background ek deletion

debugging scripts to help pinpoint query problems of ek generation

from various log sends the deletion on mobile can be a bottleneck so i'm moving it to the background.  @maxtaco going to ditch the creation scripts for now, ptal at the current changes


fix: StoredValue and Resource panic during cleanup

If the value inside a StoredValue implements the drop trait, and that drop causes another read, update or dispose on another StoredValue, we'd get a cryptic panic with already mutably borrowed: BorrowError.
I encountered this issue with a StoredValue<Disposer> with the disposer type returned by as_child_of_current_owner(). Because the Disposer cleans up a reactive sub-scope on Drop, it will try to mutably borrow Runtime::stored_values while it is still mutably borrowed by the function that drops it.

Oh, wow. This is one of those very awkward examples where the scoping of when the BorrowMut handle gets dropped makes a real difference. Nice catch.


1.21

Are there plans for 1.21?

I made plans for 1.21 after seeing this issue, it's out now!
https://www.curseforge.com/minecraft/mc-mods/stitchedsnow
https://modrinth.com/mod/stitchedsnow

Thank you so much!


WhatsApp(Independent Publisher)

When submitting a connector, please make sure that you follow the requirements below, otherwise your PR might be rejected. We want to make you have a well-built connector, a smooth certification experience, and your users are happy :)
If this is your first time submitting to GitHub and you need some help, please sign up for this session.

[x] I attest that the connector doesn't exist on the Power Platform today. I've verified by checking the pull requests in GitHub and by searching for the connector on the platform or in the documentation.
[x] I attest that the connector works and I verified by deploying and testing all the operations.
[x] I attest that I have added detailed descriptions for all operations and parameters in the swagger file.
[x] I attest that I have added response schemas to my actions, unless the response schema is dynamic.
[x] I validated the swagger file, apiDefinition.swagger.json, by running paconn validate command.
[x] If this is a certified connector, I confirm that apiProperties.json has a valid brand color and doesn't use an invalid brand color, #007ee5 or #ffffff. If this is an independent publisher connector, I confirm that I am not submitting a connector icon.

If you are an Independent Publisher, you must also attest to the following to ensure a smooth publishing process:

[x] I have named this PR after the pattern of "Connector Name (Independent Publisher)" ex: HubSpot Marketing (Independent Publisher)
[x] Within this PR markdown file, I have pasted screenshots that show: 3 unique operations (actions/triggers) working within a Flow. This can be in one flow or part of multiple flows. For each one of those flows, I have pasted in screenshots of the Flow succeeding.
[x] Within this PR markdown file, I have pasted in a screenshot from the Test operations section within the Custom Connector UI.
[x] If the connector uses OAuth, I have provided detailed steps on how to create an app in the readme.md.

@zak0807 Thank you so much for your submission. May I ask you please to remove all the images from the PR files. You already have them above in the PR description and that is enough :-).
Please let me know if you have any questions.

Hi Amjed. I've been trying to remove the files that you told me to but somehow I'm getting this message when doing so: "This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository."
What should I do in order to remove the images?
Thanks!

@zak0807 Thank you so much for your submission. May I ask you please to remove all the images from the PR files. You already have them above in the PR description and that is enough :-).
Please let me know if you have any questions.

Hi Amjed. I've been trying to remove the files that you told me to but somehow I'm getting this message when doing so: "This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository."
What should I do in order to remove the images?
Thanks!

@zak0807 It should be the same way you removed the settings.json file. but you can close this PR and create a new one with the required files only. please see below.

apiDefinition.swagger.json
apiProperties.json
readme.md

Thank you so much.


Is there a Vanilla JS link

Do you have a mono repo link for vanilla JS so that it can be added as a script on HTML page?

This would be greatly appreciated

hi. sorry for the belated response. we are marking stale issues closed for now. please open a new one if needed. thanks.


Retrieving protocol from scan

Does the current implementation extracts Protocol from the all()?

closing in favor of #97


Auto-detect dart sdk location inside flutter.

Now that the flutter tool knows how to pull down the dart idk, we can just use that.
bin/cache/dart-sdk
FYI @abarth

We can use that as one of our ways to detect a dart sdk; locate the flutter tool and go from there.


Don't force the name field onto every object

This fixes #4200
How?
Currently all presets force a name field onto them.

Each preset will need field=name added onto it, only a few will not.
The ones like buffer stop, don't normally have names, so it will be removed. This helps to resolve some confusion, as new mappers might put something in there that is not relevant.

But what if that object really has a name?

The option will be available in the "Add field" box at the bottom, and work just like the other options, so that a name can be added if needed.

This will then add back a name field:

This looks pretty good. I like the idea of not giving the name field any special treatment.
I fixed a small thing:  now it is possible for there to be no fields in the "all fields" section, and that was causing this empty div to look weird:

Added a rule so that div will now appear if there are no fields:

Merging now, so I can get a start on #3914 today.. Per chat, @JamesKingdom will add most of the name fields back and open a new PR.


#588 Add option to allow json output instead of a string

This changes a lot and adds a lot of method calls. Is the overhead worth the benefit?

I have no idea how to do differently.
The rendering result was originally conceived in order to return a string. To return result in any formats, were invented such a decision. In addition this solution is extensible.
Moreover, the method call not greatly affect the speed of execution.

Look module markdown-bemjson, it based on forked marked.

Closing due to merge conflicts, stale, missing tests, and beyond scope for the focus per #956.


Create CI job to test CCDB encryption key rotation

Is your feature request related to a problem? Please describe.
Following up on https://github.com/SUSE/kubecf/pull/298, we need a job to test the CCDB encryption key rotation.
Describe alternatives you've considered
Ideally, this job would run after the first smoke-tests, running the errand and asserting that the CCDB key was successfully rotated. Then run smoke-tests again.

If we implement this on the post-publish pipeline, this story is not blocked anymore.

The original PR #400 is subsumed into #401.

moving to DONE since the mentioned PR is merged already.


Code Coverage for rake tasks

Hi there,
we have some rake tasks including specs. Unfortunately we do not get code coverage for these rake tasks. Maybe it's an issue of the file extension .rake. Is there a possibility to include .rake files?

Unrelated to your problem, it's a best practice not to test Rakefiles. Any code that you'd put in a rakefile should call out to something in e.g. lib that you test.
SimpleCov just uses the Ruby stdlib Coverage module.  Since Rakefiles are Ruby, they should be included unless either they are filtered out by location or are loaded before SimpleCov.start.

Please also review https://github.com/colszowka/simplecov/blob/master/CONTRIBUTING.md and https://github.com/colszowka/simplecov/issues/340

I'm running into this issue: I'm using SimpleCov with rspec and cucumber and a shared .simplecov file.
# .simplecov
SimpleCov.start do
  use_merging true
  merge_timeout 20 * 60
  coverage_dir 'doc/build/coverage'

  add_filter '/spec/'
  add_filter '/vendor/'
  add_filter '/config/'

  add_group 'Libraries', 'lib'
  add_group 'Controllers', 'app/controllers'
  add_group 'Models', 'app/models'
  add_group 'Helpers', 'app/helpers'
  add_group 'Services', 'app/services'
  add_group 'Mailers', 'app/mailers'
  add_group 'Views', 'app/views'
  add_group 'Workers', 'app/workers'
end

# spec_helper.rb
ENV["RAILS_ENV"] ||= 'test'

#Conditionally enable simplecov
if ENV["COVERAGE"]
  require 'simplecov'
end

require File.expand_path("../../config/environment", __FILE__)
require 'rspec/rails'
require 'rspec/autorun'
# etc

There's a similar setup in the cucumber files, but it doesn't affect this at all.
The specs in question use the methodology from thoughtbot:
require "rake"

shared_context "rake" do
  let(:rake)      { Rake::Application.new }
  let(:task_name) { self.class.top_level_description }
  let(:task_path) { "lib/tasks/#{task_name.split(":").first}" }
  subject         { rake[task_name] }

  def loaded_files_excluding_current_rake_file
    $".reject {|file| file == Rails.root.join("#{task_path}.rake").to_s }
  end

  before do
    Rake.application = rake
    Rake.application.rake_require(task_path, [Rails.root.to_s], loaded_files_excluding_current_rake_file)

    Rake::Task.define_task(:environment)
  end
end

And the tests look like this:
describe 'namespace:task_name' do
  include_context 'rake'

  it 'does something helpful' do
    SomeClass.should_receive(:method).with('args')
    subject.invoke
  end
end

Generally only whichever task is last run from a file in the spec is shown as covered by SimpleCov.

So if the .rake file looked like this:

```ruby
namespace :namespace do
  desc 'first task'
  task :first => :environment do
    thing_to_test
  end

  desc 'second task'
  task :second => :environment do
    thing_to_test
  end
end

And rspec ran the tests like:
namespace:second
  does something
namespace:first
  does something

Only the first task would show green on the line with thing_to_test. The second would show it wasn't covered, even though the test had run successfully.
I'm not tied to the implementation from Thoughtbot, though it'd take some work to research and figure out an alternative if that's what's causing the problem.
Any thoughts would be helpful.

Hi there,
without digging too deep into the thoguhtbot way there it seems like it would reload files, which messes with coverage.
I can just echo the thoughts of @bf4 - just make the rake task call out to something else and test that.
task :first => :environemnt do
  MyServiceObject.new(some_parameter).call
end

then test MyServiceObject that should all be coverd neatly :)

Has anyone figured out how to get coverage on vanilla rake tasks?
My setup is largely based on the great 2011 guide: https://robots.thoughtbot.com/test-rake-tasks-like-a-boss
My tasks are more than a trigger for some other method.  Here's an example:
namespace :import do
  desc "Import Photos from Wordpress"

  task photos: :environment do |task|
    log = ProcessLog.create(key: task.to_s)
    begin
      Parallel.each(Person.active, in_processes: MAX_PROCESSES) do |person|
        person.import_photo
      end
    rescue => e
      log.fail!(comment: e.to_s)
    end
    log.success!
  end
end

I'm logging when the task was run, how long it took, if it failed and with what error message.  I could create a class method on Person or a service object as discussed above, but the logic of import_photo is tested elsewhere already anyway.
I want to test that the task actually works before it fails in production.  I also test that all my tasks have the desc line so they'll show up in rake -T  That really only fits in a rake spec...
TL;DR
I test my tasks fully, but sure would like to be able to show it.

SOLVED
I figured it out finally.  You need to load your rake tasks in a before(:all) do not the before do shown in the thoughtbot guide.  Here's my spec/support/shared_contexts/rake.rb
# http://robots.thoughtbot.com/test-rake-tasks-like-a-boss

shared_context "rake" do
  let(:task_name) { self.class.top_level_description }
  subject         { Rake.application[task_name] }

  # https://stackoverflow.com/questions/42047206/ruby-rails-simplecov-test-coverage-not-reporting-on-rake-task-spec
  before(:all) do
    Rake.application = Rake::Application.new
    Rails.application.load_tasks
  end

  # To get coverage working, we need to load tasks once before(:all).
  # Since we're not clean-slating everything before each test, we need to reenable the tasks.
  before do
    subject.reenable
    Rake::Task.define_task(:environment)
  end
end

The subject.reenable was also critical, otherwise you can only test each task once. :)


Add eng and placeholders for reset metadata notice

For this.

I can help fill these chinese placeholder out, can I just make comments?

Thanks, I appreciate that! By the way, I just added another one for if they try to reset while it is already resetting.

I pushed them to the branch. Thanks a lot!

Thank you both for the update & translations!! Merged.


style the plot-section in the plot.html page

This task is to add some style to the

It's a simple accordion with the summaries of the 4 movies.
Please do NOT change the other parts of the page, like the header, navbar, or footer, since I want that consistent between all the pages.

Hi @Aka-suvam, I've assigned you this issue.  Please let me know if you want to work on it.

please assign me this

This task is to add some style to the
 It's a simple accordion with the summaries of the 4 movies.
Please do NOT change the other parts of the page, like the header, navbar, or footer, since I want that consistent between all the pages.

@roannav . Thk u for assign me this issue . i will work on this issue .

@Aka-suvam Thanks, you're assigned!

add label to issue , @roannav .

Thnk you soo much .   @roannav  and @MrLEGENDx10 . I sincerely appreciate …


Link to Cocoontech broke in README

in README
Link to
Cocoontech's Carrier Infinity Thread
Broke

Works for me.
http://cocoontech.com/forums/topic/11372-carrier-infinity/

Very sorry....Buried in the README there is this.  These links go nowhere.
OK, try this.
www.hvac-talk.com/vbb/attachment.php?attachmentid=3061&d=1185394256
http://www.xpedio.ca...11-20156-25.pdf

Not sure what you're talking about; those links are not included in any of the Infinitive documentation.  I am closing this issue.

Those links were in a post on the Cocoontech forum. Looks like the poster was posting documents for the SAM. I've found this previously. I think it's the same document.
http://gpsinformation.info/joe/carrier/InfinityThermostatSpecifications.pdf
Describes the protocols a home automation system would use to interface with the SAM using RS-232.

Thats it, Will1604 Thanks!


How to use the model i trained to predict?

I have trained some models .
Now, i have a new dataset to predict.
So, What should i do? Just run the preparation as what i did when i trained. Or i should add the new dataset to the my old dataset,and then run the preparation together.

Because if i just run the preparation as what i did when i trained, the new word_dict.txt is different from  the old one. Such as in the old one , 0 represents hello ,but in the new one, 0 represents you . It is really different .Then i use the old model to predict. I think it will not be a good result, will it?

I try to combine the train and test dataset together. And then split myself.


Improvement for signing with PFX files & WPF problems

Hi there! :)
Congratulations for your Project! :)
I am trying to obfuscate a WPF app and apart from the problems that I will mention at the end, I have an improvement that will allow signing with PFX files. Here is the improvement:
Project.cs, Line 118 (replaced old code with this and added a "PfxPsw" element in the configuration XML)

				} else {
					try
					{
						var keyFile = vars.GetValue("KeyFile", null);
						var bytes = File.ReadAllBytes(keyFile);
						var ext = Path.GetExtension(keyFile);
						if (ext!=null && ext.ToLower() == ".pfx")
						{
							bytes = Pfx2Snk(bytes, vars.GetValue("PfxPsw", null));
						}
						else
						{
						}
						keyvalue = CryptoConvert.FromCapiKeyBlob(bytes);
					} catch (Exception ex) {
						throw new ObfuscarException (String.Format ("Failure loading key file \"{0}\"", vars.GetValue ("KeyFile", null)), ex);
					}

		/// <summary>
		/// Converts .pfx file to .snk file.
		/// </summary>
		/// <param name="pfxData">.pfx file data.</param>
		/// <param name="pfxPassword">.pfx file password.</param>
		/// <returns>.snk file data.</returns>
		public static byte[] Pfx2Snk(byte[] pfxData, string pfxPassword)
		{
			// load .pfx
			var cert = new X509Certificate2(pfxData, pfxPassword, X509KeyStorageFlags.Exportable);

			// create .snk
			var privateKey = (RSACryptoServiceProvider)cert.PrivateKey;
			return privateKey.ExportCspBlob(true);
		}

Now to the WPF problems:
I use this XML configuration that should not change the assemblies at all:
<?xml version='1.0'?>
<Obfuscator>
  <Var name="InPath" value="C:\Users\Me\" />
  <Var name="OutPath" value="$(InPath)\Obfuscar_Output" />

  <Var name="MarkedOnly" value="true" />
  <Var name="KeepPublicApi" value="true" />
  <Var name="HidePrivateApi" value="false" />
  <Var name="ReuseNames" value="false" />
  <Var name="HideStrings" value="false" />
  <Var name="OptimizedMethods" value="false" />
  <Var name="RenameProperties" value="false" />
  <Var name="RenameEvents" value="false" />
  <Var name="XmlMapping" value="true" />
  <Var name="PfxPsw" value="myPfxPassword" />
  <Var name="KeyFile" value=".\Key.pfx" />

  <Module file="$(InPath)\Dll1.dll" />
  <Module file="$(InPath)\Dll2.dll" />
  <Module file="$(InPath)\EXE1.exe" />
  <Module file="$(InPath)\EXE2.exe" />
</Obfuscator>

However, when i start the WPF app, it crashes and in the event log I see this:

Exception Info: System.Windows.Markup.XamlParseException
Stack:
at System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
at System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
at System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
at System.Windows.Application.LoadComponent(System.Object, System.Uri)
at KEL_Building_Manager.App.Main()

Original Reported Date: 2014-06-14T06:59:27.363-07:00
Planned For Release:
Original CodePlex ID: 15

Copied from CodePlex without authors:
Thanks. The PFX support is optional.
You should import the PFX file using sn.exe in .NET SDK, (sn -i)
http://msdn.microsoft.com/en-us/library/k5b5tt23(v=vs.110).aspx
Then in Obfuscar configuration you can specify KeyContainer option to let Obfuscar use the key container to sign the assemblies. The password should never live in Obfuscar configuration file.
About the XAML issue, can you share the binaries with me via<EMAIL_ADDRESS>Original Posted Date: 2014-06-15T05:32:34.63-07:00

Copied from CodePlex without authors:
BTW, there is a new revision available for testing, which contains many XAML related fixes,
https://www.nuget.org/packages/Obfuscar/2.0.1-beta
It might solve the crash, but I recommend you share the assemblies with me if possible for further analysis.
Original Posted Date: 2014-06-19T23:06:52.453-07:00

Copied from CodePlex without authors:
Hello.
Thanks.
I will try the new code soon.
And I will also try to reproduce the error in a simpler EXE, since the error appeared on a quite big project.
Right now I am quite busy with some stuff, that's why it took me so long to respond.
Original Posted Date: 2014-06-22T06:10:02.95-07:00

Copied from CodePlex without authors:
Hi.
I have tried the latest version of the code (taken from here: https://obfuscar.codeplex.com/SourceControl/list/changesets?branch=master).
On a simple WPF EXE everything seems OK, but on the EXE that I have tried above I get the same error:
Application: MyApp.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.Windows.Markup.XamlParseException
Stack:
   at System.Windows.Markup.WpfXamlLoader.Load(System.Xaml.XamlReader, System.Xaml.IXamlObjectWriterFactory, Boolean, System.Object, System.Xaml.XamlObjectWriterSettings, System.Uri)
   at System.Windows.Markup.WpfXamlLoader.LoadBaml(System.Xaml.XamlReader, Boolean, System.Object, System.Xaml.Permissions.XamlAccessLevel, System.Uri)
   at System.Windows.Markup.XamlReader.LoadBaml(System.IO.Stream, System.Windows.Markup.ParserContext, System.Object, Boolean)
   at System.Windows.Application.LoadComponent(System.Object, System.Uri)
   at KEL_Building_Manager.App.Main()

It throws some handled exceptions about not finding "WPFToolkit.Extended.dll" when debugging, but I don't know:

Why it can't find it (it is next to the EXE - should I add this to the obfuscation too? I think it is signed).
If this is a big problem or if it is not important.

Original Posted Date: 2014-07-28T12:25:37.47-07:00

Copied from CodePlex without authors:
Oups! I have just seen your link above.
I have downloaded the wrong version.
I will try again...
Original Posted Date: 2014-07-28T12:26:54.317-07:00

Copied from CodePlex without authors:
If you can provide a code repository instead of NuGet package it would be nice.
I don't like NuGet so much. :)
Will this work? :
http://obfuscar.googlecode.com/svn/trunk/ obfuscar-read-only
Original Posted Date: 2014-07-28T12:35:15.483-07:00

Copied from CodePlex without authors:
The code repository can be found at https://github.com/lextm/obfuscar
Original Posted Date: 2014-12-24T19:25:16.867-08:00

If PFX files are used to sign assemblies, they should be put into KeyContainer. WPF issues are known and support is always limited before BAML support is completed.
Original Closed Date: 2014-12-24T19:26:26.257-08:00

Solved in dot-blur fork.


CASMINST-5914

BREAK/FIX: extract-release-distributions operation uses the previous iuf image version

Description

Checklist

[x] If I added any command snippets, the steps they belong to follow the prompt conventions (see example).
[x] If I added a new directory, I also updated .github/CODEOWNERS with the corresponding team in Cray-HPE.
[x] My commits or Pull-Request Title contain my JIRA information, or I do not have a JIRA.

/backport release/1.4


[Feature request]: allow backup when the certificate is expired on the Evernote site?

Suggestion
Hello
At the moment the command
evernote-backup sync
fails due to
[SSL:CERTIFICATE_VERIFY_FAILED]
certificate verify failed: certificate is not yet valid (_ssl.c:1129)
is it possible to allow the backup?

Suggestion
Hello
At the moment the command
evernote-backup sync
fails due to
[SSL:CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1129)
is it possible to allow the backup?

In my experience, "certificate is not yet valid" SSL errors are usually related to an incorrectly set date / time. Have you verified the date / time on your device is correct?

https://bbs.archlinux.org/viewtopic.php?id=266777
https://stackoverflow.com/questions/46511717/how-to-fix-ssl-certificate-verification-failure
https://stackoverflow.com/questions/6976455/unable-to-connect-because-your-certificate-is-not-yet-valid-check-that-your-sys

the cause of the problem was an expired certificate on the Evernote website.
It disappeared without any action from me.
Le sam. 24 févr. 2024, 04:04, KiRaShi @.***> a écrit :

Suggestion
Hello
At the moment the command
evernote-backup sync
fails due to
[SSL:CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is
not yet valid (_ssl.c:1129)
is it possible to allow the backup?
In my experience, "certificate is not yet valid" SSL errors are usually
related to an incorrectly set date / time. Have you verified the date /
time on your device is correct?

https://bbs.archlinux.org/viewtopic.php?id=266777

https://stackoverflow.com/questions/46511717/how-to-fix-ssl-certificate-verification-failure
https://stackoverflow.com/questions/6976455/unable-to-connect-because-your-certificate-is-not-yet-valid-check-that-your-sys
—
Reply to this email directly, view it on GitHub
https://github.com/vzhd1701/evernote-backup/issues/56#issuecomment-1962229637,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAX3HUYZ6BGCNMK627XJNMTYVFKE3AVCNFSM6AAAAAA73WLCQGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNRSGIZDSNRTG4
.
You are receiving this because you authored the thread.Message ID:
@.***>

the cause of the problem was an expired certificate on the Evernote website. It disappeared without any action from me. Le sam. 24 févr. 2024, 04:04, KiRaShi @.> a écrit :
…
Suggestion Hello At the moment the command evernote-backup sync fails due to [SSL:CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate is not yet valid (_ssl.c:1129) is it possible to allow the backup? In my experience, "certificate is not yet valid" SSL errors are usually related to an incorrectly set date / time. Have you verified the date / time on your device is correct? - https://bbs.archlinux.org/viewtopic.php?id=266777 - https://stackoverflow.com/questions/46511717/how-to-fix-ssl-certificate-verification-failure - https://stackoverflow.com/questions/6976455/unable-to-connect-because-your-certificate-is-not-yet-valid-check-that-your-sys — Reply to this email directly, view it on GitHub <#56 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAX3HUYZ6BGCNMK627XJNMTYVFKE3AVCNFSM6AAAAAA73WLCQGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTSNRSGIZDSNRTG4 . You are receiving this because you authored the thread.Message ID: @.>

Ah, good to know. You'll want to close this Issue, or tag the repo maintainer to close it for you.

this issue can be closed


issue 43 solution

Related to #43

@aybekckaya Thanks for your PR, I have a look at your changes, looks like we put ambiguous="YES" misplaced="YES" in the storyboard, which will have warnings. That may not fix the issue. Can you double check and fix the warnings?

@aybekckaya Hi,Thanks for you time first!I am really fuzzy about the funcs in Observable.siwft,Could you please give some hints?cause I am new to swift,any Objective-C style code is welcomed!Thank you!

Hi, it's the Observer pattern.
You can find some informations here:
https://developer.apple.com/library/ios/documentation/Swift/Conceptual/Swift_Programming_Language/Properties.html#//apple_ref/doc/uid/TP40014097-CH14-ID262
http://blog.scottlogic.com/2015/02/11/swift-kvo-alternatives.html
Happy coding!


HOSTEDCP-809: Clone CA key/cert to TLS key/cert

What this PR does / why we need it:
Clone CA key/cert to TLS key/cert as some certificate managers expect to use tls.key/tls.crt rather than ca.key/ca.crt.
Which issue(s) this PR fixes:
HOSTEDCP-809
Checklist

[x] Subject and description added to both, commit and PR.
[x] Relevant issues have been referenced.

/area control-plane-operator

/test e2e-aws

@bryan-cox this is working for me with the latest passing 4.13.0-ci image.
Now CI is failing because we've branched for 4.13 and we're saying we don't support 4.14. Will submit a PR to fix that.

/test e2e-aws

/approve

/cherry-pick release-4.12


Cluster 2.5.5

Media

[ ] I have added screenshots/videos to this PR showcasing its changes ingame, or this PR does not require an ingame showcase

Changelog

little detective maints thingy
rearranged some stuff in the jani closet
soap for bathroom
more space stuff (somewhat)
station maps

maybe add a sustenance vendor and brig timers

sustenance vendor?
also brig timers were added last update

FI X NULL


fix nil io on shutdown/cleanup

add_ssl_listener fans out to all loopback addresses and returns nil for localhost, so we need to guard for that case

P.S. You can see this same guard style in puma's binder, fwiw: https://github.com/puma/puma/blob/master/lib/puma/binder.rb#L262


feat: add soft_delete partial index creation to unsure "unique"

Should be enabled for ms-sql as well
https://docs.microsoft.com/en-us/sql/t-sql/statements/create-index-transact-sql?view=sql-server-ver15#syntax
mysql is tricky.
Common approach is to use CREATE UNIQUE INDEX team_members_role_team_unique_key ON team_members (role, team, active)  where active is bool DEFAULT 1 that can be used instead of actual safe_delete to unsure uniqueness
Obviously field active should be updated along with soft_delete field for that

I think we should document the available options at docs and let users chose their medicine. I always opposed to creating indexes in Bun models and the task looks even more daunting when we start considering soft deletes and 4 different DBMS.
I would leave creating indexes to the users.

Perhaps it could be implemented as separate method like WithForeignKeys so user can setup effortlessly his indexes?
If your DBMS does not allow to use expressions in indexed columns, you can configure Bun to not append zero time as NULL using allowzero option

-	 DeletedAt time.Time `bun:",soft_delete"`
+	 DeletedAt time.Time `bun:",soft_delete,allowzero"`

Would be nice having same model sources for all databases.
Is it sensible to enable allowzero for soft delete fields on dialects that don't support feature.PartialIndex?

The main problem here is that we only support this via CreateTable which is not flexible at all when you already have a table. Perhaps we should add something like GORM's AutoMigrate and then this feature would be more useful.
For now let's add this under some flag like WithForeignKey so users can opt-out.

Is it sensible to enable allowzero for soft delete fields on dialects that don't support feature.PartialIndex?

I plan to release v1.0.x that will require users to enable ,pk and ,nullzero explicitly. So ,nopk and ,allowzero will go away in v1.1.0+

Closing since there are conflicts.


Add genetics subpackage

We need a new subpackage for the work @mariacm12 is doing, and also as a home to collect some of the fitness stuff under one umbrella. Related to #769

Name is up for debate, did we come up with anything better @apayne97 @kaminow ?

I think it's OK for now, it's general enough to encompass a bunch of stuff.


add-on: troubleshoot: add file transfer support

The purpose of this ticket is to integrate Device Troubleshoot File Transfer API.
File Transfer in bot direction, from the device to the server and from the server to th device should be supported.
This can be done with a litllefs partition for demonstration purpose.
Tasks includes:

integration of the File Transfer messages
integration of the Control messages (dependency of File Transfer)
creation of File Transfer API
update of examples to show the usage of the Device TroubleShoot File Transfer API
update of the documentation

The File Transfer API of the Device Troubleshoot add-on the MCU must provides:

callback function when to save a file sent by the server
callback function to read a file from the device

Note: there is no documentation of the protocol used by the Device Troubleshoot add-on. Retro-engineering is done to understand how the existing mender solution is working.
References:

https://mender.io/product/features/device-troubleshooting
https://docs.mender.io/api/#device-api-device-connect
https://github.com/mendersoftware/deviceconnect
https://github.com/mendersoftware/mender-connect

Draft version is available on branch at the moment for evaluation purpose on esp-idf platform.
Zeohyr support is not tested at all and will be checked soon to ensure it is working too.

Zephyr support has been added with some websocket fixes.
PR is no more draft and feature will be integrated soon.

PR has been merged.


The Horizon Lands should probably be added

Modern Horizons added a half-cycle of self-sacrificing lands that draw cards, these should probably be added.
Also, Evolving Wilds is listed as a Fast-Basic fetch, but Terramorphic Expanse is not

Seconded.


Add the interface for saving keyPair as pem, and save unsaved keyPair by default

Codecov Report

Merging #62 into dev will increase coverage by 0.35%.
The diff coverage is 72.16%.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 79a1dd2...9bab3bc. Read the comment docs.


Added support for armv7l

This doesn't address ci or releases - do you plan on doing that?

Yes. Will work on it now :)

Thanks @Lauszus!
FYI: https://github.com/a-scie/ptex/pull/255 & https://github.com/a-scie/jump/pull/258
Not sure if you want to toss s390x into the mix or not. I'm happy to follow behind and add support to science and Pex if you want to stay focused on armv7l.

Thanks @Lauszus!
FYI: a-scie/ptex#255 & a-scie/jump#258
Not sure if you want to toss s390x into the mix or not. I'm happy to follow behind and add support to science and Pex if you want to stay focused on armv7l.

I think I'll just stick with armv7l for now. Can you allow the CI to run, so I can test my PR?

LGTM. You may have to dig in a cross container to figure out where the arm uname -m is coming from.
...aha. My bad reviewing your scie-jump change: https://github.com/a-scie/jump/blob/60015e988144d8b4886ca17e5bb13c02c5fcd35a/jump/src/context.rs#L640-L650
So env::consts::ARCH is not only used for the scie-jump binary suffix, it's also used for the {scie.platform} and {scie.platform.arch} lift manifest placeholders: https://github.com/a-scie/jump/blob/main/docs/packaging.md#advanced-placeholders
So using a custom ARCH for armv7l fights a bit of an uphill battle. That should be enough info though to help you find all the spots (the one I pointed out above may be the only one, but I'm not positive (from my phone)).

Argh I should have grepped for ARCH. I'll fix it right away and send a PR.

LGTM. You may have to dig in a cross container to figure out where the arm uname -m is coming from.
...aha. My bad reviewing your scie-jump change: https://github.com/a-scie/jump/blob/60015e988144d8b4886ca17e5bb13c02c5fcd35a/jump/src/context.rs#L640-L650
So env::consts::ARCH is not only used for the scie-jump binary suffix, it's also used for the {scie.platform} and {scie.platform.arch} lift manifest placeholders: https://github.com/a-scie/jump/blob/main/docs/packaging.md#advanced-placeholders
So using a custom ARCH for armv7l fights a bit of an uphill battle. That should be enough info though to help you find all the spots (the one I pointed out above may be the only one, but I'm not positive (from my phone)).

Argh I should have grepped for ARCH. I'll fix it right away and send a PR.

Here it is: https://github.com/a-scie/jump/pull/260

Alrighty, thanks again @Lauszus. Released: https://github.com/a-scie/jump/releases/tag/v1.4.1

Alrighty, thanks again @Lauszus. Released: https://github.com/a-scie/jump/releases/tag/v1.4.1

Thanks. I've already updated my pex PR: https://github.com/pex-tool/pex/pull/2620
Can you retrigger the CI for this PR?

Thanks for working through this one @Lauszus.

You're welcome :)

All right, the doc site was a little bumpy, but that's fixed up:

https://github.com/a-scie/lift/commit/65272542ee52668039d0bdabaacb3bac0df0b632
https://github.com/a-scie/lift/actions/runs/12302810379
https://science.scie.app/_/manifest/lift.html#platforms
And 0.9.0 is released:
https://github.com/a-scie/lift/releases/tag/v0.9.0


VS local debugging does not work with FunctionsEnableWorkerIndexing

Visual studio F5 debugging does not work when .csproj has <FunctionsEnableWorkerIndexing>True</FunctionsEnableWorkerIndexing>.
The console window will open. but it does not print anything (like the discovered functions in the app etc..)

I am experiencing a similar behavior.
After starting debugging with F5, the console window opens and hangs. Meanwhile, Visual Studio hangs and displays "Launching local Functions process..." modal.
After a minute, there are messages in the console:
A debugger was not attached within the expected time limit. The process will continue without a debugger.
Worker process started and initialized.

After these messages, the normal output (function metadata) is displayed.
But despite a `debugger was not attached' message, debugging in Visual Studio works for me.
My environment:
Visual Studio 17.6.6
Azure Functions and Web Job Tools 17.6.326.62524
Core Tools Version:  4.0.5198
Function Runtime Version: <IP_ADDRESS>67


minifier panic: index out of bounds: the len is 0 but the index is 0 in optimize/conditionals.rs

Describe the bug
thread '<unnamed>' panicked at 'index out of bounds: the len is 0 but the index is 0', ecmascript/minifier/src/compress/optimize/conditionals.rs:706:39
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
node_modules/@swc/core/index.js:59
        return bindings.minifySync(src, toBuffer(opts !== null && opts !== void 0 ? opts : {}));
                        ^

Error: index out of bounds: the len is 0 but the index is 0
    at Compiler.minifySync (node_modules/@swc/core/index.js:59:25)
    at Object.minifySync (node_modules/@swc/core/index.js:235:21)
    at a (minifier.js:20:23)
    at minifier.js:45:8
    at Object.<anonymous> (minifier.js:47:3)

Input code
const swc = require("@swc/core");
const fs = require("fs");

const code = fs.readFileSync(
	"node_modules/antd/dist/antd.js", //<EMAIL_ADDRESS>	"utf8"
);

const minified = swc.minifySync(code, {
	sourceMap: false,
	mangle: true,
	compress: true,
});
console.log("swc:", minified.code.length);

Version
The version of @swc/core: 1.2.69

Minimal reproduction:
function useSelection(selectionType, derivedHalfSelectedKeys) {
	return selectionType === "radio"
		? new Set()
		: new Set(derivedHalfSelectedKeys);
}


Accordion arrow doesn't change direction

In the demo  https://springload.github.io/react-accessible-accordion/ as well, in the default settings, the accordion arrow doesn't change direction on expanding.

Gidday @Praneetha-CK, thanks for your issue. @vincentaudebert do you think it should? Would be a pretty easy fix wouldn’t it?


UTM Freezes Out of Nowhere

Clicking on certain things keeps causing UTM to freeze up. It happens:
On Windows 7:
Whenever I click the videos folder
Clicking on the C drive in file explorer
Clicking on the disc in file explorer
On Windows XP:
Sometimes out of nowhere
When clicking the C drive in file explorer
Installing some software
Sometimes when trying to close a window
When the "XX Days left to activate windows" reminder pops up
debug.log
Configuration:

UTM Version: 2.0.20
OS Version: Windows XP Professional (32-bit)/Windows 7 Professional (64-bit)
Device Model: iPhone 12
Is it jailbroken? No
How did you install UTM? AltStore sideloaded
iOS 14.3

Duplicate of #2221


Objects found with Find All Elements get destroyed

Hello
I greatly appreciate the work you did by creating a vast library of keywords.
But unfortunately, basic operations like the below do not work.
A simple change in the FOR loop causes the code to crash with:
FlaUiError: Element from XPath '<FlaUILibrary.flaui.util.automationelement.AutomationElement object at
0x0000021EED91A450>' could not be found

Here is a sample Robot file with 1 test that fails all the time and 2 others that pass all the time.
The nice thing about the last test is that it shows that an element can still be found using Xpath. It shows that FlaUI is still connected to the application.
*** Settings ***
Documentation       Flaui POC

Library             FlaUILibrary    uia=UIA3    screenshot_on_failure=False

*** Variables ***
${APP}      App.Windows.Exe

*** Test Cases ***
Carousel fails
    ${pid}    Attach Application By Name    ${APP}
    Log    ${pid}

    @{elements}    Find All Elements    //*[@AutomationId="CarouselMenuText"]

    FOR    ${element}    IN    @{elements}
        ${name}    Get Name From Element    ${element}    # CRASH
        Log    ${name}
    END

Carousel works all the time
    ${pid}    Attach Application By Name    ${APP}
    Log    ${pid}

    @{elements}    Find All Elements    //*[@AutomationId="CarouselMenuText"]

    FOR    ${element}    IN    @{elements}
        Log    ${element.Xpath}
    END

Carousel works too
    ${pid}    Attach Application By Name    ${APP}
    Log    ${pid}

    @{elements}    Find All Elements    //*[@AutomationId="CarouselMenuText"]

    FOR    ${element}    IN    @{elements}
        ${xpath}    Set Variable    ${element.Xpath}
        ${name}    Get Name From Element    ${xpath}
        Log    ${name}
    END

Notes:
1- This is a Windows application made with Avalonia
2- I will try the same 3 test cases with Calculator and post the results tomorrow morning.

Hi @djalan
what did you expect on "Carousel fails" keyword?
Find All Elements returns a simple dictionary as a list which include informations about an xpath, classname or name.
Approaches like Carousel works all the time and Carousel works too are correct here and should work on xpaths.
On carousel fails you try to set the object as xpath and this is why you receive a flaui error with this object idenditifier.
This test should fail because it's not a xpath which is included into.

I extend usage keyword to additionally use automation elements as reference for all keywords like your example.
So Carousel fails test case should work for all keywords like you handled.
So combination from Find All Elements and Keyword usage can be done.


Missing visitor for methods

I cannot contribute a visitor for methods defined on traits for legal issues.
Example of what an autogenerated fuzzing harness for a method could look like: https://gist.github.com/Shnatsel/4a907d44d6429de93d63d6e7c4d1361e
The structure is pretty similar to the fn visitor, and you already have everything in one struct without having to track context manually, see https://docs.rs/syn/0.15.26/syn/struct.ImplItemMethod.html
The printing will largely be duplicated, so it might be a good idea to split it off from the visiting.

Other than that this looks very nice! Thanks for implementing this!

At the moment this is only doing freestanding functions, I will look into adding methods.
At the moment this is set up to take a source file and make ~70% correct proptest boilerplate. I would be open to seeing different modes, like quickcheck boilerplate, or quickcheck afl.rs boilerplate or anything people find useful. I know you wanted to use this to bootstrap testing std. I'd love to inspire a quick fix for intellij, right click on a function and hit "add proptest".

https://github.com/Eh2406/auto-fuzz-test/commit/324d32653bb0815b96cfa55f1cd36361199ebdfd adds the ability to transform methods. So the headline of this issue is fixed.

I should be able to take over from here. Thanks a lot!

I'd love to inspire a quick fix for intellij, right click on a function and hit "add proptest".

That has never occurred to me, but sounds like a good idea!


Improved MAVLink message example and guide #277

@tcr3dr @mrpollo So this moves the set_mavlink_callback docs out of the vehicle_state guide and into its own guide doc. In addition it adds a (pretty cool :-) ) example and docs of how to add your own attributes to the Vehicle class in a script.
Unlike the other examples, the example doc has quite a lot of explanation - I decided that in this case it made sense because it extends the callback functionality. I have linked to it from the guide though.
Let me know what you think.

@tcr3dr Can we merge this please.

you might need to rebase @hamishwillee
@tcr3dr whats up with CircleCI?

@mrpollo @tcr3dr Rebased. Please integrate.

Closing this one. Doing some fixes and will reopen.


bug: Native Scrolling in combination with ion-pane and ion-scroll (Ionic 1.2)

Type: bug
Platform: all
Native Scrolling is not working when i'm trying to do a ion-scroll into a ion-pane like this:
<ion-pane>
      <ion-scroll>
      </ion-scroll>
</ion-pane>

i want to do something like this, but with native scrolling
http://play.ionic.io/app/cf19ffe3f4b2

Greetings @5uper!
My sensors indicate that you need to update your issue through our custom issue form. We are now requiring all issues to be submitted this way, to ensure that we have all of the information necessary to fix them as quickly as possible.
Click Here To Update Your Issue
I will have no choice but to close this issue if it is not resubmitted through the form. Please fill out the rest of the form, so that I may use my friendly robot powers to assist you.
Thank you!

I need more info. What exactly is the issue? I tried that demo and it worked fine for me.

sorry my english is weak :(
in the demo I have disabled native scrolling and it works fine
...
<ion-scroll overflow-scroll="false">
...
</ion-scroll>
...

but if the native scrolling is enabled, this does not scroll
here a demo with enabled native scrolling
http://play.ionic.io/app/8e67e6cc0e49
maybe you can now recognize the problem better?

There's nothing to scroll. Are you talking about the bouncing?

yes the bouncing up and down did not work anymore.

That's one of the side effects of using native scrolling. Performance/control trade off. It'll bounce just fine if the content overflows the viewport, so just add more content and you'll see that.

I tried it with more content, still does not work :(
http://play.ionic.io/app/8e67e6cc0e49

Set a fixed height on ion-scroll: http://play.ionic.io/app/691639ef2c2f

ok thx :+1:

I think it's a step in the wrong direction.
Say you have a list with only 3-4 items, with native scrolling enabled you didn't have any bouncing effect.  Without bouncing it appears ponderous and like a hybrid app (on iOS)
Is there a simple workaround except disable native scrolling?


Add GitHub Actions Workflow to reformat package-lock.json on Dependabot PRs

Description
I'm not able to confirm if all the steps work yet, because act isn't letting my local workflow execution push to the repository.
Type of change

[ ] Bug fix
[x] New feature
[ ] Breaking change

Related issues

Fix #1

Migration notes

Describe migration notes if any

Extra info

Add any additional information

This is great!!! ( assuming it works 😛  )


adb: error: stat failed when trying to push to /data/local/tmp/scrcpy-server.jar: Permission denied

Environment

**OS: macOS
**Scrcpy version: 3.0.2
**Installation method: via brew
**Device model: emulator
**Android version: 12

Describe the bug
I got this error after run command scrcpy
scrcpy 3.0.2 <https://github.com/Genymobile/scrcpy>
INFO: ADB device found:
INFO:     --> (tcpip)  <my device>            device  sdk_gphone64_x86_64
adb: error: stat failed when trying to push to /data/local/tmp/scrcpy-server.jar: Permission denied
ERROR: "adb push" returned with value 1
ERROR: Server connection failed

https://stackoverflow.com/questions/59046671/android-shell-user-has-no-access-to-data-local-tmp-even-though-it-is-the-owner ?


Error Running Basic Test Script with v2 Tag (Works With v1)

Hi there,
I recently tried upgrading my S4 setup / environment to be on the v2 tag but ran into the following issue when running the basic test script:
(base) ray@test-python:~/state-spaces$ python -m train wandb=null pipeline=mnist model=s4
CONFIG
├── train
│   └── seed: 0
│       interval: epoch
│       monitor: val/accuracy
│       mode: max
│       ema: 0.0
│       test: false
│       debug: false
│       ignore_warnings: false
│       state:
│         mode: null
│         chunk_len: null
│         overlap_len: null
│         n_context: 0
│         n_context_eval: 0
│       sweep: null
│       group: null
│       benchmark_step: false
│       benchmark_step_k: 1
│       benchmark_step_T: 1
│       checkpoint_path: null
│       visualizer: filters
│       disable_dataset: false
│
├── wandb
│   └── None
├── trainer
│   └── gpus: 1
│       accumulate_grad_batches: 1
│       max_epochs: 200
│       gradient_clip_val: 0.0
│       log_every_n_steps: 10
│       limit_train_batches: 1.0
│       limit_val_batches: 1.0
│       weights_summary: top
│       progress_bar_refresh_rate: 1
│       track_grad_norm: -1
│       resume_from_checkpoint: null
│
├── loader
│   └── batch_size: 50
│       num_workers: 4
│       pin_memory: true
│       drop_last: true
│       train_resolution: 1
│       eval_resolutions:
│       - 1
│
├── dataset
│   └── _name_: mnist
│       permute: true
│       val_split: 0.1
│       seed: 42
│
├── task
│   └── _name_: base
│       loss: cross_entropy
│       metrics:
│       - accuracy
│       torchmetrics: null
│
├── optimizer
│   └── _name_: adamw
│       lr: 0.001
│       weight_decay: 0.0
│
├── scheduler
│   └── _name_: plateau
│       mode: max
│       factor: 0.2
│       patience: 20
│       min_lr: 0.0
│
├── encoder
│   └── linear
├── decoder
│   └── _name_: sequence
│       mode: pool
│
├── model
│   └── layer:
│         _name_: s4
│         d_state: 64
│         channels: 1
│         bidirectional: false
│         activation: gelu
│         postact: null
│         hyper_act: null
│         dropout: 0.0
│         measure: legs
│         rank: 1
│         dt_min: 0.001
│         dt_max: 0.1
│         trainable:
│           dt: true
│           A: true
│           P: true
│           B: true
│         lr: 0.001
│         length_correction: true
│         tie_state: true
│         hurwitz: true
│         resample: false
│         deterministic: false
│         l_max: 784
│         verbose: false
│       _name_: model
│       prenorm: false
│       transposed: true
│       n_layers: 4
│       d_model: 256
│       residual: R
│       pool:
│         _name_: sample
│         pool: 1
│         expand: 1
│       norm: layer
│       dropout: 0.0
│
└── callbacks
    └── learning_rate_monitor:
          logging_interval: epoch
        timer:
          step: true
          inter_step: false
          epoch: true
          val: true
        params:
          total: true
          trainable: true
          fixed: true
        model_checkpoint:
          monitor: val/accuracy
          mode: max
          save_top_k: 1
          save_last: true
          dirpath: checkpoints/
          filename: val/accuracy
          auto_insert_metric_name: false
          verbose: true

Global seed set to 0
[2022-05-25 13:40:50,814][__main__][INFO] - Instantiating callback <src.callbacks.timer.Timer>
[2022-05-25 13:40:50,815][__main__][INFO] - Instantiating callback <src.callbacks.params.ParamsLog>
[2022-05-25 13:40:50,816][__main__][INFO] - Instantiating callback <pytorch_lightning.callbacks.ModelCheckpoint>
GPU available: True, used: True
TPU available: False, using: 0 TPU cores
IPU available: False, using: 0 IPUs
HPU available: False, using: 0 HPUs
`Trainer(limit_train_batches=1.0)` was configured so 100% of the batches per epoch will be used..
`Trainer(limit_val_batches=1.0)` was configured so 100% of the batches will be used..
[2022-05-25 13:40:50,848][torch.distributed.nn.jit.instantiator][INFO] - Created a temporary directory at /tmp/tmpm51hqe7x
[2022-05-25 13:40:50,849][torch.distributed.nn.jit.instantiator][INFO] - Writing /tmp/tmpm51hqe7x/_remote_module_non_sriptable.py
Error executing job with overrides: ['wandb=null', 'pipeline=mnist', 'model=s4']
Traceback (most recent call last):
  File "/home/ray/state-spaces/train.py", line 553, in main
    train(config)
  File "/home/ray/state-spaces/train.py", line 498, in train
    trainer.fit(model)
  File "/home/ray/anaconda3/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 768, in fit
    self._call_and_handle_interrupt(
  File "/home/ray/anaconda3/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 721, in _call_and_handle_interrupt
    return trainer_fn(*args, **kwargs)
  File "/home/ray/anaconda3/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 809, in _fit_impl
    results = self._run(model, ckpt_path=self.ckpt_path)
  File "/home/ray/anaconda3/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1172, in _run
    self._call_setup_hook()  # allow user to setup lightning_module in accelerator environment
  File "/home/ray/anaconda3/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1492, in _call_setup_hook
    self._call_lightning_module_hook("setup", stage=fn)
  File "/home/ray/anaconda3/lib/python3.8/site-packages/pytorch_lightning/trainer/trainer.py", line 1593, in _call_lightning_module_hook
    output = fn(*args, **kwargs)
  File "/home/ray/state-spaces/train.py", line 74, in setup
    self.model = utils.instantiate(registry.model, self.hparams.model)
  File "/home/ray/state-spaces/src/utils/config.py", line 99, in instantiate
    return obj()
  File "/home/ray/state-spaces/src/models/sequence/model.py", line 69, in __init__
    block = SequenceResidualBlock(d, l+1, prenorm=prenorm, dropout=dropout, layer=layer, residual=residual, norm=norm, pool=pool)
  File "/home/ray/state-spaces/src/models/sequence/block.py", line 36, in __init__
    self.layer = utils.instantiate(registry.layer, layer, d_input)
  File "/home/ray/state-spaces/src/utils/config.py", line 99, in instantiate
    return obj()
  File "/home/ray/state-spaces/src/models/sequence/ss/s4.py", line 86, in __init__
    self.kernel = HippoSSKernel(self.h, N=self.n, L=l_max, channels=channels, verbose=verbose, **kernel_args)
  File "/home/ray/state-spaces/src/models/sequence/ss/kernel.py", line 712, in __init__
    self.kernel = SSKernelNPLR(
  File "/home/ray/state-spaces/src/models/sequence/ss/kernel.py", line 217, in __init__
    self.C = nn.Parameter(_c2r(_resolve_conj(C)))
RuntimeError: view_as_real doesn't work on unresolved conjugated tensors.  To resolve the conjugate tensor so you can view it as real, use self.resolve_conj(); however, be warned that the resulting tensor will NOT alias the original.

Is this something you've seen before? I'd be happy to provide a fuller description of my package version, system architecture, etc. if you can let me know what might help get to the bottom of this bug.
Best,
Matthew

Sorry for responding so late! What version of PyTorch are you on? This problem arises due to a change that happened in PT 1.10, and should be handled by this line: https://github.com/HazyResearch/state-spaces/blob/6cbc09aeeebfe72b7bde7897ef157cf63fd12721/src/models/sequence/ss/kernel.py#L67
I'm not sure why you're having issues. I can try to reproduce it if you tell me which version of PyTorch you're using.

Closing this issue. Please file a new issue if problems persist with the latest version (V3).


Fix CI

There is a bug in the current CI suite with autocfg that was fixed in https://github.com/cuviper/autocfg/pull/70 (autocfg 1.4+).
Rust 1.80 introduced a new lint that was causing the build to fail on CI. I deleted the lockfile and reinstalled and that fixed the issue.
Previously the failure on CI looked like this:
Run actions-rs/cargo@v1
/home/runner/.cargo/bin/cargo test
 Downloading crates ...
  Downloaded itoa v1.0.[9](https://github.com/andrewhickman/fs-err/actions/runs/11391081315/job/31694081963?pr=61#step:6:10)
  Downloaded serde v1.0.192
  Downloaded ryu v1.0.15
  Downloaded serde_json v1.0.[10](https://github.com/andrewhickman/fs-err/actions/runs/11391081315/job/31694081963?pr=61#step:6:11)0
   Compiling serde v1.0.192
   Compiling serde_json v1.0.100
   Compiling ryu v1.0.15
   Compiling itoa v1.0.9
warning: unexpected `cfg` condition name: `rustc_1_63`
  --> src/path.rs:16:[11](https://github.com/andrewhickman/fs-err/actions/runs/11391081315/job/31694081963?pr=61#step:6:12)
   |
16 |     #[cfg(rustc_1_63)]
   |           ^^^^^^^^^^
   |
   = help: expected names are: `clippy`, `debug_assertions`, `doc`, `docsrs`, `doctest`, `feature`, `fmt_debug`, `miri`, `overflow_checks`, `panic`, `proc_macro`, `relocation_model`, `rustfmt`, `sanitize`, `sanitizer_cfi_generalize_pointers`, `sanitizer_cfi_normalize_integers`, `target_abi`, `target_arch`, `target_endian`, `target_env`, `target_family`, `target_feature`, `target_has_atomic`, `target_has_atomic_equal_alignment`, `target_has_atomic_load_store`, `target_os`, `target_pointer_width`, `target_thread_local`, `target_vendor`, `test`, `ub_checks`, `unix`, and `windows`
   = help: consider using a Cargo feature instead
   = help: or consider adding in `Cargo.toml` the `check-cfg` lint config for the lint:
            [lints.rust]
            unexpected_cfgs = { level = "warn", check-cfg = ['cfg(rustc_1_63)'] }
   = help: or consider adding `println!("cargo::rustc-check-cfg=cfg(rustc_1_63)");` to the top of the `build.rs`
   = note: see <https://doc.rust-lang.org/nightly/rustc/check-cfg/cargo-specifics.html> for more information about checking conditional configuration
   = note: `#[warn(unexpected_cfgs)]` on by default

I'm assuming that "build (ubuntu-latest, 1.40.0) Expected—Waiting for status to be reported" is a required test in the repo settings. It will need to be updated to 1.56.0 (I don't have access to the settings).

I realized the "cargo update" step in CI has been broken since I added it, which is why the autocfg fix wasn't being picked up. With that fixed in #64 we can avoid increasing the minimum tested rust version (for now)

it looks like the strategy is to have a Cargo.lock that works with Rust 1.40 and then use “cargo update” on other rust versions. If I’m reading your patch correctly.
Nice work. I didn’t love my solution (specifically the rev-ing the min tested version), but didn’t fully understand the system setup.


Add Hub dosen't work and using commands from command palette errors out

Errors like this:
Command 'ri5dev: Connect to a device' resulted in an error (command 'ri5devBrowser.action.pickDevice' not found)

Hi @RomanRichter1991,
thanks for reaching out. I am sorry the extension is not working correctly in your environment. Can you help me understand your setup, so that I can try and reproduce your problem and possibly fix it?
Until now I have tested the extension on a Mac running macOS Big Sur, with Visual Studio Code v. 1.53.2 connecting the Hub with USB and in my case it is working correctly.
Can you tell me about your setup, how you installed the extension and how to reproduce the problem?

Sadly I got same errors after compiling and packaging...


New big int type

Issue Link:

@vedhavyas the coverage would not increase until we start using attribute stuff, I will be making that pr soon. For now the most important parts are covered.


Assert connecting to Activity service under Linux

Running my application on Linux on Mojo, the app asserts connecting to the Activity service. abarth said this shouldn't happen.
[1111/112628:ERROR:dart_error.cc(16)] Unhandled exception:
'packages/mojo/src/application_connection.dart': Failed assertion: line 84: '!proxy.impl.isBound &&
        (remoteServiceProvider != null) &&
        remoteServiceProvider.impl.isBound' is not true.
#0      _AssertionError._throwNew (dart:core-patch/errors_patch.dart:27)
#1      ApplicationConnection.requestService (packages/mojo/src/application_connection.dart:84)
#2      _Shell._connectToService (packages/flutter/src/services/shell.dart:59)
#3      _Shell.connectToService (packages/flutter/src/services/shell.dart:74)
#4      _initActivityProxy (packages/flutter/src/services/activity.dart:25)
#5      _activityProxy (packages/flutter/src/services/activity.dart:29)
#6      _activityProxy (packages/flutter/src/services/activity.dart:29)
#7      activity (packages/flutter/src/services/activity.dart:30)
#8      activity (packages/flutter/src/services/activity.dart:30)
#9      MyApp.initState (lib/main.dart:102)
#10     StatefulComponentElement._firstBuild (packages/flutter/src/widgets/framework.dart:1120)
#11     ComponentElement.mount (packages/flutter/src/widgets/framework.dart:1032)
#12     Element._inflateWidget (packages/flutter/src/widgets/framework.dart:765)
#13     Element.updateChild (packages/flutter/src/widgets/framework.dart:644)
#14     RenderObjectToWidgetElement.mount (packages/flutter/src/widgets/binding.dart:149)
#15     RenderObjectToWidgetAdapter.attachToRenderTree.<anonymous closure> (packages/flutter/src/widgets/binding.dart:117)
#16     BuildableElement.lockState (packages/flutter/src/widgets/framework.dart:924)
#17     RenderObjectToWidgetAdapter.attachToRenderTree (packages/flutter/src/widgets/binding.dart:114)
#18     WidgetFlutterBinding._runApp (packages/flutter/src/widgets/binding.dart:76)
#19     runApp (packages/flutter/src/widgets/binding.dart:83)
#20     main (lib/main.dart:209)

Are there any other errors?  What is supposed to be providing the activity service?

The Activity service doesn't exist under Linux. However, the defined behavior in Flutter (according to Adam) is that connections always succeed, even if the service doesn't exist, and writing to them always succeeds. Service that aren't there just don't reply.
I already have a fix from Adam that I will create a PR for.


Istio validation test

Enable Istio / cluster monitoring if not enabled
Always deploy the latest Istio chart (can be overriden in env var)
Create gateway, virtual service, destination rules, through API and check routing
flake8 passes

I still need to run this against a 1.15 or lower cluster

LGTM

LGTM


ref: Make getScope private

I don't really like that we have to use reflection to test the internal behavior of an object, however at the moment I don't see any other way around so LGTM


Fix Message Card variable regex so that it's possible to include % sign in fallback

Problem/Feature
This small PR fixes regex used for finding variables to highlight in MessageCard body so that it's possible to include % sign in fallback. There are tests added/adjusted to cover previously failing cases
Guidelines
Make sure the pull request:

[ ] Follows the established folder/file structure
[ ] Adds unit tests
[ ] If it is a refactor or change to an existing component, have you verified it won't break existing Cypress tests or have you updated them?
[ ] Did you verify some accessibility (a11y) basics?
[ ] Adds/updates stories. Guidelines
[ ] Adds/updates documentation (ie proptypes) Guidelines
[ ] Has it been tested in Help Scout's supported browsers?
[ ] Requests review from designer of the feature
[ ] Add label (bug? feature?)

@Charca Yeah, I've spent almost 2 hours figuring it out :smile:


HTTPS PowerShellGet Repository invalid web uri

Expected Behavior
Register-PSRepository should complete without error
Current Behavior
Register-PSRepository : The specified Uri 'https://pkg.contoso.local/nuget/PowerShell' for parameter 'SourceLocation' is an invalid Web Uri. Please ensure that it meets the Web Uri requirements.
Steps to Reproduce (for bugs)

Create nuget repo on https url
Register-PSRepository -Name testing -SourceLocation https://pkg.contoso.local/nuget/PowerShell

Note - below works as expected
Register-PSRepository -Name testing -SourceLocation http://pkg.contoso.local/nuget/PowerShell
Context
My security department requires internal communication be done via https as much as possible. I will need to get a security exception for this.
Your Environment

> $PSVersionTable
Name                           Value
----                           -----
PSVersion                      5.1.14409.1012
PSEdition                      Desktop
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}
BuildVersion                   10.0.14409.1012
CLRVersion                     4.0.30319.42000
WSManStackVersion              3.0
PSRemotingProtocolVersion      2.3
SerializationVersion           <IP_ADDRESS>

> Get-Module

ModuleType Version    Name
---------- -------    ----
Manifest   <IP_ADDRESS>    Microsoft.PowerShell.Management
Manifest   <IP_ADDRESS>    Microsoft.PowerShell.Security
Manifest   <IP_ADDRESS>    Microsoft.PowerShell.Utility
Manifest   <IP_ADDRESS>    Microsoft.WSMan.Management
Script     <IP_ADDRESS>    PackageManagement
Script     <IP_ADDRESS>    PowerShellGet

> Get-Module -ListAvailable PowerShellGet,PackageManagement

ModuleType Version    Name
---------- -------    ----
Script     <IP_ADDRESS>    PackageManagement
Binary     <IP_ADDRESS>    PackageManagement
Script     <IP_ADDRESS>    PowerShellGet
Script     <IP_ADDRESS>    PowerShellGet

> Get-PackageProvider

Name                     Version
----                     -------
msi                      <IP_ADDRESS>
msu                      <IP_ADDRESS>
NuGet                    <IP_ADDRESS>
PowerShellGet            <IP_ADDRESS>
Programs                 <IP_ADDRESS>

> Get-PackageProvider -ListAvailable

Name                     Version
----                     -------
msi                      <IP_ADDRESS>
msu                      <IP_ADDRESS>
nuget                    <IP_ADDRESS>
NuGet                    <IP_ADDRESS>
PowerShellGet            <IP_ADDRESS>
PowerShellGet            <IP_ADDRESS>
Programs                 <IP_ADDRESS>

coming across this too, this was an issue way back here it would seem
https://github.com/OneGet/testbuild/issues/2
although I am not 100% certain OneGet became PowerShellGet

Same thing happens to me, this fixed it: https://stackoverflow.com/questions/35296482/invalid-web-uri-error-on-register-psrepository (as referenced in the issue https://github.com/PowerShell/PowerShell/issues/5708 )
My URL is in this form: http://a.b.c.d/repository/PowerShellGallery_proxy/

We support HTTPS in the general case (for example the default PSGallery URL is https://). I suspect this is related to what the actual form of the URL, and probably whether an SSL handshake will succeed. If it's not private, Massimo, what is a.b.c.d in your case? If you run Invoke-WebRequest -Uri  does it work?
Regarding @BatmanAMA  's issue, .local is kind of a special case for SSL- since anyone can obtain any .local certificate, it doesn't offer the usual protection against MITM attacks that a certificate for foo.bar.com would offer. That might be related.

@edyoung hi there, the host name is as following: nexus.devops.mycompany.local
The URL works because after using the fix I was able to import the a nuget module via Nexus
I'll update with the command's result as soon as I can get my hands on the machine

@edyoung it was a case-sensitivity issue.
the endpoint I inserted into the code was: "/PowerShellGallery_proxy/"
What was executed was: "/powershellgallery_proxy/" which results in 404 ( I didn't know Sonatype Nexus docker image was case-sensible).
Sorry for the trouble :)

@MassimoSporchia +1, just want to second your statement here and say I'm using ProGet and this issue was the exact same for me.

Just to put this to bed - not sure if there was a fix put in, but I am no longer having this issue on the latest version. I did verify that changing casing doesn't break it for me (proget) so I don't think that was the issue.
ModuleType Version Name
---------- ------- ----
    Script <IP_ADDRESS> PackageManagement
    Script 1.6.6   PowerShellGet

@BatmanAMA  I took your suggestion and upgraded to 1.6.7 and still have issues here. Moreover, while the recommended idea to use https:// worked in previous versions of PowerShellGet, it no longer works on 1.6.7 - Please re-open this ticket.

I was able to successfully publish a package to our internal ProGet feed, but had a warning when doing so.
This worked previously, with a warning:

> Register-PSRepository -Name Example-Development -SourceLocation "https://packages.example.local/nuget/Example-Development/api/v2" -PublishLocation http://packages.example.local/nuget/Example-Development/api/v2/package

WARNING: Unable to resolve package source 'https://packages.example.local/nuget/Example-Development/api/v2'.

This now completely fails on 1.6.7:
> Register-PSRepository -Name Example-Development -SourceLocation "https://packages.example.local/nuget/Example-Development/api/v2" -PublishLocation http://packages.example.local/nuget/Example-Development/api/v2/package

Register-PSRepository : The specified Uri 'https://packages.example.local/nuget/Example-Development/api/v2' for parameter 'SourceLocation' is an invalid Web Uri. Please ensure that it meets the Web Uri requirements.
At line:1 char:1
+ Register-PSRepository -Name Example-Development -SourceLocation "http ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (https://package...elopment/api/v2:String) [Register-PSRepository], ArgumentException
    + FullyQualifiedErrorId : InvalidWebUri,Register-PSRepository

In previous versions of PowerShellGet, I could upload to a repository, I just couldn't Install-Module from the repository.
RANT
I am beyond frustrated with how terrible PowerShellGet is.  Every time I use it I get indescribably awful error messages and spend hours googling trying to solve problems related to getting my packages available for others to consume.   You have to then put a Description in. Literally, everything takes at least one extra step more than it should, nothing is cohesive. If Satya Nadella is reading this, please improve the morale of your employees by fixing how non-productive PowerShell is.
END RANT

@BatmanAMA  I have since discovered what I think the problem is, and a general clue why it magically started working for you: The real problem is PowerShellGet is "Unable to find type [System.Net.Http.HttpClient]"
PS C:\WINDOWS\system32> $Error
PS C:\WINDOWS\system32>  Register-PSRepository -Name Example-Development -SourceLocation "http://packages.example.local/nuget/Example-Development/api/v2" -PublishLocation http://packages.example.local/nuget/Example-Development/api/v2/package
Register-PSRepository : The specified Uri 'http://packages.example.local/nuget/Example-Development/api/v2' for parameter 'SourceLocation' is an invalid Web Uri. Please ensure that it meets the Web Uri requirements.
At line:1 char:2
+  Register-PSRepository -Name Example-Development -SourceLocation "http: ...
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (http://packages...elopment/api/v2:String) [Register-PSRepository], ArgumentException
    + FullyQualifiedErrorId : InvalidWebUri,Register-PSRepository

PS C:\WINDOWS\system32> $Error
Register-PSRepository : The specified Uri 'http://packages.example.local/nuget/Example-Development/api/v2' for parameter 'SourceLocation' is an invalid Web Uri. Please ensure that it meets the Web Uri requirements.
At line:1 char:2
+  Register-PSRepository -Name Example-Development -SourceLocation "http: ...
+  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (http://packages...elopment/api/v2:String) [Register-PSRepository], ArgumentException
    + FullyQualifiedErrorId : InvalidWebUri,Register-PSRepository

Unable to find type [System.Net.Http.HttpClient].
At C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.6.7\PSModule.psm1:3020 char:9
+         [System.Net.Http.HttpClient]
+         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (System.Net.Http.HttpClient:TypeName) [], RuntimeException
    + FullyQualifiedErrorId : TypeNotFound

Get-Variable : Cannot find a variable with the name 'PackageManagementProvider'.
At C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.6.7\PSModule.psm1:11275 char:16
+ ...          if(Get-Variable -Name PackageManagementProvider -ErrorAction ...
+                 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (PackageManagementProvider:String) [Get-Variable], ItemNotFoundException
    + FullyQualifiedErrorId : VariableNotFound,Microsoft.PowerShell.Commands.GetVariableCommand


RHEL 8 Support with Docker CE

Validate RHEL 8 with Docker CE support.

Validate Rancher HA
Validate Rancher Custom Clusters
Validate Rancher Node drivers with RHEL 8 AMI

gzrancher/rancher#9277       gzrancher/rancher#11129

This should e linked to RKE 1788

Created RHEL8 instances in AWS((ami-0663557a71df84272) and installed docker using the below steps:
dnf config-manager --add-repo=https://download.docker.com/linux/centos/docker-ce.repo
dnf list docker-ce
dnf install docker-ce --nobest -y
systemctl start docker
systemctl enable docker
docker --version
docker run hello-world

Deployed rancher server using RHEL8 machine and created a custom cluster using RHEL8 node.
Cluster creation failed with the below error:
2019/12/20 17:35:16 [ERROR] ClusterController c-kbgrx [cluster-provisioner-controller] failed with : [workerPlane] Failed to bring up Worker Plane: [Failed to verify healthcheck: Service [kube-proxy] is not healthy on host [a.b.c.d]. Response code: [503], response body: {"lastUpdated": "2019-12-20 04:42:52.920242235 +0000 UTC m=+0.112474336","currentTime": "2019-12-20 17:35:11.116694619 +0000 UTC m=+46338.308926872"}, log: Perhaps iptables or your kernel needs to be upgraded.]

With iptables deprecated in RHEL 8, I believe nftables will potentially pose problems for us.

Tested on Rancher with RHEL8 instance (64-bit (x86), Virtualization type: hvm) from AWS.
Tried creating custom cluster using RHEL8 instance but failed to create it.
Error:
2020/02/10 21:21:23 [ERROR] cluster [c-x4877] provisioning: Failed to get job complete status for job rke-network-plugin-deploy-job in namespace kube-system
2020/02/10 21:21:23 [INFO] kontainerdriver rancherkubernetesengine stopped
2020/02/10 21:21:23 [ERROR] ClusterController c-x4877 [cluster-provisioner-controller] failed with : Failed to get job complete status for job rke-network-plugin-deploy-job in namespace kube-system

Logs from node:
W0210 21:34:42.206282   23758 iptables.go:508] Could not set up iptables canary mangle/KUBE-KUBELET-CANARY: error creating chain "KUBE-KUBELET-CANARY": exit status 3: modprobe: ERROR: ../libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file '/lib/modules/4.18.0-80.4.2.el8_0.x86_64/modules.dep.bin'
modprobe: FATAL: Module ip_tables not found in directory /lib/modules/4.18.0-80.4.2.el8_0.x86_64
iptables v1.6.0: can't initialize iptables table `mangle': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
E0210 21:34:42.580142   23758 kubelet.go:2183] Container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:docker: network plugin is not ready: cni config uninitialized
W0210 21:34:47.156424   23758 cni.go:237] Unable to update cni config: no networks found in /etc/cni/net.d

Things discovered while working on this:

Kernel modules are compressed, making kube-proxy unable to load them as modprobe in the hyperkube image does not support that (https://github.com/kubernetes/kubernetes/issues/60869). To work around this, load the modules yourself. This will be fixed when we move to the new Buster based images.
As there is no official upstream packages, we install the centos Docker repo, add module_hotfixes=True to the section in /etc/yum.repos.d/docker-ce.repo (to make sure the latest packages can be installed, else the package will be stuck at 18.09.1), and use --nobest to dnf install.
Making sure net.ipv4.ip_forward = 1 is enabled on boot to make Docker not default to DROP on the FORWARD chain to make sure the pods can connect to the outside.
Disabling NetworkManager as that is still advised by Docker: https://success.docker.com/article/should-you-use-networkmanager

This is what was used to prepare a host (RHEL 8.1 AMI, also tested on CentOS 8.1 droplet):
#!/bin/bash
sudo dnf config-manager --add-repo=https://download.docker.com/linux/centos/docker-ce.repo
sudo sed -i '/^gpgkey=https:\/\/download.docker.com\/linux\/centos\/gpg/a module_hotfixes=True' /etc/yum.repos.d/docker-ce.repo
sudo dnf install docker-ce --nobest -y
sudo systemctl start docker
sudo systemctl enable docker
sudo usermod -aG docker ec2-user || true
for mod in ip_tables ip_vs_sh ip_vs ip_vs_rr ip_vs_wrr; do sudo modprobe $mod; echo $mod | sudo tee -a /etc/modules-load.d/iptables.conf; done
echo "net.ipv4.ip_forward = 1" | sudo tee -a /etc/sysctl.d/50-docker-forward.conf
sudo iptables -P FORWARD ACCEPT
sudo dnf -y install network-scripts
sudo systemctl enable network
sudo systemctl disable NetworkManager
reboot

As there is no iptables-legacy mode, you can't really debug iptables on the host. The best way is to use iptables binary from the hyperkube container, e.g. docker exec kube-proxy iptables-save.

Summary: Using the script above, if you prep the nodes for either Rancher HA or custom nodes, you can get RHEL8 with Docker CE support, but Docker CE doesn't have install scripts for RHEL 8.

@superseb I'm confused about the iptables-legacy comment.  Is RHEL8 running nftables or iptables?  If they are running nftables, how does kube-proxy work as we have the old iptables binary.

@superseb I'm confused about the iptables-legacy comment. Is RHEL8 running nftables or iptables? If they are running nftables, how does kube-proxy work as we have the old iptables binary.

It's using nftables with iptables binaries shimmed as compatibility layers, that's why the 'native' iptables binaries from the hyperkube image are no good

@The-Loeki right, so doesn't that mean that RKE on RHEL8 will be broken for sure?  kube-proxy can not manage the iptables because it's use the iptables from the hyperkube image which is the wrong iptables implementation.

It is running nftables and does not include the iptables-legacy fallback, which for example Debian Buster does. This doesn't mean it cannot work, when we are loading the needed kernel modules, and kube-proxy uses its iptables binary to program the rules, it still functions. The only issue is that from the host, you cannot interfere with that as you only want to use one framework at a time. So basically what is happening is that we are using the old method, and because hyperkube gives us the legacy iptables binary, this can work. As this image does not contain firewalld, which normally manages the firewall rules (using nftables), it doesn't interfere. It needs to be disabled if it is running. I also found this Red Hat KB article on using iptables: https://access.redhat.com/solutions/3897641
If this is a feasible solution, that's another discussion but technically this can work and it works, as these steps have been validated in our validation tests for both custom cluster and RKE. The main reason for falling back to the old iptables way is because of the hyperkube image with the older iptables version, thats why the reference is there to the new images which are based on Buster with the needed iptables version to support nftables (apart from all the other components we have to check if they support it, either based on a specific configuration or auto-detect, as we need to support existing OS's and new ones).

@superseb sorry, I'm missing a lot of background knowledge on iptables/nftables. I'll try to do more research so I can better understand this.

@superseb I think we should find an approach where our image has iptables and iptables-legacy and as part of an entrypoint detect and switch to the appropriate one the host is using.  I believe just checking nft list ruleset works and doesn't give a blank output is sufficient to detect which one.  But their probably a better approach as I know this is a common problem and k8s has an upstream issue about that I can't find.

@Oats87 Is looking into what's required and the recommendations for RHEL 8 support.

I'm not sure that running mixed-mode (nf_tables and ip_tables) is a good idea for production support, given issues around operating in such a manner like: https://github.com/kubernetes/kubernetes/issues/71305#issuecomment-448052889
In the k/k project, logic was added into the Debian buster-based images (direct images, not hyperkube) to attempt to detect the nft, specifically logic similar to: https://github.com/kubernetes/kubernetes/pull/82966/files#diff-c60536f6b948668f1b8aa52529a35f5aR28 like what @ibuildthecloud has mentioned.
The hyperkube images don't seem to have received these fixes, and are not operating with Debian buster, but instead, still using stretch.
Would it make sense for us to start the ball rolling of managing our own hyperkube images, especially due to the fact that hyperkube was removed in 1.19?

One issue of note as well is with the CNI drivers. Flannel does not today support nftables, but could also be updated with logic to check, similar to how we would outfit hyperkube.

Attempts to "vanilla" install docker-ce without module_hotfixes=yes lead to the following results:
[root@ck-centos8 ~]# yum install docker-ce
Last metadata expiration check: 0:53:30 ago on Tue 23 Jun 2020 04:39:24 PM PDT.
Error:
 Problem: package docker-ce-3:19.03.12-3.el7.x86_64 requires containerd.io >= 1.2.2-3, but none of the providers can be installed
  - cannot install the best candidate for the job
  - package containerd.io-1.2.10-3.2.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.13-3.1.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.13-3.2.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.2-3.3.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.2-3.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.4-3.1.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.5-3.1.el7.x86_64 is filtered out by modular filtering
  - package containerd.io-1.2.6-3.3.el7.x86_64 is filtered out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
[root@ck-centos8 ~]#

The root cause for why the docker-ce package from download.docker.com does not work out of box with CentOS 8/RHEL 8 is due to modularity, namely conflicts between:
runc
container-selinux

Both of these packages belong to the container-tools module, yet are required by containerd. The containerd package brings a runc to the table, which conflicts with the runc that is installed/part of container-tools. If you attempt to dnf module disable container-tools you'll then get conflicts as container-selinux is a specific module-included package and is thus filtered out as such:
[root@ck-centos8 ~]# yum install docker-ce
Last metadata expiration check: 0:54:33 ago on Tue 23 Jun 2020 04:39:24 PM PDT.
Error:
 Problem: package docker-ce-3:19.03.12-3.el7.x86_64 requires container-selinux >= 2:2.74, but none of the providers can be installed
  - cannot install the best candidate for the job
  - package container-selinux-2:2.124.0-1.gitf958d0c.module_el8.2.0+303+1105185b.noarch is filtered out by modular filtering
  - package container-selinux-2:2.124.0-1.module_el8.2.0+304+65a3c2ac.noarch is filtered out by modular filtering
  - package container-selinux-2:2.124.0-1.module_el8.2.0+305+5e198a41.noarch is filtered out by modular filtering
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
[root@ck-centos8 ~]#

Upstream, a patch was made to the containerd.spec to not include runc as a provides but this seems dangerous as it could cause actual conflicts with the runc package that is installed by default on CentOS etc. Regardless, there is merged support for building a centos-8 rpm but these are not currently published to the public download.docker.com repo (https://github.com/docker/containerd-packaging/pull/148/files).

Hyperkube images v1.16.12, v1.17.8, and v1.18.5 have been bumped to debian-hyperkube-base v1.1.0 which includes the iptables-detect script. This means that Kubernetes itself (namely the Kubelet/Kube-proxy) can operate with nf_tables, but we still need to figure out how to reliably install docker-ce and repackage the flannel/calico images for iptables-detect

Interestingly, if you disable the container-tools module, you are able to cleanly install docker-ce on CentOS 8.
[root@ck-centos-8-base ~]# dnf module disable container-tools
CentOS-8 - AppStream                                                                         58 kB/s | 4.3 kB     00:00
CentOS-8 - AppStream                                                                        973 kB/s | 5.8 MB     00:06
CentOS-8 - Base                                                                              12 kB/s | 3.9 kB     00:00
CentOS-8 - Base                                                                             1.7 MB/s | 2.2 MB     00:01
CentOS-8 - Extras                                                                           3.6 kB/s | 1.5 kB     00:00
CentOS-8 - Extras                                                                            12 kB/s | 6.7 kB     00:00
Dependencies resolved.
============================================================================================================================
 Package                      Architecture                Version                        Repository                    Size
============================================================================================================================
Disabling modules:
 container-tools

Transaction Summary
============================================================================================================================

Is this ok [y/N]: y
Complete!
[root@ck-centos-8-base ~]# wget -O /etc/yum.repos.d/docker-ce.repo https://download.docker.com/linux/centos/docker-ce.repo
--2020-08-12 13:30:26--  https://download.docker.com/linux/centos/docker-ce.repo
Resolving download.docker.com (download.docker.com)... <IP_ADDRESS>, <IP_ADDRESS>, <IP_ADDRESS>, ...
Connecting to download.docker.com (download.docker.com)|<IP_ADDRESS>|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2424 (2.4K) [binary/octet-stream]
Saving to: ‘/etc/yum.repos.d/docker-ce.repo’

/etc/yum.repos.d/docker-ce.rep 100%[====================================================>]   2.37K  --.-KB/s    in 0s

2020-08-12 13:30:26 (23.8 MB/s) - ‘/etc/yum.repos.d/docker-ce.repo’ saved [2424/2424]

[root@ck-centos-8-base ~]# yum install docker-ce
Docker CE Stable - x86_64                                                                   236 kB/s |  25 kB     00:00
Dependencies resolved.
============================================================================================================================
 Package                      Architecture          Version                           Repository                       Size
============================================================================================================================
Installing:
 docker-ce                    x86_64                3:19.03.12-3.el7                  docker-ce-stable                 24 M
Installing dependencies:
 containerd.io                x86_64                1.2.13-3.2.el7                    docker-ce-stable                 25 M
     replacing  runc.x86_64 1.0.0-65.rc10.module_el8.2.0+305+5e198a41
 docker-ce-cli                x86_64                1:19.03.12-3.el7                  docker-ce-stable                 38 M
 libcgroup                    x86_64                0.41-19.el8                       BaseOS                           70 k

Transaction Summary
============================================================================================================================
Install  4 Packages

Total download size: 88 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): libcgroup-0.41-19.el8.x86_64.rpm                                                     575 kB/s |  70 kB     00:00
(2/4): docker-ce-19.03.12-3.el7.x86_64.rpm                                                   14 MB/s |  24 MB     00:01
(3/4): containerd.io-1.2.13-3.2.el7.x86_64.rpm                                               14 MB/s |  25 MB     00:01
(4/4): docker-ce-cli-19.03.12-3.el7.x86_64.rpm                                               18 MB/s |  38 MB     00:02
----------------------------------------------------------------------------------------------------------------------------
Total                                                                                34 MB/s |  88 MB     00:02
warning: /var/cache/dnf/docker-ce-stable-091d8a9c23201250/packages/containerd.io-1.2.13-3.2.el7.x86_64.rpm: Header V4 RSA/SHA512 Signature, key ID 621e9f35: NOKEY
Docker CE Stable - x86_64                                                                    67 kB/s | 1.6 kB     00:00
Importing GPG key 0x621E9F35:
 Userid     : "Docker Release (CE rpm<EMAIL_ADDRESS> Fingerprint: 060A 61C5 1B55 8A7F 742B 77AA C52F EB6B 621E 9F35
 From       : https://download.docker.com/linux/centos/gpg
Is this ok [y/N]: y
Key imported successfully
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                1/1
  Installing       : docker-ce-cli-1:19.03.12-3.el7.x86_64 [========================         Installing       : docker-ce-cli-1:19.03.12-3.  Installing       : docker-ce-cli-1:19.03.12-3.el7.x86_64                                                                             1/5
  Running scriptlet: docker-ce-cli-1:19.03.12-3.el7.x86_64                                                                             1/5
  Installing       : containerd.io-1.2.13-3.2.el7.x86_64                                                                               2/5
  Running scriptlet: containerd.io-1.2.13-3.2.el7.x86_64                                                                               2/5
  Running scriptlet: libcgroup-0.41-19.el8.x86_64                                                                                3/5
  Installing       : libcgroup-0.41-19.el8.x86_64                                                                                3/5
  Running scriptlet: libcgroup-0.41-19.el8.x86_64                                                                                3/5
  Installing       : docker-ce-3:19.03.12-3.el7.x86_64                                                                                4/5
  Running scriptlet: docker-ce-3:19.03.12-3.el7.x86_64                                                                                4/5
  Obsoleting       : runc-1.0.0-65.rc10.module_el8.2.0+305+5e198a41.x86_64                                                             5/5
  Running scriptlet: runc-1.0.0-65.rc10.module_el8.2.0+305+5e198a41.x86_64                                                             5/5
  Verifying        : libcgroup-0.41-19.el8.x86_64                                                                                1/5
  Verifying        : containerd.io-1.2.13-3.2.el7.x86_64                                                                               2/5
  Verifying        : runc-1.0.0-65.rc10.module_el8.2.0+305+5e198a41.x86_64                                                             3/5
  Verifying        : docker-ce-3:19.03.12-3.el7.x86_64                                                                                4/5
  Verifying        : docker-ce-cli-1:19.03.12-3.el7.x86_64                                                                             5/5
Installed products updated.

Installed:
  containerd.io-1.2.13-3.2.el7.x86_64 docker-ce-3:19.03.12-3.el7.x86_64 docker-ce-cli-1:19.03.12-3.el7.x86_64 libcgroup-0.41-19.el8.x86_64

Complete!
[root@ck-centos-8-base ~]#

Ah. Red herring, as the container-selinux package seems to have been already installed on the system already.

So, there are a few ways to get docker-ce installed, but none of them are particularly ideal. The root crux of the problem as to why you cannot simply consume the el7 packages from download.docker.com for CentOS 8/RHEL 8 is due to the fact that the containerd RPM "provides" runc, which conflicts with the runc that comes out of the container-tools module. On the same strain however, you need container-selinux which is a part of the container-tools module... This leaves us with the following choices:

Disable the container-tools module but still install container-selinux from the module as an RPM/manually, which satisfies the requirement for it. This is dirty, and leaves container-selinux open to potentially not being updated down the line.
Install the RPM's directly, bypassing the package manager. This is a bad option.
"Modularize" docker-ce. Due to complexities in the way docker-ce and containerd are packaged, this is a non-trivial task and will require a very hard fork of packaging, thus leaving Rancher responsible for maintaining the packages fully.
Enable the container-tools module, but yum remove runc or make sure the modular runc is not installed. Then, recompile the containerd.io rpm and provide it via a Rancher-created yum repository, which then allows yum install docker-ce to proceed as it will resolve the containerd.io requirement to "our" RPM.

Just in case its useful, these were the steps that worked for me,
dnf module enable container-tools && \
dnf install container-selinux && \
dnf module disable container-tools && \
dnf install docker-ce

Docker 19.03.13 seems to have packages available for RHEL/CentOS8, https://download.docker.com/linux/centos/8/x86_64/stable/Packages/

Docker 19.03.13 seems to have packages available for RHEL/CentOS8, https://download.docker.com/linux/centos/8/x86_64/stable/Packages/

This Rancher support article references Docker CE 20.03 on RHEL/CentOS8, a release that is not visible at the public sources for CentOS7 or 8. Now that a stable 19.03 release is available on CentOS8 just as it is for CentOS7, will this also be supported? https://support.rancher.com/hc/en-us/articles/360045055172-How-and-when-will-Rancher-support-RHEL-CentOS-8-

No, many observations have been posted in this issue but as long as official articles are not updated/this GitHub issue is not validated/closed, it's not supported. In this case, this is scoped to RKE.

Now that Docker 19.03.13 has corresponding packages for el8, we can look at bringing in support for CentOS 8/RHEL 8 for Rancher when using RKE K8s 1.19 and above.

The Docker 19.03.13 el8 rpm's require a minor change to the install-docker script to use as makecache fast is not supported on the system, as well as cannot have a pre-existing runc on the system as the containerd package will conflict.
Interestingly, when observing CentOS 8, there are different "stock" configurations.
An AMI from: https://wiki.centos.org/Cloud/AWS does not have runc installed, but you will need to manually yum|dnf install iptables in order to allow our https://releases.rancher.com/install-docker/19.03.sh script to work.
A CentOS 8 install from ISO has runc installed on it so you will need to yum|dnf remove runc

I was able to successfully create a cluster on AWS and CentOS 8 with making these changes in the 19.03.13.sh install script. If you want, I can create a PR for this. Though there are maybe some more changes needed for RHEL 8. My current diff:
diff --git a/19.03.13.sh b/19.03.13.sh
index e1a4013..ac4fb42 100644
--- a/19.03.13.sh
+++ b/19.03.13.sh
@@ -443,7 +443,14 @@ do_install() {
 					$sh_c "$config_manager $enable_channel_flag docker-ce-$CHANNEL"
 				fi
 				adjust_repo_releasever "$dist_version"
-				$sh_c "$pkg_manager makecache fast"
+                               if [ "$dist_version" -lt "8" ]; then
+  				     $sh_c "$pkg_manager makecache fast"
+  			        else
+                                   $sh_c "$pkg_manager makecache"
+                                   if $sh_c "$pkg_manager list installed -q runc"; then
+                                       $sh_c "$pkg_manager remove -y -q runc"
+                                   fi
+				fi
 				$sh_c "$pkg_manager install -y -q docker-ce-${docker_version} docker-ce-cli-${docker_version}"
 				if [ -d '/run/systemd/system' ]; then
 					$sh_c 'service docker start'

@bashofmann
The logic proposed in that script makes sense, although I'd be hesitant to auto-remove runc as it is normally installed as dependency for a ton of other things on an EL8 system, like podman etc. There is also additional logic that is required for RHEL systems, as the current install-docker appears to ensure that a few RHEL 7 repositories are enabled before allowing installation. These can be seen here: https://github.com/rancher/install-docker/blob/master/19.03.13.sh#L17 and are enabled here: https://github.com/rancher/install-docker/blob/master/19.03.13.sh#L429
A PR into install-docker would be welcome

Should the script then just fail if runc is already present in a conflicting version and we document this?
For RHEL8 it seems that the repository structure changed quite a bit (https://access.redhat.com/discussions/4171061#comment-1531531). It sounds like we don't have to enable any additional ones. But I have no way of testing this at the moment.

@aaronRancher please take a look at the comment here. There are some pre-requisites for testing this. Please reach out to @chrisreed87  if there is any questions. We will be documenting the pre-requisites in the release notes.

Validated with Rancher server rancher\rancher:master-head version 3d755ff and rancher\rancher:v2.5-head version 7eb1792
Installed docker with:
curl -L https://releases.rancher.com/install-docker/19.03.sh | sh

Validated Rancher HA install
INFO[0133] [addons] Executing deploy job rke-ingress-controller
INFO[0139] [ingress] ingress controller nginx deployed successfully
INFO[0139] [addons] Setting up user addons
INFO[0139] [addons] no user addons defined
INFO[0139] Finished building Kubernetes cluster successfully

$ kubectl -n cattle-system rollout status deploy/rancher
Waiting for deployment "rancher" rollout to finish: 0 of 3 updated replicas are available...
Waiting for deployment "rancher" rollout to finish: 1 of 3 updated replicas are available...
Waiting for deployment "rancher" rollout to finish: 2 of 3 updated replicas are available...
Waiting for deployment spec update to be observed...
Waiting for deployment "rancher" rollout to finish: 2 of 3 updated replicas are available...
deployment "rancher" successfully rolled out

Validated Rancher Custom Clusters
Validated Rancher Node drivers with RHEL 8 AMI


Do not emit unused serde attributes

This is why #476 was required. Codegen was generating structs with #[serde(...)] attributes but no #[derive(Serialize, Deserialize)]. Also the bounds thing was fixed back in serde 0.8.0.

Thanks! Merge pending running integration tests.