Can not access Traffic Vault API when using SSL

I'm submitting a ...

[ ] bug report
[ ] new feature / enhancement request
[ ] improvement request (usability, performance, tech debt, etc.)
[ ] other

Traffic Control components affected ...

[ ] CDN in a Box
[ ] Documentation
[ ] Grove
[ ] Traffic Control Client
[ ] Traffic Monitor
[ ] Traffic Ops
[ ] Traffic Ops ORT
[ ] Traffic Portal
[ ] Traffic Router
[ ] Traffic Stats
[x] Traffic Vault
[ ] unknown

Current behavior:

I follow this guide https://traffic-control-cdn.readthedocs.io/en/latest/admin/traffic_vault.html to install traffic vault on 1 VM. When I enable SSL, this error appeared. I generate self-signed cert like in the guide.
[root@traffic-ops ~]# curl -v https://trafficvault.ethernet.id:8088/types/default/props
* About to connect() to trafficvault.ethernet.id port 8088 (#0)
*   Trying <IP_ADDRESS>...
* Connected to trafficvault.ethernet.id (<IP_ADDRESS>) port 8088 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -5938 (PR_END_OF_FILE_ERROR)
* Encountered end of file
* Closing connection 0
curl: (35) Encountered end of file
[root@traffic-ops ~]#

Minimal reproduction of the problem with instructions:

This is the riak error.log.
2019-11-21 14:02:32.296 [error] <0.91.0> Supervisor ssl_connection_sup had child undefined started with {tls_connection,start_link,undefined} at <0.6302.0> exit with reason no function clause matching ssl_cipher:hash_algorithm(8) line 1174 in context child_terminated
2019-11-21 14:02:32.296 [error] <0.345.0> application: mochiweb, "Accept failed error", "{'EXIT',\n    {{function_clause,\n         [{ssl_cipher,hash_algorithm,\"\\b\",\n              [{file,\"ssl_cipher.erl\"},{line,1174}]},\n          {ssl_handshake,'-dec_hello_extensions/2-blc$^0/1-1-',1,\n              [{file,\"ssl_handshake.erl\"},{line,1487}]},\n          {ssl_handshake,'-dec_hello_extensions/2-blc$^0/1-1-',1,\n              [{file,\"ssl_handshake.erl\"},{line,1488}]},\n          {ssl_handshake,dec_hello_extensions,2,\n              [{file,\"ssl_handshake.erl\"},{line,1487}]},\n          {tls_handshake,decode_handshake,3,\n              [{file,\"tls_handshake.erl\"},{line,236}]},\n          {tls_handshake,get_tls_handshake_aux,3,\n              [{file,\"tls_handshake.erl\"},{line,203}]},\n          {tls_connection,next_state,4,\n              [{file,\"tls_connection.erl\"},{line,2556}]},\n          {gen_fsm,handle_msg,7,[{file,\"gen_fsm.erl\"},{line,505}]}]},\n     {gen_fsm,sync_send_all_state_event,\n         [<0.6302.0>,{start,infinity},infinity]}}}"
2019-11-21 14:02:32.296 [error] <0.345.0> CRASH REPORT Process <0.345.0> with 0 neighbours exited with reason: {error,accept_failed} in mochiweb_acceptor:init/3 line 33
2019-11-21 14:02:32.296 [error] <0.335.0> {mochiweb_socket_server,320,{acceptor_error,{error,accept_failed}}}
2019-11-21 14:02:54.690 [error] <0.6337.0> gen_fsm <0.6337.0> in state hello terminated with reason: no function clause matching ssl_cipher:hash_algorithm(8) line 1174
2019-11-21 14:02:54.690 [error] <0.6337.0> CRASH REPORT Process <0.6337.0> with 0 neighbours exited with reason: no function clause matching ssl_cipher:hash_algorithm(8) line 1174 in gen_fsm:terminate/7 line 622
2019-11-21 14:02:54.690 [error] <0.91.0> Supervisor ssl_connection_sup had child undefined started with {tls_connection,start_link,undefined} at <0.6337.0> exit with reason no function clause matching ssl_cipher:hash_algorithm(8) line 1174 in context child_terminated
2019-11-21 14:02:54.691 [error] <0.347.0> application: mochiweb, "Accept failed error", "{'EXIT',\n    {{function_clause,\n         [{ssl_cipher,hash_algorithm,\"\\b\",\n              [{file,\"ssl_cipher.erl\"},{line,1174}]},\n          {ssl_handshake,'-dec_hello_extensions/2-blc$^0/1-1-',1,\n              [{file,\"ssl_handshake.erl\"},{line,1487}]},\n          {ssl_handshake,'-dec_hello_extensions/2-blc$^0/1-1-',1,\n              [{file,\"ssl_handshake.erl\"},{line,1488}]},\n          {ssl_handshake,dec_hello_extensions,2,\n              [{file,\"ssl_handshake.erl\"},{line,1487}]},\n          {tls_handshake,decode_handshake,3,\n              [{file,\"tls_handshake.erl\"},{line,236}]},\n          {tls_handshake,get_tls_handshake_aux,3,\n              [{file,\"tls_handshake.erl\"},{line,203}]},\n          {tls_connection,next_state,4,\n              [{file,\"tls_connection.erl\"},{line,2556}]},\n          {gen_fsm,handle_msg,7,[{file,\"gen_fsm.erl\"},{line,505}]}]},\n     {gen_fsm,sync_send_all_state_event,\n         [<0.6337.0>,{start,infinity},infinity]}}}"
2019-11-21 14:02:54.691 [error] <0.347.0> CRASH REPORT Process <0.347.0> with 0 neighbours exited with reason: {error,accept_failed} in mochiweb_acceptor:init/3 line 33
2019-11-21 14:02:54.691 [error] <0.335.0> {mochiweb_socket_server,320,{acceptor_error,{error,accept_failed}}}

Anything else:

What's the output of ls /etc/riak/certs/ and ls /etc/pki/tls/certs/?

This...
[root@atc-traffic-vault ~]# ll /etc/pki/tls/certs/
total 16
lrwxrwxrwx 1 root root   49 Nov 21 13:34 ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
lrwxrwxrwx 1 root root   55 Nov 21 13:34 ca-bundle.trust.crt -> /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt
-rw-r--r-- 1 root root 1285 Nov 21 12:54 ethernet-bundle.crt
-rwxr-xr-x 1 root root  610 Agu  9 08:38 make-dummy-cert
-rw-r--r-- 1 root root 2516 Agu  9 08:38 Makefile
-rwxr-xr-x 1 root root  829 Agu  9 08:38 renew-dummy-cert

[root@atc-traffic-vault ~]# ll /etc/riak/certs/
total 16
-rw-r--r-- 1 root root 1285 Nov 21 12:51 ethernet.id.crt
-rw-r--r-- 1 root root 1675 Nov 21 12:14 ethernet.id.key
-rw-r--r-- 1 root root 1976 Nov 21 13:23 tes.crt
-rw-r--r-- 1 root root 3243 Nov 21 13:23 tes.key

[root@atc-traffic-vault ~]# cat /etc/riak/riak.conf |grep ssl
ssl.certfile = /etc/riak/certs/ethernet.id.crt
ssl.keyfile = /etc/riak/certs/ethernet.id.key
ssl.cacertfile = /etc/pki/tls/certs/ca-bundle.crt

Update:
Request to API success when i request from ubuntu 16 client, but it get error when make  request from ubuntu 18 or centos 7

Hm. Okay, are those certs (/etc/riak/certs/ethernet.id.crt//etc/riak/certs/ethernet.id.key) self-signed? If so, can you try adding the -k option to your curl command?

Can be accessed when requested from ubuntu 16.04 client.
root@vault-ubuntu:~# curl -vvv https://admin:yasmin88@trafficvault.ethernet.id:8088/types/default/props -k
*   Trying <IP_ADDRESS>...
* Connected to trafficvault.ethernet.id (<IP_ADDRESS>) port 8088 (#0)
* found 148 certificates in /etc/ssl/certs/ca-certificates.crt
* found 592 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / DHE_RSA_AES_128_CBC_SHA1
* 	 server certificate verification SKIPPED
* 	 server certificate status verification SKIPPED
* 	 common name: *.ethernet.id (matched)
* 	 server certificate expiration date OK
* 	 server certificate activation date OK
* 	 certificate public key: RSA
* 	 certificate version: #1
* 	 subject<EMAIL_ADDRESS>* 	 start date: Thu, 21 Nov 2019 05:51:29 GMT
* 	 expire date: Fri, 20 Nov 2020 05:51:29 GMT
* 	 issuer<EMAIL_ADDRESS>* 	 compression: NULL
* ALPN, server did not agree to a protocol
* Server auth using Basic with user 'admin'
> GET /types/default/props HTTP/1.1
> Host: trafficvault.ethernet.id:8088
> Authorization: Basic YWRtaW46eWFzbWluODg=
> User-Agent: curl/7.47.0
> Accept: */*
>
< HTTP/1.1 200 OK
< Vary: Accept-Encoding
< Server: MochiWeb/1.1 WebMachine/1.10.5 (jokes are better explained)
< Date: Fri, 22 Nov 2019 00:49:47 GMT
< Content-Type: application/json
< Content-Length: 428
<
* Connection #0 to host trafficvault.ethernet.id left intact
{"props":{"allow_mult":false,"basic_quorum":false,"big_vclock":50,"chash_keyfun":{"mod":"riak_core_util","fun":"chash_std_keyfun"},"dvv_enabled":false,"dw":"quorum","last_write_wins":false,"linkfun":{"mod":"riak_kv_wm_link_walker","fun":"mapreduce_linkfun"},"n_val":3,"notfound_ok":true,"old_vclock":86400,"postcommit":[],"pr":0,"precommit":[],"pw":0,"r":"quorum","rw":"quorum","small_vclock":50,"w":"quorum","young_vclock":20}}

But error from another client OS like centos 7 and ubuntu 18. Hmm...did I miss something?

so you're saying it worked when you curled from an Ubuntu machine but non from some other distribution? What distro did you try first?

I curled from centos 7 (from riak server itself) in my first try, then from traffic ops server (also cen7). Then, from my laptop (ubuntu18) -->all not work.
Then, i create a new VM ubuntu16,actually i want to try install riak server on this vm. It works perfectly. Then I also try to curled my centos riak server from this ubuntu and it also works.
TL;DR:

Riak server works when I installed on Ubuntu 16.04 but failed in centos 7.
I can curled my centos Riak Server from that Ubuntu 16.04, but failed when curled from other distributions.

So, I also try to install CIAB for testing. Then I curled between my trafficops container to trafficvault container. And give me same result.
[mynode@ag-atc ~]$ docker exec -it 88b029985f22 curl -v https://trafficvault:8088/types/default/props
* About to connect() to trafficvault port 8088 (#0)
*   Trying <IP_ADDRESS>...
* Connected to trafficvault (<IP_ADDRESS>) port 8088 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
*   CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* NSS error -5938 (PR_END_OF_FILE_ERROR)
* Encountered end of file
* Closing connection 0
curl: (35) Encountered end of file

So, I just wondering..if I cant access its API from centos, how I could do this step?:
wget https://raw.githubusercontent.com/apache/trafficcontrol/master/traffic_ops/app/conf/misc/riak_search/sslkeys.xml
curl -kvsX PUT "https://admin:pass@trafficvault.infra.ciab.test:8088/search/schema/sslkeys" -H "Content-Type: application/xml" -d @sslkeys.xml

Well as far as CDN-in-a-Box goes, Riak is listening on port 8087 for unsecured connections, not port 8088 for HTTPS connections.
Truthfully, at this point I'm out of ideas. Hoping someone else can jump in on this.

I would double check the versions of curl you using to test with.  I expect them to be very different between ubuntu and centos due to how their upstream projects are managed.  From what I gather that error is related to the inability for curl to properly negotiate a protocol and cipher.
I'm not sure I follow entirely what you're doing with vault and ubuntu as that's an unsupported configuration.
I recommend adding the following line to the bottom of your riak.conf, restarting, and trying again per the riak docs:
tls_protocols.tlsv1 = on

I would double check the versions of curl you using to test with. I expect them to be very different between ubuntu and centos due to how their upstream projects are managed. From what I gather that error is related to the inability for curl to properly negotiate a protocol and cipher.
I'm not sure I follow entirely what you're doing with vault and ubuntu as that's an unsupported configuration.
I recommend adding the following line to the bottom of your riak.conf, restarting, and trying again per the riak docs:
tls_protocols.tlsv1 = on

I already add this line tls_protocols.tlsv1 = on same like in the guide. Yeah I know there is difference version curl in  both OS. Maybe we need add more detail about traffic vault guide? So it the vault could be access by difference client OS.

I’ve also run into this problem while setting up Traffic Control. AFAICT, the main cause of this issue stems from the latest binary release of Riak KV, which ships with a buggy version of erlang (http://erlang.org/pipermail/erlang-questions/2015-June/084868.html).

Well as far as CDN-in-a-Box goes, Riak is listening on port 8087 for unsecured connections, not port 8088 for HTTPS connections.

I've made numerous attempts to get this working, but Riak also refuses to  accept protobuf connections (port 8087). Since it complains about not being able to start a SSL session when SSL is disabled, I think we have the same problem when using protobuf as well.
Here’s some log output that I’ve gathered:
SSL enabled (riak-admin security enable)
Traffic Ops
ERROR: log.go:172: 2019-12-06T14:57:14.515182211+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56544-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:19.5671247+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56546-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:24.621252251+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56548-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:29.672914624+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56550-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:34.725151543+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56552-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:39.776810812+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56554-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: api.go:136: 2019-12-06T14:57:40.577628207+09:00: <TRAFFIC_ROUTER_IP>:35708 getting cdn ssl keys: getting cdn ssl keys from Riak: with cluster error: riak search error: executing Riak command index 'sslkeys' query 'cdn:kabletown_cdn': ClientError|[Cluster] all retries exhausted and/or no nodes available to execute command

Riak
2019-12-06 14:57:04.689 [error] <0.16781.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:35.009 [error] <0.16889.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:40.050 [error] <0.16912.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:50.156 [error] <0.16945.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:55.213 [error] <0.16963.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}

SSL disabled (riak-admin security disable)
Traffic Ops
ERROR: log.go:172: 2019-12-06T13:27:59.452543951+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:04.45239435+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:09.452478404+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: +og.go:172: 2019-12-06T13:28:14.452369829+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:19.452471924+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:24.452359545+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: api.go:136: 2019-12-06T13:28:25.894461608+09:00: <TRAFFIC_ROUTER_IP>:34570 getting cdn ssl keys: getting cdn ssl keys from Riak: with cluster error: riak search error: executing Riak command index 'sslkeys' query 'cdn:kabletown_cdn': ClientError|[Cluster] all retries exhausted and/or no nodes available to execute command

Riak
no logs

I recommend adding the following line to the bottom of your riak.conf, restarting, and trying again per the riak docs:
tls_protocols.tlsv1 = on

I already add this line tls_protocols.tlsv1 = on same like in the guide. Yeah I know there is difference version curl in both OS. Maybe we need add more detail about traffic vault guide? So it the vault could be access by difference client OS.

I would suggest using tls_protocols.tlsv1.1 instead of tls_protocols.tlsv1, which is TLS 1.0. Updating the Riak configuration is only half of the solution, because you also need to limit any client that connects to Riak to TLS 1.1:
curl --tlsv1.1 --tls-max 1.1 -vk https://trafficvault.ethernet.id:8088/types/default/props

Can be accessed when requested from ubuntu 16.04 client.

This means that the OpenSSL library used by your version of curl in Ubuntu is not using any TLS signature algorithms that are unknown to Riak, which sidesteps the Erlang bug that @midchildan mentioned. You generally cannot configure this, because anywhere else, including signature algorithms unknown to the server is not an issue.
To demonstrate that this is really what is going on, compare the (successful) output of
openssl s_client -sigalgs 'RSA+SHA512' -connect trafficvault.ethernet.id:8088

vs. the unsuccessful output of
openssl s_client -sigalgs 'RSA+SHA512:RSA-PSS+SHA512' -connect trafficvault.ethernet.id:8088

closing as riak is soon to be deprecated.

closing as riak is soon to be deprecated.


Add JSON Schema files

:wave: - One thing I used for Peril that has been really useful is to export a JSON schema in the repo for the app settings file. This is auto-generated from the objects in the repo.
Then you can use this arbitrarily in any JSON file by using "$schema": "[url]":

Now I've got validations + docs inline in my editor.

Yup would be nice if you compile your schemas into json in like a dist folder or sth, so we could use them as
https://unpkg.com/@zeit/schemas/dist/deployment/config

:nerd_face:

For a workaround, I have submitted a pull request #59 with an action to automatically update JSON files from JS files. These JSON files are available in my fork.

Any updates on this @anatrajkovska?

A problem request has been opened to add support  for vercel.json
https://github.com/SchemaStore/schemastore/issues/1942
How to continue with this issue?
There is no json file here that can be link to.


lib: POSIX: Add check for deadlock in pthread_join

Calling pthread_join() with current thread would lead
to deadlock. Adding check for it and to return
appropriate error code.
Also updated the test case to verify the scenario.
Part of: #9993
Signed-off-by: Spoorthi K<EMAIL_ADDRESS>

Codecov Report

Merging #10269 into master will increase coverage by <.01%.
The diff coverage is 100%.

@@            Coverage Diff             @@
##           master   #10269      +/-   ##
==========================================
+ Coverage   53.05%   53.05%   +<.01%
==========================================
  Files         214      214
  Lines       26200    26202       +2
  Branches     5646     5647       +1
==========================================
+ Hits        13900    13902       +2
  Misses      10027    10027
  Partials     2273     2273

Impacted Files
Coverage Δ

lib/posix/pthread.c
70.5% <100%> (+0.27%)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 46592e6...0c4b531. Read the comment docs.


NullReferenceException while saving urlrewite setting

Jexus version : <IP_ADDRESS>
OS : Windows 10
When I tried to save url rewrite setting, jexus manager show error popup as below.

detail exception message is as below.
System.NullReferenceException: 개체 참조가 개체의 인스턴스로 설정되지 않았습니다.
position: JexusManager.Features.Rewrite.Inbound.InboundRule.Apply()
position: JexusManager.Features.Rewrite.Inbound.InboundRulePage.ApplyChanges()

What is the version number of JexusManager.exe? There is no "<IP_ADDRESS>" and I cannot reproduce the issue.
You will have to provide more details, like the steps you did in this dialog before the exception popped up.


Support displaying emotes in chat

When users use existing emotes, we should be able to show them in chat. Should not require any specific state of emotes since the chat message API knows the full path of the images.

Going to work on this over the weekend


nixosTests.taskchampion-sync-server: init

Motivation for this change
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[x] Tested basic functionality of all binary files (usually in ./result/bin/)
22.05 Release Notes (or backporting 21.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[x] Fits CONTRIBUTING.md.

I did not end up using TaskWarrier 3 (because I prefer to manage all personal data with git), and I do not use VIM as my primary editor, so my comments are only based on scanning the change set but not on the actual experience of trying it.


WIP: Fourth batch of updating sql tests to use assert_batches_eq

Which issue does this PR close?

Continued work on #743 task 2.
Rationale for this change

What changes are included in this PR?

Are there any user-facing changes?

@alamb good for review when you're ready :)


Add "Main" predefined type of key for Derivation Path key generation.

Description
Add Main type for "Add keys" flow in Polkadot Vault
Case:

Add Polkadot Vault wallet
Go to Wallet details
Click "Edit keys"
Try to add  key with type "Main" to Acala

Expected result:
User has predefined type "Main" with relaychain spec-name
Actual result:
Has not predefined Main DP type

For the main key the derivation path should be specName from chains.json for the selected chain.

Also upcoming changes:

Main keys will be shown on the edit/view keys screen
The user will be able to remove main keys

Status verification: ✅


HTML

HTML
User Story
As a bootcamp student
I want the prework notes to be structured on a webpage
so that I can easily find and read information
##Acceptance Criteria
GIVEN a Prework Study Guide website
WHEN I visit the website in my browser
THEN i see four boxes titled HTML, CSS, Git and JavaScript with assocaited notes listed

Done


Update reference of master to main in docs

Signed-off-by: Prem Saraswat<EMAIL_ADDRESS>

[ ] I added CHANGELOG entry for this change.
[x] Change is not relevant to the end user.

Changes

Updated docs in various places to account for the master -> main change

What about tutorials/kubernetes-helm/README.md? thinking

That file is not updated for quite some time, and I don't think we have an official helm chart generally available. So I thought it's best to not touch it for now.
WDYT should be done?


安装matter环境，使用BLEWi-Fi模式进行配网时出现如下报错：显示配网不成功 (CON-1128)

@DAYDREAM-FFF BLE adapter is not available on the machine you are running the chip-tool on.
Ble Error 0x00000401: BLE adapter unavailable

Also, please remove "< >" around the SSID and Passphrase

Closing this now


Access framework HTTP Request from method

This is a question as much as an issue.  I have several jsonrpc methods that require db, redis, and other state/config access that would normally be passed using the the 'app' or 'request' object. What is the best method to access the parent http request and/or web app object from a method?
It seems like its necessary to modify/create/subclass:

aio.methods
async_methods.py
async_dispatcher.dispatch
AsyncRequest

I will be making these changes for use in our projects (jussi,yo,sbds,hivemind).
I'm thinking that changing the signature of the dispatch method (and all the other methods that lead to the jsonrpc method) to also accept *args, **kwargs is the best, most modular way:

async def handle(aio_http_request):
    statsd = aio_http_request.app.config['statsd_client']
    jsonrpc_request = await aio_http_request.text()
    response = await methods.dispatch(jsonrpc_request, aio_http_request, statsd=statsd)
    return web.json_response(response)

I presume the use case for db/cache/metrics isn't rare, so I thought I would solicit your expertise and opinion about how these changes are implemented, especially if you're interested in adding my changes upstream.
Thanks for you excellent work!

Hi @john-g-g,
If you were using aiohttp's class-based views, you'd get the aiohttp context within your jsonrpc method:
class MyView(web.View):
    @methods.add
    async def ping(self):
        aio_http_request = self.request
        statsd = self.request.app.config['statsd_client']
        # ...

    async def post(self):
        request = await self.request.text()
        response = await methods.dispatch(request)
        return web.json_response(response)

app.router.add_route('*', '/', MyView)

However I've just tried this and it doesn't work right now, but if I fix that would it suit your situation?

Failing that your idea sounds good, my only suggestion would be to pass the values in an object like:
context = {'request': aio_http_request, 'statsd': statsd}
response = await methods.dispatch(jsonrpc_request, context=context)

And methods would receive the context object:
@methods.add
async def ping(context):
    statsd = context['statsd']
    # ...

I was able to access the aiohttp values in my method like this:
from aiohttp import web
from jsonrpcserver.aio import dispatch
from jsonrpcserver.response import NotificationResponse

class MyView(web.View):
    def __init__(self, *args, **kwargs):
        super().__init__(*args, **kwargs)
        self.methods = (self.ping,)

    async def ping(self):
        request = self.request
        # ...
        return 'pong'

    async def post(self):
        request = await self.request.text()
        response = await dispatch(self.methods, request)
        if isinstance(response, NotificationResponse):
            return web.Response()
        else:
            return web.json_response(response)

app = web.Application()
app.router.add_route('*', '/', MyView)

if __name__ == '__main__':
    web.run_app(app, port=5000)

The best I can do currently is this workaround:
async def rpc_handler(request):
    raw_request = await request.text()
    json_request = json.loads(raw_request)
    json_request.setdefault('params', {}).update({'request': request})

    response = await methods.dispatch(json_request)

    return web.json_response(response)

And then in every method I have access to the original request object. It works but I don't like it.
@methods.add
async def my_method(request):
    pass

Ok, I'll add the ability to pass extra data through dispatch.

I'm at Pycon this weekend, but I will get to this next week

Thanks a lot!

Ok, I've released a new version (3.5.0) which allows you to pass context through to the methods.
Here's how your code would look @semirook
@methods.add
async def my_method(context=None):
    # Use request here...
    pass

async def rpc_handler(request):
    raw_request = await request.text()
    response = await methods.dispatch(raw_request, context=request)
    if response.is_notification:
        return web.Response()
    else:
        return web.json_response(response)

Still, class-based views are a better option, if you can use them. (see above)


@xtina-starr => Launch Onboarding

🎊

          1 Warning

:warning:
Please include a PR summary

  Generated by :no_entry_sign: Danger


BUG: svc EXTERNAL-IP cannot be accessed

Create an eip address pool with a range of <IP_ADDRESS>/24
Create a service virtual machine (svc) and ensure that the svc occupies the eip <IP_ADDRESS>
The access to <IP_ADDRESS> from VM outside the cluster is not available

Pass the test


favicon.ico in Params

Why is favicon.ico passed to Params if your url template is f.e. /:id?

Fixed by reordering my routes

Not fixed. It was just a cached version that works fine. The question stays the same

because * and :arg is a wildcard-like pattern; but instead assigned the value in arg;
maybe you need to consider the pattern? like /user/:id?
when no favicon registered in html, browser will automatically get from /favicon.ico
so yeah, you get 2 incoming connection from browser the actual path + favicon path


Deno crash

By default, this crashes in deno.
PR here: https://github.com/josephtzeng/hocon-parser/pull/30

Fixed in fd45182.


Get rid of RING_BUFFER_DISABLE/ENABLE mess

I used two flags, as it forces you to use at least one when configuring, so if you start messing with it, it forces you to think. If you forget a flag it defaults it with no buffer, and I don't like core behaviour being disabled by mistake - I prefer my methodology, but thank you for point it out

it forces you to use at least one when configuring
Fair point.


[Bug] Messages are not marked as read

Describe the bug
After sending message, it is always marked as read.
To Reproduce

Go to any discussion
Send message.
See information about message
It will be marked as read.

I checked a lot.
Expected behavior
Should be marked as read after it have read.
Devices and Versions
Your Rocket.Chat.Android version: (3.3.0)
Your Rocket.Chat Server version: (open.rocket.chat)
Message have been read, but info doesn't show correctly. Api not working

@Adizbek I too have this issue but I suspect that it depends on the server configuration i.e I think admin can disable who read the message.

I have the same issue.
Steps to reproduce:

Created channel with 3 users
Sent test message with one of them
Made sure all of the user are currently seeing the channel message
Exited and entered the room serval time to make sure
See the test message's info.

Each time the result was different

I have a similar issue. We send a message in a channel or conversation and we don't see the user profils who've read the message. This issue appears randomly, not in every channel oder conversation.


Finish work on gaming storefront badges 🎮🚧

Add the rest of the storefronts in the "Add 👆" section.

FYI: Microsoft Store can also be added to other future categories like normal storefronts.

completed in https://github.com/inttter/md-buttons/commit/0563f320ec3cb60308018fac91ccf80c9e6dc81c


SX-UI: show logged user voting power with Snapshot

Voting power for voter is calculated by getVotingPower method under network.actions.getVotingPower: https://github.com/snapshot-labs/sx-ui/blob/5ef9908d881f6917843cfc3ed23b7116e8480b39/src/networks/types.ts#L76-L84
Each network type uses different getVotingPower implementation (starknet/evm/offchain).
offchain network (so one for Snapshot.org) has it defined there (currently it does nothing): https://github.com/snapshot-labs/sx-ui/blob/e8ff1653d4ac152fd1269679fead6d9bfc4f45a7/src/networks/offchain/index.ts#L51-L53
The UI displays total voting power (sum of all voting powers for each voting strategy) and per-strategy voting power, so we need to fetch list of strategies (or any extra data you might need to actually calculate voting power (strategy params etc.).
You can fetch that data in API for offchain network: This data can be then filled in here: https://github.com/snapshot-labs/sx-ui/blob/9ba7992477873cdc42374a844757cfee1130dc1b/src/networks/offchain/api/index.ts#L124-L126
It's likely that the shape we have currently for Proposals/Spaces won't really work for Snapshot.org strategies - we can make adjustments to our shape as needed - but I think ideally we would have a integration without much refactoring initially and once we understand all the differences we can come back to it and refactor it to make it seamless.

getVotingPower(
     strategiesAddresses: string[],
     strategiesParams: any[],
     strategiesMetadata: StrategyParsedMetadata[],
     voterAddress: string,
     current: number | null
   ): Promise<VotingPower[]>;

This function does not conform to the current voting power query on snapshot hub, which only accepts voter, space and proposal as params.
The api instance is connecting to snapshot hub with
https://github.com/snapshot-labs/sx-ui/blob/5344667bcffb88c73f7c6a0260425283c7537e2c/src/networks/offchain/index.ts#L18
and seems that the Network object is made to connect to a single api.
https://github.com/snapshot-labs/sx-ui/blob/5344667bcffb88c73f7c6a0260425283c7537e2c/src/networks/types.ts#L216-L230
I am not familiar with the whole code yet, but seems opinionated toward a single source of truth (api), using graphql.
Should we refactor the hub to support queries and api from snapshot v2 ? Seems easier than the other way, adding more specialized code in snapshot v2 to support the hub, which will be deprecated in the long term.

We could add a new /v2/graphlq on snapshot hub, which will serve only requests from snapshot v2, and return results already formatted
This will remove all the formatSpace, formatVote and formatProposal functions, and sx-ui will not have to deal with legacy code from snapshot v1.
It will act as a kind of adapter on top of the hub, translating response from snapshot v1 to snapshot v2, instead of having this translation in sx-ui codebase.

This function does not conform to the current voting power query on snapshot hub, which only accepts voter, space and proposal as params.

We don't need to worry about it having too many arguments (we can just ignore those), for those that are missing we can add them. However as you mention it requires proposal as param, it might conflict with what we are doing on SX where it's possible see voting power as specific timestamp, not necessarily specific proposal (this way we can display current voting power on proposals list which isn't tied to current proposal). Is there functionality that would allow it?
Also on SX-UI we display voting power separately for each voting strategy (and sum it up), is it possible to achieve the same with existing hub/score-api?

I am not familiar with the whole code yet, but seems opinionated toward a single source of truth (api), using graphql, but the voting power on snapshot v1 is fetched directly from score-api

You can make network use as many APIs as you want, it just uses single one now because it was all we needed, but if you need to access score-api there shouldn't be anything preventing you from making calls to that second API (or third, fourth etc.). Network should provide consistent API to the outside (so we can have different types of networks using the same UI), but what's inside can be as specific to the network itself as it needs, using different APIs, more APIs etc.


Fix the problem of watch pushing to wrong dir

What is the purpose of this change? What does it change?

This PR fixes the use case of odo watch pushing observed changes from any level nested in source root directory to the component source root because of which, the changes are not reflected in the component.
Was the change discussed in an issue?
fixes #1099

How to test changes?

Test 1:
a.  trigger odo watch on a local source
b. make change in a file in a nested dir in the source directory
c. See the change is reflected in the component(perhaps via component url? :) )
Test 2:
Steps in https://github.com/redhat-developer/odo/issues/950
Signed-off-by: anmolbabu<EMAIL_ADDRESS>

@tkral @geoand This is my debugging till now but with this PR for watch, I see a slightly strange push still , which I am debugging yet..
Having been down with fever and cough over the last few days, my progress has been slightly slow.. but I am on it

:white_check_mark: odo build 741 completed and artifacts can be found here (for commit https://github.com/redhat-developer/odo/commit/f76e7090ef by @anmolbabu)

ToDo(@anmolbabu ):

Verify the binary push casesfor which intially we added the special single file handling

:white_check_mark: odo build 745 completed and artifacts can be found here (for commit https://github.com/redhat-developer/odo/commit/188baa19aa by @anmolbabu)

I tried this and it worked like a charm. Please update the description of the PR however :)

@geoand Done

:white_check_mark: odo build 747 completed and artifacts can be found here (for commit https://github.com/redhat-developer/odo/commit/97968febb6 by @anmolbabu)

We need a test to make sure that we don't reintroduce this in the future.

I agree that we should start writing e2e tests for watch. @anmolbabu do you want any help with this?

@anmolbabu Its a good practice to have test coverage atleast some basic scenario along with this pr. Later some more scenario can be added if required in a separate enhancement issue.
If you think it will slow down the pr merging process atm then feel free to create a separate issue for e2e test coverage for this issue/feature. However my QE experience says always have functional test script along with the pr, which will increase the stability of the pr immensely.

Anyway i am assigned to the task #1121. Will add this scenario for sure in the test script. @anmolbabu If you want to take #1121, please reassign to your name. TBH as of now i have not started working on this issue. Otherwise i will start working on this integration test issue.

:white_check_mark: odo build 851 completed and artifacts can be found here (for commit https://github.com/redhat-developer/odo/commit/fb5c44a530 by @anmolbabu)

we definitely tests for this case

:white_check_mark: odo build 859 completed and artifacts can be found here (for commit https://github.com/redhat-developer/odo/commit/72e961b110 by @anmolbabu)

@anmolbabu Can i expect some integration test scenario in the test spec file for this pr like the steps mentioned in How to test changes? section ?

@amitkrout Done in https://github.com/redhat-developer/odo/pull/1125
I'll abandon this PR in favour of https://github.com/redhat-developer/odo/pull/1125 as it covers more issues and I strongly feel all of them should go in tested together as the bugs and their fixes are very related to each other


add_worker ERROR

Hi,
I'm trying to use dask distributed across two linux machines but got error. Below is the steps:

On <IP_ADDRESS>, run
dask-scheduler
distributed.scheduler - INFO - -----------------------------------------------
distributed.scheduler - INFO - Clear task state
distributed.scheduler - INFO -   Scheduler at:   tcp://<IP_ADDRESS>:8786
distributed.scheduler - INFO -       bokeh at:                     :8787
distributed.scheduler - INFO - Local Directory:    /tmp/scheduler-uaj9dxgb
distributed.scheduler - INFO - -----------------------------------------------

on <IP_ADDRESS>， run
dask-worker tcp://<IP_ADDRESS>:8786
distributed.nanny - INFO -         Start Nanny at: 'tcp://<IP_ADDRESS>:42073'
distributed.diskutils - INFO - Found stale lock file and directory '/home/ubuntu/worker-vndr3mg5', purging
distributed.worker - INFO -       Start worker at:   tcp://<IP_ADDRESS>:38075
distributed.worker - INFO -          Listening to:   tcp://<IP_ADDRESS>:38075
distributed.worker - INFO -              nanny at:         <IP_ADDRESS>:42073
distributed.worker - INFO - Waiting to connect to:    tcp://<IP_ADDRESS>:8786
distributed.worker - INFO - -------------------------------------------------
distributed.worker - INFO -               Threads:                         12
distributed.worker - INFO -                Memory:                   67.47 GB
distributed.worker - INFO -       Local Directory: /home/ubuntu/worker-e_9hk1mc
distributed.worker - INFO - -------------------------------------------------

then on the scheduler machine, an error occurred:
distributed.core - ERROR - add_worker() got an unexpected keyword argument 'types'
Traceback (most recent call last):
File "/home/ubuntu/anaconda3/envs/tfenv/lib/python3.6/site-packages/distributed/core.py", line 346, in handle_comm
result = yield result
File "/home/ubuntu/anaconda3/envs/tfenv/lib/python3.6/site-packages/tornado/gen.py", line 1133, in run
value = future.result()
File "/home/ubuntu/anaconda3/envs/tfenv/lib/python3.6/site-packages/tornado/gen.py", line 307, in wrapper
result = func(*args, **kwargs)
TypeError: add_worker() got an unexpected keyword argument 'types'

The dask version I'm using is '1.2.2'. Thanks for your advice.
Regards
Eric

It's quite likely that your versions of the distributed library differ
between the two machines.
On Tue, Jun 25, 2019 at 4:59 AM Cheng E. Ge<EMAIL_ADDRESS>wrote:

Hi,
I'm trying to use dask distributed across two linux machines but got
error. Below is the steps:

On <IP_ADDRESS>, run
dask-scheduler
distributed.scheduler - INFO -
distributed.scheduler - INFO - Clear task state
distributed.scheduler - INFO - Scheduler at: tcp://<IP_ADDRESS>:8786
distributed.scheduler - INFO - bokeh at: :8787
distributed.scheduler - INFO - Local Directory: /tmp/scheduler-uaj9dxgb
distributed.scheduler - INFO -

on <IP_ADDRESS>， run
dask-worker tcp://<IP_ADDRESS>:8786
distributed.nanny - INFO - Start Nanny at: 'tcp://<IP_ADDRESS>:42073'
distributed.diskutils - INFO - Found stale lock file and directory
'/home/ubuntu/worker-vndr3mg5', purging
distributed.worker - INFO - Start worker at: tcp://<IP_ADDRESS>:38075
distributed.worker - INFO - Listening to: tcp://<IP_ADDRESS>:38075
distributed.worker - INFO - nanny at: <IP_ADDRESS>:42073
distributed.worker - INFO - Waiting to connect to: tcp://
<IP_ADDRESS>:8786
distributed.worker - INFO -
distributed.worker - INFO - Threads: 12
distributed.worker - INFO - Memory: 67.47 GB
distributed.worker - INFO - Local Directory:
/home/ubuntu/worker-e_9hk1mc
distributed.worker - INFO -

then on the scheduler machine, an error occurred:
distributed.core - ERROR - add_worker() got an unexpected keyword argument
'types'
Traceback (most recent call last):
File
"/home/ubuntu/anaconda3/envs/tfenv/lib/python3.6/site-packages/distributed/core.py",
line 346, in handle_comm
result = yield result
File
"/home/ubuntu/anaconda3/envs/tfenv/lib/python3.6/site-packages/tornado/gen.py",
line 1133, in run
value = future.result()
File
"/home/ubuntu/anaconda3/envs/tfenv/lib/python3.6/site-packages/tornado/gen.py",
line 307, in wrapper
result = func(*args, **kwargs)
TypeError: add_worker() got an unexpected keyword argument 'types'
The dask version I'm using is '1.2.2'. Thanks for your advice.
Regards
Eric
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
https://github.com/dask/dask/issues/4998?email_source=notifications&email_token=AACKZTA2IVRRBB5GICDGE5LP4GC2HA5CNFSM4H3D6BGKYY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4G3N3FEA,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AACKZTETCBJQTM3DNBZZSHDP4GC2HANCNFSM4H3D6BGA
.

That's true. One is 1.25, the other is 1.28. Issue solved. Thanks a lot. @mrocklin


az aks update ranges not clarified.

Customers doesnt have guidelines in regards to number of ports, number of nodes, number of IPs, the formula to calculate the right sizing is not published or advised here.
please clarify .
error received: Operation failed with status 'bad request' . Load balancer rofile allocated ports is not in an allowable range given the number of nodes and IPS provisioned.
How to calculate the right amount of ports? what is a good range based on the ips and nodes I have?

Document Details
⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

ID: d75c3a8d-1187-bea1-a7d4-7ebba71c1790
Version Independent ID: 75b0c352-762e-16ae-5cc6-d807ffc1dc3f
Content: az aks
Content Source: src/azure-cli/azure/cli/command_modules/acs/_help.py
Service: container-service
GitHub Login: @rloutlaw
Microsoft Alias: routlaw

"You can assign up to 64000 ports
if you have 10 nodes as backend for example, the ports can be allocated is “64000/10(nodes) =6400”
So depend of backend node, you should divide it on 64000/(# of nodes)
"

Thanks for reporting, we'll have a look.

adding @jluk

https://docs.microsoft.com/en-us/azure/aks/load-balancer-standard#configure-outbound-ports-and-idle-timeout
https://docs.microsoft.com/en-us/azure/aks/configure-azure-cni#plan-ip-addressing-for-your-cluster
64k ports per frontend IP, this is LB specific not AKS specific

Closing this since Jorge answered in the above response.


Update Localization sample app to 2.0

Fixes #2943

Takes the sample to 2.0.
Fixes the issue where localization breaks when the app is run as a sub app in IIS.
HTML5: I gave this some thought since we discussed it yesterday, and I still prefer not to close void elements. The Content-Type is text/html, and the doctype is HTML5. I think the spec (making the closure optional) is a bit of a hack on their part. These tags never contain content, so imo they really shouldn't be closed (logically).
Bower out: Adds too many complications. We have www/lib locked out of the source/repo; therefore, the sample will break if the machine is offline and Bower isn't run. Bower requires npm. Many MANY devs and shops don't like it and don't want it. It has nothing to do with localization. IMHO, samples should run everywhere supported by ASP.NET Core with minimal config and setup and only use the tech required to demo the focused technology.

Note: I didn't review the topic, but I noticed a strange link in here:

You can't plug in the _SelectLanguagePartial.cshtml to sample code for this project. The Localization.StarterWeb project on GitHub has code to flow the RequestLocalizationOptions to a Razor partial through the Dependency Injection container.

The link for "GitHub" goes to the Entropy repo landing page. Should that just link to the topic sample?
BIG shout-out to @PeterJakubik :rocket:, who reported the issue with sub apps and provided a sweet fix for it. That was the easiest part of the update here. I wish u long life and prosperity! 🖖 Thank you.

@guardrex,
Thanks for having already signed the Contribution License Agreement. Your agreement was validated by .NET Foundation. We will now review your pull request.
Thanks,
.NET Foundation Pull Request Bot

@scottaddie @ryanbrandenburg Ready for :eyes:.

@scottaddie Those changes are done (except possibly waiting for Rick on the question of using WebHost convenience methods). I also fixed up the title, description, and keywords on the last commit.


Decide on and create infra/devops for iiif-builder

[ ] Terraform for iiif-builder
[ ] Build Mechanism
[ ] Deployment Mechanism

with reference to https://github.com/wellcomecollection/docs/tree/master/rfcs/013-release_deployment_tracking

TF written but unable to run until we've had a catch up with Wellcome around AWS permissions.

New repository created for Terraform: https://github.com/wellcomecollection/iiif-builder-infrastructure

Build mechanism for iiif-builder is using jenkins instance that already exists for dlcs.io

Closing - there will be more infra to add in but we have some basics in the above repository and containers deploying from dlcs.io.
Dockerfile + Jenkinsfile per project will be in the iiif-builder repo. Jenkins file will build the container, push it to ECR (with known tag, e.g. :production) and then update service.


build: remove unnecessary codecov dependency & upgrade GHA

Context: https://about.codecov.io/blog/message-regarding-the-pypi-package/

Closing because we want to merge https://github.com/openedx/edx-sphinx-theme/pull/220 instead.


Luckyperms should show error message rather then the version number when the command is not allowed

Description
Currently it just show the lukyperms version number when using a blocked command in game like /lp editor
Proposed Behaviour
it should really show an error messages set in paper.yml
Extra Details
No response

Why? the current output is fine in my opinion


SSL setup connection refused, bad nginx conf generation?

I have tried my very best to follow the instructions listed and I keep hitting a barrier with the SSL configuration.
So before starting, know that I have tested the .crt and .key with a plain nginx server on the same server. The SSL came back positive via the browser and in curl.
Here's my docker compose, pruned for legibility:
version: "3.7"

x-logging-elk: &logging-elk
  driver: gelf
  options:
    gelf-address: udp://<IP_ADDRESS>:12201
    labels: container_group

x-sentry-environment: &sentry-environment
  SENTRY_SECRET_KEY:
  SENTRY_POSTGRES_HOST: "sentry-postgres"
  SENTRY_DB_NAME: "sentry_production"
  SENTRY_MEMCACHED_HOST: "sentry-memcached"
  SENTRY_REDIS_HOST: "sentry-redis"
  SENTRY_SINGLE_ORGANIZATION: "True"
  SENTRY_EMAIL_HOST: "smtp-la.company.com"
  SENTRY_SERVER_EMAIL<EMAIL_ADDRESS>
services:
  sentry:
    image: sentry:9.0.0
    labels:
      container_group: sentry
    depends_on:
      - logstash
      - sentry-postgres
      - sentry-redis
      - sentry-memcached
    environment:
      <<: *sentry-environment
      VIRTUAL_HOST: sentry.ie.company.com
    logging:
      <<: *logging-elk

  nginx-proxy:
    image: jwilder/nginx-proxy:alpine
    labels:
      container_group: utility
    ports:
      - "443:443"
    volumes:
      - "./volumes/settings/nginx-proxy/htpasswd/:/etc/nginx/htpasswd/:ro"
      - "./volumes/settings/nginx-proxy/conf.d/:/etc/nginx/conf.d/:rw"
      - "/var/run/docker.sock:/tmp/docker.sock:ro"
      - "./volumes/data/nginx-proxy/certs/:/etc/nginx/certs/"
    environment:
      ENABLE_IPV6: "true"

networks:
  outside:
    # Extra-network is necessary to have a dedicated IP for Logstash to forwards log to.
    ipam:
      driver: default
      config:
        - subnet: <IP_ADDRESS>/24

Here's a network request via curl from my home machine:
𝑓 35 curl --verbose https://sentry.ie.company.com/
*   Trying x.x.x.x...
* TCP_NODELAY set
* Connected to sentry.ie.company.com (x.x.x.x) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to sentry.ie.company.com:443
* stopped the pause stream!
* Closing connection 0
curl: (35) LibreSSL SSL_connect: SSL_ERROR_SYSCALL in connection to sentry.ie.company.com:443

That same request over http
𝑓 35 curl --verbose http://sentry.ie.company.com/
*   Trying x.x.x.x...
* TCP_NODELAY set
* Connected to sentry.ie.company.com (x.x.x.x) port 80 (#0)
> GET / HTTP/1.1
> Host: sentry.ie.company.com
> User-Agent: curl/7.54.0
> Accept: */*
>
* Empty reply from server
* Connection #0 to host sentry.ie.company.com left intact
curl: (52) Empty reply from server

Here's the nginx generated from this:
# If we receive X-Forwarded-Proto, pass it through; otherwise, pass along the
# scheme used to connect to this server
map $http_x_forwarded_proto $proxy_x_forwarded_proto {
  default $http_x_forwarded_proto;
  ''      $scheme;
}
# If we receive X-Forwarded-Port, pass it through; otherwise, pass along the
# server port the client connected to
map $http_x_forwarded_port $proxy_x_forwarded_port {
  default $http_x_forwarded_port;
  ''      $server_port;
}
# If we receive Upgrade, set Connection to "upgrade"; otherwise, delete any
# Connection header that may have been passed to this server
map $http_upgrade $proxy_connection {
  default upgrade;
  '' close;
}
# Apply fix for very long server names
server_names_hash_bucket_size 128;
# Default dhparam
ssl_dhparam /etc/nginx/dhparam/dhparam.pem;
# Set appropriate X-Forwarded-Ssl header
map $scheme $proxy_x_forwarded_ssl {
  default off;
  https on;
}
gzip_types text/plain text/css application/javascript application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
log_format vhost '$host $remote_addr - $remote_user [$time_local] '
                 '"$request" $status $body_bytes_sent '
                 '"$http_referer" "$http_user_agent"';
access_log off;
resolver <IP_ADDRESS>;
# HTTP 1.1 support
proxy_http_version 1.1;
proxy_buffering off;
proxy_set_header Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $proxy_connection;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto;
proxy_set_header X-Forwarded-Ssl $proxy_x_forwarded_ssl;
proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port;
# Mitigate httpoxy attack (see README for details)
proxy_set_header Proxy "";
server {
	server_name _; # This is just an invalid value which will never trigger on a real hostname.
	listen 80;
	listen [::]:80;
	access_log /var/log/nginx/access.log vhost;
	return 503;
}
# sentry.ie.company.com
upstream sentry.ie.company.com {
				## Can be connected with "20181203195336_default" network
			#<PHONE_NUMBER>5336_sentry_1
			server <IP_ADDRESS>:9000;
}
server {
	server_name sentry.ie.company.com;
	listen 80 ;
	listen [::]:80 ;
	access_log /var/log/nginx/access.log vhost;
	location / {
		proxy_pass http://sentry.ie.company.com;
	}
}

The directory of my host-located SSL files:
kurtis.rainbolt-gree@la-eq-nginx04:/var/www/sites/monitoring-alerting-logging/current$ ls -la volumes/data/nginx-proxy/certs/
total 8
drwxr-xr-x 2 root root 4096 Dec  3 12:57 .
drwxr-xr-x 3 root root 4096 Dec  3 11:51 ..
lrwxrwxrwx 1 root root   46 Dec  3 12:57 ie.company.com.crt -> /etc/nginx/ssl/ie/star.ie.company.com.crt
lrwxrwxrwx 1 root root   46 Dec  3 12:57 ie.company.com.key -> /etc/nginx/ssl/ie/star.ie.company.com.key

I've done my very best to look up other similar issues, but none of the solutions seemed to resolve my issue.

It looks like the problem was that I was symlinking a->b on the host, and then "volumeing" that over to dockerland, but that doesn't work! It just means I have a useless symlink file on the docker container.


Cell2location object has no attribute samples

[x] I have confirmed this bug exists on the latest version of cell2location. See https://github.com/BayraktarLab/cell2location#installation
[x] I follow the instructions from the scvi-tools tutorial.

Note: Please read this guide detailing how to provide the necessary information for us to reproduce your bug.
Minimal code sample (that we can run without your data, using public data)
I am following the tutorial and am the step: Estimate cell-type specific expression of every gene in the spatial data (needed for NCEM).
Running the below code fails
#Compute expected expression per cell type
expected_dict = mod.module.model.compute_expected_per_cell_type(mod.samples["post_sample_q05"], mod.adata_manager)

# Add to anndata layers
for i, n in enumerate(mod.factor_names_):
    adata_vis.layers[n] = expected_dict['mu'][i]

# Save anndata object with results
adata_file = f"{run_name}/sp.h5ad"
adata_vis.write(adata_file)
adata_file

Here is the error obtained after running the above code. This is occurring with all my samples.
AttributeError                            Traceback (most recent call last)
Input In [28], in <cell line: 2>()
      1 #Compute expected expression per cell type
----> 2 expected_dict = mod.module.model.compute_expected_per_cell_type(mod.samples["post_sample_q05"], mod.adata_manager)
      4 # Add to anndata layers
      5 for i, n in enumerate(mod.factor_names_):

AttributeError: 'Cell2location' object has no attribute 'samples'

Version
cell2location             0.8a0

Hi @julie-jch
you need to run export_posterior which creates model.samples. Please see https://github.com/BayraktarLab/cell2location/issues/195#issuecomment-1217339978


Add information about catching errors to the error handling guide.

Resolves issue #915.
I'm not sure if I've done enough here, or what the situation regarding translation would be, but hopefully this is a step towards helping those new to Express with their error handling.
I've added information about how to ensure Express gets hold of errors, which I think is the most basic and important information new developers need to get started when using Express. I put this first because unless new developers get this bit right, the rest of the guide is wasted. I then swapped the existing sections around, as I thought it unlikely the developers would dive in to writing their own error handlers, but they should at least be aware of the default error handler and how to configure it.

I read through all the new content and it looks good from the technical standpoint 👍

Thanks @dougwilson .  I'll land this and make any copy edits after the fact.
Thanks for the contribution, @pluby


InAppLocalhostServer is displaying the blank screen when the iPhone screen locks and try to open.

Environment

Technology
Version

Flutter version
3.10.5

Plugin version
5.7.2+3

iOS version
all version

Device information: iPhone
Description
I am using the InAppLocalhostServer to load the local html files from the device. But I am facing blank screen, when i keep the iPhone idle for sometime until the screen locks. I can't reproduce this issue in the development. Its happening from the TestFlight version only.
Expected behavior:
App should not show the blank page if the phone is locked and unlocked again.
Current behavior:
Keep the Mobile phone idle for sometime until the screen locks try to open the app and sub pages
Note: Pages are working fine when we kill the app and reopened.
Steps to reproduce

Open the app.
Leave it for few minutes to lock the screen.
Open the app and click to load the webpage.

I have attached the video recording of the app for more understanding.
Video
https://www.screencast.com/t/cpRpNpAtJP

Hi,
Anyone facing this issue?

try stop stopLocalServer when [inactive] , [paused], [detached]
class MainAppState extends State<MainApp> with WidgetsBindingObserver {   @override     void didChangeAppLifecycleState(AppLifecycleState state) {       super.didChangeAppLifecycleState(state);       switch (state) {         case AppLifecycleState.resumed:           startLocalServer();           break;         case AppLifecycleState.inactive:         case AppLifecycleState.paused:         case AppLifecycleState.detached:           stopLocalServer();           break;       }     } }

Hi

Hi @Shinhwe
Thanks for your response. I tried this but didn't work. So I changed to file loading from local server.
Thanks

Can I ask you how you solved it?


Use OpenAPI instead of Swagger in the UI

Description
Switch the UI to use OpenAPI instead of Swagger (almost) everywhere.
I initially removed Swagger entirely, I wasn't even generating the client code, but I had to restore it until dockstore/dockstore#4422 is resolved.
Mainly, I was able to just replace swagger with openapi in the imports, but I did run into the following issues:

The above-mentioned issue with dockstore/dockstore#4422, where I had to revert back to Swagger.
Parameter order changed in some invocations
The OpenAPI generated method names were sometimes slightly different, e.g., refresh1 instead of refresh.
Ran into an odd compilation error during tests, which I fixed based on this comment.
Some changes with descriptorLanguageEnum and DescriptorTypeSubclassEnum

Review Instructions
Hard to review, almost every page in the UI could be affected. Going to have to mainly rely on integration and smoke tests. Try visiting commonly used pages in the UI and make sure nothing is broken
Issue
dockstore/dockstore#5538
Security
If there are any concerns that require extra attention from the security team, highlight them here.
Please make sure that you've checked the following before submitting your pull request. Thanks!

[x] Check that your code compiles by running npm run build
[x] Ensure that the PR targets the correct branch. Check the milestone or fix version of the ticket.
[x] If this is the first time you're submitting a PR or even if you just need a refresher, consider reviewing our style guide
[x] Do not bypass Angular sanitization (bypassSecurityTrustHtml, etc.), or justify why you need to do so
[x] If displaying markdown, use the markdown-wrapper component, which does extra sanitization
[x] Do not use cookies, although this may change in the future
[x] Run npm audit and ensure you are not introducing new vulnerabilities
[x] Do due diligence on new 3rd party libraries, checking for CVEs
[x] Don't allow user-uploaded images to be served from the Dockstore domain
[x] If this PR is for a user-facing feature, create and link a documentation ticket for this feature (usually in the same milestone as the linked issue). Style points if you create a documentation PR directly and link that instead.
[x] Check whether this PR disables tests. If it legitimately needs to disable a test, create a new ticket to re-enable it in a specific milestone.

If you were able to eliminate all apis/models but collection, you may be able to cut down on generated code / prevent regressions by doing selective generation for only that api. https://openapi-generator.tech/docs/customization#selective-generation

For OpenAPI, we are using classes in apis/models, it's just that there's a generated index.ts that lets you import them without explicitly specifying the sub-path:
export * from './api/api';
export * from './model/models';
export * from './variables';
export * from './configuration';
export * from './api.module';

Looks like we could have done that with Swagger too; I hadn't even noticed the IDE had removed those sub-paths until you pointed it out. But I think we need to keep generating them.
My understanding is the Angular build will not include code that's not accessed in an any case.

My understanding is the Angular build will not include code that's not accessed in an any case.

Think I'm more wondering whether a typo would reintroduce code using swagger as opposed whether the code would be included in the build.

My understanding is the Angular build will not include code that's not accessed in an any case.

Think I'm more wondering whether a typo would reintroduce code using swagger as opposed whether the code would be included in the build. By not generating the unused APIs/classes in the first place, a typo couldn't accidentally reintroduce them

The plan is to not even generate the Swagger code once dockstore/dockstore#4422 is fixed, so it won't be possible to accidentally add it. I created a followup ticket, dockstore/dockstore#5550


HHH-13114 - Query "select count(h) from Human h" fails if a subclass has a non-Id property named "id"

https://hibernate.atlassian.net/browse/HHH-13114

superseded by https://github.com/hibernate/hibernate-orm/pull/2655


Missing CreditCardOptions class when cloning repo

FYI - It seems that the CreditCardInfo class is missing.  Not sure what else it might contain, so I didn't try to add it to the repo or anything.
Thanks for this.
note: I upgraded to the latest Strip library when I did this...

Ok, the current project requires Stripe.net v37.10, which is now replaced by 39+.
If I downgrade the package, it works fine. thanks again!

Ok, the current project requires Stripe.net v37.10, which is now replaced by 39+.
If I downgrade the package, it works fine. thanks again!


Getting error "class constructors must be invoked with 'new'"

Check that this is really a bug

[X] I confirm

Reproduction link
Unable to provide
Bug description
I installed swiper using the guide at the website. But after running the code I am getting this error, class constructors must be invoked with 'new'
I am using "gatsby": "^4.6.2", "react": "^17.0.1",
https://www.awesomescreenshot.com/image/22166623?key=6af1f523f435087c812b3223946d2e7d
Getting error on even on default example
<Swiper             spaceBetween={50}             slidesPerView={3}             onSlideChange={() => console.log('slide change')}             onSwiper={(swiper) => console.log(swiper)}>             <SwiperSlide>Slide 1</SwiperSlide>             <SwiperSlide>Slide 2</SwiperSlide>             <SwiperSlide>Slide 3</SwiperSlide>             <SwiperSlide>Slide 4</SwiperSlide>           </Swiper>
Expected Behavior
No response
Actual Behavior
No response
Swiper version
8.0.6
Platform/Target and Browser Versions
Windows 10, Firefox and chrome
Validations

[x] Follow our Code of Conduct
[X] Read the docs.
[X] Check that there isn't already an issue that request the same feature to avoid creating a duplicate.
[X] Make sure this is a Swiper issue and not a framework-specific issue

Would you like to open a PR for this bug?

[ ] I'm willing to open a PR

same error here

I don't understand your solution am having the same problem.
Am importing swiper from swiper react from the example shown in the swiper J's website


ariane: Only run scheduled tests from cilium/cilium

Most forks don't need to run this workflow. Check the repository owner
and only build from cilium/cilium.
CC: Nicolas Busseneau<EMAIL_ADDRESS>Fixes: aec778c7bc7c ("ci: add scheduled runs for Ariane workflows")
Fixes: #27687

The feedback from this other PR also applies here:
https://github.com/cilium/cilium/pull/27757#pullrequestreview-1605061853


Install script documentation translation to french

URL
https://dotnet.microsoft.com/fr-fr/download/dotnet/scripts
Current translation
Installer la documentation du script
Suggested translation
Documentation du script d'installation
Corresponding English text
Install script documentation
Additional context
No response

Thank you @x-xx-o. That's good feedback. I'll report this to our localization team.


CI testing 'headless'

Work out how to setup unit tests under CI in 'headless' mode in order to handle the GUI

perhaps the following will allow headless tests:
- name: Run headless test
  uses: GabrielBB/xvfb-action@v1
  with:
    run: npm test

need to explore further


question regarding the diodes

I ordered the same diodes as yours in this guide, but i am getting a bit higher om measurements (~670 instead of ~570) on each diode. will it have any impact?
I am trying to debug a faulty key, the o key is "stuck" in an infinite loop until I interrupt it with other keys, and my whole top row is a bit funky, for example when I press y it sometimes triggers the infinite o again. I am trying to understand if it's an issue with the diodes or maybe the pcb itself (it reproduces without the switch so I am sure it's not the o switch).

I bought the following variation: 1N4148W T4 SOD-123 and used in many builds and never had problems, but I confess I never checked the outputs. I thinks small variations are normal and usually this problems are related to soldering like cold joints or solder blobs doing some unwanted contacts.

yea I bought the exact same one as yours, and I think too that the issue is in one of the joints, I just wanted to rule out the the diodes. I will try going over all the joints again. thanks!


PowerShell Adapter changes

Summary of the new feature / enhancement

PS Adapter should only support class-based resources on non-Windows since script-based requires libmi which is no longer supported.  To make this work, we should NOT rely on PSDSC module for class-based resources, just directly call the class methods.
PS Adapter for script-based resources should rely on PSDSC v2 and only work on Windows
Enable PS Adapter tests on non-Windows for class based resources with these changes

Proposed technical implementation details (optional)
No response

Fixed via https://github.com/PowerShell/DSC/pull/411


Initializing pagination at interior page clobbered by $watch on totalPages

I am attempting to provide URL support for navigation to given pages within a result set. For example, allowing a user to navigate directly to the 10th page of a result set by going to the URL /results-data/page/10.
However, when the PaginationController directive is initialized, all the watches are run with the defaults specified in the constants. This clobbers the value that has been initially set in the view's controller when state transitions are used.
Example:
MyApp.controller('HasPager', ['$scope', '$stateParams', function ($scope, $stateParams) {

    var pageno = ('pid' in $stateParams && $stateParams.pid) ? $stateParams.pid : 1;

    $scope.currentpage = pageno;

    $scope.$watch('currentpage', function(newval, oldval) {

      if(newval != oldval) {
        $scope.$state.go('results.data.p', {pid: newval});
      }

    });

}]);

<pagination ng-model="currentpage" class="pagination-sm"></pagination>

The page will briefly flash at /results-data/page/10 before re-directing back to /results-data/page/1
Note: I haven't provided a plunkr or fiddle because I haven't found one that supports URL-level functionality.

fyi, i was getting this as well in the latest code just noe. I just put a ng-if on the same scope property that is set in total-items in the html of the directive.
This way the watch does not fire again and fudge up the calculation.

I have the same issue; Is there anyone with a work-around?
My app is running on 0.13.0 release.

@stenebenau did my comment above not work for you? Has been working well for me so far, on 0.13.0.

Please, if this is still an issue, open a new issue with a nice plunker ;)
Thanks.


Update pick-right-solution.md

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Please delete this note before submitting the pull request.
For 1.14 Features: set Milestone to 1.14 and Base Branch to dev-1.14
For Chinese localization, base branch to release-1.12
For Korean Localization: set Base Branch to dev-1.13-ko.
Help editing and submitting pull requests:
https://kubernetes.io/docs/contribute/start/#improve-existing-content.
Help choosing which branch to use:
https://kubernetes.io/docs/contribute/start#choose-which-git-branch-to-use.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

@avigailof  Please sign the SLA, thanks!

/retest

i signed the CLA with a different email and now added this email address to my profile. thanks! please recheck

/retest

It is not picking up your SLA. :( Please see https://github.com/kubernetes/community/blob/master/CLA.md#troubleshooting.

/retest

I signed it

/check-cla

/lgtm
/approve


all the samples for boundary attack are initialized from the same point?

Dear authors, according to the implementation of boundary attack at line, it seems that all the samples share the same initial starting point and target. Why not use different initial data?

sorry, i notice that there is a for loop in this line , the instance-based implementation will be very time-consuming, do you plan to make a mini-batch version?

Hi @lihuiknight Thank you very much for your questions! To the question about mini-batches, I think it's very interesting and possible in the near future, similar to ZOO (#845).
Would you be interested to try implementing a solution for mini-batches?

Yes. I will implement a mini-batch version for boundary attack.

Great! Let us know if you need any support from us!

Hello @lihuiknight, have you already implemented the mini-batch version? It would be really useful to me. Thanks in advance!

@beat-buesser @LorenzoAgnolucci  I'd like to implement SimBA in mini-batch version first, because such method is very simple and will be helpful in my application. Then I'd implement other method in mini-batch version later.  If you have already implemented the methods in mini-batch version, pls let me know.
BTW, the mini-batch version will be really helpful especially in the scenarios of adversarial training with attack and defense.

Hi @lihuiknight and @LorenzoAgnolucci We have now support for mini-batches in model predictions for BoundaryAttack and HopSkipJump implemented by @amodas (#971) on our branch dev_1.6.1 to be released with ART 1.6.1 which makes these attacks much faster.


aria-label and aria-valuetext

I can see that <DefautlHandle/> does declare aria-label and aria-valuetext properties.
https://github.com/airbnb/rheostat/blob/563f6a739023dbd3c77311323de109ae66c4ac7c/src/DefaultHandle.jsx#L13-L14
Still, <Handle/> doesn't get passed these two properties.
https://github.com/airbnb/rheostat/blob/master/src/Slider.jsx#L803-L821
At the same time, there's handle property which is for React.Component.
So I suppose a developer is supposed to pass their own handle component which must wrap the <DefaultHandle/>.
Like this:
function CustomHandle(props) {
  return (
    <DefaultHandle
      {...props}
      aria-label={props['data-handle-key'] === 0 ? 'Minimum price' : 'Maximum price'}
      aria-valuetext={'$' + props['aria-valuenow']}/>
  )
}

Is this the recommended approach to add aria-label and aria-valuetext?
If yes then is DefaultHandle being exported from the library or should it be imported from as rheostat/src/DefaultHandle.jsx?

You don’t have to wrap the default handle; you could certainly wrap your own component that had aria values hardcoded.
You don’t want to import from src, but yes, a deep import of the default handle is fine.

@ljharb

You don’t have to wrap the default handle; you could certainly wrap your own component that had aria values hardcoded.
Doesn't make a lot of sense to re-implement the handle.
Contrary, it would be considered a bad practice.
The correct way is definitely extending the default one.

You don’t want to import from src.
But everyone does because your library exports files from src as the main ones.
So, contrary, you will be importing from src.
https://github.com/airbnb/rheostat/blob/1fc67be62f3f0f61eee1838b7e186756a8c9dd13/package.json#L5-L6

but yes, a deep import of the default handle is fine.
I'd say it's the only way with the current situtation of handle components not being exported from the library.

If you want to know how to make the accessibility API better then you can introduce two new properties on the main component: aria-label and aria-valuetext.
aria-valuetext will be passed through as is to the handles.
aria-label will be an array and props['aria-label'][idx] will be passed through to the respective handle.

That works, closing.

main exports from lib; that’s what I’d recommend using.

@catamphetamine Can you explain what worked, exactly? If I pass a component to the handle prop of the slider, every other prop I pass to the slider are not used.
For example, if I pass a min/max to the slider everything is fine, but the moment I define a handle (even using your snippet at the top), the slider uses the default min/max, there's no snapPoints anymore.
So were you able to use your own handle, and use your own aria labels?
Thanks!

@droda59 I don't know what exactly worked, but something surely did.
import Rheostat from 'rheostat';

        <Rheostat
          snap={snap}
          handle={currency === 'USD' ? PriceHandleUSD : Handle}
          min={min}
          max={max}
          values={[currentRefinement.min, currentRefinement.max]}
          onChange={this.onChange}
          onValuesUpdated={this.onValuesUpdated}
          disabled={this.props['aria-hidden'] ? true : undefined} />

function PriceHandleUSD(props) {
  return (
    <Handle
      {...props}
      aria-label={props['data-handle-key'] === 0 ? 'Minimum price' : 'Maximum price'}
      aria-valuetext={'$' + props['aria-valuenow']} />
  );
}

function Handle(props) {
  return (
    <button
      type="button"
      aria-label={props['data-handle-key'] === 0 ? 'From' : 'To'}
      {...props}
      tabIndex={props['aria-disabled'] ? -1 : props.tabIndex} />
  );
}


Intégration with Libgen and Scihub

Libgen and Scihub should be incorporated into myne and not only project Gutenberg.

Please follow issue template when creating issues, it's there for a reason.
Myne is primarily a Gutenberg client and i don't have any plans to add libgen support as of yet but i may think again about this in future. Thanks.


Feature: g:syntastic_check_on_write

Syntastic is used with purescript's psc-ide-vim, where it works very well for working through errors. It is nice to use except for this one detail that perhaps could be added.
Purescript's file checking command takes about enough time to be noticed when it is hooked into :w through syntastic. Could we add something like g:syntastic_check_on_open, but on the write side?
I read your contribution guidelines, and I can draft the modification. Just let me know if you like to let me try it. Also, please inform if this is a redundant modification and it can be already done somehow.

Please read: :h 'syntastic_mode_map'.

This seems to do it!

"mode" can be mapped to one of two values - "active" or "passive". When set
to "active", syntastic does automatic checking whenever a buffer is saved or
initially opened. When set to "passive" syntastic only checks when the user
calls :SyntasticCheck.
I will try it out, if it works, I'll close the commit next.

Thanks for the help. This does work. I'm sorry that I didn't read the documentation in whole. This feature is described in the section 2. Functionality provided.


Fix WASM sysroot breaking runtime behavior

cc @MingweiSamuel this should fix the issues with Dedalus being broken on WASM


LAN datalogger and Sofar HYD 8KTL-3PH

Hi!
I am having difficulties getting my Sofar Solar HYD 8KTL-3PH and I cant' read any data.
I am connected via LAN datalogger, becouse I don't have wi-fi in my basement.
Can this integration work with LAN dongle?
I have read IP and Port from my router and changed it in Solarman Integration, I have also instaled previous 1.4.3 version, as someone suggested here, but it doesn't helped.
Datalogger is fine and I can see all my data at solarman cloud and app.
But HA can't see it.
Could anyone help, please?
Best Regards.

Hi @janik-design, I'm currently implementing support for Ethernet Stick Logger in my integration: https://github.com/davidrapan/ha-solarman
Thread about implementation: https://github.com/davidrapan/ha-solarman/issues/21
if you decide to try it out you have to by using latest beta pre-release version and then during configuration select passthrough mode.
Have fun!


Seed isn't the same

im in a server trying to get the seed, i get the seed but the spawn, nether and end is completely different from the server, i tried it on Normal, Amplified and Large Biome, idk what i did wrong and idk how to fix it

On paper servers the different dimensions can have different seeds. You need 5 end cities + end pillars to crack an end seed. Nether seed cracking is not supported in 1.18+


PSA: main is not stable

Since asv works off the main branch only, I'm committing and force-pushing to it, not in feature branches.

ok, should be no problem while you have this subproject to yourself :)

OK, the thing is stabilizing, so hopefully no more hectic strings of force-pushes.


WIP: Support travis

Changes Unknown when pulling 3c4b865692a29451d9c144fdede2c1ac567a8781 on gforcada:gforcada-travis into ** on Simplistix:master**.

Changes Unknown when pulling 852eceb32be8dc1c97652490f7e32b9f68abef58 on gforcada:gforcada-travis into ** on Simplistix:master**.

Changes Unknown when pulling f917dbe867ea5547b1384893eaf6c4a025c7ce87 on gforcada:gforcada-travis into ** on Simplistix:master**.

@cjw296 tests are indeed passing, and coverage is at 98%. This is ready to merge.
Should the jenkins files still be kept? I see that they are making releases, I would suggest to move to zest.releaser it's just perfect IMHO.

Changes Unknown when pulling 31766eadd327edf424b05474b4d9a192e3aa32c9 on gforcada:gforcada-travis into ** on Simplistix:master**.

Changes Unknown when pulling d61f1b225e9ca36bae7ec8beb456081c55ea542a on gforcada:gforcada-travis into ** on Simplistix:master**.

@gforcada - I prefer to do the releases from travis-ci, see the example in the Mush project I linked to.
I don't think I'll ever resurrect that Jenkins server, so please feel free to delete them and anything else that appears to be Jenkins-only.

@cjw296 it took me a while to get back to it, but I think I addressed all your points

Thanks!


Build(deps): Bump moment-timezone from 0.5.34 to 0.5.35 (#3936)

Pull request opened by the merge tool on behalf of #3936

Merged in f6e593802ec192818ff105e50cdce2bbbd8e814b


Crashing after choosing an episode and can't access to the My List tab

The crash after choosing an episode doesn't have any error it just disappeared.
This is the error code from My List tab
Refit.ApiException: Response status code does not indicate success: 412 (Precondition Failed).
at Refit.RequestBuilderImplementation.<>c__DisplayClass14_02.<<BuildCancellableTaskFuncForMethod>b__0>d.MoveNext() in /_/Refit/RequestBuilderImplementation.cs:line 288 --- End of stack trace from previous location ---    at Totoro.Core.Services.Simkl.SimklService.GetId(ListServiceType type, Int64 id) in D:\a\Totoro\Totoro\Totoro.Core\Services\Simkl\SimklService.cs:line 19    at Totoro.Core.Services.AnimeIdService.GetId(ListServiceType from, ListServiceType to, Int64 id) in D:\a\Totoro\Totoro\Totoro.Core\Services\AnimeIdService.cs:line 17    at Totoro.Core.Services.AniList.AnilistService.GetNextAiringEpisode(Int64 id) in D:\a\Totoro\Totoro\Totoro.Core\Services\AniList\AniListService.cs:line 134    at Totoro.Core.Services.MyAnimeList.MyAnimeListTrackingService.<GetAnime>b__9_0(IObserver1 observer) in D:\a\Totoro\Totoro\Totoro.Core\Services\MyAnimeList\MyAnimeListTrackingService.cs:line 95
Edit
i've tried clean install and it kinda work for a day or two then the problem came back again
2nd Edit
nope it doesn't work now with clean install

fixed


Suggestion: Nexus Mods Support

https://www.nexusmods.com/
I've been able to jump through some hoops, and get this MOSTLY working as its own app, only real thing left is handling NXM links

@aggietallboy this used to be a feature before... maybe you can go back through the history of the github but I removed mods...it's actually Hardee than it seems to implement but
...now that that code is optimized it may be easier now

I see what you were doing on 2.9.4... definitely ambitious!!
May I suggest a slightly different approach??
Instead of putting vortex in each one, perhaps build out "Move game to vortex"
This is basically what I did with Starfield, and then I symlinked the directory back to its original spot... so it'll launch "as is" with the Steam launcher, or if I want to tweak it, I can go back through the nexus instance.
Just a thought

@aggietallboy it's possible, it's probably easier now to add tbh but I do want to avoid symlinlong as much as possible as I'm already doing that slot, hence why I was adding it into every prefix like before... do you know any coding? I'm open to pull requests

A bit.. But it's mostly powershell scripting these days and rusty Java and C/C++/C# with a tiny bit of Python.

From: Roy @.>
Sent: Monday, July 8, 2024 3:07 PM
To: moraroy/NonSteamLaunchers-On-Steam-Deck @.>
Cc: aggietallboy @.>; Mention @.>
Subject: Re: [moraroy/NonSteamLaunchers-On-Steam-Deck] Suggestion: Nexus Mods Support (Issue #345)
@aggietallboyhttps://github.com/aggietallboy it's possible, it's probably easier now to add tbh but I do want to avoid symlinlong as much as possible as I'm already doing that slot, hence why I was adding it into every prefix like before... do you know any coding? I'm open to pull requests
—
Reply to this email directly, view it on GitHubhttps://github.com/moraroy/NonSteamLaunchers-On-Steam-Deck/issues/345#issuecomment-2215141284, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACN7UXQJBRN4WDC3Z56S5B3ZLLWONAVCNFSM6AAAAABKRNS5UWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJVGE2DCMRYGQ.
You are receiving this because you were mentioned.Message ID: @.***>

@aggietallboy I see no worries, I'll see what I can do, I'm trying my best not to add anymore launcher just yet, until things are squared away with the decky plugin

No worries at all!
I'm installing steamtinkerlaunch right now, because it "automagically" processes the NXM link handling.
I'm also reinstalling decky and your tool (from decky plugin).
You mention they're the same, but the launcher list does seem to be much shorter on the decky launcher – Epic, GOG and EA I believe were there, but there seemed to be quite a few more on the full launcher.
I will try to gather logs (and have patience!!) with the decky install

From: Roy @.>
Sent: Monday, July 8, 2024 9:40 PM
To: moraroy/NonSteamLaunchers-On-Steam-Deck @.>
Cc: aggietallboy @.>; Mention @.>
Subject: Re: [moraroy/NonSteamLaunchers-On-Steam-Deck] Suggestion: Nexus Mods Support (Issue #345)
@aggietallboyhttps://github.com/aggietallboy I see no worries, I'll see what I can do, I'm trying my best not to add anymore launcher just yet, until things are squared away with the decky plugin
—
Reply to this email directly, view it on GitHubhttps://github.com/moraroy/NonSteamLaunchers-On-Steam-Deck/issues/345#issuecomment-2216293428, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACN7UXVGCM6P4ZMMCDR37RLZLNETJAVCNFSM6AAAAABKRNS5UWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJWGI4TGNBSHA.
You are receiving this because you were mentioned.Message ID: @.***>

@aggietallboy the plugin list is shorter because not all launchers can be installed in the background, technically just one can't do that yet, which is glyph, kplay is missing too but that can be installed actually. I hope you like the plugin! Having the scanner on auto will work for the most part. Once it's done you can turn it off till you need it again.

The preliminary run did great against Epic!! I was thrilled with the results!
SteamTinker looks like it has excellent built-in Nexus support with some clever scripting around Nexus to make it more compatible.
It SHOULD pick up the games that yours installs, and then be able to "NexusIze" (or MO2, but I've been having hell getting that working right) the games,  to make it so I can play with all my mods.
So... PORQUE NO LOS DOS!!
🙂

From: Roy @.>
Sent: Monday, July 8, 2024 9:54 PM
To: moraroy/NonSteamLaunchers-On-Steam-Deck @.>
Cc: aggietallboy @.>; Mention @.>
Subject: Re: [moraroy/NonSteamLaunchers-On-Steam-Deck] Suggestion: Nexus Mods Support (Issue #345)
@aggietallboyhttps://github.com/aggietallboy the plugin list is shorter because not all launchers can be installed in the background, technically just one can't do that yet, which is glyph, kplay is missing too but that can be installed actually. I hope you like the plugin! Having the scanner on auto will work for the most part. Once it's done you can turn it off till you need it again.
—
Reply to this email directly, view it on GitHubhttps://github.com/moraroy/NonSteamLaunchers-On-Steam-Deck/issues/345#issuecomment-2216311447, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACN7UXSGMTZLNU3X34DGUYLZLNGHRAVCNFSM6AAAAABKRNS5UWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDEMJWGMYTCNBUG4.
You are receiving this because you were mentioned.Message ID: @.***>

@aggietallboy that's tight good job brother, I'll see what I can do about mods again I'll try to brainstorm about it

NSL installed through decky right now, "hanger" seems to be gog galaxy -- it sat on it for over an hour before i gave up
will try to retrieve logs

additional observation with Decky -- can't add/remove just one... it reinstalls all of them if you add one.

NonSteamLaunchers-install.log
Attaching NSL install log.
All the other ones that I use seem to be downloading and installing fine -- just GOG seems to be having trouble.


hare: enable cross-compilation

Description of changes

qbe: enable cross-compilation
harec: enable cross-compilation
hare: enable cross-compilation

Things done

Built on platform(s)

[X] x86_64-linux
[x] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)

[ ] sandbox = relaxed
[ ] sandbox = true

[X] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[x] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[X] Tested basic functionality of all binary files (usually in ./result/bin/)
24.05 Release Notes (or backporting 23.05 and 23.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module

[X] Fits CONTRIBUTING.md.

Note for reviewers
To test this PR:
git clone --filter=blob:none --depth=1 -b hare-crosscomp https://github.com/onemoresuza/nixpkgs.git hare-crosscomp
cd hare-crosscomp
nix-build -E '
    let
        pkgs = import ./. {};
        x86_64 = builtins.attrValues {
            inherit (pkgs.pkgsCross.gnu64) qbe harec hare;
        };
        aarch64 = builtins.attrValues {
            inherit (pkgs.pkgsCross.aarch64-multiplatform) qbe harec hare;
        };
    in
        aarch64 ++ x86_64
'

Add a :+1: reaction to pull requests you find important.

Result of nixpkgs-review pr 292608 run on x86_64-linux 1

1 package marked as broken and skipped:

himitsu-firefox

16 packages built:

bonsai
hare
hare.man
hareThirdParty.hare-compress
hareThirdParty.hare-ev
hareThirdParty.hare-json
hareThirdParty.hare-png
hareThirdParty.hare-ssh
hareThirdParty.hare-toml
harec
haredo
haredo.man
himitsu
qbe
treecat
treecat.man

Result of nixpkgs-review pr 292608 run on aarch64-linux 1

1 package marked as broken and skipped:

himitsu-firefox

16 packages built:

bonsai
hare
hare.man
hareThirdParty.hare-compress
hareThirdParty.hare-ev
hareThirdParty.hare-json
hareThirdParty.hare-png
hareThirdParty.hare-ssh
hareThirdParty.hare-toml
harec
haredo
haredo.man
himitsu
qbe
treecat
treecat.man

This pull request has been mentioned on NixOS Discourse. There might be relevant details there:
https://discourse.nixos.org/t/prs-ready-for-review/3032/3553

error: builder for '/nix/store/ws7l12hv17i4197kh5wiq60v24bcz04z-hare-aarch64-unknown-linux-gnu-0.24.0.drv' failed with exit code 1;
       last 10 log lines:
       > LD      .bin/hare
       > HARE    .bin/haredoc
       > .bin/hare: line 1: can't open �!��!�!@��Ң�B�A���: no such file
       > .bin/hare: line 2: can't open ���G: no such file
       > .bin/hare: line 3: @���Ң��B�A��ҡ��!�: not found
       > .bin/hare: line 3: can't open ��5�y��*q᧟�!S?q�T: no such file
       > : no such filee 4: can't open ���
       > .bin/hare: line 4: syntax error: unterminated quoted string
       > make: *** [Makefile:58: .bin/haredoc] Error 2
       > rm .harecache/dirs.s .harecache/hare_unparse.s .harecache/hare_lex.s .harecache/hash.s .harecache/strconv.s .harecache/path.s .harecache/unix.s .harecache/crypto_math.s .harecache/encoding_hex.s .harecache/getopt.s .harecache/fmt.s .harecache/strings.s .harecache/time_chrono.s .harecache/os_exec.s .harecache/sort_cmp.s .harecache/hare_parse.s .harecache/linux_vdso.s .harecache/time_date.s .harecache/errors.s .harecache/io.s .harecache/fs.s .harecache/cmd_hare_build.s .harecache/unix_signal.s .harecache/bufio.s .harecache/os.s .harecache/bytes.s .harecache/types_c.s .harecache/hare_ast.s .harecache/shlex.s .harecache/endian.s .harecache/crypto_sha256.s .harecache/memio.s .harecache/encoding_utf8.s .harecache/hare_module.s .harecache/time.s .harecache/math.s .harecache/cmd_hare.s .harecache/types.s .harecache/unix_tty.s .harecache/format_elf.s .harecache/ascii.s .harecache/linux.s .harecache/sort.s

Was this error log produced by the nix-build -A pkgsCross.aarch64-multiplatform.hare?

yes

@ofborg build pkgsCross.aarch64-multiplatform.hare

@pbsds, I am unable to reproduce the error encountered by both you and ofborg: Running nix-build -A pkgsCross.aarch64-multiplatform.hare on my x86_64 machine does build the derivation with an aarch64 executable as it's shown by running the file command on it:
[user@hostname: ~/nixpkgs] $ file ./result/bin/.hare-wrapped
./result/bin/.hare-wrapped: ELF 64-bit LSB executable, ARM aarch64, version 1 (SYSV), statically linked, not stripped

Do you have boot.binfmt.emulatedSystems configured?

Do you have boot.binfmt.emulatedSystems configured? That can affect the build and is regarded as impure/unreproducible

That was it!
I was guessing it was something related to it since both you and ofborg only failed on hare, which means that the cross compilation of qbe and harec had succeeded --- I've also tested building them individually after disabling binfmt.
Regarding the error itself, it occurs because haredoc, Hare's documentation tool, is being built with the cross-compiled hare binary instead of the one from the buildPlatform. Going to take a look at Void Linux's package, since they mentioned that they had to patch the Makefile in regards to haredoc to make cross-compilation work.

I've patched hare so that it does not build haredoc, since the latter relies on the freshly build $(BINOUT)/hare, which makes cross-compilation not possible.
Now, haredoc is has its own package.

@ofborg build pkgsCross.aarch64-multiplatform.hare

Great work!

Thanks!


feat(Series) - Added items() method

[ ] Sub task of #1259
[x] Tests added / passed
[ ] Passes pre-commit run --all-files

Can one of the admins verify this patch?
Admins can comment ok to test to allow this one PR to run or add to allowlist to allow all future PRs from the same author to run.


Rename Path type to Trajectory

Codecov Report

Merging #10 into master will not change coverage.
The diff coverage is n/a.

@@          Coverage Diff          @@
##           master    #10   +/-   ##
=====================================
  Coverage     100%   100%
=====================================
  Files           2      2
  Lines         228    228
=====================================
  Hits          228    228

Impacted Files
Coverage Δ

src/lib.rs
100% <ø> (ø)
:arrow_up:

src/bin/mp.rs
100% <ø> (ø)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update da325ad...298904a. Read the comment docs.