Issue in section "5.4.2 | PATCH | Ensure lockout for failed password attempts is configured | Set faillock common-auth"

Describe the Issue
This part will lock me out of the device and it fails halfway with the error " incorrect sudo password"
Expected Behavior
It should properly modify the /etc/pam.d/common-auth file without breaking authentication
Actual Behavior
It breaks the authentication because it fails to add the line with authsucc needed to pass authentication
Control(s) Affected
Authentication
Environment (please complete the following information):

Ansible Version: 2.13.11
Host Python Version: 3.8.2
Ansible Server Python Version: Python 3.10.6
Additional Details: I'm running on raspberry pi 4 ubuntu server 22.04

Possible Solution
I have modified the play in this section to temporarily comment out the pam_deny.so line to all changes can go through then enabling it back.
Here is the modification:

name: "5.4.2 | PATCH | Ensure lockout for failed password attempts is configured | temporarily disable pam_deny.so"
ansible.builtin.replace:
path: /etc/pam.d/common-auth
regexp: '^auth\s+requisite\s+pam_deny.so'
replace: '#auth    requisite                        pam_deny.so'

name: "5.4.2 | PATCH | Ensure lockout for failed password attempts is configured | Set faillock common-auth"
ansible.builtin.lineinfile:
path: /etc/pam.d/common-auth
regexp: '^{{ item.regexp }}'
line: "{{ item.line }}"
insertbefore: "{{ item.before | default(omit) }}"
insertafter: "{{ item.after | default(omit) }}"
loop:
- { regexp: 'auth\s+required\s+pam_faillock.so', line: 'auth    required            pam_faillock.so preauth', before: '^.*pam_unix.so'}
- { regexp: 'auth\s+sufficient\s+pam_faillock.so', line: 'auth    sufficient          pam_faillock.so authsucc', before: '^.*pam_deny.so'}
- { regexp: 'auth\s+[default=die]\s+pam_faillock.so', line: 'auth    [default=die]       pam_faillock.so authfail', after: '^.*pam_unix.so'}

name: "5.4.2 | PATCH | Ensure lockout for failed password attempts is configured | enable pam_deny.so"
ansible.builtin.replace:
path: /etc/pam.d/common-auth
regexp: '^#auth\s+requisite\s+pam_deny.so'
replace: 'auth    requisite                       pam_deny.so'

hi @big-yellow-duck
Thank you for raising this issue and providing a solution. I have been investigating this already and i am unable to reproduce the issue (noting it is a clean build used for testing). It maybe something that others have that i am not aware of.
i have tried a couple of ways and wonder if we changed the routine it would work for you.
Original
TASK [UBUNTU22-CIS : 5.4.2 | PATCH | Ensure lockout for failed password attempts is configured | Set faillock common-auth] ***
changed: [ubuntu22_04] => (item={'regexp': 'auth\\s+required\\s+pam_faillock.so', 'line': 'auth    required            pam_faillock.so preauth', 'before': '^.*pam_unix.so'})
changed: [ubuntu22_04] => (item={'regexp': 'auth\\s+[default=die]\\s+pam_faillock.so', 'line': 'auth    [default=die]       pam_faillock.so authfail', 'after': '^.*pam_unix.so'})
changed: [ubuntu22_04] => (item={'regexp': 'auth\\s+sufficient\\s+pam_faillock.so', 'line': 'auth    sufficient          pam_faillock.so authsucc', 'after': '^.*authfail'})

i have rebuilt in between testing
Proposed
changed: [ubuntu22_04] => (item={'regexp': 'auth\\s+required\\s+pam_faillock.so', 'line': 'auth    required            pam_faillock.so preauth', 'before': '^.*pam_unix.so'})
changed: [ubuntu22_04] => (item={'regexp': 'auth\\s+sufficient\\s+pam_faillock.so', 'line': 'auth    sufficient          pam_faillock.so authsucc', 'after': '^.*pam_unix.so'})
changed: [ubuntu22_04] => (item={'regexp': 'auth\\s+[default=die]\\s+pam_faillock.so', 'line': 'auth    [default=die]       pam_faillock.so authfail', 'before': '^.*authsucc'})

The proposed just changing the logic and syntax of the order e.g.
loop:
            - { regexp: 'auth\s+required\s+pam_faillock.so', line: 'auth    required            pam_faillock.so preauth', before: '^.*pam_unix.so'}
            - { regexp: 'auth\s+sufficient\s+pam_faillock.so', line: 'auth    sufficient          pam_faillock.so authsucc', after: '^.*pam_unix.so'}
            - { regexp: 'auth\s+[default=die]\s+pam_faillock.so', line: 'auth    [default=die]       pam_faillock.so authfail', before: '^.*authsucc'}

If i could possibly ask if the proposed implementation is an improvement for you and your configuration.
many thanks
uk-bolly

I have verified it by running the updated playbook to modify the file in a docker container with user auth set up.
Thank you for help! @uk-bolly


copy_statement causes forced replacement of pipe

After successful creation of a pipe, every subsequent plan wants to recreate the pipe because it thinks the copy_statement changed.
Example:
resource "snowflake_pipe" "pipe" {
        auto_ingest          = true
        comment              = "Ceci n'est pas une pipe"
      ~ copy_statement       = <<~EOT # forces replacement
            COPY INTO DATABASE.SCHEMA.TABLE (JSON)
            FROM @DATABASE.SCHEMA.STAGE
        EOT
        database             = "DATABASE"
      ~ id                   = "DATABASE|SCHEMA|PIPE" -> (known after apply)
        name                 = "PIPE"
      ~ notification_channel = "arn:aws:sqs" -> (known after apply)
      ~ owner                = "TERRAFORM" -> (known after apply)
        schema               = "SCHEMA"
    }

Nothing changed to the copy statement, yet it seems to detect a change every time. I tried hard coding the statement where I first used a template file, both seem to have the same issue.
Thanks for taking a look, let me know if I'm just simply missing something!

I narrowed it down to the copy_statement being multi-line.

@henriblancke is this resolved?

Yep resolved in #184


Create Data Migration recommendation for Archived projects

We need to provide Data Migration guidance and support to all community users of all OpenEBS sub-projects that are going to be Archived, EOL & made Read-Only.
We need a table that lists...

All EOL/Archive Projects by name and repo destination
Makes a 1 or 2 recommendations
Provides links to the recommendation project
Declares how many users will be affected by this action
In some (hopefully many) cases we will recommend that users migrate to the new OpenEBS Standard (either Replicated or Non-Replicated Data-Engine).

In some cases we will be recommending users migrate to a known CNCF project.
We should calculate how many users (for each recommended project) we are sending their way, and advice those projects. As well as make a PSA announcement on Issue #1051 and Issue #3701 that a cohort of affected OpenEBS new users may be heading in that project's direction.

We need to provide migration guidance and support to all community users of all OpenEBS sub-projects that are going to be Archived, EOL & made Read-Only.
We need a table that lists...

All EOL/Archive Projects by name and repo destination
Makes a 1 or 2 recommendations
Provides links to the recommendation project
Declares how many users will be affected by this action
In some (hopefully many) cases we will recommend that users migrate to the new OpenEBS Standard (either Replicated or Non-Replicated Data-Engine).

In some cases we will be recommending users migrate to a known CNCF project.
We should calculate how many users (for each recommended project) we are sending their way, and advice those projects. As well as make a PSA announcement on Issue #1051 and Issue #3701 that a cohort of affected OpenEBS new users may be heading in that project's direction.

OpenEBS v4.0.0 provides 2 techniques for migration: using pv-migrate and using Velero, They are documented here.

Using the above techniques, users of the legacy OpenEBS projects will be able to migrate to the latest OpenEBS.


Redux store remove some reducers by replaceReducer, state is not removed immediately

Do you want to request a feature or report a bug?
bug
What is the current behavior?
https://codesandbox.io/s/2v9jlj2rj0
While store.replaceReducer accept new reducer(created by combineReducers and remove some reducer), store state does't remove the state of that reducer .
What is the expected behavior?
store.replaceReducer should remove state of removing reducer.
https://github.com/reduxjs/redux/blob/master/src/combineReducers.js#L176
hasChanged may check nextState's key count with state's key count.

We dispatch an action right after replacing the reducer, so you can build your reducer function to clear unknown keys if you want: https://github.com/reduxjs/redux/blob/master/src/createStore.js#L227

But redux does't recommend to use actionType: https://github.com/reduxjs/redux/blob/master/src/index.js#L35.
By the way, reducer function does't receive the replace action when using redux-devtools-extension in development: https://codesandbox.io/s/j3l2r9vnr9. In this demo, the state of removed reducer is also removed. But it still not work (the state of removed reducer is still in store) in my complex project.
While adding or removing reduce dynamically, my reducer may receive wrong default state that is last removed reducer's state.

+1, I think it is a bug.  I do see my state unmounted in the devToos, but when I mount the reducer again, the state is the previous state, not the initial state.

Also have the save problem. After the reducer is removed - I it cannot be triggered and it isn't shown in dev-tools.
But right after injecting it in the next return to the page - the data is exist!


Fatal error in MPI_Init_thread: Other MPI error, error stack:

I've installed FEniCS through Anaconda on Mac OS X 10.12. When trying to run the first tutorial script I encounter the following error.
(fenicsproject) $ python ft01_poisson.py
Fatal error in MPI_Init_thread: Other MPI error, error stack:
MPIR_Init_thread(474)..............:
MPID_Init(190).....................: channel initialization failed
MPIDI_CH3_Init(89).................:
MPID_nem_init(320).................:
MPID_nem_tcp_init(173).............:
MPID_nem_tcp_get_business_card(420):
MPID_nem_tcp_init(379).............: gethostbyname failed, cylon.local (errno 1)
[unset]: write_line error; fd=-1 buf=:cmd=abort exitcode=3191311
:
system msg for write_line failure : Bad file descriptor
Problem was solved by Johannes Ring:
"I have tested this on macOS 10.12 with both Python 2 and Python 3, and
they both works fine for me. I used this command to install:
conda create -n fenicsproject-py36 -c conda-forge fenics python=3.6
source activate fenicsproject-py36
Does this give you the same problem? If so, then please report the
issue at https://github.com/conda-forge/fenics-feedstock/issues. "

I tried both python 2.7 and 3.6 on Mac OS X 10.12, same error!

@bmmi what's conda list?

blas                      1.1                    openblas    conda-forge
boost                     1.64.0                   py36_4    conda-forge
boost-cpp                 1.64.0                        1    conda-forge
bzip2                     1.0.6                         1    conda-forge
ca-certificates           2<IP_ADDRESS>                   0    conda-forge
certifi                   2<IP_ADDRESS>              py36_0    conda-forge
cmake                     3.9.1                         0    conda-forge
curl                      7.54.1                        0    conda-forge
eigen                     3.3.3                         0    conda-forge
expat                     2.2.1                         0    conda-forge
fastcache                 1.0.2                    py36_0    conda-forge
fenics                    2017.1.0            np113py36_6    conda-forge
gmp                       6.1.2                         0    conda-forge
gmpy2                     2.0.8                    py36_1    conda-forge
hdf5                      1.8.18                        0    conda-forge
icu                       58.1                          1    conda-forge
krb5                      1.14.2                        0    conda-forge
libgfortran               3.0.0                         0    conda-forge
libssh2                   1.8.0                         1    conda-forge
libuv                     1.11.0                        0    conda-forge
metis                     5.1.0                         3    conda-forge
mpc                       1.0.3                         4    conda-forge
mpfr                      3.1.5                         0    conda-forge
mpich                     3.2                           4    conda-forge
mpmath                    0.19                     py36_2    conda-forge
ncurses                   5.9                          10    conda-forge
numpy                     1.13.1          py36_blas_openblas_200  [blas_openblas]  conda-forge
openblas                  0.2.19                        2    conda-forge
openssl                   1.0.2l                        0    conda-forge
pcre                      8.39                          0    conda-forge
petsc                     3.7.6           blas_openblas_0  [blas_openblas]  conda-forge
petsc4py                  3.7.0                    py36_1    conda-forge
pip                       9.0.1                    py36_0    conda-forge
pkg-config                0.29.1                        1    conda-forge
ply                       3.10                     py36_0    conda-forge
ptscotch                  6.0.4                         2    conda-forge
python                    3.6.2                         0    conda-forge
readline                  6.2                           0    conda-forge
rhash                     1.3.4                         0    conda-forge
setuptools                36.3.0                   py36_0    conda-forge
six                       1.11.0                     py_0    conda-forge
slepc                     3.7.4                         0    conda-forge
slepc4py                  3.7.0                    py36_0    conda-forge
sqlite                    3.13.0                        1    conda-forge
suitesparse               4.5.4           blas_openblas_200  [blas_openblas]  conda-forge
swig                      3.0.12                        2    conda-forge
sympy                     1.1.1                    py36_0    conda-forge
tbb                       2018_20170726                 0    conda-forge
tk                        8.5.19                        2    conda-forge
wheel                     0.29.0                   py36_0    conda-forge
xz                        5.2.3                         0    conda-forge
zlib                      1.2.11                        0    conda-forge

I am having the exact same problem as bmmi. I also have the same results from conda list.

I was also able to reproduce this.
$ /conda/envs/fenicsproject/bin/python
Python 2.7.14 | packaged by conda-forge | (default, Oct  5 2017, 23:08:53)
[GCC 4.2.1 Compatible Apple LLVM 6.1.0 (clang-602.0.53)] on darwin
Type "help", "copyright", "credits" or "license" for more information.
>>> import dolfin
Fatal error in MPI_Init_thread: Other MPI error, error stack:
MPIR_Init_thread(474)..............:
MPID_Init(190).....................: channel initialization failed
MPIDI_CH3_Init(89).................:
MPID_nem_init(320).................:
MPID_nem_tcp_init(173).............:
MPID_nem_tcp_get_business_card(420):
MPID_nem_tcp_init(379).............: gethostbyname failed, 0283 (errno 1)
[unset]: write_line error; fd=-1 buf=:cmd=abort exitcode=3191311
:
system msg for write_line failure : Bad file descriptor

$ /conda/bin/conda list -p /conda/envs/fenicsproject
# packages in environment at /conda/envs/fenicsproject:
#
blas                      1.1                    openblas    conda-forge
boost                     1.63.0                   py27_5    conda-forge
boost-cpp                 1.63.0                        2    conda-forge
bzip2                     1.0.6                         1    conda-forge
ca-certificates           2<IP_ADDRESS>                   0    conda-forge
certifi                   2<IP_ADDRESS>              py27_0    conda-forge
cmake                     3.9.3                         0    conda-forge
curl                      7.54.1                        0    conda-forge
eigen                     3.3.3                         0    conda-forge
expat                     2.2.1                         0    conda-forge
fastcache                 1.0.2                    py27_0    conda-forge
fenics                    2016.2.0                 py27_6    conda-forge
gmp                       6.1.2                         0    conda-forge
gmpy2                     2.0.8                    py27_1    conda-forge
hdf5                      1.8.18                        1    conda-forge
icu                       58.1                          1    conda-forge
krb5                      1.14.2                        0    conda-forge
libgfortran               3.0.0                         0    conda-forge
libssh2                   1.8.0                         1    conda-forge
libuv                     1.11.0                        0    conda-forge
metis                     5.1.0                         3    conda-forge
mpc                       1.0.3                         4    conda-forge
mpfr                      3.1.5                         0    conda-forge
mpich                     3.2                           5    conda-forge
mpmath                    1.0.0                      py_0    conda-forge
ncurses                   5.9                          10    conda-forge
numpy                     1.13.3          py27_blas_openblas_200  [blas_openblas]  conda-forge
openblas                  0.2.19                        2    conda-forge
openssl                   1.0.2l                        0    conda-forge
pcre                      8.39                          0    conda-forge
petsc                     3.7.6           blas_openblas_0  [blas_openblas]  conda-forge
petsc4py                  3.7.0                    py27_1    conda-forge
pip                       9.0.1                    py27_0    conda-forge
pkg-config                0.29.1                        1    conda-forge
ply                       3.10                     py27_0    conda-forge
ptscotch                  6.0.4                         4    conda-forge
python                    2.7.14                        0    conda-forge
readline                  6.2                           0    conda-forge
rhash                     1.3.4                         0    conda-forge
scotch                    6.0.4                         3    conda-forge
setuptools                36.6.0                   py27_1    conda-forge
six                       1.11.0                   py27_1    conda-forge
slepc                     3.7.4                         0    conda-forge
slepc4py                  3.7.0                    py27_0    conda-forge
sqlite                    3.13.0                        1    conda-forge
subprocess32              3.2.7                    py27_0    conda-forge
suitesparse               4.5.4           blas_openblas_200  [blas_openblas]  conda-forge
swig                      3.0.11                        0    conda-forge
sympy                     1.1.1                    py27_0    conda-forge
tbb                       2018_20170919                 0    conda-forge
tk                        8.5.19                        2    conda-forge
wheel                     0.30.0                     py_1    conda-forge
xz                        5.2.3                         0    conda-forge
zlib                      1.2.8                         3    conda-forge

$ /conda/bin/conda info
Current conda install:

               platform : osx-64
          conda version : 4.3.30.post1+b178e1f21
       conda is private : False
      conda-env version : 4.3.30.post1+b178e1f21
    conda-build version : 2.1.17+11.g5ebf736b
         python version : 2.7.12.final.0
       requests version : 2.12.0
       root environment : /conda  (writable)
    default environment : /conda
       envs directories : /conda/envs
                          /Users/kfranz/.conda/envs
          package cache : /conda/pkgs
                          /Users/kfranz/.conda/pkgs
           channel URLs : https://repo.continuum.io/pkgs/main/osx-64
                          https://repo.continuum.io/pkgs/main/noarch
                          https://repo.continuum.io/pkgs/free/osx-64
                          https://repo.continuum.io/pkgs/free/noarch
                          https://repo.continuum.io/pkgs/r/osx-64
                          https://repo.continuum.io/pkgs/r/noarch
                          https://repo.continuum.io/pkgs/pro/osx-64
                          https://repo.continuum.io/pkgs/pro/noarch
            config file : /Users/kfranz/.condarc
             netrc file : None
           offline mode : False
             user-agent : conda/4.3.30.post1+b178e1f21 requests/2.12.0 CPython/2.7.12 Darwin/17.0.0 OSX/10.13
                UID:GID : 502:20

$ uname -a
Darwin 0283 17.0.0 Darwin Kernel Version 17.0.0: Thu Aug 24 21:48:19 PDT 2017; root:xnu-4570.1.46~2/RELEASE_X86_64 x86_64

I encountered a similar situation, as shown above(while using mpich), I found a solution to this though, as the traceback from the error says  getHostByName failed: to resolve this just add your hostname to your etc/host file.

OR

Set a host name by sudo scutil --set HostName <my_new_host_name>:  replace <my_new_host_name> with a custom name

Then add it to your etc/host file by sudo vim /etc/hosts

I assume you are running a UNIX like OS.

I found this here https://stackoverflow.com/questions/23112515/mpich2-gethostbyname-failed

Hi,
I am also dealing with the same issue since today. The thing is, fenics worked just fine yesterday (was able to run some tutorials) ... and I did not change anything on my computer in the meantime (at least not on purpose). Does that make any sense ?

@oalii from the above errors and the successful fix, it sounds like it's a local DNS issue.
In Python, does the following work when you are seeing the error with mpi:
import socket
print(socket.gethostname())
print(socket.gethostbyname(socket.gethostname()))

Hi @minrk,
Thx for the insight.
I tried @georgreen procedure and it worked, indeed.
I am not really familiar with these DNS-related issues, do you have some ref I could check to learn a bit more ?
Thx again !

Any status on this? I seem to be getting the same issue.
I've reinstalled every piece of package from the scratch even unlinked brew kegs and linked them again to remove any missing symlinks but no help :(

This should be fixed now, otherwise feel free to open a new issue.


podman 1.9.0 rootless on CentOS error: cgroup namespaces aren't enabled in the kernel: OCI runtime error

Is this a BUG REPORT or FEATURE REQUEST? (leave only one on its own line)
/kind bug
Description
Fresh CentOS 7.7 kvm-guest w/ Kubic CentOS7 repo added, installs podman 1.9.0 however no containers can be started:
Steps to reproduce the issue:

fresh centos7 installed

setup kubic centos7 libcontainers-stable repo

launch nginx container

Describe the results you received:
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
Trying to pull docker.io/library/nginx:alpine...
Getting image source signatures
Copying blob b14da7a62044 done
Copying blob aad63a933944 done
Copying config 29b49a39bc done
Writing manifest to image destination
Storing signatures
Error: cgroup namespaces aren't enabled in the kernel: OCI runtime error

Describe the results you expected:
container launching normally
Additional information you deem important (e.g. issue happens only occasionally):
Output of podman version:
[test@test ~]$ podman version
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
Version:            1.9.0
RemoteAPI Version:  1
Go Version:         go1.13.6
OS/Arch:            linux/amd64

Output of podman info --debug:
[test@test ~]$ podman info --debug
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
debug:
  compiler: gc
  gitCommit: ""
  goVersion: go1.13.6
  podmanVersion: 1.9.0
host:
  arch: amd64
  buildahVersion: 1.14.8
  cgroupVersion: v1
  conmon:
    package: conmon-2.0.15-2.1.el7.x86_64
    path: /usr/bin/conmon
    version: 'conmon version 2.0.15, commit: 78140cdc1001a632e6d9cd477ae2cfbc49927bdf'
  cpus: 1
  distribution:
    distribution: '"centos"'
    version: "7"
  eventLogger: journald
  hostname: test
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 100
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
  kernel: 3.10.0-1062.18.1.el7.x86_64
  memFree:<PHONE_NUMBER>
  memTotal:<PHONE_NUMBER>
  ociRuntime:
    name: runc
    package: runc-1.0.0-15.1.el7.x86_64
    path: /usr/bin/runc
    version: |-
      runc version 1.0.0-rc10
      commit: 67b92f062188d9cb6472b428855432c9f35efcf5
      spec: 1.0.1-dev
  os: linux
  rootless: true
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: slirp4netns-1.0.0-4.1.el7.x86_64
    version: |-
      slirp4netns version 1.0.0
      commit: a3be729152a33e692cd28b52f664defbf2e7810a
      libslirp: 4.2.0
  swapFree: 0
  swapTotal: 0
  uptime: 6m 15.53s
registries:
  search:
  - registry.fedoraproject.org
  - registry.access.redhat.com
  - registry.centos.org
  - docker.io
store:
  configFile: /home/test/.config/containers/storage.conf
  containerStore:
    number: 1
    paused: 0
    running: 0
    stopped: 1
  graphDriverName: vfs
  graphOptions: {}
  graphRoot: /home/test/.local/share/containers/storage
  graphStatus: {}
  imageStore:
    number: 1
  runRoot: /run/user/1000/containers
  volumePath: /home/test/.local/share/containers/storage/volumes

Package info (e.g. output of rpm -q podman or apt list podman):
[test@test ~]$ rpm -qi podman
Name        : podman
Epoch       : 0
Version     : 1.9.0
Release     : 1.1.el7
Architecture: x86_64
Install Date: Tue Apr 21 23:24:12 2020
Group       : Unspecified
Size        : 78805972
License     : ASL 2.0
Signature   : RSA/SHA256, Thu Apr 16 15:54:39 2020, Key ID 4d64390375060aa4
Source RPM  : podman-1.9.0-1.1.el7.src.rpm
Build Date  : Thu Apr 16 15:54:18 2020
Build Host  : lamb28

Additional environment details (AWS, VirtualBox, physical, etc.):
From a fresh CentOS 7 host - here's the full session of commands for your review, from adding the repo to installing the packages fresh, to logging in as a non-root user and attempting to run a container
$ ssh<EMAIL_ADDRESS><EMAIL_ADDRESS>password:
Last login: Mon Apr 20 15:57:44 2020 from <IP_ADDRESS>
[root@test ~]# yum upgrade
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirrors.ukfast.co.uk
 * extras: mozart.ee.ic.ac.uk
 * updates: mirrors.ukfast.co.uk
base                                                                                | 3.6 kB  00:00:00
extras                                                                                | 2.9 kB  00:00:00
updates                                                                                | 2.9 kB  00:00:00
No packages marked for update
[root@test ~]# sudo curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_7/devel:kubic:libcontainers:stable.repo
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   357  100   357    0     0    687      0 --:--:-- --:--:-- --:--:--   687
[root@test ~]# sudo yum -y install podman
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirrors.ukfast.co.uk
 * extras: mozart.ee.ic.ac.uk
 * updates: mirrors.ukfast.co.uk
devel_kubic_libcontainers_stable                                                                                | 1.3 kB  00:00:00
devel_kubic_libcontainers_stable/primary                                                                                |  10 kB  00:00:00
devel_kubic_libcontainers_stable                                                                                31/31
Resolving Dependencies
--> Running transaction check
---> Package podman.x86_64 0:1.9.0-1.1.el7 will be installed
--> Processing Dependency: podman-plugins = 1.9.0-1.1.el7 for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: slirp4netns >= 0.3.0-2 for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: containernetworking-plugins >= 0.7.5-1 for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: runc for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: nftables for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: containers-common for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: container-selinux for package: podman-1.9.0-1.1.el7.x86_64
--> Processing Dependency: conmon for package: podman-1.9.0-1.1.el7.x86_64
--> Running transaction check
---> Package conmon.x86_64 2:2.0.15-2.1.el7 will be installed
---> Package container-selinux.noarch 2:2.107-3.el7 will be installed
--> Processing Dependency: selinux-policy-targeted >= 3.13.1-216.el7 for package: 2:container-selinux-2.107-3.el7.noarch
--> Processing Dependency: selinux-policy-base >= 3.13.1-216.el7 for package: 2:container-selinux-2.107-3.el7.noarch
--> Processing Dependency: selinux-policy >= 3.13.1-216.el7 for package: 2:container-selinux-2.107-3.el7.noarch
--> Processing Dependency: policycoreutils-python for package: 2:container-selinux-2.107-3.el7.noarch
---> Package containernetworking-plugins.x86_64 0:0.8.5-145.1.el7 will be installed
---> Package containers-common.x86_64 2:0.2.0-2.1.el7 will be installed
---> Package nftables.x86_64 1:0.8-14.el7 will be installed
--> Processing Dependency: libnftnl.so.7(LIBNFTNL_5)(64bit) for package: 1:nftables-0.8-14.el7.x86_64
--> Processing Dependency: libnftnl.so.7()(64bit) for package: 1:nftables-0.8-14.el7.x86_64
---> Package podman-plugins.x86_64 0:1.9.0-1.1.el7 will be installed
---> Package runc.x86_64 2:1.0.0-15.1.el7 will be installed
--> Processing Dependency: criu for package: 2:runc-1.0.0-15.1.el7.x86_64
---> Package slirp4netns.x86_64 0:1.0.0-4.1.el7 will be installed
--> Processing Dependency: libslirp.so.0(SLIRP_4.1)(64bit) for package: slirp4netns-1.0.0-4.1.el7.x86_64
--> Processing Dependency: libslirp.so.0(SLIRP_4.0)(64bit) for package: slirp4netns-1.0.0-4.1.el7.x86_64
--> Processing Dependency: libslirp.so.0()(64bit) for package: slirp4netns-1.0.0-4.1.el7.x86_64
--> Running transaction check
---> Package criu.x86_64 0:3.12-2.el7 will be installed
--> Processing Dependency: libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit) for package: criu-3.12-2.el7.x86_64
--> Processing Dependency: libnl-3.so.200(libnl_3)(64bit) for package: criu-3.12-2.el7.x86_64
--> Processing Dependency: libprotobuf-c.so.1()(64bit) for package: criu-3.12-2.el7.x86_64
--> Processing Dependency: libnl-3.so.200()(64bit) for package: criu-3.12-2.el7.x86_64
--> Processing Dependency: libnet.so.1()(64bit) for package: criu-3.12-2.el7.x86_64
---> Package libnftnl.x86_64 0:1.0.8-1.el7 will be installed
--> Processing Dependency: libjansson.so.4()(64bit) for package: libnftnl-1.0.8-1.el7.x86_64
---> Package libslirp.x86_64 0:4.2.0-2.1.el7 will be installed
---> Package policycoreutils-python.x86_64 0:2.5-33.el7 will be installed
--> Processing Dependency: setools-libs >= 3.3.8-4 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libsemanage-python >= 2.5-14 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: audit-libs-python >= 2.1.3-4 for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: python-IPy for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libselinux-python for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1(VERS_1.4)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1(VERS_1.2)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libcgroup for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libapol.so.4(VERS_4.0)(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: checkpolicy for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libqpol.so.1()(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
--> Processing Dependency: libapol.so.4()(64bit) for package: policycoreutils-python-2.5-33.el7.x86_64
---> Package selinux-policy.noarch 0:3.13.1-252.el7_7.6 will be installed
---> Package selinux-policy-targeted.noarch 0:3.13.1-252.el7_7.6 will be installed
--> Running transaction check
---> Package audit-libs-python.x86_64 0:2.8.5-4.el7 will be installed
---> Package checkpolicy.x86_64 0:2.5-8.el7 will be installed
---> Package jansson.x86_64 0:2.10-1.el7 will be installed
---> Package libcgroup.x86_64 0:0.41-21.el7 will be installed
---> Package libnet.x86_64 0:1.1.6-7.el7 will be installed
---> Package libnl3.x86_64 0:3.2.28-4.el7 will be installed
---> Package libselinux-python.x86_64 0:2.5-14.1.el7 will be installed
---> Package libsemanage-python.x86_64 0:2.5-14.el7 will be installed
---> Package protobuf-c.x86_64 0:1.0.2-3.el7 will be installed
---> Package python-IPy.noarch 0:0.75-6.el7 will be installed
---> Package setools-libs.x86_64 0:3.3.8-4.el7 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================================================================
 Package                                                 Arch                               Version                                        Repository                                                    Size
==============================================================================================================================================================================================================
Installing:
 podman                                                  x86_64                             1.9.0-1.1.el7                                  devel_kubic_libcontainers_stable                              22 M
Installing for dependencies:
 audit-libs-python                                       x86_64                             2.8.5-4.el7                                    base                                                          76 k
 checkpolicy                                             x86_64                             2.5-8.el7                                      base                                                         295 k
 conmon                                                  x86_64                             2:2.0.15-2.1.el7                               devel_kubic_libcontainers_stable                              34 k
 container-selinux                                       noarch                             2:2.107-3.el7                                  extras                                                        39 k
 containernetworking-plugins                             x86_64                             0.8.5-145.1.el7                                devel_kubic_libcontainers_stable                              35 M
 containers-common                                       x86_64                             2:0.2.0-2.1.el7                                devel_kubic_libcontainers_stable                              53 k
 criu                                                    x86_64                             3.12-2.el7                                     base                                                         453 k
 jansson                                                 x86_64                             2.10-1.el7                                     base                                                          37 k
 libcgroup                                               x86_64                             0.41-21.el7                                    base                                                          66 k
 libnet                                                  x86_64                             1.1.6-7.el7                                    base                                                          59 k
 libnftnl                                                x86_64                             1.0.8-1.el7                                    base                                                          77 k
 libnl3                                                  x86_64                             3.2.28-4.el7                                   base                                                         278 k
 libselinux-python                                       x86_64                             2.5-14.1.el7                                   base                                                         235 k
 libsemanage-python                                      x86_64                             2.5-14.el7                                     base                                                         113 k
 libslirp                                                x86_64                             4.2.0-2.1.el7                                  devel_kubic_libcontainers_stable                              62 k
 nftables                                                x86_64                             1:0.8-14.el7                                   base                                                         186 k
 podman-plugins                                          x86_64                             1.9.0-1.1.el7                                  devel_kubic_libcontainers_stable                             2.3 M
 policycoreutils-python                                  x86_64                             2.5-33.el7                                     base                                                         457 k
 protobuf-c                                              x86_64                             1.0.2-3.el7                                    base                                                          28 k
 python-IPy                                              noarch                             0.75-6.el7                                     base                                                          32 k
 runc                                                    x86_64                             2:1.0.0-15.1.el7                               devel_kubic_libcontainers_stable                             4.5 M
 selinux-policy                                          noarch                             3.13.1-252.el7_7.6                             updates                                                      492 k
 selinux-policy-targeted                                 noarch                             3.13.1-252.el7_7.6                             updates                                                      7.0 M
 setools-libs                                            x86_64                             3.3.8-4.el7                                    base                                                         620 k
 slirp4netns                                             x86_64                             1.0.0-4.1.el7                                  devel_kubic_libcontainers_stable                              43 k

Transaction Summary
==============================================================================================================================================================================================================
Install  1 Package (+25 Dependent packages)

Total download size: 74 M
Installed size: 212 M
Downloading packages:
(1/26): audit-libs-python-2.8.5-4.el7.x86_64.rpm                                                                                |  76 kB  00:00:00
(2/26): checkpolicy-2.5-8.el7.x86_64.rpm                                                                                | 295 kB  00:00:00
warning: /var/cache/yum/x86_64/7/devel_kubic_libcontainers_stable/packages/conmon-2.0.15-2.1.el7.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID 75060aa4: NOKEY         ]  0.0 B/s | 411 kB  --:--:-- ETA
Public key for conmon-2.0.15-2.1.el7.x86_64.rpm is not installed
(4/26): conmon-2.0.15-2.1.el7.x86_64.rpm                                                                                |  34 kB  00:00:01
(5/26): jansson-2.10-1.el7.x86_64.rpm                                                                                |  37 kB  00:00:00
(6/26): libnet-1.1.6-7.el7.x86_64.rpm                                                                                |  59 kB  00:00:00
(7/26): containers-common-0.2.0-2.1.el7.x86_64.rpm                                                                                |  53 kB  00:00:00
(8/26): criu-3.12-2.el7.x86_64.rpm                                                                                | 453 kB  00:00:00
(9/26): libnftnl-1.0.8-1.el7.x86_64.rpm                                                                                |  77 kB  00:00:00
(10/26): libselinux-python-2.5-14.1.el7.x86_64.rpm                                                                                | 235 kB  00:00:00
(11/26): libcgroup-0.41-21.el7.x86_64.rpm                                                                                |  66 kB  00:00:00
(12/26): libsemanage-python-2.5-14.el7.x86_64.rpm                                                                                | 113 kB  00:00:00
(13/26): nftables-0.8-14.el7.x86_64.rpm                                                                                | 186 kB  00:00:00
(14/26): libslirp-4.2.0-2.1.el7.x86_64.rpm                                                                                |  62 kB  00:00:00
(15/26): libnl3-3.2.28-4.el7.x86_64.rpm                                                                                | 278 kB  00:00:01
(16/26): podman-1.9.0-1.1.el7.x86_64.rpm                                                                                |  22 MB  00:00:03
(17/26): python-IPy-0.75-6.el7.noarch.rpm                                                                                |  32 kB  00:00:00
(18/26): protobuf-c-1.0.2-3.el7.x86_64.rpm                                                                                |  28 kB  00:00:00
(19/26): containernetworking-plugins-0.8.5-145.1.el7.x86_64.rpm                                                                                |  35 MB  00:00:06
(20/26): podman-plugins-1.9.0-1.1.el7.x86_64.rpm                                                                                | 2.3 MB  00:00:00
(21/26): selinux-policy-3.13.1-252.el7_7.6.noarch.rpm                                                                                | 492 kB  00:00:00
(22/26): setools-libs-3.3.8-4.el7.x86_64.rpm                                                                                | 620 kB  00:00:00
(23/26): runc-1.0.0-15.1.el7.x86_64.rpm                                                                                | 4.5 MB  00:00:01
(24/26): policycoreutils-python-2.5-33.el7.x86_64.rpm                                                                                | 457 kB  00:00:01
(25/26): slirp4netns-1.0.0-4.1.el7.x86_64.rpm                                                                                |  43 kB  00:00:00
(26/26): selinux-policy-targeted-3.13.1-252.el7_7.6.noarch.rpm                                                                                | 7.0 MB  00:00:01
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                9.1 MB/s |  74 MB  00:00:08
Retrieving key from http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_7/repodata/repomd.xml.key
Importing GPG key 0x75060AA4:
 Userid     : "devel:kubic OBS Project<EMAIL_ADDRESS> Fingerprint: 2472 d6d0 d2f6 6af8 7aba 8da3 4d64 3903 7506 0aa4
 From       : http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_7/repodata/repomd.xml.key
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction
  Installing : selinux-policy-3.13.1-252.el7_7.6.noarch                                                                                1/26
  Installing : selinux-policy-targeted-3.13.1-252.el7_7.6.noarch                                                                                2/26
  Installing : libcgroup-0.41-21.el7.x86_64                                                                                3/26
  Installing : podman-plugins-1.9.0-1.1.el7.x86_64                                                                                4/26
  Installing : libnl3-3.2.28-4.el7.x86_64                                                                                5/26
  Installing : containernetworking-plugins-0.8.5-145.1.el7.x86_64                                                                                6/26
  Installing : jansson-2.10-1.el7.x86_64                                                                                7/26
  Installing : libnftnl-1.0.8-1.el7.x86_64                                                                                8/26
  Installing : 1:nftables-0.8-14.el7.x86_64                                                                                9/26
  Installing : libselinux-python-2.5-14.1.el7.x86_64                                                                                10/26
  Installing : audit-libs-python-2.8.5-4.el7.x86_64                                                                                11/26
  Installing : libnet-1.1.6-7.el7.x86_64                                                                                12/26
  Installing : libsemanage-python-2.5-14.el7.x86_64                                                                                13/26
  Installing : 2:conmon-2.0.15-2.1.el7.x86_64                                                                                14/26
  Installing : protobuf-c-1.0.2-3.el7.x86_64                                                                                15/26
  Installing : criu-3.12-2.el7.x86_64                                                                                16/26
  Installing : setools-libs-3.3.8-4.el7.x86_64                                                                                17/26
  Installing : libslirp-4.2.0-2.1.el7.x86_64                                                                                18/26
[... trunc since my scrollback buffer got overwritten... ]
[root@test ~]# echo user.max_user_namespaces=15000 > /etc/sysctl.d/95-user-namespaces.conf
[root@test ~]# reboot
[... host reboots ...]
$ ssh<EMAIL_ADDRESS><EMAIL_ADDRESS>password:
Last login: Tue Apr 21 23:21:45 2020 from <IP_ADDRESS>
[test@test ~]$ podman ps -a
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
CONTAINER ID  IMAGE  COMMAND  CREATED  STATUS  PORTS  NAMES
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
Trying to pull docker.io/library/nginx:alpine...
Getting image source signatures
Copying blob b14da7a62044 done
Copying blob aad63a933944 done
Copying config 29b49a39bc done
Writing manifest to image destination
Storing signatures
Error: cgroup namespaces aren't enabled in the kernel: OCI runtime error

whereas if we install podman 1.8.2 rpms back, this works fine:
[root@test ~]# rpm -Uvh --oldpackage podman-1.8.2-2.el7.x86_64.rpm podman-plugins-1.8.2-2.el7.x86_64.rpm
Preparing...                          ################################# [100%]
Updating / installing...
   1:podman-plugins-0:1.8.2-2.el7     ################################# [ 25%]
   2:podman-0:1.8.2-2.el7             ################################# [ 50%]
Cleaning up / removing...
   3:podman-0:1.9.0-1.1.el7           ################################# [ 75%]
   4:podman-plugins-0:1.9.0-1.1.el7   ################################# [100%]
[root@test ~]# logout
Connection to <IP_ADDRESS> closed.

$ ssh<EMAIL_ADDRESS><EMAIL_ADDRESS>password:
Last login: Tue Apr 21 23:25:44 2020 from <IP_ADDRESS>
[test@test ~]$ podman rm nginx
6d6612ab42ce421a15018d3615682a179eb2b6179afcbe7b32c20d5c36abe59a
[test@test ~]$ podman image prune -af
docker.io/library/nginx:alpine
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
Trying to pull docker.io/library/nginx:alpine...
Getting image source signatures
Copying blob aad63a933944 done
Copying blob b14da7a62044 done
Copying config 29b49a39bc done
Writing manifest to image destination
Storing signatures
40edf62df3db3d585ea5252cfa45e9d19c3b02580455462efb4eddd085018770

some googling around and it appears to be coming from here, as of this PR last year.. including my runc version
[test@test ~]$ rpm -qi runc
Name        : runc
Epoch       : 2
Version     : 1.0.0
Release     : 15.1.el7
Architecture: x86_64
Install Date: Tue Apr 21 23:24:07 2020
Group       : Unspecified
Size        : 12982071
License     : ASL 2.0
Signature   : RSA/SHA256, Wed Feb 19 20:51:42 2020, Key ID 4d64390375060aa4
Source RPM  : runc-1.0.0-15.1.el7.src.rpm
Build Date  : Wed Feb 19 20:51:37 2020
[...]

, and confirming i have these under `/proc/self/ns` (note no `cgroup` entry):
[test@test ~]$ ls -l /proc/self/ns/
total 0
lrwxrwxrwx 1 test users 0 Apr 22 00:05 ipc -> ipc:[4026531839]
lrwxrwxrwx 1 test users 0 Apr 22 00:05 mnt -> mnt:[4026531840]
lrwxrwxrwx 1 test users 0 Apr 22 00:05 net -> net:[4026531956]
lrwxrwxrwx 1 test users 0 Apr 22 00:05 pid -> pid:[4026531836]
lrwxrwxrwx 1 test users 0 Apr 22 00:05 user -> user:[4026531837]
lrwxrwxrwx 1 test users 0 Apr 22 00:05 uts -> uts:[4026531838]

If we are making podman 1.9.0 available for centos 7 machines, then we need to make sure we ship a containers.conf file in /usr/share/containers/containers.conf with the correct configuration for this system.
https://github.com/containers/common/blob/master/pkg/config/containers.conf
If you copy this file to /etc/containers/containers.conf and modify the settings, you should get it working properly on Centos7

in the CentOS 7 rpm there is a .conf file in /usr/share/containers but it's called libpod.conf, not containers.conf:
[root@test ~]# rpm -ql podman | grep usr/share/containers
/usr/share/containers/libpod.conf

Placing the above linked containers.conf at that location does not resolve the issue:
[root@test ~]# curl -sLo /usr/share/containers/containers.conf 'https://raw.githubusercontent.com/containers/common/master/pkg/config/containers.conf'
[root@test ~]# ls -l !!:2
ls -l /usr/share/containers/containers.conf
-rw-r--r-- 1 root root 13044 Apr 22 11:36 /usr/share/containers/containers.conf

(and logging back in to test rootless):
$ ssh<EMAIL_ADDRESS><EMAIL_ADDRESS>password:
Last login: Wed Apr 22 00:10:20 2020 from <IP_ADDRESS>
[test@test ~]$ podman rm nginx
a08bf18facd6bd50ccc1fbbb63ea86c5768496ef10511e5a35a0a511a6de8a9b
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
Error: cgroup namespaces aren't enabled in the kernel: OCI runtime error

(and removing the original libpod.conf installed by the RPM and leaving just containers.conf in /usr/share/containers does not result in any difference either)

Ahh, you did also say "..and update the settings", i missed that part (but don't know what settings you recommend are updated).  Happy to do testing to get this working so a working rpm can be put together.

Does changing cgroups-manager to cgroupfs help to fix this?  Can  you set this cgroupns to host, but I am not sure this will fix the problem

for me, changing only cgroups-manager to cgroupfs (from the default of systemd) does not fix this issue (about the complaint of cgroup namespaces not being enabled in the kernel, and not launching rootless containers), no..
[test@test ~]$ cat /etc/containers/containers.conf
[engine]
cgroup_manager = "systemd"
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
WARN[0000] The cgroupv2 manager is set to systemd but there is no systemd user session available
WARN[0000] For using systemd, you may need to login using an user session
WARN[0000] Alternatively, you can enable lingering with: `loginctl enable-linger 1000` (possibly as root)
WARN[0000] Falling back to --cgroup-manager=cgroupfs
Error: cgroup namespaces aren't enabled in the kernel: OCI runtime error
[test@test ~]$ sudo sed -i -e 's/cgroup_manager = "systemd"/cgroup_manager = "cgroupfs"/' /etc/containers/containers.conf
[test@test ~]$ podman rm nginx
07fec9e4495139b59529b18466460e06738f3de7e1cb174d97d7eedd24ca502f
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
Error: cgroup namespaces aren't enabled in the kernel: OCI runtime error

but as a side-effect, it does fix this noisy-warnings issue instead
i need to actually have cgroupns set to host (instead of the default value of private), regardless of cgroup_manager being already set to cgroupfs, in order to be able to launch containers in rootless mode on CentOS 7:
[test@test ~]$ cat /etc/containers/containers.conf
[containers]
cgroupns = "private"

[engine]
cgroup_manager = "cgroupfs"
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
Error: cgroup namespaces aren't enabled in the kernel: OCI runtime error
[test@test ~]$ sudo sed -i -e 's/cgroupns = "private"/cgroupns = "host"/' /etc/containers/containers.conf
[test@test ~]$ podman rm nginx 2>/dev/null
72adc8bccc662a5ee6f9cbed5c708f6c07037bdc69746110d57a05ad132abebc
[test@test ~]$ podman run -d -p 8080:80 --name nginx docker.io/library/nginx:alpine
91aa8ae8f6e91e84f117c2e7817683538be516a96df8a73ab6d91fcd27b1583f
[test@test ~]$ podman ps -a
CONTAINER ID  IMAGE                           COMMAND               CREATED        STATUS            PORTS                 NAMES
91aa8ae8f6e9  docker.io/library/nginx:alpine  nginx -g daemon o...  4 seconds ago  Up 3 seconds ago  <IP_ADDRESS>:8080->80/tcp  nginx

@lsm5 We are going to need to ship a specially configured containers.conf for centos7, to turn off cgroupns

@lsm5 We are going to need to ship a specially configured containers.conf for centos7, to turn off cgroupns

Do I just comment it out, or does it need to  be cgroupns = "host"

From my experience, what's commented is usualy the default, and the default does not work on CentOS 7.. i think it needs to explicitly set to "host" to work.  Are you able to repro it w/ and w/o that setting to see if it makes a difference for you?  It might be better if i'm not the only data point (and i'm pretty certain i'm not the only one still using CentOS 7 :-) )

the fix solves the issue but I don't think it is the correct fix.
We shouldn't change the default for cgroupns.  On cgroup v1 it should still default to host otherwise it is a breaking change.
I think we need to handle it from Podman.  If the user doesn't override it in the conf file, we need to default to host on cgroup v1 and private on cgroup v2.

the fix solves the issue but I don't think it is the correct fix.
We shouldn't change the default for cgroupns.  On cgroup v1 it should still default to host otherwise it is a breaking change.
I think we need to handle it from Podman.  If the user doesn't override it in the conf file, we need to default to host on cgroup v1 and private on cgroup v2.

I can have different settings for v1 and v2 in the rpm build process.

that cannot be a build time configuration.  Users can switch between v1 and v2

On Centos 7, there is no support for cgroupns.  So we should default for root and rootless to use host.
On RHEL8/Centos 8. We can use the patch that you got into common.

Believe this one is fixed in containers/common, should be in Podman
v1.9.2 and up.
On Sat, May 23, 2020 at 8:10 PM github-actions[bot]
<EMAIL_ADDRESS>wrote:

A friendly reminder that this issue had no activity for 30 days.
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or unsubscribe.

Will be released in July.


Fix default value 0 not rendered in doc

Description
Closes #535. The issue was an incorrect evaluation of 0 when checking if a default value exists.
In addition, the new tests spotted an issue with the mocking used for the printer unit tests.
Integration schema (used also for demo) has been updated to include this use case.
Checklist

[x] My changes follow the contributing guidelines of this project.
[x] I have performed a self-review of my code.
[x] I have made corresponding changes to the documentation.
[x] I have added tests that prove my fix is effective or that my changes work.
[x] New and existing unit tests pass locally with my changes.

Coverage increased (+0.03%) to 94.548% when pulling d2e7fe267b5386fa5baad0673acf3d03f0cc1b71 on fix/585-default-0-missing into 075b1c46dbf7802dfa377b8f9144f6000b6b7150 on main.


Other filter coefficiens and inverse of theoretical pairs

DigitalFilter now takes an argument to have other coefficients than j0, j1, sin, and cos.
The provided sine and cosine transform pairs in fdesign can now be asked to return the inverse pair (time to frequency).

Coverage increased (+0.0006%) to 99.895% when pulling 1902754de87e5662a26f41a9caf0543c387fd75a on DLF-Laplace into eec05c7f90228e299248d737d14cceb771d28ee2 on master.


Feature Request - P2 physics overlap method

Currently it's impossible (or perhaps possible, but really hard) to check whether two P2 bodies overlap.
For example, I have a couple of Sprites that form a race circuit, which are in a collision group. Then, I have a car, which is in another collision group. They don't collide, but I still need to know when the car leaves the track so I can apply some penalties or something.
game.physics.p2.overlap() would be a really cool thing to have. It would be even better if you can check a P2 body against a whole collision group - similar to how the Arcade physics overlap() can work with a single Sprite against a group of Sprites.
Thanks!

I think this will help you http://www.html5gamedevs.com/topic/5567-trigger-with-p2/

Maybe we could add a isSensor parameter to body.addRectangle.

Thank you for taking the time to open this issue. However, official support for Phaser 2 has now ended as we focus on preparing Phaser 3 for beta release. In a bid to keep the project tidy, and avoid confusion, we are closing all v2 related issues.
This does not mean your issue won't be looked-at. In November 2016 the Phaser CE (Community Edition) project began. The aim of Phaser CE was to allow the community to continue v2 development. Since then it has gained significant traction, with many updates and releases.
If you are still interested in having your issue investigated we strongly recommend testing the latest Phaser CE release. And only if the problem persists, opening an issue on the Phaser CE repo.


Why phase_ini = (2.0 * r_ref - r_xyz ) / LAMBDA_L1 ?

Hey @osqzss and all GNSS experts,
I guess this may not be a real issue but my personal curiosity.  Why is the initial phase initialized in such a way?
TIA,
Shu

@shuwang1 so how should it be? Like I also have an answer to this question but I would like to know your input first so that I can understand what you actually want to say. I mean do you think there is something wrong with the phase initialization?
I think this is the initial signal phase that is calculated between the user position and the broadcast orbit i.e Medium Earth Orbit (MEO) since all GPS satellites are in MEO. Once we get the initial phase only then we can do alteration via doppler shift.

I actually had the same question as @shuwang1. Working with truth observation files from other simulators, the phase is typically initialized as the number of carrier cycles associated with the pseudorange calculated from the ephemeris. In the context of the code, that would translate to phase_ini = r_xyz/LAMBDA_L1. It seems the current initialization introduces a large number of cycle ambiguities at the start of the simulation.

Please ignore that line. It is still experimental.


FrontEnd dist is missing

I am on the way to test Ambar and got an error during docker built process.
In the FrontEnd container the "dist" folder is missing.
I guess the reason is you have added this folder in your ".gitignore" file.
Could you add this in the repository, please?

@Ulli2k dist is populated by compiling the frontend project - assuming you've got an acceptable version of node (I used 8.1.3) installed, try npm install followed by npm run compile.
I did have to upgrade the version of node-sass referenced in the package.json to get the deps to install cleanly but otherwise it was pretty simple.
Good luck!

@chazu it would be awesome if you could write an instruction on how to build ambar-frontend. Check issue #243


Language box

Issues/Fixes
Hi just observed the language box is hovering over the menu which doesn't look too beautiful.
Have a look on screenshot below .

Best Regards

Thanks @bkurowski this was already reported by @dcalvom on #576. it's fixed on master. I'll either cherry pick it into the next release I build for you, or we'll make a whole new release.


feature request: debug unmarshallin with json

It would be nice to also have kind of "debug mode" where I will be able to unmarshal to a tuple (mycaseclass, jsonString)

Still relevant? If so, please provide more details and of course feel free to submit a PR.

Yes, still relevant. I have the same need.

Won't fix.


Lists within Lists doesn't work

Let's say we want a list within a list using the following:
 Template = "{{#outer}} {{#inner}} x {{/inner}} {{/outer}}"
 Ctx = dict:from_list([{outer,   [   dict:from_list([{inner, []}  ]  )]}]).

when I run
 mustache:render(Template, Ctx).

I get
 ** exception throw: {template,[66,97,100,32,99,111,110,116,101,120,116,32,102,
                           111,114,32,"inner",58,32,"[]"]}

I encountered similar issues:
Template = "{{#items}}{{name}}{{/items}}",
Ctx = [
    {items, [
        [{name, red}],
        [{name, green}]
    ]}
],
mustache:render(Template, Ctx).

** exception error: {badrecord,dict}

It fails because mustache_ctx doesn't understand the inner list as dict.
I have to manualy make the following changes:
Ctx = [
    {items, [
        dict:from_list([{name, red}]),
        dict:from_list([{name, green}])
    ]}
]

to make it work.
This is ugly.
Maybe we need a proplist_to_dict_recursive function to make it easier ?


Certain characters prevent later text from rendering

Expected Behavior
Text should be rendered regardless of preceding characters in the paragraph.
Actual Behavior
Certain characters (such as த or ம from the Tamil alphabet), when followed by a large number of characters in the same paragraph with the same style classes, break the rendering of all (immediately or slightly) later characters until a change in style classes or the end of the paragraph.
For example, in the demo below, த is followed by 32,001 other characters in the same paragraph, but the paragraph only renders as த. When the number of characters following த is reduced to 32,000, then the paragraph renders correctly.
The number at which the bug occurs is complicated by the amount of whitespace in the paragraph after the த. Inserting ASCII characters at the start of the paragraph doesn't appear to change anything, nor does changing the segment's style class or splitting the text into multiple segments with the same style class.
Reproducible Demo
Run Launcher.main():
import javafx.application.Application;
import javafx.scene.Scene;
import javafx.stage.Stage;
import org.fxmisc.richtext.StyleClassedTextArea;

public class TextCutOffBug extends Application {

	public static void main(String[] args) {
		TextCutOffBug.launch(args);
	}

	@Override
	public void start(Stage stage) {
		StyleClassedTextArea textArea = new StyleClassedTextArea();
		textArea.setWrapText(true);
		String text = "த" + "a".repeat(32001) + "\nb";
		textArea.append(text, "");
		Scene scene = new Scene(textArea, 500, 300);
		stage.setScene(scene);
		stage.show();
	}

	public static class Launcher {
		public static void main(String[] args) {
			TextCutOffBug.main(args);
		}
	}
}

Environment info:

RichTextFX Version: 0.11.0 and 0.11.1
Operating System: Windows 10
Java version: 17
JavaFX version: 17.0.1

Current Workarounds
The bug only appears to occur when there are over 32,000 consecutive characters with the same style classes (and in the same paragraph). So every 32,000 characters, add/remove a meaningless style class, like so:
String text = "த" + "a".repeat(80_000) + "\nb";
textArea.append(text.substring(0, 32000), "");
textArea.append(text.substring(32000, 64000), "bug-workaround");
textArea.append(text.substring(64000), "");

This happens with TextArea as well, so I think it's a limitation of Text nodes and probably has something to do with the number of Unicode characters allowed.
I'm guessing that with just plain characters, Text can handle 64K characters but if there's a single Unicode character then it halves to 32K.
Each style is split into its own Text node, so that's why the workaround works when you add a style at 32K.

Ah, I didn't notice it was a bug in TextArea as well. I also tested with a Text node and the behaviour is the same.
I'm not sure what you mean by "Unicode characters", but other characters with higher code points (such as 文) don't trigger the bug. No matter how many characters are in the segment I can't get the bug to occur unless த or one of the other specific characters I know of are used. All of the above is true with Text and TextArea as well.

I have reported the bug to Oracle's bug database now. I also discovered "த" + "文".repeat(32_001) + "b" is rendered as தb, unlike "த" + "a".repeat(32_001) + "b", which is rendered த.

Great :-)

The bug report has been evaluated now, so here's the link for anyone who wants to follow its progress: https://bugs.java.com/bugdatabase/view_bug?bug_id=JDK-8315653


ASSERT due to iso NULL reference after releasing bidirectional streams

Description
When ending a phone call using a bidirectional stream, rarely we are hitting one out of two asserts during teardown of the ISO.

in ascs_disconnect_stream_work_handler

in bt_iso_chan_disconnected

Reproduce
I mention that its hit rarely, as I have not myself been able to reproduce the issue at all, but I have had these asserts reported to me from mass-testing.

Create a bidirectional stream, phone call
End the call on the client side

Expected behavior
Rarely we hit one of two asserts:

in ascs_disconnect_stream_work_handler
we hit
__ASSERT(ep != NULL && ep->iso && stream != NULL,
"Invalid endpoint %p, iso %p or stream %p",
ep, ep == NULL ? NULL : ep->iso, stream);

in bt_iso_chan_disconnected
we hit
__ASSERT(chan->iso != NULL, "NULL conn for iso chan %p", chan);

Impact
TBD
Logs and console output

in ascs_disconnect_stream_work_handler
we hit
__ASSERT(ep != NULL && ep->iso && stream != NULL,
"Invalid endpoint %p, iso %p or stream %p",
ep, ep == NULL ? NULL : ep->iso, stream);

in bt_iso_chan_disconnected
we hit
__ASSERT(chan->iso != NULL, "NULL conn for iso chan %p", chan);

Environment
Zephyr SHA:
dfd762427066dfc7b5a140ec27e34b5c7d0f890a
On Client side, this has been reproduced with more than one brand, model and version.
Additional context
A subset of our LE Audio Kconfigs
CONFIG_BT_BAP_UNICAST_SERVER=y
CONFIG_BT_ASCS_MAX_ACTIVE_ASES=2
CONFIG_BT_ASCS_ASE_SNK_COUNT=1
CONFIG_BT_ASCS_ASE_SRC_COUNT=1
CONFIG_BT_CAP_ACCEPTOR=y
CONFIG_BT_CSIP_SET_MEMBER=y
CONFIG_BT_CAP_ACCEPTOR_SET_MEMBER=y
CONFIG_BT_TBS_CLIENT_MINIMAL=y
CONFIG_BT_TBS_CLIENT_ACCEPT_CALL=y
CONFIG_BT_TBS_CLIENT_TERMINATE_CALL=y
CONFIG_BT_TBS_CLIENT_GTBS=y
CONFIG_BT_TBS_CLIENT_CCID=y

@fredrikdanebjer please provide the commit SHA, which controller you are using and more logging. If you can, please also provide an HCI log.

@Thalley I added the commit SHA. However I'm afraid that I cannot provide neither HCI log, not any more logging. These ASSERTs and the circumstances described are the only thing I can provide.
The controller in use is the Demant one, so there is nothing more I can share I'm afraid.

@MariuszSkamra It sounds like a good start :) as long as it supports CCP. Again I'm very sorry that I can't provide more information.

@MariuszSkamra we have only tried reproducing this through manual tests. We will also look into running automatic mass/stress on our platform right now.

We have not been able to reproduce this issue since December, I'm thus closing this.


UI for 2FA

@mewa1024 has the design ready
@corinagum is going to implement
@justinwilaby is also coming to help for pair programming

Spec for the "Select a certificate" modal:
Flow is here (look for the 2FA section

Test-writing in progress. :)


Add Directus Release version compatility

Perhaps Unit Tests or having a release version compatibility matrix, certainly help people from breaking migrations.

yeah. this is a good idea.
This is still very much in its infancy.


(2.7 backport) boards: bl654_usb: Fix non-mcuboot builds not limiting size

This limits non-mcuboot builds to have a maximum size of 892KB to
prevent code being placed over the top of the bootloader's flash area.

Fixes automated build error in https://github.com/zephyrproject-rtos/zephyr/issues/44623

@cfriedt Can we get this merged prior to next 2.7 release please?


add ljedrz to try users

The CI has been acting up a lot lately and since I spend lots of time on the rust-lang repo (especially in the somewhat less active EU daytime hours), I could help by issuing a retry now and then.

@alexcrichton where can I check if the privileges have been deployed? It will be ready when a new build surfaces, right?

No, we don't push the containers to Docker Hub anymore. The server needs to be manually redeployed.


fix: issue two's complement on large u256 values

fixes https://github.com/joshstevens19/rindexer/issues/134

@joshstevens19  works for me

Cool can’t deploy atm as AFK but will when I can


Resample with OHLC sometimes results in series on pandas release 0.18.0.rc1

In [1]: import pandas as pd

In [2]: index = pd.date_range('1-1-2000', '2-15-2000', freq='h')

In [3]: index = index.union(pd.date_range('4-15-2000', '5-15-2000', freq='h'))

In [4]: s = pd.Series(range(len(index)), index=index)

In [5]: a = s.loc[:'4-15-2000'].resample('30T').ohlc()

In [6]: b = s.loc[:'4-14-2000'].resample('30T').ohlc()

In [7]: a.head()
Out[7]:
                     open  high  low  close
2000-01-01 00:00:00   0.0   0.0  0.0    0.0
2000-01-01 00:30:00   NaN   NaN  NaN    NaN
2000-01-01 01:00:00   1.0   1.0  1.0    1.0
2000-01-01 01:30:00   NaN   NaN  NaN    NaN
2000-01-01 02:00:00   2.0   2.0  2.0    2.0

In [8]: b.head()
Out[8]:
2000-01-01 00:00:00    0.0
2000-01-01 00:30:00    NaN
2000-01-01 01:00:00    1.0
2000-01-01 01:30:00    NaN
2000-01-01 02:00:00    2.0
Freq: 30T, dtype: float64

In [9]: pd.__version__
Out[9]: u'0.18.0rc1'

@jcrist fixed by #12329

this was incorrectly taking an .asfreq() path

Tested, that PR, fixes all issues for dask test suite. Thanks!

@jcrist thanks!
merged to master


Louisiana: Natus to ReportStream

We've been able to received a sample MN ORU from Natus successfully. However, they're seeing an HTTP 400 when sending an LA-specific ORU:
"message": "Required field missing: A datatype for OBX-5 must be specified in OBX-2.",
I've offered to take a look if they can provide the sample message.

Corrected message was processed successful! Also, receipt by Natus was confirmed.


improve memory usage of parsing.

before

after

test file is a 3700*3700 matrix, 385MB.

That looks much better indeed, thanks!

I've scheduled a release of the Data NuGet package later today.

Released in data extensions v3.2.0.


Update ganache and remove miner config

Summary

Update ganache
Remove minor configuration from the ganache setup

Do you need a version bump on the package itself @salman01zp ?


The ORP basis set

https://onlinelibrary.wiley.com/doi/full/10.1002/jcc.23347

Added and now live on the website


[ISSUE #186]update SiderMenu

Thanks for your contribution. Could you please explain the changes you made? and provide a screenshot of the effect of the changes. : )

感谢您的贡献。您能解释一下您所做的更改吗？并提供更改效果的屏幕截图。:)

The drop-down box does not automatically scale

After switching modes, you can touch to view and click to switch


Implement private memory

We should use /imped (notice the p) to embed text to a private in-browser db. This project makes it possible
Vector Storage

First of all, the project you provided uses Typescript, which is not compatible with Dart at all, so I can't use it.
There are a few things to think about first. It is possible to store vector data on the local device and query it from the database via vector operations.
However, this has the disadvantage of making the app very heavy. Not only does it make the app take longer to load due to the large size of the app itself, but it can also slow down overall performance due to the local DB lookup and vector operations not being optimized for vector operations.
Is storing and computing vector data on the frontend worth the effort?

All valid points.


Orchestration of cluster (shoot) upgrades, part 1

Description
Changes proposed in this pull request:

Model for upgradeCluster orchestrations and operations
Storage changes for upgradeCluster orchestrations and operations
Reusable generic orchestration manager. Define upgradeKymaManager and upgradeClusterManager in terms of orchestration manager.

Related issue(s)
https://github.tools.sap/kyma/backlog/issues/1165

/retest

/retest

/retest

/retest

/retest


Support for jsgf tags?

Are the JSGF tags supported by your implementation? I couldn't find anything.

Yes, you can set tags for rule expansions using something like:
from jsgf import PublicRule, Grammar
r = PublicRule("hello", "hello world")
r.expansion.tag = "greet"
g = Grammar()
g.add_rule(r)

The strings returned from r.compile() and g.compile() should contain the tagged rule:
'public <hello> = hello world { greet };'
Sorry you couldn't find that, this project needs some documentation work done.
Matching based on tags instead of speech strings could be done by adding alternatives to the Grammar.find_matching_rules and Rule.matches methods. I can add those in if you'd like.

It would be great if you could implement it! 👍

I've added a few commits on this in the develop branch. The example I added shows use of Grammar.find_tagged_rules and Rule.tags.
Let me know if that's what you had in mind, any suggestions on the API, etc :)

First of all, thank you for your fast answers and your great project here.
The idea I had in mind is that you can find matching rules for a sentence and got all used tags back.
For example:
<command> = (open {OPEN} | close {CLOSE}) the file;
And then if you call the method for getting the matched tags with argument "open the file" you get back an array with the element "OPEN". If there are more tags in the rule or in referenced rules which match the argument they should be included in the array.

Thanks for the example, I get the idea now. This could be integrated into the expansion matching process. A  Rule.matched_tags property could be added which will do what you want after Rule.matches is called. A Rule.get_tags_matching(speech) method could also be added that does both.
Do you think tags of referenced rules should be included for the methods and property I added before? Changing that is simple.

Maybe you could add a boolean parameter which says if they should be included or not.

Okay, everything should be working nicely now. I've updated the tag example file using the new Rule.get_tags_matching method. I also used your example above instead of my hello world example.
I went with just using referenced rules every time, mostly because the method names were getting a bit confusing, e.g. get_matched_tags (instead of the property) vs get_tags_matching. I could add something in later on, but there is always the filter function for cases where tags of referenced rules aren't wanted.
Let me know if this works for you and I'll release the recent commits as version 1.3.0.

Everything works as excepted. Nice work!


Error executing API call (422: Unprocessable Entity) VAT problem

Hello,
I am using Shopware version <IP_ADDRESS> and mollie module version 1.3.8
I am experiencing the following problem in the next situation:
I have a discount activated with the rule for every "New customer". When you are not logged into the website and trying to make an order as guest this discount will automatically be added to your bill as soon as you passed the checkout step "customer information". This is the last step before payment. If you press the "go to payment" button -> instead of going to the mollie page you get an error on site and payment can not be completed.
In shopware logging I get this error:
Could not create Mollie order, error: [2020-12-17T20:28:52+0000] Error executing API call (422: Unprocessable Entity): Order line 2 is invalid.  Expected VAT amount to be -€0.31 (-€1.76 × (21.00% / 121.00%)), got -€0.30. Field: lines.2.v
In short:
1. Discount automatically added to bill on last step before payment.
2. clicking go to payment button returns error and payment can not be completed
Thank you,
Heiko
Mochten er vragen zijn dan hoor ik het graag.

Apparently its unrelated to the discount rule.
In a new setting i get a different error with the same result:
ERROR:
Could not create Mollie order, error: [2020-12-18T08:00:10+0000] Error executing API call (422: Unprocessable Entity): Order line 3 is invalid. The field 'imageUrl' should be a valid URL.. Field: lines.3.imageUrl. Documentation: https://docs.mollie.com/gu
Fout (400)
{ "source": "mollie_payments", "additionalData": { "function": "order-prepare", "error": { "message": "Could not create Mollie order, error: [2020-12-18T08:00:10+0000] Error executing API call (422: Unprocessable Entity): Order line 3 is invalid. The field 'imageUrl' should be a valid URL.. Field: lines.3.imageUrl. Documentation: https://docs.mollie.com/guides/handling-errors", "trace": [ { "file": "/var/www/clients/client2/web31/web/custom/plugins/MolliePayments/src/Handler/PaymentHandler.php", "line": 227, "function": "createOrderAtMollie", "class": "Kiener\MolliePayments\Handler\PaymentHandler", "type": "->", "args": [ { "amount": { "currency": "EUR", "value": "47.88" }, "redirectUrl":
---> LONG return URL.
These problems came after upgrading from 1.3.7 to 1.3.8

@glittrnl The first error you report relates to the VAT rounding for discounts. This is a known issue on the Shopware side. Shopware has released a fix for this in 6.3.4.x. Updating to that version or higher should solve this problem.
The second reported issue relates to a recent API change and the changes we made for that in the plugin. We will release a quick fix for this tomorrow at the latest.

Thank you for your response!


fix(ButtonDropdown): add close event when Escape key is pressed (#1634)

Hey there,
This pull-request add a small piece of code to close event when Escape key is pressed (#1634)

[x] Bug fix
[ ] New feature
[ ] Chore
[ ] Breaking change
[x] There is an open issue which this change addresses
[x] I have read the CONTRIBUTING document.
[x] My commits follow the Git Commit Guidelines
[x] My code follows the code style of this project.
[ ] My change requires a change to the documentation.

[ ] I have updated the documentation accordingly.

[ ] I have added tests to cover my changes.
[ ] All new and existing tests passed.

Fixes #1634

Thanks for the PR.
I think a better place to make this change would be in part of the key down handler which handles when the key is on the button itself: https://github.com/reactstrap/reactstrap/blob/dc0b8ae45136e4aecb055c929b0b6424c4d9a771/src/Dropdown.js#L126-L134
maybe something like:
   if (
     !this.props.isOpen
     && ([keyCodes.space, keyCodes.enter, keyCodes.up, keyCodes.down].indexOf(e.which) > -1)
   ) {
     this.toggle(e);
     setTimeout(() => this.getMenuItems()[0].focus());
   } else if (this.props.isOpen && e.which === keyCodes.esc) {
     this.toggle(e);
   }

Awesome! Thanks again!


CDN Includes don't provide the proper styles for the dds-footer-container language selector

Description
Footer language selector should be properly styled when importing from CDN.
The language choices aren't styled properly
Component(s) impacted
dds-footer-container
Browser
Chrome, Firefox
Carbon for IBM.com version
latest
Severity
Severity 2 = Aspects of design is broken, and impedes users in a significant way, but there is a way to complete their tasks. Affects major functionality, has a workaround.
Application/website
www.ibm.com/community/z-and-cloud
Package
@carbon/ibmdotcom-web-components
CodeSandbox example
https://codesandbox.io/s/amazing-morning-98rj0u?file=/index.html:173-940
Steps to reproduce the issue (if applicable)

    <title>@carbon/ibmdotcom-web-components example</title>
    <meta charset="UTF-8" />
    <link
      rel="stylesheet"
      href="https://1.www.s81c.com/common/carbon-for-ibm-dotcom/tag/v1/latest/plex.css"
    />

    <dds-footer-container> </dds-footer-container>

Release date (if applicable)
No response
Code of Conduct

[X] I agree to follow this project's Code of Conduct
[X] I checked the current issues for duplicate issues

(you have to make the example larger to see the desktop version)

Workaround from Ariella Gilmore is to also include combo-box.min.js:

Double check the footer web component to ensure all the imports are included


fix a bug in setupVirtualEnv method while run on Mac OS

#51 The bug in setupVirtualEnv method while run on Mac OS has been fixed, through modifying the code in setupVirtualEnv method:
String libJvm = SystemUtils.IS_OS_MAC ? "libjvm.dylib" : "libjvm.so";
Thus, the flink-ai-extended system would automatically find libJvm.dylib under Mac OS, while find libJvm.so under Linux.

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.


Feature: Opt out of forced HTTPS via a server setting

I would really like a way to "opt out" of HTTPS only extensions traffic. It Really causes a nuisance when deploying to on-prem infrastructure. Many of our clients are just using IP addresses to access their internal tools and don't know how (or want to know how) to get proper HTTPS working without significant help from us. A server setting allowing non HTTPS traffic for extensions would be handy.

Sorry, we are not going to get to this in any near timeframe.


Questions

Hi,
I found your code very interesting and I would like to use for my research (SIFT-like descriptors testing), but I have two questions:

Does EFANNA support  L1 (i.e. Manhattan) distance?
If descriptor elements are integer in the range 0-15 (i.e. nibbles), does the code need a specific tuning of some parameters  (such as those related to the hash function)?

Thanks in advance

EFANNA can support L1 distance, but I haven't implement it yet. And sorry, recently I have no time for that. If you have to use L1, you may implement a new distance class in the distance.hpp similar to the L2Distance class. It should be simple.
The code doesn't need specific tuning according to data type. If the precision of the graph or search is low, you may just try bigger parameters.
Thank you for your attention!

Hi,
Thank you for sharing the code. My questions are:

Does your method support data point updates after creating the index?
Is data point size have to be given in advance for the initializing index?

The reason of these questions is: HNSW has to be given size of index in advance. But once size is given (let suppose 1000 points) we can add points into it incrementally


[DO NOT MERGE] Implement Sequence.adjacentPairs()

Implementation for the corresponding apple/swift-evolution PR.

@swift-ci please test

Can one of the admins verify this patch?

This feature will be proposed via the Standard Library Preview package.


Youtube Search Views

Hello, it would be nice to watch the videos by entering the search key as an addition to the program you wrote last.
I hope you will do a study soon.
By the way, your program works very well without any problems.
I used translate look nice :)

Okay I will see what I can do


What would be the Appropriate Viewer for results

I have achieved the results on waymo datasets but struggling with the viewer. Which Viewer was used and share the link if any helping material is available. I have tried on SIBR viewer but it is not working

Hi, I use the original SIBR viewer. Why SIBR is not working for you? Maybe you could provides more details.

Hi, I use the original SIBR viewer. Why SIBR is not working for you? Maybe you could provides more details.

I've build the viewer on Ubuntu 22.04 when I run this command : ./SIBR_viewers/install/bin/SIBR_remoteGaussian_app -m /home/iqra/Desktop/g-pro/GaussianPro/models/
It displays a blank screen

Currently I'm using online website supersplat to view the results but the quality is not that good


Update the style and layout

Signed-off-by: qinyer<EMAIL_ADDRESS>

/lgtm
/approve

/cherry-pick release/1.2


[BUG] Max clique equal to zero and abort when using descriptors generated by 3DSmoothNet on my own data

I generate descriptors with 3DSmoothNet on my own data.
The ply contains 271467 points and I randomly choose 5000 keypoints from them
data.zip
==================================================
        TEASER++ Python registration example
==================================================
Reading PLY: [========================================] 100%
Reading PLY: [========================================] 100%
TEASER++ Parameters are: <Params with noise_bound=0.05
cbar2=1
estimate_sccaling=0
rotation_estimation_algorithm=GNC-TLS
inlier_selection_mode=PMC_EXACT
>
Starting scale solver.
Scale estimation complete.
Max core number: 0
Num vertices: 2
[pmc heuristic]	 mc = 0
Max clique lower bound equals to zero. Abort.
Max Clique of scale estimation inliers:
Clique size too small. Abort.
Max clique size: 0
==================================================
Number of points:  5000
Traceback (most recent call last):
  File "aa.py", line 364, in <module>
    name, scene_path, desc_path, pair[0], pair[1]
  File "aa.py", line 345, in pair_eval_helper
    print("Number of matched correspondences: ", ref_matched_key.shape[1])
IndexError: tuple index out of range

Do you have any ideas about why this is happenning

@IDEA-V Thanks for reaching out. After you have the keypoints, did you use nearest-neighbor matching to select out matching correspondences based on 3DSmoothNet features? TEASER++ won't do anything if you just straightly feed 5000 keypoints into it.

@IDEA-V Thanks for reaching out. After you have the keypoints, did you use nearest-neighbor matching to select out matching correspondences based on 3DSmoothNet features? TEASER++ won't do anything if you just straightly feed 5000 keypoints into it.

@IDEA-V Thanks for reaching out. After you have the keypoints, did you use nearest-neighbor matching to select out matching correspondences based on 3DSmoothNet features? TEASER++ won't do anything if you just straightly feed 5000 keypoints into it.

I use the script provided by you
teaser_python_3dsmooth.py
It uses the .npz file generated by 3DSmoothNet after the inference step.

@IDEA-V Thanks for reaching out. After you have the keypoints, did you use nearest-neighbor matching to select out matching correspondences based on 3DSmoothNet features? TEASER++ won't do anything if you just straightly feed 5000 keypoints into it.

I use the script provided by you
teaser_python_3dsmooth.py
It uses the .npz file generated by 3DSmoothNet after the inference step.

Check what are the returned values on this line: https://github.com/MIT-SPARK/TEASER-plusplus/blob/4a14392e1315551fd507ec1ecc07743709636099/examples/teaser_python_3dsmooth/teaser_python_3dsmooth.py#L299
They should be containing points fewer than 5000.

Check what are the returned values on this line: https://github.com/MIT-SPARK/TEASER-plusplus/blob/4a14392e1315551fd507ec1ecc07743709636099/examples/teaser_python_3dsmooth/teaser_python_3dsmooth.py#L299
They should be containing points fewer than 5000.

I have found that this is a 3DSmoothNet problem. I have solved it, https://github.com/zgojcic/3DSmoothNet/issues/38#issuecomment-760021491
So I am closing up this issue.

I have found that this is a 3DSmoothNet problem. I have solved it, https://github.com/zgojcic/3DSmoothNet/issues/38#issuecomment-760021491
So I am closing up this issue.

dear @IDEA-V
could you please explain how you encoded .ply file in ASCII instead of binary and removed the color information?
I do as follows but while reading .py file (encoded), I got the error:
[Open3D WARNING] Read PLY failed: number of vertex <= 0.
from plyfile import PlyData, PlyElement
pcd = o3d.io.read_point_cloud(binary_ply_dir)
data = np.asarray(pcd.points)
size = data.shape[0]

_array = np.empty(size, dtype=[('vertex_indices', 'f4', (3,))]) #removing the color information
_array['vertex_indices'] = data[:size]
PlyE = PlyElement.describe(_array, name)

PlyData([PlyE], text=True).write('ascii_cloud.ply')# encode .ply file in ascii instead of binary```

what is the relation between Max clique and teaser++


minor change to provide Peer->send() for other networks (e.g. testnet)

#72

Ah yeah, branches keep the commit history cleaner when you move commits into my remote:
you were pushing to master but I already merged the alert thing, hence the merge commit :P
I might have to cherry pick these, which also spells problems for your master since it assumes things were done one way... Use a branch ;)

See #75 - it incorporates the Peer->send() commits from this branch. Our histories differed because I merged the alert bugfix 'first', the merge commit in this PR is probably to resolve that conflict.
If you work in a topic branch 'fix alert bug' or 'fix peer messages', it's easier for others to merge them in any order, plus if another contributor introduces a change conflicting with your branch, you can rebase on upstream/master. This way branches stay atomic, and don't commit to any definite order until they're merged.
But please keep submitting PR's :)

#75 was merged which included these commits, tagged as v<IP_ADDRESS>


Make the changes in  README.md file

when i cloned your repo it is showing open in browser 3000,instead you are defined the port 8000

3000 is for frontend, 8000 is for backend. they run seperately on different ports. thank you!!


Chapter 1: Introduction, hashes & public key cryptography

Chapter 1 basic crypto tools

I may have gone overboard with trying to explain public key cryptography

This is awesome!!! Thank you! Merging 😊


Add Pino transport for OpenTelemetry

Is your feature request related to a problem? Please describe
We should add Logs API support to Pino also now that Bunyan/Winston have it.
Describe the solution you'd like to see
Seems like Pino recommends doing this via transports. Ideally transports operate in a separate thread or a separate process which won't have access to globally set log provider. So we would need to duplicate and setup log provider inside the transport itself together with resource detection, processor/exporter configuration etc.  I don't see a sane way of passing in custom processor/exporter to the transporter tho. Also need to make sure this works well with Pino instrumentation and auto instrumentation.
Pino already links to one OTEL transport. Maybe @Vunovati is willing to move it to contrib.
Are there any other ways of doing this besides using a transport?

Hello @mhennoch, what problem would moving the transport to this repo solve for the end users? Is there a way to do it while preserving all the contributions of the contributors to the original repo?

Hello,
Pino Opentelemetry Transport is now moved to @pinojs org
https://github.com/pinojs/pino-opentelemetry-transport
I created an issue with the description and the motivation for doing so here:
https://github.com/pinojs/pino-opentelemetry-transport/issues/161
Thanks


⚙Tech Debt: Two melt actions on the same element

I got this
<span
  melt={$volumeThumb()}
  {...volumeTrigger}
  class="h-2 w-2 scale-0 rounded-full bg-white outline-none transition-transform focus:scale-125 focus:ring focus:ring-white/30"/>

It's the slider thumb but now I wanted to add a tooltip on it, but with "{...volumeTrigger}" it's not working, is it even possible? Maybe, is it possible only sometimes with right combination of melt actions?

I tried with the latest version and it's fixed, thank you so much.


Remove used package 'pinecone-datasets'

Problem
This package is now unused - dataset loading is done via pandas /
pyarrow directly.
Solution
Remove it.
Type of Change

[x] Bug fix (non-breaking change which fixes an issue)

Test Plan
Covered by existing tests

Abandoning for now - still used by load_dataset.py which some users could be using...


lnwire+funding: introduce new protocol extension for explicit commitment type negotiation

Replaces https://github.com/lightningnetwork/lnd/pull/5373 (just rebased on top of master).

PR retains its approvals from #5373, gonna land this now (with our temp feature bit until an official one is selected) so we can continue to rebase+land the dependent PRs.

Can the proto be made to be consistent with the previous proto? Like server signal 2 always means anchors and not sometimes static remote key when talking to a prior version LND?


Pex MySQL each server has its own prefix and permissions

Is it possible for with Pex MySQL for each server to have a different prefix and permissions for the same rank X

Not in 1.x versions of PEX.  Possibly in 2.x, but you'll need @zml2008 to chime in about that...

OK, yes please explain this to me.

Yeah, PEX 2.x supports the server-tag context, but SQL support in 2.x still has a few nasty isues so it's not yet recommended.