run on the cluster successfully and the expected test is skipped.


[Search with Typeahead]: Display data with customer API

Description
Result is not displaying correctly  with customer API
Component(s) impacted
Search with Typeahead
Browser
No response
Carbon for IBM.com version
v1.35
Severity
Severity 2 = Aspects of design is broken, and impedes users in a significant way, but there is a way to complete their tasks. Affects major functionality, has a workaround.
Application/website
https://www.ibm.com/support/customer/csol/terms/
Package
@carbon/ibmdotcom-web-components
CodeSandbox example
https://localhost.ibm.com/support/customer/csol/terms/
Steps to reproduce the issue (if applicable)

when using the IBM search the out put is well rendering

when using Custom API seems not render correctly

Release date (if applicable)
No response
Code of Conduct

[X] I agree to follow this project's Code of Conduct
[X] I checked the current issues for duplicate issues

@cedricpelle I'm having difficulty replicating your issue. If it's still a problem can you provide steps to duplicate?


Fix #5857 Add icon for foreign key constraint

Fixes #5857
Describe your changes :

I worked on issue #5857

Type of change :

[x] Improvement

Frontend Preview (Screenshots) :

Checklist:

[x] I have read the CONTRIBUTING document.
[ ] I have commented on my code, particularly in hard-to-understand areas.
[ ] I have added tests that prove my fix is effective or that my feature works.
[x] All new and existing tests passed.

Reviewers
@open-metadata/ui

@Sachin-chaurasiya can we get a similar icons like we have everywhere else like line icons cc @shahsank3t

@Sachin-chaurasiya can we get a similar icons like we have everywhere else like line icons cc @shahsank3t

Done, @harshach.


Mostly refactorings.

I did a merge with develop and test now. When everything works I am going to pull #1 and #2.

Runs on PBS with bioconda.


aliases for mounted files don't seem to work

So I found an interesting issue:
a = Alias.for_file('/Volumes/ExtHD/file.wav')

a = Alias.for_file('/Volumes/ExtHD/file.wav')
  File "/Users/mattetti/miniconda2/lib/python2.7/site-packages/mac_alias/alias.py", line 362, in for_file
    volinfo = osx.getattrlist(vol_path, attrs, 0)
  File "/Users/mattetti/miniconda2/lib/python2.7/site-packages/mac_alias/osx.py", line 818, in getattrlist
    raise OSError(err, os.strerror(err), path)
OSError: [Errno 22] Invalid argument: '/Volumes/ExtHD'

The issue seems to be with the way the path to the external hard drive is formatted. I'll dig deeper to figure out what's going on.

The issue seems to be related to the fact that we can't send ATTR_VOL to this path.

Ahhh! I think I found the issue, my external HD is formatted as ExFAT!

same problem with HFS formatted external harddrives, it looks like the issue is with the 0x2000 record. The documentation says: The TOC path (0x2000) is only used if there are multiple volumes between the target and the filesystem root. In that case, it contains an array, with every other item holding a TOC ID for a dictionary describing a volume; the values between TOC IDs appear to be zero. The array starts from the filesystem root.
@al45tair do you have more information about the content of the array? http://michaellynn.github.io/2015/10/24/apples-bookmarkdata-exposed/ exposes something interesting:
itemType=0x2000 flags=0x0 dataOffset=0x298 volInfoDepths:[  61440/0xf000 ,  0/0x0 ,  1/0x1 ]

That item/record seems to contain volume info depths, whatever that means. [61440, 0, 1]

I managed to find out the right incantation to generate the alias files even for external HD without having to use this record. Closing this issue since this library isn't really meant to generate alias files but more alias/bookmark records.


Justify posts

How can I justify a post?

Assume you mean the content? this may help: https://stackoverflow.com/questions/35077507/how-to-right-align-and-justify-align-in-markdown

This issue is not clear for me sorry


Add instructions for pulling the user id out of session storage

Type of PR (feature, enhancement, bug fix, etc.)
documentation
Description
The auth guide is great! Thank you for that.
I am using Sorcery for authentication, where the user_id is stored in a session, and not in a cookie, which might be the case for other authentication libraries. It took me a bit of searching to understand how to access the session from the Action Cable connection.
Why should this be added
Save time for other users with user_id in session storage.
Checklist

[x] My code follows the style guidelines of this project
[x] Checks (StandardRB & Prettier-Standard) are passing

Let's do this! I'm going to go with it, but if I find out later that you're making this up, there's gonna be trouble. ;)

Sorry for the churn. I accidentally ruined my morning by merging this. GitBook attempts to auto merge. Stay tuned.

 I think everything is good now, except for the whole part where I probably denied @mtomov credit.
Long story short: if you ever merge in something that touches a documentation page while there are active drafts, GitBook shits the bed and treats the entire document as a series of merge conflicts. Regardless of which source you choose, you still end up with two copies of everything.  I think everything is good now, except for the whole part where I probably denied @mtomovhttps://github.com/mtomov credit.
Long story short: if you ever merge in something that touches a documentation page while there are active drafts, GitBook shits the bed and treats the entire document as a series of merge conflicts. Regardless of which source you choose, you still end up with two copies of everything. It's like they never tested the feature.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/hopsoft/stimulus_reflex/pull/238#issuecomment-646732790, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AAMTIJVTKKKJJZCFBQMEA4DRXOHJXANCNFSM4OC3MMAQ.


Updated to Xcode 10, Swift 4.2, iOS 12.1

Updated to current version of Xcode, Swift, iOS - the code in the repository is very old (Swift 2?).

 Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.:x: ChristineTham sign nowYou have signed the CLA already but the status is still pending? Let us recheck it.

Thank you @ChristineTham for this contribution! I apologize that your pull request hasn't been attended to before now.
The changes you made were also made as part of our auth update in #13 so I'm going to close this PR without merging.


Fix an elusive crash in LLDBMemoryReader::readBytes().

Unfortunately I don't have an easy reproducer for this.
rdar://problem/49973326

@swift-ci test and merge

/home/buildnode/jenkins/workspace/swift-lldb-PR-Linux/branch-swift-5.1-branch/lldb/source/Target/SwiftLanguageRuntime.cpp:1933:45: error: use of undeclared identifier 'eValueTypeHostAddress'
16:05:33       in_value.GetValue().GetValueType() == eValueTypeHostAddress) {

This probably needs to be fully qualified.

@swift-ci test and merge


[WIP]Update configure-helm-values.sh

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 61.51%. Comparing base (91c5749) to head (1a58f56).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #152   +/-   ##
=======================================
  Coverage   61.51%   61.51%
=======================================
  Files           5        5
  Lines         317      317
=======================================
  Hits          195      195
  Misses        121      121
  Partials        1        1

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.