A potential risk in k3s that could lead to takeover of the cluster

Dear Team Members:
Greetings! Our team is very interested in your project and we recently identified a potential RBAC security risk while doing a security assessment of your project. Therefore, we would like to report it to you and provide you with the relevant details so that you can fix and improve it accordingly. I couldn't find a private email to report security risks, so I raised this issue. If there is anything inappropriate about it, I hope you can forgive me.
Details:
In this Kubernetes project, there exists a ClusterRole that has been granted list secrets high-risk permissions. These permissions allow the role to list confidential information across the cluster. An attacker could impersonate the ServiceAccount bound to this ClusterRole and use its high-risk permissions to list secrets information across the cluster. By combining the permissions of other roles, an attacker can elevate the privileges and further take over the entire cluster.
we constructed the following attack vectors.
First, you need to get a token for the ServiceAccount that has this high-risk privilege. If you are already in a Pod and have this override, you can directly run the following command to get the token: cat /var/run/secrets/[kubernetes.io/serviceaccount/](http://kubernetes.io/serviceaccount/) token. If you are on a node other than a Pod, you can run the following command to get the kubectl describe secret .
Use the obtained token information to authenticate with the API server. By including the token in the request, you can be recognized as a legitimate user with a ServiceAccount and gain all privileges associated with the ServiceAccount. As a result, this ServiceAccount identity can be used to list all secrets in the cluster.
We give two ways to further utilize ServiceAccount Token with other privileges to take over the cluster:
Method 1: Elevation of Privilege by Utilizing ServiceAccount Token Bound to ClusterAdmin
Directly use a Token with the ClusterAdmin role permissions that has the authority to control the entire cluster. By authenticating with this token, you can gain full control of the cluster.
Method 2: Create Privileged Containers with ServiceAccount Token with create pods permission You can use this ServiceAccount Token to create a privileged container that mounts the root directory and schedules it to the master node in a taint-tolerant way, so that you can access and leak the master node's kubeconfig configuration file. In this way you can take over the entire cluster.
For the above attack chain we have developed exploit code and uploaded it to github: https://github.com/HouqiyuA/k8s-rbac-poc
Mitigation methods are explored:
Carefully evaluate the permissions required for each user or service account to ensure that it is following the principle of least privilege and to avoid over-authorization.
If list secrets is a required permission, consider using more granular RBAC rules. Role Binding can be used to grant list secrets permissions instead of ClusterRole, which restricts permissions to specific namespaces or resources rather than the entire cluster.
Isolate different applications into different namespaces and use namespace-level RBAC rules to restrict access. This reduces the risk of privilege leakage across namespaces
Looking forward to hearing from you and discussing this risk in more detail with us, thank you very much for your time and attention.
Best wishes.
HouqiyuA

Per our README:

Security issues in K3s can be reported by sending an email to<EMAIL_ADDRESS>Please do not file issues about security issues.

Your description is vague (potentially on purpose) about which specific ClusterRole has been granted list secrets permissions.
Please reply to the<EMAIL_ADDRESS>email with more information.

If you're going to be shopping well-known threat models around across multiple projects and claiming they're new vulnerabilities, you should probably take the additional 30 seconds to check the security policy on those repos. They're visible in multiple places and you would have had to clicked right past ours to open this issue.


Conflict with the module "Monk's Little Details"

The transparency in the rounded corners of every window is replaced with a grey background if the module "Monk's Little Details" is active.

Originally posted by @Scaby79 in https://github.com/Plushtoast/dsa5-glueandhammer/issues/1

Hey @Scaby79,
I had the same issue and found these 2 settings in Monk's that are ON by default. Turning them OFF fixed the issue for me:

Hey @Scaby79, I had the same issue and found these 2 settings in Monk's that are ON by default. Turning them OFF fixed the issue for me:

Thank you very much @CokaColaOase !
This is fixing it for me, so I'm closing this issue.


🛠 [TASK] : Revisit cat-gateway integration test

Summary
Revisit cat-gateway integration test
Description
health_live integration test is now being ignored from the test pipeline.
This is because thecat_gateway_address is invalid and causes workflow to fail.
https://github.com/input-output-hk/catalyst-voices/blob/main/catalyst-gateway/tests/integration/catalyst_gateway_event_db.rs
One possible solution may be to move this integration test to other places, so it will not execute during common Rust test procedure

This test can be deleted as it was just an example

This test can be deleted as it was just an example

Shoud this be deleted now? maybe leave it like this just for reference @kukkok3

I will do it as part of another PR I'm already working on:)


Understanding of labeling sample size

hi @fgregg
I request that you please guide me on data labeling.
Right now, I ran the csv example on my csv, which has 3,84,984 rows.
and the interactive shell is asking for only 10 pairs of records, which requires labeling.
So how do we get to know how many positive pairs are required for labeling?
how many pairs required labeling is recommended ?
so that it works perfectly?
and how to configure the labeling sample size in the CSV example?

@fgregg i request you to please guide


Cant use data fields with name other than "model" and "schema"

I'm submitting a ...

[x] bug report
[ ] feature request
[ ] support request => Please do not submit support request here, see note at the top of this template.

What is the current behavior?
Adding objects with a name other than "model" and "schema" will cause the form to be blank, for example
<vue-form-generator :schema="form7Schema" :model="form7Model" :options="formOptions"></vue-form-generator>

If the current behavior is a bug, please provide the steps to reproduce and if possible a minimal demo of the problem
https://jsfiddle.net/qs2pby48/

What is the expected behavior?
I should be able to use any name I want

What is the motivation / use case for changing the behavior?
Having multiple forms in a component

Please tell us about your environment:
Seems to be any

You're Fiddle works fine, if you reference "form7Schema" and "form7Model" every time you reference the model or schema in the Fiddle ...
Here's an updated copy of your Fiddle, using the latest Vue and VFG ... (the Fiddle you used had an old copy of VFG and Vue - the same changes also work here as well)
https://jsfiddle.net/rjfz0vkm/1/
It wasn't VFG that was erroring, it was Vue generating errors and preventing the code from running because sections of the template referenced "model" or "schema" and those Vue properties did not exist (you changed them to form7*).


Added text underline CSS for DB NULL values when editing / showing data

Since @anthonydresser has added a way of determining dbnull values in the slickgrid cell we could atleast underline NULL values:

In my opinion this is a critical feature that we really need now.
If we later want to add a specific dbnull background color for themes we could replace this solution in the future.
#217

@AlexFsmn I think the consensus from PM is that underline is not the correct NULL indication since we already use that decoration for links.  There seems to be general agreement that italic would be better since it matches more closely with SSMS.  Thoughts?

Thanks for giving this some thought.
I agree. Italic is the better choice given that underlines are used for links & because italic is used in SSMS.
This was my approach of giving DB-nulls a more distinct look. (This is still needed but this was the wrong way to go.)
To make db nulls more distinct in the future I'd like a background color included in the theme. This is a good start though.
Since the css class is set on the text rather than the cell at the moment the background color isn't that easy to set at the moment.


[flutter_tools] _CastError in HotRunner._resetDirtyAssets

on beta/3.3.0-0.0.pre
with command flutter run --no-sound-null-safety
_CastError: Null check operator used on a null value
at HotRunner._resetDirtyAssets(run_hot.dart:497)
at HotRunner._restartFromSources(run_hot.dart:565)
at <asynchronous gap>(async)
at HotRunner._fullRestartHelper(run_hot.dart:754)
at <asynchronous gap>(async)
at HotRunner.restart(run_hot.dart:694)
at <asynchronous gap>(async)
at TerminalHandler._commonTerminalInputHandler(resident_runner.dart:1699)
at <asynchronous gap>(async)
at TerminalHandler.processTerminalInput(resident_runner.dart:1739)
at <asynchronous gap>(async)

The fix for this was handle a null devFS, however we are not sure how the user can get in this state. Jonah speculates that the hook gets run after the devfs has already been cleaned up https://github.com/flutter/flutter/pull/108771#discussion_r937055589

Hotfix for this did not make the 3.3.x branch cut. Will be in the next stable release.


Parcel.unwrap() method returns an object with all fields filled with null when setters are not declared.

Parcel.unwrap() method returns an object with all fields filled with null when a model class annotated with @Parcel doesn't have setters declared. Is it possible to establish something like a warning or simply throwing this error in case I forget to declare setters methods?

Are you talking about a bean annotated with @Parcel(Serialization.BEAN) or just with @Parcel?

@Parcel(Serialization.BEAN), sorry my bad.

No problem.  An error on non-matching getter/setter pairs in the BEAN configuration would match the constructor parameter / getter error that we issue.  The difference with getter/setter pairs is the setter call is optional after the class construction.  Technically, you can instantiate a class without the given property provided.  Defining getters and setters really instructs whatever tool (in this case Parceler) how to handle your bean.  If the bean has a read only property, it's not de-serializable.
Pros:
Matches constructor / getter property pair behavior
Helps avoid issues defining beans properly
Cons:
Noisy
non-matching getter/setters have a specific meaning - either they are read only or just update methods.
I don't know... I'm on the fence on this one.  Thoughts?


Only support tuples and not single inputs/outputs

The ambiguity between tuples and single inputs/outputs in pushforwards and pullbacks is causing several bugs (#99) and making the code more complicated.
I propose to make a breaking change that supports only tuples
cc @devmotion

An alternative would be https://github.com/JuliaDiff/AbstractDifferentiation.jl/issues/53

On second thought they're actually the same, replacing args... with args everywhere does the translation

I think it should be fine to only support tuples. I don't recall why we support both but we can just support one.

Only supporting plain inputs / outputs sounds slightly more natural though, doesn't it?

that's also fine by me

Closing this in favor of #53 then


Need to support UTF8 data type as input from outside in the rune

In our "capability", we don't support English sentences (UTF8) as input. We are going to need this capability to support NLP models in the rune. (mentioned in #296)

You should be able to use the RAW capability (e.g. --raw my-input.txt) for this. From what I understand, most ML frameworks treat "strings" as just long u8 tensors padded with zeroes to the right length (@SamLeroux or @meelislootus feel free to correct me here).

I'm closing this ticket as it is resolved by using u8 tensors and converting them to UTF-8 strings with core::str::from_utf8().


Usage of tests

Hi. I'm the developer of native-obfuscator tool that is benchmarked in this repo.
Due to the fact that there is no license in this repo, I need to ask - can I use your tests as a part of my testsuite?
I'm currently working on tests, and this will be really helpful.

Ah, yes of course.
Just take it as CC0.


Small typo in "Update optimize-and-bundle.md"

Small typo
Changes

Testing

Docs

doh, thank you!


Enable the generated server-side code to validate the content-type.

Motivation
I am interested this tool and have selected something that I can work on.
Resolve #16
Modifications
To validate content-type header string in server program, I modify traslateServerDesirializer method .
Result
For example you will define below opeapi yaml
  /greet:
    post:
      operationId: postGreeting
      requestBody:
        required: true
        content:
          text/plain:
            schema:
              type: string

when you try the request, runtime error happen.
$ curl localhost:8080/api/greet -X POST \
> -H "Content-Type: application/json" \
> -d '{ "name": "foo" }'

{"error":true,"reason":"Server error - operationID: postGreeting, request: path: \/api\/greet, query: <nil>, method: HTTPMethod(value: OpenAPIRuntime.HTTPMethod.(unknown context at $106e9fd78).OpenAPIHTTPMethod.POST), header fields: [Host: localhost:8080, User-Agent: curl\/7.88.1, Accept: *\/*, Content-Type: application\/json, Content-Length: 64], body (prefix): { \"name\": \"foo\"}, metadata: path parameters: [:], query parameters: [], operationInput: <nil>, operationOutput: <nil>, underlying error: Unexpected Content-Type header: application\/json"}

Test Plan
I have made the necessary changes to adapt to the newly generated code on the reference server side and have confirmed that it passes the tests locally.

@czechboy0
Thank you for reviewing .
I tried to add, but XCTAssertThrowsError seems not to supported async method.
https://developer.apple.com/documentation/xctest/1500795-xctassertthrowserror

I am considering the following code, but is there any better alternative?
 client = .init(
            createPetBlock: { input in
                return .created(
                    .init(
                        headers: .init(
                            X_Extra_Arguments: .init(code: 1)
                        ),
                        body: .json(
                            .init(id: 1, name: "Fluffz")
                        )
                    )
                )
            }
        )

        do {
            _ = try await server.createPet(
                .init(
                    path: "/api/pets",
                    method: .post,
                    headerFields: [
                        .init(name: "x-extra-arguments", value: #"{"code":1}"#),
                        .init(name: "content-type", value: "text/plain; charset=utf-8"),
                    ],
                    encodedBody: #"""
                        {
                          "name" : "Fluffz"
                        }
                        """#
                ),
                .init()
            )
            XCTFail("The method should have thrown an error.")
        } catch {
            XCTAssertNotNil(error)
        }

Ah you're right. Yeah, a manual do/catch block, where you XCTFail at the end of the do block, and do nothing in the catch block is how I've worked around this limitation.

Thank you for checking ! I applied your suggestion  .

@swift-server-bot add to allowlist

I missed https://github.com/apple/swift-openapi-generator/blob/main/CONTRIBUTING.md#run-scriptssoundnesssh, and am confirming .


COPY FROM should fail gracefully in case of illegal data in CSV

Resolves https://github.com/crate/crate/issues/12201
Checklist

[ ] Added an entry in CHANGES.txt for user facing changes
[ ] Updated documentation & sql_features table for user facing changes
[ ] Touched code is covered by tests
[ ] CLA is signed
[ ] This does not contain breaking changes, or if it does:

It is released within a major release
It is recorded in CHANGES.txt
It was marked as deprecated in an earlier release if possible
You've thought about the consequences and other components are adapted
(E.g. AdminUI)

Added 4.7 label as I reproduced it even on 4.6


Fix for PHP 8

fix undefined constant errors
fix class construct
fix query error handling

Hi @shirosaki,
Thank you for your contribution.
which changes the roadmap for 2023
📦 BRANCH MASTER/MAIN PHP8
Merge PHP8 by Hiroshi Shirosaki @shirosaki
Merge PHP8 by Nuno Luciano @gigamaster
https://github.com/xoopscube/legacy/tree/master
or branch php-8
📦 BRANCH PHP74
Update XCL231 Beta ( User Interface, Themes )
Merge X-Update Manager (Free Store Get & Deploy)
https://github.com/xoopscube/legacy/tree/php74
Just now, I really need a week of Shinrin-Yoku
but I'll be back soon.
Thanks again. Have fun ^_^/


type hints not working as designed, missing tsconfig include path

Environment
Nitro: Latest
Node: v16.13.0
Reproduction
clone and run pnpm dev: https://github.com/didavid61202/nitro-app
go to routes/index.ts, and typescript will throw an error:  Cannot find name 'eventHandler'.  and type hints are not working as designed.
Describe the bug
the generated tsconfig.json file in .nitro/types is missing "include path" of "../../**/*", causing typescript unable to grab all global types defined in .nitro/types/nitro.d.ts.
adding "../../**/*"  to tsConfig.include array in nitro\src\build.ts should fix this issue.
Additional context
No response
Logs
No response

/cc @danielroe


Java SDK

Is there any plan to support the SDK for Java? Can I call the relevant interface through Java now?

Hey @404notfoundyc-L it's not possible now but we'll soon be releasing new SDK where you'll be able to use OpenAPI spec for our API

Hey @404notfoundyc-L, the communication between our SDK and API+sandboxes is documented in our infra repo:
API for creating sandbox, etc. (OpenAPI) — https://github.com/e2b-dev/infra/blob/main/spec/openapi.yml
Sandbox communication (OpenAPI, Protobuffers) — https://github.com/e2b-dev/infra/tree/main/packages/envd/spec
You can check the reference implementation in TS — https://github.com/e2b-dev/E2B/tree/beta/packages/js-sdk. The protocol we use (https://connectrpc.com/) is a very thin wrapper around HTTP/1.1+protobuffers. It also has a Kotlin SDK (https://github.com/connectrpc/connect-kotlin) so generating that part of the SDK that is compatible with Java should be possible.
All interaction with the sandbox and API can also be done with just HTTP request, but it is way more convenient to use the generated clients, especially for the sandbox interactions.


How to debug node state change?

[x] I have searched the issues of this repository and believe that this is not a duplicate.

Reproduction link
https://antv-issue-helper.surge.sh/
Steps to reproduce
In my case, I don't know why state was clear after calling graph.changeSize. I want a way to debug what changes states actually

Environment
Info

g6
4.3.11

System
-

Browser
-

Please provide an online reproduced demo? I cannot reproduce the problem

Oh, I am so sorry. It is too long for me. Maybe reopen it if I can provider more detail.


Base url path configuration variable

Allow livebook to be deploy on a url sub path behind a reverse proxy.
See discussion https://github.com/livebook-dev/livebook/discussions/1540

 Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.You have signed the CLA already but the status is still pending? Let us recheck it.

Updated! I apologize for noob mistakes, I am a total beginner with exilir and phoenix :sweat_smile:

Updated! I apologize for noob mistakes, I am a total beginner with exilir and phoenix 😅

You did great! This is actually a part of Phoenix that is going to be get much easier in Phoenix v1.7, so less change for confusion.
I just have one last change to request. Can we please rename the env var to LIVEBOOK_BASE_URL_PATH or LIVEBOOK_BASE_PATH? And then change the window variable accordingly. Thank you!

Please also remove static/{js,css}, CI builds those automatically :)

I just have one last change to request. Can we please rename the env var to LIVEBOOK_BASE_URL_PATH or LIVEBOOK_BASE_PATH? And then change the window variable accordingly. Thank you!

I rename it LIVEBOOK_BASE_URL_PATH to avoid confusion with LIVEBOOK_DATA_PATH

Looks great! There is one comment and bring the static files back as they were (no changes) and we should be good! heart

Thanks to you all to provide this software for the community !!


Height attribute on a dimmable not removed after dimmer gone

To reproduce:

Setup a dimmable on body
Pop up a modal with long content so that its height greater than body
Cancel the modal and a height = xxx attribute will occasionally remain on body

Thanks for reporting, this was fixed in 2.0.3


Implement PQC schemes

Implement PQC schemes based on https://www.ietf.org/archive/id/draft-wussler-openpgp-pqc-00.html

Replaced by #142


HANA generates a unique index for each unique constraint

Sqlalchemy excepts that no new index is generated for a unique constraint.

Found out a workout. So closing the pull request for now.


Upgrade semver to fix vulnerability

There is a vulnerability with semver < 7.5.2:
https://github.com/advisories/GHSA-c2qf-rxjj-qqgw
The solution is to upgrade semver to 7.5.3 which includes a patch to fix the vulnerability.

Like most CVEs, it's a false positive. We're not using new Range nor are we doing anything that wouldn't be a self-attack (ie, not an attack).
We can't ever bump the semver version because v7 drops support for engines we support, so unless the fix is backported to v6, it'll just have to remain a false positive.
Duplicate of #2803. Duplicate of #2804. Duplicate of #2805.


HKG: Add FW for 2022 Hyundai Sonata

Add missing engine and transmission firmware.
Dongle ID: e5d9b05276984e29
Thanks to community Sonata owner KingKiller!

Can we make sure we get a route with the new logging in release or on master?

Can we make sure we get a route with the new FW logging in release or on master?

The end user here managed to fix his fork fingerprint locally while I was writing the PR, and it doesn't appear he ever did switch to this temporary FP branch to validate. I've sent him a DM asking him to test when he's able.

Closing because I haven't been able to reestablish contact with the end user. Can reopen if he reappears.


Variable defines hash but does not define eq

Variable defines __hash__ but doesn't define __eq__:
class Variable(object):
    # ...

    def __eq__(self, other):
        raise NotImplementedError()

    # ...

    def __hash__(self):
        return super(Variable, self).__hash__()

But, the python documentation (https://docs.python.org/3.1/reference/datamodel.html#object.hash) says:

If a class does not define an eq() method it should not define a hash() operation either;

Is there a reason Variable is designed like this?

It looks like a mistake. Variable should not be hashable (like ndarrays).


powershell format error

this is the output form :ConformInfo

how to fix this?
i have not change the config.
i am on windows 11

Thanks for raising!
Install-Module PSScriptAnalyzer should fix it. I'll make sure to include this in the setup script so it's included in future.

thanks! that work!


python3Packages.aioaseko: 0.0.1 -> 0.0.2

Motivation for this change
https://github.com/milanmeu/aioaseko/releases/tag/v0.0.2
Things done

Built on platform(s)

[x] x86_64-linux
[ ] aarch64-linux
[ ] x86_64-darwin
[ ] aarch64-darwin

[ ] For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
[ ] Tested, as applicable:

NixOS test(s) (look inside nixos/tests)
and/or package tests
or, for functions and "core" functionality, tests in lib/tests or pkgs/test
made sure NixOS tests are linked to the relevant packages

[ ] Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
[ ] Tested basic functionality of all binary files (usually in ./result/bin/)
22.05 Release Notes (or backporting 21.11 Release notes)

[ ] (Package updates) Added a release notes entry if the change is major or breaking
[ ] (Module updates) Added a release notes entry if the change is significant
[ ] (Module addition) Added a release notes entry if adding a new NixOS module
[ ] (Release notes changes) Ran nixos/doc/manual/md-to-db.sh to update generated release notes

[x] Fits CONTRIBUTING.md.

Result of nixpkgs-review pr 158925 run on x86_64-linux 1

3 packages built:

home-assistant-component-tests.aseko_pool_live
python310Packages.aioaseko
python39Packages.aioaseko


Edge Browser image not working during Automation Run

During the Automation run, Edge browser crashes. All other browsers are working fine like Chrome, Firefox, etc.
Note: Manual creation of Edge session is working fine, only issue during Automation run
Edge version using: 99.0 & 89.0
Framework property file: (Note: Below config works for all other Browsers)
driver.name=edgeRemoteDriver
remote.server=https://<IP_ADDRESS>:4444/wd/hub
chrome.capabilities.browserName=MicrosoftEdge
chrome.capabilities.browserVersion=99.0
chrome.capabilities.name=Test Pack 45
driver.additional.capabilities={'selenoid:options':{'sessionTimeout':'1m', 'enableVNC':true,'enableLog':true,'enableVideo':true,'videoName': '624cedf095e42647c24c05ef-Web - testpack.mp4','logName': '624cedf095e42647c24c05ef-Web - testpack.log'}}
Docker Logs:
2022/04/08 18:40:03 [-] [NEW_REQUEST] [unknown] [<IP_ADDRESS>]
2022/04/08 18:40:03 [-] [NEW_REQUEST_ACCEPTED] [unknown] [<IP_ADDRESS>]
2022/04/08 18:40:03 [45256] [LOCATING_SERVICE] [MicrosoftEdge] [99.0]
2022/04/08 18:40:03 [45256] [USING_DOCKER] [MicrosoftEdge] [99.0]
2022/04/08 18:40:03 [45256] [CREATING_CONTAINER] [browsers/edge:99.0]
2022/04/08 18:40:03 [45256] [STARTING_CONTAINER] [browsers/edge:99.0] [34af6a47073d1f344cda1c01af00892daf31ef4cecf16ae3dce11d5c9658843f]
2022/04/08 18:40:04 [45256] [CONTAINER_STARTED] [browsers/edge:99.0] [34af6a47073d1f344cda1c01af00892daf31ef4cecf16ae3dce11d5c9658843f] [0.84s]
2022/04/08 18:40:04 [45256] [SERVICE_STARTED] [browsers/edge:99.0] [34af6a47073d1f344cda1c01af00892daf31ef4cecf16ae3dce11d5c9658843f] [0.61s]
2022/04/08 18:40:04 [45256] [PROXY_TO] [34af6a47073d1f344cda1c01af00892daf31ef4cecf16ae3dce11d5c9658843f] [http://<IP_ADDRESS>:4444/]
2022/04/08 18:40:04 [45256] [SESSION_ATTEMPTED] [http://<IP_ADDRESS>:4444/] [1]
2022/04/08 18:40:04 [45256] [SESSION_FAILED] [http://<IP_ADDRESS>:4444/] [500 Internal Server Error]
2022/04/08 18:40:04 [45256] [REMOVING_CONTAINER] [34af6a47073d1f344cda1c01af00892daf31ef4cecf16ae3dce11d5c9658843f]
2022/04/08 18:40:05 [45256] [CONTAINER_REMOVED] [34af6a47073d1f344cda1c01af00892daf31ef4cecf16ae3dce11d5c9658843f]
2022/04/08 18:41:49 [-] [NEW_REQUEST] [unknown] [<IP_ADDRESS>]
2022/04/08 18:41:49 [-] [NEW_REQUEST_ACCEPTED] [unknown] [<IP_ADDRESS>]
2022/04/08 18:41:49 [45279] [LOCATING_SERVICE] [MicrosoftEdge] [99.0]
2022/04/08 18:41:49 [45279] [USING_DOCKER] [MicrosoftEdge] [99.0]
2022/04/08 18:41:49 [45279] [CREATING_CONTAINER] [browsers/edge:99.0]
2022/04/08 18:41:50 [45279] [STARTING_CONTAINER] [browsers/edge:99.0] [adef5007808a54e399e318c89dbecf8937e3500542ba9584ce939fe9402be92b]
2022/04/08 18:41:50 [45279] [CONTAINER_STARTED] [browsers/edge:99.0] [adef5007808a54e399e318c89dbecf8937e3500542ba9584ce939fe9402be92b] [0.52s]
2022/04/08 18:41:51 [45279] [SERVICE_STARTED] [browsers/edge:99.0] [adef5007808a54e399e318c89dbecf8937e3500542ba9584ce939fe9402be92b] [0.56s]
2022/04/08 18:41:51 [45279] [PROXY_TO] [adef5007808a54e399e318c89dbecf8937e3500542ba9584ce939fe9402be92b] [http://<IP_ADDRESS>:4444/]
2022/04/08 18:41:51 [45279] [SESSION_ATTEMPTED] [http://<IP_ADDRESS>:4444/] [1]
2022/04/08 18:41:51 [45279] [SESSION_FAILED] [http://<IP_ADDRESS>:4444/] [500 Internal Server Error]
2022/04/08 18:41:51 [45279] [REMOVING_CONTAINER] [adef5007808a54e399e318c89dbecf8937e3500542ba9584ce939fe9402be92b]
2022/04/08 18:41:51 [45279] [CONTAINER_REMOVED] [adef5007808a54e399e318c89dbecf8937e3500542ba9584ce939fe9402be92b]
Browser.json Config
{
"MicrosoftEdge": {
"default": "99.0",
"versions": {
"99.0": {
"image": "browsers/edge:99.0",
"port": "4444",
"path": "/"
},
"89.0": {
"image": "browsers/edge:89.0",
"port": "4444",
"path": "/"
}
}
},
"chrome": {
"default": "96.0",
"versions": {
"95.0": {
"image": "selenoid/vnc_chrome:95.0",
"port": "4444",
"path": "/"
},
"96.0": {
"image": "selenoid/vnc_chrome:96.0",
"port": "4444",
"path": "/"
}
}
},
"firefox": {
"default": "94.0",
"versions": {
"93.0": {
"image": "selenoid/vnc_firefox:93.0",
"port": "4444",
"path": "/wd/hub"
},
"94.0": {
"image": "selenoid/vnc_firefox:94.0",
"port": "4444",
"path": "/wd/hub"
}
}
},
"opera": {
"default": "81.0",
"versions": {
"80.0": {
"image": "selenoid/vnc_opera:80.0",
"port": "4444",
"path": "/"
},
"81.0": {
"image": "selenoid/vnc_opera:81.0",
"port": "4444",
"path": "/"
}
}
}
}
Automation Log:
Unable to create driver instance in 1st attempt with retry timeout of 0 seconds. You can check/set value of 'driver.init.retry.timeout' appropriately to set retry timeout on driver initialization failure.Unable to Create Driver Instance session not created: No matching capabilities found
Build info: version: '3.141.59', revision: 'e82be7d358', time: '2018-11-14T08:17:03'
System info: host: 'MAVLT1059', ip: 'fd01:0:0:0:6084:5bd3:5429:17f0%en0', os.name: 'Mac OS X', os.arch: 'x86_64', os.version: '10.15.5', java.version: '1.8.0_212'
Driver info: driver.version: QAFExtendedWebDriver
remote stacktrace: #0 0x55f3521ae6f3
#1 0x55f351ecbf93
#2 0x55f351f270ac
#3 0x55f351f26347
#4 0x55f351f27c1b
#5 0x55f351f22353
#6 0x55f351ef8e31
#7 0x55f351ef9ff5
#8 0x55f3521d7d97
#9 0x55f3521e8bad
#10 0x55f3521e8929
#11 0x55f3521e9052
#12 0x55f3521d928b
#13 0x55f3521e9345
#14 0x55f3521cf295
#15 0x55f352200c18
#16 0x55f352200dc8
#17 0x55f35221a51e
#18 0x7f7697f55609
msg >>Timed out after 0 seconds: Unable to create driver instance in 1st attempt with retry timeout of 0 seconds. You can check/set value of 'driver.init.retry.timeout' appropriately to set retry timeout on driver initialization failure.

@maveric-systems it's not crashing. You are passing wrong capabilities.
 No matching capabilities found

@maveric-systems it's not crashing. You are passing wrong capabilities.
 No matching capabilities found

Thanks for your reply. Any help in identifying the issue will be appreciated...
Edge browser is getting initiated, but the session is not getting established. Never had issue with other browser images.
Below config works for Chrome / Firefox for past 2 yrs: (Using Qmetry framework with TestNg)
driver.name=chromeRemoteDriver
remote.server=https://<IP_ADDRESS>:4444/wd/hub
chrome.capabilities.browserName=chrome
chrome.capabilities.browserVersion=96.0
chrome.capabilities.name=Test Pack 45 for Chrome
driver.additional.capabilities={'selenoid:options':{'sessionTimeout':'1m', 'enableVNC':true,'enableLog':true,'enableVideo':true,'videoName': '624cedf095e42647c24c05ef-Web - testpack.mp4','logName': '624cedf095e42647c24c05ef-Web - testpack.log'}}

Below config not working for Edge
driver.name=edgeRemoteDriver
remote.server=https://<IP_ADDRESS>:4444/wd/hub
chrome.capabilities.browserName=MicrosoftEdge
chrome.capabilities.browserVersion=99.0
chrome.capabilities.name=Test Pack 45
driver.additional.capabilities={'selenoid:options':{'sessionTimeout':'1m', 'enableVNC':true,'enableLog':true,'enableVideo':true,'videoName': '624cedf095e42647c24c05ef-Web - testpack.mp4','logName': '624cedf095e42647c24c05ef-Web - testpack.log'}}

@maveric-systems name capability should also live under selenoid:options as it is Selenoid specific.

I have identified the issue at last...  "platformName" is mandatory for the Edge browser. It is not required for chrome, firefox, etc.
As mentioned by @vania-pooh "name" can be outside or inside Selenoid Options.. Both are getting accepted.
// Is mandatory
edge.capabilities.platformName=ANY

BUG: Except for Curl, the Capabilities generator in Selenoid console is not mentioning platformName for Yaml, Java, C#, etc. Please fix the generator.


Scrape from the PRIS database

Next step, if you're getting frustrated with wikipedia: check out the PRIS database. If necessary, @jbae11 can help with understanding it and perhaps would be willing to show you what he's done so far.
Some, but not all, of the information we want, should be in that database.

If you need any help or have any questions in regards to the PRIS data do not hesitate to 'slack' me or just visit the office!
also in our fuel cycle box,
I have uploaded the csv file for anyone to use! You just need to cite PRIS when using it for a publication or something

Can I close this issue @ytan15 ?


Settings to work on Vercel?

Hi there,
It seems to be quite slow in fetching data via Vercel. I believe this is due to it not really setting state-while-revalidate. Is there special settings that must be used with Nuxt for this to work?

@saturnonearth there are no special settings to make it work specific to a hosting provider


ERR : Could not find package flutter_localizations in the Flutter SDK.

I added
flutter_localizations:
    sdk: flutter

to my pubspec.yaml like is wrote here:
https://flutter.io/tutorials/internationalization/
But if i try to launch:
flutter packages upgrade
i receive this error:
Could not find package flutter_localizations in the Flutter SDK.
Depended on by:
- shuttertop
---- Log transcript ----
FINE: Pub 1.25.0-dev.11.0
MSG : Resolving dependencies...
SLVR: Solving dependencies:
    | - http >=0.11.3+12 from hosted (http)
    | - google_sign_in ^0.3.1 from hosted (google_sign_in)
    | - flutter_localizations any from sdk (flutter)
    | - flutter any from sdk (flutter)
    | - shared_preferences >=0.2.5 from hosted (shared_preferences)
IO  : Get versions from https://pub.dartlang.org/api/packages/http.
IO  : HTTP GET https://pub.dartlang.org/api/packages/http
    | Accept: application/vnd.pub.v2+json
    | X-Pub-OS: linux
    | X-Pub-Command: upgrade
    | X-Pub-Session-ID: 876A4DFA-418F-4638-BE97-4904C63A2921
    | X-Pub-Environment: flutter_cli
    | X-Pub-Reason: direct
    | user-agent: Dart pub 1.25.0-dev.11.0
IO  : HTTP response 200 OK for GET https://pub.dartlang.org/api/packages/http
    | took 0:00:00.708736
    | transfer-encoding: chunked
    | date: Tue, 17 Oct 2017 10:54:14 GMT
    | content-encoding: gzip
    | vary: Accept-Encoding
    | via: 1.1 google
    | content-type: application/json
    | x-frame-options: SAMEORIGIN
    | x-xss-protection: 1; mode=block
    | x-content-type-options: nosniff
    | server: nginx
IO  : Get versions from https://pub.dartlang.org/api/packages/google_sign_in.
IO  : HTTP GET https://pub.dartlang.org/api/packages/google_sign_in
    | Accept: application/vnd.pub.v2+json
    | X-Pub-OS: linux
    | X-Pub-Command: upgrade
    | X-Pub-Session-ID: 876A4DFA-418F-4638-BE97-4904C63A2921
    | X-Pub-Environment: flutter_cli
    | X-Pub-Reason: direct
    | user-agent: Dart pub 1.25.0-dev.11.0
IO  : HTTP response 200 OK for GET https://pub.dartlang.org/api/packages/google_sign_in
    | took 0:00:00.165966
    | transfer-encoding: chunked
    | date: Tue, 17 Oct 2017 10:54:15 GMT
    | content-encoding: gzip
    | vary: Accept-Encoding
    | via: 1.1 google
    | content-type: application/json
    | x-frame-options: SAMEORIGIN
    | x-xss-protection: 1; mode=block
    | x-content-type-options: nosniff
    | server: nginx
SLVR: Could not get versions for flutter_localizations from sdk:
    | Could not find package flutter_localizations in the Flutter SDK.
    |
    | package:pub/src/source/sdk.dart 104                       BoundSdkSource._verifiedPackagePath
    | package:pub/src/source/sdk.dart 85                        BoundSdkSource._loadPubspec
    | package:pub/src/source/sdk.dart 72                        BoundSdkSource.doGetVersions
    | package:pub/src/source.dart 165                           BoundSource.getVersions
    | package:pub/src/solver/version_solver.dart 231            SolverCache.getVersions.<fn>
    | dart:async                                                runZoned
    | package:pub/src/http.dart 228                             withDependencyType
    | package:pub/src/solver/version_solver.dart 230            SolverCache.getVersions
    | package:pub/src/solver/unselected_package_queue.dart 121  UnselectedPackageQueue._getNumVersions
    | package:pub/src/solver/unselected_package_queue.dart 50   UnselectedPackageQueue.add
    | package:pub/src/solver/version_selection.dart 68          VersionSelection.select.<fn>
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/version_selection.dart 70          VersionSelection.select.<fn>
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/unselected_package_queue.dart 54   UnselectedPackageQueue.add
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/unselected_package_queue.dart 137  UnselectedPackageQueue._getNumVersions
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/version_solver.dart 253            SolverCache.getVersions
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/source/hosted.dart 144                    BoundHostedSource.doGetVersions
    | ===== asynchronous gap ===========================
    | dart:async                                                _Completer.completeError
    | package:pub/src/source/sdk.dart 76                        BoundSdkSource.doGetVersions
    | ===== asynchronous gap ===========================
    | dart:async                                                new Future.microtask
    | package:pub/src/source/sdk.dart 63                        BoundSdkSource.doGetVersions
    | package:pub/src/source.dart 165                           BoundSource.getVersions
    | package:pub/src/solver/version_solver.dart 231            SolverCache.getVersions.<fn>
    | dart:async                                                runZoned
    | package:pub/src/http.dart 228                             withDependencyType
    | package:pub/src/solver/version_solver.dart 230            SolverCache.getVersions
    | ===== asynchronous gap ===========================
    | dart:async                                                new Future.microtask
    | package:pub/src/solver/version_solver.dart 204            SolverCache.getVersions
    | package:pub/src/solver/unselected_package_queue.dart 121  UnselectedPackageQueue._getNumVersions
    | ===== asynchronous gap ===========================
    | dart:async                                                new Future.microtask
    | package:pub/src/solver/unselected_package_queue.dart 115  UnselectedPackageQueue._getNumVersions
    | package:pub/src/solver/unselected_package_queue.dart 50   UnselectedPackageQueue.add
    | ===== asynchronous gap ===========================
    | dart:async                                                new Future.microtask
    | package:pub/src/solver/unselected_package_queue.dart 44   UnselectedPackageQueue.add
    | package:pub/src/solver/version_selection.dart 68          VersionSelection.select.<fn>
    | ===== asynchronous gap ===========================
    | dart:async                                                new Future.microtask
    | package:pub/src/solver/version_selection.dart 61          VersionSelection.select.<fn>
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/version_selection.dart 70          VersionSelection.select.<fn>
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/unselected_package_queue.dart 54   UnselectedPackageQueue.add
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/unselected_package_queue.dart 137  UnselectedPackageQueue._getNumVersions
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/solver/version_solver.dart 253            SolverCache.getVersions
    | dart:async                                                _completeOnAsyncReturn
    | package:pub/src/source/hosted.dart 144                    BoundHostedSource.doGetVersions
    | ===== asynchronous gap ===========================
    | dart:async                                                Future.forEach
    | package:pub/src/solver/version_selection.dart 61          VersionSelection.select
    | ===== asynchronous gap ===========================
    | dart:async                                                _asyncThenWrapperHelper
    | package:pub/src/solver/version_selection.dart 53          VersionSelection.select
    | package:pub/src/solver/backtracking_solver.dart 172       BacktrackingSolver.solve
    | ===== asynchronous gap ===========================
    | dart:async                                                new Future.microtask
    | package:pub/src/solver/backtracking_solver.dart 158       BacktrackingSolver.solve
    | package:pub/src/solver/version_solver.dart 42             resolveVersions.<fn>

How can i do?
Thanks

Can you paste the output of flutter doctor please?
cc @HansMuller

[✓] Flutter (on Linux, locale en_US.UTF-8, channel alpha)
    • Flutter at /home/luca/Programs/flutter
    • Framework revision 4424892c79 (7 days ago), 2017-10-10 16:45:11 -0700
    • Engine revision 2a84f18c79
    • Tools Dart version 1.25.0-dev.11.0

[✓] Android toolchain - develop for Android devices (Android SDK 25.0.3)
    • Android SDK at /home/luca/Android/Sdk
    • Platform android-25, build-tools 25.0.3
    • ANDROID_HOME = /home/luca/Android/Sdk
    • Java binary at: /home/luca/Programs/android-studio/jre/bin/java
    • Java version OpenJDK Runtime Environment (build 1.8.0_152-release-915-b01)

[✓] Android Studio (version 3.0)
    • Android Studio at /home/luca/Programs/android-studio
    • Java version OpenJDK Runtime Environment (build 1.8.0_152-release-915-b01)

That's why just update flutter ;)

Ok it works.
Now i have another problem.
I created the class: MyLocalizations
But if i try to generate translations files with:
flutter pub pub run intl_translation:extract_to_arb --output-dir=lib/i18n lib/my_localizations.dart
I receive this error:
Package "intl_translation" is not an immediate dependency.
Cannot run executables in transitive dependencies.
pub finished with exit code 65

How can i do?
Thanks!

@romaluca Maybe you need to add "intl_translation" as a depencies


#1714: use AppiumDriver to make screenshot for mobile

closing as root cause in the unimplemented pageLoad timeout in Appium. Fixed and pushed directly to master: https://github.com/zebrunner/carina/commit/0bcc37038f396ba53b771a53871f20e843deca28


Run eel with Django

Describe the problem
I have a Django app to help manage items and sales in a store and want to present it as a desktop app although it's web behind the scenes.
Is it possible to use the Django application instead of bottle for eel?
I would also want to enable the back and reload buttons on the browser (chrome), how do I do that?
Desktop (please complete the following information):

OS: Windows 10
Browser: Chrome
Version: 94.0.4606.71

You can use Django with eel like that, you would have better luck trying to compile your Django app with pyinstaller although that is challenging, however possible.


rewrite selected and queryFilter fn in ra.filtering-multiselect.js

Had some performance issues with multiselect that have loads of objects. In our case 10k we could load ajax but decided to speed up this plugin. Its up to 5-10x faster.

Fantastic, thanks!


Hidden special workspace windows can be focused

Start window 1 and window 2 in special workspaces 1 and 2. Then, while special workspace 1 is shown, the user can focus window 2 and click/type in it.
https://user-images.githubusercontent.com/721196/236620406-1c447774-5c9f-46cf-be06-416d1a6c0ca8.mp4
In the example above, I am able to write into the terminal while it is hidden (but focused), and click on the video while it is hidden.

$ hyprctl clients

...

Window 673ab3d0 -> Magnus Carlsen Vs Daniel Naroditsky 1 | 0 Bullet - YouTube - Google Chrome:
        mapped: 1
        hidden: 0
        at: 1083,460
        size: 805,590
        workspace: -98 (special:insert)
        floating: 1
        monitor: 0
        class: Google-chrome
        title: Magnus Carlsen Vs Daniel Naroditsky 1 | 0 Bullet - YouTube - Google Chrome
        initialClass: Google-chrome
        initialTitle: New Tab - Google Chrome
        pid: 549759
        xwayland: 1
        pinned: 0
        fullscreen: 0
        fullscreenmode: 0
        fakefullscreen: 1
        grouped: 0
        swallowing: 0

Window 6a94eeb0 -> Alacritty:
        mapped: 1
        hidden: 0
        at: 13,34
        size: 1900,644
        workspace: -97 (special:dropdown)
        floating: 1
        monitor: 0
        class: dropdown
        title: Alacritty
        initialClass: dropdown
        initialTitle: Alacritty
        pid: 1891779
        xwayland: 0
        pinned: 0
        fullscreen: 0
        fullscreenmode: 0
        fakefullscreen: 0
        grouped: 0
        swallowing: 0

fixed in 83cd5e2ebd07e5e6923a514c93931a31a2e7fd5d


Add oscal4neo4j to tools list.

Hat tip to @Agh42 for his cool and useful Neo4j loader tool for OSCAL tool. Hope to take it for a spin soon!

Thank you very much! :sunglasses:


Change a-chain/b-chain CLI flag names in favor of more explicit flag names in tx CLI commands

Summary

To quote @ancazamfir:

I propose we use chain/ counterparty instead of b-chain/ a-chain. Except the chain upgrade where we can use host-chain/ reference-chain (with the note that the reference-chain is the chain to be upgraded)

Problem Definition

I find it confusing, especially for handshake Tx-es, where we now use a-chain and b-chain but then in the help strings to make things clear we still use source and destination. For packets seems a bit better but again we use source and destination in the help to explain things.
The general idea for tx (raw) commands is that, regardless of the type of action (relay packet, client or handshake message), you instruct the relayer to send one or more messages to a (destination) chain by retrieving state values and proofs from another (source) chain. So I find using src/ dst more clear here. Or chain/ counterparty.
a-chain and b-chain work fine in the create connection/ channel where you just want to say "create a connection/channel" between chains a and b. And it results in sending Tx-es to both a and b.
I also find it confusing the sender/ receiver in tx upgrade-chain. We use host/ reference in the high level client upgrade. We should use the same here.

Proposal

Change the flag names of the tx CLI commands to use more descriptive flag names. See "Acceptance Criteria" below for a list of commands to update.
Acceptance Criteria

[x] Change sender / receiver in tx upgrade-chain to use host / reference so that it matches upgrade client
[ ] Change tx chan-close-confirm
[ ] Change tx chan-close-init
[ ] Change tx chan-open-ack
[ ] Change tx chan-open-confirm
[x] Change tx chan-open-init
[x] Change tx chan-open-try
[x] Change tx conn-ack
[x] Change tx conn-confirm
[x] Change tx conn-init
[x] Change tx conn-try
[ ] Change tx ft-transfer
[ ] Change tx packet-ack
[ ] Change tx packet-recv
[ ] Fix tx raw packet-recv to remove the raw in ADR 010
[ ] Update ADR 010 to correctly reflect the changed flag names

For Admin Use

[ ] Not duplicate issue
[ ] Appropriate labels applied
[ ] Appropriate milestone (priority) applied
[ ] Appropriate contributors tagged
[ ] Contributor assigned/self-assigned

@ancazamfir proposed deprecating a-chain/b-chain in favor of chain/counterparty, though personally I'm a bit more in favor of src/dst. chain is a little bit ambiguous and doesn't necessarily communicate the fact that it is the source. I could be convinced otherwise though 🙂

@ancazamfir proposed deprecating a-chain/b-chain in favor of chain/counterparty, though personally I'm a bit more in favor of src/dst. chain is a little bit ambiguous and doesn't necessarily communicate the fact that it is the source. I could be convinced otherwise though 🙂

tbh I also like src/ dst  but got a feeling people don't really like that.  it's also that chain/ counterparty` are already used i believe in the high level commands.

The general idea for tx (raw) commands is that, regardless of the type of action (relay packet, client or handshake message), you instruct the relayer to send one or more messages to a (destination) chain by retrieving state values and proofs from another (source) chain.

I think this is a bit inaccurate. A better explanation is: "you instruct the relayer to attempt to advance the handshake state of an object on a (destination) chain by retrieving state values and proofs from another (source) chain."
(we can also consider the packet exchange a handshake)
My first statement is accurate in most of the cases except:

conn-try and conn-ack: here we need in fact to first send a Tx (client update) to the "source". I still have doubts this should be done in the tx case as you can do a separate client update CLI. This used to be the case early in development and it was useful. After a while, once all was working, it turned out to be more convenient to include it as part of conn-try and conn-ack so we changed it.
recv-packet if the packet is timed-out (or ordered channel is closed) we send the messages (update client and timeout) to the "source"

I don't see a big different in usability between src/ dst versus chain/ counterparty. Both are good, and whichever we choose would be ideal to document under the decision part of ADR 010, eg following Anca's suggestion we could have something like

for tx commands, we require a src/dst option, as intuitively these commands instruct the relayer to attempt to advance the state of an object (eg packet, channel handshake, connection handshake) on a (destination) chain by retrieving state values and proofs from another (source) chain."


K3S fails to start due to expired certificate

Environmental Info:
K3s Version:

k3s version v1.22.5+k3s1 (405bf79d)
go version go1.16.10
Node(s) CPU architecture, OS, and Version:

Linux server.name 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
Cluster Configuration:

Cluster running 1 master and 2 worker nodes each CentOS 7
Describe the bug:

The cluster fails to rotate certificates causing the cluster to stop functioning.
Steps To Reproduce:

Installed K3s:

         /usr/local/bin/k3s server \
         --disable-cloud-controller \
         --datastore-endpoint='postgres://{{ k3s_db_username }}:{{ k3s_db_password }}@{{ k3s_db_conn_string }}' \
         --datastore-cafile=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem \
         --no-deploy traefik

Expected behavior:

The k3s service should start and function normally with certificates rotated automatically as stated in documentation.
Actual behavior:

The k3s server fails to start due to expired certificate.
Additional context / logs:

Feb 14 08:14:01 server.com k3s[13440]: time="2022-02-14T08:14:01+02:00" level=info msg="Starting k3s v1.22.5+k3s1 (405bf79d)"
Feb 14 08:14:01 server.com k3s[13440]: time="2022-02-14T08:14:01+02:00" level=fatal msg="starting kubernetes: preparing server: creating storage endpoint: building kine: x509: certificate has expired or is not yet valid: current time 2022-02-14T08:24:08+02:00 is after 2022-01-31T10:58:04Z"
Feb 14 08:14:01 server.com systemd[1]: k3s.service: main process exited, code=exited, status=1/FAILURE
Feb 14 08:14:01 server.com systemd[1]: Failed to start Lightweight Kubernetes.
Feb 14 08:14:01 server.com systemd[1]: Unit k3s.service entered failed state.
Feb 14 08:14:01 server.com systemd[1]: k3s.service failed.

The server is updated and restarted at least once a month so there would have been plenty of opportunities for k3s to renew certificates.
I tried to manually rotate certificates with "/usr/local/bin/k3s certificate rotate" and it seems to rotate all other certs besides the disabled cloud-controller one in tls directory:
# for crt in *.crt; do printf '%s: %s\n' "$(date --date="$(openssl x509 -enddate -noout -in "$crt"|cut -d= -f 2)" --iso-8601)" "$crt"; done | sort
2021-12-22: client-cloud-controller.crt
2030-02-21: client-ca.crt
2030-02-21: request-header-ca.crt
2030-02-21: server-ca.crt

I also tested by stopping k3s, chronyd and setting clock back and starting k3s. This allowed to start the k3s and it seemed to rotate some certs. After stopping k3s and restoring correct time the k3s fails to start with same error:
# date<PHONE_NUMBER>21
Wed Dec  1 10:10:00 EET 2021
# systemctl start k3s
# for crt in *.crt; do printf '%s: %s\n' "$(date --date="$(openssl x509 -enddate -noout -in "$crt"|cut -d= -f 2)" --iso-8601)" "$crt"; done | sort
2021-12-22: client-cloud-controller.crt
2022-12-01: client-admin.crt
2022-12-01: client-auth-proxy.crt
2022-12-01: client-controller.crt
2022-12-01: client-k3s-cloud-controller.crt
2022-12-01: client-k3s-controller.crt
2022-12-01: client-kube-apiserver.crt
2022-12-01: client-kube-proxy.crt
2022-12-01: client-scheduler.crt
2022-12-01: serving-kube-apiserver.crt
2030-02-21: client-ca.crt
2030-02-21: request-header-ca.crt
2030-02-21: server-ca.crt
# systemctl stop k3s
# date<PHONE_NUMBER>22
Mon Feb 14 08:39:00 EET 2022
# systemctl start chronyd
# date
Mon Feb 14 08:39:10 EET 2022
# date
Mon Feb 14 08:40:23 EET 2022
# date
Mon Feb 14 08:40:25 EET 2022
# systemctl start k3s
Job for k3s.service failed because the control process exited with error code. See "systemctl status k3s.service" and "journalctl -xe" for details.
# journalctl -u k3s -e | tail -5
Feb 14 08:42:37 server.com k3s[22097]: time="2022-02-14T08:42:37+02:00" level=fatal msg="starting kubernetes: preparing server: creating storage endpoint: building kine: x509: certificate has expired or is not yet valid: current time 2022-02-14T08:42:37+02:00 is after 2022-01-31T10:58:04Z"
Feb 14 08:42:37 server.com systemd[1]: k3s.service: main process exited, code=exited, status=1/FAILURE
Feb 14 08:42:37 server.com systemd[1]: Failed to start Lightweight Kubernetes.
Feb 14 08:42:37 server.com systemd[1]: Unit k3s.service entered failed state.
Feb 14 08:42:37 server.com systemd[1]: k3s.service failed.

What certificate is giving the 2022-01-31T10:58:04Z expiration error and how it should be fixed?
Backporting

[ ] Needs backporting to older releases

Feb 14 08:14:01 server.com k3s[13440]: time="2022-02-14T08:14:01+02:00" level=fatal msg="starting kubernetes: preparing server: creating storage endpoint: building kine: x509: certificate has expired or is not yet valid: current time 2022-02-14T08:24:08+02:00 is after 2022-01-31T10:58:04Z"

The certificate on your database server is expired. I'm not sure how k3s would be expected to rotate this.

Ah, forgot about those and searching web for the issue lead to wrong places.
Could the error message be extended to be more explicit so it would say "data store cert expired" or something similar?

The creating storage endpoint: building kine bits do make it clear that it's related to the datastore, but it could probably be more clear for folks that haven't read the docs enough to know what kine is.

I have browsed the k3s docs occasionally but I don't have a clue what kine is. Where is it documented?

kine is https://github.com/k3s-io/kine - the package that implements all the non-etcd storage backends, including the default single-node sqlite storage. https://rancher.com/docs/k3s/latest/en/installation/datastore/

So it seems the whole kine is undocumented. The datastore page could have small section about it, something like "Kine is used to implement etcd-like abstraction for non-etcd storage like databases." with link to the project. This would help give a pointer that kine is part of k3s and it deals with the datastores.


Display bug in Apps screen

In the following case in eurekadev, the last application is lower on-screen than the others.

Which browsers do we support?
I tested on Chrome, and it works fine.

This is on Safari.
Chrome, Firefox, Safari, Edge and IE 10+ are what we support.
Andrew
Sent from my iPad

On May 16, 2018, at 8:06 PM, Miao Ai<EMAIL_ADDRESS>wrote:
Which browsers do we support?
I tested on Chrome, and it works fine.
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub, or mute the thread.

I was testing a different css setup and tried it out on dev server, I did not make code commit, and have reset the changes.
On a separate note, I did find a small problem in the code and fixed it, a pull request has been made.

Thanks!


⚠ Bofrost.lu has degraded performance

In 4ca4abc, Bofrost.lu (https://www.bofrost.lu) experienced degraded performance:

HTTP code: 200
Response time: 1959 ms

Resolved: Bofrost.lu performance has improved in 607b9b7 after 8 minutes.


docs(examples/): update relative path in readme.md

Changes

Fix link to app-template-react.

Testing

Just docs only change.
Docs

No, just docs inside examples folder

Thanks!


Use latest code deploy server meet error

I'm fellow build doc, build success, and prepare redis, mongo, minio done.
when I exec run.sh -f
[0.805s][info][jfr,startup] Recording 1 scheduled to start in 1 m.
[0.805s][info][jfr,startup]
[0.805s][info][jfr,startup] Use jcmd 203655 JFR.dump name=1 to copy recording data to file.
VM settings:
    Max. Heap Size (Estimated): 2.49G
    Using VM: OpenJDK 64-Bit Server VM

Error: Could not find or load main class org.springframework.boot.loader.JarLauncher
Caused by: java.lang.ClassNotFoundException: org.springframework.boot.loader.JarLauncher

turms-service directory

Hi @hustlemickey, did you build the turms-service with the artifact-fat-jar maven profile? If not, please build the jar with the artifact-fat-jar profile, and run run.sh -f again to have a try.
Command example: mvn clean package -am -B -DskipUTs -DskipITs -P artifact-fat-jar -pl turms-service
Background
Turms servers are built as thin jars that contain no dependencies, so if you run run.sh -f (-f means run as a fat jar) with these thin jars, The Could not find or load main class org.springframework.boot.loader.JarLauncher error will occur.

yes, I build with
mvn clean package -am -B -DskipUTs -DskipITs -P artifact-fat-jar -pl turms-gateway --no-transfer-progress
and
mvn clean package -am -B -DskipUTs -DskipITs -P artifact-fat-jar -pl turms-service --no-transfer-progress
still same error

turms-service out put jar is 60M, is it correct size with fat jar?

Yes. the jar ends with -exec.jar is the fat jar that you should run to run with run.sh -f.

but still error, any possible reason?

I found the reason in run.sh
MAIN_CLASS="org.springframework.boot.loader.JarLauncher"
should be
MAIN_CLASS="org.springframework.boot.loader.launch.JarLauncher"

Thanks for pointing it out. I will update it later after full testing.
btw, you can use the code under the master branch to build and run for stability. The develop branch is used for development purposes, so it is not as stable as master.

thanks


Single node fails to properly start as leader after restart

When I reset the data and start fresh IsLeader() returns true. If I stop the server and start it back up, IsLeader() returns false and stays that way. I think this might be why users are reporting issues with continuous queries.

This is fixed by PR #2536.


f4m downloader producing broken video files on daisuki.net

I have created an extractor for daisuki.net, https://github.com/fb39ca4/youtube-dl/blob/daisuki/youtube_dl/extractor/daisuki.py
It uses _extract_f4m_formats, and seems to complete the download fine. However, the resulting files are unplayable. Here is the output from mpv. Perhaps the stream is encrypted, and youtube-dl's implementation does not handle that?
[ffmpeg/demuxer] flv: Audio codec (f) is not implemented. Update your FFmpeg ver
sion to the newest one from Git. If the problem still occurs, it means that your
 file has a feature which has not been implemented.
[ffmpeg/demuxer] flv: If you want to help, upload a sample of this file to ftp:/
/upload.ffmpeg.org/incoming/ and contact the ffmpeg-devel mailing list. (ffmpeg-
<EMAIL_ADDRESS>[ffmpeg/demuxer] flv: Stream #0: not enough frames to estimate rate; consider in
creasing probesize
[ffmpeg/demuxer] flv: Could not find codec parameters for stream 0 (Video: none,
 none, 848 kb/s): unknown codec
[ffmpeg/demuxer] Consider increasing the value for the 'analyzeduration' and 'pr
obesize' options
[ffmpeg/demuxer] flv: Could not find codec parameters for stream 1 (Audio: none
([15][0][0][0] / 0x000F), 11025 Hz, mono, 128 kb/s): unknown codec
[ffmpeg/demuxer] Consider increasing the value for the 'analyzeduration' and 'pr
obesize' options
[lavf] av_find_stream_info() failed
[ffmpeg/demuxer] flv: Audio codec (f) is not implemented. Update your FFmpeg ver
sion to the newest one from Git. If the problem still occurs, it means that your
 file has a feature which has not been implemented.
[ffmpeg/demuxer] flv: If you want to help, upload a sample of this file to ftp:/
/upload.ffmpeg.org/incoming/ and contact the ffmpeg-devel mailing list. (ffmpeg-
<EMAIL_ADDRESS>[ffmpeg/demuxer] flv: Stream #0: not enough frames to estimate rate; consider in
creasing probesize
[ffmpeg/demuxer] flv: Could not find codec parameters for stream 0 (Video: none,
 none, 848 kb/s): unknown codec
[ffmpeg/demuxer] Consider increasing the value for the 'analyzeduration' and 'pr
obesize' options
[ffmpeg/demuxer] flv: Could not find codec parameters for stream 1 (Audio: none
([15][0][0][0] / 0x000F), 11025 Hz, mono, 128 kb/s): unknown codec
[ffmpeg/demuxer] Consider increasing the value for the 'analyzeduration' and 'pr
obesize' options
[lavf] av_find_stream_info() failed
Failed to recognize file format.

It's DRM protected.

Here is an example of the manifest. Do you know which part gives information about the DRM?
<?xml version="1.0" encoding="UTF-8"?>
<manifest xmlns="http://ns.adobe.com/f4m/1.0" xmlns:akamai="uri:akamai.com/f4m/1.0">
  <akamai:version>2.0</akamai:version>
  <akamai:bw>5000</akamai:bw>
  <id>/43383936/35470338/smil/US/00007/182865319659405.smil_0</id>
  <streamType>recorded</streamType>
  <akamai:streamType>vod</akamai:streamType>
  <duration>1450.048</duration>
  <streamBaseTime>0.000</streamBaseTime>
  <pv-2.0>;hdntl=exp=1436397406~acl=%2f*~data=hdntl~hmac=fa86dca6f0e1ca4ccb95d5d5d0f2e112b07ae47ffdfb7dc73ab9a3d241574b30</pv-2.0>
  <bootstrapInfo profile="named" id="bootstrap_1000000">AAAAi2Fic3QAAAAAAAAAAQAAAAPoAAAAAAAWIEAAAAAAAAAAAAAAAAAAAQAAABlhc3J0AAAAAAAAAAABAAAAAQAAAPEBAAAARmFmcnQAAAAAAAAD6AAAAAADAAAAAQAAAAAAAAAAAAAXcAAAAPEAAAAAABX5AAAAJ0AAAAAAAAAAAAAAAAAAAAAAAA==</bootstrapInfo>
  <bootstrapInfo profile="named" id="bootstrap_2000000">AAAAi2Fic3QAAAAAAAAAAQAAAAPoAAAAAAAWIEAAAAAAAAAAAAAAAAAAAQAAABlhc3J0AAAAAAAAAAABAAAAAQAAAPEBAAAARmFmcnQAAAAAAAAD6AAAAAADAAAAAQAAAAAAAAAAAAAXcAAAAPEAAAAAABX5AAAAJ0AAAAAAAAAAAAAAAAAAAAAAAA==</bootstrapInfo>
  <bootstrapInfo profile="named" id="bootstrap_4000000">AAAAi2Fic3QAAAAAAAAAAQAAAAPoAAAAAAAWIEAAAAAAAAAAAAAAAAAAAQAAABlhc3J0AAAAAAAAAAABAAAAAQAAAPEBAAAARmFmcnQAAAAAAAAD6AAAAAADAAAAAQAAAAAAAAAAAAAXcAAAAPEAAAAAABX5AAAAJ0AAAAAAAAAAAAAAAAAAAAAAAA==</bootstrapInfo>
  <bootstrapInfo profile="named" id="bootstrap_6000000">AAAAi2Fic3QAAAAAAAAAAQAAAAPoAAAAAAAWIEAAAAAAAAAAAAAAAAAAAQAAABlhc3J0AAAAAAAAAAABAAAAAQAAAPEBAAAARmFmcnQAAAAAAAAD6AAAAAADAAAAAQAAAAAAAAAAAAAXcAAAAPEAAAAAABX5AAAAJ0AAAAAAAAAAAAAAAAAAAAAAAA==</bootstrapInfo>
  <media bitrate="996" url="1000000_456456fdb7541131_" bootstrapInfoId="bootstrap_1000000">
    <metadata>AgAKb25NZXRhRGF0YQgAAAAMAAhkdXJhdGlvbgBAlqgxJul41QAFd2lkdGgAQIQAAAAAAAAABmhlaWdodABAdoAAAAAAAAANdmlkZW9kYXRhcmF0ZQBAiz77yRZQvgAJZnJhbWVyYXRlAEA3+ctHdzzYAAx2aWRlb2NvZGVjaWQAQBwAAAAAAAAADWF1ZGlvZGF0YXJhdGUAQF9YAAAAAAAAD2F1ZGlvc2FtcGxlcmF0ZQBA53AAAAAAAAAPYXVkaW9zYW1wbGVzaXplAEAwAAAAAAAAAAZzdGVyZW8BAQAMYXVkaW9jb2RlY2lkAEAkAAAAAAAAAAhmaWxlc2l6ZQBBpYxFagAAAAAACQ==</metadata>
  </media>
  <media bitrate="1995" url="2000000_456456fdb7541131_" bootstrapInfoId="bootstrap_2000000">
    <metadata>AgAKb25NZXRhRGF0YQgAAAAMAAhkdXJhdGlvbgBAlqgxJul41QAFd2lkdGgAQIqgAAAAAAAABmhlaWdodABAfgAAAAAAAAANdmlkZW9kYXRhcmF0ZQBAnTvaDXIbowAJZnJhbWVyYXRlAEA3+ctHdzzYAAx2aWRlb2NvZGVjaWQAQBwAAAAAAAAADWF1ZGlvZGF0YXJhdGUAQF9YAAAAAAAAD2F1ZGlvc2FtcGxlcmF0ZQBA53AAAAAAAAAPYXVkaW9zYW1wbGVzaXplAEAwAAAAAAAAAAZzdGVyZW8BAQAMYXVkaW9jb2RlY2lkAEAkAAAAAAAAAAhmaWxlc2l6ZQBBtZFdpgAAAAAACQ==</metadata>
  </media>
  <media bitrate="3368" url="4000000_456456fdb7541131_" bootstrapInfoId="bootstrap_4000000">
    <metadata>AgAKb25NZXRhRGF0YQgAAAAMAAhkdXJhdGlvbgBAlqgxJul41QAFd2lkdGgAQJQAAAAAAAAABmhlaWdodABAhoAAAAAAAAANdmlkZW9kYXRhcmF0ZQBAqNfm0I5GtQAJZnJhbWVyYXRlAEA3+ctHdzzYAAx2aWRlb2NvZGVjaWQAQBwAAAAAAAAADWF1ZGlvZGF0YXJhdGUAQGesAAAAAAAAD2F1ZGlvc2FtcGxlcmF0ZQBA53AAAAAAAAAPYXVkaW9zYW1wbGVzaXplAEAwAAAAAAAAAAZzdGVyZW8BAQAMYXVkaW9jb2RlY2lkAEAkAAAAAAAAAAhmaWxlc2l6ZQBBwjNZ+4AAAAAACQ==</metadata>
  </media>
  <media bitrate="5195" url="6000000_456456fdb7541131_" bootstrapInfoId="bootstrap_6000000">
    <metadata>AgAKb25NZXRhRGF0YQgAAAAMAAhkdXJhdGlvbgBAlqgxJul41QAFd2lkdGgAQJ4AAAAAAAAABmhlaWdodABAkOAAAAAAAAANdmlkZW9kYXRhcmF0ZQBAs45Lhae1ygAJZnJhbWVyYXRlAEA3+ctHdzzYAAx2aWRlb2NvZGVjaWQAQBwAAAAAAAAADWF1ZGlvZGF0YXJhdGUAQGesAAAAAAAAD2F1ZGlvc2FtcGxlcmF0ZQBA53AAAAAAAAAPYXVkaW9zYW1wbGVzaXplAEAwAAAAAAAAAAZzdGVyZW8BAQAMYXVkaW9jb2RlY2lkAEAkAAAAAAAAAAhmaWxlc2l6ZQBBzBD0XYAAAAAACQ==</metadata>
  </media>
</manifest>

This isn't the usual FlashAccess DRM which puts tags in the manifest; it seems to be the custom Akamai DRM. The only piece of information available on it seems to be a forum post by the author of the AdobeHDS.php script, and it may be outdated.

Ok. I'm instead going to investigate using HLS for daisuki, but I need to figure out how to get youtube-dl to use the proper cookies when downloading m3u8 files.

Daisuki has moved to HLS and I've implemented it in 9bd05b5.


Inner workings of a .cia file

Intended functionality:
As you load the .CIA file, in the selected files box it shows not the name of the cia file but the internal name of the app.
But.. Why?
Sometimes your .cia files have names like: 000400000F12EE00.cia and good luck remembering what that file was.
The tip of the iceberg:
Open any US cia with a hex editor, jump to 0x3B00 and THERE IT ISSSS... But now open a JP file.
Good luck decrypting that.
Maybe somebody knows a better way to find the name of an app inside the .cia?

The name data and icon are in the SMDH at the very end of the CIA file. This is documented on 3dbrew, but you can also find a python example of it here: https://github.com/ksanislo/TitleDB/blob/master/titledb/magic.py#L430

Oh, if you want to be able to display the icon as well... Here's a passable reference for how to translate the SMDH icon stored in the 3DS's native GPU format into a bitmap that you can use on PC.
https://github.com/ksanislo/TitleDB/blob/master/titledb/images.py

The SMDH is at the END of the CIA. That explains why I was struggling so much to understand everything.
I guess I missed that part.
Thanks a lot!

You can just read in the last 14016 bytes and go for it, which will work with all 3DS native .cia... However, if you want to be able to support DSiWare CIA files, or just write code that isn't as terrible as mine, there are headers at the very beginning of the .cia file which you can use to find the offset of each of the data sections, including the real start of the SMDH at the end. I've been putting this part off in the TitleDB rewrite since I've had more pressing issues, but I intend to come back to it eventually and have it find the SMDH start and icon data properly when I have more time.

I enjoy writing terrible code.
Thanks a lot for your help. It works like a charm!
You good sir are now a friend of the snek.

@ksanislo Hey, if you want do an empty PR (or just add a space to the readme or whatever) so your name gets pulled from the github api in the about window.
Don't ever forget, you are now a friend of the snek.

Thanks, but I'm really not worried about getting credit for anything.  ;)


Highly Suggestion: "depends" folder for all librarys & readme consolidation

I noted on all the different snippets, new subdirs, old contrib folder, that there is a massive chaos
for the versioning of things like qt5 and boost and some libs more.
Building a huge amount of .dll files and entire shared on windows is highly deprecated and VERGE is so far the only wallet which is using such huge amount of shared libs.
Between Linux und Windows are usualy great differences between the librarys, it starts by using the precompiled binarys from github, which has for windows an older qt5 version as stated in some scripts for linux-builds.
So i would suggest do asap a small fix:
a.) delete/fix/consolidate the different readme-files and scripts by using clearly documented and defined libs
b.) use only "depends" folder and define a configure-script which is using this entire static build versions
with this command:
./configure
--with-daemon
--disable-tests
--with-gui=qt5
--prefix=pwd/depends/x86_64-pc-linux-gnu
LDFLAGS="-static-libstdc++"
c.) include a general advice how to use mxe for building 32 AND 64 Bit Versions for different platforms
There are good basic "depends" folder in dogecoin, litecoin, bitcoin and many more. Just edit the version-numbers for the libs at once. Using this method ensures the same libs on ALL platforms. Firther more, the many different mini-buildscripts from the subfolders can be removed.
There are finaly only 3 scripts nessassary for using mingw + depends folder.
Switching to depends means, you no longer needs specific versions on the building host system - the resulting binary files needs no longer specific versions of boost and qt5 libs - so they can by used on many linux-systems by only take care of a minimum libc6-version. The same happens for windows, because you no longer has any .dll files. Just one bigger static .exe file

actually, have a massive amount of .dll files just means it is a dynamic build (not static, where everything is in one executable) but now that we've gotten rid of the radio feature, we can go back to static builds for windows.

@justinvforvendetta
...but please consider using only depends folder and define here the correct working versions of any libs, so that first time win, linux and mac are in sync and we can get rid of all the shared libs on every platform ;-)


Add files via upload

Added Sharjah police science academy file . https://www.psa.ac.ae/

@suhailphp Pull request merged. Thank you!

Thanks @philipto


Fire event when sync stores are done initting

Description
notify-client initializes a Store for subscriptions before initializing a SyncStore instance. This causes edge cases where sometimes the user of the client would run getActiveSubscriptions which would use the initial Store instance if fired before sync store is done initializing.
We can fire an event, Eg sync_stores_initialized which would note when notify client is ready to have data fetched.

No longer relevant as sync stores have been removed.


RCTView has a shadow set but cannot calculate shadow efficiently

Hi, running action button on ios gives that error.
Didn't happen on 2.0.14...
Anyone have an idea?
"react-native-action-button": "2.0.15",
"react": "^15.3.2",
"react-native": "0.37.0",

Hey guys... Any idea why I'm still having this problem in "react-native-action-button": "2.0.19"

Doesn't happen to me on 2.0.19 nor 2.0.18...

Still having this problem with 2.0.22

Me too.

Same here. Running 2.5.0.

Same here. On 2.5.0

In 2.6.0?
On Sun, Feb 26, 2017 at 7:34 PM +0100, "Kane Cochran"<EMAIL_ADDRESS>wrote:
Same here. On 2.5.0
—
You are receiving this because you modified the open/close state.
Reply to this email directly, view it on GitHub, or mute the thread.

all good in 2.6.0! i didnt see the new release.  thanks for the quick work!

I confirm that it works on 2.6.0 Thank you !!!!

Still a problem for me on 2.6.0 :(

I was too quick to judge. I still have a problem on 2.6.0 as well.
It's only eradicated if I chang the background of the items to something that doesn't have transparency.

The library itself shouldn't cause the warning any more. This is fixed.
If you use colors with transparency, the warning occurs again, of course. It has nothing to do with this library, but with RN itself.
If you want to get rid of the warning, either don't use transparent colors or set hideShadow to true.

Right-o..!
Any idea if there will be performance problems if we keep the transparency?

Don't think so. Just try it out :)

I got this warning too

Me too

I'm having this issue as well

in my case it solved by putting:
shadowOpacity: 0.9
The look is almost same but removes the warning.

@himelnagrana How you came on this solution? 🥇

Well it was in fact a "trial and error" Process. My point was opacity 1 and opacity 0.9 is hardly distinguishable but if in their code opacity==1 is considered to enforce a background color then i will pass. Luckily it worked for me.

This warning told us "Consider setting a background color to fix this".  i did and it worked for me

2016
2017
2018
2019
Same issue in year 2020 👎


Slider / Range Slider: list of issues

Reset & Wix Theme

[ ] Marks overlap handle (http://joxi.ru/zANGZXLIlOO4Or / http://joxi.ru/KAxNRDwc4LLz8m)

[ ] Error state should be removed from demo (design is not completed & it makes no sense to include it in the demo page)

[ ] Tooltip tail is not center aligned in left/right position (http://joxi.ru/l2ZE8Gyu8ZMz0m)

Wix Theme

[ ] Wrong hover state for the handle. We have shadow over the handle while Wix does not have it (http://joxi.ru/a2XEygkuyLK1DA)

[ ] Tooltip doesn't look according to Wix theme Wix Theme, current tooltip

General Issues

[ ] Left / Right arrow key behavior for axis="y-reverse"
Right arrow key -> sets slider/handle to max value
Left arrow key -> sets slider/handle to min value
Currently it works in opposite direction right sets to min / left sets to max which is not consistent.

[ ] Up / Down arrow key behavior for horizontal slider in RTL position
Up arrow key -> increase value
Down arrow key -> decrease value

Also, when changing value to undefined I would expect the slider to go to zero rather than staying on the current value.

notice after update that the value looks like 0.


Lambda expressions section's example is not illustrative

As String implements Comparable, Collections.sort with no parameters will perform the same action that all examples in the section, in a more concise and clear way.
Again, the Java Tutorial provides much more illustrative examples at:
https://docs.oracle.com/javase/tutorial/java/javaOO/lambdaexpressions.html
Sorting by specific fields is another way to provide a better example (which also flows well to explain method references).

+1

Collections.sort with no parameters will perform the same action that all examples in the section, in a more concise and clear way.

That's not exactly the case, because in my example I choose to compare b to a, not a to b. So the resulting order will be descending instead of the default ascending order, if you omit a custom comparator.
I decided to use sorting do demonstrate lambda expressions, because everyone is already familiar with this kind of stuff. The intention of this section is not to demonstrate the best solutions for sorting but to give a quick overview of the syntax of lambda expressions.
My guide should by no means replace the official docs, it's meant to serve as a quick introduction to Java 8 - something that the official docs cannot provide due it's length and details.


Handle paths with spaces

Without this change paths or files containing spaces would be split as separate arguments, which would result in a failure to the call of PyQt5.pyrcc_main e.g.:
PyQt5/pyrcc_main.py: File does not exist "/Users/xxx/path_before_space"

Where the rest of the path after the space is treated as the next argument and hence results in a 'File does not exist' error.
The fix is achieved by quoting the strings used for filepaths when building the command to run and then using shlex to split instead of only splitting on spaces.
This pull request has been tested on Mac OS X. It should behave the same on Linux as Mac OS X and as far as I can tell it should also work fine on Windows with the if sys.platform == 'win32': code path.

Not splitting on Windows is wrong, as per the documentation:

If passing a single string, either shell must be True (see below) or else the string must simply name the program to be executed without specifying any arguments.

For escaping the output/input filenames, pipes.quote can be used.
You also lost part of the changes from 9bb70a470183bd7d40210b7687659edc2e99b052.
So I think a better patch would be:
 pyqt_distutils/build_ui.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git i/pyqt_distutils/build_ui.py w/pyqt_distutils/build_ui.py
index 8f51183..32287d6 100644
--- i/pyqt_distutils/build_ui.py
+++ w/pyqt_distutils/build_ui.py
@@ -4,6 +4,8 @@ Distutils extension for PyQt/PySide applications
 """
 import glob
 import os
+import pipes
+import shlex
 import subprocess
 import sys

@@ -84,7 +86,7 @@ class build_ui(Command):
                 filename = os.path.split(src)[1]
                 filename = os.path.splitext(filename)[0]
                 dst = os.path.join(dst, filename + ext)
-                cmd = cmd % (src, dst)
+                cmd = cmd % (pipes.quote(src), pipes.quote(dst))
                 try:
                     os.makedirs(os.path.split(dst)[0])
                 except OSError:
@@ -92,7 +94,7 @@ class build_ui(Command):

                 if self.is_outdated(src, dst, ui):
                     try:
-                        subprocess.check_call([t for t in cmd.split(' ') if t])
+                        subprocess.check_call([t for t in shlex.split(cmd) if t])
                     except subprocess.CalledProcessError as e:
                         if e.output:
                             write_message(cmd, 'yellow')

I haven't done much Python development on Windows using subprocess and don't have a Windows machine handy for testing. I had seen a suggestion that splitting wasn't required on Windows but didn't look into the details any further, more than happy to take advice on Windows compatibility.
Thanks for pointing out I'd lost part of the earlier change.
The commit has been amended accordingly and should work with Python 2 and 3 (using pipes.quote and shlex.quote respectively).

Thank you.
The build_ui output was broken (it would print pyuic5 --from-imports %s -o %s), I fixed it.


Fails to build with luarocks on windows using luarocks included lua5.1

The default and simplest install option for luarocks on windows is to use lua5.1 provided with luarocks. This version of Luarocks is built with visual studio and does not build or link correctly with lua.  As the CMakeList.txt doesn't actually use the variables provided in the rockspec.  The result when attempting to run this command from the visual studio developer command prompt:
C:\> luarocks install luv
Installing https://luarocks.org/luv-1.6.1-2.rockspec...
Using https://luarocks.org/luv-1.6.1-2.rockspec... switching to 'build' mode
-- Building for: Visual Studio 11
-- The C compiler identification is MSVC 17.0.61030.0
-- The ASM compiler identification is MSVC
-- Found assembler: C:/Program Files (x86)/Microsoft Visual Studio 11.0/VC/bin/cl.exe
-- Check for working C compiler using: Visual Studio 11
-- Check for working C compiler using: Visual Studio 11 -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Warning: Did not find file Compiler/MSVC-ASM
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of void*
-- Check size of void* - done
-- Could NOT find LUAJIT (missing:  LUAJIT_LIBRARIES LUAJIT_INCLUDE_DIR)
-- Configuring done
-- Generating done
CMake Warning:
  Manually-specified variables were not used by the project:

    LUV_INSTALL_PREFIX
    LUV_LUA_INCDIR
    LUV_LUA_LIBDIR

-- Build files have been written to: C:/Users/harrisja/AppData/Local/Temp/luarocks_luarocks-source-luv-1.6.1-2-8800/luv-v1.6.1/build.luarocks

Microsoft (R) Microsoft Visual Studio 2012 Version 11.0.61030.0.
Copyright (C) Microsoft Corp. All rights reserved.
1>------ Build started: Project: ZERO_CHECK, Configuration: Release Win32 ------
1>  Checking Build System
1>  CMake does not need to re-run because C:/Users/harrisja/AppData/Local/Temp/luarocks_luarocks-source-luv-1.6.1-2-8800/luv-v1.6.1/build.luarocks/CMakeFiles/generate.stamp is up-to-date.
2>------ Build started: Project: uv, Configuration: Release Win32 ------
2>  Building Custom Rule C:/Users/harrisja/AppData/Local/Temp/luarocks_luarocks-source-luv-1.6.1-2-8800/luv-v1.6.1/CMakeLists.txt
2>  CMake does not need to re-run because C:\Users\harrisja\AppData\Local\Temp\luarocks_luarocks-source-luv-1.6.1-2-8800\luv-v1.6.1\build.luarocks\CMakeFiles\generate.stamp is up-to-date.
2>  fs-poll.c
2>  inet.c
2>  threadpool.c
2>  uv-common.c
2>  version.c
2>  async.c
2>  core.c
2>  dl.c
2>  error.c
2>  fs.c
2>..\deps\libuv\src\win\fs.c(394): warning C4996: 'umask': The POSIX name for this item is deprecated. Instead, use the ISO C++ conformant name: _umask. See online help for details.
2>          C:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\include\io.h(320) : see declaration of 'umask'
2>..\deps\libuv\src\win\fs.c(395): warning C4996: 'umask': The POSIX name for this item is deprecated. Instead, use the ISO C++ conformant name: _umask. See online help for details.
2>          C:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\include\io.h(320) : see declaration of 'umask'
2>  fs-event.c
2>..\deps\libuv\src\win\fs-event.c(87): warning C4996: 'wcsdup': The POSIX name for this item is deprecated. Instead, use the ISO C++ conformant name: _wcsdup. See online help for details.
2>          C:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\include\string.h(397) : see declaration of 'wcsdup'
2>  getaddrinfo.c
2>  getnameinfo.c
2>  handle.c
2>  loop-watcher.c
2>  pipe.c
2>  thread.c
2>  poll.c
2>  process.c
2>..\deps\libuv\src\win\process.c(515): warning C4996: 'wcsrev': The POSIX name for this item is deprecated. Instead, use the ISO C++ conformant name: _wcsrev. See online help for details.
2>          C:\Program Files (x86)\Microsoft Visual Studio 11.0\VC\include\wchar.h(1141) : see declaration of 'wcsrev'
2>  process-stdio.c
2>  Generating Code...
2>  Compiling...
2>  req.c
2>  signal.c
2>  stream.c
2>  tcp.c
2>  tty.c
2>  timer.c
2>  udp.c
2>  util.c
2>  winapi.c
2>  winsock.c
2>  Generating Code...
2>  uv.vcxproj -> C:\Users\harrisja\AppData\Local\Temp\luarocks_luarocks-source-luv-1.6.1-2-8800\luv-v1.6.1\build.luarocks\Release\uv.lib
3>------ Build started: Project: luv, Configuration: Release Win32 ------
3>  Building Custom Rule C:/Users/harrisja/AppData/Local/Temp/luarocks_luarocks-source-luv-1.6.1-2-8800/luv-v1.6.1/CMakeLists.txt
3>  CMake does not need to re-run because C:\Users\harrisja\AppData\Local\Temp\luarocks_luarocks-source-luv-1.6.1-2-8800\luv-v1.6.1\build.luarocks\CMakeFiles\generate.stamp is up-to-date.
3>  luv.c
3>c:\users\harrisja\appdata\local\temp\luarocks_luarocks-source-luv-1.6.1-2-8800\luv-v1.6.1\src\luv.h(19): fatal error C1083: Cannot open include file: 'lua.h': No such file or directory
4>------ Build started: Project: ALL_BUILD, Configuration: Release Win32 ------
4>  Building Custom Rule C:/Users/harrisja/AppData/Local/Temp/luarocks_luarocks-source-luv-1.6.1-2-8800/luv-v1.6.1/CMakeLists.txt
4>  CMake does not need to re-run because C:\Users\harrisja\AppData\Local\Temp\luarocks_luarocks-source-luv-1.6.1-2-8800\luv-v1.6.1\build.luarocks\CMakeFiles\generate.stamp is up-to-date.
4>  Build all projects
========== Build: 3 succeeded, 1 failed, 0 up-to-date, 0 skipped ==========

Error: Build error: Failed building.

Note that, while the underlying dependency builds fine, the script is unable to find lua.h because CMake thinks it is looking for LuaJIT when Lua is being provided.
Of particular note is the warning:
CMake Warning:
  Manually-specified variables were not used by the project:

    LUV_INSTALL_PREFIX
    LUV_LUA_INCDIR
    LUV_LUA_LIBDIR

and the note:
-- Could NOT find LUAJIT (missing:  LUAJIT_LIBRARIES LUAJIT_INCLUDE_DIR)

imply that luarocks is not able to tell luv which lua installation should be used at compile time. This means that it is assumed that the lua we will use is luajit.
I have noted that these bugs do not appear when attempting to install on a posix platform.  In that case CMake is able to detect the version of lua available to the system when LuaJit is not installed.
Any help with this issue would be appreciated.

I'm not a luarocks user and windows is not my primary development environment.  I'll happily accept a patch to the cmake to fix this.  It looks like the find_lua cmake function needs to take into account the luarocks environment variables. https://github.com/luvit/luv/blob/master/cmake/Modules/FindLua.cmake

This should be fixed now, re-open if you still have trouble.


chore: website update font and front page spacing

chore: website update font and front page spacing
What does this PR do?

Updates the font to Manrope
Adjusts the font size and heights
We add leading- twice due to:
https://github.com/tailwindlabs/tailwindcss/discussions/5977 since it
resets after you add md: or lg:
Slightly adjusts font size when using a smaller screen

Screenshot / video of UI

What issues does this PR fix or reference?

Closes https://github.com/containers/podman-desktop-internal/issues/376
How to test this PR?

Launch the website
See new font

Signed-off-by: Charlie Drage<EMAIL_ADDRESS>

Note: No changes needed to sections such as these:

As the spacing is already similar / same.
Also another note is that the line-height from the examples had incorrect spacing (1.9rem) which ended up being way too small / did not match penpot

thanks @cdrage for the new pull requests 👍


Issue 1507 address lint issues membersrvc/ca/tca.go

Address lint errors
Description

Addressing each lint issue in tca.go (listed out in #1286)

Minor, but while at it:

More consistent error- and trace-messages
Name functions/methods that are not (yet) implemented
Consistent capitalization of messages + gRPC
Reconcile the various references/aliases to Pre-Key (from PreK, pre-K, PreKeys, ...)
Remove temporaries

Motivation and Context
We are "joining forces" to improve on a few key code quality measures - and lint warnings/errors is one of these measures.
Fixes  #1507
ca/tca.go:164:9: if block ends with a return statement, so drop this else and outdent its block
ca/tca.go:336:2: don't use underscores in Go names; var preK_1 should be preK1
ca/tca.go:343:2: don't use underscores in Go names; var preK_0 should be preK0
ca/tca.go:348:2: var enrollmentIdKey should be enrollmentIDKey
ca/tca.go:413:3: don't use underscores in Go names; var v_str should be vStr

How Has This Been Tested?

golint + make all
Checklist:

[x] I have added a Signed-off-by
[x] Either no new documentation is required by this change, OR I added new documentation
[x] Either no new tests are required by this change, OR I added new tests
[x] I have run goimports, go vet, and golint. I have cleaned up all valid errors and warnings in code I have added or modified. These tools may generate false positives.  The goal is clean, consistent, and readable code.

Signed-off-by: JonathanLevi

LGTM
Reviewed-by: Greg Haskins<EMAIL_ADDRESS>


Release version 2023.3.1

No issues. Just a question. Is it possible to have a sensor on HA trigger
my Vivint alarm? I have a yolink door sensor on my shop in the back, that I
would like to trigger my vivint system.
On Wed, Mar 8, 2023 at 7:32 PM Nathan Spencer @.***>
wrote:

You can view, comment on, or merge this pull request online at:
https://github.com/natekspencer/hacs-vivint/pull/91
Commit Summary

47c74b1
https://github.com/natekspencer/hacs-vivint/pull/91/commits/47c74b107565fcf4ee56e6482fb1d9eceebe4684
Release version 2023.3.1
81593ef
https://github.com/natekspencer/hacs-vivint/pull/91/commits/81593ef3420d8cb33fabd09c7670daab89b94871
Add iot_class and loggers to manifest

File Changes
(1 file https://github.com/natekspencer/hacs-vivint/pull/91/files)

M custom_components/vivint/manifest.json
https://github.com/natekspencer/hacs-vivint/pull/91/files#diff-16b56d68cbcc67bc9e2a94f1bfcc11ccc8ad6e46aac4297162c8a5de3de63d8b
(10)

Patch Links:

https://github.com/natekspencer/hacs-vivint/pull/91.patch
https://github.com/natekspencer/hacs-vivint/pull/91.diff

—
Reply to this email directly, view it on GitHub
https://github.com/natekspencer/hacs-vivint/pull/91, or unsubscribe
https://github.com/notifications/unsubscribe-auth/ARSYXUCXJBDKSXEYZJLVG43W3EXJ7ANCNFSM6AAAAAAVUO4VCY
.
You are receiving this because you are subscribed to this thread.Message
ID: @.***>

--
Jason Hogan
Captain / EMT-B, Wilmer Fire Department
(469) 482-9994
|<PHONE_NUMBER>
| @.***  @.***>
1420 N> Goode Rd. Wilmer TX, 75172
https://maps.google.com/?q=1420+N>+Goode+Rd.+Wilmer+TX,+75172
Create your own email signature
https://www.wisestamp.com/create-own-email-signature/?utm_source=promotion&utm_medium=signature&utm_campaign=create_your_own&srcid=

No issues. Just a question. Is it possible to have a sensor on HA trigger my Vivint alarm? I have a yolink door sensor on my shop in the back, that I would like to trigger my vivint system.
…
On Wed, Mar 8, 2023 at 7:32 PM Nathan Spencer @.> wrote: ------------------------------ You can view, comment on, or merge this pull request online at: #91 Commit Summary - 47c74b1 <47c74b1> Release version 2023.3.1 - 81593ef <81593ef> Add iot_class and loggers to manifest File Changes (1 file https://github.com/natekspencer/hacs-vivint/pull/91/files) - M custom_components/vivint/manifest.json https://github.com/natekspencer/hacs-vivint/pull/91/files#diff-16b56d68cbcc67bc9e2a94f1bfcc11ccc8ad6e46aac4297162c8a5de3de63d8b (10) Patch Links: - https://github.com/natekspencer/hacs-vivint/pull/91.patch - https://github.com/natekspencer/hacs-vivint/pull/91.diff — Reply to this email directly, view it on GitHub <#91>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ARSYXUCXJBDKSXEYZJLVG43W3EXJ7ANCNFSM6AAAAAAVUO4VCY . You are receiving this because you are subscribed to this thread.Message ID: @.>
-- Jason Hogan Captain / EMT-B, Wilmer Fire Department<PHONE_NUMBER> |<PHONE_NUMBER> | @.*** @.***> 1420 N> Goode Rd. Wilmer TX, 75172 https://maps.google.com/?q=1420+N>+Goode+Rd.+Wilmer+TX,+75172 Create your own email signature https://www.wisestamp.com/create-own-email-signature/?utm_source=promotion&utm_medium=signature&utm_campaign=create_your_own&srcid=

This will be available soon

Awesome. Than you for all your hard work. It is really appreciated.
On Thu, Mar 9, 2023, 23:16 Nathan Spencer @.***> wrote:

No issues. Just a question. Is it possible to have a sensor on HA trigger
my Vivint alarm? I have a yolink door sensor on my shop in the back, that I
would like to trigger my vivint system.
… <#m_-4304026436936295575_>
On Wed, Mar 8, 2023 at 7:32 PM Nathan Spencer @.> wrote:
------------------------------ You can view, comment on, or merge this pull
request online at: #91
https://github.com/natekspencer/hacs-vivint/pull/91 Commit Summary -
47c74b1
https://github.com/natekspencer/hacs-vivint/commit/47c74b107565fcf4ee56e6482fb1d9eceebe4684
<47c74b1
https://github.com/natekspencer/hacs-vivint/pull/91/commits/47c74b107565fcf4ee56e6482fb1d9eceebe4684>
Release version 2023.3.1 - 81593ef
https://github.com/natekspencer/hacs-vivint/commit/81593ef3420d8cb33fabd09c7670daab89b94871
<81593ef
https://github.com/natekspencer/hacs-vivint/pull/91/commits/81593ef3420d8cb33fabd09c7670daab89b94871>
Add iot_class and loggers to manifest File Changes (1 file
https://github.com/natekspencer/hacs-vivint/pull/91/files
https://github.com/natekspencer/hacs-vivint/pull/91/files) - M
custom_components/vivint/manifest.json
https://github.com/natekspencer/hacs-vivint/pull/91/files#diff-16b56d68cbcc67bc9e2a94f1bfcc11ccc8ad6e46aac4297162c8a5de3de63d8b
https://github.com/natekspencer/hacs-vivint/pull/91/files#diff-16b56d68cbcc67bc9e2a94f1bfcc11ccc8ad6e46aac4297162c8a5de3de63d8b
(10) Patch Links: -
https://github.com/natekspencer/hacs-vivint/pull/91.patch
https://github.com/natekspencer/hacs-vivint/pull/91.patch -
https://github.com/natekspencer/hacs-vivint/pull/91.diff
https://github.com/natekspencer/hacs-vivint/pull/91.diff — Reply to this
email directly, view it on GitHub <#91
https://github.com/natekspencer/hacs-vivint/pull/91>, or unsubscribe
https://github.com/notifications/unsubscribe-auth/ARSYXUCXJBDKSXEYZJLVG43W3EXJ7ANCNFSM6AAAAAAVUO4VCY
https://github.com/notifications/unsubscribe-auth/ARSYXUCXJBDKSXEYZJLVG43W3EXJ7ANCNFSM6AAAAAAVUO4VCY
. You are receiving this because you are subscribed to this thread.Message
ID: @.>
-- Jason Hogan Captain / EMT-B, Wilmer Fire Department<PHONE_NUMBER> |
(469) 222-7106 | @.*** @.***> 1420 N> Goode Rd. Wilmer TX, 75172
https://maps.google.com/?q=1420+N>+Goode+Rd.+Wilmer+TX,+75172 Create
your own email signature
https://www.wisestamp.com/create-own-email-signature/?utm_source=promotion&utm_medium=signature&utm_campaign=create_your_own&srcid=
This will be available soon
—
Reply to this email directly, view it on GitHub
https://github.com/natekspencer/hacs-vivint/pull/91#issuecomment-1463288513,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/ARSYXUCSAUENPM3AMMO5P63W3K2LXANCNFSM6AAAAAAVUO4VCY
.
You are receiving this because you commented.Message ID:
@.***>


Update free-programming-cheatsheets.md

What does this PR do?
Add resource(s)
For resources
Description
Add ggplot2 library  cheat sheet for R
Why is this valuable (or not)?
How do we know it's really free?
For book lists, is it a book? For course lists, is it a course? etc.
Checklist:

[x] Read our contributing guidelines.
[x] Search for duplicates.
[x] Include author(s) and platform where appropriate.
[x] Put lists in alphabetical order, correct spacing.
[x] Add needed indications (PDF, access notes, under construction).
[x] Used an informative name for this pull request.

Follow-up

Check the status of GitHub Actions and resolve any reported warnings!

add R cheat sheet

@eshellman Could you please review my work?

please resolve conflicts.

@eshellman I have resolved the conflicts.