Design an attestation syscall

Attestation Syscall - User Space
syscall number 0xEA01
NAME
get_attestation - get the attestation from the CPU
SYNOPSIS
For C
ssize_t get_attestation(void *nonce, size_t nonce_length, void *buf, size_t buf_length, size_t *technology);

Note: a C wrapper has to store the second return value in rdx into technology and a negative rax in errno.
RETURN VALUE
On error a negative number is returned as -errno.
On success, this call returns the number of bytes placed in buf.
technology is filled in with

value
TEE technology identifier

0
NONE

1
SEV

2
SGX

LOW LEVEL INTERFACE
Inputs

rdi - input data buffer (const)
rsi - input data buffer length
rdx - output data buffer
r10 - output data buffer length

Outputs

rax - number of bytes written or negative errno (per Linux convention)
rdx - TEE technology identifier (enum)

Special Case
When rdx (input) is 0 (i.e. NULL):

r10 is ignored
no data is written (since the buffer is non-existent)
other outputs are the same as if the call had succeeded with a large enough buffer

Format of buf
Serialization is done on the host and deserialization is done in the Wasmtime code payload. Both have access to full std, so
all features of serde should be used to ensure a safe data transfer from the untrusted host data.
rdx or technology from thegetatt() call decides which of the union members to use.
Example union for buf:
#[repr(C)]
pub union Attestation {
    Sev_PrivateKeyInfo,
    Sgx_Attestation,
    // … to be extended
}

Suggested serde formats:

json - best maintained - most languages have bindings
cbor - smaller transfer - standardized, a lot of languages have bindings
bincode - smaller transfer

ERRORS
EFAULT: buf extends outside the process's allocated address space.
EINVAL: bufsiz is not positive.
EIO: an error occurred getting the attestation
EMSGSIZE: provided buffer too small
Attestation Syscall - Shim to Host
Because the method of attestation differs for every architecture, the internal syscall handling differs for each.
SEV - pre attestation - Shim
buf provided to the host is the shim physical address, where the host places encrypted bytes received from the tenant.
This is not an address in the unencrypted sallyport::Block.
The shim validates the returned slice length and copies the buf from encrypted address space to the userspace buf.
SEV - pre attestation - Host
The Loader gets a private key (encrypted with the attestation) from the tenant and places the encrypted bytes
at the address given by the shim.
SGX - post attestation - Shim
No special handling besides the usual is needed.
SGX - post attestation - Host
The Loader requests the attestation with the nonce included and places the result at the address given by the shim.

@npmccallum you know more about the preferred key / cert formats

I think we should structure the syscall so that the shims avoid parsing altogether. The wasmldr payload has full std access. So we can do any parsing we need there. If we do this right, the shims don't need to gain any dependencies.

The syscall input should be an opaque byte array that will be included in the attestation report. In the pre-attestation case, this input will be ignored.

The syscall should output a tagged union containing one of the following outputs types:

SGX: An opaque blob containing the platform specific attestation type.
SEV: A DER-encoded RFC 5208 PrivateKeyInfo

In the pre-attestation cases (i.e. SEV, PEF), it is the responsibility of the tenant to deliver a valid, DER-encoded RFC 5208 PrivateKeyInfo. For example, under SEV this data structure will be delivered via LAUNCH_SECRET. The SEV shim merely needs to deal with an opaque byte slice.

cc @ueno @connorkuehl @lkatalin

@ueno @simo5 Could you review the choice of PrivateKeyInfo here? Is this the right data type for transferring a private key from the tenant to the keep (so that it can be used as the basis for an X.509 certificate?

Not everybody likes to use ASN.1/DER, but from the POV of an interface having a standard and extensible format is definitely a good thing. I expect this to be extended relatively soon for PQC private key definitions as soon as they get standardized by a standards body after NIST's competition has winners. And this format should allow to describe those too.

@npmccallum - fixed...
You are right, we can treat the buffers as opaque byte slices in the shims. Only the Loader and the Payload (wasmtime) need to share a serde enum.

Using PrivateKeyInfo seems like a sensible choice (flexible enough and encoding overhead is nonsignificant).

so that it can be used as the basis for an X.509 certificate?

Is my understanding correct that the private key is used sorely for signing a Wasm workload?

Not everybody likes to use ASN.1/DER, but from the POV of an interface having a standard and extensible format is definitely a good thing. I expect this to be extended relatively soon for PQC private key definitions as soon as they get standardized by a standards body after NIST's competition has winners. And this format should allow to describe those too.

@simo5 Agreed. In this case, the private key delivered over this mechanism becomes the foundation for a self-signed TLS cert. So we don't really have a choice about ASN.1/DER.

If it is a self-signed cert you are after ... why don't you just generate the private key in the keep and share out the certificate with the public key ?
I would think sharing a symmetric key would be more useful if what you are after is secure communication, you can use symmetric keys with TLS-PSK.

Is my understanding correct that the private key is used sorely for signing a Wasm workload?

No. Enarx deployment is three-phase:

Provisioning - Tenant <=> Host - bring up an empty Keep (pre-attestation happens here)
Deployment - Tenant <=> Keep - populate the Keep with wasm code and data (post-attestation happens here)
Execution - execute the provided code

During the deployment phase is where the tenant validates the attestation (before delivering code and data). All of the necessary data for the tenant to validate the host attestation is contained in the Keep's TLS certificate. This comes in two flavors.
In the pre-attestation flavor, the tenant securely delivered the private key to the keep during the provisioning phase. Therefore, the tenant knows the public key of the TLS certificate it expects.
In the post-attestation flavor, the per-hardware attestation metadata is contained in an X.509 certificate extension. The tenant can validate that the attestation metadata is (1) valid and (2) bound to the Keep's public key. This proves that the private key for the Keep's certificate was generated inside a hardware enforced keep.
In short, the PrivateKeyInfo is essentially a keypair generated by the tenant and delivered to the Keep through the secure attestation process for use in a TLS certificate governing all future tenant/Keep communications.

If it is a self-signed cert you are after ... why don't you just generate the private key in the keep and share out the certificate with the public key ?
I would think sharing a symmetric key would be more useful if what you are after is secure communication, you can use symmetric keys with TLS-PSK.

This would be in some regards simpler. However, it also means that the tenant has to keep a secret as state versus keeping public key material as state. Disclosure of a symmetric key means that anyone can spoof a Keep. The idea here is that the tenant generates the keypair, delivers the private key and then retains only the public key. This reduces the attack surface under the conditions that the attacker has the ability to read tenant state.

To be discussed:
Should the data be consumable from C?

Yes. I propose the following syscall interface:
Inputs

rdi - input data buffer (const)
rsi - input data buffer length
rdx - output data buffer
rcx - output data buffer length

Outputs

rax - number of bytes written or negative errno (per Linux convention)
rdx - TEE technology identifier (enum)

Special Case
When rdx (input) is 0 (i.e. NULL):

rcx is ignored
no data is written (since the buffer is non-existent)
other outputs are the same as if the call had succeeded with a large enough buffer

Yes. I propose the following syscall interface:

I meant the serialized opaque buffer.

Yes. I propose the following syscall interface:

I meant the serialized opaque buffer.

I presume the output buffer? Its contents are dictated by the technology.

@haraldh The format of buf section needs to be removed as it no longer applies.

@haraldh The format of buf section needs to be removed as it no longer applies.

I don't think so. Although for the syscall it is transparent, we might want to specify some kind of format in the future.

This has been demonstrated. I will move its contents into our wiki and close this issue.

This has been demonstrated. I will move its contents into our wiki and close this issue.


[pfsync multiqueue] tcp connections dropped when pfsync is active and multiqueue is enabled

Important notices
Before you add a new report, we ask you kindly to acknowledge the following:

[x] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
[x] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue

Describe the bug
When HA is configured and pfsync is active a low precentage (2-4%) of TCP connections are dropped.
Tip: to validate your setup was working with the previous version, use opnsense-revert (https://docs.opnsense.org/manual/opnsense_tools.html#opnsense-revert)
To Reproduce
Steps to reproduce the behavior:

Install 2 opnsense 24.7.8 firewalls with static WAN and LAN ip.
Configure WAN and LAN CARP ip.
Configure NAT to outbound nat the LAN range to CARP ip.
Turn on pfsync on both on LAN interface (for simplicity the extra interface for pfsync has been omitted)
Install client in LAN
Run reproducer on client, adapt -m timeout parameter well above usual download time. local download target is recommended.
fail=0;success=0;while :;do curl -o /dev/null -m 30 https://fsn1-speed.hetzner.com/1GB.bin && echo "success $((++success)) fail $fail" || echo "success $success fail $((++fail))";done
Observe fail count. in my case it looks like this after some hours:
"success 12539 fail 514"

When the issue occurs, curl's current download rate drops to 0, no more packets are recieved.
Assumption: the TCP state is removed and all packets are dropped.
Expected behavior
"success 12539 fail 0"
No dropped TCP connections. When pfsync is disabled, no connections are dropped.
Describe alternatives you considered
Sync compatibility 24.1 or 24.7 does not change anything, neither does multicast vs. unicast pfsync change anything. Only disabling pfsync or setting the unicast ips to other ips than the master or backup.
I recreated the same setup with voldemort 2.7.2 to rule out general pfsync issues or issues from environment/load. This setup does not show the issue on same machine type and virtualization environment, even on the same hypervisor and bridge over several hours.
Additional context
The issue is probably there for several months if not years. We have had issues especially with docker layer updates stalling. We could never pinpoint this until now. This also goes away when turning off pfsync.
Environment
Software version used and hardware type if relevant, e.g.:
OPNsense 24.7.8
Proxmox VE 8.2.7
bios: ovmf
boot: order=scsi0
cores: 2
cpu: host
efidisk0: nvme:vm-2180-disk-0,efitype=4m,pre-enrolled-keys=1,size=1M
hotplug: disk,network,usb,cpu
machine: q35
memory: 4096
name: fw01-debug-sense
net0: virtio=BC:24:11:0B:83:7E,bridge=vmbr0,queues=4
net1: virtio=BC:24:11:7E:BE:DA,bridge=abc1001,queues=4,tag=123
numa: 1
ostype: other
scsi0: nvme:vm-2180-disk-1,discard=on,iothread=1,size=18G,ssd=1
scsihw: virtio-scsi-single
serial0: socket
smbios1: uuid=1fdfcdb9-c5f3-468e-a066-16a705ac3d98
sockets: 1
vga: qxl
vmgenid: b6bee8e4-09d7-4d31-b2d4-96043b2d8069```

Update: getting rid of the queues=4 in Proxmox mitigates the issue.
Should pfsync work with multiqueue in OPNsense?

Update2: I also tested with queues=8 which is even worse. However I am in contact with 2 other people who run OPNsense on Proxmox. They both use queues=8 and HA/pfsync without any issue. Mysterious.


Langchain4j to connect to a custom API

We have a corporate network for open AI . Currently all langchain API requests are forwarded open AI . How can I connect to custom endpoint . For eg : http://escuela.openai.com/.
Can add this through a system property ?

Hi @escuelatech, you can set a baseUrl property when creating OpenAi*Model:
OpenAiChatModel.builder()
                .apiKey(...)
                .baseUrl("http://escuela.openai.com/v1/")
                .build();

The default baseUrl is https://api.openai.com/v1/.
Depending on the model type, a path suffix will be appended to it. For OpenAiChatModel, it will become baseUrl + "chat/completions", for OpenAiEmbeddingModel: baseUrl + "embeddings", etc.
Hope this helps. Feel free to reopen if needed.


upgrade go to 1.17

Codecov Report

Merging #41 (72a832b) into main (ca56ee9) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main      #41   +/-   ##
=======================================
  Coverage   41.03%   41.03%
=======================================
  Files          10       10
  Lines         675      675
=======================================
  Hits          277      277
  Misses        370      370
  Partials       28       28

Flag
Coverage Δ

unittests
41.03% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ca56ee9...72a832b. Read the comment docs.


Phishing URL Detection

Title and Issue number
#3996 Phishing URL Detection
Close #3996
Checklist:

[X] I have mentioned the issue number in my Pull Request.
[X] I have commented my code, particularly in hard-to-understand areas
[X] I have created a helpful and easy to understand README.md

Hi @MohitGupta121!
I have added the implementation of the phishing url detection under gssoc'23
Kindly review my PR. Thank you.


Sync Mod Order doesn't sync mod order

I wanted to test that Sync Mod Order was working, so I copied one profile ("John Lee Smith (new)") to a new profile ("JLS test") and changed position of one mod (Audio Tweaks) and then tried to Sync Mod Order → choose other profile → Refresh → Close. After this, neither of the profiles had had the position of Audio Tweaks changed to the other.
John Lee Smith (new)/modlist.txt
JLS test/modlist.txt

After poking around the code a bit, I realised I need to right-click on the profiles in the window to get the "Sync mod order" right-click menu option… and that seems to work perfectly. Sorry about the noise!

Aha. No problem.

This does not seem to work for me. could we get a quick walkthrough on using it. I'm doing the right click then refresh, but nothing seems to be doing anything.

@toguspyder click on the tools (puzzle pieces) and select "synch mod order" while you are currently in the profile that you want others to look like. Then right click on the other profiles and select "synch mod order". do this for all the profiles you want to be in the same order as the profile you are currently loaded in. Thats it :)


SIGSEV on Fedora 34 - rdclog_filename()

Description

Both qrenderdoc and rendedoccmd crash on launch on Fedora 34 after receiving SIGSEV.
From GDB the crash seems to be occuring in rdcstr's copy constructor called from rdclog_filename. I've attached a copy of the backtrace GDB outputs.
gdb.txt
Steps to reproduce

Run any renderdoc command whether it be renderdoccmd or qrenderdoc. The crash even occurs when running the --help command.

Environment

RenderDoc version: 1.10 (package version is 1.10-2.fc34.x86_64
Operating System: Fedora 34
Graphics API: Any

Just an update:
I compiled v1.10 myself and it runs fine which led me to suspect that the bug may be related to LTO being enabled by default for Fedora packages. I managed to recreate the crash by rebuilding renderdoc with LTO enabled (GCC).

Just to be clear, I did manage to reproduce the crash myself by building v1.10 from source and enabling LTO. Does this mean that compiling renderdoc with LTO enabled is not supported? Either way thanks for the quick reply.

You're welcome to customise the build however you like, but if you run into problems then it's up to you to investigate and either find fixes or disable those changes. I only support the build as it comes by default with no modifications, on any compiler above the minimum requirements. I cannot feasibly support all possible compilers as well as all possible custom invocations or flags.

to be clear, if any of these options are changed the build is not supported?
https://github.com/baldurk/renderdoc/blob/v1.x/CMakeLists.txt#L179

Those options disable certain components and it's fine to turn them off if you want to build without them. Passing custom compiler or linker arguments is not supported.


Deploy versioned documentation

Given the major changes to the documentation that will happen with v7.0, we should figure out how to deploy versioned documentation for previous releases. It looks like this is supported by the documentation theme provider, so we should be able to retroactively deploy docs for every version that was built to use the mkdocs material theme.
Assigning me and @becky-gilbert so one of us can get to it eventually 😁

I've started to work on this. I've figured out how to deploy docs for 6.3 and how it will work for 7.0. I could deploy the change to the live site, but I think it will be weird to have a dropdown selector for the version that doesn't do anything. So I propose that I deploy the versioned docs for 6.3 at the same time that we do 7.0 docs.

@jodeleeuw thanks for letting me know, and sorry I hadn't gotten to this yet!
RE waiting for v7 before adding a version selector - sounds good. How difficult would it be to add docs for all v6 releases? Maybe I can add those around the same time as 6.3.1?
BTW is it ok if I update the live site with the recent docs edits that apply to the current release? These have all been merged into master. I assume that all of the v7 docs changes will go on a branch We also have the separate docs-demos branch - I can either merge that into master before updating the live site, or wait until all of the plugin demos have been created.

@becky-gilbert I think we should aim to have a final version of the 6.3 docs done with the release of 7.0. If we have the live demos functional for 6.3 docs then we could merge those changes in and publish an updated version of the 6.3 docs prior to publishing the 7.0 docs. But once we publish the 7.0 docs I want to avoid having to make changes to the 6.3 docs.
In theory adding docs for <6.3 is very doable, but the problem is that I think some of those docs were built with earlier versions of mkdocs and material-mkdocs. So if the latest version of those can't build those docs then we'd have to do things like install specific old versions, generate the docs, and then publish them. I think this might be more of a headache than it is worth. We could add a note to the docs, maybe even on the main page, about versions and why there is no option for earlier versions of the docs.

This was completed with #2154


Inquiry about how LoopInvGen works

Hi Saswat Padhi, I am presenting for my school project about LoopInvGen because I am interested in the SyGus competition. I got to play with LoopInvGen against a few code snippets. One particular code snippet LoopInvGen failed to correctly produce an invariant is the following program (expressed in terms of Dafny syntax).
https://gist.github.com/riceluxs1t/3864412a8ce7f9d5ffa7c1f38fde8291
The function does integer division of x/y and returns its quotient and remainder.
I translated it to the below v1 SyGus format
`(set-logic LIA)
(synth-inv inv-f ((x Int) (y Int) (q Int) (r Int)))
(declare-primed-var x Int)
(declare-primed-var y Int)
(declare-primed-var q Int)
(declare-primed-var r Int)
(define-fun pre-f ((x Int) (y Int) (q Int) (r Int)) Bool
(and
(> y 0)
(>= x 0)
(= q 0)
(= r x))
)
(define-fun trans-f ((x Int) (y Int) (q Int) (r Int) (x! Int) (y! Int) (q! Int) (r! Int)) Bool
(and
(>= r y)
(= y! y)
(= x! x)
(= r! (- r y))
(= q! (+ q 1))
))
(define-fun post-f ((x Int) (y Int) (q Int) (r Int)) Bool
(or
(>= r y)
(and
(= x (+ r (* q y)))
(>= r 0)
;    (< r y)
)
))
(inv-constraint inv-f pre-f trans-f post-f)
(check-synth)`
I believe the encoding is correct but am trying to debug why LoopInvGen would fail to synthesize correctly for this example. It currently times out after a while. If you spot anything obvious, please let me know.

Hi @riceluxs1t
Thanks for the report. This was due to two issues:

There was a typo in the loopinvgen.sh script introduced in a recent commit.
The invariant (and postcondition) in your case are actually non-linear, so you should use (set-logic NIA) instead of LIA.

Please pull the latest changes and try rebuilding LoopInvGen and running your example. On my machine, it is able to solve the case.
I have also added this test case in benchmarks/NIA/others/issue_8.sl.
Please feel free to reopen this issue if this does not work at your end.

Sweet. Glad that it is able to synthesize it correctly. Please update the remote docker image.

Unfortunately builds on docker hub are super slow :(
This should show passed instead of building when the build is complete:


Track page view based on plugin option trackPageView

Issue:
https://app.asana.com/0/1181333741691281/1200438756262278
Functionality changed

Tracking page view based on value provided in pluginOption trackPageView
Default value is set to true

Removed code related to delayPgeView and also have updated directory structure


ceilometer: The request you have made requires authentication. (HTTP 401)

[root@rdo-newton ~(keystone_admin)]# ceilometer meter-list

The request you have made requires authentication. (HTTP 401) (Request-ID: req-e1cfda2f-a698-4fb9-ab8e-69357a7f9e6e)

Monitoring ceilometer logs, gives the following error:
export CEILO_SVCS='compute central collector api alarm-evaluator alarm-notifier'
for svc in $CEILO_SVCS ; do sudo grep ERROR /var/log/ceilometer/${svc}.log ; done

Specifically /var/log/ceilometer/compute.log

2016-11-22 14:50:58.922 2447 ERROR oslo.messaging._drivers.impl_rabbit [-] [a01b43c5-231a-4fbf-8bfa-6f7f51a298f0] AMQP server on <IP_ADDRESS>:5672 is unreachable: [Errno 111] Connection refused. Trying again in 6 seconds. Client port: None

Rabbitmq service is running as expected
systemctl status rabbitmq-server.service

● rabbitmq-server.service - RabbitMQ broker
Loaded: loaded (/usr/lib/systemd/system/rabbitmq-server.service; enabled; vendor preset: disabled)
Drop-In: /etc/systemd/system/rabbitmq-server.service.d
└─limits.conf
Active: active (running) since Tue 2016-12-06 02:15:32 CET; 1 day 1h ago
Main PID: 1281 (beam)
Status: "Initialized"
CGroup: /system.slice/rabbitmq-server.service
├─1281 /usr/lib64/erlang/erts-<IP_ADDRESS>/bin/beam -W w -A 64 -P 1048576 -t 5000000 -stbt db -K true -- -root /usr/lib64/erlang -p...
├─2938 inet_gethost 4
└─2939 inet_gethost 4
Dec 06 02:14:57 rdo-newton systemd[1]: Starting RabbitMQ broker...
Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: RabbitMQ 3.6.5. Copyright (C) 2007-2016 Pivotal Software, Inc.
Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: ##  ##      Licensed under the MPL.  See http://www.rabbitmq.com/
Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: ##  ##
Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: ##########  Logs<EMAIL_ADDRESS>Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: ######  ##<EMAIL_ADDRESS>Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: ##########
Dec 06 02:15:28 rdo-newton rabbitmq-server[1281]: Starting broker...
Dec 06 02:15:32 rdo-newton systemd[1]: Started RabbitMQ broker.
Dec 06 02:15:32 rdo-newton rabbitmq-server[1281]: completed with 0 plugins.

 ss | grep :amqp
t

cp    ESTAB      0      0      <IP_ADDRESS>:44618                <IP_ADDRESS>:amqp
tcp    ESTAB      0      0      <IP_ADDRESS>:45082                <IP_ADDRESS>:amqp
tcp    ESTAB      0      0      <IP_ADDRESS>:45938                <IP_ADDRESS>:amqp
tcp    ESTAB      0      0      <IP_ADDRESS>:45828                <IP_ADDRESS>:amqp
tcp    ESTAB      0      0      <IP_ADDRESS>:44660                <IP_ADDRESS>:amqp

Without port resolution, we can see the host  <IP_ADDRESS>:5672 available (not reachable according to the log above)

tcp    ESTAB      0      0                    ::ffff:<IP_ADDRESS>:5672                             ::ffff:<IP_ADDRESS>:45912
tcp    ESTAB      0      0                    ::ffff:<IP_ADDRESS>:5672                             ::ffff:<IP_ADDRESS>:47692
tcp    ESTAB      0      0                    ::ffff:<IP_ADDRESS>:5672                             ::ffff:<IP_ADDRESS>:45672
tcp    ESTAB      0      0                    ::ffff:<IP_ADDRESS>:5672                             ::ffff:<IP_ADDRESS>:45910
tcp    ESTAB      0      0                    ::ffff:<IP_ADDRESS>:5672                             ::ffff:<IP_ADDRESS>:45894
tcp    ESTAB      0      0                    ::ffff:<IP_ADDRESS>:5672                             ::ffff:<IP_ADDRESS>:44660

cat /etc/ceilometer/ceilometer.conf | grep rabbit | grep -v ^#

rpc_backend=rabbit
[oslo_messaging_rabbit]
rabbit_host=<IP_ADDRESS>
rabbit_port=5672
rabbit_use_ssl=False
rabbit_userid=guest
rabbit_password=guest

Ceilometer service inspection gives the following:
systemctl | grep ceilometer

● openstack-ceilometer-api.service                                                    loaded failed failed    OpenStack ceilometer API service
openstack-ceilometer-central.service                                                loaded active running   OpenStack ceilometer central agent
openstack-ceilometer-collector.service                                              loaded active running   OpenStack ceilometer collection service
openstack-ceilometer-compute.service                                                loaded active running   OpenStack ceilometer compute agent
openstack-ceilometer-notification.service                                           loaded active running   OpenStack ceilometer notification agent

Disappeared when by solving:

#43 Request returned failure status. Invalid OpenStack Identity credentials
#45 Error communicating with http://controller:8777 [Errno 111] Connection refused


Adding cache control headers

Added Cache control

Fixes #8516
Added cache control header for index.html with ttl=6 hours
Added cache control header for regular files with ttl=7 days

@ohcnetwork/care-fe-code-reviewers

@sainak can you review it


how to use With Flet change font size FText("tolol").qt(StyleSheet="font-size:30px") not work

how to use with flet
i want change size font and other
not work
my code
FText("tolol").qt(StyleSheet="font-size:30px")

and how to spaceBetween in FRow()
with FRow(alignment="spaceBetween):

and how to use FAppBar with Flet
my code not work
def content(self):
with FWindow(title="test",size=(330,500)):
FAppBar()
with FColumn():
with FRow():
FElevatedButton("-").click(self.min),
FText(f"{data.myval}").qt(StyleSheet="font-size:30px"),
FElevatedButton("+").click(self.add),
FText(data.counter),
with FRow():
FTextField(data("counter"))

Flet backend is very preliminary right now, and .qt() is for QT backend
there should be a .flet() for FLET specific styling and a .style() for generic usage, but it's not done yet.

While there are still many things missing, with the latest commit a3d8730
you can use .flet() to specify flet properties, eg. FText("test").flet(size=16)

and how to use if on text to show and hide
Example
Ftext("aass").flet(visible=True if status==True else FALSE)
Can it be like that
Pada tanggal Sen, 22 Mei 2023 22.31, Buganini Chiu @.***>
menulis:

While there are still many things missing, with the latest commit a3d8730
https://github.com/buganini/PUI/commit/a3d873030bfd58c3e718915b00b0614ab45841ca
you can use .flet() to specify flet properties, eg.
FText("test").flet(size=16)
—
Reply to this email directly, view it on GitHub
https://github.com/buganini/PUI/issues/2#issuecomment-1557432827, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AMNJC27OMRARJPCHETSHDITXHOBGXANCNFSM6AAAAAAYESGMJA
.
You are receiving this because you authored the thread.Message ID:
@.***>


Cleanup OCI Image Config creation

Describe what should be investigated or refactored
src/pkg/packager/publish.go has a generateManifestConfig function that could be modified. In essence it creates a OCI compliant Image Manifest Config when pushing Zarf packages as OCI Images. This config is not used and is pretty pointless (but is a requirement to create image manifests). If we wanted to consume this config and use it for Zarf things, it would need to be expanded and fleshed out.
Links to any relevant code
https://github.com/defenseunicorns/zarf/pull/1423#discussion_r1136286097
Additional context
Add any other context or screenshots about the technical debt here.

With generateManifestConfig refactored was there more you wanted to do with this issue?


Disable checkbox of task preview if not visit the task report

Details

Disable checkbox of task preview if not visit the task report
Fixed Issues

$ https://github.com/Expensify/App/issues/24169
PROPOSAL: https://github.com/Expensify/App/issues/24169#issuecomment-1701427507
Tests

Pre-requisite steps: User A creates a group with User B and User C. And then, create a task report in the group without assignee

As user B, go to the group and click on the checkbox of the task report without opening the task report
Verify that the checkbox is disabled.
Open the task report and go back
Click on the checkbox of the task report to complete the task
Verify that the task is completed

[x] Verify that no errors appear in the JS console

Offline tests

QA Steps

As user B, go to the group and click on the checkbox of the task report without opening the task report
Verify that the checkbox is disabled.
Open the task report and go back
Click on the checkbox of the task report to complete the task
Verify that the task is completed

[x] Verify that no errors appear in the JS console

PR Author Checklist

[x] I linked the correct issue in the ### Fixed Issues section above
[x] I wrote clear testing steps that cover the changes made in this PR

[x] I added steps for local testing in the Tests section
[x] I added steps for the expected offline behavior in the Offline steps section
[x] I added steps for Staging and/or Production testing in the QA steps section
[x] I added steps to cover failure scenarios (i.e. verify an input displays the correct error message if the entered data is not correct)
[x] I turned off my network connection and tested it while offline to ensure it matches the expected behavior (i.e. verify the default avatar icon is displayed if app is offline)
[x] I tested this PR with a High Traffic account against the staging or production API to ensure there are no regressions (e.g. long loading states that impact usability).

[x] I included screenshots or videos for tests on all platforms
[x] I ran the tests on all platforms & verified they passed on:

[x] Android: Native
[x] Android: mWeb Chrome
[x] iOS: Native
[x] iOS: mWeb Safari
[x] MacOS: Chrome / Safari
[x] MacOS: Desktop

[x] I verified there are no console errors (if there's a console error not related to the PR, report it or open an issue for it to be fixed)
[x] I followed proper code patterns (see Reviewing the code)

[x] I verified that any callback methods that were added or modified are named for what the method does and never what callback they handle (i.e. toggleReport and not onIconClick)
[x] I verified that the left part of a conditional rendering a React component is a boolean and NOT a string, e.g. myBool && <MyComponent />.
[x] I verified that comments were added to code that is not self explanatory
[x] I verified that any new or modified comments were clear, correct English, and explained "why" the code was doing something instead of only explaining "what" the code was doing.
[x] I verified any copy / text shown in the product is localized by adding it to src/languages/* files and using the translation method

[x] If any non-english text was added/modified, I verified the translation was requested/reviewed in #expensify-open-source and it was approved by an internal Expensify engineer. Link to Slack message:

[x] I verified all numbers, amounts, dates and phone numbers shown in the product are using the localization methods
[x] I verified any copy / text that was added to the app is grammatically correct in English. It adheres to proper capitalization guidelines (note: only the first word of header/labels should be capitalized), and is approved by marketing by adding the Waiting for Copy label for a copy review on the original GH to get the correct copy.
[x] I verified proper file naming conventions were followed for any new files or renamed files. All non-platform specific files are named after what they export and are not named "index.js". All platform-specific files are named for the platform the code supports as outlined in the README.
[x] I verified the JSDocs style guidelines (in STYLE.md) were followed

[x] If a new code pattern is added I verified it was agreed to be used by multiple Expensify engineers
[x] I followed the guidelines as stated in the Review Guidelines
[x] I tested other components that can be impacted by my changes (i.e. if the PR modifies a shared library or component like Avatar, I verified the components using Avatar are working as expected)
[x] I verified all code is DRY (the PR doesn't include any logic written more than once, with the exception of tests)
[x] I verified any variables that can be defined as constants (ie. in CONST.js or at the top of the file that uses the constant) are defined as such
[x] I verified that if a function's arguments changed that all usages have also been updated correctly
[x] If any new file was added I verified that:

[x] The file has a description of what it does and/or why is needed at the top of the file if the code is not self explanatory

[x] If a new CSS style is added I verified that:

[x] A similar style doesn't already exist
[x] The style can't be created with an existing StyleUtils function (i.e. StyleUtils.getBackgroundAndBorderStyle(theme.componentBG))

[x] If the PR modifies code that runs when editing or sending messages, I tested and verified there is no unexpected behavior for all supported markdown - URLs, single line code, code blocks, quotes, headings, bold, strikethrough, and italic.
[x] If the PR modifies a generic component, I tested and verified that those changes do not break usages of that component in the rest of the App (i.e. if a shared library or component like Avatar is modified, I verified that Avatar is working as expected in all cases)
[x] If the PR modifies a component related to any of the existing Storybook stories, I tested and verified all stories for that component are still working as expected.
[x] If the PR modifies a component or page that can be accessed by a direct deeplink, I verified that the code functions as expected when the deeplink is used - from a logged in and logged out account.
[x] If the PR modifies the form input styles:

[x] I verified that all the inputs inside a form are aligned with each other.
[x] I added Design label so the design team can review the changes.

[x] If a new page is added, I verified it's using the ScrollView component to make it scrollable when more elements are added to the page.
[x] If the main branch was merged into this PR after a review, I tested again and verified the outcome was still expected according to the Test steps.

Screenshots/Videos

Android: Native
https://github.com/Expensify/App/assets/129500732/9e95e613-5e6c-478e-bdb4-16642a5739d4

Android: mWeb Chrome
https://github.com/Expensify/App/assets/129500732/45081d65-1272-407e-8563-890651431bf6

iOS: Native
https://github.com/Expensify/App/assets/129500732/58e1d32c-99c7-4637-86df-c54c87e26198

iOS: mWeb Safari
https://github.com/Expensify/App/assets/129500732/bef1dda9-e181-46f1-bbda-ed4dd8977458

MacOS: Chrome / Safari
https://github.com/Expensify/App/assets/129500732/6239279f-512d-4b43-a350-da7a0e8c5f43

MacOS: Desktop
https://github.com/Expensify/App/assets/129500732/219ed288-f18a-4c62-bfa5-62e21a348f74

:hand: This PR was not deployed to staging yet because QA is ongoing. It will be automatically deployed to staging after the next production release.

🚀 Deployed to staging by https://github.com/thienlnam in version: 1.4.23-0 🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
success ✅

🕸 web 🕸
success ✅

🚀 Deployed to production by https://github.com/thienlnam in version: 1.4.23-4 🚀

platform
result

🤖 android 🤖
success ✅

🖥 desktop 🖥
success ✅

🍎 iOS 🍎
failure ❌

🕸 web 🕸
success ✅


adding the missing /etc:/host/etc:ro for modern-bpf

What type of PR is this?
Update the website to add missing options, to solve issues for users to run falco agent in containers.

Uncomment one (or more) /kind <> lines:
/kind bug

/kind cleanup

/kind design

/kind user-interface

/kind content

/kind translation

/kind event

Any specific area of the project related to this PR?

Uncomment one (or more) /area <> lines:

/area blog

/area documentation

/area community

What this PR does / why we need it:
https://github.com/falcosecurity/falco/issues/2990#issuecomment-1883470260
Which issue(s) this PR fixes:
https://github.com/falcosecurity/falco/issues/2990

Fixes #
Special notes for your reviewer:

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.
:memo: Please follow instructions in the contributing guide to update your commits with the DCO
Full details of the Developer Certificate of Origin can be found at developercertificate.org.
The list of commits missing DCO signoff:

36f07de adding /etc
a25cdd4 Merge branch 'master' of https://github.com/ycaoT/falco-website

Instructions for interacting with me using PR comments are available here.  If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: ycaoT
Once this PR has been reviewed and has the lgtm label, please assign vjjmiras for approval. For more information see the Kubernetes Code Review Process.
The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

content/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[APPROVALNOTIFIER] This PR is NOT APPROVED
This pull-request has been approved by: incertum, ycaoT
Once this PR has been reviewed and has the lgtm label, please assign vjjmiras for approval. For more information see the Kubernetes Code Review Process.
The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

content/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

LGTM label has been added.  Git tree hash: b185b69dc35f6bc1f88e68d69c275971ef4cd3e4

[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: incertum, jasondellaluce, ycaoT
The full list of commands accepted by this bot can be found here.
The pull request process is described here

Needs approval from an approver in each of these files:

content/OWNERS [jasondellaluce]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment


Audio Modulator Addition

Try this repository and concept for Audio Voice Modulation.
https://github.com/andabi/deep-voice-conversion

Thank You @Raghvender1205, I'll give it a try.


test(nestjs-tinkoff): fix request verifier guard tests

affects: @atlantis-lab/nestjs-tinkoff
ISSUES CLOSED: #181

reolved by 599fe8da8d9241180697a805187c263e19adc773


feat(shorthand): docs and tests for shorthands: exy, sxy, cxy, and rxy

:tada: This PR is included in version 1.9.0 :tada:
The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket:


Removed parts of the Introduction that were moved to BigchainDB project docs

The Introduction had some high-level introduction to BigchainDB and BigchainDB Terminology. I moved that over to the BigchainDB project documentation, so it doesn't have to be in the BigchainDB Server docs anymore. I edited the Introduction to just link to the BigchainDB project docs.
Note that the BigchainDB Server documentation adds more details: it lists the kinds of nodes and gives some explanation of each one.

Current coverage is 95.84% (diff: 100%)

Merging #651 into master will not change coverage

@@             master       #651   diff @@
==========================================
  Files            21         21
  Lines          1155       1155
  Methods           0          0
  Messages          0          0
  Branches          0          0
==========================================
  Hits           1107       1107
  Misses           48         48
  Partials          0          0

Powered by Codecov. Last update 62b7e68...b5dbe54


Add a slack notifier for master build failures

We recently had the problem that master builds were failing for about a week, without anybody noticing.
We should add a slack notifier which posts to the #eng-observability channel when the master build is unsuccessful.

Some possible solutions/implementations/ideas:

github action with slack notifier - https://github.com/marketplace/actions/slack-notify-build
workflow used by database team - https://github.com/timescale/timescaledb/blob/main/.github/workflows/ci_summary.yaml


About CUDA version compatibility

Objective of issue: I have been trying to make a clear installation to my another newly set up Ubuntu computer . Since it is CUDA enabled I have been trying to install CUDA by 'sudo apt install nvidia-cuda-toolkit' however this command installed my computer CUDA version 10.1 . Which then caused bunch of errors installing 'lava-dl' . The 10.1 version can cause some incompatibility issues because of PyTorch requirement.  So it would be better to add the requirements the CUDA version compatibility since installer does not check automatically.
All the best,

Lava DL version:

[ ] 0.3.0 (feature release)
[ ] 0.2.1 (bug fixes)
[x] 0.2.0 (current version)
[ ] 0.1.2

Lava version:

[ ] 0.4.0 (feature release)
[ ] 0.3.1 (bug fixes)
[x] 0.3.0 (current version)
[ ] 0.2.0
[ ] 0.1.2

I'm submitting a ...

[ ] bug report
[ ] feature request
[x] documentation request

Hi @ahmetakman , cuda version compatibility depends on the actual hardware and nvidia drivers you have installed in your system. So it can't be generalized in the requirements. For your specific case, I would uninstall torch
pip uninstall torch

and install it from the command set from with your cuda version, OS and package combination pytorch.org

The thing  I am mentioning about requirements lava-dl requirement is torch 1.8.1 which constrains the CUDA version options. I am trying to figure out what might be the problem right now which is probably also about the #55 . I am installing different cuda and driver versions with different torch versions.


docs: add basic developer setup docs

Hey @icexelloss -- do you want to try these out to see if it gets you a working dev environment?


Broken comment syntax highlight (JavaScript)

From @fabiogusmao on January 22, 2016 16:11
Just a minor issue but I noticed that if you put a comment line in the middle of a function declaration the comment line is not showing in gray.

Copied from original issue: Microsoft/vscode#2185

From @fabiogusmao on January 22, 2016 20:17
Ah yeah and it also happens that the word default  is not highlighted in a switch/case block.

This should be solved by https://github.com/Microsoft/TypeScript-TmLanguage/pull/56

Fixed by #257


Add categories to Tooltip based on y-axis

I currently have 6 series on my line graph. 3 of the series correspond to one y-axis and the other 3 correspond to another y-axis.
I would like the option for the tooltip to categorize the series instead of just showing all 6 series names and its values. An example of what I mean would be:

(with better styling than that haha)
Huge thanks in advance! I appreciate all the work you've been doing for Apexcharts :)

Yeah, that makes sense.
I will try to order it accordingly.

Thank you!


Rideable not working for PF2

Hello, I have the token that is the mount configured in the rideable tab to be rideable and mount on enter. Not working. Pressing M does noting either?

A few questions:

Are there any errors in the console (F12) when trying to mount?
Do any messages popup above the tokens (assuming that rideable setting "Message popups" and the core setting "Scrolling Status Text" is active)?
Could you send me a picture of the the mounts rideable settings tab?

The above message is not related to rideable. Could you send me screenshot of the rideable settings of the mount?

is this problem still present?


scrcpy --rotation=2  does not respect current orientation. It rotates the screen even when it is already rotated (landscape).

[x] I have read the FAQ.
[x] I have searched in existing issues.

Environment

OS: (sadly)  Windows (11).
scrcpy version: [2.1.1]
Installation method: [Windows release...]
device model: Xiaomi 11T
Android version: [13]

Describe the bug
The problem is that by default the orientation is set to vertical, but to prevent this (as horizontal is better) I tried using --rotation=2. But this does rotates the screen even when it is already landscape so that it becomes upside down :/.
It needs to work properly regardless of the starting screen orientation so that rotation=2 is always landscape and not upside down.
Kind regards.

rotation=0 (the default) is always the natural orientation (portrait for a phone, landscape for a tablet). Each increments add a 90° rotation counterclockwIse.

It seems that you have commented on what the rotation setting does while
not acknowledging the problem I described. Before replying any further,
please reread the entirety.
pon., 7 sie 2023, 00:40 użytkownik Romain Vimont @.***>
napisał:

rotation=0 (the default) is always the natural orientation (portrait for a
phone, landscape for a tablet). Each increments add a 90° rotation
counterclockwIse.
—
Reply to this email directly, view it on GitHub
https://github.com/Genymobile/scrcpy/issues/4219#issuecomment-1666994101,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AOSWAAFFRIFO6REHLNTMBN3XUAMNNANCNFSM6AAAAAA3GEJECA
.
You are receiving this because you authored the thread.Message ID:
@.***>

It needs to work properly regardless of the starting screen orientation so that rotation=2 is always landscape and not upside down.

Nope, rotation=2 means "rotate the window by 180°", so if the original is portrait, it displays portrait upside-down, if it is landscape, it displays landscape upside-down.
What you want to set is probably the mirroring orientation (with --lock-video-orientation), not the window rotation: https://github.com/Genymobile/scrcpy/blob/master/doc/video.md#rotation

Actually, like I have repeated already, the problem is that landscape mode
needs to be enabled at start. The option of lock screen orientation will
make it not rotate when portrait mode is preferred.

Only if you pass --lock-video-orientation without argument or with argument --lock-video-orientation=initial.
If you pass --lock-video-orientation=1, it will force the orientation to be 90° ccw from the natural orientation.

Are you writing that - - lock-video-orientation=1 will make it always
landscape at start but allow rotation as normal? Please let me understand.
If so, then why isn't this in the documentation? Regards
pon., 7 sie 2023, 20:21 użytkownik Romain Vimont @.***>
napisał:

Actually, like I have repeated already, the problem is that landscape mode
needs to be enabled at start. The option of lock screen orientation will
make it not rotate when portrait mode is preferred.
Only if you pass --lock-video-orientation without argument or with
argument --lock-video-orientation=initial.
If you pass --lock-video-orientation=1, it will force the orientation to
be 90° ccw from the natural orientation.
—
Reply to this email directly, view it on GitHub
https://github.com/Genymobile/scrcpy/issues/4219#issuecomment-1668380165,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AOSWAAAI6QP372VSEUA3XW3XUEW3LANCNFSM6AAAAAA3GEJECA
.
You are receiving this because you authored the thread.Message ID:
@.***>


There is currently no GBVM command to remove SFX from text

VM_SET_TEXT_SOUND allows sounds to be added to text (which works great, might I add), but there is no way to remove this functionality once it is set. If there were an additional command that allowed the sound to be removed similar to the way that timers can be started and stopped, it would be very helpful.
Thanks!

Does VM_SET_TEXT_SOUND 0, 0 work?

It did work. Thank you!


Upgrading components for PHP analysis (Composer 2 / PHP 8)

Hi,
This PR is motivated by https://github.com/oss-review-toolkit/ort/issues/4971
I have upgraded both Composer and PHP, as it seemed relevant to real-life contexts.
Cheers,
Camille

This should be removed when upgrading base image to 22.04 LTS

This comment makes me wonder whether there are any blockers to move to Ubuntu 22.04 LTS instead?

This comment makes me wonder whether there are any blockers to move to Ubuntu 22.04 LTS instead?

I propose to supersede this PR with #5651. Would that be fine with you, @camillem?

As #5651 is merged now which conflicts with this PR, I'll close this one.

This comment makes me wonder whether there are any blockers to move to Ubuntu 22.04 LTS instead?

I propose to supersede this PR with #5651. Would that be fine with you, @camillem?

Yes, of course. Thanks.


fides status command should also include database health

Is your feature request related to a specific problem?
The fides status command returns healthy but the database is in an unhealthy state
Describe the solution you'd like
This command should run a small query to verify that the database is reachable and functioning, with the output looking something like the following:
Getting server status...
Server is reachable
Client/server version match
Version: 1.8.2
Database: Healthy

done as part of unified fides


agdsn-zsh-config: 0.7.0 -> 0.7.1

Description of changes

Changelog:

Fix the git reminder

See https://github.com/agdsn/agdsn-zsh-config/compare/v0.7.0...v0.7.1
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
23.11 Release Notes (or backporting 23.05 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[x] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 253720 run on aarch64-darwin 1

1 package built:

agdsn-zsh-config


Fix handling of redirects for winhttp

This change adds in handling of redirect requests for the windows http task. In handling of the redirect, the default behavior is to forward along all request headers from the original request except for authorization. This is important because the redirect should not expose an auth token to a host that different than the one it was originally intended for. A more fully extensible model may wish to allow a caller to customize this behavior in cases that the redirect is to another page on the same host that also requires auth or that the original request blindly redirects without performing auth. This however is a good default as it reduces the security risk and will let a developer see the 401 upfront rather than being surprised with where else secret information like an auth token may be sent.

@jplafonta Is there anything else I should be doing here to get this into reviewable shape? Let me know and I'm happy to adjust / add to this :-)

Thanks for the PR.  It is on our radar.  We'll need to test it to ensure it doesn't break anything before accepting.  It'll probably won't be till end of year until we have cycles to circle back.

@jasonsandlin Sounds good and thanks for the update! Let me know if there are issues here as we have locally patched a project to include this. More than happy to help assist in validation or do anything else you folks might need. :-)

can you retarget this PR to "main" and repo thanks?


Update to zen v3.2.0, version 1.0.7

@otoumas same comment as on rosetta applies here, but there are many more places where version numbers have to be updated. This script was added to make the process of bumping version numbers easier already https://github.com/HorizenOfficial/zencash-swing-wallet-ui/blob/master/scripts/bump_version_devtool.sh

@otoumas same comment as on rosetta applies here, but there are many more places where version numbers have to be updated. This script was added to make the process of bumping version numbers easier already https://github.com/HorizenOfficial/zencash-swing-wallet-ui/blob/master/scripts/bump_version_devtool.sh

So we basically only need to run that script on this repo right? Are there any other manual changes? The main difference I see with rosetta repo is that there are two .go files with hardcoded versions in rosetta. In this repo, it is only configuration files and yml (which is a better place to be!)

@otoumas The main issue for this repo is that we're including shasums of the release binaries in md files. That means for a release we first have to tag/publish it to get the built binaries, then do another update and merge to master again with the shasums.


make: msp430-gcc: Command not found

irfan@irfan-Inspiron-N5050:~$ cd ~/kontiki/examples/er-rest-example/ && sudo make clean && sudo make TARGET=z1 savetarget && sudo make z1-reset && sudo make z1-coap-rtgs.predict.upload nodeid=2 nodemac=2
[sudo] password for irfan:
using saved target 'z1'
make: msp430-gcc: Command not found
make: msp430-gcc: Command not found
rm -f *~ *core core *.srec
*.lst *.map
*.cprg *.bin .data contiki.a *.firmware core-labels.S *.ihex *.ini
*.ce *.co
rm -rf *.z1  symbols.c symbols.h
rm -rf obj_z1
make: msp430-gcc: Command not found
make: msp430-gcc: Command not found
saving Makefile.target
using saved target 'z1'
make: msp430-gcc: Command not found
make: msp430-gcc: Command not found
make -k -j 20 z1-reset-sequence
make[1]: Entering directory '/home/irfan/kontiki/examples/er-rest-example'
using saved target 'z1'
make[1]: msp430-gcc: Command not found
make[1]: msp430-gcc: Command not found
../../tools/zolertia/z1-bsl-nopic --z1 -c /dev/ttyUSB0 -r
MSP430 Bootstrap Loader Version: 1.39-goodfet-8
Use -h for help
Use --fromweb to upgrade a GoodFET.
Reset device ...
Done
make[1]: Leaving directory '/home/irfan/kontiki/examples/er-rest-example'
using saved target 'z1'
make: msp430-gcc: Command not found
make: msp430-gcc: Command not found
mkdir obj_z1
CC        ../../apps/er-coap/er-coap.c
make: msp430-gcc: Command not found
../../Makefile.include:240: recipe for target 'obj_z1/er-coap.o' failed
make: *** [obj_z1/er-coap.o] Error 127
irfan@irfan-Inspiron-N5050:~/kontiki/examples/er-rest-example$

The problem is related to your environment, you are trying to use "sudo"
while the toolchain is set up for "user". Try again without using sudo.
If you face a problem about permission denied for the ttyUSBx ports, this
is a known bug solved by adding "user" to the dialout group:
sudo adduser $USER dialout
You will need to log out for this change to take effect next time you start
a new session.
--Antonio
for more info visit


SYSTEST-9250 1-1 WS Mapping for Proxy Mode

Create 1-1 WS mapping instead of a singleton WS connection when MF is in proxy mode.

Hey @michaelcfine, I want to give some more background regarding this PR so you can better understand the code changes:
Currently, on each new incoming connection to Mock Firebolt in Proxy Mode a WS object is created and assigned to the user. That same WS object is used to create a "messageHandler" for that user. Inside of that message handler, if Proxy Mode is enabled, a message is forwarded to the proxied endpoint. That forwarding is done through a separate WS object.
That proxying is currently done through a singleton WS object. Ripple opens several connections to MF. The result is mapping several incoming WS objects to one outgoing WS object. An unintended consequence of this is that when events/replies come in from the proxied endpoint, they are not going to the correct incoming WS object and events are not working properly on a Ripple connection.
A solution to the issue mentioned in the above paragraph is to turn the outgoing WS singleton into a 1:1 mapping with each incoming WS object.
When an incoming WS requests a message sent to the proxied endpoint, we now:
Check a WS:WS map to see if the incoming WS object has an outgoing WS object
If the map contains an entry for the incoming WS object, use it
If the map does not contain an entry, create an outgoing WS object and assign it to the map


Update concurrent_map.go

use the std lib .

@gua-pian thanks for contributing! Please see the discussion we've had here: https://github.com/orcaman/concurrent-map/issues/48
The TL:DR; is that we need to include some benchmarks in this repo (go test -bench) to make sure these type of changes do not hurt performance for the users of the package.
Eventually, in the discussion we've had on the stdlib's page here, the native implementation did seem a tad slower, but perhaps it's just the number of test iterations.

@orcaman thanks for your reply, I'll close this.


Slashes in folder param become escaped

Version: 1.41.1
Commit: f51e045cd5483561afc07694f39307fb673b6d1d
Date: 2020-01-17T22:58:55.612Z
Browser: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36
Code Server Version: 2.1698-vsc1.41.1

OS Version: archlinux

Description
When changing directories, it becomes
https://code.example.com/?folder=vscode-remote%3A%2F%2Fcode.example.com%2Fhome%2Fdeveloper%2FWorkspace%2FDND
instead of `https://code.example.com/?folder=/home/developer/Workspace/
Steps to Reproduce

open folder as default (accessible at https://example.com/)
CTRL+k and CTRL+O and open a different folder
check url

yes i know the name of the issue is horrible, my words have been failing me today

Fixed :)
Thanks for reporting, I confirmed this.

Yeah, also whats with the ?folder=vscode-remote%3A%2F%2Fcode.example.com%2F instead of ?folder=/
I dont understand why it does this?

Not sure either. @code-asher please respond.

I'm not certain, that just seems to be what VS Code 1.41.1 is doing now.

To clarify, if you click folder > open that's what VS Code puts in the URL, so I updated our server code to match.

i think it may be because of the implementation?
This suggests that code-server uses a varient of the vscode-remote extension and wasnt properly modifed

Internally VS Code refers to remote URLs with the vscode-remote:// scheme. In our case the remote provider is code-server but that doesn't change the scheme. We could change it (and we used to) but there didn't seem any benefit in the added patching it required.

Ah, alright then,

Aren't slashes supposed to be URL encoded in query strings?

It's optional.
package main

import (
	"fmt"
	"net/url"
)

func main() {
	u, _ := url.Parse("localhost:8080/?meow=bar/foo&big=coadler/asher")
	fmt.Println(u.Query())
}

Prints:
map[big:[coadler/asher] meow:[bar/foo]]

That's true it parses, but there'd be no way to construct the same thing on the way out
package main

import (
	"fmt"
	"net/url"
)

func main() {
	u, err := url.ParseQuery("meow=bar/foo&big=coadler/asher")
	if err != nil {
		panic(err)
	}

	fmt.Println(u)
	fmt.Println(u.Encode())
}

map[big:[coadler/asher] meow:[bar/foo]]
big=coadler%2Fasher&meow=bar%2Ffoo

https://tools.ietf.org/html/rfc2396#section-3.4 seems to indicate slashes are reserved within query strings
The documentation for ParseQuery says that it expects a URL-encoded query string but seems to work fine if it doesn't
https://golang.org/src/net/url/url.go?s=25201:25246#L859

That's interesting. So then everything is working as expected.
@code-asher Why does the folder argument need the scheme when it's always vscode-remote? Let's just remove it and add it ourselves when appropriate?

My assumption was that it would eventually be possible (if not already)
to open different schemes on startup. For example maybe a git:// URL or
an ssh:// URL or something.
But that's just a guess and I haven't looked into the commits or issues
to try determining VS Code's reasons for making this change.

I navigate many times by manually editing the url to open the folder I want.  It also helps me easily see the directory that I am currently in, since many times I will have 5 tabs open with different directories.  The new vscode-remote:// URL has been pretty annoying.  I wish threre were a way to keep the folder= URL or at least an option or parameter we can pass when launching code-server.
Workaround to give you the old url functionality back:
My code-server instance sits behind a nginx reverse proxy with lets encrypt SSL and a secure username+pwd login form.  If anyone has their instance behind an nginx reverse proxy, you can add this to your nginx configs which will strip out the vscode-remote:// and replace the characters with slashes which will give you the url format that we are all used to.
This:
https://my.domain.com/?folder=vscode-remote%3A%2F%2Fmyhostname%2FUsers%2Fusername%2Ffolder1%2Ffolder2%2Ffolder3
Becomes This:
https://my.domain.com/?folder=/Users/username/folder1/folder2/folder3
    set $args_original $args;
    if ($args ~ ^(folder=)vscode-remote%3A%2F%2F.*?%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args ~ ^(folder=.*)%2F(.*)$) { set $args $1/$2; }
    if ($args != $args_original) {
        return 301 "$uri?$args";
    }

Yeah, I find the new format fairly annoying as well. I'm thinking we
should patch VS Code to use the old URL format when the scheme is
vscode-remote. That would restore the old behavior while still allowing
other schemes to be used.

how easy would that patch be?

I imagine it would be a single line change (or two if we want to do the
same for workspace paths). The URL is created in
src/vs/code/browser/workbench/workbench.ts in createTargetUrl so
we'd just need to make it use .path instead of .toString() and remove
the encoding.

Oh but we'd only do that if the scheme is vscode-remote, otherwise we
keep the current behavior.

That sounds great!

I imagine it would be a single line change

30 lines later...

closed this in 26647c5

Thanks Asher! 👏

I think we're going to need to revert this (at least re-introduce the encoding) because otherwise you can't open directories with #, &, etc to name a few.

Hmm maybe we can decode just the slashes after encoding (.replace("%2F", "/")). Seems to work but I'm not sure if there's some case I'm not considering.

@code-asher and can't open paths with spaces which is fairly common.  See https://github.com/cdr/code-server/issues/1488


chore: Add note about Semver implications for dependency updates

Issue #

Description
Adds a note to the readme about semver implications for dependency updates. This aligns with Android and Flutter.
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Please point out if there are any Swift-specific dependencies are are particularly relevant to this item (ie Kotlin language version for Android).


SAM-1309 Only 2 decimals used in scoring causes loss of points

This has been discussed in the S2U call, @joaquinmarques would you mind to clean up the PR removing the commented lines?
Vamos que si te importaría limpiar la PR de comentarios y dejarla limpia 👍
Thank you, gracias

Removed the commented lines

Maybe related to https://jira.sakaiproject.org/browse/SAK-39952


Feature/chromecast

Added the ability to cast video to a Chromecast receiver.
Video demonstration:
https://www.youtube.com/watch?v=C2XWl_qmQp0
Screenshot 1:

Screenshot 2:

Screenshot 3:

Screenshot 4:

Thanks for the pull request, @PavloNetrebchuk!  Please note that it may take us up to several weeks or months to complete a review and merge your PR.
Feel free to add as much of the following information to the ticket as you can:

supporting documentation
Open edX discussion forum threads
timeline information ("this must be merged by XX date", and why that is)
partner information ("this is a course on edx.org")
any other information that can help Product understand the context for the PR

All technical communication about the code itself will be done via the GitHub pull request interface. As a reminder, our process documentation is here.
Please let us know once your PR is ready for our review and all tests are green.

@PavloNetrebchuk 🎉 Your pull request was merged!  Please take a moment  to answer a two question survey so we can improve your experience in the future.


Character encoding issues - Python 2.7 and Python 3.4.3

Py 2.7 Issue
I've create a kata using non-ascii characters. I have the following issue when I print the input and expected output using this code:
word = u"kéz"
ref = u"kéznek"
print "%s -> %s" % tuple(w.encode('latin-1') for w in (word, ref))

I randomly get two different outputs:

kéz -> kéznek
kÃ©z -> kÃ©znek

My guess is that there are multiple runners with different output encoding settings.
Py 3.4 Issue
I'm not able to create a Py 3.4 version as I get this error:
Unable to decode the command from the command line:
UnicodeEncodeError: 'utf-8' codec can't encode character '\udcc3' in position 234: surrogates not allowed

I wasn't able to repro this outside Codewars.

Any update on this?


Glossary

Updated glossary with table specifying input format and pre-defined constants.

Codecov Report

Merging #144 (5d6bce2) into master (2a53d48) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##             master     #144   +/-   ##
=========================================
  Coverage     70.35%   70.35%
  Complexity      550      550
=========================================
  Files            84       84
  Lines          1852     1852
  Branches        199      199
=========================================
  Hits           1303     1303
  Misses          497      497
  Partials         52       52

:mega: Codecov can now indicate which changes are the most critical in Pull Requests. Learn more


root volume's format is 'raw' if it's installed from ISO

The format should be qcow2

fixed in the mainline


defer rich import until needed. Also defer difflib

Codecov Report
All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 96.08%. Comparing base (986d1f5) to head (3198d9e).

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #156      +/-   ##
==========================================
- Coverage   96.24%   96.08%   -0.16%
==========================================
  Files          16       16
  Lines        1812     1815       +3
  Branches      458      457       -1
==========================================
  Hits         1744     1744
- Misses         31       33       +2
- Partials       37       38       +1

Flag
Coverage Δ

unittests
95.92% <100.00%> (-0.11%)
:arrow_down:

Flags with carried forward coverage won't be shown. Click here to find out more.

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Copyright notice wrapped in #region can't be detected

We hide most of our copyright notices in regions, so all our headers look like this.
#region Copyright © ...
// Copyright details here.
#endregion

As everything in the copyrightText value in stylecop.json gets printed out with extra slashes it becomes this.
// #region Copyright © ...
// Copyright details here.
// #endregion

This causes a few problems as it can't detect the existing headers and flags them as missing. Changing them to not be in regions is no small task so that isn't really on the cards.
So, two small questions:
I've had a perusal of the issues list and can't find anything that just allows the copyright notice to be printed out exactly as stated in the stylecop.json. Is there a setting I missed that allows that?
If not, and doesn't go against any specific design philosophy, could a flag be added that tells the analyzer when the copyright text should be taken literally?

Personally I've been simply disabling the copyright header validation until reaching a point where I'm ready to switch to one of the styles supported by StyleCop Analyzers. In the case here, that would involve removing the #region surrounding the header.
@vweijsters What are your thoughts on this?

I can see the benefit of wrapping the copyright header in a #region, especially since there are companies that require a change log to be maintained there. My suggestion would be to add a setting (with values never / always / allowed, the default being never) that allows wrapping of the copyright header within a #region, for both XML and non-XML formats.
I'm not a big fan of allowing literal text as a copyright header, as that would allow for C# statements within the header, making it unclear whether or not they should be checked for other rules.

:memo: We use the omit/allow/require terminology for other similar options, such as whether to end the file with a trailing newline character.

 While it's only one point of reference we have SA1124 off in general.


Blossom Auth CI update

Earth2Studio Pull Request
Description

Adding few users to authorized CI runners.
Checklist

[ ] I am familiar with the Contributing Guidelines.
[ ] New or existing tests cover these changes.
[ ] The documentation is up to date with these changes.
[ ] The CHANGELOG.md is up to date with these changes.
[ ] An issue is linked to this pull request.

Dependencies

/blossom-ci

/blossom-ci


fix include some case and adjust expect result

Proposed changes
Issue Number: close #xxx

run buildall

run external

run compile

run buildall


"firewall-cmd "command con't autocomplete in CentOS

While the other commands autocomplete rightly, "firewall-cmd "command con't autocomplete in CentOS.
could anybody tell me why?

This is because there is no completion for firewall-cmd in zsh. You could use the bash completion and load it within zsh.


New version: HearthSim.HearthstoneDeckTracker version 1.19.17

Result: Installation Successful

Manifest
Add/Remove Programs

Name
Hearthstone Deck Tracker
Hearthstone Deck Tracker

Version
1.19.17
1.19.17

Publisher
HearthSim
HearthSim

ProductCode

HearthstoneDeckTracker

Auto-updated by vedantmgoyal2009/winget-pkgs-automation in workflow run 6857
Microsoft Reviewers: Open in CodeFlow

@wingetbot waivers Add Validation-Executable-Error


Add preview for long javadoc texts

Currently, the bot simply posts a link to the web version of the javadoc if the requested description etc is too long. In my opinion, some sort of preview that is truncated to fit the Discord embed limits would be a good addition. The text could simply be cut off and ... or something could be appended. This could result in ugly styling issues (e.g. if this happens in the middle of a code block), so a more sophisticated strategy might be worth discussing.

This could result in ugly styling issues (e.g. if this happens in the middle of a code block), so a more sophisticated strategy might be worth discussing.
This is the sole reason it doesn't have a truncated description already. Currently it doesn't keep html, it just gets the text. Once I add support for that through #19 though, something like this should be possible, as I can specifically cut off before an example starts.

This could result in ugly styling issues (e.g. if this happens in the middle of a code block), so a more sophisticated strategy might be worth discussing.
This is the sole reason it doesn't have a truncated description already. Currently it doesn't keep html, it just gets the text. Once I add support for that through #19 though, something like this should be possible, as I can specifically cut off before an example starts.


nfcore template update with restructuring of workflow

This PR updates the nf-core template to the newest version 2.14.1.
The new template includes major changes in the workflow structure. IMO those correspond to the changes suggested by @feiloo in our developer meeting to make the workflow more modular and compatible for combination (in that respect, sarek also adapts these changes in their dev branch).
If you have any comments or additional changes, feel free to add them.
Summary of most important changes:

restructuring of workflow: workflow/variantinterpretation.nf now only contains main workflow steps while Initialisation, validation and completion are separate subworkflows.

input channels are now defined in main.nf and not in the workflow/variantinterpretation.nf file
Pipeline initialisation and completion are now separate subworkflows called in main.nf workflow call. This removes the groovy scripts used in workflow/variantinterpretation.nf.
parameter validation is performed in PIPELINE_INITIALISATION subworkflow and is not anymore within workflows/variantinterpretation.nf.
new samplesheet check in PIPELINE_INITIALISATION subworkflow, removed previous samplesheet check via python script. I had to adapt the new samplesheet check to accept vcf files instead of fastq_1 and fastq_2 files.

updates multiQC module from v1.17 to v1.21 and fixed errors coming with template changes in workflows/variantinterpretation.nf.
added conda channels to nextflow.config

Additional changes by me (template-independent):

fix of inconsistent default values in nextflow_schema.json
named input channels supplied into the workflow VARIANTINTERPRETATION with "ch_" prefix to better distinguish from workflow-intrinsic channels and parameters.

I now figured the assets paths to be a non issue.
It occurred when my pipeline was erroneusly including the outermost CIOABCD_VARIANTINTERPRETATION workflow instead of VARIANTINTERPRETATION.
It could still maybe be alleviated by using nextflows moduleDir instead of projectDir but isnt any problem atm this way.


EMU: load a configuration file and build device network topology

Task2
Goal: Build network of devices based on configuration

load a configuration file start the module
Build network of devices based on configuration

Acceptance Criteria

The network of devices is up and running
Tests created using ut-core to support the emulator functions

Tasks Completed
Modified the devices data structure to linked list to cater for device addition/removal dynamically.
Loaded links representing endpoints and connections from YAML config.
Next steps
Add Physical and logical address auto allocation logic

Tasks Completed
Updated the Yaml template to represent the device network as a N-ary tree with a parent/children relation ship between devices.
Next steps
Create an auto allocate function which traverses through the device N-ary tree and assigns the physical and logical addresses based on its connections. Needs GH #15 merged.

@sramani-metro  need to update your eta end dates and estimates etc..

Tasks Completed
Added physical and logical address auto allocation logic based on the new n-ary tree based device map.
##Next steps
Take up suggestions during code review of #15 like split up of files, moving profiles outside of the vcomponent directory etc

PR created


Apply the settings that allow admins to hide the image and video gallery options to apply to the new Search UI page

Is your feature request related to a problem? Please describe.
Currently the options to hide Image and Video gallery modes on new Search UI page are not functioning.
Describe the solution you'd like
If either/both options are set to not show the image/video mode options, then they should not show.

Done


Generate 3D animation of network spiking

Can use Cliff's or John's code

examples: https://bbp.epfl.ch/nmc-portal/welcome or https://www.youtube.com/watch?v=MJjNkAqlEOA

Is Cliff's code available somewhere, @salvadord ?

@joewgraham it should be :)


📃: URL Shortener

:red_circle: Title : URL Shortener
:red_circle: Aim : To create a simple URL shortener that converts long URLs into shorter versions.
:red_circle: Brief Explanation :
This project involves building a basic URL shortener that takes a long URL as input and generates a shorter, manageable version. It will help you practice string manipulation and data storage techniques, and if you choose to implement a web interface, you can learn about web frameworks as well.
Screenshots 📷
NA

:white_check_mark: To be Mentioned while taking the issue :

Full name : Charul Chim
What is your participant role?
Gssoc-ext

Happy Contributing 🚀
All the best. Enjoy your open source journey ahead. 😎

Hi, I'd love to contribute to this issue.
🔴 Full Name: Rahul Aka Vector
🔴 Participant Role: SSOC , Hacktoberfest
Looking forward to contributing! 😎

Hi, I'd love to contribute to this issue.
🔴 Full Name: Rahul Aka Vector
🔴 Participant Role: SSOC , Hacktoberfest
Looking forward to contributing! 😎

Bro SSOC ends, which SSOC you are talking about?
And raise another issue as this issue is going to be assigned to @Charul00

@Charul00 bro please fill all the details in the Template like name, participation roles, etc.

@UTSAVS26  done bro


if sign up is not allowed - redirect away from sign up form page.

and the same for create controller.

Thanks for the contribution.
If you have allow_sign_up? set to false then Clearance disables these routes. If you''ve run the routes generator to copy Clearance's routes locally then you have the power to redirect these (or delete these) from your routes file already.
Is there another use case we're not considering?

Hi.
Yeah, I have a copy of routes.
My scenario are following:
As a site owner I want to on/off registration on site
so that I have an ability to open registration for limited time
And config option "config.allow_sign_up" is pretty handy for this.
But for local routes copy it requires my fix.

I've elected not to expand the use of allow_sign_up? at this time. You should be able to implement this in your own application in any number of ways - either by overriding the controller actions (calling super after your check) or perhaps with custom routing constraints and the like.
Again, thanks for the contribution it's just not something I'm comfortable incorporating at this point.


Add list_subscriptions_by_topic endpoint

Adds this missing endpoint for SNS

Thanks for the PR!

Do note that I made a couple minor changes. Using the NextToken now looks like
list_subscriptions_by_topic("arn", next_token: "123456789")


Data Type Unknown in RDB$BACKUP_HISTORY

Field RDB$TIMESTAMP

Hi
Are you using latest Flamerobin version and Fb4.0+ fbclient.dll?

Debian 12
libfbclient.so.4.0.4
FlameRobin 0.9.10 (git hash f4386f82) Unicode

It seems to be resolved in a clean environment.


Test before using SIGUNUSED

According to man7.org:

   Where defined, SIGUNUSED is synonymous with SIGSYS on most
  architectures.  Since glibc 2.26, SIGUNUSED is no longer defined on
  any architecture.

as well as gnu.org:

The obsolete signal constant SIGUNUSED is no longer defined by <signal.h>.

SIGUNUSED has been removed in newer version of glibc. Therefore, using it without checking might result in compilation errors.
This pull request added a simple #ifdef check before using SIGUNUSED in clone_flags_to_str.

Pushed. Thanks!


Create Conv3D Layers in beyondml.pt.layers

Need to create and test the following layers:
beyondml.pt.layers.MaskedConv3D
beyondml.pt.layers.MultiMaskedConv3D
beyondml.pt.layers.SparseConv3D
beyondml.pt.layers.SparseMultiConv3D
beyondml.pt.layers.MaxPool3D
Also need to rename the SparseConv and SparseMultiConv to SparseConv2D and SparseMultiConv2D
Need to ensure all functions in beyondml.pt.utils work with the new layers

Also need to create Conv3D layer

Layers created - need to test and add documentation

Layers created and tested


[feat]: make switches green/other

Is your feature request related to a problem? Please describe.
The switches to enable or disable SSL are not clear. I can't tell if they're enabled or disabled because the colors are too similar.
Describe the solution you'd like
Change the colors to a clear green when enabled.

@digiserg we allow users to choose the color they like, so it's the chosen color, however, we can gray out the label when the option is not checked


test: fix stdlib tests when targeting WebAssembly/WASI

This change adds support for WASI in stdlib tests. Some tests that expect a crash to happen had to be disabled, since there's currently no way to observe such crash from a WASI host.

Related to SR-9307.

@swift-ci please smoke test

@swift-ci please test Windows platform

@swift-ci please test Windows platform

according to the spec https://webassembly.github.io/spec/core/intro/overview.html:

Traps
Under some conditions, certain instructions may produce a trap, which immediately aborts execution. Traps cannot be handled by WebAssembly code, but are reported to the outside environment, where they typically can be caught.

This means that traps shut down the whole WebAssembly VM, and it's up to the host environment to restart it or not. But I don't think there's anything that the compiler can do to intercept such trap.

@swift-ci please test Windows platform

@swift-ci please smoke test

@swift-ci please test Windows

Tests were fully passing on all platforms. When merging I assumed no further objections to be resolved were present, let me know otherwise.


rider demo videos

Summary by CodeRabbit

New Features

Added a new demo configuration feature with the ability to toggle demo settings for Rider, Restaurant, and Admin functionalities. Users can enable or disable demo modes and save their configuration settings.

Enhancements

Introduced a new React component DemoLink for rendering dynamic links based on the admin demo configuration.
Included a new style definition for sidebarLink with hover effects in the styles file.

Refactor

Updated the ConfigurableValues function in constants.js to include ENABLE_ADMIN_DEMO for managing admin demo settings.

closing as requested by @MuhammadAdnan111 .


Enable direct import of image training files

Option to enable direct import of training images from a user created folder in the workspace. This is a time-saving alternative to copying and pasting Imgur URLs.

I do this by hand, just create the directory and drop ion .pngs. works fine


Etherium shards probably shouldn't bring the player above max build height

I was sorting my chests and put about 10 stacks of etherium shards in my inventory. After about 4 seconds I had passed Y 1,500. Thankfully I had slime boots on.
The shards are a really cool mechanic, but I think some sort of cap would be ideal. I'd either prevent the shards from taking you past a certain height, or cap the maximum vertical speed at 4 stacks of shards.

@Best108 Opinions?


Add Configuration in falco.yaml for the -A Command Line Option

Motivation
These days I need to monitor some system calls like madvise and accept. However, system calls like those are ignored by default and if you want to enable monitor for those, you need to add -A option when you run Falco from the command line.
That's OK, but maybe it's better if we can set a configuration option (e.g. all_system_all_included: true) in the falco.yaml file so that we can monitor system calls above even when Falco is deployed in container or K8s. It's inconvenient to add -A option if your Falco runs in the container and it's also, to some extent, not graceful.
Feature
Add a configuration option in falco.yaml for the command line option -A (e.g. all_system_all_included: true).
Alternatives
Additional context

OK, maybe this is not so necessary for the community. If you want to add this option, you can modify the K8s DaemonSet yaml file :)


Feature-Request: Add poll_next! macro, analogous to poll!.

For futures there is a convenient poll! macro that allows polling a future once inside of an async context. I couldn't find an equivalent for the poll_next method of streams. This would be really useful in my opinion.
This could be done somewhat like this:
use futures::{Stream, StreamExt};
use std::future::Future;
use std::pin::Pin;
use std::task::{Context, Poll};

fn poll_next<StreamType>(stream: StreamType) -> PollNextOnce<StreamType> {
    PollNextOnce {
        stream,
    }
}

struct PollNextOnce<StreamType> {
    stream: StreamType,
}

impl<StreamType> Future for PollNextOnce<StreamType>
where
    StreamType: Stream + Unpin,
{
    type Output = Poll<Option<StreamType::Item>>;

    fn poll(self: Pin<&mut Self>, context: &mut Context) -> Poll<Self::Output> {
        Poll::Ready(self.get_mut().stream.poll_next_unpin(context))
    }
}

I would be willing to make a pull request if this feature is considered to be added.

I guess you can use poll!(stream.next()).

I guess you can use poll!(stream.next()).
Thanks for the tip. I initially thought this would be problematic in the Poll::Pending case, but since stream.next() only takes a mutable reference, this problem doesn't exist.

This would make the implementation of a poll_next! macro much easier as it would only need to wrap poll!(stream.next()).
In case a decision is made against the inclusion of poll_next!(..), the documentation of poll!(...) could at least be updated to mention this pattern.

I would be happy to accept adding documentation.


Live

Docs Build status updates of commit 722b6a3:
:white_check_mark: Validation status: passed
For more details, please refer to the build report.
Note: Broken links written as relative paths are included in the above build report. For broken links written as absolute paths or external URLs, see the broken link report.
For any questions, please:Try searching the docs.microsoft.com contributor guidesPost your question in the Docs support channel


gcc fails to compile generate_catalog.c

Using gcc to compile generate_catolog.c I get the following errors:
generate_catalog.c:70:26: error: initializer element is not a compile-time       constant   ...= fmax(tan(max_fov*(1+max_fov_error)/2.0)/tan(max_fov/2.0),        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ generate_catalog.c:550:61: error: function definition is not allowed here         void permute_features(int from_index, int to_index) {                                                             ^ generate_catalog.c:597:9: warning: implicit declaration of function       'permute_features' is invalid in C99 [-Wimplicit-function-declaration]         permute_features(feature_index, i-1);         ^ generate_catalog.c:623:52: error: function definition is not allowed here     int compare_bins(const void *p, const void *q) {                                                    ^ generate_catalog.c:636:74: error: use of undeclared identifier 'compare_bins'     qsort(new_pattern.features, num_stars_in_pattern-2, sizeof(Feature), com...                                                                          ^ generate_catalog.c:649:24: warning: implicit declaration of function       'compare_bins' is invalid in C99 [-Wimplicit-function-declaration]     pattern_rotation = compare_bins((void*)&first_feature,                        ^ generate_catalog.c:1018:9: warning: implicit declaration of function 'fseeko64'       is invalid in C99 [-Wimplicit-function-declaration]         fseeko64(pattern_catalog_file,         ^ generate_catalog.c:1057:5: warning: implicit declaration of function 'fseeko64'       is invalid in C99 [-Wimplicit-function-declaration]     fseeko64(bsc_file, 28, SEEK_SET);     ^ 4 warnings and 4 errors generated.

Just verified it still works in the newest version of mingw-w64 on windows 10.  Here's the download link I used:
https://sourceforge.net/projects/mingw-w64/files/Toolchains targetting Win32/Personal Builds/mingw-builds/installer/mingw-w64-install.exe/download
And the settings in the installer:
Version 8.1.0
Architecture x86_64
Threads posix
Exception seh
From there I ran the mingw-w64.bat file and compiled as normal with gcc
Build revision 0

Ok thanks for the steps and environment details. Also thanks for posting this, it's very cool. In your paper you compare Tetra with other star finding algos such as Pyramid. Did you write those yourself using their papers or were you able to find source for them somewhere? Thanks.

Thank you!  I was able to find the original implementation of Pyramid in a publication (I believe it was Malak Samaan's thesis, although I had trouble tracking it down just now.), however I spoke with Professor Mortari about it, who expressed that the code was never meant to be released.  I therefore felt it would be unfair to make the comparison with an optimized implementation of Tetra, as the original pyramid code wasn't designed for performance.  I reimplemented both Pyramid and ND Star ID myself, in C, to make them faster and closer to what I believe is used in commercial devices.  My pyramid code also includes a toggle for the linear time cross-referencing I mentioned in the paper.  I haven't posted the code, as they aren't my algorithms.  They also aren't as clean and well commented as my Tetra code.  But I'm willing to ask permission from Prof. Mortari if you think it may be of benefit to post them here?

I would love to see them if you can get the proper permissions. I think it would benefit the "next generation" of researchers/hobbyists to see implementations if the authors don't mind. I could even see a world where someone sponsors a benchmarking platform for people to test and compare implementations/algorithms.


doc: Minor grammar changes in ryu_app_api

Coverage decreased (-0.008%) to 67.563% when pulling e11acb43400fc152cae48283f491af32c959c0f1 on tgockel:patch-1 into 60651d8a1c092453c4de8980381bdc02dbc01aaa on osrg:master.

Pushed, thanks! Please send a patch to the mailing list next time instead of a pull request.


Remove ReadProfiling and ReadRepo permissions from JWTs

FYI, I cannot reproduce any errors relevant to removal of above permissions, did I miss something? I tested running runtime and devtool-cloud
Closes https://github.com/rilldata/rill-private-issues/issues/484

The frontend should have stopped using these APIs a while back, so probably you didn't miss anything

Double checked, ComparisonPill uses MetricsViewTimeRange.


feat: Making notices more general (real)

Summary of Changes
Added wildcard functionality to notices (ie if we wanted to add a notice to every table in the shadow schema, could do that with ..shadow.*) and dynamic HTML messages (ie if we wanted to have each of those notices have a different message depending on which table it was)
Tests
Added notices tests to test the functionality of the wildcard and the dynamic message.
Documentation
Added documentation in frontend/docs/application_config.md

@dorianj check this out!
This was something you suggested on my first PR and that we found it was really useful. We would love to hear your thoughts on the specific implementation.

This is cool! Definitely great to have these be more flexible.
Rather than using strings with wildcards, I believe that we should allow the use of regexes. Then the eval code can branch on type, rather than the more complicated inspection of the string contents.
The trouble is that you can't use them in object literals in JS. You can however use them in a Map. I'm not sure how to square this circle -- any thoughts?
Less importantly: i appreciate the completeness of tests. However, it feels a bit too much to test every permutation of position of wildcards. This might go away if regexes were implemented, since the test would be more generic.

This is cool! Definitely great to have these be more flexible.

Yeah, we needed to do some batch notices and the current solution wasn't scaling.

Rather than using strings with wildcards, I believe that we should allow the use of regexes. Then the eval code can branch on type, rather than the more complicated inspection of the string contents.
The trouble is that you can't use them in object literals in JS. You can however use them in a Map. I'm not sure how to square this circle -- any thoughts?

I agree the string matching logic is not great, luckily we only have four elements to match. I don't see a way of creating a map the way we have it set up though.

Less importantly: i appreciate the completeness of tests. However, it feels a bit too much to test every permutation of position of wildcards. This might go away if regexes were implemented, since the test would be more generic.

Maybe it would be an opportunity to do some parametrized tests.
Here we prioritized not making a breaking change, but that said, we didn't see many other options anyways. Would you be OK with us going with this solution at this time? Can you live with this?