sysdig-kmp-preempt-0.26.5_k5.3.18_lp152.18-lp152.2.32 >  A ^]/=„2)%$\t,uU ,_.sXϢɔ{ڎfMiAV6)t*Frn8y|o B⒒.4 KbA."t Ç'_GK%T"8l++kf AP_h@FHXZ`'yTr7z;HSW%yq)8??YRQv/@rWC{Satf8a5b21749eda7dfae94ef5378a6a550631320da4db59511c1eb52c57da8b668bc33175bf7f570c9bb5a08c50926c885bd63d39a&^]/=„s8тi63ߦ#)|N[Ww2EJ >1 xyIҗh npbf==\T8\Z%)C]>ڢ[' mz >lc I֪'b+y"I$:߇')[ _KsJM?HQG%0z+8~ ;ҁNkF\_~nlCsxe)(8!)©#'ƤHl >pJ~?~d- 8 Q<@HL_hs      &HTW@WvWHLp(q8x&9&:9&>zy?z@zGzHzIzXzYz\{4]{@^{nb{c|wd|e|f|l|u|v|}~!~,~0~R~T~X~g~h~l~r~Csysdig-kmp-preempt0.26.5_k5.3.18_lp152.18lp152.2.32System-level explorationSysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce. With a little Lua cherry on top.^] build70 openSUSE Leap 15.2openSUSEApache-2.0https://bugs.opensuse.orgSystem/Monitoringhttp://www.sysdig.org/linuxx86_64nvr=sysdig-kmp-preempt-0.26.5_k5.3.18_lp152.18-lp152.2.32 wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then INITRD_IN_POSTTRANS=1 /bin/bash -${-/e/} $wm2 --add-kmp $nvr finvr=sysdig-kmp-preempt-0.26.5_k5.3.18_lp152.18-lp152.2.32 rpm -ql $nvr | sed -n '/\.ko\(\.xz\)\?$/p' > /var/run/rpm-$nvr-modulesnvr=sysdig-kmp-preempt-0.26.5_k5.3.18_lp152.18-lp152.2.32 modules=( $(cat /var/run/rpm-$nvr-modules) ) rm -f /var/run/rpm-$nvr-modules if [ ${#modules[*]} = 0 ]; then echo "WARNING: $nvr does not contain any kernel modules" >&2 exit 0 fi wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then printf '%s\n' "${modules[@]}" | /bin/bash -${-/e/} $wm2 --remove-kmp $nvr fi AA큤^\^\^]e39d58feea15613cb0b3392b60891b0bd5d0ef8eb2daccc66939820109c4a689rootrootrootrootrootrootsysdig-0.26.5-lp152.2.32.src.rpmkmod(sysdig_probe)multiversion(kernel)sysdig-kmpsysdig-kmpsysdig-kmp-preemptsysdig-kmp-preempt(x86-64)sysdig-kmp-preempt-k5.3.18_lp152.18      /bin/sh/bin/sh/bin/sh/bin/shcoreutilsgrepksym(preempt:__alloc_percpu)ksym(preempt:__check_object_size)ksym(preempt:__class_create)ksym(preempt:__cpu_online_mask)ksym(preempt:__cpu_possible_mask)ksym(preempt:__cpuhp_remove_state)ksym(preempt:__cpuhp_setup_state)ksym(preempt:__fdget)ksym(preempt:__fentry__)ksym(preempt:__get_free_pages)ksym(preempt:__init_waitqueue_head)ksym(preempt:__kmalloc)ksym(preempt:__per_cpu_offset)ksym(preempt:__put_user_8)ksym(preempt:__stack_chk_fail)ksym(preempt:__task_pid_nr_ns)ksym(preempt:__x86_indirect_thunk_rax)ksym(preempt:_copy_from_user)ksym(preempt:_copy_to_user)ksym(preempt:_raw_spin_lock)ksym(preempt:alloc_chrdev_region)ksym(preempt:cdev_add)ksym(preempt:cdev_del)ksym(preempt:cdev_init)ksym(preempt:class_destroy)ksym(preempt:copy_user_enhanced_fast_string)ksym(preempt:copy_user_generic_string)ksym(preempt:copy_user_generic_unrolled)ksym(preempt:cpu_number)ksym(preempt:cpumask_next)ksym(preempt:current_task)ksym(preempt:device_create)ksym(preempt:device_destroy)ksym(preempt:fget)ksym(preempt:find_pid_ns)ksym(preempt:for_each_kernel_tracepoint)ksym(preempt:fput)ksym(preempt:free_pages)ksym(preempt:free_percpu)ksym(preempt:from_kgid_munged)ksym(preempt:from_kuid)ksym(preempt:from_kuid_munged)ksym(preempt:init_pid_ns)ksym(preempt:init_task)ksym(preempt:kernfs_path_from_node)ksym(preempt:kfree)ksym(preempt:ktime_get_real_ts64)ksym(preempt:memcpy)ksym(preempt:memmove)ksym(preempt:module_layout)ksym(preempt:mutex_lock)ksym(preempt:mutex_unlock)ksym(preempt:nr_cpu_ids)ksym(preempt:param_ops_bool)ksym(preempt:param_ops_uint)ksym(preempt:pid_task)ksym(preempt:printk)ksym(preempt:probe_kernel_read)ksym(preempt:pv_ops)ksym(preempt:remap_pfn_range)ksym(preempt:sme_me_mask)ksym(preempt:sockfd_lookup)ksym(preempt:strlcpy)ksym(preempt:strlen)ksym(preempt:strncpy)ksym(preempt:strnlen)ksym(preempt:synchronize_rcu)ksym(preempt:synchronize_srcu)ksym(preempt:task_active_pid_ns)ksym(preempt:task_cputime_adjusted)ksym(preempt:tracepoint_probe_register)ksym(preempt:tracepoint_probe_unregister)ksym(preempt:tracepoint_srcu)ksym(preempt:unregister_chrdev_region)ksym(preempt:vfree)ksym(preempt:vmalloc)ksym(preempt:vmalloc_to_pfn)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)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.0.4-14.6.0-14.0-15.2-1sysdig-kmp-preempt-k5.3.18_lp152.184.14.1^S^g@]A\Q\d[s[U@[0@Z4@Z@Z|;YdYYY]XXf@X@X^c@X*WF@W@Wx@Wc@W @V@V_VuFVs@VrVrVm]V9@V9@U5@UUF U@Marcus Meissner Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal mpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.commpluskal@suse.comrpm@fthiessen.derpm@fthiessen.dempluskal@suse.comboris@steki.netjoop.boonen@opensuse.orgjoop.boonen@opensuse.org- sysdig-32bit.patch: make build on 32bit- Update to version 0.26.5: * Fixed segfault that happens at startup (#1475, #1528) * Fixed memory leaks from certain thread/socket operations (#1491) * Fixed handling of SEND_SIG_NOINFO in the eBPF driver (#1493) * Fixed a regression in reading certain partial container events from scap files (#1513) * Updated use of Kubernetes APIs to support v1.16 (#1521) * Fixed rare driver deadlock that could occur during a context switch (#1522) * Added more detail to probe loader error message (#1541)- Update to version 0.26.4: * Prevent double-definition of ASSERT macro * Added fillers for chmod syscalls (#1472) * Added support for reporting cpu usage per docker cpuset (#1473) * Fixed build error on older Linux kernels (#1477) * Fixed driver build for RHEL 7.7/4.13+ w/CONFIG_VIRT_CPU_ACCOUNTING_GEN (#1471) * Fixed cmake to look for pkg-config before building grpc (#1470) * Fixed printing of strings (#1466) * readv input parsing improvements (#1463) * Suport Kubernetes liveness/readiness probes [#1320] * Fix edge cases in handling clone() and prlimit() system calls [#1401, #1465] * Stability and performance fixes - Drop no longer needed patches: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.26.1: * Changes to build the kmod with 5.1 kernels [#1413] * Explicitly disable psl to address build failures on MAC OS [#1417] * Fix handling of container metadata in "infra" events [#1418] - Changes for version 0.26.0: * Perform docker metadata fetches asynchronously: When new containers are discovered, fetch metadata about the container asynchronously, which should significantly reduce the likelihood of dropped system call events. [#1326] [#1378] [#1374] [#1381] [#1373] [#1382] [#1388] [#1389] [#1384] [#1392] [#1396] [#1411] * Add field to display time in ISO 8601 UTC [#1317] [#1360] * Performance improvements of ring buffer processing [#1372] * Support major/minor device numbers for fd events [#1315] #1383] * Add the ability to prepend encoded log severity in the log message [#1327] * Raise the iov limit in eBPF [#1390] * Changes to pull user event logging out into a separate component. [#1375] * Log a debug message when looking up an IP address of an incomplete container [#1398] * Support cri-o container metadata caching [#1399] * Logging API with lazy parameter evaluation [#1394] * Support BPM container type [#1319] * Fix bug in fullcapture range check [#1386] * Allow chisels to receive the full content of big buffers. [#1361] * start the analyzer before forcing next for a scap file [#1366] * Create a grpc_channel_registry for all channels [#1369] * Modified the behavior of fullcapture port range [#1370] * Check file before dereferencing [#1397] * Fix build for older kernels (<3.9) [#1400] * Added -fno-stack-protector to avoid clang errors [#1401] * Addl loop prevention for traverse_parent_state [#1411] * Add interfaces for async metrics collection [#1346] * Use epel 7-11 (7-9 is no longer available) [#1362] * Make some global variables related to fetching container state thread-local [#1356] * Allow downloading prebuilt modules without SSL verification [#1358] * add test helper to container manager. [#1365] * Cleanup old docker images after building a new ebpf-probe-builder [#1367] * valgrind clean for analyzer end to end test [#1387] * flush flags change to new namespace, add code enabling easy use of sinsp_threadinfo in std::set/map [#1395] * add friend class for unit testing [#1406] - Changes for version 0.25.0: * Support Linux 5.0 * CRI container runtime support * runtimeSpec.linux returned by containerd is an object, not an array (#1343) * Fix gRPC build with gcc 7 (#1322) * CRI-O container support (#1310) * Fix check for Docker pause containers [SMAGENT-1305] (#1306) * Detect CRI pod sandbox containers (#1297) * Container Runtime Interface support (#1277) * Prebuilt probes * Prebuild minikube kernel modules (#1294) * Build probe modification to include Fedora-Atomic. [SMAGENT-1251] (#1293) * Fix for newer versions of LXC not being detected (#1345) * [SMAGENT-1433] pull legacy GCC artifacts from local cache as debian no longer supports (#1342) * Use TBB_INCLUDE_DIR for consistency w/ falco agent (#1329) * SMAGENT-1297: Rebuild gcc-plugins before building kernel module (#1305) * Modified BPF probe builder (#1301) * Call set*ent() before reading the user/group NSS database (#1341) * Properly initialize default settings for tracers (#1339) * Fix bpf ptrace filler (#1338) * Fix potential memory leak in libelf (#1337) * Fix case where fclose could be called twice. (#1330) * Handle mmap failure gracefully (#1324) * Add stream event details in csysdig output (#1335) * SMAGENT-1400: Make sinsp_logger thread-safe (#1333) * Never drop socket syscalls to ensure we have fdinfo for subsequent binds. SMAGENT-1270 (#1312) * Infer fd info for sendto system call [SMAGENT-1282] (#1304) * Async framework base [SMAGENT-1247] (#1303) * Handle events for unknown threads after scap start [SMAGENT-1082] (#1296) * Add ability to print filtercheck field names only (#1288) - Add patches to fix build issues with shared components: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.24.2: * Added the ability to specify a set of ports where data is captured with bigger snaplen (20000) (#1256) * Made fd resolution work for getsockopt (#1280) * Check getsockopt event before accessing it (#1284) * Fixed snprintf placeholder for size_t/{u,}int64_t (#1279) * Disabled reading environment from /proc by default (#1272) * Excluding suppressed processes during initial /proc scan (#1269) * Fixed Windows build in CYGWIN environment (#1270) * Changes to eliminate warnings with gcc 5.4 (#1271) * Trigger build errors for extra compiler warnings (#1265) * Handling thread table overflows (#1263) * Deleted threadinfos that we failed to add to the thread table (#1260) * Reduce CPU usage (#1261) * Lua parser interfaces (#1254) * Fixed a compile issue when trying to make the project using VS2017 on Windows 10 (#1248) * Added ifdef guards to socket options with (#1257),(#1258) * Improved getsockopt()/setsockopt() support (#1188) * Fix fd.net comparisons with in operator (#1252) * Only check out sysdig for initial invocation (#1251) * Build probe modules only with sysdig directory (#1244) * Fixed spelling and copy/pased comment errors (#1250) - Changes for version 0.24.1: * Fix struct packing - Changes for version 0.24.0: * Switch to Apache 2.0 License: All userspace code moves from GPL to Apache 2 license. Kernel module switches to dual-license MIT + GPLv2. Enjoy! [#1233] [#1242] * Complete IPv6 Support. Sysdig previously had partial IPv6 support, but this release rounds out full support for ipv6 addresses in filter fields, csysdig, etc. [#1204] * loginuid support. Add user.loginuid & user.loginname to track login users, which do not change despite sudo/su operations. [#1189] [#1214] [#1218] [#1219] [#1227] * Track connections by domain name: New fields fd.*ip.name allow matching connection ips with resolved domain names. [#1213] * Add endswith filter to support suffix matching on strings [#1209] * Add minikube support to the kernel module probe loader script [#1205] * Improve error string return handling at startup/when reading capture files [#1215] * Disable boot2docker kernel module builds for pre-built kernel modules [#1232] * eBPF Support Improvements/Fixes [#1235] [#1236] [#1237] [#1239] * Improve/fix windows build [#1242] * Don't drop setns events when in dropping mode [#1198] * At startup, wait a bit for an existing sysdig-probe module to be unloaded before loading a new one [#1201] * Support extracting container metadata for containers spawned with just an image id and not an image name [#1207] * Properly extract image metadata when the image contains a host:port component [#1206] * Minor compilation bug fixes [#1212] * Small packaging fixes [#1228] [#1229] [#1231] * Fix an inconsistency when writing capture files containing unknown fds [#1234]- Update to version 0.23.1: * Fix ia32 check on BPF for 4.14 and 4.15 kernels * Adjust wrong events lengths when reading older captures [#1195] * More flexible captures: the flexibility of the capture format/reading process has been improved to allow backward and forward-compatibility [#1163] * Support logging elapsed time on tracers [#1186] * Fixes on custom containers support [#1170] * Avoid invalid free() calls around m_suppressed_pointers [#1184] * Properly set the address list total length when reading a capture [#1185]- Update to version 0.22: * eBPF support for sysdig: eBPF as the instrumentation backend in kernel space (beta) * Parsing an argument passed to sysdig-probe-loader as a custom URL for the kernel module like -e SYSDIG_PROBE_URL=http://54.183.253.176:52354 [#1085] * Several changes to expand the set of events that are skipped by falco, and to centralize the logic for knowing which events to skip [#1105] * Improved proc lookup in libsinsp [#1107] [#1110] [#1112] * Improved performance [#1126] [#1120] [#1121] [#1137] * In dropping mode, drop events that don't change system state [#1123] * Introduce non-STL thread table API [#1142] * Add the ability to ignore events by process name (comm). At the scap level, ignoring is by tid. At the sinsp level, as threads are added/removed from the thread table the comm is checked against a set of comms and if found the tid is added to the scap-level ignore hash table [#1139] * The container_manager can now receive callbacks to call when a new container is detected or an inactive one is removed [#1133] * Add support for adding custom container types alongside Docker etc (on sinsp level) [#1149] * Parse and store three new container_info fields: repository, tag and digest [#1127] * Skip proc scan in sinsp_dumper w/ threads_from_sinsp=true [#1164] * Allow k8s filterchecks with analyzer [#1160] * When creating the sysdig docker image, add the ability to directly set the sysdig version via the environment variable SYSDIG_VERSION [#1166] - Drop upstreamed patch: * sysdig_proto_ops_getname.patch- Patch sysdig_proto_ops_getname.patch to fix build - Seth Forshee : Update for proto_ops.getname() prototype changes in Linux 4.17 (#1114)- Update to version 0.21.0: * Track Versioning in Capture Files: With this release, we will increment the pcap major/minor version in capture files when a release adds new event types, additional event fields, etc. that are incompatible with earlier sysdig versions. [#1081] [#1084] * Add s390x as a platform using Docker [#1029] * When saving container information, also store certain mesos-related environment information associated with the first process in the container [#1021] [#1057] * New filtercheck fd.connected returns whether or not a network connection file descriptor is actually bound to a remote endpoint. Think of udp sockets that only use sendto() vs udp sockets that use connect() and then send(), or tcp sockets that have been created but not connect()ed yet. [#1051] * New filtercheck fd.name_changed is true when an event changes the connection information for a connection fd. This can occur in some cases such as udp connections where a connect() changes the connection information for a fd. * Make the thread table size configurable via sinsp::set_max_thread_table_size() [#1056] * Add support for new AWS Linux 2 AMI [#1058] * Add process group id to execve events [#1044] [#1080] * Expand the set of system calls returned by the driver when in dropping mode [#1075] * Handle AT_FDCWD arguments to linkat, openat, etc. and resolve the path relative to the cwd [#1020]- Modernise spec file using spec-cleaner- Update to version 0.20.0: * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966] * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990] * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982] * Reduce inactive container scan time from 20 minutes to 30 seconds [#985] * Added the ability to parse and represent RAW sockets [#991] * Handle finit_module syscall [#996] [#1001] * Add error message when scap_open() is called with incorrect mode [#997] * Use explicit versions for all Docker API Endpoints [#1000] * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016] * Add support for bpf/seccomp syscalls [#1031] [#1033] * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]- Update to version 0.19.1: * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS - Changes for version 0.19.0: * Add per-cpu counters when a tracepoint is hit [#947] * mq_unlink syscall reports as ptrace [#927] * Fixed copy-paste typo [#946] * expose the event masking/unmasking mechanism at the inspector level [#951] * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952] * Various improvements and fixes for Sysdig Inspect - Changes for version 0.18.0: * Changed language of CLA to also cover government contributions [#902] * Support mapped container docker networking mode, currently used by k8s pods [#922] * Allow an external event capture dumper object to be used together with an inspector object [#912] * Handle reading large execve args/env that might otherwise cause a page fault [#920] * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935] * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934] * Small README changes [#936] * Support additional flags to clone() syscall [#909] * Support page faults as events [#904] * Support for upcoming visualization product [#931] * Compilation fixes for sysdig monitor agent [#942] * Fix minor problems found by valgrind [#938] * Fix crash when reading large messages from docker daemon [#932] * Better cleanup of failed installation of the sysdig driver under coreos [#926] * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914] * Fix IN operator so it works with non-string values [#913] * fix compile errors with newer versions of libcurl [#895] [#911] * fix compile errors when O_DIRECTORY not defined [#907] * Use session id, not process group id, for proc.sid [#904] [#905] * Small docs fixes related to container.mount.* [#901] * Update installation script to use latest version of EPEL repository [#897] - Drop no longer needed sysdig-curlbuild.patch- Fix building with recent curl (gh#draios/sysdig#895): * sysdig-curlbuild.patch- Update to version 0.17.0 (boo#1051562): * New features: + Support netlink sockets [#809] * Bug fixes: + Fix a bug on cgroups parsing that prevented sysdig to start [#835] + Allow sysdig to read k8s state from very large k8s environments [#856] + Improve compatibility with older linux kernels [#889] + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]- Update to version 0.16.0: * New features: + support for Kernel 4.11 + sysdig -N is now the default option, server port decoding can be reenabled with -R + Decode unshare syscall * Bugfixes: + Fix rkt detection for containers created before sysdig runs + Fix container detection if docker itself is running inside a container + Fix detection of lxc containers + Fix compilation issues on RHEL5 + Fix memory leak on spy_users chisel- Update to version 0.15.1 (boo#1032025): * Bug fixes: + Fixed driver compilation issues on armv6l + Fixes on Kubernetes support + Regression on rkt detection #748 + Fixed high cpu usage when sysdig was used with -M parameter, #783 + Fixed a memory leak #772- Update to version 0.15.0 * New Features + Support for Linux Kernel 4.10 + Use /proc//status instead of custom ioctl to get process vpid for kernels >= 4.1 * Bug fixes + Various fixes on Kubernetes ingestion + Fix some happening deadlocks in the driver when ioctl were exiting with error + Fix mkdir and rmdir events, they were skipped in case of page faults + Bugfix on topports_server chisel + Avoid some cases of infinite loop when evaluating filters like proc.aname * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734- Update to version 0.14.0: * JSON output is not: an object per event separated by newline, instead of objects inside array as before. * New filter proc.pcmdline, which represents the full command line (proc.name + proc.args) of the parent of the process generating the event * Fixes for kernel version 4.9.3 * Improved detection of Mesos containers * Fix compilation with HAS_CAPTURE disabled on Linux * Fixes for merged captures support - Add sysdig-no_return_random.patch - Enable building on more platforms- Update to version 0.13.0 (boo#1017181): * Ability to open concatenated capture files * evtin.* fields can be used also for displaying now * Fix driver for Kernel 4.9 * Fix on IPv4 mapped IPv6 parsing * Fix memory leak #694 * Fix issue #687 about connecting to an K8s API server via HTTPS- Update to version 0.12.1: * Compilation issues when using non-bundled OpenSSL #672 * Compilation issues under S390 architecture * Various issues on k8s parsing * Stale thread info when parsing processes within containers #665 * Avoid getting cwd from driver, causes issues on Kernel 4.8 - Changes for version 0.12.0: * New filters container.mount.* to match container mount points * New filter container.privileged to match containers running in privileged mode * Support latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available * Added glob operator for strings, works as classic shell glob path matcher * Added pmatch operator * Add less package on docker image - Drop upstreamed sysdig-do-not-use-private-jq-api.patch - Enable building on s390x- Use current macros for KMP building * drop sysdig-kmp-preamble - Use exclusivearch instead of excluding architectures- Update to version 0.11.0: * Support for tracers. A way to add user level events to sysdig stream. Seeannouncement blog post. * New csysdig views: Traces List, Traces Summary, Traces Spectogram * New evtin.* and span.* filters startswith operand for strings, ex: fd.name startswith /etc * evt.is_open_{read,write} fields, true or false if an event is an open() in read or write * Improved performances of Kubernetes metadata parsing. * Bug fixes for IPv6 - Add sysdig-do-not-use-private-jq-api.patch to allow building with system JQ- Update to version 0.10.1: * Minor bugfixes, mostly related to Kubernetes and Mesos parsing- Update to version 0.10.0: * setsid event * proc.sid filter field: the session id of the process generating the event * proc.sname filter field: the name of the current process session leader * --force-term-compat command line option: try to configure simple terminal * settings (xterm-1002) that work better with terminals like putty * Many minor bugfixes * builds with gcc6 (boo#985121) - Use pkgconfig() style dependencies - Build with lua-5.1 as builds fail with lua-5.2 and later- Update to 0.9.0 * Mesos and Marathon support: + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps, arathon Groups + -m sysdig/csysdig parameter to specify URLs for Mesos Master Marathon API + -pm sysdig parameter to get a Mesos-friendly event output + Filter fields: mesos.task.name, mesos.task.id, mesos.task.label, mesos.task.labels, mesos.framework.name, mesos.framework.id, marathon.app.name, marathon.app.id, marathon.app.label, marathon.app.labels, marathon.group.name, marathon.group.id * icontains filter comparison operator: case-insensitive string comparison * Support for SSL based authentication and bearer token authentication against the Kubernetes API server. Previously, SSL was just supported for CA verification. See the updated documentation for -K * New actions on csysdig views: lsof and renice * New network filter fields that support a CIDR notation (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet- Update to 0.8.0 * Bug fixes + Better terminal mouse handling for csysdig + Minor bugfixes * New and updated features + rkt support (when running sysdig in a container, bind mounting the rkt directory is necessary, e.g. -v /var/lib/rkt:/host/var/lib/rkt:ro for Docker) + chroot event + container.type: the container type, e.g. docker or rkt + Prebuild sysdig-probe for Debian kernels- Update to 0.7.1 * Fix sysdig-probe compilation for kernel < 3.4.0 * Fix compilation on OSX - Changes for 0.7.0 * Fix sysdig-probe for kernel 4.4 * Fix a remotely possible deadlock during ioctl calls * Fix Kubernetes support when data returned from the API server is particularly big * Minor bugfixes * Spectrogram views in csysdig: spectro_all (System call latency spectrogram) and spectro_file (File I/O latency spectrogram) * Ability to authenticate to a Kubernetes API server using a certificate, via -K or --k8s-api-cert=. Can also be specified via the environment variable SYSDIG_K8S_API_CERT * Ability to sort columns in csysdig views using the keyboard * --filter-proclist: apply the filter to the process table * -M: add the possibility to stop collecting after X seconds evt.latency.quantized: 10-base log of the delta between an exit event and the correspondent enter event evt.latency.human: delta between an exit event and the correspondent enter event, as a human readable string (e.g. 10.3ms)- Fix .spec file bug which was causing Frankenstein kernel modules: https://github.com/draios/sysdig/issues/496#issuecomment-165929462- Exclude archs on which build fails- Fix whitespace issues in .spec and .changes files - Remove duplicate %{_datadir} directory from %files- Update to 0.6.0 * Full support to Kubernetes, even when saving events to a trace file * semget system event * access system event * Automatically build sysdig-probe for boot2docker releases * Properly filter process table serialization in a trace file when a process filter is used * Some csysdig actions now ask the user for confirmation * various bugfixes * drop GH_496_fix.patch- Update to 0.5.1 * Fix connection to HTTPS Kubernetes API servers * Properly compile bundled OpenSSL * Fix sysdig-probe build on Linux 4.3 * Minor bugfixes - Changes for 0.5.0: * Full Kubernetes support! * Add a convenient USE_BUNDLED_DEPS CMake option to enable/disable all bundled dependencies at once. * New build/runtime dependencies: libb64, libcurl, openssl. - Add GH_496_fix.patch - Update dependencies and not use anything bundled- Updated to 0.4.0, notable changes: * Support ia32 emulation on 64bit kernels * HTTP chisels now support UNIX sockets (e.g. Docker API) * New events: mount, umount * Support Docker containers when running in a different cgroup root layout * csysdig view actions: press F7 or F8 while inside a csysdig view to see what actions are supported- Updated to 0.2.0, notable changes: * New version scheme * Update ncurses so it will compile on GCC 5 * Don't use GCC 5 inside the Docker container, because older kernels are still not ready * Support CPU hotplug * Fix improper access to socket structure during accept() * Docker image now includes the RUN label to make it easier to run sysdig on Atomic Linux * New events: semop, semctl, ppoll * Port numbers will be automatically converted to service names unless -N is specified- Use proper cmake macros - Remove conditions around fdupes as package does not build for old releases anyway - Enable parallel build- updated from 0.1.99 to 0.1.102 - notable changes: * Support for decoding setns and flock syscall * Parse O_CLOEXEC flag on open and related syscalls * Parse CLONE_NEWUSER flag on clone * Support truncated tracefiles * Now sysdig can rotate tracing file when capturing, using -C, -e, -W, -G * Better extraction/filtering capabilities for event related to multiple file descriptors, like poll * Precompiled kernel modules for older coreos releases * This release introduces csysdig, the awesome ncurses user interface for sysdig * Support for intercepting signals via the signaldeliver event: parameters are source pid, destination pid and signal type * Docker container ships with GCC 4.8 other than the latest from Debian, to increase compatibility * echo_fds chisel has a better formatting * Correctly show container output even when renaming containers on Docker >= 1.5- Cleaned and corrected the spec file- Cleaned the spec file up - Build version 0.1.99/bin/sh/bin/sh/bin/sh0.26.50.26.5_k5.3.18_lp152.180.26.5_k5.3.18_lp152.18-lp152.2.320.26.5_k5.3.18_lp152.18-lp152.2.325.3.18-lp152.18-preemptextrasysdig-probe.ko/lib/modules//lib/modules/5.3.18-lp152.18-preempt//lib/modules/5.3.18-lp152.18-preempt/extra/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Leap:15.2/standard/9d4dd973a9a1189528989728348f2d08-sysdigcpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=5f7b0dc9872aa926768ae4a3c744ad309992d95e, not stripped if test -x /usr/lib/module-init-tools/regenerate-initrd-posttrans; then /bin/bash -c 'set +e; /usr/lib/module-init-tools/regenerate-initrd-posttrans' fi/bin/shpackageand(kernel-preempt:sysdig)kernel-preemptutf-80836584883f5f027114ac5c0cd23413db8a8b3d3ea93f15174d3e3e31614facd?`7zXZ !t/] crt:bLL C΋msPu⩅ l mؗ@fw{ ##_S rLXvI3}9gGKu{ReGftD<>'>Js/ɱU~B{.%5Jyw=$$<]\T48X%ڊ\zAb1@6u&G (.?· v$ȹKfvsI<MQg2.{â׫E0(^q) 2Jc^Hϔ?}fWF6clj}zȸeh_gBi+؄[^rt Gշ_E,Y8c,m~qsU׌:&jX)!fwݱ `XiZ}"V!i|BH0=*&5GhL\_nBw-giN1%R-8pxrF,Wl?/K~Stij.BuZb>Kf!\ZdP{Yq|%cHd]ǎjX[?8;y$Z+$E0R&!Ԁ)|T" [)<|J s*A} =l8k"?da |=\VS%" fCU83styww 9u|\?-5~ ~g+V6vz9 u o*)8pPe2#&i.(^$YyM:7fMɠA}76j{FB'YĿY.!My4eߠ.rJ qHJB ,2ϑXZ 5.pI%*ٛ k^_ cŸK6o7VSnxÕsHh $(XtR䣿ώ`"Oвj TC!䝽6G$f0,O[c%ۤi) 1Ű{#v42$d/Q݄9sO[[ԜFAzG,An)T@[;i75ffBk%F! 5CU%uD"J @K@KSk=dAL=;UA6o~1+xNdq+50`Jhr#. Q'j.ޥThL>kV@,ϢEbx*YVgtd_d4b,4HNi@[Ƥ??Mw8ܛ)MW\`Zq-hy^gCJ5t~Fd6Ǝ.fX ˋD=_[їwNDӁst5*=z؊#f2\< tIfẊS `?vB=&pI_՟ŸG: j4`g.h'[ vQK+a=B*#jH7^] zydAAjֳ> cD)D# # &zYx^43ޔNށ~A `{gqU5ٰPW 4Ê!`̧FzFŐq*z+#B,/jjCm ju(+gK 33v24 8۶]XQ`'sZax.x[$*9՝.X^:{!-$8tH1MWc|O?\v(3ͬ+SyWij/Uz>E;~2^b1+ ;c@#>+,*bAdgU_umOtBեW,-ɒ`u$Je7]h7CJ`FnhPwJ=w̓H>FE91ɀp|ZE*t2f/욗"x_%U :kM$)ycëGqy,q/y UxusV_eRA=Qzah!8=9p^f?2E$q;Z@ ^.!Թ3vdn 3lbvn8o]],W?dֻ6[GƦcFs+@e!ܭwhv1b*#g'Hǜ0T!Y22mĄrQ"$hgR(po&f-O_1XE-e'끂8W9ИUR|sn$5 !UpǨx 0J/=M/X]xK'l^$Ēe/k}ùRCvi({XS9qb #ȳ'P(8Gpwͫ^*X E״X3nJ8 [ʐ!pJ9 ge[qMϕ#jyhT;<;^P=ųYFFV s}Q++@y=u3` s?Sġr̬^(Ӽ:WV/".ײН)Q{Rh4A#G鞩9M>凮(u ժT+"c1I?s5* բ/SUT{*h-7;YH)20}3E!F=7/cm1F(sXZGfχfkkKv/ i'Hޙͬ > ?g%z^ (6zy7;heyW9ϒ4]:FΦzn }ZbH-iDkK] %C0Р}wlRH1PsMayQסze(T:⾠;6zp)Cրdb&)`9`OjxlG>OjvA)_Q1 B8ɾCEk= z(Q'J8qξG27Df_j"jm%UsR~ љٶ4O*ȢS9;UQEPv`NJj&J0hF?zenD& )NMI38}$j' i<#TeœQSqE 䶬Tj[vdGi'Q:/;^;ox.gWQI3HqC7VFw}hz  KI?>F.r^V>N0?9Q^{l.#Jpn9+8~7m+2xagL;B|m/+;j"3e{L36YC@L&i x<ĠhXsGᶊ&EŭE~o`VHMZeiSvʬ 'FtūF;}2GEz$o#Ր4A$HU.} M6j @ޢk3P{:[eoZ [vdM4w~e&) AйnqN{s=kT %!P Qp]u{tΓt˔[fU!ݍhklGkzlC4]u!XLb' 3 1)4 W" #Kqŭmk#z>NO!B@u鈈S}y/6 ٘#^A<%{¦O[/_ C0σBzx`,x9~.exGt6yBC' t7MU'0YysMŔҮ۟/r2L&Q1/fO5Լ?b&: Ye6|k1]Ǯ2B%F- qHZT?iI'C^zYKmYLA!$+GADӻi\+ԂRۮ-!yMEª|6E5!q˗|76hK٦#[d"GYո6 f M25̷_nBh}6ZvG=y,".G/g [}Y:F9^eT*ZOzz3oVD^h;7]1*6X}΢8U3ESC ZƳIQ{1Qs#jxYhK&2|t6s,w= M(M%W f@z;i؈Ģp5gDIFi^fܸ_W?C~ $K &%J$tP漢Tua,i@(wIth$8ÿcܳx+l]Ɏ 6#]͙3 0.RiJ٦$ޤKﳐz .LTg%t@PSai(+6\6/@C}O!1$xPPN$L5oE)- /lpOL?wOJ3Y|R4W{6ˏ;aN4qR,5f;?C P xZDx+z-,І8mP$?XNq]+ܣ{.=b.fe'Huf….B !gRT#Gf iw`o٢6&DnOQc+;HdoZzOLŇJ+/mfl@;1(Ŕ3;Tjϸ %pPKE$ i~U&%ϯ[҇}#O3ςXpC Sۘ~A+x]Н)sޘ#;+N+WựV JmԒ0g(ؙxNɬ5`G{I!)l~W+Mqn\m7j0"3}3 yF@_= ap b/s3<) YbbZ LZL{rkަY"wEntBV؃檹@:˰@B{:fE ËX7%~vq|iYQ]7̿gf+CH Fķڨc4e&Z+("'ѽA=]Cyms55)>Gu[B 2&]w钖tP1"@ Kc2|8Yim Yr~KuX@65l5;F%op`xPjq,yD@r`e9D틬2@& DL{x _W?QWPĔlͼSѡ{F'ՠ(+L^ك]c_Qq#C*ƣ'YZ/L_> 'azAB[9HfV!*%h-0bv^1=uHM%ٸOj/.2j &r>1ԂQNT!> =+KӃ{Kžw9< ^+]'i5)Gі*&pxwe[-dNR\~WX]HT Fȵop +uh Qc.]zZD`KR&n[<MR@{5&Օ )2TZ-) ѡ0c?alfo|_%CaچybkhSGƻMǎF뽍8K謒kbPeF0D*J@R=H:52GM7'Ul 15iuID.ӀjMĆ=gVW[X@kw8D IjB ~%' ?RsI7"PKdSp'!g3cD N)#WXwWn5fhΩy+4z}r6i3vARd۝1k7َ3BiY ¾$mWL] bw/冋J)Gdqsodž8O 02=uq)ښS$f.ńbDZGT1U\/ĭ2QnN`B3mk׸3wA-ΞZvpdzEy_T;zp 3'לu͠^ѕw;`!h<9\;&Zk`) w"IHeXCRo6DP#kLQP5VAny O{.oԎ4 -M:0 pkw2#Ϛ;;-ng@VF݊2Mᤇ1rIz oJ :/p Q@GFߏ Avbno.T4zL m^ZFLzs DΩ_iHRi8bq(JZ7☡ xI|#QNEͱ ?<SDv5jF]dk2оi"[l$ :SSjn @g-&)yDiw~$>ݦfJM1֐}n'o,3}iKzɠ}-͠:iJi-Q? G@جH6xdĬ@0*MH^j*y7],n,} Kz-A$8 ⏃z@毙1/1QY5/4Q1eh+<0j`Wj5-4M !^Q &{vch{4?A똠%eXث35 -5]يٯqQ7Vaζ~@rR`1pvυmYH`!RF5 np5 jY%eHbI B96u CXY>$LByÐLs1"dG0"ԥ&V5# QPƢ߇|w{~#>I ;3}=.6dt@ikA ~SZߒu.g}{qc }%gNQ , =;z#q۹}NpKI9%V>j?\ rvBжFo)aZYsuϮ( ՜Tzjr7r}8-UR%)ֱlEb`0 txt (X.YnT" BenaNi(E ߺ4Av7PʵE跦uue ;iGIA D$dSjoTWLc#=L PY&c=wcRیOzJҋMa-xL!U:Շ-*kP@ J:?U+Нua 6 OLw"VtHFRv繳0u,㧴QKwΤ`OU d S}Gf͆,Ce*oU2;, b eh%M>9z2DiG5uB ")xBF ^+wפF N﮸oN6U&gnvI]y ;G؋Ph& S@,z;5:`v1ݧLJSEQp SXܥI$&<%.f,ZcsL2Hڅ6HeHj-;m;[Vx\?d+KY+ )) $)H RSބ#Ҵt `*5+ <QӾԦyoB18pVH:^%7kNO+< q/: ??5ѰHO[e 1;g.X82B}A$6\=QIYBfڳ.EhPJ&/wSr{-,87w)_\1J۳!dVOxoOB@gRS% ėM=L_?qux 1(O˖BYʻ6+h@S+ S\ߎG" M,YO"G  C yN8KbY*NƆ!$b C΅*jHݗR^awNg5EZ#1mA2ʘ Wjw">.RfrVCFWS{4H^wvNBSѱ᳆rjS狢 JyP-Si|^X*qYS=^4qf dRbfZ\JIo(vhz!IT5+ox EΕ2mG8IIK)>rmU樈H>¯#Dw h >%ndXg.V +I3* Fw&Gh3iJ_-ixDyFo>6.TOE*@4"Lnm .a?%}L خ30^Jd| eUb\ .+W$0p@ >š[)SVtfyV T(Q^;e]ܜNB-?kvYN+vuxc%fZv~aS)<_z_y. yȓ~mm/D!vb&gTIxbC[һ/%TRgFUrы؛$D2SN#g^nC9> :5\&D19#dh# pr_yh89YвħRsI Y9?@ˉf D*BC5$ $&`{Ќ{f5vJ!gP`b>pFs)ePGcE7iƅ6RÄK;>6][q>vwְLKhƄ,py?~7rBɥ4h$7@]U epȵ0Tӈ9#\[\]oPIQЦgwr-d|G1?&#|dolm$Cg!194Nww98]?ϚT2NZj`U[Th'J$#  5xN}b`#S%!D0T Pz:Zhk5j<Dl'&g*ȱϜ[CBgc j9H4zy4GsHl D5}?ˋC[=ќy7e羇2!#N=PϯD}Ӫi=3A=BlP ڏrã;DZkMwk g% qu CA\ܒ>I,J:Cvo _ьgǢZ(O"xIgi?.<|~c]H>K\^~P`۾Q53]c>"GהY-\9bUd$Lg\aN&{}S1 LœWSC>of;q&}DfѠpoy.?[' 7mӡs\'E/+̃Q5E[>@G|\nP[j_ L9V7|cտ91c顅#3$&ݲyZV ~cM?38{ASomh/b/L +T KfDUWt+->Ñ99d|#̲eIPez9@`(Y>o5[0ڈʂէ#x`\n1He4 IEQԊ+(EȚ  ao6#wp1N+d{D\r+E(zA;M)ښx"Zn1telU윴Ppe'qdlpe{WoNtujklNtqnj'%l3Y&[)XXF īaS4a%L;ۯ{4Zxkp(5237_J}Lq1 emFo5DG T.2'a jlKcu9"CO׆WeO/{p-cóNOP70aTh@Q dӻs/dGT&]܎O\L oͧZZ \vc|rtljGDf,m '~JN2'ةTs5d"Ј'Ki;'?.5x!_wb@ H9ɓ#xۊtw 3$ NR/$MrҶ.l7E͟U>^#"(%v:満!'Rx~}Ù,BO8!04HBϽE56󡬊!lI ˋr%k_\*Iڬii'{RLŷ g<ߧG:<2HKbj,>neŶIsMXo갲bv0$ys٤ <{r;JW8{S_<[(|,Ch=&M~5<1OL‚w|-*C>R~avݔ *RJ'Xe`VQq5\jكޡOgf蚈JbI) G:Z?ɫ~'H%;E;}緷f̭r1CÑdUqP]9\Ȓ&vLV[HLN6D.toig L^gtsw@?A~k,]H\H[&*ce%})a׀if2V+w&t4{F En&2IgK"e0v SVM.*X>֢4?o@ym4V;nGpT+)b6O9*u339b9\gC!HEq0z$~5+b&+lol]  z_B dl\kė__\9 v{2rL$u(\w>&7jG>Tǖp˷=Oy@*.`Fͣ?L\Iڕ n.*5hs/EEE0X[[9̀*Db3!* Kgၵ i׎<|coU  z3b1 +FM`23m"`UP˱h*M6$QGXЇaK49D%2uhݝ3XJȠZ[ 9Rⅻ+/D%x<2;OƥinڜScgio`3yqِ. R]7]WNYQ {~ aQ4h0{8VzzaOuarEJ+~fh]+ow%RV2#r(0~wHﵟ_%bUk V^r=쿙!oF?с&6S{@;l&D?>?$%ùɰj ,u% PND>-a.rQqz@{eUjon LًИ3F*JK: w+4|[Mvvp ,eD]l. 0Yc" r5o9KU|ޥD3t M7 H>}E$8m*_mVUal .,t]b6D?T8w1 u)lAݢOJҍGgc6pjB+VCF%; @9xBz8GhdvKz9CkO3m"qWp S#GE(Zas9|);π:q}Yʀ>HDTZS X_ yJPOcR:NWGbK1.F na `hxAٹ'cÛ67d@#~49EIUq P_v0X܆YGbL ą?ZJ}ŕ\?Sr=6'U*bwA2cpnN+p̈0gqOs࠶عZVAc}*.5"zuۈ<̝p/Z7Z}c:&H6JVhU/u}4PJA1 w09AE`RM&GQ w8K 1zk{ԚgT-hC)qT7U>luSȱ,@X: ܵlI8n7mVx^t˦ f}}ٮUoIZŢ ȡ*r(dه`'RӱT%?VIL͗<4s)pqJX߀Z[2'vl7]l.:9'L^yYDZE//]n jkK2lv "Ċݓ8 \i{#M,>йK`ƺ: jv!@ԄSnX#" .o l#c(kDc9t7Q 1Bxh?(OE(Ӑ)=hS*x s),Ԝ3G2.'rH dPU辫M*Ƞh4Q&D9g  + X7]$Ŀ; #:'rFƛYHt3! =JѣňN&VD Et".6hvd }_Q26Rn֓阼Z$vS/e.+:Mxit;}{7c؛J|fgZdsA Z']b=(DdL5Tkƒc:3Qm<,1̼3 >7 @ݾs)l !+GF5E;CG^;zOTO?/|Y*vjzkH2ץh@w|φLC@|>8k7X~|ۻǹ4m%l\9g,>9_NE)b}50CMPGyDgMރ(6vo5~kI73 WrP 69[Dʢ⑰!'.3Yvrٮ{HKVvvpItqly1lhV<[LbW8Mܼ@BS:R}Mc mЉ iG<SxN#~Yh&,lQC{O'jLP4.;:v{mWSdfԇ LbY\em$PRg1k?f65O{ؾ$,3]%UD{E -_EVm`g'*8DDdA$ ^*m$Hz"`bY{vXPWSpF? (fA[i3-,>vp)·Թ$Yz1@Jْ'T8ĶGk-t^suTмⷺS9@#%f~҄ml~d5C_]7? aWغ5gYOE(%mLvY+- f.g %/947тw((D>~o@tˮ Ր Xˎ4d2CCj(/I2*u W=%>s6nM؎BJN4 ҒG6x;h5^ݟ\u0bلwYBެ6@C]fJԹw1pȖzU%_M1r~~tU& qPJg)a= {]2a8c@ɤ/6n0su-S*'`#%]!-xMcـ68?yY~~bi]4)_(_o#r}q?f~B||FkmtJǜB3$={ex6LE`zrWl^:L=U}N~@LA^LҬx3 ,W>BEԅ_h,I@;W֊ ̹21Vux7q0{bx\ vH?qx͐.kTcg.#^wEA']"9[_7lUt1'CA!srkhJPD\QЏRAM Æ X ;>*r mG+<73a$Re$shTgCcMP#H@spp3W;3 q)&%gt^P٤eH5FO9QYYrmȑžVFQMnxON81֪M} a ̒UbiOK1`T }xyxn#}+Mynbk7a 5F_ ZjrScc29- ʟ>qIPԧK$;|^^F.2{fpi#QA-a_|?z/ɏ3m`W:*}9US`ru?gY^kY5{40/U ?nőNrkQrd`ſYN:J+M}'cg&xsgiA+謮r+2Ye-ʁ@S(Rφ?/ЗG '?$Φ͎-{LḐ(d =z>}u{R@6 (%<~M:[ ۽cc0 &Ji']՚+S/$Rt-yNa"6,o`HK -p+:Vظԋ#8 E3NIG:rq]4꭯to78'[- -| ,:-j#}#n`G _0=ĻpFـ-e)C$GIT$FulA2Ԫ08E>&e6T=ၶSe;'HE9 5PJ  Wv 鯂hh/ڋaEjnR G`THqK)K>989 Z"u^@H D}˗8jfZdub1<0p듈){6*ؿo*cBa7.r&6~Oz娙oq>]􆢁 e /OU TJ3 ]=l(X5D+׭iV.R C̆872OQp;}rnͱ}- >GD?Dƈlk?ӓx8_,ܕ7x5>?mUY Z$L |n@!О}{(Ph6yv,]12`*+pB('_Yׅ~YW K/: .!,傷hRW4ݘ 3s^|2Ƹ&cҽW0 R?xAhvj=p=u^!zy _ o/lAkF;*7aF$Fȏ2ܚT&M[kh33}^=pV=@6=4 Zy5tA|!|L{ؽ RZA8X .76QV`\+9[]TeSiF/89M4Y*ߴ 2Y73h,c-ZwAptzjE-\>42)͵!Gg_>U>t(DMRuXoV!4U6z| cUJ,P#qeӮVR#JiD||`-qxV`1LuUh-CoZQFII' Ga2tq9@>?Buy|SouMs6hu`oݏ|$)X$OA vw}6 M?Baprv෈l+bvd%FZsA*Ɛw!u x:&0x4=:!4-OȔ><As~DH|1703_Ћ7MҐl =tx u-{4@йk5p@u_ۖiI.+3 v M !r+Y 2ͷ$η J;uų>"ߞz>2^. ^|ƳfN6yC~a'jkR^G'[nJ!^'6h B'IӒKDJx 5u1˃&(~]I עF -gtҶjMdK(O?vS8YKoF(Gup#YyъMV™DZBuw6W]S>o:9x p)2f KpBđ?Umlb}w2g;뫤k&lt7>lWL0eя u@+Inb^Rl͙ EGc_Gv߮d 2#J2|z||vfɢˏYz0>/. >ɗj,Xߨ0mzC&;Wwr}?ˉ [osЛx@+}5@t 垳 "IBzc#/Ϫ\Q@@șClɝ'}+3|8/iz:B=:ޜ4-O! }oE4)}[xS*p+s76滢˅W 3%V\ò]@9Ë$1dYS S'g2d6mt;ķǥݨ 6sW]I,õP |` /V(z[!q蹋|tj3QͅaysXsX<ݷ-9$ T'D'XHIos 3 ?ԮZЈT2'L&PR'0Qv܈6VvBHG&d\ɼ-Ej-)~g9 | eJ=1/x鼮 ?O{GL m`>t 5YA**I%v@h|0x.gixөፍvP{I)]sv}e`;S+Ow6^7C Q+`pE% g.mooӬ[>j}"bKO97Yb&!Oc8k ? FVae)\1uqQm]% U#%-+ 2uC0xʷ[?{G6!&aɊ( IWXW"܉nX<@_k>ILWlJMB>?Y#Ǡź$6ѱ/9y$=3HG`AD̅E{qAP|BO'?I*fvڌ@Ʌ,d} BS,p$q8ԉլ5R e;7VxNѮ\^D!i>5h6hPtCr.:\nz~Ng. qݜ} D{QVJ1%>-C%ƃImW;/g;[/z`9!na_nUq΅uiV): Fk݄TtkW/+\y^PgA+ZtXN3[B}`f_T!8ʼ6YRu)LT En‚g<{1.~*Yb"bWC= u޵ WnD-|Ѩ8&sBn&gKb{d dICq嶯84x\'U,Rpjm(/^l =yHl{ktו0]SaBS&NBSF|5σN$ c^{kB4%O}S ٶ@ PK-۟-2G-J` ϰHP]1#""QnBEg97YChkV0H:ݢ ȀB| ^,.8,p;~L服{"G3MR Q(]|vu>^o0;chwEոzM:7ǝ0DJ֮atMP) @IVMa~1dދCLMY ԝs23Ai]:4I&2Wࣅ 458j{(Z=?=j)<=_Cx}0mg% :]DmS8+SRY=T݈}p 4 6iQ*E^} p <ЊS`XE8,iTV]d̸@S-7Wq}Y2s1"i׎Wqݑ zUt+buZI,.8U) FyOjiS 4SYKGtу `a[˶AzUxBp`kyzo-7ufw z%Aǎ:fnyZMh*9Rz.e?g`wW׫@ _?-o 3"C:4L,ܜ W7 R1(|i}:j[T ze!8 HǁhPNIPD7ҽ<*\:Biёk1|>#2V,W%s}PdU9nO "7l$, ,^_dD1.P7uIt0$򵰟3kQϜP /]|SS[#W@b1TJ_khZ:B&ANɇj>F]J5k2L#~[ p7HmǦn¢cGTdQDoUħT&=ڥO,D Ym#^> ʙdBx CE}zo%/84,yC83nOD% [-jCދafL q;%N]%E.12pHz䩓0cPqVɯ0kM2Uu=Ʈ[bEY!7;kx}nk[鹲 ˤɥj+\UY.&  C1O$ HAaXAc5seTfIngF+ܱ:ޕ=9,~t'ֳlcGr1CU<DejLk;R8[o]t4|åLߖ@$"IŰkVM?NqKԢP<^ xeպ◣>صP(4K)Җ?0U@D!%GE$7P$tytսs|8 6t00=TP5|8S32J=(,fe f)΁ ɝEMث5fm` ӽ +<1BL*߷xM*bW1אC?lrck:=jimż@H^6;͋2><5Bx$RPyW殏V\l%P%z|0G d|2ωiy\v PnfM8'h[:e[r_/ʧheTQ֙9=UP뀦-4`ƒOMQ~.coRCCT]،4?5cqSsZXv/ p묋{{4J~ዴo]I{c0eV7ճNɟFz9_9/1?FzO@]X93]#޵9QPpmRcדX)dsITI{uDJ4pJΔ -afzPN,6GY j_;0F>X- ֣)1l 8ۙ@7%ܕR(G< peEs+L$FVj.(*[&1Zs\X%6soZ2d~7)2c4(ƚ[h;+4Tz w~K'V+g rؠ1)_ Bfe{|$ZepFE0ͻ'q!y90\"bPQz> i[-S U%f:gsp㸄Rk]ꆹ,.~KʓT<=8.Y56Wi~&? qT,sCL"ǒC]2-?{k!y0dk-ʹ9׋ 贈A@ ?n]B= =B\'`xi̼")#zsv;:/ \&HsٯWȭŔsVɨɍ?>COC]Dcɣ-l"XմbhHLll7pƣbX*d]XRJUgqVH%FIĬ=hs()Ϧ2*= OR s'J|F(D~|@rg#͂PĤ*U9 lJF$M3UHl 78J?($+aCrPɉ ?ܜ4 T>Jɜ`fОF䔨%ΫIOXhdwf:nUd\Jٸm:I]GrJ#җ(F@WKҽJMi'؎'?)r q]1I2Uƒ?m =P('$l h;) 횐#\U/<9/B0`IUUClMM4*f0jCV$OR!>3E0]iBC0{SEy?l|z=1ɷT]Ij)3JXEP@!R3G=.MZ-_n=[g.Ή^DnY3ۥ"U+$_8=ZpViMh-xvtSC@}XDF)[ '߬?s EK&~=Ityy&5wLa-B(N_8֕bVi *6bn<KNFVeDb? 3A1x"%wX?R$yK](:-6 f뱚`H ‘x ~FN'{e-߷Խ, ֲ !oL7y }⛯]@x$4bג.s0;|w&vx#BG9\yΏ/vUmyrˣ+3pΚ1{- D,oam2?y:Q!rd`xct⍩ސq}Eҩ3^;w[jOhJy!Sf 0aߛPZ}I<s@M!5/ު\A aD.f (N,vy\t:6F@nMc~+U|O ߜj _{ G*]holKSܿQe%dq)(r2Q]^Ђ^bzq7Q2k>^jѺOoPeQV`P,R}Բ.}oo=߀CI?'E4TC0?Zn*-Z~?r<# 2Y2 3DyJ]VÀE_Y$DɸirݷOh%2f}$B<HZFL0 WG2삶_,%lF)kmA2rhyMmgwm~ܙ"$U϶w8#9Ѥ)[Se%|aQqh_I2,:wǺKX7ƃ cYi3<_cV! nkU7gΏ WLacRV\Mϸ;(rEkw504+{E̴cL0L%%!-: {^3ɷ]'u5^ >yUQpvgت MVX‡[ӱ")Z+`sS+f5Y(;!0Z"m] m;M|.jK0ŲLW:Hيu˹ne1F"Ÿ{ldzv9WTgh ݴU)7҉) Ǒ <ػ>B?/dZ;2:Bo1VxʄpdX)Q™xoI3 [Dw\ݗ]&yB:o%n`LБ,lf㯠t9$W@c{I)a0U}nflۉ!ђoG2]2L窄g6)X^Fd7uﲿ! Ǵ1}V˺S1X`c463bgQ[xlzJV>mpL֖'seBPv5|RRH*1.^c)Sz>ƞ;v 0\l01b Nv $ϋWu=NA=oµFA#Ϻ"?Tm5-D/L\QLY#׍Le737%^UTr7% H)Yۉt5g6Wv&IƠF("N@t&̊뼖[i#q3HQΦd>b76c60޷5u*SG_l[!-pD)*zG{6|̜g4x~4_cM[Z6[ \`B߼,?ڟߛmWy-AID4m̼lG^H:/~jJ N?jnSz\U.!"y崧WX_<ԁT9Rےpל23NJ= Fژ7hD˃"~n0 4(ؙG[2gs:IWZ$4q,LxY F"rA}qF?d̽:ɍ5  8 0zdLΆ |=H[֤)w?lf&Cۿbsd v]D-`w#xכʡ ŸAi9I~ %kG   >z#! gaa2g^|P8 uBj]ie,! GxAF-qHlמ_%"qٔWl] ׋WjJA҃%~|aG|y AJ+i*ϓ0- C y~N շ{C-m(r#Һ̲g =h)Ȟ-ݽ82 Hj 2:ᕽ Jȃ#$K/I4:ES)ؙ1vapu9t੡X V9_^ S&꠫@c&IEЋ;"AOZM;1*k(VĜu_4nNC&i 3X}/|~uPtHTb3Uu PetH?*,n%#F~O(imdɄ8Wq}>w|w  ʗm/ư7C|'lݪ4NƑ:Q"0Sfcc ՁRojh͛b9u̝H*?n*ɱOce01TE`2Ops W!Ȏ -⅗&g9!mOV "[BzjaiOaj]4fϪ7AmMv u!$da)=kac,"i2ݚv#~o ˋ9NGJ @ x 7OGY :ߞl|vZQO&fg2I]wˠfW,@|SE:#o9dU ؏u+)%ݘRqǏ$?oUƐ맮_䰺GR34{MlNYM;@&hdRᶹǼQT GP Evyo.lՐ~K99p^g3#+&D#2 `2F˱!e-ɚiqm 8bזBr2lb|4t>s׉IP|Mrr|x+gӇ,B,6S+L4NW$0?*gA!/ia/|zvJ~p%M\,yBY4VB! #|_oX;!vGx>(.`u1C'ٻnUFIhUfX*VdDxzx$ME:>z@`q 97_?X?=n"ep_eؗ=sP3N#8"j#QM1q4pbpO5HJo)MP`lGz]@ԕ8mb7]6Rc ;"$ gl{\svr ѱ0tŀ."G"C/>/1/0穰(n6@4YApXfٹYEJ݊a12`?mE1UBx@+d14O2b=-/-gcB= Κccy_Z۽VPW>&xrOj TI-"Ĺ-DFahIH4V!'VH%_,:MVK$7l淥bJP|DjBP|'GZ!F4TS-3rW׋ٙ}`A ]YLTOIjtȿ(9x>ԣOuƖAnȁytfEՂ&;Lg2m yclM:YDa} Vbbu  =uw?ND *ߊ[W 8)OdqXtaDJ6s\(ۉd;kɫjCYd+Am‹w9-n%7j@wS} D)RMk *.cSAg@UյN (絊*FӚ8QVYœu;wM1ֿ=M%a= b+\')ksJ,!K*VOwRdu=Ypyu͇bM(\ܹӾ(gߞ p |G!u G?] ט_MAX=W?{5Cmz)+KZctNDVV s+os'~U m8xQDV Yˌw[ 3[zc6+8LHE"C0\ힸev^qTt@3"F]cRȗȄF(\ϳ)VЕ1H6T)_ےIm_6nNĢg(:ff7'p`+~k1W˿XB@Z ]Ms$s"W#\d*x^#xې󠬫LۙB AȈkf['ۛwVW$ .EEfT _2=jŲ-ԓ*Wbt &iYv7cJJ/ xJ` QJ/[m*f9M*xa~kzU% `oM<3`7eۂczh6`K5K:ޜTm`@pM#>A(nKNoʇ؀KSS b2Pee5kG'9UNZxڿd5c(Zp9BhLkk;[&|"~R+-D-br.Rhsΰ-?D,ov5ŐY.qC}`%諃lR TuɉGX?(Y),,Y ^sq܎)CR9ǻ{fT O}k>rn;1agjUn]M'&dwR̀U1{D)<+Hw?f@ntAZE+GV$elt_QSb)0`Dbi.ȉ OvԩQE"ț3Ud^X!:3Om#m3Toi`X`@Sx=>|Qk,J"&cX#nFs Q)l{΄?G5 e{^@Ѝ6#H\clioS .vU] J3ٚ{tzvNTb~2P-]4~o#5{yzÝĂ1g.Vl}8'h(qcDer]wB2iFoȥ,މt.رgPVWX5Bp63vħ8<@;'Ä"h}~ӔhDB/]80-N; tLdw Vv$e56]SbΨ=A# $` 1fޗ'ީ\L8t~zƗ/(F\T <-d|8Z cYv)3. q4{#m\)Ҩduص;zu>ndԤCx~lG7Ww; \2~NvP/VÀYx-?\q-%$H̲6湫ؽ s> ^)ܑ̖qg(*hj+hv|ͨ5,4.Y }8erԞOh30oӀGeLd)3xV8k'd^Xk ZWo#N*fF8zEl3p|ɚ~\kATP\mmd CJS)W DƊ$K݈AuZ(a AB^p<$-П=ބnMoLW]C ݙEi/|P.YbzRh>FKN1CjuJюrS-.s1!}tھ1MfQ;1hg?flѭOt}^4(- o v1T;l@z@q!TGzb|)i +/"z o׭!_j*8|ty__ue| j&U{^Wd-oQPgWR|t.\tFcI572ॗ {`P'~0h,&t:۵Y=> b{fN\Fɂ܋;~>Ԫ[29 {NSKϝ#ȿnPg?L* vsǡ(Hݎ}yb4si1*O3ט^1')1יuNu׻$}}:Qϙ4?n U[x`T 8I:֩M֐@l70(&A=q g59xcGv=wn؄/v`PGTu/x}g6r{.Q?[$a89ўCcyU_33]Z`1_ڪVob r l[Nhr|rzp?lRkZaYX<)kJ`QPD.?Uvт;8O@_u?͉A"4TN vSn? hnrօ\A2YkilisՒb]Gfs_a=cіL!X2\&˃ڱFJ"]U.bhk_o: H* A,l(,kNb!~5I+U͞˙bK8}0=Gj^Lr;s*Wd[eWϋѩ0r􄍶\JBv ,L \38P.C@ 4b,T4 YZ