Protect unset() with isset() in upgrade_config

Forum: https://forum.pfsense.org/index.php?topic=96827.0
Sometimes there can be unexpected stuff in a config. To avoid errors
like "PHP Fatal error: Cannot unset string offsets in
/etc/inc/upgrade_config.inc on line 291" it seems good to use
belts-and-braces checks with any unset() of associative array elements,
just in case the thing above is an empty string (instead of an array or
non-existent thing). An unnecessary error in processing the upgrade code
can mean missing other important upgrade stuff.
These are the places I could see in upgrade_config.inc where unset() is
not already protected by isset(). A lot of them are "that could not ever
go wrong", but IMHO it is worth protecting them all just to be sure.
This is a resubmit of PR #1773 after integrating with current master.

Should I backport this to RELENG_2_2 so it becomes part of the code if another 2.2.* release becomes necessary?

Please! Thanks!


web-eid-app: can not sign with Estonian ID card

Reproduce
Install

Install the web-eid-app package in NixOS
Insert in configuration.nix:
 packages = with pkgs; [
   firefox-esr
   web-eid-app
   p11-kit
   opensc

 ];

and below:
services.pcscd.enable = true;
programs.firefox.enable = true;
programs.firefox.package = pkgs.firefox-esr;
programs.firefox.nativeMessagingHosts.packages = [ pkgs.web-eid-app ];
programs.firefox.policies.SecurityDevices.p11-kit-proxy = "${pkgs.p11-kit}/lib/p11-kit-proxy.so";
# Authentification
environment.etc."pkcs11/modules/opensc-pkcs11".text = ''
  module: ${pkgs.opensc}/lib/opensc-pkcs11.so
'';

Enable logging (for testing only)

Enable logging:
echo 'logging=true' > ~/.config/RIA/web-eid.conf

Check success:
web-eid

A dialogue About Web eID window appears. Click on [Cancel].
cat /.local/share/RIA/web-eid/web-eid.log

You should see something like:
2024-03-31T06:56:42.804Z INFO src/controller/controller.cpp:72:void Controller::run() - "web-eid" app "2.4.0+0" running in command-line mode

Install the browser extension within Firefox from
Web eID – Get this Extension for Firefox (en-US)

Link the web-eid manifest into the browser configuration
mkdir -p ~/.mozilla/native-messaging-hosts/
cd ~/.mozilla/native-messaging-hosts/
ln -s "$(dirname $(dirname $(realpath $(which web-eid))))/share/web-eid/eu.webeid.json" .

Check success

Enable logging:
Insert Estionan ID card.
Check with DigiDoc that the card reader works and the ID card reader and
driver works. (Ok)
Goto https://web-eid.eu/ and click on [Authenticate].

Incorrect result
Unfortunately, I get the following error page in the browser:
Authentication failed
[Code]
ERR_WEBEID_NATIVE_UNAVAILABLE
[Message]
a message from native application was expected, but native application closed connection

Furthermore, no log message in /.local/share/RIA/web-eid/web-eid.log.
Help is welcome.
I also filed a bug report upstream: https://github.com/web-eid/web-eid-app/issues/317

Tested working procedure:
Installation

Install the web-eid-app package in NixOS
Insert in configuration.nix:
 packages = with pkgs; [
   firefox-esr
   web-eid-app
   p11-kit
   opensc

 ];

and below:
services.pcscd.enable = true;
programs.firefox.enable = true;
programs.firefox.package = pkgs.firefox-esr;
programs.firefox.nativeMessagingHosts.packages = [ pkgs.web-eid-app ];
programs.firefox.policies.SecurityDevices.p11-kit-proxy = "${pkgs.p11-kit}/lib/p11-kit-proxy.so";
# Authentification
environment.etc."pkcs11/modules/opensc-pkcs11".text = ''
  module: ${pkgs.opensc}/lib/opensc-pkcs11.so
'';

Enable logging (for testing only)

Enable logging:
echo 'logging=true' > ~/.config/RIA/web-eid.conf

Check success:
web-eid

A dialogue About Web eID window appears. Click on [Cancel].
cat /.local/share/RIA/web-eid/web-eid.log

You should see something like:
2024-03-31T06:56:42.804Z INFO src/controller/controller.cpp:72:void Controller::run() - "web-eid" app "2.4.0+0" running in command-line mode

Install the browser extension within Firefox from
Web eID – Get this Extension for Firefox (en-US)

Link the web-eid manifest into the browser configuration
mkdir -p ~/.mozilla/native-messaging-hosts/
cd ~/.mozilla/native-messaging-hosts/
ls -s "$(dirname $(dirname $(realpath $(which web-eid))))/lib/mozilla/native-messaging-hosts/eu.webeid.json" .

Check success

Enable logging:

Insert Estionan ID card.

Check with DigiDoc that the card reader works and the ID card reader and
driver works. (Ok)

Goto https://web-eid.eu/ and click on [Authenticate].
Type pin1, you should see:
Digital signing
Welcome, XXX XXX!

Press the button [Sign document], then type pin2, you should see:
  Digital signing
  Welcome, XXX XXX!
  Signature added: example-for-signing.asice

Addendum
The lines
mkdir -p ~/.mozilla/native-messaging-hosts/
cd ~/.mozilla/native-messaging-hosts/
ls -s "$(dirname $(dirname $(realpath $(which web-eid))))/lib/mozilla/native-messaging-hosts/eu.webeid.json" .

are a workaround until #281710 is fixed.

Jens Getreu's blog - Sign with your Estonian ID card under NixOS


Please port this package to Visual Studio 2022

Hi,
I would like to say thanks for this package. For a long time it helped me troubleshooting problems for VS 2019.
However, it is incompatible with VS 2022 because of many breaking changes introduced in that version.
Please create a versions of this package for VS 2022.

there already was a VS2022 version, but I'm no longer able to find it after reinstall.
@yannduran why is it gone?


runtime error while running mace with opencl

I'm trying to run mace on my device(mali GPU) with similar code like mace_run.cc
System information

android 7.12 on RK3399
ndk-17c with clang toolset
MACE version: v0.9.0-282-g9b78e12-20181029

WARNING: linker: /system/lib64/libmace.so: unused DT entry: type 0xf arg 0x13489f
I mace.cc:629 Create MaceEngine from model pb
I mace.cc:387 Creating MaceEngine, MACE version: v0.9.0-282-g9b78e12-20181029
I mace.cc:483 Loading Model Data
I mace.cc:413 Initializing MaceEngine
W tensor.h:286 mobilenet_v2/Flatten/flatten/strided_slice:0: Resize buffer from size 65 to 66
W tensor.h:286 mobilenet_v2/Flatten/flatten/Reshape/shape:0: Resize buffer from size 66 to 68
F tensor.h:226 Check failed: has_opencl_image()  do not have image
Aborted

My input loading code:
MaceInputs CreateInputs(const char* input_image) {
  assert(input_names.size() == input_shapes.size());
  MaceInputs inputs;
  for (size_t i = 0; i < input_names.size(); i++) {
    int64_t input_size = std::accumulate(input_shapes[i].begin(),
                                         input_shapes[i].end(),
                                         1,
                                         std::multiplies<int64_t>());
    auto buffer_in = std::shared_ptr<float>(new float[input_size]);
    auto input_raw = cv::imread(input_image);
    cv::resize(input_raw, input_raw, cv::Size(img_size, img_size), 0., 0., 3);
    cv::Mat input(img_size, img_size, CV_32FC3, buffer_in.get());  // trick to use extenal format
    input_raw.convertTo(input, CV_32FC3);
    inputs[input_names[i]] = MaceTensor(input_shapes[i], buffer_in);
  }
  return inputs;
}

I combined my tensorflow input-loading code and mace_run.cc code. Maybe this is not quite correct.
By reading mace code, I guess the input image should be loaded with opencl methods and transformed to cl::Image format. But I don't quite understand how mace_run.cc  managed to run with MACE_ENABLE_OPENCL macro without opencl inputs.
Appraciate it if any one could give me a opencl enabled mace tutorial.

my model yaml
library_name: profile-v1031
target_abis: [arm64-v8a]
target_socs: [rk3399]
model_graph_format: file
model_data_format: file
models:
  profile_v1031:
    platform: tensorflow
    model_file_path: /tmp/profile_v1031.pb
    model_sha256_checksum: f63570f2d76fbbb99621fd24413451313b62874d9053b72583962c7d7a4be71e
    subgraphs:
      - input_tensors:
          - input_image
        input_shapes:
          - 1,96,96,3
        output_tensors:
          - gender
          - age
        output_shapes:
          - 1,2
          - 1,101
    runtime: gpu
    limit_opencl_kernel_time: 0
    nnlib_graph_mode: 0
    obfuscate: 1
    winograd: 0
    cl_mem_type: image

@reasonsolo , it looks like some op in your model is not supported by gpu. I'll take a look at your pb file.

I net.cc:83 Operator ab651090 type: Conv2D future 0
I net.cc:138 op done, has shape: [1, 3, 3, 1280]
I net.cc:83 Operator 8cd6923e type: Pooling future 0
I net.cc:138 op done, has shape: [1, 1, 1, 1280]
I net.cc:83 Operator 42afec5f type: Conv2D future 0
I net.cc:138 op done, has shape: [1, 1, 1, 512]
I net.cc:83 Operator c7efede0 type: StridedSlice future 0
W tensor.h:286 a67bf373: Resize buffer from size 65 to 66
I net.cc:138 op done, has shape: []
I net.cc:83 Operator 2ac076a8 type: Stack future 0
W tensor.h:286 9d3dcab9: Resize buffer from size 66 to 68
I net.cc:138 op done, has shape: [2]
I net.cc:83 Operator 9d6a9690 type: Reshape future 0
I net.cc:138 op done, has shape: [1, 512]
I net.cc:83 Operator b8c7d6fc type: MatMul future 0
F tensor.h:226 Check failed: has_opencl_image()  do not have image, type N4mace6BufferE

So I guess the op not supported by gpu is reshape? I checked through kernels code and no reshape.cc is found in kernels/opencl :(

The problem is " Matmul " Op in "logits/gender" and "logits/age" does not support weights data as input. You can use FullyConnect Op instead.

Thank you. I will try to remove last reshape/matmul ops while running inference.
But is it possible to use a matmul_buffer cl kernel to do the trick? Or why mace chose to run matmul for unsupported data type?

We will work on it and see what is the proper way

In my case,  the inputs of matmul ops A is cl image while B is cl buffer. Is this a cl mem allocating problem?
I matmul.h:107 A is image shape [1, 512]
I matmul.h:116 B is buffer, shape [512, 2]

No, it is because we do not support 'MatMul' but support 'FC' for GPU. We'll consider implementing this.
For now, you can try FC.

@liyinhgqw how can i use FC when i use tensorflow pb ,I see tools/convert_tool/tensorflow_converter.py,there do not have any tensorflow ops convert to mace FC op.Thanks


support accurate seconds for all locales

support accurate seconds for all locales,
before this commit:
In [1]: import arrow
In [2]: utc = arrow.utcnow()
In [3]: utc.humanize()
Out[3]: u'seconds ago'

after this commit:
In [1]: import arrow
In [2]: utc = arrow.utcnow()
In [3]: utc.humanize()
Out[3]: u'26 seconds ago'

Can you update this to merge automatically, and update the newer lang files please?

Arrow is inspired by Moments.js, which just uses a few seconds ago...and personally I prefer seconds ago.  Could this PR be closed?


Referenced By View

Here you go. It may require some refactoring down the road as there is a lot of duplicated code amongst the views. However, everything appears to be working.
2 Open items (IMO not show stoppers but something to keep in mind):

So I created 3 new columns for the Referenced By View to match Tes5Edit. These are not sortable and that functionality appears to be going back to the xelib.
Maybe you can figure this out as maybe something's not being released properly. But I can drag a TreeView item onto the Referenced By View the first time but once it has a record associated with it, I cannot do it anymore. Dbl Click and Enter key press work fine.

There's a lot to review here.  I'll go over tomorrow!

I think that I have made the requested changes. Please let me know if you need anything else. Also, let me know if you see the latest. I am not sure if I got the pull request right.

Will take a look soon.

Shoot, I forgot to merge with master before pushing my changes. Let me know if I need to fix anything. Sorry :(
Other than that, I think I finally got it now. Let me know if you see anything else.

Looks great!  Good work.  :+1:


Error refreshing balance

Hi there, starting from today I get the error refreshing:

Bondora-3.lua:33: bad argument #1 to 'request' (string expected, got no value)

Did something from Bondoras side change?

I assume it will be fixed by https://github.com/EmDee/moneymoney-bondora/pull/21

Please test the latest release. Unsigned lua script attached: https://github.com/EmDee/moneymoney-bondora/releases/tag/1.5
Signed one will be added as soon as I've heard back from MoneyMoney.

Thank you, 1.5 works for me 👍

Updated the release with the signed version. Also updated on https://moneymoney-app.com/extensions/.


Crash when rendering with Skia and calling GetMapInfo on offscreen coordinates

https://github.com/Mapsui/Mapsui/blob/f4e253adbe4a464cb561eaa6d7be34e623ccae6e/Mapsui.Rendering.Skia/MapRenderer.cs#L224
If pixmap height is only 352 and you try to access 353 this crashes with AccessViolationException.
Adding below here: https://github.com/Mapsui/Mapsui/blob/f4e253adbe4a464cb561eaa6d7be34e623ccae6e/Mapsui.Rendering.Skia/MapRenderer.cs#L214
if (intX >= width || intY >= height)
                    return result;

fixes it, but I'm not sure if thats the right way to go.
Should it be rather left to the user to make sure he's not calling GetMapInfo outside of the viewport?
Should we extend the rendering viewport in case GetMapInfo is called on a point that's currently not visible?
I think the latter probably makes more sense, GetMapInfo shouldn't be dependent on whether one can currently see the coordinates.

Well at least it should not crash. I think this is fixed in V3. Which version are you using?

I was on latest prerelease from NuGet
https://github.com/WolfCorps/TacControl/blob/master/src/DesktopClient/TacControl.csproj#L340

3.0.0-alpha.4

This was the fix I was referring to https://github.com/Mapsui/Mapsui/pull/1065/files, but that was part of alpha.4, so apparently this is a different issue that should be fixed.

@dedmen This should be fixed in the next release.


Revert "[macOS] Force curl to use IPv4"

Description
Reverting breaking changes made here: https://github.com/actions/runner-images/pull/9586
Related issue:
https://github.com/actions/runner-images/issues/9626
Check list

[x] Related issue / work item is attached
[ ] Tests are written (if applicable)
[ ] Documentation is updated (if applicable)
[ ] Changes are tested and related VM images are successfully generated

/azp run macos12


Reduce \hspace between minipage{} environment

there is too much blank space in the minipage paragraph, how can I reduce the blank?

Thanks

Hello @77QingLiu ,
Could you please post the full page ?
Regards.

here is the full page

there are too much space here

So, could you show me what kind of output you did expect from your example ? I can't figure out how to make it differently...

@darwiin I want the margin on the left of the text to be narrow, which means I can put more text on each line

@darwiin Thanks very much for the update. The left column size could be changed now. But the number of words per line is fixed which makes the whole line moves left when reducing the left column size, but not increase words per line. I'm wondering is there are any options to increase words per line?

Did'nt see this...

@77QingLiu Thanks for waiting. It was difficult to understand what was the problem. I think this new fix is the good one, let me know if that solve the problem.


I can not install version 1.3.9

Describe the bug
When I try to install version 1.3.8 or higher I always get this message:
WARNING: Terraform version 1.3.9 not found.
Exception: Terraform 1.3.9 fail to pass Code Signature test. Uninstalling.
To Reproduce
Steps to reproduce the behavior:

install-terraform -tfversion 1.3.8 or higher

Expected behavior
Install Terraform version 1.3.8 or higher
Output
WARNING: Terraform version 1.3.9 not found.
Exception: Terraform 1.3.9 fail to pass Code Signature test. Uninstalling.
Desktop (please complete the following information):

OS: Windows 11
Version 22H2 Build 22621.14.13

Additional context
Add any other context about the problem here.

Looks like as of 1.3.8 this is a new thumbprint.  You can update the thumbprint in your config if you trust it.  I can't find a matching thumbprint on this page. https://www.hashicorp.com/security I suspect they just need to update it.  I emailed security at hashicorp to confirm.

Can you help me, how the update the thumbprint for this module?

It would look something like this
Set-TerraformConfiguration -Configuration @{'HashiCorpWindowsThumbprint' = 'thumbprint2' } -Confirm:$false

Replace thumbprint2 with the one you trust.

When i add the new Thumbprint then i can install the version 1.3.8 but i can´t use 1.3.7. Can i add the two Thumbprints?

The PR I have right now will allow for a string of thumbprints. I am waiting to hear back from Hashicorp before I publish the update.

Issue should be fixed in 0.6.2. https://www.powershellgallery.com/packages/Invoke-Terraform/0.6.2

Now i can install version 1.3.8 but not was older is as 1.3.7


Add {Advise, UncheckedAdvice}::is_supported()

Some Linux-specific advices are supported only on recent kernels, e.g. MADV_POPULATE_READ is available starting from Linux 5.14. Some long-term supported distros (e.g. RHEL 8 and Ubuntu 20.04) still have older kernels. So it would be useful to provide a way to perform a runtime check to see whether the specified advice is supported.
This PR adds two similar methods Advise::is_supported() and UncheckedAdvice::is_supported(). They're marked as Linux-only as:

I guess the support for the common (non-Linux) advices should be universal, so there is no need to check.
Only Linux have a documented way to check it[^1], see madvise(2).

[^1]: Tho, as for not officially documented way, I've found this approach for BSDs: https://github.com/jart/cosmopolitan/blob/3.8.0/libc/calls/madvise.c#L38-L39

Can you also add a link to the docs. So people would know what the code is doing.

Added.

Thanks!

@RazrFalcon Would you mind to push an update to crates.io that includes this? :smile:
Thanks!

Done.


Gitea fails to create /data/git/.ssh directory - permission denied

While postgresql runs nicely with v0.0.23, it's gitea now failing with

Failed to create '/data/git/.ssh': mkdir /data/git: permission denied

on Windows running with rancher-desktop

Nope, this problem is not fixed :-/

.

Shouldn't https://github.com/epinio/epinio/blob/9f86f4ab9d6c4cfe8e3402a3f9080fbdfd6fb610/deployments/gitea.go#L178 read /data/gitea/... instead of /data/git/... ?! 🤔

read /data/gitea/... instead of /data/git/... ?! 🤔

Hmm, probably not. https://github.com/go-gitea/gitea/blob/f3b36e2a3947782df8eb41a4049743b7806b0e62/docker/root/usr/bin/entrypoint#L27 lists /data/git
Btw, kubectl describe shows /data as mounted "rw".

If you still have the busted install, open a terminal on the rancher-desktop WSL2 and run la -la /var/lib/rancher/k3s/storage/

Do you mean ls -la /var/lib/rancher/k3s/storage/ ? (la -> ls)

Do you mean ls -la /var/lib/rancher/k3s/storage/ ? (la -> ls)

Yes… yes I did 😁

My thought is that if we see the permissions be something different than 777, we can compare against changes in the local path provisioner.

I have the same problem on Ubuntu (k3d cluster with ubuntu containers), not sure it's only windows issue

I'm using:

Windows 10
rancher desktop v0.4.1
Epinio v0.0.24
Kubernetes v1.21.4

and Epinio installs just fine with a simple epinio install. The only problem I had was DNS issues, probably related to this: https://github.com/rancher-sandbox/rancher-desktop/issues/572 (I fixed it by adding <IP_ADDRESS> in the resolv.conf)
Here is the output of that ls command:
/mnt/c/Users/Dimitris # ls -la /var/lib/rancher/k3s/storage/
total 16
drwx-----x  4 root    0 4096 Sep  7 06:06 .
drwxr-xr-x  6 root    0 4096 Sep  7 06:06 ..
drwxrwxrwx  3 1001 1001 4096 Sep  7 06:08 pvc-b1e878c3-f3f0-4a25-ba9f-d0e1fb7973f9_gitea_data-gitea-postgresql-0
drwxrwxrwx 11 root    0 4096 Sep  7 06:09 pvc-d01bc0dd-ea56-4780-aff9-0aed225a2f3a_gitea_data-gitea-0

/var/lib/rancher/k3s/storage is empty on my WSL instance.

Comparing my and @jimmykarily's Windows setup:
I was running RD with k8s 1.21.3 vs. jimmykarily running k8s 1.21.4
Re-testing with 1.21.4 makes epinio install succeed. Downgrading to k8s 1.21.3 makes it fail again. 🤦🏻♂
The upstream changelog doesn't contain any hint 🤷🏻♂

Kubernetes 1.20.10 is also fine.


Negative number after installation

Hi, I follow the guide to install and everything is ok, but I did not get graphs on Grafana, my router is configured good to send data to openBMP server.
I check server openBMP server and get Current Offset  negatieve number, why?
root@1bec64379705:/tmp# kafka-tools -b obmp-kafka:29092 print_consumer_lag openbmp.parsed.unicast_prefix obmp-psql-consumer
Partition   Lag       Latest Offset    Current Offset

 7       1               0                -1
 4       1               0                -1
 0       13             12                -1
 6       440,292      440291              -1
 2       1               0                -1
 1       14             13                -1
 3       1               0                -1
 5       1               0                -1

Total lag: 440,324 messages.
root@1bec64379705:/tmp#
root@1bec64379705:/tmp#

a negative 1 indicates that the consumer is likely not connected to Kafka.  What does the docker exec  obmp-psql-app cat /var/log/obmp-psql.log show in terms of errors/warnings?

@kmorales026 , let's reopen if you still have an issue with version 2.1.1.

I received this error:
root@ubuntu:/var/openbmp/config# docker exec obmp-psql-app cat /var/log/obmp-psql.log
2022-06-20 19:16:35 137 [main] INFO  org.openbmp.ConsumerApp - Loading custom configuration file
2022-06-20 19:16:35 137 [main] INFO  org.openbmp.PSQLHandler - Connecting to Postgres
2022-06-20 19:16:37 137 [main] WARN  org.openbmp.PSQLHandler - Writer thread failed to connect to psql
org.postgresql.util.PSQLException: Connection to obmp-psql:5432 refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections.
at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:301) ~[obmp-psql-consumer.jar:?]
at org.postgresql.core.ConnectionFactory.openConnection(ConnectionFactory.java:51) ~[obmp-psql-consumer.jar:?]
at org.postgresql.jdbc.PgConnection.(PgConnection.java:225) ~[obmp-psql-consumer.jar:?]
at org.postgresql.Driver.makeConnection(Driver.java:466) ~[obmp-psql-consumer.jar:?]
at org.postgresql.Driver.connect(Driver.java:265) ~[obmp-psql-consumer.jar:?]
at java.sql.DriverManager.getConnection(DriverManager.java:681) ~[java.sql:?]
at java.sql.DriverManager.getConnection(DriverManager.java:190) ~[java.sql:?]
at org.openbmp.PSQLHandler.connect(PSQLHandler.java:94) [obmp-psql-consumer.jar:?]
at org.openbmp.ConsumerApp.main(ConsumerApp.java:95) [obmp-psql-consumer.jar:?]
Caused by: java.net.ConnectException: Connection refused
at sun.nio.ch.Net.pollConnect(Native Method) ~[?:?]
at sun.nio.ch.Net.pollConnectNow(Net.java:672) ~[?:?]
at sun.nio.ch.NioSocketImpl.timedFinishConnect(NioSocketImpl.java:542) ~[?:?]
at sun.nio.ch.NioSocketImpl.connect(NioSocketImpl.java:597) ~[?:?]
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:327) ~[?:?]
at java.net.Socket.connect(Socket.java:633) ~[?:?]
at org.postgresql.core.PGStream.createSocket(PGStream.java:238) ~[obmp-psql-consumer.jar:?]
at org.postgresql.core.PGStream.(PGStream.java:98) ~[obmp-psql-consumer.jar:?]
at org.postgresql.core.v3.ConnectionFactoryImpl.tryConnect(ConnectionFactoryImpl.java:100) ~[obmp-psql-consumer.jar:?]
at org.postgresql.core.v3.ConnectionFactoryImpl.openConnectionImpl(ConnectionFactoryImpl.java:215) ~[obmp-psql-consumer.jar:?]
... 8 more
2022-06-20 19:16:37 137 [main] ERROR org.openbmp.ConsumerApp - Failed to connect to db.  Check configuration and try again.
root@ubuntu:/var/openbmp/config#

@kmorales026 , Did you do an upgrade or fresh install?  The issue you describe above is consistent with the obmp-psql container not running.  Can you provide the docker logs obmp-psql output?

Hi @TimEvens !, thanks!,
I fixed some issue about the user who run docker container, but now the dashboard show many error about queries PostgreSQL.  I just configured my Router to use BMP Server, but  I dont know anything about SQL,


ETag, Last-Modified and Expires support

I use SimpleCachingHeadersPageCachingFilter which extends SimplePageCachingFilter
See http://ehcache.org/documentation/user-guide/web-caching#caching-headers

As I interpret @raymondBourges  response:

Under normal conditions resources are returned with various cache control headers such that the browser should not request the file again for a period of time (whatever Expires is set to).
If the browser does request a resource (presumably the expires time has elapsed?), instead of resending the content the browser already has with a 200 response, just send a 304 response without content, thus being more efficient.  I think this can occur when user force-refreshes a page or browser dev tools indicates to not cache files (which I think means cache but ignore the expires header).

If my understanding is not correct, please let me know. Thanks.

Accepting this change.  Great catch and good work!
I glanced at this a bit more and ran some tests.

With Firefox and Chrome, if you refresh the browser page the old way had a lot of HTTP 200s.  With this change, you get all or mostly all HTTP 304s which is more efficient.  I could find no downside in my testing.

The org.jasig.resourceserver.utils.filter.CacheExpirationFilter which is used in conjunction with AggregationAwarePageCachingFilter adds HTTP headers:

Expires: <ms time 1 year or configured value>
Cache-Control: <time 1 year or configured value>
For now I suggest leaving the CacheExpirationFilter filter despite the fact it overlaps in function with SimpleCachingHeadersPageCachingFilter/AggregationAwarePageCachingFilter.  CacheExpirationFilter runs after the AggregationAwarePageCachingFilter and updates the HTTP headers with its values.  This works adequately because CacheExpirationFilter defaults to a year and you can configure its time value.  The SimpleCachingHeadersPageCachingFilter uses configuration of the ehcache cache to determine the expires time (eternal = 1 year, else uses the TimeToLiveSeconds value).  It's reasonable to have a shorter TTL in the cache, but still return a long (1 year) value in the HTTP Headers.
NOTE:  By design, the AggregationAwarePageCachingFilter will not invoke SimpleCachingHeadersPageCachingFilter if aggregation is disabled.

On a side note, in the absense of SimpleCachingHeadersPageCachingFilter I'm not sure what is adding the ETag or Last-Modified HTTP Header, if it is Tomcat or what.  I don't see anything in the project that does that.  SimpleCachingHeadersPageCachingFilter adds them, though I'm not sure if they get overwritten by whatever was doing the ETag and Last-Modified previously.

https://issues.jasig.org/browse/RESSERV-85


Massive increase of file size when using version >= 1.12 with Gradle

I've been using version 1.11 and wanted to update it to 1.13 but noticed that the file size increases by 20 times with version higher than 1.11 when compiling with Gradle.
Compiled file size with version 1.11:

Compiled file size with version 1.12 or 1.13:

Also versions lower than 1.10 seem to be as big as the new one. It'd be great if that could be fixed.

I'm facing the same issue. Did you solve this?

Addressed in rewrite or no longer relevant.


Get the console log if the kdump test fails

We need to save the console log if the kdump test fails. In this commit, the get_console_log is added before throwing an exception.

is it enough to pull the serial console log when VM can't be connected?

is it enough to pull the serial console log when VM can't be connected?

Yes, as we identify the known issue, we can add more checks for the console log.


I tried to use profiling in rkt, described here: https://github.com/coreos/rkt/blob/e61deb2e08931a7bfc3e1ef397e875463803d7b7/Documentation/performance/README.md
After:
sudo /usr/bin/rkt --cpuprofile=/tmp/cpu.profile --memprofile=/tmp/mem.profile gc --grace-period=0
Content of /tmp/mem.profile is:
cat /tmp/mem.profile
heap profile: 0: 0 [0: 0] @ heap/1048576

# runtime.MemStats
# Alloc = 3072664
# TotalAlloc = 3072664
# Sys = 9740352
# Lookups = 22
# Mallocs = 26104
# Frees = 1049
# HeapAlloc = 3072664
# HeapSys = 4685824
# HeapIdle = 1007616
# HeapInuse = 3678208
# HeapReleased = 0
# HeapObjects = 25055
# Stack = 557056 / 557056
# MSpan = 40440 / 49152
# MCache = 9600 / 16384
# BuckHashSys = 3792
# NextGC = 4194304
# PauseNs = [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0]
# NumGC = 0
# EnableGC = true
# DebugGC = false

And the content of /tmp/cpu.profile is:
'
When I tried to measure rkt run, by:
sudo rkt --cpuprofile=/tmp/cpu.profile --memprofile=/tmp/mem.profile run --stage1-path=build-rkt-1.13.0+git/target/bin/stage1-coreos.aci --insecure-options=all --net=default-restricted docker://busybox --interactive
image: using image from file build-rkt-1.13.0+git/target/bin/stage1-coreos.aci
image: using image from local store for url docker://busybox
run: group "rkt" not found, will use default gid when rendering images
networking: loading networks from /etc/rkt/net.d
networking: loading network default-restricted with type ptp
stage1: warning: error setting journal ACLs, you'll need root to read the pod journal: group "rkt" not found
/ #
/ # echo "something"
something
/ #
/ #
/ #
/ #
/ #
/ #
/ # exit

/tmp/cpu.profile and /tmp/mem.profile are empty.
Without --interactivity:
sudo rkt --cpuprofile=/tmp/cpu.profile --memprofile=/tmp/mem.profile run --stage1-path=build-rkt-1.13.0+git/target/bin/stage1-coreos.aci --insecure-options=all --net=default-restricted docker://busybox
image: using image from file build-rkt-1.13.0+git/target/bin/stage1-coreos.aci
image: using image from local store for url docker://busybox
run: group "rkt" not found, will use default gid when rendering images
networking: loading networks from /etc/rkt/net.d
networking: loading network default-restricted with type ptp
stage1: warning: error setting journal ACLs, you'll need root to read the pod journal: group "rkt" not found
Profiling timer expired

And files from /tmp (cpu and mem) still are empty.

cc @lucab @yifan-gu

Assigning @yifan-gu who knows this part better. However, my naïve guess is that profiling is expected not to work together with run as it is intended to profile the execution of go-code.

Assigning @yifan-gu who knows this part better. However, my naïve guess is that profiling is expected not to work together with run as it is intended to profile the execution of go-code.

That's right, the profiling only profiles the go code part of rkt (the main use case is profiling the rkt api service). When rkt runs containers, the go code execution is short and run once only, so it doesn't record down any data points.

Thanks for confirming my thoughts. I guess we may have three (low-priority) actionable items out of this:

abort when profiling is used together with run (and maybe make it more explicit in the performance doc?)
check why the cpu profile is empty for gc (seen here too)

@mzylowski if you need to profile container execution, I guess you are better served by generic linux profilers.


#704 may have broken "weave as docker bridge" usage

We know some folks configure docker to use the weave bridge. With the change from #704 I foresee the following problems:

The user runs weave --local create-bridge with DOCKER_BRIDGE=weave, causing us to add a rule that DROPs traffic across the weave bridge.... followed by the normal rule to ACCEPT it. The former makes the latter non-functional. We could fix that by reversing the order, or suppressing the DROP rule when the docker bridge is the same as the weave bridge. The latter is cleaner.
In reality the user will probably run weave --local create-bridge w/o setting DOCKER_BRIDGE, since hitherto that wasn't a requirement. Nothing especially bad happens as a result. My testing indicates that it is ok to add filter rules for non-existing interfaces. So the only downside is that we end up with some useless rules. I can't think of a way of avoiding that, and it's probably not worth the hassle in any case.

I did think about this, and tested (2).  I didn't think anyone would run weave create-bridge with DOCKER_BRIDGE=weave, but I guess it's plausible.
Note that #704 introduces the requirement that if you run weave with DOCKER_BRIDGE set at the point where the weave bridge is created then you should also run weave reset with the same setting. Since DOCKER_BRIDGE is only mentioned in the weaveDNS docs I have commented there.


fix #1144, out of memory when trying to scale gearpump to 2000 task on a 2 core machine

[error] (gearpump-streaming/test:compile) Compilation failed

Current coverage is 66.08%

Merging #1145 into master will change coverage by +4.54% by 67a7338

Coverage Diff
@@            master   #1145   diff @@
======================================
  Files          225     220     -5
  Stmts         5687    5964   +277
  Branches       453     495    +42
  Methods          0       0
======================================
+ Hit           3500    3941   +441
  Partial          0       0
+ Missed        2187    2023   -164

Uncovered Suggestions

+0.39% via ...s/AkkaReporter.scala#101...123
+0.23% via ...ne/PipeLineDSL.scala#78...91
+0.23% via ...rt/QueryServer.scala#127...140
See 7 more...

Powered by Codecov

+1


Thanos Compactor Crashing - Download blocks timeout resulting in block overlap?

Thanos, Prometheus and Golang version used:
Thanos: v0.27.0
Prometheus: 2.25.2
Golang: go1.15.10
Here's my `docker-compose.yml` for good measure:

services:
  sidecar:
    image: thanosio/thanos:v0.27.0
    container_name: thanos-sidecar
    command:
      - "sidecar"
      - "--debug.name=sidecar"
      - "--grpc-address=<IP_ADDRESS>:10901"
      - "--http-address=<IP_ADDRESS>:10902"
      - "--prometheus.url=http://<IP_ADDRESS>:9090"
      - "--tsdb.path=/data/"
      - "--objstore.config-file=/bucket.yml"
      - "--shipper.upload-compacted"
    ports:
      - 10902:10902
    restart: always
    volumes:
      - /data:/data
      - ./azure_bucket_config.yml:/bucket.yml
    networks:
      - thanos

  store:
    image: thanosio/thanos:v0.27.0
    container_name: thanos-store
    restart: always
    command:
      - "store"
      - "--grpc-address=<IP_ADDRESS>:10905"
      - "--http-address=<IP_ADDRESS>:10906"
      - "--data-dir=/data/store"
      - "--objstore.config-file=/bucket.yml"
    ports:
      - 10906:10906
    volumes:
      - store:/data
      - ./azure_bucket_config.yml:/bucket.yml
    networks:
      - thanos

  query:
    image: thanosio/thanos:v0.27.0
    container_name: thanos-query
    command:
      - "query"
      - "--grpc-address=<IP_ADDRESS>:10903"
      - "--http-address=<IP_ADDRESS>:10904"
      - "--query.replica-label=prometheus"
      - "--store=thanos-store:10905"
      - "--query.auto-downsampling"
    ports:
      - 10904:10904
    depends_on:
      - sidecar
      - store
    networks:
      - thanos
    restart: always

  compactor:
    image: thanosio/thanos:v0.27.0
    container_name: thanos-compactor
    command:
      - "compact"
      - "--wait"
      - "--data-dir=/tmp/thanos-compact"
      - "--objstore.config-file=/bucket.yml"
      - "--http-address=<IP_ADDRESS>:10907"
      - "--retention.resolution-raw=182d"
      - "--retention.resolution-5m=1y"
      - "--retention.resolution-1h=2y"
    ports:
      - 10907:10907
    volumes:
      - compact:/tmp
      - ./azure_bucket_config.yml:/bucket.yml
      - ./fs_backup_config.yml:/backup.yml
    depends_on:
      - sidecar
      - store
    networks:
      - thanos
    restart: always

networks:
  thanos: {}
volumes:
  store: {}
  compact: {}

Object Storage Provider:
Azure Blob Storage
Bucket config

type: AZURE
config:
  storage_account: "xxxx"
  storage_account_key: "xxxx"
  container: "prometheus4"
  endpoint: ""
  max_retries: 0
  msi_resource: ""
  user_assigned_id: ""
  pipeline_config:
    max_tries: 0
    try_timeout: 0s
    retry_delay: 0s
    max_retry_delay: 0s
  reader_config:
    max_retry_requests: 0
  http_config:
    idle_conn_timeout: 0s
    response_header_timeout: 0s
    insecure_skip_verify: false
    tls_handshake_timeout: 0s
    expect_continue_timeout: 0s
    max_idle_conns: 0
    max_idle_conns_per_host: 0
    max_conns_per_host: 0
    tls_config:
      ca_file: ""
      cert_file: ""
      key_file: ""
      server_name: ""
      insecure_skip_verify: false
    disable_compression: false
prefix: "prometheus4"

What happened:
Thanos Compactor is crashing seemingly regularly after running for some period of time, timing out and then later experiences overlaps in the object store, seemingly due to the crash from before.
What you expected to happen:
If a download times out, Thanos should probably retry the download rather than shutting down.
How to reproduce it (as minimally and precisely as possible):
Not entirely sure... I just know that it looks like Thanos is trying to download blocks, it times out, then crashes rather than attempting to download the block again.
Full logs to relevant components:
Initial Crash and Reboot - 2022-07-19 5:03 UTC

level=info ts=2022-07-19T05:00:57.370656812Z caller=fetcher.go:470 component=block.BaseFetcher msg="successfully synchronized block metadata" duration=339.294198ms duration_ms=339 cached=91 returned=91 partial=0
level=info ts=2022-07-19T05:01:57.342172313Z caller=fetcher.go:470 component=block.BaseFetcher msg="successfully synchronized block metadata" duration=311.118213ms duration_ms=311 cached=91 returned=91 partial=0
level=info ts=2022-07-19T05:02:57.354952621Z caller=fetcher.go:470 component=block.BaseFetcher msg="successfully synchronized block metadata" duration=323.230806ms duration_ms=323 cached=91 returned=91 partial=0
level=warn ts=2022-07-19T05:03:14.1241479Z caller=objstore.go:289 msg="failed to remove file on partial dir download error" file=/tmp/thanos-compact/downsample/01G29KQFEVC2QW98275P3EHWD9 err="remove /tmp/thanos-compact/downsample/01G29KQFEVC2QW98275P3EHWD9: directory not empty"
level=warn ts=2022-07-19T05:03:14.253037996Z caller=intrumentation.go:67 msg="changing probe status" status=not-ready reason="error executing compaction: first pass of downsampling failed: downsampling to 5 min: download block 01G29KQFEVC2QW98275P3EHWD9: get file 01G29KQFEVC2QW98275P3EHWD9/chunks/000132: cannot download blob, address: https://prometheuseast.blob.core.windows.net/prometheus4/prometheus4/01G29KQFEVC2QW98275P3EHWD9/chunks/000132: context deadline exceeded"
level=info ts=2022-07-19T05:03:14.267923621Z caller=http.go:84 service=http/server component=compact msg="internal server is shutting down" err="error executing compaction: first pass of downsampling failed: downsampling to 5 min: download block 01G29KQFEVC2QW98275P3EHWD9: get file 01G29KQFEVC2QW98275P3EHWD9/chunks/000132: cannot download blob, address: https://prometheuseast.blob.core.windows.net/prometheus4/prometheus4/01G29KQFEVC2QW98275P3EHWD9/chunks/000132: context deadline exceeded"
level=info ts=2022-07-19T05:03:14.278933395Z caller=http.go:103 service=http/server component=compact msg="internal server is shutdown gracefully" err="error executing compaction: first pass of downsampling failed: downsampling to 5 min: download block 01G29KQFEVC2QW98275P3EHWD9: get file 01G29KQFEVC2QW98275P3EHWD9/chunks/000132: cannot download blob, address: https://prometheuseast.blob.core.windows.net/prometheus4/prometheus4/01G29KQFEVC2QW98275P3EHWD9/chunks/000132: context deadline exceeded"
level=info ts=2022-07-19T05:03:14.279031558Z caller=intrumentation.go:81 msg="changing probe status" status=not-healthy reason="error executing compaction: first pass of downsampling failed: downsampling to 5 min: download block 01G29KQFEVC2QW98275P3EHWD9: get file 01G29KQFEVC2QW98275P3EHWD9/chunks/000132: cannot download blob, address: https://prometheuseast.blob.core.windows.net/prometheus4/prometheus4/01G29KQFEVC2QW98275P3EHWD9/chunks/000132: context deadline exceeded"
level=error ts=2022-07-19T05:03:14.321547079Z caller=main.go:158 err="downsampling to 5 min: download block 01G29KQFEVC2QW98275P3EHWD9: get file 01G29KQFEVC2QW98275P3EHWD9/chunks/000132: cannot download blob, address: https://prometheuseast.blob.core.windows.net/prometheus4/prometheus4/01G29KQFEVC2QW98275P3EHWD9/chunks/000132: context deadline exceeded\nfirst pass of downsampling failed\nmain.runCompact.func7\n\t/app/cmd/thanos/compact.go:440\nmain.runCompact.func8.1\n\t/app/cmd/thanos/compact.go:476\ngithub.com/thanos-io/thanos/pkg/runutil.Repeat\n\t/app/pkg/runutil/runutil.go:75\nmain.runCompact.func8\n\t/app/cmd/thanos/compact.go:475\ngithub.com/oklog/run.(*Group).Run.func1\n\t/go/pkg/mod/github.com/oklog/run@v1.1.0/group.go:38\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1581\nerror executing compaction\nmain.runCompact.func8.1\n\t/app/cmd/thanos/compact.go:503\ngithub.com/thanos-io/thanos/pkg/runutil.Repeat\n\t/app/pkg/runutil/runutil.go:75\nmain.runCompact.func8\n\t/app/cmd/thanos/compact.go:475\ngithub.com/oklog/run.(*Group).Run.func1\n\t/go/pkg/mod/github.com/oklog/run@v1.1.0/group.go:38\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1581\ncompact command failed\nmain.main\n\t/app/cmd/thanos/main.go:158\nruntime.main\n\t/usr/local/go/src/runtime/proc.go:255\nruntime.goexit\n\t/usr/local/go/src/runtime/asm_amd64.s:1581"
level=info ts=2022-07-19T05:03:28.2214006Z caller=factory.go:50 msg="loading bucket configuration"
level=info ts=2022-07-19T05:03:28.61335506Z caller=compact.go:387 msg="retention policy of raw samples is enabled" duration=4368h0m0s
level=info ts=2022-07-19T05:03:28.613473154Z caller=compact.go:394 msg="retention policy of 5 min aggregated samples is enabled" duration=8760h0m0s
level=info ts=2022-07-19T05:03:28.61350257Z caller=compact.go:397 msg="retention policy of 1 hour aggregated samples is enabled" duration=17520h0m0s
level=info ts=2022-07-19T05:03:28.615536041Z caller=compact.go:615 msg="starting compact node"
level=info ts=2022-07-19T05:03:28.615580162Z caller=intrumentation.go:56 msg="changing probe status" status=ready
level=info ts=2022-07-19T05:03:28.616391532Z caller=intrumentation.go:75 msg="changing probe status" status=healthy
level=info ts=2022-07-19T05:03:28.616423401Z caller=http.go:73 service=http/server component=compact msg="listening for requests and metrics" address=<IP_ADDRESS>:10907
level=info ts=2022-07-19T05:03:28.6176218Z caller=tls_config.go:195 service=http/server component=compact msg="TLS is disabled."  I have done that twice before, but each time this crash occurs and then overlapped blocks seem to arise afterwards.
Here's the meta.json for the first two overlapped blocks. It looks like the sidecar uploaded the conflicting block, but there's no errors in the sidecar.
Block `01G8ADQB9EACGF27TJX4426ZZD` `meta.json`

{
	"ulid": "01G8ADQB9EACGF27TJX4426ZZD",
	"minTime":<PHONE_NUMBER>000,
	"maxTime":<PHONE_NUMBER>000,
	"stats": {
		"numSamples":<PHONE_NUMBER>,
		"numSeries": 352368,
		"numChunks": 47768530
	},
	"compaction": {
		"level": 3,
		"sources": [
			"01G851JCXS09NZT8CPCY5AHY5B",
			"01G863X15QW488C5R7Z4BZ152W",
			"01G86ARRE2FAR3ZY97RSKSXG60",
			"01G86HMFNR3PX5X5X8MYTPMAMZ",
			"01G86RG6XVDGGET9FAR7X13M5A",
			"01G86ZBY5SCB4YP4D1RYEA76SR",
			"01G8767NDRGX33QYWSJYNMT5P6",
			"01G87D3CP3SW9PTWB80YT8WJTP",
			"01G87KZ3XR8ECMDMBYW71YP0C4",
			"01G87TTV6768PW4DWFPBAE4S4E",
			"01G881PJDRY8374W44YRTM52Q1",
			"01G885KERJY442EJ36G10EFFVB",
			"01G885N9ADNV6WZD1RWBDDJHWC",
			"01G885Q88ZB70TMRWFRBG7CYK3",
			"01G885S39FNMZ1VCA6PJ3KS4HW",
			"01G888J9P20F42QWWM11STJEZK",
			"01G88FE0Y2D9GEG8SF20TG8R3N",
			"01G88P9R5RXFJMR7PJZ5J092ZA",
			"01G88X5FDSAWJYRD2X1YVY5WGC",
			"01G89416NR1A53R1Q6PGPWZ0FX",
			"01G89AWXZA7C1H41AGY8P93ZYD",
			"01G89HRN62EJASHRBRKEW11AV9",
			"01G89RMCE95MB5D7F97RZ1BEDN",
			"01G89ZG3NDE8WDBJSZEC3ADMPV"
		],
		"parents": [
			{
				"ulid": "01G898BMCA4N2KPDBQPYBATGGE",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			},
			{
				"ulid": "01G898J50T0KVQPMADAQ8H8RX1",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			},
			{
				"ulid": "01G8995AK55QDGX98Q00J7X3R1",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			},
			{
				"ulid": "01G899SJMW46VRKGVM5806QY94",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			},
			{
				"ulid": "01G89DA51XWY21PPSA0KRJMBVF",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			},
			{
				"ulid": "01G8ADEYQKW5QWMBD9NDHZEJNR",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			}
		]
	},
	"version": 1,
	"thanos": {
		"labels": {
			"id": "prometheus4"
		},
		"downsample": {
			"resolution": 0
		},
		"source": "compactor",
		"segment_files": [
			"000001",
			"000002",
			"000003",
			"000004",
			"000005",
			"000006",
			"000007",
			"000008",
			"000009",
			"000010",
			"000011",
			"000012",
			"000013",
			"000014",
			"000015",
			"000016",
			"000017",
			"000018",
			"000019",
			"000020"
		],
		"files": [
			{
				"rel_path": "chunks/000001",
				"size_bytes": 536870753
			},
			{
				"rel_path": "chunks/000002",
				"size_bytes": 536869730
			},
			{
				"rel_path": "chunks/000003",
				"size_bytes": 536869544
			},
			{
				"rel_path": "chunks/000004",
				"size_bytes": 536869478
			},
			{
				"rel_path": "chunks/000005",
				"size_bytes": 536870664
			},
			{
				"rel_path": "chunks/000006",
				"size_bytes": 536870217
			},
			{
				"rel_path": "chunks/000007",
				"size_bytes": 536870435
			},
			{
				"rel_path": "chunks/000008",
				"size_bytes": 536870734
			},
			{
				"rel_path": "chunks/000009",
				"size_bytes": 536870209
			},
			{
				"rel_path": "chunks/000010",
				"size_bytes": 536870805
			},
			{
				"rel_path": "chunks/000011",
				"size_bytes": 536870086
			},
			{
				"rel_path": "chunks/000012",
				"size_bytes": 536870358
			},
			{
				"rel_path": "chunks/000013",
				"size_bytes": 536869918
			},
			{
				"rel_path": "chunks/000014",
				"size_bytes": 536869493
			},
			{
				"rel_path": "chunks/000015",
				"size_bytes": 536870520
			},
			{
				"rel_path": "chunks/000016",
				"size_bytes": 536870318
			},
			{
				"rel_path": "chunks/000017",
				"size_bytes": 536870035
			},
			{
				"rel_path": "chunks/000018",
				"size_bytes": 536869542
			},
			{
				"rel_path": "chunks/000019",
				"size_bytes": 536870567
			},
			{
				"rel_path": "chunks/000020",
				"size_bytes": 255732013
			},
			{
				"rel_path": "index",
				"size_bytes": 367206459
			},
			{
				"rel_path": "meta.json"
			}
		]
	}
}

Block `01G8AQQ7FFAVMBYHD7EEBDYH79` `meta.json`

{
	"ulid": "01G8AQQ7FFAVMBYHD7EEBDYH79",
	"minTime":<PHONE_NUMBER>000,
	"maxTime":<PHONE_NUMBER>000,
	"stats": {
		"numSamples": 167502131,
		"numSeries": 174658,
		"numChunks": 1413697
	},
	"compaction": {
		"level": 1,
		"sources": [
			"01G8AQQ7FFAVMBYHD7EEBDYH79"
		],
		"parents": [
			{
				"ulid": "01G881PJDRY8374W44YRTM52Q1",
				"minTime":<PHONE_NUMBER>000,
				"maxTime":<PHONE_NUMBER>000
			}
		]
	},
	"version": 1,
	"thanos": {
		"labels": {
			"id": "prometheus4"
		},
		"downsample": {
			"resolution": 0
		},
		"source": "sidecar",
		"segment_files": [
			"000001"
		],
		"files": [
			{
				"rel_path": "chunks/000001",
				"size_bytes": 367378075
			},
			{
				"rel_path": "index",
				"size_bytes": 25854440
			},
			{
				"rel_path": "meta.json"
			}
		]
	}
}

It may also be worth mentioning that it looks like the block each conflict occurs in, 01G8ADQB9EACGF27TJX4426ZZD, was uploaded before the blocks uploaded by the sidecar. So maybe the sidecar is the root of the issue? Could it be because of the --shipper.upload-compacted flag? I had this flag enabled to migrate from historical Prometheus TSDB, but it should be done now. Would this be causing this kind of behaviour?
Block 01G8ADQB9EACGF27TJX4426ZZD, uploaded 2022-07-18

Block 01G8AQQ7FFAVMBYHD7EEBDYH79, uploaded 2022-07-19

Edit: Tried re-creating the sidecar without --shipper.upload-compacted and manually resolved the conflict in the object store. Left overnight and found that there was no timeout, however compaction was still halted because of overlapped blocks, so I can rule this out.
Most resources I've found state that duplicated blocks in the object storage only occur from a misconfiguration, however in my eyes my setup is very straightforward. There is only 1 Prometheus we are pulling TSDB data from, and it has an external label configured but since there's only one there shouldn't be any issue with external labels causing duplicate metrics. We previously had issues with CPU and RAM resources but have since added more of each, and the problem persists.
I'm having trouble finding the misconfiguration in my setup, if any.

I have a similar problem. Mark it and look forward to solving it

I have the same issue. Did you guys find any solutions to this?


Add a message saying "this file is autogenerated" on top of the autogenarated yml files

Fixes #4

works perfect! thanks again @wilburhimself ❤  you're amazing!


Add controller scaffold

Description
This PR introduces a controller scaffold with the definition of the Rule resource, which will be used by the controller to generate the ConfigMap for OathKeeper. The definition can be found in api/v1alpha1/rule_types.go file.
CRD is generated based on the previously mentioned file with a resource definition and can be found in config/crd/bases/oathkeeper.ory.sh_rules.yaml. It is generated every time the make install or make manifests is run.
The code of the controller itself can be found in controllers/rule_controller.go. However, the logic for processing rules is not yet implemented and will be introduced in another PR/PRs.
Related issue(s)
#1, #2

 Thank you for your submission, we really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Awesome! LMK as soon as you want me to 👀

@aeneasr the PR is ready for your review

@aeneasr  About review scope: Please look at the generated CRD definition at config/crd/bases/oathkeeper.ory.sh_rules.yaml and typed Golang objects written by us: api/v1alpha1/rule_types.go. You can also apply the CRD to the cluster/minikube and then create a sample rule from file: config/samples/oathkeeper_v1alpha1_rule.yaml.
This summarizes the purpose of this PR: create CRD API for the controller.
The rest of files, controller included, are only kubebuilder-generated stubs.
We'll refine those in next iterations (next PRs).

@aeneasr

Does it make sense / is it possible to run this against a live Kubernetes for e2e tests? Or achieve e2e tests in some other way? I'd love to see that! We can provide a Kubernetes Test Cluster for that in the CI, if you want.

Yes, that is possible and it makes sense. The tests we are currently preparing are meant to be run on a live Kubernetes to validate e2e path - "user" creates/updates/deletes Rule CR, the controller handles the event, what results in the update of ConfigMap. The ConfigMap is then validated. Are you able to set-up the CI so it is provisioning a test cluster (for example with kind) and then runs tests simply using go test or ginkgo?

Also, how would releasing this look like - push to Docker Hub? Do we need to tag the controller code base with the git tag or just the Docker Image?

From our perspective, the only important result of releasing the controller would be an image pushed to Docker Hub or some other public repository. If the CI requires creating a git tag to trigger the release process we can do that. If that is not necessary for the CI, we don't need that.

From our perspective, the only important result of releasing the controller would be an image pushed to Docker Hub or some other public repository. If the CI requires creating a git tag to trigger the release process we can do that. If that is not necessary for the CI, we don't need that.

Ok, let's do it that way then. I created an official repo already at: https://cloud.docker.com/u/oryd/repository/registry-1.docker.io/oryd/oathkeeper-k8s-controller
I can set the Docker Login etc.

Yes, that is possible and it makes sense. The tests we are currently preparing are meant to be run on a live Kubernetes to validate e2e path - "user" creates/updates/deletes Rule CR, the controller handles the event, what results in the update of ConfigMap. The ConfigMap is then validated. Are you able to set-up the CI so it is provisioning a test cluster (for example with kind) and then runs tests simply using go test or ginkgo?

PM and I discussed yesterday that https://github.com/kubernetes-sigs/kind is probably better/easier/faster?

By the way, do you want this to be merged in master now, or will you simply create sub-branches with sub-PRs against this PR here?
I'm also not entirely sure if you can modify the circleci config from a fork. If it doesn't work I'm happy to give you write rights to this repo.

Are you able to set-up the CI so it is provisioning a test cluster (for example with kind) and then runs tests simply using go test or ginkgo?

go test is already being executed, see: https://github.com/ory/oathkeeper-k8s-controller/blob/master/.circleci/config.yml#L14

I just saw that I had to enable "Build Pull Requests from Forks", if you push against this branch the CI will be triggered with go test -v ./....
The CI is now fully configurable by you. The only thing that won't work is that you will not be able to see any secrets set - this however should not be a problem as we don't really need any secrets when using https://github.com/kubernetes-sigs/kind for Kubernetes.

Great :) Thank you a lot for the whole setup.

By the way, do you want this to be merged in master now, or will you simply create sub-branches with sub-PRs against this PR here?

If you have nothing against that, we prefer merging this PR to master and providing next PRs with the implementation of "business logic" in the controller and with tests.

Perfect, this looks good - thank you!


[Hub Generated] Review request for Microsoft.Security to add version preview/2022-11-20-preview

This is a PR generated at OpenAPI Hub. You can view your work branch via this link.
ARM API Information (Control Plane)
Azure 1st Party Service can try out the Shift Left experience to initiate API design review from ADO code repo.  If you are interested, may request engineering support by filling in with the form https://aka.ms/ShiftLeftSupportForm.
Changelog
Add a changelog entry for this PR by answering the following questions:

What's the purpose of the update?

[ ] new service onboarding
[ ] new API version
[ ] update existing version for new feature
[X] update existing version to fix swagger quality issue in s360
[ ] Other, please clarify

When are you targeting to deploy the new service/feature to public regions? April 23, 2023
When do you expect to publish the swagger? ASAP
By default, Azure SDKs of all languages (.NET/Python/Java/JavaScript for both management-plane SDK and data-plane SDK, Go for management-plane SDK only ) MUST be refreshed with/after swagger of new version is published. If you prefer NOT to refresh any specific SDK language upon swagger updates in the current PR, please leave details with justification here.

Contribution checklist (MS Employees Only):

[X] I commit to follow the Breaking Change Policy of "no breaking changes"
[X] I have reviewed the documentation for the workflow.
[X] Validation tools were run on swagger spec(s) and errors have all been fixed in this PR. How to fix?

If any further question about AME onboarding or validation tools, please view the FAQ.
ARM API Review Checklist

Applicability: :warning:
If your changes encompass only the following scenarios, you should SKIP this section, as these scenarios do not require ARM review.

Change to data plane APIs
Adding new properties
All removals

Otherwise your PR may be subject to ARM review requirements. Complete the following:

[ ] Check this box if any of the following apply to the PR so that the label "ARMReview" and "WaitForARMFeedback" will be added by bot to kick off ARM API Review.  Missing to check this box in the following scenario may result in delays to the ARM manifest review and deployment.

Adding a new service
Adding new API(s)
Adding a new API version

[X] To review changes efficiently, ensure you copy the existing version into the new directory structure for first commit and then push new changes, including version updates, in separate commits. You can use OpenAPIHub to initialize the PR for adding a new version. For more details refer to the wiki.

[X] Ensure you've reviewed following guidelines including ARM resource provider contract and REST guidelines. Estimated time (4 hours). This is required before you can request review from ARM API Review board.

[ ] If you are blocked on ARM review and want to get the PR merged with urgency, please get the ARM oncall for reviews (RP Manifest Approvers team under Azure Resource Manager service) from IcM and reach out to them.

Breaking Change Review Checklist
If you have any breaking changes as defined in the Breaking Change Policy, request approval from the Breaking Change Review Board.
Action: to initiate an evaluation of the breaking change, create a new intake using the template for breaking changes. Additional details on the process and office hours are on the Breaking Change Wiki.
NOTE: To update API(s) in public preview for over 1 year (refer to Retirement of Previews)
Please follow the link to find more details on PR review process.

2. The implementation of these APIs already treats displayName as readOnly = true, and that has always been by design. So this Swagger update is purely for completeness, because it was missed when the Swagger was originally authored.

Thanks @aditdalvi . But this is a kind of breaking change even there is no traffic for this. Please acquire the breaking change approval following the steps in comment https://github.com/Azure/azure-rest-api-specs/pull/22969#issuecomment-1460633050. Thanks


feat/add gitignore

add gitignore file

i meant to only exclude my .json files for building images but it's going to affect the manifest as well. i'm going to need to change this


[Question][Help] Need help with installation

Question ❓
Hello, I am trying to install/use sinergym and am having a bit of difficulty. I tried using docker but I only have ~15GB and I kept getting "no free space left", so I decided to try manual installation following this "https://github.com/ugr-sail/sinergym/blob/main/INSTALL.md" and this "https://alejandrocn7.github.io/sinergym/compilation/html/pages/installation.html" documentation.
I have done the following steps:
$ git clone https://github.com/jajimer/sinergym.git
$ cd sinergym
$ virtualenv env_sinergym --python=python3.10
$ source env_sinergym/bin/activate
$ pip install -e .[extras]

installed EnergyPlus 23.2.0
copied bcvtb from "https://github.com/zhangzhizza/Gym-Eplus/tree/master/eplus_env/envs"

$ export EPLUS_PATH=/home/neto/Desktop/sin/Energyplus-23-2-0
$ export BCVTB_PATH=/home/neto/Desktop/sin/bcvtb
$ pip install -e .
(
this is my dir setup:
Desktop/sin
sinergym/
Energyplus-23-2-0/
bcvtb/
)
When trying to run "pytest tests/ -vv" I get the following error:
ImportError while loading conftest '/home/neto/Desktop/sin/sinergym/tests/conftest.py'.
tests/conftest.py:12: in
from sinergym.envs.eplus_env import EplusEnv
sinergym/envs/init.py:3: in
from .eplus_env import EplusEnv
sinergym/envs/eplus_env.py:12: in
from sinergym.simulators import EnergyPlus
sinergym/simulators/init.py:3: in
from .eplus import EnergyPlus
sinergym/simulators/eplus.py:10: in
from pyenergyplus.api import EnergyPlusAPI
E   ModuleNotFoundError: No module named 'pyenergyplus'
Additional context
I am on ubuntu 22.04
I don' have much python experience
I copied the bcvtb file from the repo because I was unable to understand how to install
Thanks in advance

Hello @Lorenzo69420!
The documentation about manual installation needs to be updated, I apologize. Sinergym since version 3.0.0 does not use BCVTB in its backend. Instead, it makes use of EnegyPlus Python API.
So, you should skip the BCVTB part and create the following environment variable in your operating system:
PYTHONPATH="/usr/local/EnergyPlus-23-1-0"
Note that the EnergyPlus installation path is specified, if your path is different then put yours of course. With this your interpreter should have access to that library.
I will update the documentation as soon as possible, sorry for the inconvenience again.
Regards.


Redirect after payment not to checkout/finish, but to startpage instead

Describe the bug
This problem occurs only on shops, that have another domain configured in saleschannel.
For example, the configured domain in saleschannel ist not example.com, but example.com/en.
To Reproduce
Steps to reproduce the behavior:

Log in to administration backend, and go to saleschannels
Scroll down to domains and change your existing domain to example.com/en.
Save the settings and visit the frontend. Check if address is example.com/en.
Buy a item and finish the checkout.
When example.com/adyen/redirect-result will be called, the shop is redirecting to example.com/en.

Expected behavior
On 5. it should redirect to example.com/en/adyen/redirect-result and than correctly to checkout/finish page.
Desktop (please complete the following information):

OS: Manjaro
Browser: Chrome, Firefox
Latest Versions

Additional context
Add any other context about the problem here.

Hi @wolv-dev, thanks for opening this issue.
Sounds a lot like #136 which is already being fixed by #137. Could you check if this solves it for you as well?
Ángel

@acampos1916 Yes, this solves the problem. When will be the update available in showpare store?

@wolv-dev awesome. I'll close the issue now that the PR is merged.
The next release is scheduled in about 1-2 weeks, it will also be available in the Shopware store.

I updated to version 1.6.0 and debugged the $adyenReturnUrl:
https://example.com/adyen/redirect-result?_csrf_token=x0KKgV_WhH2DC_00whGZi7VfT2FzeKNIUXSAiddvgXk
But it should be https://example.com/en/adyen/redirect-result
I don't know, why it worked when I changed it manually in code, but now it doesn't.
I deleted/cleared cache, rebuilt theme, regenerated SEO URLs.


是否支持自定义路由，文档没看到

Is your feature request related to a problem? Please describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
Describe the solution you'd like
A clear and concise description of what you want to happen.
Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.
Additional context
Add any other context or screenshots about the feature request here.

https://go-chassis.readthedocs.io/en/latest/user-guides/router.html 这个是否能帮上忙

https://github.com/go-chassis/go-chassis/blob/master/examples/router/servicecomb/client/conf/router.yaml
这个例子
如果觉得我们文档需要优化 请指出，或者欢迎帮我们完善文档


Angular http post json content-length : 0

Note: for support questions, please use one of these channels: https://github.com/angular/angular.js/blob/master/CONTRIBUTING.md#question. This repository's issues are reserved for feature requests and bug reports.
Do you want to request a feature or report a bug?
Bug
What is the current behavior?
When doing http post json data content length randomly is set to zero. The json is still present in request body.
If the current behavior is a bug, please provide the steps to reproduce and if possible a minimal demo of the problem via https://plnkr.co or similar (template: http://plnkr.co/edit/tpl:yBpEi4).
Random behavior. On subsequent request it works
What is the expected behavior?
Content length should be greater than 0 if post body has data.
What is the motivation / use case for changing the behavior?
Which versions of Angular, and which browser / OS are affected by this issue? Did this work in previous versions of Angular? Please also test with the latest stable and snapshot (https://code.angularjs.org/snapshot/) versions.
Other information (e.g. stacktraces, related issues, suggestions how to fix)

Angular doesn't set content length. It's probably some browser or server-config issue.
We can't do much without a reproduction, though.
Closing as this is not actionable. Feel free to reopen if you can provide a reproduction (even a random one) and also more details on the platforms/browsers/versions this issue affects.


Transitions on Simple Image Carousel

Started from your example and trying to understand what would be the best approach to add animations on slide change. May you tell is it better to update component by adding css or should I use additional module ?

I definitely would like to add simple animations to that example in the near future!
I may pull them from this example post from @FoundersFactory. They even have a repo i just found : FoundersFactory/react-css-carousel
Hope this helps, also please post if you get it working with the codesandbox.io 😸


Add support to angular 1.4

+1

+1

+1
That would be really great.

+1

+1

yes, please !

I think this project was DEAD... 7 months without merge/commits :disappointed:

+1

+1


JB-510 - Pay modal: match top-bottom padding on message card

What does this PR do and why?
Closes JB-510
Screenshots or screen recordings
If applicable, provide screenshots or screen recordings to demonstrate the changes.
Acceptance checklist

[ ] I have evaluated the Approval Guidelines for this PR.
[ ] (if relevant) I have tested this PR in all supported browsers.
[ ] (if relevant) I have tested this PR in dark mode and light mode (if applicable).

Current dependencies on/for this PR:

main

PR #3821   👈

This comment was auto-generated by Graphite.

@wraeth-eth started a stack merge that includes this pull request via Graphite.

@wraeth-eth merged this pull request with Graphite.


Read 'namespace' file content

Codecov Report

Merging #21 into master will decrease coverage by 1.06%.
The diff coverage is 41.17%.

@@            Coverage Diff             @@
##           master      #21      +/-   ##
==========================================
- Coverage   75.61%   74.55%   -1.07%
==========================================
  Files           9       10       +1
  Lines         324      334      +10
  Branches       23       18       -5
==========================================
+ Hits          245      249       +4
- Misses         65       72       +7
+ Partials       14       13       -1

Impacted Files
Coverage Δ

...o/stups/tokens/FixedTokenAccessTokenRefresher.java
81.81% <ø> (ø)
:arrow_up:

.../stups/tokens/config/SecretsAutoConfiguration.java
0% <0%> (ø)

...kens/config/AccessTokensBeanAutoConfiguration.java
75% <100%> (+11.66%)
:arrow_up:

...ava/org/zalando/stups/tokens/AccessTokensBean.java
77.5% <50%> (-0.66%)
:arrow_down:

...tups/tokens/config/AccessTokensBeanProperties.java
74.73% <71.42%> (-0.82%)
:arrow_down:

...okens/config/MetricsListenerAutoConfiguration.java
85.71% <0%> (-0.96%)
:arrow_down:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update b11db10...6d36190. Read the comment docs.

@jbellmann it would be awesome if we could get some PR/issue description and context to understand what's going on.

This PR has to go into 'v011' first.

@hjacobs releases updated


options in plugin, provided by module via lodash template syntax, are empty

Version
v2.11.0
Reproduction link
https://gitlab.com/DRogueRonin/nuxt-bug-report
Steps to reproduce
npm run build
What is expected ?
options.bug is replaced with the string "bug!"
What is actually happening?
Build fails with a syntax error, because options.bug is replaced with nothing
Additional comments?
Relevant files are

"nuxt.config.js"
"modules/bug.js"
"plugins/bug.js"

This bug report is available on Nuxt community (#c10259)

I tested it with nuxt-edge v2.12.0-26390896.1936de69.
The steps are the same as before.
This is the tag: https://gitlab.com/DRogueRonin/nuxt-bug-report/-/tree/nuxt-edge-v2.12.0-26390896.1936de69

I tested it with nuxt-edge v2.13.0-26438413.c02ded2d.
The steps are the same as before.
This is the tag: https://gitlab.com/DRogueRonin/nuxt-bug-report/-/tree/nuxt-edge-v2.13.0-26438413.c02ded2d


Doc-on-hover for qualified names

Sample code: https://code.world/#POLxLpdJ2WOu7lOY2S5CCRg
Note there is no doc-on-hover for Extras.Widget.guiDrawingOf.  The documentation does exist, and you can read it either in the autocomplete list, or by removing qualified from the import so that guiDrawingOf is also in scope unqualified.  However, doc-on-hover just looks at single tokens, and doesn't scan backward for module qualifiers, so anything that's imported qualified doesn't work.

The code for translating from a single token to a qualified name already exists in codeworld_shared.js.  It's just a matter of extracting it to be reusable, and then applying it to the hover case, as well.


Encountered error, can't continue - System.Exception: File MegaDownloader+State

Last night I was downloading Elysium Remastered from using wabbajack and there is the full log I got from the instalation
0.3 - Wabbajack Build - 9d251cda832b7478c9480345ee829f46e02df999
0.3 - Running in D:\Downloads\<IP_ADDRESS>
0.36 - Detected Windows Version: 10.0.19042.0
0.36 - System settings - (31.9GB RAM) (4.8GB Page), Display: 1920 x 1080 (7.9GB VRAM - VideoMemorySizeMb=10240)
0.36 - Pagefile below recommended! Consider increasing to 20000MB. A suboptimal pagefile can cause crashes and poor in-game performance.
0.37 - Getting new Wabbajack version list
0.43 - Steam: Found no Regex matches in Steam Config at d:/programs/steam\config\config.vdf
0.44 - Steam: Found game Rogue Legacy 2 (1253920) at "D:\Programs\Steam\steamapps\common\Rogue Legacy 2"
0.44 - Steam: Found game Goose Goose Duck (1568590) at "D:\Programs\Steam\steamapps\common\Goose Goose Duck"
0.44 - Steam: Found game Lost Ark (1599340) at "D:\Programs\Steam\steamapps\common\Lost Ark"
0.44 - Steam: Found game Steamworks Common Redistributables (228980) at "D:\Programs\Steam\steamapps\common\Steamworks Shared"
0.44 - Steam: Found game Unturned (304930) at "D:\Programs\Steam\steamapps\common\Unturned"
0.44 - Steam: Found game Geometry Dash (322170) at "D:\Programs\Steam\steamapps\common\Geometry Dash"
0.44 - Steam: Found game Wallpaper Engine (431960) at "D:\Programs\Steam\steamapps\common\wallpaper_engine"
0.44 - Steam: Found game The Elder Scrolls V: Skyrim Special Edition (489830) at "D:\Programs\Steam\steamapps\common\Skyrim Special Edition"
0.44 - Steam: Found game Counter-Strike: Global Offensive (730) at "D:\Programs\Steam\steamapps\common\Counter-Strike Global Offensive"
0.44 - Steam: Found game Among Us (945360) at "D:\Programs\Steam\steamapps\common\Among Us"
0.44 - Steam: Found game Rogue Legacy 2 (1253920) at "d:/programs/steam\steamapps\common\Rogue Legacy 2"
0.44 - Steam: Found game Goose Goose Duck (1568590) at "d:/programs/steam\steamapps\common\Goose Goose Duck"
0.44 - Steam: Found game Lost Ark (1599340) at "d:/programs/steam\steamapps\common\Lost Ark"
0.45 - Steam: Found game Steamworks Common Redistributables (228980) at "d:/programs/steam\steamapps\common\Steamworks Shared"
0.45 - Steam: Found game Unturned (304930) at "d:/programs/steam\steamapps\common\Unturned"
0.45 - Steam: Found game Geometry Dash (322170) at "d:/programs/steam\steamapps\common\Geometry Dash"
0.45 - Steam: Found game Wallpaper Engine (431960) at "d:/programs/steam\steamapps\common\wallpaper_engine"
0.45 - Steam: Found game The Elder Scrolls V: Skyrim Special Edition (489830) at "d:/programs/steam\steamapps\common\Skyrim Special Edition"
0.45 - Steam: Found game Counter-Strike: Global Offensive (730) at "d:/programs/steam\steamapps\common\Counter-Strike Global Offensive"
0.45 - Steam: Found game Among Us (945360) at "d:/programs/steam\steamapps\common\Among Us"
0.45 - GOG: Found game Horizon Zero Dawn™ Complete Edition<PHONE_NUMBER>) at "D:\Games\Horizon Zero Dawn"
0.45 - GOG: Found game Ghostrunner<PHONE_NUMBER>) at "D:\Games\Bladerunner\Ghostrunner"
0.45 - GOG: Found game Ghostrunner pre-order KATANA DLC<PHONE_NUMBER>) at "D:\Games\Bladerunner\Ghostrunner"
0.45 - BethNet: Unable to open Registry Keys SOFTWARE\WOW6432Node\Bethesda Softworks\Bethesda.net and SOFTWARE\WOW6432Node\Bethesda Softworks\Bethesda.net
0.52 - EpicGamesStore: Found game Carpathian Mountains at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game Assassin's Creed: Valhalla at "D:\Games\AssassinsCreedValhalla"
0.52 - EpicGamesStore: Found game Chongquing at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game Dubai at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game HITMAN 3 at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game Berlin at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game HITMAN 1 GOTY Upgrade at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game Dartmoor at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game HITMAN 2 Standard at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game HITMAN 1 Complete First Season at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game Mendoza at "D:\Games\HITMAN3"
0.52 - EpicGamesStore: Found game Fortnite at "D:\Games\Fortnite"
0.52 - Origin: LocalContent directory at C:\ProgramData\Origin\LocalContent does not exist
0.76 - Wabbajack Version: <IP_ADDRESS>
1.33 - Build server is alive
1.33 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c
1.35 - Build server is alive
1.35 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c
3.6 - Loading ModLists from GitHub
4.16 - Error downloading modlist image Relics of Hyrule - GAT Edition
4.16 - Error downloading modlist image Relics of Hyrule - GAT Edition
4.17 - Error downloading modlist image OME(FT)
5.04 - Error downloading modlist image OME(FT)
30.09 - Starting to install Elysium Remastered
30.1 - Cleaning VFS, this may take a bit of time
30.12 - Starting Installer Task
30.13 - Installation has Started
30.13 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c
30.33 - Configuring Processor
30.34 - Install Folder: D:\Games\Skyrim Elysium Remastered
30.34 - Downloads Folder: D:\Games\Skyrim Elysium Remastered\downloads
30.34 - Game Folder: D:\Programs\Steam\steamapps\common\Skyrim Special Edition
30.34 - Wabbajack Folder: D:\Downloads\<IP_ADDRESS>
30.34 - Drive watcher is starting. Will warn at 8GB and error at 4GB
30.34 - Starting Drive watcher on D:\ currently 1.2TB free out of 1.8TB
30.34 - Validating Game ESMs
30.35 - Creating Output Folders
30.96 - Optimizing ModList
30.96 - Optimizing ModList directives
32.69 - Looking for files to delete
32.72 - Cleaning empty folders
33.45 - Looking for unmodified files
34.72 - Updating ModList
34.72 - Optimized 218352 directives to 218352 required
34.75 - Hashing Archives
34.75 - Looking for files to hash
34.81 - Found 1756 total files, 1741 matching filesize
35.06 - Downloading Missing Archives
35.06 - Missing 147 archives
35.06 - Getting Nexus API Key, if a browser appears, please accept
35.44 - Logged into the nexus as DanThew
35.44 - Nexus calls remaining: 8701 daily, 500 hourly
35.58 - Logged into the nexus as DanThew
35.58 - Nexus calls remaining: 8701 daily, 500 hourly
35.58 - Loading server whitelist
35.69 - Loaded permissions for 652 servers and 292 Google Drive files
35.69 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c
35.7 - Encountered error, can't continue - System.Exception: File MegaDownloader+State|https://mega.nz/file/pIkl3AQD#zDTeVHnPSSRKPzEjj7ZufGyAImOpqBv0ny-7efp6_8c failed validation
I tried to restart wabbajack few times like people on internet told me but it didnt work.
Hope someone finds a fix for this /dont want to throw 150gb down the drain./

Last night I was downloading Elysium Remastered from using wabbajack and there is the full log I got from the instalation
0.3 - Wabbajack Build - 9d251cda832b7478c9480345ee829f46e02df999 0.3 - Running in D:\Downloads\<IP_ADDRESS> 0.36 - Detected Windows Version: 10.0.19042.0 0.36 - System settings - (31.9GB RAM) (4.8GB Page), Display: 1920 x 1080 (7.9GB VRAM - VideoMemorySizeMb=10240) 0.36 - Pagefile below recommended! Consider increasing to 20000MB. A suboptimal pagefile can cause crashes and poor in-game performance. 0.37 - Getting new Wabbajack version list 0.43 - Steam: Found no Regex matches in Steam Config at d:/programs/steam\config\config.vdf 0.44 - Steam: Found game Rogue Legacy 2 (1253920) at "D:\Programs\Steam\steamapps\common\Rogue Legacy 2" 0.44 - Steam: Found game Goose Goose Duck (1568590) at "D:\Programs\Steam\steamapps\common\Goose Goose Duck" 0.44 - Steam: Found game Lost Ark (1599340) at "D:\Programs\Steam\steamapps\common\Lost Ark" 0.44 - Steam: Found game Steamworks Common Redistributables (228980) at "D:\Programs\Steam\steamapps\common\Steamworks Shared" 0.44 - Steam: Found game Unturned (304930) at "D:\Programs\Steam\steamapps\common\Unturned" 0.44 - Steam: Found game Geometry Dash (322170) at "D:\Programs\Steam\steamapps\common\Geometry Dash" 0.44 - Steam: Found game Wallpaper Engine (431960) at "D:\Programs\Steam\steamapps\common\wallpaper_engine" 0.44 - Steam: Found game The Elder Scrolls V: Skyrim Special Edition (489830) at "D:\Programs\Steam\steamapps\common\Skyrim Special Edition" 0.44 - Steam: Found game Counter-Strike: Global Offensive (730) at "D:\Programs\Steam\steamapps\common\Counter-Strike Global Offensive" 0.44 - Steam: Found game Among Us (945360) at "D:\Programs\Steam\steamapps\common\Among Us" 0.44 - Steam: Found game Rogue Legacy 2 (1253920) at "d:/programs/steam\steamapps\common\Rogue Legacy 2" 0.44 - Steam: Found game Goose Goose Duck (1568590) at "d:/programs/steam\steamapps\common\Goose Goose Duck" 0.44 - Steam: Found game Lost Ark (1599340) at "d:/programs/steam\steamapps\common\Lost Ark" 0.45 - Steam: Found game Steamworks Common Redistributables (228980) at "d:/programs/steam\steamapps\common\Steamworks Shared" 0.45 - Steam: Found game Unturned (304930) at "d:/programs/steam\steamapps\common\Unturned" 0.45 - Steam: Found game Geometry Dash (322170) at "d:/programs/steam\steamapps\common\Geometry Dash" 0.45 - Steam: Found game Wallpaper Engine (431960) at "d:/programs/steam\steamapps\common\wallpaper_engine" 0.45 - Steam: Found game The Elder Scrolls V: Skyrim Special Edition (489830) at "d:/programs/steam\steamapps\common\Skyrim Special Edition" 0.45 - Steam: Found game Counter-Strike: Global Offensive (730) at "d:/programs/steam\steamapps\common\Counter-Strike Global Offensive" 0.45 - Steam: Found game Among Us (945360) at "d:/programs/steam\steamapps\common\Among Us" 0.45 - GOG: Found game Horizon Zero Dawn™ Complete Edition<PHONE_NUMBER>) at "D:\Games\Horizon Zero Dawn" 0.45 - GOG: Found game Ghostrunner<PHONE_NUMBER>) at "D:\Games\Bladerunner\Ghostrunner" 0.45 - GOG: Found game Ghostrunner pre-order KATANA DLC<PHONE_NUMBER>) at "D:\Games\Bladerunner\Ghostrunner" 0.45 - BethNet: Unable to open Registry Keys SOFTWARE\WOW6432Node\Bethesda Softworks\Bethesda.net and SOFTWARE\WOW6432Node\Bethesda Softworks\Bethesda.net 0.52 - EpicGamesStore: Found game Carpathian Mountains at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game Assassin's Creed: Valhalla at "D:\Games\AssassinsCreedValhalla" 0.52 - EpicGamesStore: Found game Chongquing at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game Dubai at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game HITMAN 3 at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game Berlin at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game HITMAN 1 GOTY Upgrade at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game Dartmoor at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game HITMAN 2 Standard at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game HITMAN 1 Complete First Season at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game Mendoza at "D:\Games\HITMAN3" 0.52 - EpicGamesStore: Found game Fortnite at "D:\Games\Fortnite" 0.52 - Origin: LocalContent directory at C:\ProgramData\Origin\LocalContent does not exist 0.76 - Wabbajack Version: <IP_ADDRESS> 1.33 - Build server is alive 1.33 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c 1.35 - Build server is alive 1.35 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c 3.6 - Loading ModLists from GitHub 4.16 - Error downloading modlist image Relics of Hyrule - GAT Edition 4.16 - Error downloading modlist image Relics of Hyrule - GAT Edition 4.17 - Error downloading modlist image OME(FT) 5.04 - Error downloading modlist image OME(FT) 30.09 - Starting to install Elysium Remastered 30.1 - Cleaning VFS, this may take a bit of time 30.12 - Starting Installer Task 30.13 - Installation has Started 30.13 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c 30.33 - Configuring Processor 30.34 - Install Folder: D:\Games\Skyrim Elysium Remastered 30.34 - Downloads Folder: D:\Games\Skyrim Elysium Remastered\downloads 30.34 - Game Folder: D:\Programs\Steam\steamapps\common\Skyrim Special Edition 30.34 - Wabbajack Folder: D:\Downloads\<IP_ADDRESS> 30.34 - Drive watcher is starting. Will warn at 8GB and error at 4GB 30.34 - Starting Drive watcher on D:\ currently 1.2TB free out of 1.8TB 30.34 - Validating Game ESMs 30.35 - Creating Output Folders 30.96 - Optimizing ModList 30.96 - Optimizing ModList directives 32.69 - Looking for files to delete 32.72 - Cleaning empty folders 33.45 - Looking for unmodified files 34.72 - Updating ModList 34.72 - Optimized 218352 directives to 218352 required 34.75 - Hashing Archives 34.75 - Looking for files to hash 34.81 - Found 1756 total files, 1741 matching filesize 35.06 - Downloading Missing Archives 35.06 - Missing 147 archives 35.06 - Getting Nexus API Key, if a browser appears, please accept 35.44 - Logged into the nexus as DanThew 35.44 - Nexus calls remaining: 8701 daily, 500 hourly 35.58 - Logged into the nexus as DanThew 35.58 - Nexus calls remaining: 8701 daily, 500 hourly 35.58 - Loading server whitelist 35.69 - Loaded permissions for 652 servers and 292 Google Drive files 35.69 - File hash check (-42) ef23df9f6f37d888b44ce680f85c20f70ef97e58ea180fc1f496660c1efdb66c 35.7 - Encountered error, can't continue - System.Exception: File MegaDownloader+State|https://mega.nz/file/pIkl3AQD#zDTeVHnPSSRKPzEjj7ZufGyAImOpqBv0ny-7efp6_8c failed validation
I tried to restart wabbajack few times like people on internet told me but it didnt work. Hope someone finds a fix for this /dont want to throw 150gb down the drain./

i also have this issue


ClientID & Secret rather than realm_public_key

Hello, I am using the latest version of keycloak (4.3.0.Final) which encourages ClientID & Secret with a URL redirect.
I do not see where I would configure this into your application?
The use of a Realm Public Key is not encouraged as our IT security policy calls for periodic rotation of Realm Key Pairs. It would be much better to configure my Laravel Application on a per-client, rather than per-realm basis. Are you looking to implement this into this code?
What am I missing?

The current version relies on Realm Public Key. But, client ID and secret is an alternative. Can you share docs and specifications about this issue?

Thanks for responding.
Here are the issues in a nutshell
Bit of Background
I have implement Keycloak with other PHP Apps using the best practice
[https://www.keycloak.org/docs/3.3/server_admin/topics/sso-protocols/oidc.html](OIDC Authorization Code Flow). In that scenario I opted for the "confidential client" option that uses a client id/secret combination instead of the "Public clients" option as I could secure the secret in a PHP backend file.
So I was looking for similar way to implement OpenID Connect with Laravel 5.6 and your package seemed to be the only Laravel turn-key and maintained solution available.
Issues with laravel-keycloak-guard
I have spent the last 2 days trying to implement laravel-keycloak-guard for Laravel 5.6 with the latest Keycloak 4.2.1.Final and faced some serious hurdles

The documentation is incomplete on how to configure Laravel;

(a) to enable laravel-keycloak-guard to act as a API / WEB guard during routing; configuring config/auth.php is simply the start. I had to also configure config/app.php to add KeycloakGuard\KeycloakGuardServiceProvider::class.
(b) But even that Laravel configuration is not enough; as there is no mention of how the user will be redirected from Laravel to Keycloak in "step 1" of your "the flow" diagram to acquire a token. So I ended up experimenting with the following routing hacks
Route::get('/login', function () {
    return redirect('https://<KEYCLOAK_HOST>/auth/realms/<KEYCLOAK_REALM>/protocol/openid-connect/auth?response_type=code&redirect_uri=<KEYCLOAK_REDIRECT_URI>&client_id=<KEYCLOAK_CLIENT_ID>&scope=openid');
})->name('login');

Route::get('/logout', function () {
    return redirect('https://<KEYCLOAK_HOST>/auth/realms/<KEYCLOAK_REALM>/protocol/openid-connect/logout?redirect_uri=<KEYCLOAK_REDIRECT_URI>');
})->name('logout');

(c) There is no mention in laravel-keycloak-guard Installation on which controller should handle the Keycloak redirect response for token processing, so I guessed the default Laravel Login Controller
Route::get('<KEYCLOAK_REDIRECT_URI>', [
  'as' => '',
  'uses' => 'Auth\LoginController@login'
]);

But there is code in Illuminate\Foundation\Auth\AuthenticatesUsers:validateLogin() that expects "username" and "password" in the authentication response and that is NOT what Keycloak will send to Laravel.
This is a MAJOR  BLOCKER  that I have no solution for?
Can you enlighten as to how you implemented this in your Laravel implementation?

But even after all that; laravel-keycloak-guard cannot work because laravel-keycloak-guard KeycloakGuard.php expects to receive a token from Keycloak as $this->request->bearerToken()

BUT the Keycloak docs says

The Keycloak authentication server will attempt to authenticate the user and return a JSON body containing an OAuth-style Bearer token

bearer-only - Bearer-only access type means that the application only allows bearer token requests. If this is turned on, this application cannot participate in browser logins.

Which leads me to believe that the OIDC Authorization Code Flow workflow I need uses redirects not API JSON communication.  To illustrate what I am receiving, here is the code query string parameter storing the token response that I get from Keycloak.  I don't know how to change this behavior?
state=ff2490912dd7099328b610f724316c5c&session_state=c429c25c-58ed-4e6b-811c-c22a19034de3&code=eyJhbGciOiJkaXIiLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0..ENzxQ5Ql_lcB7bnoRIhq4Q.yA_hZtGbypct03sh5jOgQAL-75ECpk-fTdbKly7Jslq3f3_4MYpFUO4kqw_IjUgdkbHyH1YfeLm6HhqNPcUhll66gtG3MiOjAtEQ6kOltAUgrDRbdOax9z0wfi1gwslH2x7aqUM2LTBbwTIbz8SWYIoxM-ziSVUFeYNvJGbMpYD9fAhLO3NRVNmZERN9fA6eKB7AyvwwBTm788UOYTT5cQ5UAkUKHIhDOblG3DyxcqX-sEHz2jQrS78R5GBwNMMp.4q0tA1BRtsbX7FpM_-NZkg
Does your experience with Laravel and Keycloak lend towards any insights as to what's wrong?

There are too much on this first issue. Let’s break it into smaller parts :)
For this conversation, please, keep in mind the CURRENT IMPLEMENTATION.

This package is just a simple “Guard”. As Laravel Official Doc says: it just validate if something can be authenticated, based on some rules.  In this case we rely on Keycloak token. But it could be any kind of token.

Did you understand the “requirements” and basic workflow? This package does not redirect to anywhere and is not responsible for issuing any token. It just validate the token (based on realm public key).

For full understanding, you can try it with a fresh Laravel project. So, I can guide you if you missed something.

Thanks for following up
my blockers with implementing laravel-keycloak-guard in OATH2 are very specific

This IS a fresh Laravel project. I am relying on your instructions and my Keycloak documentation to get a fully working implementation functional. Its clearly not enough :)
HOW did you get Laravel to process the token response from Keycloak in Laravel's default Auth out-of-box infrastructure. Its documented that you are not using Passport. Its not magic, its very specific
HOW did you get the token? in the response Header? in a query string? What was the parameter name?

I'm digging deeper into the Laravel documentation on Socialite
Not sure why there is not already a provider for Keycloak

Can you share your fresh Laravel project into a Github repo? So I can digg it.

The package already has a service provider, that implement the guard.

Keep in mind, as described on Readme (The Flow), that frontend is responsible for issuing the token on Keycloak Server. The backend project (API/Laravel Project), has nothing to do with it. So, don’t need Passport, I just need validate if the tokenJWT is valid (based on realm public key).

The frontend requests includes a Baerer jwt token on authorization headers.

For sure, in your scenario is the best option ;)

@lancemitchell Hello!
Can you share to me how you use laravel socialite in getting token from keycloak server?
Thank you :)

Attached is my keycloak socialite implementation.
Socialite-Keycloak-Provider-Implementation.zip
The code performs authentication and authorization
Feel free to start up a Github repo for it, or contribute it to Socialite Providers - A Collection of Providers for Laravel Socialite I would appreciate the credit :-)


Switch desktop to autologin

Arch Linux / ArcoLinux
Version : sddm-config-editor-git 0.1.r76.g35f615b-1
sddm 0.19.0-6
Problem:
Changing the desktop to autologin breaks your system.

If line 4 session variable should point to the desktop file name without .desktop so sddm can boot up Xfce.
Now the result is a pathway and sddm does not like it. We end up in a black screen.
https://youtu.be/ZRmKINYaX1A

man sddm.conf is not really clear about:
Session=
             Name of the session to automatically log in when the system starts first time.  Default value is empty.

I know from experience that autologin with suffix .desktop works for LXQt.
Arch wiki says: no suffix:
https://wiki.archlinux.org/title/SDDM#Autologin

no suffix and no path

Cannot reproduce it anymore under debian.

We have moved away from this tool.
I will unsubscribe now.


feat: try-runtime support

I pushed this only so Nikolai could run this branch - I didn't expect you to review so fast haha. Will still clean up


Support for various metadata store backends [WIP - need feedback and review]

In current implementation, the ML metadata (MLMD) metadata store was tightly coupled with CMF. Our experiments and standalone proof-of-concept implementations have demonstrated that it is possible to use other platforms, such as MLflow to store pipeline metadata (though, not as efficiently as with MLMD store, but in certain cases when a team or organization has already setup the ML metadata management service, they can start tracking their pipeline metadata using that existing service).
The idea is relatively straightforward - take MLMD related collection of functions and wrap them into a class (MlmdStore). Then functions that are used by Cmf become public interface for MlmdStore, and respectively, become API that Cmf requires from arbitrary metadata backend in the future.
This commit moves existing MLMD functionality into cmflib.metadata.mlmd_store module.

At this point, the implementation is merely a draft for the proposed idea.  We are collecting feedback and suggestions.

This PR should also address CMF running in the debug mode, where the backend can be a console , and we do a dry run and no hard changes like commits and branches .


Add new 100%-base entitled

(depends on https://github.com/OpenSlides/openslides-backend/issues/628 since the models changes will be merged there)
The entitled base takes the length of the entitled_users_at_stop array as the 100%-base.
See OS3 changes: https://github.com/OpenSlides/OpenSlides/pull/5978

@tsiegleauq will this be fixed with #217?

This is was not covered in #217
apparently it also slipped my migrate-from-os3 list. Perhaps the PR was too old or was skipped during rebase?

This would be possible.
Okay, then we have to implement this feature separately.

if required, I can prolly also include it in #217. Apparently, there still is some more to do in this PR anw

apparently the "entitled" base was covered in #217 already


Add JS/TS toggle to tutorial

Adds the JS/TS toggle to the tutorial page (still behind the ?mods=jsSamples feature flag).
Doesn't yet affect the LHS content, will do that in a followup.
Part of #332

Looks like external links error is due to beautifier.io being down.
├─BROKEN─ https://beautifier.io/ (ERRNO_ECONNRESET)

On step 3 of the tutorial the html template gets one space on either side. Just something I noticed. Is the TS template trimmed?

The JS templates are formatted by Prettier, which reformats some HTML. Maybe we could turn that off, or we could format all TS with Prettier so that it's consistent. Will address in followup.

I added some code then switched the language which resulted in me losing some progress. I think this may need to be communicated or it could be frustrating. While playing with this I found that you can undo through the language change. So you can get your progress back, but now you have JS content in a TS file. Repro:

Add some changes.
Switch the language and notice your changes are gone in the new language.
Press ctrl or cmd + Z.
Your changes are back but the file and toggle didn't undo.
The result of this can be TS content when toggle is set to JS. This seems to break the preview.

On a slower network it's still possible to edit the code before it vanishes.

Good catch, that is something we should improve. Will address in followup. Any thoughts on how it should work -- maybe a popup that says "Toggling languages will lose your changes [CONTINUE] [CANCEL]"?

That popup seems like a great stopgap solution. Definitely useful if the workspace has been modified and things will be lost.

That popup seems like a great stopgap solution. Definitely useful if the workspace has been modified and things will be lost.

Filed https://github.com/lit/lit.dev/issues/485


Remove "exceptions" dependency.

This package depends on exceptions but, after searching for Control.Monad.Catch in the repo, I can't find any reference. Perhaps the dependency could be dropped?

Thanks. Fixed with 2e840128d833eba46b6f8fe8abb6d0fa5d14d0d5.

I'm also a little unclear on why MonadMask was removed along with it. It seems like the discussion around resourcet suggests using bracket-style (e.g. streaming-with) computations instead, but how does one do that at all without the instance?

@jkarni Looking at previous versions of streaming, it seems that Stream was never an instance of MonadMask.

but how does one do that at all without the instance?

I'm not familiar with streaming-with, but I suppose one could create and consume the Stream inside the bracket.

Sorry, I should have been clearer - it was removed here (though I think it was removed before it was ever released?), and discussed as an alternative to resourcet here

Yes, as shown there was an instance of MonadMask which vanished with no discussion.

FWIW, I'm pretty sure we definitely can't have MonadMask now that exceptions-0.10 is out. This requires an implementation of generalBracket, but this cannot be safely written AFAICT. The problem is take would stop resource cleanup from happening. I don't think it was sound in the first place. I'll have more of a think on this, but I think it's unfortunately fundamental.


On every deploy i got error

Hello
When i using CLI everything its working fine but
On every deploy using action i got error :
Command executed: sfdx
With the following args: force:source:deploy,--wait,10,--manifest,manifest/package.xml,--targetusername,sfdc,--json,--testlevel,RunLocalTests
Having the following return: {
"status": 1,
"result": [
{
"error": "Unknown"
}
],
"name": "DeployFailed",
"message": "Deploy failed.",
"exitCode": 1,
"actions": [],
"commandName": "SourceDeployCommand",
"data": [
{
"error": "Unknown"
}
],
"stack": "DeployFailed: Deploy failed.\n    at /usr/local/lib/sfdx/node_modules/salesforce-alm/dist/lib/source/sourceApiCommand.js:70:31\n    at async SourceDeployCommand.execLegacyCommand (/usr/local/lib/sfdx/node_modules/salesforce-alm/dist/ToolbeltCommand.js:149:29)\n    at async SourceDeployCommand.run (/usr/local/lib/sfdx/node_modules/salesforce-alm/dist/commands/force/source/deploy.js:32:16)\n    at async SourceDeployCommand._run (/usr/local/lib/sfdx/node_modules/@salesforce/command/lib/sfdxCommand.js:93:40)\n    at async Config.runCommand (/usr/local/lib/sfdx/node_modules/@oclif/config/lib/config.js:173:24)\n    at async Main.run (/usr/local/lib/sfdx/node_modules/@oclif/command/lib/main.js:27:9)\n    at async Main._run (/usr/local/lib/sfdx/node_modules/@oclif/command/lib/command.js:43:20)\n    at async Object.run (/usr/local/lib/sfdx/dist/cli.js:32:20)",
"warnings": []
}

Hi @g1b3r , did you already check on the action log what's going on? When I got these unknown error was always related with test cases failing. Get the entire execution log from the github action and look for Failure or Error, probably you will find more details.

Hi
I already investigate issue i try to use in secrets USERNAME instead USERNAME_TI01 this is caused issue
From: Tiago Nascimento<EMAIL_ADDRESS>Sent: Sunday, December 27, 2020 2:11 PM
To: tiagonnascimento/sfdx-orgdev-build-deploy<EMAIL_ADDRESS>Cc: g1b3r<EMAIL_ADDRESS>Mention<EMAIL_ADDRESS>Subject: Re: [tiagonnascimento/sfdx-orgdev-build-deploy] On every deploy i got error (#9)
Hi @g1b3r https://github.com/g1b3r  , did you already check on the action log what's going on? When I got these unknown error was always related with test cases failing. Get the entire execution log from the github action and look for Failure or Error, probably you will find more details.
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub https://github.com/tiagonnascimento/sfdx-orgdev-build-deploy/issues/9#issuecomment-751466137 , or unsubscribe https://github.com/notifications/unsubscribe-auth/AELCZC5A57HM5LVCAELHSFTSW4W5RANCNFSM4VKWSAAQ .  https://github.com/notifications/beacon/AELCZC74TZHXCR57LU5KYVTSW4W5RA5CNFSM4VKWSAA2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOFTFHNGI.gif

Great! You can use USERNAME as secret name, as long as you refer to the same variable name in the yml.