kubectl Unable to connect to the server Azure Kubernetes Service

Hi,
I am getting below error when using kubectl with MS AKS. I had followed all Microsoft documentation and Kubernetes documentation.
kubectl get nodes
Unable to connect to the server: x509: certificate signed by unknown authority
Azure CLI 2.17.1
Resolution:
Follow thread at https://github.com/kubernetes/kubectl/issues/1000
Hi,
In my case this error was very misleading. It has nothing to do with actual certificate. Microsoft should have done better job in documentation at their end. The error given is incorrect. Error should actually inform user about not have proper runtime setup. AKS is expecting that the user is using a UNIX/Linux terminal not default Azure-CLI. AKS is expecting user to use AKS CLI from a UNIX/Linux terminal/emulator.
I worked with Microsoft Support on this.
Following is the resolution: (Windows 10 system preferred version 2004 or later)
From Control Panel -> Programs -> Turn Windows Features On or Off
Enable Virtual Machine Platform
Enable Windows Subsystem for Linux
Reboot
From Windows Store Install Ubuntu 18.04 LTS
Launch Ubuntu follow prompt to create user id and password
On Ubuntu prompt run command given in option 1 (curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash)
Install kubectl by running sudo az aks install-cli
login to portal.azure.com and copy the connection instructions for AKS cluster
On Ubuntu prompt run az login
On Ubuntu prompt paste the AKS cluster connection commands (az account set --subscription and az aks get-credentials)
This will create config file with certificates readable through bash shell
Reference links
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-windows?tabs=azure-cli
https://docs.microsoft.com/en-us/windows/wsl/about
https://docs.microsoft.com/en-us/cli/azure/install-azure-cli-linux?pivots=apt
Follow above four links one by one, do not click Next Steps at bottom of the page.

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: 8b7bd326-07b2-caaa-7155-5852fc2dfa3f
Version Independent ID: c44d0547-d5cd-8934-00f8-79e2f4df53ac
Content: Install the Azure CLI
Content Source: docs-ref-conceptual/install-azure-cli.md
Service: azure-cli
GitHub Login: @dbradish-microsoft
Microsoft Alias: dbradish

@realnikhilkumar
Thank you feedback. At this time we are reviewing the feedback and will provide an update as appropriate.

@realnikhilkumar Thanks for the feedback. I have assigned the issue to the content author to evaluate and update as appropriate.

@realnikhilkumar Thanks for the feedback. I have assigned the issue to the content author to evaluate and update as appropriate.

@jiasli , @chasewilson , This is an install issue that should have been assigned to engineering or the AKS team.  Reassigning.

@realnikhilkumar, Thanks for providing feedback that helps improve our documentation. Our Linux installation articles are being refreshed and your feedback will be considered.


Is it possible to remove the dot (.) notation in property names?

I'm finding something strange that I don't see mentioned anywhere in the documentation. When property names get written to ModelState they have model.{PropertyName} format. I'm trying to figure out how to remove the "model." part. Here is my rule:
    public class ProvisionUserModelValidator : AbstractValidator<ProvisionUserModel>
    {
        public ProvisionUserModelValidator()
        {
            RuleFor(model => model.DisplayName)
                .Cascade(CascadeMode.StopOnFirstFailure)
                .NotNull()
                .WithMessage("Display name cannot be empty.")
                .NotEmpty()
                .WithMessage("Display name cannot be empty.");
        }
    }

which is outputted like:
{
        "model.DisplayName": [
            "Display name cannot be empty."
        ]
}

Instead of
{
        "displayName": [
            "Display name cannot be empty."
        ]
}

I tried using WithName which appears to be changing the property name in the Message and not the actual Property. I then tried providing a custom PropertyNameResolver and while it did change the property name it still kept the "model.*" part.
Does anybody know what the deal is and why the behavior is different from the documentation examples?

The "model" prefix doesn't come from FluentValidation directly....FluentValidation's own messages always begin with the property name, they don't prefix it with the model.
I'm guessing you're using FV with either MVC or WebApi? In which case, the variable name is prefixed on the results:
public ActionResult MyAction(ProvisionUserModel model) {
 ...
}

If your controller action is defined like that, then the parameter name will be prefixed on the result messages.  I believe this is done to differentiate the results. For example, if you have two models being bound with two separate parameters, then there would need to be a way to differentiate the values in the modelstate.
If you invoke FluentValidation directly by calling .Validate, I expect you'll see the results you're after, but if you're relying on the automatic integration with MVC/WebApi then you'll need to live with this behaviour I'm afraid.

Hey Jeremy,
Thanks for the lightening-fast response! Yes, i'm using FV with WebApi and the behavior makes sense now. Thanks for the workaround. I'll give that shot.

If someone is interested in a workaround for this, here is what i came up with for Web API solutions.
If you have more than 1 parameter in an action, this ActionFilter will stop on first failure. So if the first parameter does not validate, the second one will not be tried. This ultimately resolves the prefix issue but it may not work for everyone.
The other issue this ActionFilter resolves is null handling. FluentValidation does not handle cases when an action parameter is null because it cannot derive a validator. I fixed this by looking up the action parameter descriptor and deriving the type of a null parameter. If the descriptor indicates the parameter is optional or there is no validator for it, it will be ignored. Otherwise, HTTP/400 BadRequest is returned to the client.
Anyway, just throwing this out there.
    public class ValidationActionFilter : ActionFilterAttribute
    {
        private readonly IDependencyResolver _resolver;

        public ValidationActionFilter(IDependencyResolver resolver)
        {
            _resolver = resolver;
        }

        public override void OnActionExecuting(HttpActionContext actionContext)
        {
            var actionArguments = GetTheActionArguments(actionContext);

            if (actionArguments == null)
            {
                return;
            }

            foreach (var actionArgument in actionArguments)
            {
                if (actionArgument.Value == null)
                {
                    var actionArgumentDescriptor = GetActionArgumentDescriptor(actionContext, actionArgument.Key);

                    if (actionArgumentDescriptor.IsOptional)
                    {
                        continue;
                    }

                    var validator = GetValidatorForActionArgumentType(actionArgumentDescriptor.ParameterType);

                    if (validator == null)
                    {
                        continue;
                    }

                    actionContext.Response = new HttpResponseMessage(HttpStatusCode.BadRequest);

                    return;
                }
                else
                {
                    var validator = GetValidatorForActionArgument(actionArgument.Value);

                    if (validator == null)
                    {
                        continue;
                    }

                    var validationResult = validator.Validate(actionArgument.Value);

                    if (validationResult.IsValid)
                    {
                        continue;
                    }

                    WriteErrorsToModelState(validationResult, actionContext);

                    return;
                }
            }
        }

        private static IEnumerable<KeyValuePair<string, object>> GetTheActionArguments(HttpActionContext actionContext)
        {
            return actionContext.ActionArguments
                .Select(argument => argument);
        }

        private static HttpParameterDescriptor GetActionArgumentDescriptor(HttpActionContext actionContext, string actionArgumentName)
        {
            return actionContext.ActionDescriptor
                .GetParameters()
                .SingleOrDefault(prm => prm.ParameterName == actionArgumentName);
        }

        private IValidator GetValidatorForActionArgument(object actionArgument)
        {
            var abstractValidatorType = typeof (IValidator<>);
            var validatorForType = abstractValidatorType.MakeGenericType(actionArgument.GetType());

            return _resolver.GetService(validatorForType) as IValidator;
        }

        private IValidator GetValidatorForActionArgumentType(Type actionArgument)
        {
            var abstractValidatorType = typeof(IValidator<>);
            var validatorForType = abstractValidatorType.MakeGenericType(actionArgument);

            return _resolver.GetService(validatorForType) as IValidator;
        }

        private static void WriteErrorsToModelState(ValidationResult validationResults, HttpActionContext actionContext)
        {
            foreach (var error in validationResults.Errors)
            {
                actionContext.ModelState.AddModelError(error.PropertyName, error.ErrorMessage);
            }
        }
    }

@sakopov: this has worked well for me: http://stackoverflow.com/a/17114496.

Maintenance / cleanup: Closing this as the question appears to be answered and there hasn't been any activity for a few months.


Update notebook format versions

The commits in this pull request update all notebooks' formats to version 4. Fixes #284.

:+1: easy! Mergin now


Update meta.yaml

Checklist

[x] Used a personal fork of the feedstock to propose changes
[x] Bumped the build number (if the version is unchanged)
[x] Reset the build number to 0 (if the version changed)
[x] Re-rendered with the latest conda-smithy (Use the phrase @conda-forge-admin, please rerender in a comment in this PR for automated rerendering)
[x] Ensured the license file is being packaged.

@conda-forge-admin, please rerender

I introduced pyparsing 1-2 years ago and never touched it since, so likely simply downgrading it is perfectly fine.


Error when drawing empty EGraph

Before posting a bug report

[X] I have searched existing GitHub issues and documentation to make sure the issue and relevant resolutions do not already exist.

Expected behavior
When trying to plot an empty graph, an error is thrown because of the way draw_EGraph is implemented. It might be better to log this (or print a message) instead of throwing an error.
Actual buggy behavior
File c:\~\flamingpy\flamingpy\utils\viz.py:238, in draw_EGraph(egraph, color_nodes, color_edges, label, title, legend, show_axes, dimensions)
    235     maxs = map(lambda x: int(np.ceil(x)), maxs)
    236     dimensions = zip(mins, maxs)
--> 238 xlim, ylim, zlim = [list(lim) for lim in dimensions]
    240 fig = plt.figure()
    241 ax = fig.add_subplot(111, projection="3d")

ValueError: not enough values to unpack (expected 3, got 0)

How to reproduce
c = SurfaceCode(1)
c.draw()

System information
FlamingPy is a cross-platform Python library with a variety of backends for efficient simulations of error correction in fault-tolerant quantum computers.

Copyright 2022 Xanadu Quantum Technologies Inc.

Platform info:               Windows-10-10.0.19044-SP0
Installation path:           c:\users\joost\documents\github\flamingpy\flamingpy
Python version:              3.8.13
FlamingPy version:           0.8.2a5.dev9
Numpy version:               1.21.6
Scipy version:               1.8.0
NetworkX version:            2.8
RetworkX version:            0.11.0
Matplotlib version:          3.5.2
lemonpy shared object:       Not installed
cpp_mc_loop shared object:   Not installed

Tracebacks
No response
Additional context
No response

Good suggestion, @soosub, it makes sense to me to do logging here. It should be straightforward as we have logging examples in the repo. I'll assign both of us -- please implement in any relevant existing or new PRs. Alternatively, I am happy to implement.

Cool, will do


feature: create pull request template

The Pull Request is ready

[x] all github actions are passing
[x] only a single issue was worked on
[x] fixes #0
[x] the branch follows the naming schema issue-123-enable-x-does-not-disable-y
[x] the pull request has a sensible title

Intention
With this change I intend to help standardize the pull requests for easier review.
Review Points
Please take extra care reviewing the included branch naming schema.
The code follows best practices

[x] duplicate code has been extracted where possible
[x] issues for follow-up tasks have been created
[x] tests have been written for any new functionality
[x] there is no any type used
[x] texts have been checked for grammar and spelling issues

Notes
This is adapted from my project, see this only as a starting point please.

Love this. Will be really important for us with a "decentralized" team to have things like this in place


Introduce extension proxies between Ruby and Java extensions

This PR is probably already much too large, sorry :(
Introduced a proxy class for every extension type.
Made a larger change to the InlineMacroProcessor so that RubyRegexps are no longer created in the Java Processor but in the Ruby base class and transported back to the Java extension config.

Hi Robert, awesome contribution, only one thing, the build is failing when the project is trying to compile against a JDK prior to Java 8. I don't know exactly why this is happening:
error: method setConfig in class Processor cannot be applied to given types;
        getProcessor().setConfig(RubyHashUtil.convertRubyHashMapToMap(newConfig));
                      ^
  required: Map<String,Object>
  found: Map<Object,Object>
  reason: actual argument Map<Object,Object> cannot be converted to Map<String,Object> by method invocation conversion
Note: Some input files use or override a deprecated API.

Can you try to fix this I think it is pretty easy, and I could do it without any problem but I said that to maintain root of the branch runnable.
But this work is awesome. My next step will be the refactor to DocumentRuby inerface to Document. But I will open a new issue and I will do it :).

Sorry Alex! It built successfully yesterday before I checked in but I did not do a final clean build.

Don't worry it is not a problem, for this reason we have the CI environment
:D. No worries fix them when you have time we are not out of date with
AsciidoctorJ 1.6.0 so take your time and thank you so much for your help.
BTW I have added as a team member of AsciidoctorJ, when you can you can
update pom.xml as well in the developers section :)
El Fri Feb 20 2015 at 3:18:42 PM, Robert Panzer<EMAIL_ADDRESS>va escriure:

Sorry Alex! It built successfully yesterday before I checked in but I did
not do a final clean build.
—
Reply to this email directly or view it on GitHub
https://github.com/asciidoctor/asciidoctorj/pull/276#issuecomment-75244279
.

Thanks! Hope it's ok to do it as part of this PR.

Yes if you want we Can use same PR
El dv., 20 de febr., 2015 a les 16.20 Robert Panzer <
<EMAIL_ADDRESS>va escriure:

Thanks! Hope it's ok to do it as part of this PR.
—
Reply to this email directly or view it on GitHub
https://github.com/asciidoctor/asciidoctorj/pull/276#issuecomment-75254611
.


Can u add appendBuffer () menthod

Is your feature request related to a problem? Please describe.
I want to forward a video Stream to a VMS server, the video is captured by a different source and streamed to my phone via an HTTP connection, I want to forward it to a VMS Server
Right now I can see a method appendBuffer() available in swift, but it is not available in haishinkit.kt
Describe the solution you'd like
Can I use the haishinkits RTMP stream class to append a video buffer to stream to a VMS server, as well as append an audio buffer?
Describe alternatives you've considered
I have looked into the module but unable to find a method to stream out a buffer
Additional context
N/A

Thank you for request. I have no plan.


Support transaction expiration

Transactions now have an expiration block. The node should

reject incoming transactions which are already expired, and
drop transactions from the mempool once they expire

This is blocked by #491 being implemented in PR #502.

Closed by #582.


Add German translation for MoneyPrinterTurbo

Add a valid German Translation. + Fix Subtile Middle -> Center translate var.
Cheers.

Thank you very much.


Editor doesn't reconcile space created by auto-indentation and space in the inline suggestion

Problem
Editor doesn't reconcile/merge space created by auto-indentation and space in the inline suggestion.
In the screencast below, I would expect that when I press "enter" on line 1, I go to line 2 with auto-indentation and "console.log" being at the my cursor position rather than also indented.
https://github.com/microsoft/vscode/assets/16353531/34d01030-7e5a-4d67-b9d0-ca2df78365b5

I'm quite sure that is caused by the extension.

how could I capture logs in future to be sure it's copilot at fault?


Include New Scrapper To Movies Poster

CineMonster has no poster scrapper/crawler, so to next features like Quiz about movies on app depends on from at least one poster scrapper/crawler to be embedded as api microservice.

I want to work on this.

I would like to work on this

Hi @toymak3r,
I am a Beginner and I would like to take up this issue and work on this.
Thanks,

@HassankSalim and @hemanthsavasere of course, could you create a patch and submit it. If you guys wanna part of team it self, just submit this patch and we talk about. Opensource power!

@toymak3r If I understand correctly you want to create a microservice to scrap movie posters?
And you want this service to be part of CineMonster repo?

@toymak3r If I understand correctly you want to create a microservice to scrap movie posters?
And you want this service to be part of CineMonster repo?

Hi there @subhendusethi , sorry by the late. I wanna include a piece of architecture to Cinemonster scrap independently movie posters. Something like:
def get_movie_poster(self, 'name of movie') - self because their constructor already will be set with the correct provider, like: scrap from wikipedia or scrap from imdb and etc..


docs(v2): specify google-analytics and gtag plugins

Motivation
As noted in #4678 it was hard to notice that the google-analytics-related plugins were only able in production builds. Notes that clarify this have been added, following the style of the ideal-image plugin. Additionally, a common misconception between Tracking IDs (UA-) and Measurement IDs (G-) has been explained, and Google's Tag Assistant has been linked to aid developers in debugging.
Have you read the Contributing Guidelines on pull requests?
Yes.

Thanks, that looks like useful doc additions ;)


[Enhancement]: Code summary on methods does not show correct documentation

Problem
I've this c# code:
var sql = new MsSqlBuilder()
            .WithCleanUp(true)
            .Build();

And when hovering over ".WithCleanup" in VS2022, I see this:

Solution
This documentation should be displayed:

Benefit
Correct code comments
Alternatives

Would you like to help contributing this enhancement?
Yes

Thank you for bringing the issue to our attention. I believe it is related to the cref="IContainerBuilder{TBuilderEntity, TContainerEntity}" attribute in the inheritdoc tag, e.g.:
https://github.com/testcontainers/testcontainers-dotnet/blob/bc176a09575277e657db3149ae0a95b567249b65/src/Testcontainers/Builders/ContainerBuilder`3.cs#L38
Without the attribute, the documentation inherits correct in Rider. Can you confirm it for VS too?


angular.equals/merge does not support circular reference

This is the same issue as reported in https://github.com/angular/angular.js/issues/2618, but for angular.merge and angular.equals.
An example can be seen at: http://plnkr.co/edit/j3qz1Rt3ABOXyWw0KpgB?p=preview

Similar issues/PRs have been "shot down" in the past (e.g. #7839, #11653). E.g. see https://github.com/angular/angular.js/pull/7839#issuecomment-47383208 for the reasoning.
So, I wouldn't get my hopes up...
There is also #10096 that would provide another way to solve this.
What is your usecase, btw ?

We are trying to optimize the uses of the $watchers in one application where the number are quite extensive, we were switching to use scope.$watch with objectEquality == true which relies on angular.copy and angular.equals, while doing so we found 3 scenarios in our application where objects with circular references were seem:

one is under the code we produce, but we haven't figure out how to remove it without loosing functionality.

the other two are caused by a third party library based on bootstrap internally handle by our client, we basically don't have an option of fixing these cases.

The optimization we have implemented works fine as long as the angular.equals doesn't find an object with a circular reference, but that is not the case, actually it is quite the opposite, circular references are find a lot, and we don't have too much options to actually fix the ones that are identified so far.

Switching to objectEquality: true hardy sounds like an optimization. It is the most expensive $watch form (after $watch(..., ..., false) and $watchCollection(...)).
Just saying...

hehehe, agree, but in our particular case it looks like the way to go, actually we have applied the change along with a patched version of angular.js to avoid circular references in DEV environment, and the approach of using objectEquality: true seems to be giving performance benefits that we need, still going to production with a patched version of angular.js doesn't seem to be feasible.

It seems that one can patch this efficiently for their own use case if you know what you're looking for.  In my application, I've written an ORM that uses circular structures liberally, but I know what comparisons fail, so I can short circuit angular.equals where necessary:
After if (t1 == t2 && t1 == 'object') {:
    // Patches for object equivalence in circular ORM structures
    if (o1.__type && o1.id && o1.__type == o2.__type && o1.id == o2.id) {
      return true;
    }
    // End patch

In my use case, there's a __type property and an id property, and in my implementation these always refer to the same object, though angular.equals disagrees.  This is far more efficient and compatible for me than relying on WeakMaps or similar implementations.

I'm running into the same issue. My use case is: when a user wants to edit a model I make a copy of if so that any changes can be canceled. Then when the user tries to save their changes I compare the copy with the original to see if anything actually needs to be saved.

Same for me, I'm trying to do:
function updateEntity(entity, changes) {
	const entityToSave = angular.merge({}, entity, changes);
	return entityResource.update(entityToSave).$promise
		.then(updatedEntity => {
			entity = angular.merge({}, entity, updatedEntity);
			console.log('entity was updated.');
			return updatedEntity;
		})
		.catch(error => {
			console.error('entity could not be updated.');
			return error;
		});
}

… which would be very convenient but would include circular references.


CI: Add workflow to enforce rebase before merge

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Comparison is base (711e04f) 74.93% compared to head (e425dec) 74.93%.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #159   +/-   ##
=======================================
  Coverage   74.93%   74.93%
=======================================
  Files          34       34
  Lines        1632     1632
=======================================
  Hits         1223     1223
  Misses        409      409

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


[nrf fromtree] storage/flash_map: Add FLASH_AREA_DEVICE macro

The macro returns pointer to a device object the flash area
exists on.
Upstream commit: a333ffce1d200110887d0cbb1970e947653d357f
Signed-off-by: Dominik Ermel<EMAIL_ADDRESS>

I already have a PR pulling this in here https://github.com/nrfconnect/sdk-nrf/pull/5988
Let me know if you want to pull the commit in your PR set instead and I will update my PR to depend on yours

I already have a PR pulling this in here nrfconnect/sdk-nrf#5988
Let me know if you want to pull the commit in your PR set instead and I will update my PR to depend on yours

I will close my (this) PR as they are both the same and your precedes my.


Add example using React hooks

Even when they're already 2 react examples, most of the modern react development is around hooks. Would be great to add an example of how to use body-scroll-lock along with modern react. (hooks)

They stopped the repairs. I had to do it myself, in the same way, with a new version of typeScript. And fix these problems for everyone to use.
npm i body-scroll-lock-upgrade

repair log，Refer to the releases page.


invalid value encountered in true_divide

raw_text = 'this is the text i want to extract keyphrases from'
kp1 = launch.extract_keyphrases(embedding_distributor, pos_tagger, raw_text, 10, 'en')
/home1/zy/anaconda3/envs/py36pc2t/lib/python3.6/site-packages/ai-research-keyphrase-extraction/swisscom_ai/research_keyphrase/model/method.py:44: RuntimeWarning: invalid value encountered in true_divide
0.5 + (sim_between_norm - np.nanmean(sim_between_norm, axis=0)) / np.nanstd(sim_between_norm, axis=0)

Hi this can happen when you have a very small number of candidates (less or equal than 2) which is not the case in general. Thanks for spotting this issue, I'll try to fix this special case. Meanwhile you can just try with slightly bigger sentence (that have at least 3 candidates).

thank you for your reply.it seems can be solved by:
import numpy as np
np.seterr(divide='ignore',invalid='ignore')
But it's not clear that there would be any risk. by the way , sent2vec has updated, and will this project be updated later?

Yes you are totally right, what you did just shut down the warning. There is a risk in fact , if you have only 2 candidates and want to extract only one (the best one) the result is wrong.
I'll have a look at the updates of s2v and see what is needed to make this project with the latest version. However the update won't be done in the following days unless someone want to do it through a PR :)


Current package cannot be added on Windows

When attempting to add your package from Windows I get:
 => Errors while adding packages:

While checking for<EMAIL_ADDRESS>error: No compatible binary build found for this package. Contact the package author and ask
them to publish it for your platform.

Version 0.1.0 is the most recent version I can add, but this version doesn't have the 0.4.0 updates to node-google.spreadsheets necessary to work with Googles newer API.

+1

I'd like to publish but haven't had time to debug the following publishing error:
 C:\Windows\system32>node-gyp rebuild
'node-gyp' is not recognized as an internal or external command,
operable program or batch file.

Seems similar to one that has been reported by others trying to publish on windows: https://github.com/meteor/meteor/issues/4087
I recently resolved a similar issue locally, but since this error is on the Meteor build box, I'm not sure what the workaround is.

Can't upgrade on mac either. Said new version is available but no dice.
$ meteor add<EMAIL_ADDRESS> => Errors while adding packages:

While checking for<EMAIL_ADDRESS>error: No compatible binary build found for this package. Contact the package author and ask them to publish it for your
platform.

just republishing osx, linux 32/64.  Windows is still failing.

Any chance you could give this a shot now @aaronjudd ?
gouthamve/reaction-cod#8 depends on this.

Looks like Meteor finally fixed the Windows build system.  Published<EMAIL_ADDRESS>for all platforms successfully.


Undo remove constraint assertion from repo test

Undoes #902.  Add tag to test instead.

:heart: :green_heart: :blue_heart: :yellow_heart: :purple_heart:


check NEON support before executing on ARM

What does this PR change?

add NEON support check on ARM before executing
clean up the code to have same style

:+1:


[FEATURE] Verify OauthLoginCallbackHandler works when token expired

Is your feature request related to a problem? Please describe.
#1260 implements lifetimeMs and startTimeMs methods. They are claimed "correctly" but not verified. We need to set up a test to simulate a quickly expired token and verify Kafka clients with the oauth-client plugin can refresh the token. Otherwise, we should think of a way to process the token expiration.
Describe the solution you'd like
Configure a shorter timeout like 10s in Hydra, and see what will happen.

Tested out locally and it seems to be working - I changed the timeout to 3 seconds and let the test slept for 10 seconds before sending requests, and it works with a few extra token requests. I'll put that in an actual test and submit a PR.
(It seems when the timeout it set to really low, e.g., 1 second, so that it expires before initialization finishes, the initialization flow will try to use the expired token and fail. I am not sure whether that's worth fixing though.)

Tested out locally and it seems to be working - I changed the timeout to 3 seconds and let the test slept for 10 seconds before sending requests, and it works with a few extra token requests. I'll put that in an actual test and submit a PR.
There's a different issue - it seems when the timeout it set to really low, e.g., 1 second, so that it expires before initialization finishes, the initialization flow will try to use the expired token and fail. I am not sure whether that's worth fixing though.

I am not sure whether that's worth fixing though.

I think it is a rare case in real world production environment. IMO it's not worth fixing. We only need to guarantee in this case a correct exception will be thrown so that it can be handled in applications side (for example, recreate the producer).


Handle conversions for miniscule values better

If I enter a small value of a low value currency, it seems like the app has a bug when it converts to $0.00, but the reality is a little more complicated: the value is so little it rounds to 0.00. How can I show this better?

Maybe change the conversion table text to say:
÷ 6.038164 (1 BRL = 0.1708271 USD)

I'll try this approach:

Always show the EXACT values in the conversion table
Show an extra warning (could be caption or a label element) in the gas price when the display value is 0 but the exact value is not 0

Also maybe I should show a warning if the relative value of one currency is dramatically different than the other; i.e., Iranian Rial vs Bitcoin.
Maybe:
Warning: The numbers you'll see might surprise you if you're not accustomed to converting between Iranian Riales and Bitcoins. Their relative values are so different (4,279,602,801 IRR = 1 BTC) that you can easily arrive at enormous or minuscule numbers.

By default show rounded values and say "(simplified)" on the top of the table; allow toggling to detailed

By default show rounded values and say "(simplified)" on the top of the table; allow toggling to detailed

Or a link that says "Details" that opens the details of the conversion

Ghdklaghdla I need to bring this back to a user story. I'm looking up how math books explain step-by-step word problems to copy their style. Nobody is asking for this, and there are other more valuable things I could be focusing on.

Here's an attempt:
As a person learning what buying gas in Bitcoin instead of USD would look like, I need to see an accurate value in order to understand the answer

Maybe just show conversion rates in the table:
1 gallon = 3.7815781 liters
1 USD = 6.04958718975819 BRL (updated Dec 16, 2024)
Click to see explanation of steps (modal overlay with math class)
The exact input and output numbers probably make sense to be included in the GasPrice component, somewhere near the input itself.


Bundle up multiple operations into a single rake task

Though instructive, it's tedious to have to execute each rake task individually. Where possible, we should bundle up multiple operations into a single task.

yeah! Maybe still surface the individual tasks, but have a do-it-all task if you know what is going on and everything is set up nice.

@derekenos the Rakefile is all one huge file at this point-- does it make sense to break it up in to components to make it easier to keep track of?

@evanwill, definitely. I'll plan on splitting that Rakefile up into reasonable chunks.

Done: https://github.com/CollectionBuilder/collectionbuilder-sa_draft/pull/66


ErrorException   /artisan Undefined array key "basic_auth"

The error you're encountering in the HttpDriver.php file of the spatie/laravel-open-telemetry package is related to the use of an undefined array key basic_auth. This happens in PHP when you try to access an array element that doesn't exist. In your code, the error occurs because the code attempts to access $this->options['basic_auth'] without first ensuring that this key exists in the $options array.
The issue arises in this segment of the code:
->when($this->options['basic_auth'], function (Factory $client) {     $client->withBasicAuth(         $this->options['basic_auth']['username'],         $this->options['basic_auth']['password'],     ); })
Here, $this->options['basic_auth'] is used as a condition in the when method, assuming that it is always set. However, if it's not set in the $options array, it will lead to an "Undefined array key" error.
To fix this issue, you should ensure that basic_auth is set before using it. You can use the PHP isset() function for this purpose. Modify your code as follows:
php
->when(isset($this->options['basic_auth']), function (Factory $client) {     $client->withBasicAuth(         $this->options['basic_auth']['username'],         $this->options['basic_auth']['password'],     ); })
This change will check if basic_auth is set in the $options array before attempting to use it, thus preventing the error.

Fixed in the latest release


[BUG] Fleet controller can't provision local cluster immediately

#41848 was originally created against Rancher 2.8.
More context there.
TL;DR: When installed via Docker or Harvester, Rancher uses an API server URL which is not known in advance. In such cases, the API server URL is not configured, meaning that Fleet does not provision the local cluster immediately.
This is a forward-port for 2.9.

Additional QA
Problem
(copied over from this issue description)
Local cluster provision doesn't happen immediately after we set the secret; sometimes, it takes a very long time (up to 10 minutes). Restarting fleet-controller pod makes the cluster provision happen immediately.
Solution
When the API server URL is not set, Rancher's Fleet chart controller uses the local cluster's internal API server URL when installing a local Fleet cluster, populating that URL in the corresponding Kubeconfig secret.
Testing
(copied over from this issue description)
Provision a local cluster with rancherd; its basic flow is:

Deploy an RKE2 server node.
Deploy Rancher, rancher will deploys rancher-webhook and fleet controller.
Update secret local-kubeconfig.

apiServerURL: value of Rancher setting "internal-server-url".
apiServerCA: value of Rancher setting "internal-cacerts".

Apply cluster manifests:---
apiVersion: v1
kind: Node
metadata:
  labels:
    node-role.kubernetes.io/etcd: "true"
  name: node1

---
apiVersion: v1
kind: Namespace
metadata:
  name: fleet-local

---
apiVersion: provisioning.cattle.io/v1
kind: Cluster
metadata:
  name: local
  namespace: fleet-local
spec:
  kubernetesVersion: v1.25.9+rke2r1
  rkeConfig:
    controlPlaneConfig:
      disable:
      - rke2-snapshot-controller
      - rke2-snapshot-controller-crd
      - rke2-snapshot-validation-webhook

---
apiVersion: v1
data:
  agentToken: YWEgYmIgY2M=
  serverToken: YWEgYmIgY2M=
kind: Secret
metadata:
  name: local-rke-state
  namespace: fleet-local
type: rke.cattle.io/cluster-state

---
apiVersion: management.cattle.io/v3
kind: ClusterRegistrationToken
metadata:
  name: default-token
  namespace: local
spec:
  clusterName: local
status:
  token: aa bb cc

---
apiVersion: catalog.cattle.io/v1
kind: ClusterRepo
metadata:
  name: rancher-stable
spec:
  url: https://releases.rancher.com/server-charts/stable

The local cluster should immediately be provisioned with a fleet-agent pod.

Test report
Successful verified on rancher v2.9-06d0eb0e18bec11752905ed6e9e7bca811dfbb5e-head with fleet fleet:104.0.0+up0.10.0-rc.11.
On v2.9-head after deploying rancher, both values for apiServerCA and apiServerURL keys are present imediatelly in local-kubeconfig secret on local cluster.
It still takes some time, like 60s, to provision local Cluster resource in Fleet after initial login to rancher v2.9-head but not so long as before on 2.8.3-rc2 (5+mins). Also the error message about missing apiServerURL is not present anymore.


⚠ ClamAV has degraded performance

In 0b4f768, ClamAV (https://spamassassin.apache.org/) experienced degraded performance:

HTTP code: 200
Response time: 441 ms

Resolved: ClamAV performance has improved in a659459 after 5 minutes.


Attempting to fix a test failure when using the LCI parcelport

@JiakunYan Could you please merge this with your PR to see if that fixes the test failure you were seeing, please?

The HIP errors were caused by a problem on rostam


Trusted Channel changes for Change Keeper

Change Keeper - RK update on SC and SM approval (temp on relay or direct scan)

Closing this issue as discussed with dev.


Make the bot use exploits.

So, thats all in my title.
Lets say, ip <IP_ADDRESS> got a 80,0 hasher and a low firewall (or uninstalled one), if the bot cant enter by cracking it make him port scan the server and see if the target has his firewall uninstalled or something, so it can enter the server without being necessary to crack.
or atleast, make the bot to anote at the available VPCS those uncracked ones, so is more easily to manage them.
If you dont understand  tell me, so i can give a short text.

I can understand you. It's English, right?
Good suggestion. Thanks.

Yup is english, not my natal language.
#closing


Recategorize static-key-dict-comprehension from RUF011 to B035

Summary
This rule was added to flake8-bugbear. In general, we tend to prefer redirecting to prominent plugins when our own rules are reimplemented (since more projects have B activated than RUF).
Test Plan
cargo test

A few questions here to understand if this is safe to land under our versioning policy or if we need to delay it to the next major release:

Does this now enable the rule when a user enables the B rule group (enabling more rules)
Is the rule enabled when users use the RUFF selector?
Do noqa: RUF011 continue to work?

This is more of a question for our versioning policy: If I remember correctly, this changes the rule codes in diagnostics. We may need to consider this a breaking change because GitLab and other tools that track diagnostics over time now consider the RUF011 diagnostics as fixed but reports new B035 diagnostics.

Yeah, we may need to ship this as part of 0.2.0. Looking for input. To answer your questions:

Yes.
No. (It does if they select RUF011.)
Yes.


MINOR: fix broken build

Upstream ZK version bump, requires to add new dependency.

7.0.x actually does not have any build issue. Closing.


Error: In function void print() after installation

I have a problem with arrayfire-python. I followed all installation instructions, including adding directories to LD_LIBRARY_PATH:
$ echo $LD_LIBRARY_PATH
/opt/arrayfire/lib64/::/opt/cuda/lib64/:/opt/cuda/nvvm/lib64/
In /etc/ld.so.conf.d/arrayfire.conf I have /opt/arrayfire/lib64
However, when I try to run helloworld.py from examples, I get:
Platform: CUDA Runtime 11.2, Driver: 455.45.01
[0] GeForce GTX 1070, 8119 MB, CUDA Compute 6.1
Create a 5-by-3 matrix of random floats on the GPU

A
[Element-wise arithmetic

Error: In function void print(const char*, af_array, int, std::ostream&, bool) [with T = float; af_array = void*; std::ostream = std::basic_ostream<char>]
In file src/api/c/print.cpp:

Process finished with exit code 0

When I am in the python console and I change backend to CPU I get:
af.info()
ArrayFire v3.8.0 (CPU, 64-bit Linux, build d99887a)
[0] Intel: Intel(R) Core(TM) i7-3770 CPU @ 3.40GHz

when I change back to CUDA I get:
af.info()
ArrayFire v3.8.0 (CUDA, 64-bit Linux, build d99887a)
Platform: CUDA Runtime 11.2, Driver: 455.45.01
[0] GeForce GTX 1070, 8119 MB, CUDA Compute 6.1

So for me it looks like arrayfire correctly recognizes CPU and CUDA.
I found similar problem here: https://groups.google.com/g/arrayfire-users/c/_524PBvEvGw?pli=1 however it was not solved.
Also. when I try to run another code for which I installed arrayfire, I get this error:
File "/home/wojtek/anaconda3/envs/multi-layer-born/lib/python3.8/site-packages/arrayfire/util.py", line 79, in safe_call
raise RuntimeError(to_str(err_str))
RuntimeError: In function cuda::Module common::compileModule(const string&, const std::vector<std::basic_string<char> >&, const std::vector<std::basic_string<char> >&, const std::vector<std::basic_string<char> >&, bool)
In file src/backend/cuda/compile_module.cpp:

Process finished with exit code 1

which, as I believe, is related with the same issue.
Additional info:
I am using Anaconda, Python 3.8.5
Linux Manjaro 20.2.1

i have the same problem

i have the same problem

The solution to this problem can be found on Slack channel.
To cite:

I think its the order in which the libraries are loaded. Python 3 and some of the wheels use a standard library that conflicts with ArrayFire's standard library sometimes.

And the solution: write in terminal:
LD_PRELOAD=<full_path_to_libafcuda> python your_python.py
For example:
LD_PRELOAD=/opt/arrayfire/lib64/libafcuda.so python3 helloworld.py
If you want to add this environment variable in PyCharm, follow the instructions given here.
For me this solves the problem.

The solution to this problem can be found on Slack channel.
To cite:

I think its the order in which the libraries are loaded. Python 3 and some of the wheels use a standard library that conflicts with ArrayFire's standard library sometimes.

And the solution: write in terminal:
LD_PRELOAD=<full_path_to_libafcuda> python your_python.py
For example:
LD_PRELOAD=/opt/arrayfire/lib64/libafcuda.so python3 helloworld.py
If you want to add this environment variable in PyCharm, follow the instructions given here.
For me this solves the problem.


[SPARK-41488][SQL] Assign name to _LEGACY_ERROR_TEMP_1176 (and 1177)

What changes were proposed in this pull request?
This PR proposes to assign name to _LEGACY_ERROR_TEMP_1176 and _LEGACY_ERROR_TEMP_1177 as "INCOMPATIBLE_VIEW_SCHEMA_CHANGE",
Why are the changes needed?

We should assign proper name to LEGACY_ERROR_TEMP*
Does this PR introduce any user-facing change?

No
How was this patch tested?

Added negative SQL test.
./build/sbt "sql/testOnly org.apache.spark.sql.SQLQueryTestSuite*

cc @srielau @MaxGekk @cloud-fan

I referred to code path in sql/catalyst/src/main/scala/org/apache/spark/sql/catalyst/analysis/unresolved.scala below:
case class GetViewColumnByNameAndOrdinal(
    viewName: String,
    colName: String,
    ordinal: Int,
    expectedNumCandidates: Int,
    // viewDDL is used to help user fix incompatible schema issue for permanent views
    // it will be None for temp views.
    viewDDL: Option[String])

cc @cloud-fan @MaxGekk just for reminding 🙏

thanks, merging to master/3.4!

3.4 has conflicts, as INCOMPLETE_TYPE_DEFINITION is not in 3.4. @itholic can you help to check it? Ideally all error message improvements should go to 3.4 before RC.

Backport: https://github.com/apache/spark/pull/39833

btw, do we want to also include INCOMPLETE_TYPE_DEFINITION into 3.4 ?

is the PR adding INCOMPLETE_TYPE_DEFINITION very large? if it's large we can skip.

https://github.com/apache/spark/pull/39711 is the PR that added INCOMPLETE_TYPE_DEFINITION .
I think it's not so big, so let me address this within https://github.com/apache/spark/pull/39833 together.

Just included https://github.com/apache/spark/pull/39711 into https://github.com/apache/spark/pull/39833!
FYI @cloud-fan


Canvas lags and uses lots of CPU when rendering a super_node in a super_node

While working on a pipeline in Elyra I created a super_node inside a super_node and my instance Elyra started to lag and hang and become unusable. According to my Activity Monitor that tab of Safari was using over 80% of a CPU. It seems nested super_nodes consume an exponential amount of CPU.

@ajbozarth Hi Alex -- Can you provide the JSON for the pipeline flow you are providing to common-canvas that is causing the problem please?  Do you see a similar problem on Chrome and/or Firefox?

I did not check on other browsers, and here's the file:
v3-Copy1.pipeline.zip

@ajbozarth I just tried it with the test harness and that file comes up almost instantaneously on Safari on my Mac. I can navigate into and out of the sub-flows very quickly and I don't see an extraordinary CPU usage.
Can you try a similar experiment on your machine? Here's what you need to do :

Open the test harness: https://wdp-common-canvas-dev.stage1.mybluemix.net/#/
Click the hamburger icon (tooltip is 'Common Canavs') in the top right corner
Under Canvas Diagram click 'Choose an option' then in the menu click 'Choose from Location'
Click the 'Choose FIle'  button and then select the file you sent to me.
The name of the file should appear in the test harness panel, then click "Submit"
The flow should appear in your browser.

following those steps there's no lag, but the lag was mostly caused when creating the super_nodes which I couldn't test there because Create Supernode wasn't in the context menu

The 'Create Supernode' context menu option is available in the test harness.  You need to select a single node or contiguous nodes for it to appear. (See below).
I suspect you will find it works reasonably quickly. If so that  suggests the problem is not in common-canvas and perhaps something is going on in the application code that is calling common-canvas.

@ajbozarth Hi Alex -- Any news on this? Have you investigated further? Can this be closed?

Given this is not a blocker for the Elyra 3.0 release I have not had time to look into it further. I personally only ran into it while working on a edge test case

OK I'll close it. If you get time to investigate and can provide a bunch of steps that will reproduce the problem it can be reopened.


Remove khiops_env-Specific Attributes from the KhiopsLocalRunner Object

Description
Currently, the KhiopsLocalRunner object maintains a set of attributes that are directly derived from khiops_env.
However, with a sole exception (see below), khiops_env should be a "black box" for the Khiops Python library.
Thus, most such attributes should be removed.
Questions/Ideas

Specifically, the following attributes should be removed:

max_cores
max_memory_mb
khiops_temp_dir

However, the _khiops_path, _khiops_coclustering_path and _mpi_command_args (to be renamed to _khiops_mpi_command to match khiops_env naming conventions) should be kept, as they are needed to compose, by concatenation, the full path to the Khiops command / to get the Khiops Coclustering command.

It isn't enough to render them private ?


fix: [Sign & submit] Update success alert content

Close #722
How to review
Compare against the design file
Screenshots

@meissadia - Looks good to me!

Added fix for source of warnings/error counts.


Embed question page

For #77.

This is beautiful

See also: https://github.com/ForumMagnum/ForumMagnum/pull/4907 and https://github.com/ForumMagnum/ForumMagnum/pull/4907 for how to integrate this with LW

https://github.com/ForumMagnum/ForumMagnum/pull/4907 and https://github.com/ForumMagnum/ForumMagnum/pull/4907

These links are identical, should one of them be different?

Yeah, changed

Some updates:

moved "capture" and "embed" inside the question card
restyled headings
capture image is now resizable with re-resizable
preview link for embed

(I plan to implement LW embeds and #89 in separate PRs, this one is for embed feature only)

Also: section anchor links, because why not.

Oops, my push failed and I haven't noticed. Will open a separate PR.


stateless session multitenancy support

Fixes #766

Thanks. There are still a couple of things missing, I will send a new pr with the changes.


chore: Update action versions

Node.js v12 and save-state/set-output will be deprecated in the future. Updating external actions with the latest versions to prepare for that.

@avocadowastaken Can you make a new version release with new updates, please?

Hey @timurhamitov ! Thanks for the contribution! Sorry, I merged it through the phone, and forgot to release it after.
Released in https://github.com/avocadowastaken/actions/releases/tag/v2.2.0

Great! Thank you a lot @avocadowastaken!


scripts: tests: Harness not working properly

Describe the bug
Test pytest-twister-harness seems to not be working. After bisect this commit 3e234966dc46e41b1fa55a9a0e92589a6a9e7fdc is causing issues.
To Reproduce
Steps to reproduce the behavior:
pytest ./scripts/pylib/pytest-twister-harness/tests
Expected behavior
Test pass
Impact
Affects CI
Logs and console output
FAILED scripts/pylib/pytest-twister-harness/tests/fixtures/mcumgr_fixture_test.py::test_if_mcumgr_fixture_parse_image_list - AssertionError: expected call not found.
Expected: mock('image test 1111')
Actual: mock('image test 0000')
more on https://github.com/zephyrproject-rtos/zephyr/actions/runs/7668713726/job/20901070478
Environment (please complete the following information):

OS: Linux
Toolchain: zephyr-sdk-0.16.4
Commit 64423e269e

Just fixing the test will not prevent future similar issues.
The base cause is the fact that tests acting on files outside twisterlib have been added to automatic tests, while not adding those files to the GitHub automatic PR checks.
At the very least scripts/pylib/pytest-twister-harness/* must be added to on: part of tiwster_tests.yml.


Consider using CommonJS code generation instead of esnext

Because this module uses the 'esnext' code generation setting in tsconfig.json, it is difficult to consume from a NodeJS application since Node does not support ES6 modules in a straightforward way (it either requires some experimental flags or using babel to transpile the ES6 module into CommonJS, as far as I can tell).
It would be nice if this was a CommonJS module instead so it could be directly consumed by a NodeJS app.
I changed a local version of ts-describe-action from esnext to CommonJS to test and was then successfully able to use it in both a NodeJS app (yay!) and a web/webpack app.  As such, I don't know if there are any downsides to switching from esnext to CommonJS.

Thanks for the feedback! Sure :)

I released & published new version 2.1.1
It has have both nodejs and esnext modules
commit details: https://github.com/twop/ts-describe-action/commit/4fa5b756f46c8be05e8b7a43b1b9ae30542c7017

@AE-MS checkout new api in 2.2.0 version. Note it is fully backwards compatible

Great, thanks!


FOPTS-711 Add Google Rightsize Recommendation Policy

Description
This change adds to the catalog the policy Google Rightsize Recommendation Policy, this one is very similar to Google Idle Recommendation Policy, but uses a different recommender.
Issues Resolved

FOPTS-711: The client at Generali (GOSP) have raised the issue that the Google Rightsizing Policy is NOT available within the Automation Catalog.

Link to Example Applied Policy
https://app.flexeratest.com/orgs/1105/automation/applied-policies/projects/107982?policyId=6449a02d4a6748000178a58a
Contribution Check List

[ ] New functionality includes testing.
[X] New functionality has been documented in the README if applicable
[X] New functionality has been documented in CHANGELOG.MD

@midir99 quick question regarding the title of this PR - is the JIRA ticket number correct? I can also see another PR (which looks unrelated) with FOPTS-711 in the title as well

@midir99 quick question regarding the title of this PR - is the JIRA ticket number correct? I can also see another PR (which looks unrelated) with FOPTS-711 in the title as well

@nia-vf1 Yes, the number is correct, this is the ticket: https://flexera.atlassian.net/browse/FOPTS-711
I renamed the other PR, since that one was not related to this. Thanks for catching that 😀.


Whitelist -> hidemyass.com

hidemyass.com is legit site (VPN)

Thanks Lorenzo @scafroglia93 — I have reported this to Tomasz over in the add.Risk repo: https://github.com/FadeMind/hosts.extras/issues/31

This is fixed in the 2.6.0 release, Lorenzo @scafroglia93.
Closing.


Upgrade: npm update

:tada: This PR is included in version 1.0.3 :tada:
The release is available on:

GitHub release
npm package (@latest dist-tag)

Your semantic-release bot :package::rocket:


cutter: Add cutter v2.0.5 (Moved from main)

Closes N/A (Can open one if needed), related to ScoopInstaller/main#3268

[x] I have read the Contributing Guide.

@rashil2000

/verify

Do we still need the rz-*.exe shims in a GUI app?
(I'm assuming they're the same ones we add in the package in Main).

Since cutter vendors rizin and we provide a rizin shim it makes sense to me to include them. Rizin/Cutter is quite an in development so there might be a need to use the same version of rizin cutter itself uses.


Not drawing a bounding box on second try

Fire Fox 26 - Tile Viewer - Not able to do two or more Geopackages in one image. Will not draw a bounding box on the second try.

Could not replicate this issue on latest baseline.  I was able to create consecutive .gpkg files without issue.  Closing ticket.


Update dependencies and make more optional

Coverage remained the same at 86.534% when pulling cc2614f47e73543578023872fa2c80e111e17e60 on philipc:deps into 9630b7442c17e1b3d87ece81bdf17107bfb673e4 on gimli-rs:master.


🐞 Bug – a elements without href causes page reload

See for more details and a solution
https://stackoverflow.com/questions/52708345/a-elements-without-href-or-with-an-empty-href-causes-page-reload-when-using-br

Perhaps relatedly, I think in general links are a bit broken
If you have a page like /test?a=2, where you evaluate the querystring in init, then you have a link like /test; it not only doesn't re-evaluate the init; it doesn't change at all; which feels wrong.
I think there needs to be a way to customise the link behaviour.

Hey @domenkozar, I've changed the generated code to produce this:
        UrlRequested (Browser.External url) ->
            if String.isEmpty (String.trim url) then
                ( model, Cmd.none )

            else
                ( model
                , Browser.Navigation.load url
                )

This bugfix will go live with #173

Good news– I just released 📦 Elm Land v0.20.0 which resolves this issue (more details in the release linked above)
Thanks for improving Elm Land! 🌈


core.udpsocket.getInfo guesses the bound address

This is kinda funny -- it's hard-coded to localhost:
https://github.com/freedomjs/freedom-for-firefox/blob/master/providers/core.udpsocket.js#L23
Presumably, this is because of the extra work required to decode the NetAddr:
https://dxr.mozilla.org/comm-central/source/mozilla/netwerk/base/nsIUDPSocket.idl#124
Noticed this while working on uProxy obfuscation, which really needs to know the bound address (fortunately not a blocker because in the function in question, we can always just bind to <IP_ADDRESS>).

Fixed, I think! TURN server in uproxy-lib now works fine, too.


Added cent-os to CI tests

Summary
Continuous integration is now also testing CENT-OS, useful since candide runs on that OS.
Solves #633
Reviewer Checklist

Reviewers should tick the following boxes before approving and merging the PR.

[ ] The PR targets the develop branch
[ ] The PR is assigned to the developer
[ ] The PR has appropriate labels
[ ] The PR is included in appropriate projects and/or milestones
[ ] The PR includes a clear description of the proposed changes
[ ] If the PR addresses an open issue the description includes "closes #"
[ ] The code and documentation style match the current standards
[ ] Documentation has been added/updated consistently with the code
[ ] All CI tests are passing
[ ] API docs have been built and checked at least once (if relevant)
[ ] All changed files have been checked and comments provided to the developer
[ ] All of the reviewer's comments have been satisfactorily addressed by the developer

Not sure it is working. The CI test gets stuck at
Waiting for a runner to pick up this job...

@martinkilbinger this might mean that they don't have many servers available with that OS. I don't even see centos-latest listed as one of the available runners. Did you check that this image exists somewhere?

I could not find it either anywhere. So maybe we cannot run this test.

In principle, we could set up a Self-Hosted Runner on a machine where we can put a CentOS image. Then we could probably make a separate manually triggered CI workflow for running tests with this runner.
This should not be too difficult to set up, but I don't think it is the most urgent issue to resolve.


Registration doesnt get finalized unless DCC approves it.

A course should show up as registered in an individual's course plan only after DCC's approval. Till then it has to be pending DCC approval.

Fixed.


x/sys/unix: Pselect does not call pselect6 properly on Linux

unix.Pselect is implemented via the pselect6 syscall. The Linux man page says the following:

The final argument of the pselect6() system call is not a sigset_t * pointer, but is instead a structure of the form:
   struct {
       const sigset_t *ss;     /* Pointer to signal set */
       size_t          ss_len; /* Size (in bytes) of object pointed
                                  to by 'ss' */
   };

However, the unix package does not follow this.
func Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
	r0, _, e1 := Syscall6(SYS_PSELECT6, uintptr(nfd), uintptr(unsafe.Pointer(r)), uintptr(unsafe.Pointer(w)), uintptr(unsafe.Pointer(e)), uintptr(unsafe.Pointer(timeout)), uintptr(unsafe.Pointer(sigmask)))
	n = int(r0)
	if e1 != 0 {
		err = errnoErr(e1)
	}
	return
}

@rittneje, do you want to send a CL to fix this?
(CC @ianlancetaylor @bradfitz @tklauser per https://dev.golang.org/owners)

@bcmills unix.Pselect is auto-generated code, so I'm not sure how to fix it.

unix.Pselect is generated from a directive in syscall_linux.go.
I expect the general form of the fix would be:

Change the existing directive to have a new, unexported name (pselect6) with the correct signature, and re-run the generator, something like:

type pselect6Sigset_t {
	ss *Sigset_t
	ssLen uintptr  // Size (in bytes) of object pointed to by ss.
};
//sys pselect6(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *pselect6Sigset_t) (n int, err error)

Add a new, manually-written func Pselect that implements the old signature in terms of the new function:

func Pselect(nfd int, r *FdSet, w *FdSet, e *FdSet, timeout *Timespec, sigmask *Sigset_t) (n int, err error) {
	// Per https://man7.org/linux/man-pages/man2/select.2.html#NOTES,
	// “The Linux pselect6() system call modifies its timeout argument.
	// [Not modifying the argument] is the behavior required by POSIX.1-2001.”
	var mutableTimeout *Timespec
	if timeout != nil {
		mutableTimeout = new(Timespec)
		*mutableTimeout = *timeout
	}

	// “The final argument of the pselect6() system call is not a
	// sigset_t * pointer, but is instead a structure …”
	var kernelMask *pselect6Sigset_t
	if sigmask != nil {
		kernelMask = &pselect6Sigset_t{
			ss: sigmask,
			ssLen: unsafe.Sizeof(*sigmask),
		}
	}

	return pselect6(nfd, r, w, e, mutableTimeout, kernelMask)
}

Plus a regression test, of course. 🙃

Not sure I will be able to submit the patch as it will be somewhat complicated.
Unfortunately, ss_len is not just sizeof(sigset_t) because that would be too easy. From traversing through glibc, these are the defines that are relevant:
#define __WORDSIZE	64 // or 32
#define ULONG_WIDTH __WORDSIZE
#define UCHAR_WIDTH 8

#define ALIGN_DOWN(base, size)	((base) & -((__typeof__ (base)) (size)))

#define ALIGN_UP(base, size)	ALIGN_DOWN ((base) + (size) - 1, (size))

#define __NSIG_WORDS (ALIGN_UP ((_NSIG - 1), ULONG_WIDTH) / ULONG_WIDTH)

#define __NSIG_BYTES (__NSIG_WORDS * (ULONG_WIDTH / UCHAR_WIDTH))

You then need to pass _NSIG_BYTES for ss_len. (On my machine it works out to be 8.)
Somehow x/sys/unix already knows _NSIG, so at least part of the work is done. Not sure exactly how that works though.
In terms of regression testing, this currently fails with an error "invalid argument":
	v := &unix.Sigset_t{}
	v.Val[0] = ^v.Val[0]
	n, err := unix.Pselect(0, nil, nil, nil, &unix.Timespec{Sec: 1}, v)

After correcting it to call pselect6 properly it succeeds. (I'm not sure how unix.Sigset_t is intended to be used since it doesn't appear sigaddset, etc. were mapped.)

I think this is how to compute ss_len: https://go.dev/play/p/p6sodpgiXoB

@rittneje In triage here, so I added the "help wanted" since I wasn't sure if you're pursuing the patch for this. Please feel free to let me know if you are, and I'll drop the label. Thanks!

Just pushed a CL: https://go-review.googlesource.com/c/sys/+/510195

This is fixed, it looks like! Thanks.


distclean doesn't include dependencies of specified ports

Prerequisites

[x] Have you checked for an existing issue describing your problem?
[x] Are you running the latest version?
[x] Is your ports tree recent?
[x] Is your FreeBSD Host on a supported release?

Describe the bug
Like (probably most) poudriere users, I keep a build list in a file I give to bulk using the -f argument. If I use that same file as an argument to distclean, it will only check against the ports explicitly listed in that file.
How to reproduce
Steps to reproduce the behavior:

Use with distclean -f the same file you use for bulk -f
See distclean want to delete any distfile that isn't for one of the ports explicitly listed in the file

Expected behavior
That distclean would do dependency expansion on the ports listed in the -f file
Environment

Host OS [e.g. 12.2 amd64]: 12.2-RELEASE-p10
Jail OS [e.g. 12.0 powerpc]: 12.2-RELEASE-p10
Browser: [e.g. chrome, safari]: n/a
Poudriere Version [e.g. 3.3.1 or git hash or port version]: poudriere-devel-<IP_ADDRESS>10907_1
Ports branch and revision [e.g. 2020Q3 r550754]: HEAD 18c37b932

Like #838, distclean is intended to keep everything listed and their dependencies, and delete anything not among those lists. Most likely the reason it did not work reliably was fixed in commit fb8d95e3b01c774e4e0fdc205b0fad57851b3400. I'll update the port with the fix later today.

Oh I do see the issue being reported here now. Surprised this was missed for so long.

#710 and #487 will need to be fixed for this to properly work as well.


Application Form

This is an Application Form , made with the help of HTML and CSS.
You can use this , when you want a quick ,yet an effective Form with features that lets you insert any file from your system and all the other features , required to create a good Application Form.

Assign me the task !

Assign me the task !


Channel timeout related issue

Boost Version: 354
When opening two WebSocket channels, for example, ws:/../channel1/ and ws:/../channel2/, I have made changes to enable communication between the two channels.
I have set the timeout to 30 seconds using the following code:
beast::websocket::stream_base::timeout opt{
    std::chrono::seconds(30),
    std::chrono::seconds(30),
    false
};
ws_.set_option(opt);

However, the issue is that say both channels are opened at the same time. If, after 15 seconds, communication occurs between the two channels (e.g., from channel1 to channel2), the timeout for channel1 will restart and close the connection after 45 seconds(15+30 =45;from beginning). But for channel2, even though it is receiving messages, its timeout does not reset and will close exactly after 30 seconds, which I don't want.
One possible solution is to keep the alive_pings set to true so the channel remains open, but I prefer not to use this approach, as it could increase the server load.
Could you suggest another solution to handle this?
Additionally, I have another question: If we implement a ping-pong mechanism, where the server receives a ping and responds with a pong to the client, would this reset the timeout? And how can I test this?

One possible solution is to keep the alive_pings set to true so the channel remains open, but I prefer not to use this approach, as it could increase the server load. Could you suggest another solution to handle this?

Currently, only pong responses reset the timeout timer, so setting alive_pings to true is the only available option. There’s an open PR for this issue (https://github.com/boostorg/beast/pull/2718), but I haven’t merged it yet because the unit tests rely on a few timers, which makes them unreliable. I’ll work on resolving this and aim to merge it for the next Boost 1.88 release.

My understanding with regard to pong responses is that if the client side sends a ping and we send a pong then the channel will remain open even if we set the alive_pings as false?

My understanding with regard to pong responses is that if the client side sends a ping and we send a pong then the channel will remain open even if we set the alive_pings as false?

The internal inactivity timer is updated whenever the stream receives a message or a pong in response to a previously sent ping. keep_alive_pings controls whether the stream sends a ping message. It does not affect when the stream should be closed.


chore(release): update image version to v0.9.2-rc.1

Description:

[X] I have cherry-picked any changes labelled needs-cherry-pick-vX.Y.Z

[X] I have made all of the following version and patch updates:

Updated the container image tag in charts/osm/values.yaml
Updated the chart and app version in charts/osm/Chart.yaml
Updated the image tags used in the demo manifests
Regenerated the Helm chart README.md

[X] I have checked that the base branch for this PR is correct as defined by the release guide

Is this a release candidate? yes
Signed-off-by: Sneha Chhabria<EMAIL_ADDRESS>

Codecov Report

Merging #4001 (bfd9eb6) into release-v0.9 (c59fe95) will not change coverage.
The diff coverage is n/a.

@@              Coverage Diff              @@
##           release-v0.9    #4001   +/-   ##
=============================================
  Coverage         66.63%   66.63%
=============================================
  Files               171      171
  Lines              9249     9249
=============================================
  Hits               6163     6163
  Misses             3052     3052
  Partials             34       34

Flag
Coverage Δ

unittests
66.63% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files
Coverage Δ

cmd/cli/mesh_upgrade.go
45.28% <ø> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c59fe95...bfd9eb6. Read the comment docs.


Bad link in README.md file

Hi,
In the README.md file, the link AppImage catalog v2 brings me by many redirections to a phishing french web site for window user (https://d22joe5tki8jaf.cloudfront.net/CCH88xe/#)

Best Regards
Francis Gernet (🇫🇷)
Linus user

Thanks for reporting it. Fixed on https://github.com/srevinsaju/zap/commit/521b21819bc7fb4c3b10dd36d595db674ec399eb


Settled expense reports prioritised too high in LHN ordering

Problem
The ordering of the LHN is incorrect. Settled IOUs remain higher in the LHN ordering than chat reports with newer messages.
In the following screenshot, 'THIS IS A CHAT REPORT' is the most recent message:

Solution
Yes

Once IOU/Expense report is settled, we should treat it as a normal chat so the order should be based on the last time of some report action.

Can we float this in C+ this morning?

@Julesssss I believe there was some discussion around this in slack and it might have been that the order is correct, do you recall?

I don't recall that discussion. Next time I'm testing IOUs locally I'll see if it still exists.

Think this is resolved, testing with Vit today.

Yep, I no longer seem to see the reordering:

Closing


Media Player Echo availability issue in HA

Describe the bug
Echo becomes unavailable in the Echo Media Player integration
To Reproduce
Steps to reproduce the behavior:
Posting this as a possible bug in Git
Echo Firmware:<PHONE_NUMBER> (not Echo Dot)
My Echo appears also to be unavailable now.
Reinstall Integration
Restart HA
Both Echo playing music when HA restarted
Echo unavailable
Reload Integration
Echo unavailable
Restart Music
Echo unavailable
Restart HA
Music playing on echo
Echo unavailable
Restart Echo
Echo available for 45s then unavailable
Start a song or pause a song or change the volume
Echo available for ±3s (yes 3s) then unavailable
Echo play next song
Echo available for ±3s then unavailable
Expected behavior
Echo should always be available unless disabled or off
Screenshots
NA
System details

Home-assistant (version):  Home Assistant 2022.7.6 Frontend 20220707.1 - latest

Hassio (Yes/No):  HA on UNRaid uses docker containers HA Core

alexa_media  (version from const.py or HA startup):

alexapy (version from pip show alexapy or HA startup):  Name: alexapy Version: 1.26.1

Amazon 2FA is enabled (y/n). We will not debug login issues if unanswered:
I did do it so yes i guess?

Logs
Please provide logs. We'll be most likely asking for them anyway.
Logs attached
HA-Alexa_media-Player.txt
Additional context
Add any other context about the problem here.

Please provide a screenshot of the history of the echo along with it's entity name so I can check it in the logs. The logs are showing player state. Is it all devices? Just one, etc.

There are two Echo's but the one I tested is called "Bedroom Echo"
To which echo history are you referring? I thought that was the logs.

There are two Echo's but the one I tested is called "Bedroom Echo"

No such echo exists. This is what is being detected. Did you rename them at some point? The closest echo is  Echo. That's a space before the name echo.
2022-07-23 18:04:20 DEBUG (MainThread) [custom_components.alexa_media.helpers] : Adding [<Entity Lounge Echo: unavailable>, <Entity  Echo: unavailable>, <Entity Everywhere: unavailable>, <Entity This Device: standby>]

AAh right my oops! Sorry. It was sanitized for no reason....aaargh

I'm a bit confused. Is that the echo I should be reviewing? The logs show it's updating status but if your HA is reporting an old entity that doesn't exist, then it will stay unavailable. In that case, you probably need to find the correct entity in HA.

Sorry for the confusion. the " Echo" or the Echo with the "space', the plain Echo, is the one. Not the Lounge Echo

Double check all the entities in HA. It says it's updating.

Updated HA but Alexa Media Player still only shows Echo connected for a short while when activated for playing music or when she is asked a question. then the Echo becomes unavailable as in the image below.

Not sure what's going on. It should be updating but isn't calling the right url. /api/np/player. Perhaps uninstall it complete and clean out your device registry.

Your log is missing all the requests to the Alexa servers. No idea why.
2022-07-27 17:30:48 DEBUG (MainThread) [alexapy.alexaapi] a******e@g*******m: GET: https://alexa.amazon.com/api/np/player?deviceSerialNumber=XXX&deviceType=AB72C64C86AW2&screenWidth=2560&_=1658968248355 returned 200:OK:application/json

Ok thx for that update. What do you suggest I do next?

I had the same issue as OP, resolved by factory resetting my echo dot, re-adding it to my amazon account, removing this integration, restarting HA, then going through AMP setup again.

@jvb93 ok that sounds arduous! But i will have to try as that is the only suggestion offered so far. I will report back on its success or not :-)

is the only suggestion offered so far

I'm pretty sure I did tell you a potential work around.

is the only suggestion offered so far

I'm pretty sure I did tell you a potential work around.

Hi, I have the same issue. Could you explain how to do that ? I don't know how to clean the device registry.

So I removed the AMP integration and searched for devices in core.device_registry and core.entity_registry. But I still have enitites that are not available and can not delete them

Can someone help ?

okay I did an update of HA and it seems to solve the issue with the entities. Nevertheless, after reinstalling the AMP Integration the devices are still not available. So I can not confirm that uninstalling the integration and cleaning the device registry can not fix this issue on my side.

Since nobody answered my questions I will just do an update with what I have figured out. So I have removed the integration an readded it with correct region. In my case I had to use "amazon.de" instead of "amazon.com". After that all amazon devices worked fine for me.
@ionultd maybe that could be one possible issue

See this section in the wiki
https://github.com/custom-components/alexa_media_player/wiki/FAQ#all-my-media_players-are-unavailable-and-the-component-doesnt-work

Thanks for the replies @MrockHunter12 and @jvb93 but I believe my issue is not related to that as I am in NZ and my region is AUS the only one for us. I am have held off on doing what @jvb93 suggested till this upcoming weekend when I am able to do this. I will report back the results though. Again thx

I am in NZ and my region is AUS the only one for us

If this is true, you're not putting in the correct Alexa domain is all communications in your log are for .com and not .au. Your devices are also registered in the US and not in AUS. No idea what interactions you may see if you're doing that.


Handover documentation

Documentation on how to start program with docker or locally. Also add documentation of how data should be formated

Just a thought, Sectra are using mostly Windows machines but a big chunk of the documentation is written from a Linux stand point. Maybe that is something we should take into account? Apart from this it looks good!


tutorial for debugging info

Description

in angr-doc
requires an example

Alternatives
No response
Additional context
No response

done in lks9/angr-doc@f0f7de2


aws: use gp3-csi storage class by default

Currently we use the default gp2 volumes for etcd's PV because we don't default a storage class in the EtcdSpec so the cluster uses the default storage class, which is still gp2.
Because the default size of the volume is 4Gi and IOPS are provisioned proportial to size in gp2, the PV only has 100 IOPS and could be the cause of our CI troubles.  gp3 is 3000 IOPS at any size.
Switch to gp3 volumes by default, provided by the gp3-csi storage class in OpenShift, for etcd PVs.
Oh, and it is cheaper.

/lgtm

/retest-required


Windows builds needed

I have noticed that the conda-forge channel does not include binaries for windows, while defaults channel does.
Is there a plane to set up the windows build for the conda-forge channel as well? Is anyone working towards this?

First place to start would be to make freetds windows builds. I don't currently have a windows machine to easily test this with.


Fix type hints issue from Rohmu 1.2.0

About this change - What it does
Fixes the issues that appeared with Rohmu 1.2.0.
To be noted that it requires the following changes on rohmu's side: https://github.com/Aiven-Open/rohmu/pull/150 and hence, it will not pass until a new Rohmu version can be released.

Resolves: #xxxxx
Why this way

Codecov Report

Merging #606 (cdb8208) into main (c6d3db4) will decrease coverage by 0.10%.
The diff coverage is 89.18%.

:exclamation: Current head cdb8208 differs from pull request most recent head eeb6034. Consider uploading reports for the commit eeb6034 to get more accurate results

@@            Coverage Diff             @@
##             main     #606      +/-   ##
==========================================
- Coverage   91.35%   91.26%   -0.10%
==========================================
  Files          32       32
  Lines        4710     4727      +17
==========================================
+ Hits         4303     4314      +11
- Misses        407      413       +6

Files
Coverage Δ

pghoard/basebackup/base.py
92.25% <100.00%> (ø)

pghoard/basebackup/chunks.py
96.85% <100.00%> (+0.01%)
:arrow_up:

pghoard/restore.py
89.61% <100.00%> (ø)

pghoard/transfer.py
98.69% <100.00%> (+<0.01%)
:arrow_up:

pghoard/basebackup/delta.py
95.29% <84.61%> (-0.66%)
:arrow_down:

pghoard/common.py
93.20% <87.50%> (-0.21%)
:arrow_down:

... and 2 files with indirect coverage changes


addresses array add-delete-add cacheing bug fixes #504

followed up on @ivan4th's solution, but also takes care of node removal, and removal of child nodes if the child nodes are also arrays.

@jdorn Will this be merged? If there are still conflicts I volunteer to resolve them. This array add/remove bug is causing me a bit of pain.


Beta

Doneness:

[X] Build is okay - I made sure that this change is building successfully.
[X] No Bugs - I made sure that this change is working properly as expected. It doesn't have any bugs that you are aware of.
[ ] Branching - If this is not a hotfix, I am making this request against develop branch

:white_check_mark: Build Titanium-Web-Proxy 3.0.285 completed (commit https://github.com/justcoding121/Titanium-Web-Proxy/commit/1bb83bbd22 by @honfika)


Correct whitespace problem in command

Also add correction on wether add the debug tag on libs name as stated here : https://github.com/conan-io/conan/issues/681
The "g" tag should not depend on MDd or MTd but on the build type.

Whoopps sorry for the closing/opening still not used to git :)
I also should have done two pull requests... I'll do better next time.

Hi @dkgs, about the name change Boost_USE_DEBUG_RUNTIME to Boost_USE_DEBUG_TAG, I don't want to change anything from the OriginalFindBoost* files, there are copied from CMake installations.
About the comparison with compiler.runtime, What's the problem? Any bug detected? Any build failing? Compare with Debug flag is a different thing, because in Linux and OSX you don't have compiler.runtime but you have build_type.
About the quotes in the command line :+1:
Thanks!

@lasote Yes, I encountered the problem when building in Debug mode with MD in release (even though it was a mistake) : the error was that the boost library was not found because it was named with a "g" and CMake didn't care to search it with a "g" because MD was used (hence the comparison with build_type instead of compiler.runtime).
For the difference between Windows & Linux, the "g" is added by CMake only on Windows, so there is no risk on this side.
About the name change, from Boost_USE_DEBUG_RUNTIME to Boost_USE_DEBUG_TAG, well I just found it more appropriate as the "g" is present wether you link to MD or MDd or MT or MTd. But if it is present in the original CMake installation, then it goes against the conclusion a read here : https://github.com/conan-io/conan/issues/681 because in this case the Debug build would be associated with a debug runtime.

Ok, so let's keep Boost_USE_DEBUG_RUNTIME name to keep intact the original and update the PR to see if it broke something.

You still have changes in OriginalFindBoost* files

done :) I'm editing directly in Github, so I have to do it file by file ^^

Oww, @lasote AppVeyor didn't pass because CONAN_CURRENT_PAGE=28 & CONAN_CURRENT_PAGE=30 failed due to a remote connection failure, is it possible to just relaunch them ?

@dkgs not needed. I'm merging it. THANKS! :dancer:


How to uninstall it?

I find didn't had much succest with it, so i want to undo the changes made. Is there an easy way to do it?

Delete directory ~/bin/win-sudo.
Delete the line saying [ -f ".../bin/win-sudo/s/path.sh" ] && source ".../bin/win-sudo/s/path.sh" from ~/.bashrc or ~/.bash_profile (not sure which file contains that line -- maybe both).

Hope that helps.


New google logo

Any plans to update to the new google logo?

Icons are not part of this repo.. I'm using the Font-Awesome as an example.. so whenever they will get an update: https://github.com/FortAwesome/Font-Awesome/issues/7367


DSC resource ArcGIS_Server_TLS  failed to execute Set-TargetResource functionality with error message: ERROR: ArcGIS.Common.psm1 failed. Importing CA certificate failed.

<!--- Please keep this note for the community --->
Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request

Module Version

4.0.2

Affected Resource(s)

ArcGIS_Server
ArcGIS_Portal
DataStore
ServerWebAdaptor
PortalWebAdaptor

Configuration Files

# Copy-paste your DSC JSON configurations here - for large configs,
# please use a service like Dropbox and share a link to the ZIP file.

BaseDeployment_SingleMachine.zip

Expected Behavior

Install ArcGIS Data Store, Server, Portal, Server and Portal web adaptors on a single machine
Actual Behavior

Installation failed with the following error message.
PowerShell DSC resource ArcGIS_Server_TLS  failed to execute Set-TargetResource functionality with error message:
ERROR: ArcGIS.Common.psm1 failed. Importing CA certificate failed.
The SendConfigurationApply function did not succeed.
Steps to Reproduce

Run the attached script
Important Factoids

References

Hi @minagim,
Thank you for providing the dsc deployment logs and json config file. I am curious does the certificate password contain any special characters (if so could you share which one(s))? Also, did the import succeed for portal? And lastly, does the certificate import successfully when manually imported using the ArcGIS Server Admin endpoint?
Thanks,
Cameron K.

Hi, Cameron.
Thanks for looking into my problem.
Yes, the password does include one special character *.  I can try it without.  I've done multi machine setups before in earlier versions and I didn't have any issues with the same password.
For the other question, I think the set up didn't reach the portal config yet.  This error was during the ArcGIS Server setup after installation.
Hope this helps. Please let me know if you have any other questions.
Thanks,
Mina
From: Cameron Kroeker @.>
Sent: Wednesday, January 25, 2023 12:09 PM
To: Esri/arcgis-powershell-dsc @.>
Cc: Kim, Mina (Parks) @.>; Mention @.>
Subject: [EXTERNAL] Re: [Esri/arcgis-powershell-dsc] DSC resource ArcGIS_Server_TLS failed to execute Set-TargetResource functionality with error message: ERROR: ArcGIS.Common.psm1 failed. Importing CA certificate failed. (Issue #446)
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.  Forward suspect email to<EMAIL_ADDRESS>as an attachment (Click the More button, then forward as attachment).
Hi @minagimhttps://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fminagim&data=05|01|mina.kim%40parks.nyc.gov|d45e3e5164b241eca48308dafef6d557|32f56fc75f814e22a95b15da66513bef|0|0|638102633367780517|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D|3000|||&sdata=5b%2B2lTV%2FKPG2QsKZJWOzJlu7NXqJxyv5%2F7K2CP%2FRgd0%3D&reserved=0,
Thank you for providing the dsc deployment logs and json config file. I am curious does the certificate password contain any special characters (if so could you share which one(s))? Also, did the import succeed for portal? And lastly, does the certificate import successfully when manually imported using the ArcGIS Server Admin endpoint?
Thanks,
Cameron K.

Reply to this email directly, view it on GitHubhttps://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FEsri%2Farcgis-powershell-dsc%2Fissues%2F446%23issuecomment-1403949947&data=05|01|mina.kim%40parks.nyc.gov|d45e3e5164b241eca48308dafef6d557|32f56fc75f814e22a95b15da66513bef|0|0|638102633367780517|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D|3000|||&sdata=hcKoc4ALO7FpW5oVuSfy8mL1ZJEGJYUHDUXrkH01ivg%3D&reserved=0, or unsubscribehttps://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAORJUUICNPGEFOOZ4S6SZRLWUFM2DANCNFSM6AAAAAAUFYGXDI&data=05|01|mina.kim%40parks.nyc.gov|d45e3e5164b241eca48308dafef6d557|32f56fc75f814e22a95b15da66513bef|0|0|638102633367780517|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D|3000|||&sdata=WtbWyBXm8MFuiSAuD1hl1lOuOqw96hCYMMzyVPHhiLI%3D&reserved=0.
You are receiving this because you were mentioned.Message ID: @.***>

Hi, Cameron.
I just tested with the cert password changed with only letters and numbers and I got the same error message.
@.***
The ArcGIS Server is set up with DNS:6443 but not with the DNS alone with the certificate.
Mina
From: Kim, Mina (Parks)
Sent: Wednesday, January 25, 2023 12:23 PM
To: Esri/arcgis-powershell-dsc @.>; Esri/arcgis-powershell-dsc @.>
Cc: Mention @.***>
Subject: RE: [EXTERNAL] Re: [Esri/arcgis-powershell-dsc] DSC resource ArcGIS_Server_TLS failed to execute Set-TargetResource functionality with error message: ERROR: ArcGIS.Common.psm1 failed. Importing CA certificate failed. (Issue #446)
Hi, Cameron.
Thanks for looking into my problem.
Yes, the password does include one special character *.  I can try it without.  I've done multi machine setups before in earlier versions and I didn't have any issues with the same password.
For the other question, I think the set up didn't reach the portal config yet.  This error was during the ArcGIS Server setup after installation.
Hope this helps. Please let me know if you have any other questions.
Thanks,
Mina
From: Cameron Kroeker<EMAIL_ADDRESS>Sent: Wednesday, January 25, 2023 12:09 PM
To: Esri/arcgis-powershell-dsc<EMAIL_ADDRESS>Cc: Kim, Mina (Parks<EMAIL_ADDRESS>Mention<EMAIL_ADDRESS>Subject: [EXTERNAL] Re: [Esri/arcgis-powershell-dsc] DSC resource ArcGIS_Server_TLS failed to execute Set-TargetResource functionality with error message: ERROR: ArcGIS.Common.psm1 failed. Importing CA certificate failed. (Issue #446)
CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.  Forward suspect email to<EMAIL_ADDRESS>as an attachment (Click the More button, then forward as attachment).
Hi @minagimhttps://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fminagim&data=05|01|mina.kim%40parks.nyc.gov|d45e3e5164b241eca48308dafef6d557|32f56fc75f814e22a95b15da66513bef|0|0|638102633367780517|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D|3000|||&sdata=5b%2B2lTV%2FKPG2QsKZJWOzJlu7NXqJxyv5%2F7K2CP%2FRgd0%3D&reserved=0,
Thank you for providing the dsc deployment logs and json config file. I am curious does the certificate password contain any special characters (if so could you share which one(s))? Also, did the import succeed for portal? And lastly, does the certificate import successfully when manually imported using the ArcGIS Server Admin endpoint?
Thanks,
Cameron K.

Reply to this email directly, view it on GitHubhttps://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FEsri%2Farcgis-powershell-dsc%2Fissues%2F446%23issuecomment-1403949947&data=05|01|mina.kim%40parks.nyc.gov|d45e3e5164b241eca48308dafef6d557|32f56fc75f814e22a95b15da66513bef|0|0|638102633367780517|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D|3000|||&sdata=hcKoc4ALO7FpW5oVuSfy8mL1ZJEGJYUHDUXrkH01ivg%3D&reserved=0, or unsubscribehttps://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAORJUUICNPGEFOOZ4S6SZRLWUFM2DANCNFSM6AAAAAAUFYGXDI&data=05|01|mina.kim%40parks.nyc.gov|d45e3e5164b241eca48308dafef6d557|32f56fc75f814e22a95b15da66513bef|0|0|638102633367780517|Unknown|TWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D|3000|||&sdata=WtbWyBXm8MFuiSAuD1hl1lOuOqw96hCYMMzyVPHhiLI%3D&reserved=0.
You are receiving this because you were mentioned.Message ID<EMAIL_ADDRESS>


Added climbing and grappling scenes to the demo project

Added climbing demo scene.
Added cloudy panorama sky from ambientcg.com.
Cleaned up lighting in scenes.
Minor cleanups for demo-scene instructions.

Added wind areas and the wind movement provider to the climbing/gliding demo.

Added grappling scene to the pull request.

Had a bit of a play around with the new test scenes, love the grappling, nice and simple :)
I did get stuck in the gravity lifts in the climbing demo. Not sure why, we might need to add an option to reset the player to the start position.

It's possible (but not obvious) to get out using a t-pose glide when the player is bouncing at the top of the wind column to slowly move forwards.
A return-to-main-menu button would be quite useful, rather than running all the way back to a teleporter.

It's possible (but not obvious) to get out using a t-pose glide when the player is bouncing at the top of the wind column to slowly move forwards.
A return-to-main-menu button would be quite useful, rather than running all the way back to a teleporter.

New players won't realise the T-pose is an option, I bet many won't even read the billboard at the start :) So having an easy way to reset or bring up a menu makes sense to me. We could do that as a separate PR though


feat: Add database version control [skip ci]

[x] Configure database migration framework for initial database version
[x] Handle initial database and table creation
[x] Check and warn user for incompatible database versions everytime the container starts
[x] Create section in README.md for possible actions on incompatible database version
[x] Test migration scripts with #46

This PR is merged into #49


P256 (ecdsa) key support?

I've been using your lovely ssh-crypt utility for some time.  It's great.
I recently started using an app called Secretive. https://github.com/maxgoedjen/secretive that allows use of macOS computers' 'Secure Enclave (SE)' hardware to generate and store ssh keys, and make them available via the ssh agent mechanism.
It would be great to use them together so key storage is enhanced via the SE and then ssh-crypt can be used for encrypt/decrypt operations with those keys.
Sadly a limitation of the SE by Apple is that it only supports NIST P256.  While (yours and others' implementations of) ssh-crypt has RSA and Ed25519 as options.   So ssh-crypt and Secretive can't be used together.
How difficult would it be for you to add P256 key support to ssh-crypt?  I see that it is available within python's paramiko module. Unfortunately I am not a python programmer else I'd try the enhancement myself.
Regards
LR.

The key mechanism of how ssh-crypt works is that when the same data is signed multiple times, it produces the same signature, which is later used as an AES key. Both ssh-rsa and ssh-ed25519 have deterministic signature generation. However, most ECDSA implementations are non-deterministic, and the ssh-agent doesn't provide any options to configure this in their subscription interface. Therefore, it's not possible to use ECDSA for ssh-crypt, at least in its current form. There might be a way to convert a non-deterministic signature to something deterministic, but this requires further research

Thank you very much for the very clear explanation. Much appreciated.  Should you decide to further investigate ways of getting ECDSA support to work in the required way, and succeed,  I shall look forward to the enhancement. Thanks again.


Duplicate handling of module name changes

There's an inconsistency in how we handle name changes of gates and modules. I'll explain the behavior for modules, but the same flow is executed for a gate name change as well.
When a module is renamed, the netlist_relay handler triggers:
https://github.com/emsec/hal/blob/42b93e5f8954276817efa476db78f1d5585b52dd/src/gui/netlist_relay/netlist_relay.cpp#L254-L264
That first causes the graph_context_manager to schedule all scenes containing this module for relayout (this nicely fixes the problem with module names becoming wider than the module box). Then, a module_name_changed signal fires.
https://github.com/emsec/hal/blob/42b93e5f8954276817efa476db78f1d5585b52dd/src/gui/graph_widget/graphics_scene.cpp#L570
The graphics scene listens to this signal since 9260c98 and renames its module again.
(I actually added the graphics scene handler for gates and @dertob added the one for gates, presumably since we both didn't know the handlers in the context manager were just disabled but already there)
I thus suggest we remove the renaming handlers from the graphics scene.
@Slowpoke, do you agree?

Since I have not received any complaints during the last week, I will now go ahead and perform that change.

Closed in #215


Missing Options when switching from 2.1 Free to 2.2

When someone switches from version 2.1.2 Free to to Pro or 2.2, the options for MultilingualPress are not there, so the Metaboxes for post translations don’t show up at all.

Clean install, MLP Free 2.1.2
Set all settings, relationships etc.
Update to the current master of this repo.
Done, no problems or issues.
Maybe helpful a hint in the readme, changelog, that all users now have a additional menu item for new features in Network settings - MultilingualPress


Support localized cronjob scheduling with ambiguous and gap DateTime instances

I've replaced DateHelper.add/3 with DateHelper.shift/4 that:

Handles forward and backward DateTime shifts (including shifts that involve ambiguous times).
Disambiguates timestamps based on :on_ambiguity settings.
Maintains hour to run when crossing gaps, i.e., jobs supposed to run at 2am will always run at 2am.

CronExpression gains 2 options:

a: returns earlier time when calculated DateTime is ambiguous.
l: returns later time when calculated DateTime is ambiguous.

I didn't add the b option to cover both 'cos specifying al is clearer, imo.
I've also replaced all NaiveDateTime.add/3 calls in Scheduler with DateHelper.shift/4. As DateHelper.shift/4 is rigorously tested, I didn't add tests for the updated Scheduer.
Closes #131.

coverage: 95.33% (-0.4%) from 95.751%
when pulling 833d72ac77ce404460fafbf314fd2231fe07ade0 on shaolang:dst-shift-handling
into 3120b84116f30566d7917f04b5a25ac3aad939ae on maennchen:main.

We also need to add the ambiguity options into Crontab.CronExpression.Ecto.Type.

@shaolang I pushed addtional tests to the PR. I believe they should not fail. Can you check?


Have you considered writing a code loader?

I want to import code, but I don't seem to see any code loaders for languages like Python, Java, C++, etc. There is only a general one, but it is not very user-friendly. The results of the vector search are not as expected.

If there are any documents that generate document standard documents, I can process the code myself.

this is a great point! would love contributions here to llamahub


error:141A20F4:SSL routines:ossl_statem_server_read_transition:unexpected message:ssl/statem/statem_srvr.c:313

when I try to test openssl connectivity getting below error
----------------------------------------------                             .......
ERROR
140054065153856:error:141A20F4:SSL routines:ossl_statem_server_read_transition:unexpected message:ssl/statem/statem_srvr.c:313:
shutting down SSL
CONNECTION CLOSED

running below commands
./openssl s_server -accept 7681 -cert  -key  -debug
./openssl s_client -connect :7681
Could anyone help me out with this?

If I run server and client on same box with any openssl version(openssl-1.0.1k, 1.0.2q, 1.0.2u), it is working fine .
I am facing an issue with "<IP_ADDRESS>" only. If I Install openssl-1.0.1k on this device, I am not facing the connectivity issue but if I change the version to openssl-1.0.2q or openssl-1.0.2u, I am facing connectivity issue.
we are not running any firewalls on this device. I wonder how it is working with openssl-1.0.1k.

on same setup if I use OpenSSL 1.1.1l 24 Aug 2021, it is working fine. what is the issue with openssl-1.0.2q?
with openssl-1.0.2q, if I use tls1_1 also it is working fine.
./openssl s_client -connect <IP_ADDRESS>:7681 -tls1_1
do we have any issue with 1.0.2q and tls1_2?

when I use openssl-1.0.2q or 1.0.2u or 1.1.0k, client is not negotiating with server with default tls1_2 but with tls1_1 it is negotiating and establishing connection.
./openssl s_client -connect <IP_ADDRESS>:7681  //connection is failing with below errors
on server
ERROR
140410523703104:error:141A20F4:SSL routines:ossl_statem_server_read_transition:unexpected message:ssl/statem/statem_srvr.c:232:
shutting down SSL
CONNECTION CLOSED
on client
verify return:1
4150571008:error:140943F2:SSL routines:ssl3_read_bytes:sslv3 alert unexpected message:ssl/record/rec_layer_s3.c:1407:SSL alert number 10
./openssl s_client -connect <IP_ADDRESS>:7681 -tls1_1   //this is negotiating and establishing connection
if I use openssl-1.1.1l, then it is working fine with default tls1_2.
could you please let me know why it is not working with other versions and working with 1.1.1l, anything is fixed on 1.1.1l?if yes, could you please share me the patch?

I am sorry but 1.0.2 versions are unsupported, or to be more specific they are supported only to premium support customers. Also the 1.0.2q version is an old fix release.

what about 1.1.0k?
could you please let me know why these versions are not negotiating with server?

1.1.0 is unsupported as well.

One significant change between 1.1.1 and earlier versions is that SNI is enabled by default when using s_client, but in earlier versions it was not. I don't see why that would make a difference when s_client and s_server are talking to each other...but still it is a significant change in 1.1.1.
You say that 1.1.1l works. What happens if you use 1.1.1l and pass the "-noservername" option in the s_client command line (in order to suppress SNI)? Does it still work or does it stop working? If it stops working then it might suggest that something related to SNI is causing the problem.