libostree-devel-2020.8-3.3.2 >  A `Pp9|-1Hg=`AM+l/,W^R,,mpÄɵ nk`mɝLfJ͢mԣ͗"cݞ1{yI>(ÿ22313b9c0cd4b0c7b60f4eaf59e825ebaddc9f8e7478e994d373f0687bec00491b5c1deca6023e9611f55c1b1881c0824595cd090`Pp9| g/motrKxToдdDfɒA1/ScP:8=7g,!zfw|-7ZЃÎ$c\Fhw{Vv: ӑ]q0%).~{>$N{GdrX`]tlMK@ɖxa-]s~~~3KInJ}T\a؅ ~4I~ i9_p{9x(WʃlsD2xT>pA^h?^Xd  V *Jnt|   <  |        P    0|P(|8/9@/:/BUFUGV HV IW XW YW0ZWX[W\\Wd ]W ^ZUbZc[Yd[e[f[l[u[ v\xw\ x]l y]z]^^ ^^TClibostree-devel2020.83.3.2Git for operating system binaries -- Development filesOSTree is a tool for managing bootable, immutable, versioned filesystem trees. While it takes over some of the roles of tradtional "package managers" like dpkg and rpm, it is not a package system; nor is it a tool for managing full disk images. Instead, it sits between those levels, offering a blend of the advantages (and disadvantages) of both.`Ps390zp36|SUSE Linux Enterprise 15SUSE LLC LGPL-2.0-or-laterhttps://www.suse.com/Development/Languages/C and C++https://github.com/ostreedev/ostreelinuxs390x Xg <v N ~!D c%5  0 A큤`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P`P58aff821b0a9a29852453b4aad4bb18afff0e11ac395477f6aea4fb2e22df756f375f9f9b94715f9779565fc9ba9a93f5e8695fc0521a765733848f76f8b015f2d872c625ae3daea192bb037d6f0751752d53adc37e23819cc3690ced35598c9b0d51fddd94ed6125354f85a1be346d28068f7fe513a5798ad6dbbcbfebf426aff7b12b8f9f7f792685dad26fa53d60639ad290c09497f28159b0faf515c534a3b82c22574ede310ab3e3e63b0d7972d27e4c2687e959eb950cc93049e41d9f87db56286cc819a816d8ccb7b3ce77040643c2bb99c83c7a96d07fbb6addcd00c313be9b4913b73cf53cf7c5adedecb0150e57b626ea2c1632d4b1aac3665af6b18510f5478a11c215361dce0692450dc13e27e257326a425ae736052074b931004e6490bf7768cb2cc3f3dbfc1f229ada76d15adde4ac60fdf13a19db523c09b8f3f392275e653911a76e99bccc981a3031ca1718c67e13ad90e00864346e0b8937319bb0639dd7c0e893239be5b1952fca04417067177817a5d6b09b82d3f600d1aee444ce6e9004b3a146cd03e1d354041617e7e842ec94ce4f53ddc609900bfdc421e0df8f9e3e1736371a2484a5f71360c23b36cdc9dd6b2404d91d7b8ec3eff4f9e539c4c968407408315aa7f3168ba24e9a1f7e5ce34161999c0c9b262d834c2eced7cb6e42ef44873c4a5b656f39ddfb90e6bd0c8114067d3e6a8453a86758f204088e3dd3eda52351a93722e4f2f7a7b8c136b3fb6da09f5a891ac9382a2e241f25e45a75713b4a12f29060610a9ed85b0c43e6af2c984085d498a8b1edeca0e47dd3bbecfe650246e8eac11a6feca9cb95b5dbfab9c3f0fb5af4ad34a7ead6c5faf66d5eba0a1ca3684161dc81d9babbaeccc09550ba9440d32df7ef99f025aa388b3f259ec9581cd50a59ab9255709ffd7974e517bb622009fba8aa11360c6a44c59bf4d32eca10ce061a0d795594bb99c8c53c5822e3c32b07d95e6fb6731868ef4f6c7d14a3ac9c15281b20ebe89618eca531d0697e0f239e165cdbb4249b6cfb250119b67030a51e7c4d6f1b51826759375ef3a4d224d35aa627d01e62b5fcc6cc036c5721cffa07a5202136da9eab7042bcdc47be2d22ce79a7ab236bd712380e82c31cd351762e615d0446f0c41308ee0fe10840742dc4ff0164d7c8ea5605f758f4e003c9ea3792e5c3cd2a74bb4619e183917e87e961423c9591dc26f4635bca4bcf18d6207bec5e59cdbad11a11afc4dd37cfd4cbb290495438e5b00aefae4589d1f4dac7590b702382fb2805ee5060591a6ac16be437425b3f3ab75e6fe7a70dc8d55bbec44310e8e354bb2f1a9797eba47e8cf2c5451libostree-1.so.1.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootlibostree-2020.8-3.3.2.src.rpmlibostree-devellibostree-devel(s390-64)ostree-develpkgconfig(ostree-1)@@    /usr/bin/pkg-configlibostree-1-1pkgconfig(gio-unix-2.0)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)typelib-1_0-OSTree-1_02020.83.0.4-14.6.0-14.0-15.2-12020.84.14.1_إ@_^@^^^@\O\N[@[[[6@Z@Za@ZZxG@Z:PZ:PZ:PYdYyY?@Yp@YTYC@XX @X @X}@X@X[@X=mX@XWW@WίW]@WrfWq@W3W@W VZVZU@U%@T@mliska@suse.czdimstar@opensuse.orgdimstar@opensuse.orgalarrosa@suse.comalarrosa@suse.commliska@suse.czbjorn.lie@gmail.comalarrosa@suse.combjorn.lie@gmail.combjorn.lie@gmail.comluc14n0@linuxmail.orgopensuse-packaging@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgaplazas@suse.comzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgaplazas@suse.comzaitor@opensuse.orgzaitor@opensuse.orgdimstar@opensuse.orgjengelh@inai.dedimstar@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgdimstar@opensuse.orgzaitor@opensuse.orgopensuse-packaging@opensuse.orgzaitor@opensuse.orgdmacvicar@suse.defcrozat@suse.comfcrozat@suse.comdimstar@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgzaitor@opensuse.orgfcrozat@suse.comdimstar@opensuse.orgdimstar@opensuse.org- Enable LTO (boo#1133120) as it works now.- Update to version 2020.8: + This release mostly contains scalability improvements and bugfixes. + Caching-related HTTP headers are now supported on summaries and signatures, so that they do not have to be re-downloaded if not changed in the meanwhile. + Summaries and delta have been reworked to allow more fine-grained fetching. + Finally, this fixes several bugs related to atomic variables, HTTP timeouts, and 32-bit architectures. - Changes from version 2020.7: + Static deltas can now be signed to more easily support offline verification. + There's now support for multiple initramfs images; the idea here is that one can have a "main" initramfs image and a secondary one which represents local configuration. + The documentation is now moved to https://ostreedev.github.io/ostree/ + Lot of preparatory cleanups to the pull code landed for upcoming work on indexing deltas outside of the summary. + On the bugfix side, the biggest one is a fix for an assertion failure when upgrading from systems before ostree supported devicetree. + Also notable is that ostree no longer hardlinks zero sized files to avoid hitting filesystem maximum link counts. - Changes from version 2020.6: + One notable feature: ostree now supports / and /boot being on the same filesystem. + Other than that it's mostly bugfixes; there is one quite important one for anyone using the readonly=true for /sysroot (which is still just Fedora CoreOS I suspect). + There's some improvements to the GObject Introspection metadata, some (cosmetic) static analyzer fixes, a fix for the immutable bit on s390x, dropping a deprecated bit in the systemd unit file, etc. - Changes from version 2020.5: + This release primarily fixes a regression in 2020.4 where the "readonly sysroot" changes incorrectly left the sysroot read-only on systems that started out with a read-only / (most of them, e.g. Fedora Silverblue/IoT at least). + There's some additions to the pull API to aid flatpak. + There were a few fixes to the man pages, and ostree show now displays the parent commit. + The default dracut config now enables reproducibility. + On the "feature" side, there is a new ostree admin unlock - -transient. We expect this to be a foundation for further support for "live" updates. - Changes from version 2020.4: + By far the biggest change in this release is new ed25519 signing support, powered by libsodium. + stree commit gained a new --base argument, which significantly simplifies constructing "derived" commits, particularly for systems using SELinux. + Handling of the read-only sysroot was reimplemented to run in the initramfs and be more reliable. Enabling the readonly=true flag in the repo config is recommended. + Several bugs were fixed in locking for the temporary "staging" directories OSTree creates, particularly on NFS. + lib: Coerce flags enums to GIR bitfields changed some values to be (correctly) flags - this may show up as incompatible for GObject Introspection consumers (but not C). + A new timestamp-check-from-rev option was added for pulls, which makes downgrade protection more reliable and will be used by Fedora CoreOS. + Several fixes and enhancements were made for "collection" pulls including a new --mirror option. + The ostree commit command learned a new --mode-ro-executables which enforces W^R semantics on all executables. + A new commit metadata key (OSTREE_COMMIT_META_KEY_ARCHITECTURE) was added to help standardize the architecture of the OSTree commit. This could be used on the client side for example to sanity-check that the commit matches the architecture of the machine before deploying.- Stop invalid usage of %_libexecdir: + Use %{_prefix}/lib where appropriate. + Use _systemdgeneratordir for the systemd-generators. + Define _dracutmodulesdir based on dracut.pc. Add BuildRequires(dracut) for this to work.- Update to version 2020.3: * A quick followup to 2020.2, which introduced support for read-only sysroot ended up breaking some of the Fedora CoreOS tests in coreos-assembler which in turn holds back ostree going into FCOS * Now that gap has been closed and more of those tests are being run on the new CI. - Update to version 2020.2: * lib: Fix Since versions for 2020.1 * Post-release version bump * "Brown paper bag" release that actually sets the is_release_build=yes flag and also fixes the Since: on a few new functions. - Update to version 2020.1: * There is now support for making the /sysroot mount point read-only to start. This protects against a lot of accidental damage, and also generalizes and improves the previous special case handling of having /boot read-only. One known issue is that ostree pull is broken with this enabled, and this will be fixed. * Error-handling around GPG verification has had an overhaul. Specifically, libostree now has more specific error codes to distinguish between different verification failures. This should allow apps to have more fine-grained control over how to respond to errors. Do note that the error messages themselves have changed, and we strongly suggest that anyone relying on a specific error message string to migrate to using the API directly. * The original "archive" (split up objects) format didn't make it easy for a client system to know how much data it would be downloading. Later, static deltas were added which addressed this problem, but there are situations in which object fetches still occur. Later then support for optional sizes metadata in commit objects was added but was never really stabilized/publicized. There were also some bugs in it. That is now completed - the sizes data is now stable. and new API was added to read it. * This release adds initial fs-verity support; it doesn't do too much today. Bigger picture it's important to understand that the vision of OSTree is to enable Linux systems that feel like they're "image based" (transactional, versioned updates, no dependency resolution client side), but also to enable things like doing commits on the client side. Today rpm-ostree supports replacing the kernel client side as a first class operation. This is crucially important to make it feel truly like a Linux system that you own. * A small tweak was made to have OSTree create repo structure directories and files (such as objects/ or .lock) with group write permissions. This is useful for managing OSTree remote servers from multiple UIDs. For systems with the default umask of 0022, this should have no effect. * We've extensively reworked CI for the upstream repo. In addition to Travis, testing is now done on top of Fedora CoreOS. Not all tests have been carried over, but expect to see more coming. This rework will also allow us to have more comprehensive tests previously not possible. * Several fixes were made to the test suite to handle the cases of systemd vs no-systemd, and systemd is now advertised in the list of features in ostree --version if present.- Update to version 2019.6: * Nothing major in this release, but there is some bigger stuff outstanding and ready to merge, so this version was released so that work will have time to stabilize. * A few build/CI fixes. A new progress API which will be used by flatpak (and can be used by others). Finally, we also avoid reordering kernel arguments. - Update to version 2019.5: * We discovered that CLang has a static analyzer scan-build; it found some small memory leaks so far, otherwise mostly noise, but we haven't dug through all the errors yet. * Gained a new zipl (s390x bootloader) backend * Install the .hmac files needed for FIPS mode in /boot too * This is also the first release where we switched to using the OpenShift Prow as a merge bot, though a lot more CI work is pending. - Update to version 2019.4: * This is mostly a bugfix release. Notably, the 2019.3 release caused some issues related to the gpg-agent code spewing messages on the terminal. Additionally, Fedora 31 users have hit upon issues with ostree-finalize-staged.service running too late to be able to write back its logs to the journal. This then confused rpm-ostree after reboot, because it looks at the previous boot's journal for this message. * The biggest feature-ish change is support for a partial commit "reason" so that after ostree fsck --delete was used, subsequent ostree fsck will continue to report an error. This should be used by higher level tools that want to do "fsck and repair". It's likely at some point that "fsck and repair" logic will move down into the libostree core as well. * There are ongoing efforts to port Fedora CoreOS to s390x: one fix landed here to add the deployment prefix to BLS entries since it's what the zipl bootloader expected. - Update to version 2019.3: * A lot of changes since the last release. On the feature side, probably the biggest is we've made public the internal API for kernel arguments, which rpm-ostree now uses. * Other things include a new --modern switch for init-fs, better support in pull for downgrade protection, better use of mmap, support for committing archives (tarballs) from stdin, etc. * Finally, libostree now supports being built without GPG, which is an important preparatory piece for introducing an alternative signature system. - Update to version 2019.2: + It's been some time since the last release, so this is a slightly larger one! There's lots of new features, and a few bug fixes. + New features: * A new sysroot.bootloader key was added to be more explicit about which bootloader OSTree should use. Notably a none value is supported, in which OSTree is solely responsible for writing the BLS entries. This can then be used by bootloaders like GRUB2, which now supports BLS natively. * ostree config now supports the unset command to unset a key from the OSTree repo config * ostree remote add now supports the --force flag to replace a remote of the same name if it exists * ostree-prepare-root now logs a structured journal message after finding the deployment to which to pivot. This can be used by higher-level apps like RPM-OSTree to build a history of the deployments the machine was booted into. * The staging API now supports a lockfile which prevents finalization at shutdown. This is intended to be used in systems that need more fine-tuned control between staging a deployment, and setting it as the default deployment on reboot. * ostree static-delta show now prints the From and To commits for which the delta was generated + Bug fixes: * Make looking up collection-refs similar to how regular refs are looked up, i.e. first in the transaction, then in the current repo, and then in the parent repo * Don't include the OSTree commit version number twice in the boot menu title. This affected at least Fedora-based systems composed with RPM-OSTree's mutate-os-release. * Activate ostree-finalize-staged earlier; this should hopefully make deployment finalization more reliable by running it later in the shutdown sequence, when less services are running * Run grub2-mkconfig on the filesystem tree of the pending deployment, rather than the previously deployed tree. This was a corner case where the deployment failed if a previous deployment did not exist, on systems where grub.cfg is used.- Disable LTO (boo#1133120).- Update to version 2019.1: + This is the first libostree release of 2019; no big changes, just a collection of smaller features and bugfixes. + On the features side, a good example is: lib/repo: Search a list of paths in gpgkeypath for gpg keys. + Another feature is grub2: add support for devicetree. + lib/kargs: allow empty-list arguments i.e it ensures libostree supports "empty list" kernel arguments. + There's also some ongoing work to have libostree be a "backend" for OCI/Docker container storage; checkout: honor opaque checkouts. + If built with --disable-http2, allow enabling via http2=1 will allow people to more easily play with HTTP2 if it's disabled by default.- Update to version 2018.9: + New features: * Allow disabling pulling from LAN/USB/Internet * lib/repo: Add an API to get min-free-space-* reserved bytes * OstreeMutableTree: add _remove method * repo: Add a checkout option to not hardlink zero-sized files + Bugfixes (apart from regular memory leaks fixes): * finalize-staged: Bump timeout to 5 minutes * deploy: Fix removing /var/.updated with separate /var mount * src/ostree: Don't delete refs having aliases + One notable change in this release is the initrd service ostree-prepare-root.service now runs earlier in the boot process. This shouldn't actually affect OSes, unless there's extended logic in the initrd that integrates tightly with OSTree. + Another systemd related change is the introduction of a path unit: ostree-finalize-staged.path. This allows the service of the same name to be path activated instead of explicitly started at deployment staging time. This release however does not yet rely on this mechanism to give time for packagers and integrators to adapt to the new unit (e.g. by enabling it in the systemd presets). A future release will require this. Note that deployment staging is still not the default for libostree, although at least rpm-ostree now unconditionally uses staging, and while it generally worked well, we hit issues with people using slower hard drives, hence the increase in timeout in PR #1755 . + Another change to call out is: lib/commit: Don't chown objects to repo target owner. We previously had incomplete support for a process running as uid 0 writing to a repository owned by a non-zero uid, but it was never finished. This will likely be revisited at a later time.- Update to version 2018.8: + This release is pretty much all minor bugfixes: memory leaks, fixing error messages and docs, handling a race condition on pull with summary updates. There's one new feature (noted below), and we also gained a new contributing tutorial: https://mail.gnome.org/archives/ostree-list/2018-August/msg00005.html + The one bugfix I want to call out explicitly is: ostree-remount.service: RemainAfterExit=yes (gh#ostreedev/ostree#1697). It's surprising it took us so long to find and fix this; I've seen occasional boot failures that I believe trace down to this problem. The behavior of systemd units of Type=simple without RemainAfterExit=yes set is rather nonsensical; I may try to push to have a warning emitted upstream if such a unit is a dependency of another. + And the one new feature is the auto-update-summary config option for repositories. For more information, see the docs and gh#ostreedev/ostree#1681. - Rebase ostree-grub2-location.patch with quilt. - Drop libostree-fix-wformat-warnings-on-i586.patch: Fixed upstream.- Update to version 2018.7: + There's no one major feature in this release, but we have a variety of improvements and bugfixes.- Update to version 2018.6: + lib/repo: Do free space math under lock in error path. + lib/archive: Tell g-ir-scanner to ignore the private libarchive bits. + deploy: Delete .updated file from /etc and /var on new deployments. + switchroot: Allow letting ostree-prepare-root mount /var. + lib/repo-pull: - Support retries for delta superblocks; - Support queuing delta superblock requests; - Add some missing assertions for progress statistics; - Support retrying requests on transient network errors. + ostree/trivial-httpd: Add --random-408s command line option. + fsck: Add --all to print all corrupted object. + bash-completion: Don't add a space after files and directories. + u-boot: add support for devicetree. - Changes from version 2018.5: + lib/sysroot: Add OSTREE_EX_STAGE_DEPLOYMENTS environment variable. + docs: Add "Hello World" example. + lib/deploy: - Do post-ops when removing staged commit; - Also compare deployment csum versions. + repo: Add checksum to error message opening unreadable object + deploy: - Don't prune repo at finalization time by default; - Return staged deployment; - Silently do nothing if passed same set of deployments. + man: Add man page for create-usb. + fsck: Mark commits with missing or deleted object partial. + Add concept of "staged" deployment. + bin: Hide `admin instutil` command. + pull: Don't save summary to cache before validating signatures. + lib/repo-pull: - Improve error message when no summary is found; - Rename a variable for clarity. - Add libostree-fix-wformat-warnings-on-i586.patch to fix 32-bit arch building failure.- Update to version 2018.4: + A quick turnaround after 2018.3 to include one main PR: gh#ostreedev/ostree#1508. + "switchroot: Ensure /run/ostree-booted is created even without initramfs". + This fixes ostree when booting without an initramfs. Thanks to @akiernan for the bug report and helping review the fix! I'm working on enhancing the test suite, which will help in adding some coverage here. - Changes from version 2018.3: + Keeping up with our ~monthly cadence. A variety of contributors here again, it's great to see! There's two notable features, and a variety of non-critical bugfixes. + On the features side we have: - sysroot: Add concept of deployment "pinning". - ostree: introduce PAYLOAD_LINK object type. - lib/fetcher: Allow clients to append to User-Agent. + By default libostree prunes older deployments; the pinning feature allows you to explicitly retain them until unpinned. This is useful for major version updates. + The PAYLOAD_LINK functionality allows libostree to do content-based deduplication. Previously, if e.g. a file changes in metadata (mode, owner, xattrs such as SELinux labels), we can't make a plain Unix hardlink, and hence by default end up with a new copy on disk. However, the Linux kernel has standardized "reflinks" and some filesystems support them, including modern versions of XFS. When reflinks are available, this functionality causes libostree to compute a content-only payload, and when importing an object, if it matches in content with an existing object, to use reflinks to deduplicate, while using different inodes. + Finally, the HTTP User-Agent API is intended for higher level tools linking to libostree where one wants to expose the app version as well. + Beyond that, as mentioned above we have a variety of non-critical fixes such as memory leaks, test suite improvements, correctly printing the "would be pruned" size when using prune --no-prune, etc. - Changes from version 2018.2: + We're keeping up with the approximately-monthly release cycle. There's mostly a collection of smaller fixes here, with some enhancements. I'm biased but my personal favorite is gh#ostreedev/ostree#1438 since it makes the output of findmnt rather significantly nicer on this workstation where I have container tooling creating sub-mounts in /var that are no longer replicated in /sysroot. + For the embedded space, gh#ostreedev/ostree#1411 for devicetree support is likely interesting, and is related to a discussion on the mailing list: https://mail.gnome.org/archives/ostree-list/2018-February/msg00001.html + Jonathan's PR gh#ostreedev/ostree#1441 to add callback filtering to checkout was necessary for us to re-implement some hairy logic from librpm around "file coloring"; see projectatomic/rpm-ostree#1227 We're getting quite far along now in having rpm-ostree be a truly hybrid system, supporting the existing RPM ecosystem. + Marcus definitely wins the "lines changed" count this cycle by adding SPDX-License-Identifier to all of the C source files (gh#ostreedev/ostree#1439). This happened because we relicensed the documentation to dual CC BY-SA and GFDL in gh#ostreedev/ostree#1432 to enable a Wikipedia page which I just noticed exists now!- Drop pkgconfig(libgsystem) BuildRequires: this is no longer needed.- Modernize spec-file by calling spec-cleaner- Update to version 2018.1: + Support for booting without initramfs. + bash/ostree: add missing --add-metadata option. + bin/commit: add --keep-metadata option. + bin/commit: move parent checking code higher up. + bin: Fix cookie builtin build with curl but no soup. + build-sys: Allow building with curl, but without libsoup. + build-sys: Link with -ldl for rust build. + deploy: add --karg-none argument. + find-remotes: Add --finders option. + grub2: Exit gracefully if there's no system ostree repository. + lib/checkout: Validate pathnames during checkout. + lib/fetcher: Add version to USER_AGENT string. + lib/pull: allways include ostree-repo-pull-private.h. + lib: Validate metadata structure more consistently during pull. + ostree-prepare-root: enabler for simpler kernel arg. + rofiles: Add --copyup option. + rofiles: Fix --copyup when creating a new file.- Update to version 2017.15: + The headlining feature in this release is support for repository locking, contributed by Dan Nicholson. Currently it is disabled by default; add locking=true in a repository configuration file to enable. This feature should be considered as "tech preview"; it's highly likely we'll stabilize it in its current form, but it's possible something will change. Currently the locking only protects commit + prune; there is a large pending PR to extend locking to many more APIs and commands. + Several new APIs were added; for example libostree now has a convenient API to break a hardlink, which happens in e.g. rpm-ostree in several places such as handling the RPM database. + Also, multithreading support in the commit APIs was cleaned up and clarified. It's now possible to call transaction_set_ref() from multiple threads, which rpm-ostree uses now to import RPMs to OSTree in parallel. + We're tracking an issue with http2+libcurl and it looks like there are a number of issues still floating around HTTP2+libcurl (some are server bugs), that we added support at both build and runtime to disable http2. + The fsck command learned how to verify ref bindings, and relatedly, the commit command gained a --unbound option to skip creating ref bindings.- Update to version 2017.14: + This release is almost entirely bugfixes. One notable fix is a read-after-free when libcurl is finalizing that some people have hit. + There are a number of improvements around the ${repo}/tmp directory and the per-transaction staging directory in preparation for adding locking in a future release. This release should already help avoid several failures when doing concurrent commits; the aim of the locking work will support concurrent prunes and commits.- Update to version 2017.13: + A lot of across-the-board improvements here; the pure bugfixes are mostly in the experimental Avahi bits, hardening the FIFREEZE on /boot code, explicit errors when trying to commit non-UTF8 filenames, and finally a number of fixes around our use of mmap. + One slight backwards-incompatible change (but I doubt it'll break anyone): Disallow refs starting with a non-letter or digit If this does affect you, please let us know ASAP. + For improvements, first up, Alex changed the static delta code to avoid holding everything in memory; this is a substantial improvement for large deltas, and also for flatpak which uses deltas as a "bundle" format. + A few notable changes: - commit: Add _CONSUME modifier flag. You probably want to use this by default for your build/package systems. - core: Add standard SOURCE_TITLE metadata key. This one I think is conceptually quite interesting; for many people, their ostree commits are derived from something else that has its own versioning, and it's useful to show that explicitly. I encourage ostree-based build systems to consider rendering human-readable information about your builds into this standardized metadata key. - On the command line side: cleaning up the --help output significantly.- Update to version 2017.12: + Quite a lot in this release. First, on the notable bugfix side, we fixed an issue where background threads could remain alive after an error was encountered during pulls. Particularly for projects like flatpak that do multiple pulls in process, this is an important fix. + Another important change related to pulls is that libostree now performs checksums when mirroring again. The intent here was to speed up mirroring, but it led to a confusing security story. Now it's easier to explain: for HTTP pulls we verify checksums (and this can be disabled), for local filesystem pulls we don't, (but it can be enabled). We've always verified checksums by default when pulling from an archive repository into a non-archive. + Anton Gerasimov contributed a change to the libcurl backend to support PKCS#11 URIs, useful for storing certificates in a hardware or software enclave. + The schema for the experimental OstreeRepoFinderMount API to find OSTree repos on removable media has changed incompatibly, so that the media doesn’t need to contain two similar lists of refs. It will now look in .ostree/repos.d, .ostree/repo, ostree/repo and var/lib/flatpak paths on removable media. + Similarly, the experimental ostree_repo_resolve_keyring_for_collection() API has changed to return an OstreeRemote containing the keyring, rather than just the keyring, making it more generally useful. + The bloom filter used when finding refs from remote peers has been fixed to work correctly on 32-bit architectures (such as ARM). This doesn’t change the bloom filter format, but will require bloom filters created on 32-bit architectures to be regenerated in order for advertisements from those machines to work. + Repositories which have a collection ID set will now put their repository metadata in an ostree-metadata ref when ostree summary --update is run, in addition to putting it in the summary file. This is part of a plan to securely allow unsigned summary files for peer-to-peer pulling of refs. This won’t happen for repositories which don’t have a collection ID set, or if --enable-experimental-api is not configured. + A new ostree create-usb command has been added (if configured with --enable-experimental-api) which can be used to put refs from repositories onto removable media in a format which can be detected by OstreeRepoFinderMount. For example, to allow easy sharing of flatpaks or OS updates between offline machines. + OstreeRepo has gained hash() and equal() methods, so it can now easily be used in a hash table based on its device number and inode, rather than using its path. + A minor bug was fixed in rofiles-fuse, which would cause files to be created with random mode bits if called for O_RDONLY. + For clients that use OstreeRepoDevInoCache, a bug was fixed which caused libostree to ignore callbacks that allow modifying file modes, ownership, and extended attributes. + libostree now supports --with-crypto=gnutls. Like the OpenSSL support, this is currently just checksums, but we are driving this towards making the GPG dependency optional and supporting other signature methods. + In previous releases, libostree learned how to make hardlinks for local pulls. But if we couldn't hardlink (e.g. the devices were separate), the local pull code went through a much slower generic path that included re-checksumming objects. Now there's a copy/reflink fast path that uses FICLONE/copy_file_range() directly if possible. This can be substantially faster. + ostree prune learned a new --only-branch option. This can be a lot more convenient for release engineering tasks. + As usual, more work was done to improve the testsuite. It should now be able to better detect tmpfs/overlayfs environments. The upstream CI now also runs tests in a non-overlayfs environment for better coverage. - Changes from version 2017.11: + This release has a few new features, some UX improvements for the command line, and a variety of bugfixes. + The project is now more canonically called "libostree", though "OSTree" and "ostree" are also fine. + The most important bugfix for anyone using rofiles-fuse (typically build systems, rpm-ostree also uses it) is: - rofiles-fuse: Fix lchown() and hardlink verification for symlinks. + On the features side, we've added a few new APIs to the libarchive importing and checkout path that will be used by rpm-ostree. This should be of interest to anyone using libostree for build systems or underlying a hybrid image/package system like rpm-ostree. + Also on the host system side, there is a new (canonical) place for build systems to put the kernel/initramfs: /usr/lib/modules/$kver. + Make all of the deployments show up in the uboot configuration, to help enable automatic fallback if a new OS fails to boot. + Lots of style cleanups, some "error prefixing" work to ensure we produce understandable errors in more situations, and one other notable cleanup: add a tmpfiles.d snippet to clean up /var/tmp/ostree-ovl.XXX. This should be nice for anyone who uses ostree admin unlock frequently. + Improve the management of configuration for remotes. + Lots of cleanup in the command line parsing and fixes for - -help, and also helped with the new --selinux-label option for ostree commit. + Fix the handling of GPG keys that have subkeys. + Fix the build system and tests.- Update to version 2017.10: + In this release Coverity scans were set up , and fixed all of the problems it found. None of the issues were critical; the only off-by-one array indexing for example was in a test case. + Add bash completion. + Documentation fixes. + There are a number of smaller features: - lib/repo: Add API to create and list ref aliases. - repo: Introduce ostree_repo_open_at() and ostree_repo_create_at() is a notable new API, and finally completes our fd-relative porting for OstreeRepo. The semantics of these functions are nicer; it's now more convenient to unconditionally call ostree_repo_create_at() for example to ensure a repository exists, returning the opened result. + lib/sysroot: Add journal-msg signal is a nice cleanup in that we finally stopped doing printf() in the library code for OstreeSysroot. If you maintain a client, you should start listening for this signal, like the demo command line does (if you want the text of course). + In the "important bugfixes" category, pull: mark commits from local cache as partial fixes up the --localcache-repos logic. + Also a number of bugfixes contributed for the collections logic as well as cases of trying to download a missing summary file.- Update to version 2017.9: + A notable new feature in this release is that the pull machinery now interprets two new metadata keys: ostree.ref-binding and ostree.collection-binding. This allows closing a longstanding class of "sidegrade" attacks that Florian Weimer identified when performing a security audit of libostree years ago (bgo#724873). There was a more recent discussion on this topic on the list: https://mail.gnome.org/archives/ostree-list/2017-May/msg00013.html + For the ostree-as-host case, this only matters if you offer multiple refs. For flatpak, it's more important as a MITM attacker could actually switch applications; that's why flatpak implemented this a while ago as xa.ref. + I'll note here that it's recommended for content providers to make use of ostree's support for tls-ca-path to implement TLS CA pinning, which protects all metadata and content in a strong fashion; in this scenario the GPG signatures act as a secondary layer of defense and make offline verification easier (for e.g. mirroring). + Otherwise, there's some performance enhancements for local pulls, and a variety of bugfixes.- Update to version 2017.8: + This is a quicker release closely following 2017.7, but it still includes a number of changes. First, a lot of work is landing from Philip/Krzesimir for doing "collections" and pulling content from Avahi/USB drives etc. That work is still underneath --enable-experimental-api, but look for more from that soon! + Other notable user-visible features from this cycle are: - lib/repo: Add min-free-space-percent option, default 3%. - Add "pull --localcache-repo". + An important bugfix for bare-user repo mode owners is: lib/commit: Ensure bare-user objects are always user-readable. + Besides that we have a lot of code cleanup, CI work, etc.- Update to version 2017.7: + The most notable thing for this release is that for flatpak users/distributors, this release adds a lot of (opt-in) hardening against setuid or world-writable files. These issues are also (to a lesser degree) applicable to ostree-based build systems which use the bare-user repository mode. A pending flatpak version will require this version of libostree. + For ostree-as-host, we fixed a major regression in SELinux labeling for /etc (only applies to SELinux-using host systems). + Known issue: test-symbols.sh will fail when building from the tarball (as opposed to a git clone). + Besides that, there's various smaller cleanups and fixes. It's great to see contributors from a variety of organizations; having libostree be a shared infrastructure layer across distributions is a longstanding vision.- Update to version 2017.6: + One of the most notable changes in this release is that we switched to using a systemd generator for handling /var, which means admins can now set it up as an explicit mount point. We feel pretty confident in the code, but do test your specific setup. One note in particular; the new model (obviously) requires systemd, and while we tried to preserve the non-systemd path, it wasn't explicitly tested. + The work to port to a new code style continues rapidly; at this point most of the library is converted, with just the command line remaining. I think the new style is a lot more readable now that we rely fully on __attribute__((cleanup)). + Enhance the OstreeAsyncProgress reporting API, which I think is going to be quite useful for user interface frontends (like GNOME Software). + There's a smattering of smaller bugfixes; minor memory leaks, double close() and the like. In this cycle we also beefed up our CI/testing more - we now test both Fedora Atomic Host and flatpak more explicitly. Contributions to extend the suite to other distributions would be appreciated; for example, tests for ostree-as-host on Debian. Our Travis-executed tests should be extensible. + Fix some of the test suite for installed tests, and also introspection fixes for language bindings. + Another feature that involved a lot of internal changes is our handling for /etc on SELinux-based systems. We now label files as we go rather than having a more fragile separate relabeling path. This is also exposed as an API, which is used by rpm-ostree now. I think this particular change highlights the strength of "libostree" as an API that can be reused by higher level systems. - Changes from version 2017.5: + This is a bugfix release for 2017.4 to fix a regression that broke flatpak. - Changes from version 2017.4: + A notable new feature in this release is a fourth repository mode: "bare-user-only". This is very similar to bare-user, but canonicalizes permissions and ignores xattrs. The intended use of this is for "non-OS" container tools such as flatpak, where one intentionally discards the traditional file ownership. (I'm calling this container case "non-OS" to distinguish from other container tools where one might want to "log in" via PAM and supporting distinct UIDs inside a single container is valuable) + We have a few new APIs, such as ostree_check_version() which is important when making use of some of the "API extensions" we have using GVariant on e.g. ostree_repo_pull_with_options(). + The diff is a bit larger due to us switching to a new code style. + Another quite important change is that ostree trivial-httpd is disabled by default. With a libcurl build, this is the last part that links to libsoup. It's only needed for unit tests, so can be subpackaged or discarded. (We're doing the latter for Fedora). + Speaking of curl, we now support --with-openssl which enables using OpenSSL's libcrypto for SHA256. This can be notably faster. You likely want this if e.g. libcurl is already linked to OpenSSL for you. I'm increasingly confident in the curl code, and should be ready to recommend using it by default in the next release or two.- Update to version 2017.3: + contrib/golang: rm directory. + deltas: Don't put unreadable *from* objects in fallback. + delta-show: Don't dump whole superblock, do show fallback checksums. + repo: Fix static delta progress display. + pull: Explicitly error out if metadata objects are fallbacks. + pull: Fold together deltapart+fallback count for display. + ci: Install PyYAML. + lib: Ensure an error is set in ensure_unlinked() if errno != ENOENT. + libtest: Re-enable quiet mode for building fs tree. + README.md: Add more/clean up links to consuming projects. + libglnx: Re-bump to master due to accidental reversion. + ci: Hard error on all -fsanitize=undefined warnings. + build: Add --with-smack, use it to reset contexts for writing objects. + main: Make ostree --version output YAML (and add gitrev). + deploy: Correctly use libmount unref() calls rather than free(). + man/repo-config: Document mirrorlist. + tree-wide: Squash noncritical compiler warnings. + deploy/libmount: Fix build with old util-linux 2.23 (CentOS7). + fetcher: Log failures into journal. + upgrade: Add support for --pull-only and --deploy-only. + grub2: Use g_spawn_sync() rather than GSubprocess to avoid SIGCHLD. + deltas: Expose the filename parameter. + pull: don't use static deltas if archive repo. + libglnx: bump for -Wmaybe-uninitialized fix. + grub2: Use "linux16" only on x86/x86_64. + pull: Use all available commits for delta sources. + build: Fix disabling --enable-man if xsltproc is not available. + fetcher/curl: Fix leaks caught by ASAN. + libostree: Allow compression level to be set for archive-z2 stream. + Allow and start using C99 declaration-after-statement. + repo/checkout: Verify early if src/destination are on same device. + checkout: Support a "pure addition" mode. + repo/checkout: fix 32-bit builds. + repo-pull: add option to set the async update frequency. + ostree: allow setting update frequency from command line. + repo/checkout: Convert a few functions to new "stmt-decl/FALSE" style.- Update License: this should be LGPL-2.1+, not GPL-2.0+.- RPM group changes- Update to version 2017.2: + libostree: Don't distribute generated enumtypes in tarballs. + lib: Adjust comments in symbols section for last release. + lib: Prefix GPG errors with the checksum. + lib: Move the bupsplit selftest into our test framework. + Rename to libOSTree. + oxidation: Add implementation of bupsplit in Rust. + trusted.gpg.d: keep in the same location. + lib: Add ostree_repo_reload_config(). + rust: Support `make dist` -> cargo vendor. + repo: Add archive/zlib-level option, drop default compression to 6. + fetcher: Drop the libsoup queue. + libcurl backend. + fetcher queue: also throttle on outstanding writes. + libostree: added empty ot_cleanup_{read,write}_archive macros. + ostree-repo: Clarify error behaviour of remote option getters. + admin-switch: Don't segfault if there's no remote. + commit: Support -F/--body-file, like git. + build: Remove .PHONY for Rust shared library. + rofiles-fuse: Support write/read_buf(). - Rename from ostree to libostree, following upstream.- Update to version 2017.1: + This release has mostly bugfixes, the main new feature is that the prune command gained more sophistication around selectively pruning branches. We're planning to use this in Project Atomic work where we want to co-locate both "development" and "stable" branches in the same repository. + The next release is likely to be more exciting, as we have an additional new libcurl backend in the works - this release contains some preparatory cleanup for that.- Update to version 2016.15: + This release is mostly bugfixes - for example, it cleans up the vast majority of memory leaks caught by ASAN. We also build without libsoup again, which is preparatory for a potential addition of a libcurl HTTP backend. + Another notable change is that we now always checksum individual objects even when applying static deltas, regardless of whether or not the summary file is signed. This is part of an ongoing thread about supporting OCI as a transport layer. - Add pkgconfig(zlib) BuildRequires: configure explicitly checks for it.- Update to version 2016.14: + otutil: Note that ot_log_structured takes a printf format. + libglnx: Bump to master (for -fsanitize fixes). + Distribute test scripts even if we wouldn't run them. + Distribute valgrind suppressions in tarballs. + Filter bootloader supplied kernel cmdline options. + repo: Don't put remote refs in the summary file. + pull: Don't do deltas with --commit-metadata-only. + pull: Add per-remote cookie jar. + remote: Add command to list cookies. + remote: Add commands to add and remove cookies for a remote. + OsreeFetcher: Treat 403 as not found. + trivial-httpd: Add support for checking cookies. + Update documentation for cookie handling commands. + deltas: Only keep one file open at a time during compilation. - Changes from version 2016.13: + pull: Add support for `http-headers` option. + pull: Redo logic for "scanning". + commit: Fix reading xattrs from OstreeRepoFile:s. + lib: Define and use cleanup functions for gpgme. + lib: Split out helper function to create GPG context. + Add "gpgkeypath" option to remotes. + lib: Add an API to GPG verify a commit given a remote. + pull: Do GPG verify commit objects when using deltas.- Add pkgconfig(libsystemd) BuildRequires: configure explicitly calls on both .pc names (systemd and libsystemd). We do want to stay independent of potential systemd packaging changes.- Update to version 2016.12: + pull: Support inherit-transaction. + pull: Support multiple specifications of --subpath. + docs: amend vmlinuz & initramfs naming convention. + ostree-sysroot-deploy.c: delete redundant check. + OstreeFetcher: provide proxy credentials if needed. + core: Do create hardlinks to symlinks for checkouts. + add .redhat-ci.yml and .redhat-ci.Dockerfile. + .redhat-ci.yml: use projectatomic/ostree-tester. + Fix regression for symlinks in bare-user repos. + ostree_repo_read_commit_detached_metadata: Handle parent repo. + detached metadata: Put these in transaction. + Release 2016.12.- Update to version 2016.11: + static-delta: add some error handling. + pull: Do allow executing deltas when mirroring into bare{,-user}. + ostree-repo.c: Fix file descriptor cleanup. + ostree_sysroot.c: Don't close sysroot_fd twice. + sysroot: Port some small cleanup code to fd-relative. + sysroot: Port origin writing code to fd-relative. + sysroot: Drop an fsync for origin file when writing deployments. + sysroot: Drop an unnecessary fsync. + boot: Ensure we remount /var writable before systemd does journal flush. + ostree_sysroot_init_osname: also create /var/log. + docs: add mention of rpm-ostree package layering. + admin: Allow running status unlocked. + Fix spelling of "repository". + checkout: Fix fsync defaults for new API to be off for real. + trivial-httpd: Port mostly to fd-relative. + libglnx: Update to latest.- Update to version 2016.10: + pull code: support contenturl setting. + trivial-httpd: prepend timestamp in log file. + pull: drop fetching_sync_uri. + pull: add mirrorlist support. + libtest: add has_gpgme() helper function. + tests: add tests for contenturl and mirrorlist. + pull code: clean up mirrorlist hack. + build: Set --enable-man during distcheck. + build: Distribute man page XML source. + build: Actually distribute man page XML source. + switchroot: Fix build on Ubuntu. + switchroot: Fix test-switchroot now autotools can build static. + ostree-prepare-root: Error if realpath fails. + ostree-prepare-root: Fix running with musl. + gpg: do not segfault when the algorithm name is not known. + repo: Revert default timestamp from 1 back to 0. + delta: Add missing `goto out` for failure to mmap(). + repo: Only use mmap() for metadata > 16k. + delta: Unreference files we've processed. + fetcher: Fix another finalization deadlock. + sysroot: Avoid double cleanup, and ensure no cleanup if specified. + core: Make OSTREE_TIMESTAMP public API. + Release 2016.10.- Update to version 2016.9: + libostree.sym: Add 2016.9 section. + deltas: Handle cleanup of fd array properly. + deltas: Use F_DUPFD_CLOEXEC properly. + pull-local: Support requiring static deltas. + tests: Ensure deltas for pulling when needed. + pull: Disable static deltas by default for local pulls. + tests: Test that local pulls do not use deltas. + Move ostree-* executables to /usr/lib/ostree. + ostree_bootdir: prepend $(prefix) to path. + ostree_bootdir: properly preprend $(prefix). + manual/repo.md: reword bits about the summary file. + repo: Really ignore progress changed user data. + fix typo in docs/manual/atomic-upgrades.md. + prune: Elaborate on what formats are accepted by dates. + fixup! fix typo in docs/manual/atomic-upgrades.md. + test-rofiles-fuse: Actually check out via hardlinks. + rofiles-fuse: Rework to be based on nlink. + pull_with_options: fix remote parameter name & desc. + pull_with_options: allow GPG verification override. + pull_with_options: fix stray return FALSE. + pull: Make .commitpartial files world readable. + repo: Add prefixes to errors for querying size/deleting. + lib: Add an API to list only "our" objects, fix prune to use it. + pull: use same name for parameter and documentation comment. + u-boot: Merge ostree's and systems uEnv.txt. + sysroot: Drop unnecessary `dup()` invocation. + sysroot: Add a flag to suppress post-deploy cleanup. + commit: Don't delete tmp/cache dir. + switchroot: Fix building with musl libc. + ostree-prepare-root: Allow building statically with musl. + switchroot: Replace custom error printing with err/warn functions from libc. + switchroot: Move `path_is_on_readonly_fs` to header file. + repo-pull: properly store the cancellable.- Update to version 2016.8: + Almost entirely bugfixes. Most notable is a fix for a relatively rare race condition in the pull code on cleanup (after completion), and also a memory leak. + Besides that, there are improvements for the test suite, some more porting away from libgsystem, a bugfix for static deltas important to flatpak, build tweaks for older glib, etc. - Changes from 2016.7: + There's quite a lot of changes in this release since 2016.5, but one thing to call out explicitly it is a fixed race condition in the HTTP pull code that could cause hangs or crashes that mostly occurred only when doing "large" pulls (thousands of object requests). If this occurs, client systems can work around it by cancelling and retrying the pull.- Move grub2 related files to new ostree-grub2 subpackage (similar to Fedora), only used to integrate ostree with grub2 (fully fix boo#974714).- Update to version 2016.6: + refs: add "ostree refs --create" and unit tests. + manual: Link to mender.io. + Add "archive" as an alias for "archive-z2". + libglnx porting: delete temp files on failure of file creation. + repo: Avoid a possible divide by zero in progress. + manual: Discuss mirroring. + build: Fix libreaddir-rand to honor global CFLAGS. + tests: Support OT_SKIP_READDIR_RAND. + pull: Ensure we always process queue only from main thread. - Switch git url to https://github.com/ostreedev/ostree. - Fix Url in specfile.- Add ostree-grub2-location.patch: Fix path to find grub-mkconfig_lib. openSUSE installs those files to /usr/share/grub2, upstream would do /usr/share/grub (boo#974714).- Update to version 2016.5: + Add a stub .travis.yml. + tests: Add a test-abi. + pull: Add OSTREE_REPO_PULL_FLAGS_UNTRUSTED flag. + Add --untrusted option to pull and pull-local. + OstreeSePolicy: add ostree_sepolicy_get_csum(). + core: Add verbose messages for pruning. + core: Add debug messages for traversing. + build: Set G_LOG_DOMAIN to OSTree. + main: Set log handler for OSTree domain. + packaging: fix bashism in dist-snapshot target. + docs: Add a section on repository management. + commit: Support generating commits with no parent, or a custom one. + commit: Support writing orphans. + commit: support editor for orphan commits. + docs/CONTRIBUTING.md: Update for github move, Homu etc. + test-xattrs: use TAP syntax to skip test. + various tests: skip if temp directory lacks xattr support. + Symlink libreaddir-rand.so into tests directory. + tap-test: clean up temporary test directories as intended. + In tests that use gpg, terminate the gpg-agent after testing. + Load g-i bindings from builddir during build-time testing. + tests/admin-test.sh: this is a bash script, not a POSIX sh script. + Force libreaddir-rand to be a shared library. + Skip tests that run rofiles-fuse if /dev/fuse or /etc/mtab unavailable. + test-pull-untrusted.sh: always corrupt a regular file, not a symlink. + basic-test: commit with a non-empty subject. + Probe for GNU parallel more accurately. + tests: Make failing to kill the GPG agent non-fatal. + libtest.sh: use G_TEST_SRCDIR, G_TEST_BUILDDIR to find resources. + test-abi: use G_TEST_SRCDIR, G_TEST_BUILDDIR. + test-xattrs: sync how this is skipped with test-rofiles-fuse. + libtest.sh: only check whether $(pwd) is empty once. + manual: Fix a bunch of typos and docbookisms. + Introducing ostree-grub-generator. + pull: Don't try to cache summaries for pull-local. + Fix local-pull test. + pull-local: Support --gpg-verify and --gpg-verify-summary. + build: Find grub2-mkconfig a bit more automagically. + build: Make tests/libreaddir-rand.so rule use AM_V_GEN. + tests: add libostreetest.h to EXTRA_DIST. + tests: add missing ${CMD_PREFIX} before ostree. + contrib: indent golang code using only tabs instead of both tabs and spaces. + Remove empty new lines at the EOF. + docs: Prefer the form "cannot" to "can not". + Use git.mk. + Support pathnames for --subpath=... + Export ostree_repo_get_remote_option* functions. + Inherit remotes and remote options from parent repo. + Add test case for inheriting remote options. + cfg.mk: ignore syntax-check for git.mk. + Add support for ostree static-delta delete. + small cleanups. + Fix the symbol versions for ostree_repo_get_remote_*option. + ostree-repo-pull: always initialize flags_i. + pull: More consistently use remote_repo_local for local repos. + build: Move grub2-15_ostree back to pkglibexecdir. + Fix AS_HELP_STRING for builtin grub2 mkconfig. + fetcher: Initialize output_stream_set_lock mutex. + commit: Fix crash if dfd_iter is NULL. + Add cache_dir_fd to OstreeRepo. + Add OstreeRepo option for an out-of-band cache dir. + man: Elaborate on per-remote GPG. + Add remotes-config-dir to OstreeRepo. + Look for $remotename.trustedkeys.gpg in remotes.d dir. + refs: Add g_prefix_error around opendir for easier debugging. + static-delta: Put temp files in /var/tmp. + static-delta: Initialize read_source_fd to -1. - Stop passing --with-grub2 to configure, no longer recognized.- Update to version 2016.4: + fetcher: Remove message_to_request table + fetcher: Convert from GSimpleAsyncResult to GTask + fetcher: Rework reference counting + fetcher: Track outstanding requests with a table + sysroot: Cleanup refs and prune even on last undeployment + pull: Recover from missing commits in recursive pulls + doc: Note that refs --delete does not prune + tests: Add a test for pull+deploy of specific "bare" commit + static-delta: Handle LZMA_BUF_ERROR returned by zlib + static-delta: Don't run bspatch when output object already exists + static-delta: Set error on bsdiff failure + commit: Improve variable name + Don't require /boot/uEnv.txt for u-boot support + tests: fix LZMA test to really compress/decompress + upgrader: Add ostree_sysroot_upgrader_dup_origin() + upgrader: Allow overriding the commit to pull + upgrade: Add --override-commit=CHECKSUM option + prepare-root: set up /boot bind-mount for single partition systems + static-delta: Fix annotation on ostree_repo_list_static_delta_names + sysroot: Write symlinks before calling fsync(), then rename after + init-fs: Explicitly set /tmp to 01777 + core: use OSTREE_OBJECT_TYPE_LAST instead of OSTREE_OBJECT_TYPE_COMMIT + pull: add support for tombstone commits + repo: create a tombstone commit when deleting a commit + fsck: add argument --add-tombstones + tests: add tests for prune and tombstones commits + docs: Note not to put private keys in /usr/share/ostree + generate-static-delta: Support min-fallback-size 0 to disable fallbacks + static deltas: Add support for inline-parts + static-deltas generate: Add --inline option to CLI tool + Add tests for inline static deltas + deltas: Make apply-offline only read the parts once + delta: Ensure the from commit exists when applying static delta + static-delta apply-offline: Don't skip validation + Add _ostree_repo_open|commit_untrusted_content_bare + deltas: Verify checksums in apply-offline unless skip_validate is TRUE + deltas: Make min-fallback-size 0 actually disable fallbacks + deltas: Support passing filename to delta generator + deltas: Support passing filename to ostree_repo_static_delta_execute_offline + pull: Verify checksums from static deltas unless gpg signed summary + deltas: Support including detached metadata in static deltas + libostree: Fix a couple compiler warnings + prune: add --delete-commit + fsck: create a tombstone when the parent is missing + tests: add test for ostree prune --delete-commit + prune: add --keep-younger-than=DATE + pull: make slightly clearer when failing for missing xattrs support + ostree: do not print the usage on each G_IO_ERROR_NOT_SUPPORTED + libostree: add new API ostree_repo_write_commit_with_time + commit: add --timestamp=TIMESTAMP + tests: add tests for prune --keep-younger-than=DATE + tests: prefix invocation of ostree with where missing + repo: Validate checksums have correct length + repo: Never delete .commitmeta files + trivial-httpd: Avoid SoupBuffer when there's no content + glnx: Update from master + fetcher: Remove "sending_messages" hash table + fetcher: Remove "total_requests" counter + remote: Print full refspec in "ostree remote refs" + repo: Fix backwards timestamp in ostree_repo_write_commit() + gpg-verifier: Fix compiler warning + Release 2015.11 + parse-datetime: use the module from gnulib + tests: add missing ${CMD_PREFIX} + cmdline: Fatally error if the timestamp in a commit is invalid + build: Delete generated parse-datetime.c file, use AM_V_GEN + build: Also add a configure check for YACC/bison + Update to latest libglnx + repo: Add _ostree_repo_allocate_tmpdir helper + repo: Use per-transaction staging dir + repo: Allocate a tmpdir for each OstreeFetcher to isolate concurrent downloads + fetcher: Add "config-flags" construct-only property + fetcher: Move the SoupSession to a separate thread + pull: Push a temporary main context for sync requests + build: Fix srcdir != builddir + repo: Add ostree_repo_verify_summary() + remote: Add "ostree remote summary" command + repo: new function ostree_repo_prune_static_deltas + prune: add new flag --static-deltas-only + tests: add tests for prune --static-deltas-only + deploy: Find kernel/initramfs consistently from filesystem + bootconfig: Add ostree_bootconfig_parser_write_at + deploy: Change large parts to be fd-relative, drop fsync + fetcher: Lazily create tmp directory + grub2_generate: load sysroot before using it + repo: Expose dfd-relative mtree writes as public API + repo: Add APIs for devino optimization between checkout -> commit + Release 2016.1 + repo: Note global transaction resume is legacy + sysroot: Don't individually fsync dirs in checkout, rely on syncfs + diff: do not traverse parent commits + Add a checkout option to skip fsync + refs: Add a missing `goto out` for error handling + grub2: Don't delete grub2.cfg.old file we just copied + tests: Use "bash strict mode" + build: Move man pages into man/ + build: Rename doc/ -> apidoc/ + Rewrite manual in mkdocs + apidoc: Remove unnecessary srcdir != builddir workaround + repo: Port -refs.c to openat() + build: Add --disable-man + lib: Add a #define OSTREE_SHA256_DIGEST_LEN 32 + build: Hoist man conditional higher + static-delta: Add `show` subcommand + packaging: Sync spec file with Fedora + build: 'make clean' removes parse-datetime.c + docs-md: Delete (obsoleted by docs/) + README.md: Update to link to Read The Docs, describe a bit better + build: Remove --disable-static-deltas option + lib: Create an internal static delta parsing/opening function + lib: Expand `ostree static-delta show` to show part stats + fetcher: Fix hung GTlsInteraction + Import rofiles-fuse + Add an `export` builtin, and API to write to libarchive + pull: Support specifying exact commit to pull via branch@commit + manual-tests: New static-delta-generate-crosscheck.sh + man/ostree-export.xml: Add to git + Support Docker-style whiteouts + packaging: Add a fuse subpackage + rofiles-fuse: Fix truncate call to not use O_CREAT + manual: Note that the bare-user mode exists + Rename libarchive write API to "export", matching command line + repo: Add ostree_repo_import_archive_to_mtree + ostree-sysroot: add debug option to help testing + pull: Add require-static-deltas pull option + pull: Add a --dry-run option for static deltas + build: Link ostree with libarchive + docs: Add a new formats section, move static deltas in there + libarchive: Make autocreate_parents imply autocreating root dir + build: Use threadsafe GPGME + gpg: Use gpg_strerror_r for threadsafety + Release 2016.2 + libarchive: Fix a 32 bit format warning + lib: Two more compiler warning fixes + deltas: Fix some more 32 bit warnings + deltas: Fix regression in ostree_repo_static_delta_execute_offline + rofiles-fuse: Handle operations on the root + deltas: Include an endianness marker + deltas: Use endianness marker when parsing + deltas: Heuristically detect endianness for older deltas + deltas: Add a compression size heuristic for endianness detection + Release 2016.3 + docs: Add a blurb on the summary file + Fix make syntax-check + test-rofiles-fuse: skip when fusermount is not present + lib: Introduce versioned symbols + repo: Add ostree_repo_get_dfd() + Add a missing #include to fix "make check" + ostree-repo: new public function `ostree_repo_list_refs_ext` + refs: allow to specify multiple refs as args + refs: add tests + libostree: Adjust `cleanup_ref_prefix` to use ostree_repo_list_refs_ext + refs: Add argument --list to print the full ref name + tests: Port to glib-tap.mk, make `make check` run all of the tests + deploy: Bump the mtime on ostree/deploy after deployments finish + tests: Convert two more exit 77 instances into TAP-compatible SKIP + docs/introduction: Note VMs vs baremetal + lib: Add ostree_sysroot_init_osname() API, bump mtime + tests: More TAP fixups + tests: Unify some tmpdir code, add ability for C to use libtest.sh + lib: Add ostree_sysroot_load_if_changed() API + tests/basic: Fix race in timestamp test + build: Don't install test data without --enable-installed-tests + docs: Reference the git docs on references + libotutil: new function ot_openat_ignore_enoent + pull: cache summary and summary.sig + repo: use the skip summary download optimization for repo_remote_fetch_summary + prune: delete all cached summaries files + tests: add test for summary file caching + repo: Fix the skip-summary-if-summary.sig-is-same cache + rofiles-fuse: Fix permission comparison + docs: Cleanup Markdown + docs: Add a section on writing buildsystems + contrib/golang: Initial golang bindings + tests: Strengthen test tmpdir sanity check, be compat with ginsttest saving + libglnx porting: gs_fd_close -> glnx_fd_close + libglnx porting: gs_free -> g_autofree + libglnx porting: xattr calls + libglnx porting: gs_transfer_out_value -> g_steal_pointer + Don't fail "ostree remote refs" if writing the summary cache is not permitted + manual: Migrate related projects wiki page into manual + deploy: Handle a read-only /boot + mkdocs: Fix the site name + tests/admin-test.sh: add #!/bin/sh + Skip test_libarchive_ignore_device_file if we cannot write xattrs + test-libarchive: fix underlinking + admin-switch: Add missing reboot argument + Use GSubprocess instead of GSSubprocess (libgsystem removal) + libglnx porting: Use glnx_set_error_from_errno + libglnx porting: Use glnx_shutil_rm_rf_at() + libglnx porting: Use glnx_opendirat() + admin: Add an `unlock` command, and libostree API + Fix building without libarchive + pull local: Don't import objects we already have + prune: Don't fail on partial commits + tests: Add a commitpartial + prune test + traverse: Require variant when traversing dirtree + Release 2016.4 - Add bison, pkgconfig(fuse) and pkgconfig(mount) BuildRequires: New dependencies.- Update to version 2015.9: + _ostree_static_delta_part_validate: Take a stream instead of a file as arg + sysroot: Add ostree_sysroot_prepare_cleanup() + deploy: Do not prune repository + libglnx: Update from master + reset: Simplify argument checking logic + repo: Fix build without libsoup + pull: Honor depth with OSTREE_REPO_PULL_FLAGS_COMMIT_ONLY + Mutable is a keyword in C++11 + Remove unused variables- Update to version 2015.8: + gpg: Add ostree_gpg_verify_result_describe() + admin: Show GPG signatures in status command + pull-metalink: Don't print error output when we expect failure + Add an API to set/unset a deployment tree's mutability + ostree_repo_checkout_tree_at: remove @subpath documentation + refs: Use *at for writes, honor repo fsync flag + repo: Add a private helper to replace a file, honoring fsync policy + libglnx: Pick up file permission regression fix + tests: Fix root uid check in test-commit-sign.sh + _ostree_repo_file_replace_contents: make buf const + summary: write the contents to a temporary file + config: add new parameter "commit-update-summary" to core section + libglnx: Update to latest + reset: Don't enforce parent commits + repo: Improve error handling in sign_data() + repo: Add a "gpg-verify-result" signal + pull: Print GPG signature status as soon as its known + repo: Add ostree_repo_remote_get_gpg_verify() + admin: Conditionally show GPG signatures in status command + sysroot: Cache an OstreeRepo instance + main: Tweak GPG output to match rpm-ostree + sysroot: Add ostree_sysroot_get_fd() + libglnx: Update from master + sysroot: Close sysroot fd in finalize + status: Don't crash if we deployed a local refspec + deploy: Use syncfs() in addition to sync() + deploy: Drop fsync of modified config files + deploy: Drop a fsync, use fd-relative APIs + README.md: fix typo + reset: update help output + pull: Always request detached metadata for commits + test-auto-summary.sh properly quote arguments to assert_streq + g_output_stream_splice: check correctly the error code + gpg: do not use secring.gpg + show: add option --gpg-homedir + libotutil: Establish a place for GPG utilities + libotutil: Add ot_gpgme_ctx_tmp_home_dir() + repo: Initialize GPGME in instance init() + ostree: Split up "remote" subcommands + gpg: Fix _ostree_gpg_verifier_add_keyring() + pull: the commit size in the summary is not for the detached metadata + Fix build when using GLib < 2.44 + sysroot: Add an API to lock + libglnx: fix reference to commit + repo: Fix an obvious typo + doc: remove unknown parameter from inline documentation + core: Cleanup commitpartial file with fd-relative lookups + Teach fsck about partial commits + libglnx: Pick up bugfix and backports + repo: Stop creating "transaction" symlink + gpg: Add ostree_gpg_verify_result_describe_variant() + Juggling libglnx.h includes + Use g_autofree instead of gs_free + Use g_autoptr() for GIO object types + Use glnx_unref_object instead of gs_unref_object + Use g_autoptr(GChecksum) instead of gs_free_checksum + Use g_autoptr(GBytes) instead of gs_unref_bytes + Use g_autoptr(GHashTable) instead of gs_unref_hashtable + Use g_autoptr(GPtrArray) instead of gs_unref_ptrarray + Use g_autoptr(GVariant) instead of gs_unref_variant + Use g_autoptr(GKeyFile) instead of gs_unref_keyfile + Use g_autoptr(GVariantBuilder) instead of gs_unref_variant_builder + Use g_auto(GStrv) instead of gs_strfreev + Remove unnecessary #include "libgsystem.h" + trivial-httpd: fix indentation + trivial-httpd: add option to specify the port + summary: list the available static deltas + core: new function _ostree_parse_delta_name + core: store information about delta files checksums + pull: check that the superblock checksum is the same as in the summary + pull: get rid of detached metadata for deltas + ostree-repo: add new API to sign the summary file + summary: add new command line arguments to sign the summary file + pull: verify signature for the summary file + tests: add a test for signed summary file + summary: delete summary.sig on an update + ot-fs-utils: remove empty line at EOF + gpg: Fix ot_gpgme_error_to_gio_error() + gpg: Add custom data buffers to wrapper GIO streams + repo: Simplify sign_data() a little + sysroot: Add a try_lock() API + ostree-repo-pull: add option to disable static-deltas + pull: add new switch option --disable-static-deltas + doc: add missing options block for pull + tests: add new test for pull --disable-static-deltas + syntax-check: add syntactic rule to prohibit gs_unref_* + syntax-check: add syntactic rule to prohibit gs_strfreev + maint.mk: Remove GNU releases specific bits + repo: Stash keyring name in OstreeRemote + repo: Delete a remote's keyring when deleting a remote + repo: Add ostree_repo_remote_gpg_import() + repo: Add remote's keyring during GPG verification + ostree: Add a "remote gpg-import" command + ostree: Add --gpg-import to the "remote add" command + tests: Add test-remote-gpg-import.sh + admin: Use locking for most sysroot commands + tests: Fix writable repo test + test-basic: Always chown back before doing assertion + ostree-repo: replace more gs_unref_(variant|bytes) with g_autoptr + repo: Bump mtime any time we write a ref + repo: Prevent GPG keys from being imported to keybox format + admin: Ensure instutil commands and usage help don't grab lock + ostree-repo: document OSTREE_REPO_COMMIT_MODIFIER_FLAGS_GENERATE_SIZES + Fix annotations on ostree_repo_remote_gpg_import(). + sysroot: Sort returned boot loader configs + tests: Add a test script to cross-check loader config vs GRUB2 + tests: Add a crosscheck for syslinux bootloader config generation + tests: Run all tests through a randomized readdir() + pull: Ensure console state for multiple GPG verification messages + pull: Validate delta checksums more strongly + tests: Add a commented out test for mirroring with deltas + repo: Don't crash when creating a summary if we have --empty deltas + tests: Add a test-pull-summary-sigs + Revert "tests: Run all tests through a randomized readdir()" + tests: Run all tests through a randomized readdir() + tests/remote-gpg-import: Only commit workdir + gpg: Gracefully handle no trusted.gpg.d directory + Fix tests on 32 bit systems + tests: Link test-gpg-verify-result with gpgme + tests: Use readdir64 when _FILE_OFFSET_BITS set + tests: Use temporary gpg homedir + Revert "tests: skip test-commit-sign.sh when not root" + Fix double free in ostree_repo_pull_with_options + repo: Change GPG verification policy + autogen.sh: fix typo + tests/test-pull-mirror-summary.sh: remove empty newline + pull-local: Support --depth option + metalink: Fix behavior when requested file is not found + tests/metalink: Add a case with nested unknown elements + diff: Fix adding CLI options twice + repo: Add _ostree_repo_remote_new_fetcher() + repo: Add _ostree_repo_get_remote_option_inherit() + repo: Handle "file" remotes in ostree_repo_remote_get_gpg_verify() + repo: Redo ostree_repo_remote_get_url() + metalink: Allow NULL for "out" params in metalink requests + metalink: Return requested file as a GBytes + repo: Add ostree_repo_remote_fetch_summary() + ostree: Add a "remote refs" command + pull: verify summary signatures also when not mirroring + repo: new function ostree_repo_remote_get_gpg_verify_summary + pull: fail if GPG is enabled and the summary is not signed + tests: add test for check for remote add - -set=gpg-verify-summary=true + ostree_repo_remote_fetch_summary: honor gpg-verify-summary + pull: Error if gpg=true and summary is 404, add more tests + core: Fix inverted conditional in GPG checking + pull: Also fix misplaced remote name handling + tests: Check error messages instead of "expected-fail", handle old parallel + build: Make gtk-doc optional + pull: Avoid leaking signal handlers across fetch requests + pull: Plug a memory leak + core: Add _ostree_get_default_sysroot_path() + sysroot: Use _ostree_get_default_sysroot_path() + repo: Add a "sysroot-path" property + sysroot: Pass the internal repo a system root path + repo: Fix location of remote configs for system repos + main: Fix UID check based on sysroot path + tests: Export OSTREE_SYSROOT in setup_os_repository + tests: do not commit from the working directory + libostree: new API ostree_repo_remote_list_refs + repo: merge repo_remote_fetch_summary_{metalink,url} + repo: new function _ostree_preload_metadata_file + pull: new option --commit-metadata-only + static-delta: do not fail compilation with big files + static-delta: add max-bsdiff-size option + repo: fix an incorrect comment + repo: don't forget to abort the transaction when failed + Update .gitignore + README: Attempt to flesh out more, start moving docs from wiki + tests: add tests for --disable-bsdiff and --max-bsdiff-size + tests: skip tests using gjs/parallel if they are not installed + Update .gitignore + tests: add tests for LZMA compressor and decompressor + sysroot: Add an unload() API + pull: Stop using GMainLoop + tests: rename test-rollsum to test-rollsum-cli + rollsum: Fix assertion for CRC matches + tests: Add tests for rollsum + repo-pull: Add a queue for scanning + Update .gitignore + tests: Build test-lzma with LZMA flags + static-delta: Ignore symlinks when computing similar objects + static-delta: assert on non-regular files- Update to version 2015.7: + critical update for v2015.4: fix a bug causing unpredictable ordering of generated syslinux/uboot/grub2 bootloader entries. + Performance enhancement for deployments; rely on syncfs() rather than individual fsync() calls. + GPG: Always retrieve detached metadata, so we'll find newly added signatures. + GPG: Support for keys specific to remotes, rather than relying on the global /usr/share/ostree/trusted.gpg.d + A new locking API (used for the commandline) so that concurrent invocations of e.g. `ostree admin upgrade` are safe. + Other enhancements targeted for the Cockpit program and rpm-ostree. + The summary file can now be GPG signed as well (preview). + Other changes to static deltas, which continue to evolve.- Update to version 2015.5: + pull: (trivial) Fix English in function name. + Fix make distcheck. + Fix repeated words. + Add infrastructure for "make syntax-check". + Remove trailing dot from error message. + syntax-check: quote the first argument to AC_DEFINE. + Remove unused include . + Remove unused . + Remove magic argument numbers to exit(2). + Do not interleave spaces and tabs. + Replace "==" with "=" in shell script test. + pull: use a single per-transaction syncfs instead of fsync. + syntax-check: Remove empty lines at the end of file. + tests: Move test-varint and test-rollsum under "make check". + configure.ac: Enable option subdir-objects for automake. + tests: Add tests for ot-unix-utils. + packaging: Add man5 pages. + prepare-root: avoid double-stacked /sysroot mount. + prepare-root: Update comments. + repo: Hold an fd "repo_dir_fd" open for the toplevel too. + util: Add an API to atomic-replace a file, dirfd relative, optional fsync. + Add an internal API to stream content objects. + When mirroring, write content directly, do not verify. + pull: Copy the upstream summary file when doing a pull - -mirror. + Add an internal API to get a read fd for a content object. + pull: Optimize file:/// URIs to skip libsoup and hardlink if possible. + Change pull-local to just be a wrapper for pull with file:///. + pull-local: Fix regression with absolute paths. + repo: Fix major performance regression with --scan-hardlinks. + repo: Store pending objects in prefixed subdirectory. + deltas: Use base64 for csums, add version to parts. + deltas: Remove support for gzipped delta parts. + deltas: Add _V0 to part #define. + deltas: Rework format to allow streaming. + deltas: Compute rollsum targets. + deltas: Print total size of rollsums we would use. + deltas: Stub out a few more opcodes. + deltas: Use the new internal streaming APIs. + deltas: Flesh out the open/write/close opcodes. + deltas: Initial code to copy content from existing objects. + deltas: Implement rollsums. + deltas: Make syntax-check happy. + deltas: Prune deltas when the corresponding "to" commit vanishes. + repo: Add a new iterator traversal API for commits. + deltas: Search for similar objects (possibly renamed across directories). + tests: Restore accidentally deleted Makefile bit. + libostree: set directory mtimes to 0 on checkout. + repo: Check for OSTREE_REPO in ostree_repo_new_default(). + tests: do not run tests/test-rollsum as part of make check. + Use libglnx. + deploy: Also look for /usr/lib/os-release. + checkout: Drop internal use of GFile *. + libglnx: Use git.gnome.org's copy. + repo: Port APIs used by prune to fd-relative *at calls. + Add explicit zlib dependency. + tests: Move test gpg keyring into writable tmpdir. + ostree-repo-traverse.c: Fix documentation parameter name. + Fix GObject introspection annotation. + ostree-repo-static-delta-processing: initialize "modev". + build: build libbupsplit separately. + prepare-root: Move /sysroot instead of unmounting it. + repo: detached sigs: Use error prefixing instead of overwriting. + ostree: Add gpg-sign command. + gpg: Remove _ostree_gpg_verifier_set_homedir(). + configure.ac: Bump GLib requirement to 2.40. + libotutil: Remove ot_variant_new_from_bytes(). + libotutil: Allow no variant in ot_util_variant_builder_from_variant(). + core: Add definitions for GPG signature metadata. + core: Fix duplication bug in _ostree_detached_metadata_append_gpg_sig(). + deploy: Use glnx file copy code. + repo: Drop internal GFile* API helper. + repo: Port hardlink-scanning code to fd-relative calls. + Add bsdiff submodule. + Add bsdiff support to deltas. + static-delta: increase threshold for rollsum to 50%. + tests: add test for bsdiff. + autogen.sh: replace all $(libbsdiff_srcpath) and $(libglnx_srcpath). + Fix "make syntax-check" failures. + Makefile.dist-packaging: fix make rpm with submodules. + static-delta: Add --disable-bsdiff option. + ostree_repo_static_delta_generate: add new param "verbose". + tests: enforce ${CMD_PREFIX} on all ostree processes. + tests: Remove some duplications from Makefile-tests.am. + deltas: Gather statistics on total number rollsum'd and bsdiff'd. + deltas: Use mmap() instead of copying input file. + commit: Add missing (allow-none) in write_ref_immediate(). + repo: Fix assertion to allow NULL options. + tests: add tests for mutable tree. + gpg: Rewrite OstreeGpgVerifier to use GPGME. + OstreeGpgVerifier: Take the signature as a GBytes. + src: drop some dead assignments. + ostree-repo-refs: Drop unused function "parse_rev_file". + ot_keyfile_copy_group: return FALSE on invalid inputs. + keyfile-utils: add tests. + tests: add test for test-ot-opt-utils. + libotutil: remove ot-waitable-queue. + src: Move ot-tool-util from ostree/ to libotutil/. + src: Drop unused argument "value" from ot_parse_boolean. + tests: Add tests for test-ot-tool-util. + sysroot: Read some bootloader state with fd-relative API. + sysroot: Read the bootloader configuration with fd-relative API. + sysroot: Make origin parsing code fd-relative. + glnx: Update. + ostree-prepare-root: log informational messages to stdout. + sysroot: Drop unnecessary new sysroot object. + deployment: Add an API to get relative origin path. + sysroot: Port some deployment reading code to fd-relative APIs. + README.md: Note make check. + configure.ac: Make gpgme a hard dependency. + build: Use both pkg-config and AM_PATH_GPGME. + repo: Delete .commitmeta file on empty metadata. + ostree-repo.c: fix typo. + OstreeGpgVerifier: Don't add trustdb.gpg to the keyring list. + OstreeGpgVerifier: Take the signed data as a GBytes. + fsck: Fix object count output. + gpg: Add OstreeGpgVerifyResult. + repo: Add ostree_repo_verify_commit_ext(). + repo: Reject duplicate signatures when signing commit. + gpg-sign: Add a --delete option to delete signatures. + show: Print a blurb for each signature on a commit. + tests: Update test-gpg-signed-commit.sh. + gpg: Link to GPGME bug about GPGME_SIGSUM_KEY_REVOKED. + gpg: Regenerate test data for test-gpg-verify-result. + Fix build failure on g_autoptr(gchar) with glib master. + build: ostree-gpg-verify-result.h is a public header, install it. + libglnx: Update to latest. + gpg-sign: Update man page for --delete option. + Fix build with !HAVE_LIBSOUP. + gpg-sign: Add missing NULL terminator in options. + Release 2015.4. + Add ostree_repo_is_writable(). + Add ostree_ensure_repo_writable(). + Check repo permission prior to attempting to modify it. + tests: Add a test case for unwritable repos. + Add OstreeAdminBuiltinFlags for admin commands. + Add OSTREE_ADMIN_BUILTIN_FLAG_SUPERUSER. + bsdiff: change submodule location. + core: Fix possible crash in ostree_mutable_tree_walk(). + Include ostree-gpg-verify-result.h in ostree.h. + main: Only verify SUPERUSER flag if using default sysroot. + build: Use glibc's xattr support instead of requiring libattr. + build: Drop libattr from the spec file. + tests/basic-test.sh: enable repo-noperm test only for non-root user. + src/ostree/ot-main.c: drop empty newline at end of file. + build: exclude .sig files from syntax-check. + tests: skip test-commit-sign.sh when not root. + dist-packaging: Don't delete 91-ostree.preset, do clean old rpms/sources. + tests: Missing linker flags for test-rollsum. + core: Actually allow none in ostree_parse_refspec(). + tests: Verify that the pull error was from interruption. + pull: Handle remote web server not honoring range requests. + ostree_repo_checkout_tree_at: New API for checkouts. + Release 2015.5. - Add libcap-devel BuildRequires.- Initial package, version 2015.3.ostree-devels390zp36 1615888380  2020.8-3.3.22020.8-3.3.22020.82020.82020.8ostree-1ostree-async-progress.hostree-autocleanups.hostree-bootconfig-parser.hostree-core.hostree-deployment.hostree-diff.hostree-dummy-enumtypes.hostree-gpg-verify-result.hostree-kernel-args.hostree-mutable-tree.hostree-ref.hostree-remote.hostree-repo-deprecated.hostree-repo-file.hostree-repo-finder-avahi.hostree-repo-finder-config.hostree-repo-finder-mount.hostree-repo-finder-override.hostree-repo-finder.hostree-repo.hostree-sepolicy.hostree-sign-ed25519.hostree-sign.hostree-sysroot-upgrader.hostree-sysroot.hostree-types.hostree-version.hostree.hlibostree-1.soostree-1.pcOSTree-1.0.gir/usr/include//usr/include/ostree-1//usr/lib64//usr/lib64/pkgconfig//usr/share/gir-1.0/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:18730/SUSE_SLE-15-SP2_Update/315c9c6a69010cc79e8acae789ff0d5d-libostree.SUSE_SLE-15-SP2_Updatecpioxz5s390x-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textpkgconfig fileXML 1.0 document, UTF-8 Unicode textPRRy6fИutf-8b6f27aa41526c90493cb4a7125b3ce451c601c2fdf3b03336126aee53111d6d0?7zXZ !t/ֈ] crt:bLL ۧ =y=]O>ʭt5xޒNeİêsL3 ePAr%Š90 y{2b^bM#Ì'V:M._/^ M6૭|`^~[B}YA `OxoAHU uKbld| __ QA1L;<͐R`s5GO r>d8 Y{K"L/{mKg3/E\ƁqWwwn)쁪1 8KՂI${#Ҁ,ܳD) Lwx:ʕb?p\H_`]8Jq@,TR9%)*PEFi*nŀ|ů znz9Y#Iu(xd} v'[ϒ ?A8xC?kR,#ܻ!)]/L*0^(+lu|jRA_ඒNu6P$̔6s0q=)ʕ;bS5S~R I"y#Q]|1A6kiH=~%,ku-{TK1n|ډq'ӥX3S\{1jfKK ǮySx }FQSpM 8 HOywmo}$ugy:n<;?ang)͚0M,Bd\:nqLN2K.baMhPJEct*,2;B誂1/[: 1ȭsWM R8ur!ZUyLZ #xb$[ q3Gx|f )t+&1e9DHWǑM(LPvدx$׵pt .>8HBZAKD" >C2QlMܾPKIhŬO$`45!6g˖da`~4)*Z~ ]_鎿/,L52oBZ~@}'ȆLV{> S'/d-RKӆi Sk_qȞ Ǫv+qJt$וcj~a7tT UA~#SX{j8~+Q}6 ydk)>c*L-q-wdO 5"S0@: ql?8UvPb;z  Q Ⱦss\7w=";ӿ(`9Z4Y/d>C#Z[En~|MrcDDvЪAadeV%3sм$7:(̐-nS5}Qk c=INrP~WTUkFloqhdJɑnjJYb7;:{dr %hT_)Z$A TLUנi&ǃt`a!(@FA 4tN1F GH} bldGz*+e~n1L:Xv~wfuد`S+x=>,ʴlP:a>lZ#}Kz]3˂ƀXB"ZD'ևQI'mkU3=VEQvnh5L?X|Ք9̽\]ˣ$`,"L} o&Zh1;`FݠZ;,4x1 VoJ67HKJpuΏgD2ԤN[,{lIPX/iVl Z ucmTn$͉x)%g}G$_ 4 c芦q09qΗju0ۄ 7.,voԣ_eN˱Kf,JkhFʨAҖfnKQUcd(ѫ5W6COEN=Ch`MbJzq DkD2it_TwB_s \OYO%,T I3*(FnWQ'ȶZ$q+'Hx ,'",gq=~20"yF}% Mn,7';Qj;1C(L&ֶ7 v,Ž˗@˿Uj9QR|DR[4xv᭛~](rυKN?Al{ p|z:wiBa"OmtW1oǨ?aLV K}1 W`b c}5 ޵v#{!Gu0pyU.":,@ H;!eԮp_ދ5D$QN3d¤g=kIF83@24p{޻$(A._;`SˣLs_?ёMYizz~n<)EX\Jx֩Gͩ:=I/hﭤgQ#8kex'Hfa+Q{cI]fQY`)| _?+pQ)mG{jr޴pB%&y9 D mO_=g]}Pӣ{H=_8qSCÞڥPضئ{iSV4@Y)Z*(߂U*yh ]@ .蒗Oltb_y;ըaTcS P y^3* .1ZGĦ+(~KU,+ѷs8ߦN O=d.+DC9.(r`{*.%L@*> u NqdSmu1Kx{^f> |. +y-(T[لA|^*m^W&dRz ѼS"nFroIB/鲢sgjS=BUZ:5sb>v3*C6}-M 6nHCz>I5PTJS R:9!vY Pb[3e|e2PʪU`T3[VCsAHyA+OtapXQj~wpWh6+?g9#q 57qP[tn`B%oe~6.N3a@2'l( EƤA(TeMRs~n5VtP>n)s ŶvHN?o ˳ v^7'a3ɽa1Dru/CL{c8{Jq7+cŖ_0Fdx~yj k{dm<:hGRj ML/8a90(!m蔦#~Y'@ITs7n?yZ9 ƺ2:ష\3ͪuiP!xj$V#5H f7)?^kz}-NJKQ~?$z@Tȟ\!mqaV0 O6x^36JܝoLH D8 /$s&d.)o 1ae|=vQ ;G>I{;w+{ 5-fVc'D,A_Q yb&} icQ{ mJJ$ )duէ$=A+8md@ В¸4$)ri70{H~d`+$SLܚ+`óv4i֖ӐBR 5̇8ZsX8i\(@VGK9V%QOy š|*Ϊ$~^V.3R*'ۅ@XR rAG*+,Cnu3^$;+%D:O`&Z׌h]L&?d3 pڊl2l3z$13(?`H _EqFҧ2( J<Վ|w r* 񫦶uIBd9B*9o"\Ȓpc) 1V*]*H|ا< &N'󽋸\Ӹ&9*8!QI T_4*:- tVލNS`4|89a2&0Lkh (k=a-p4:9ږRզ9_?̹"@< gln{?k{H\4̋եwBe&+w۩rTg-B˙KI);*nZ ?$.t-u|EF @;$'p! .5nE;mGO@_y%NN+D![I4@7:32_ZyN<6,S`bOfl T^ kRkZzK'wVԨRT}r`˃Rq; 2e͸~.1ړ۝7 Z-]t/Ay,xCS̊'S_qrKUh\why+ajΐu\"p@( 뒅IRoJR6y XΛ%V R*bH}DxPfմ_Gګzy28edF"B>p2ܷF}ΜSVqkOʚ_\HjZe%ѳ\f=hpH c脽iqBa#ĘXG~y\Pa8<>䈹 ݏynV8w{Xjb4 u r"l-[4ZC2`ie`a!D_j CZ.T! %WxTzۨ'n/ yq_Ii|53 ˂}\honoU^Yg!Ƹu5Qs;HzVKLbq1{]AZ`Pa/;p.),^|u/;SyoYTw3"f[ ):Ǥ2DP>lGv}h{ZЛ٭XhO{Emٜh1U8KcTAhY{"C:8B1FjhQ#o`D@OPeˍ[tzmXG;˳^-¡Tσn{?sjD&GЀ-tW#OdAᔰi{=6B6RЮؕc$<ONAIRŋc= $sXOٚˡ9b:N=[1 JZLXKaoiPyI6|3=(u3QrN,S`]ݥqtyI}=($ G;` e;G]̣6GA+GMlnd钙9|:ޚ/1 t'4Vh(HhE@v YNJRc?&KCPOB^7wnǃ/t#׷jxwL߱s2k-,]M\zܐYf7R;I<8`axZ #gQ˺vfLg0E%=@ɪ BhV4V omG<'U5e)9}ɭ+@JzVMU<)Nymo!ٿIYZݛo#kI\]XI3))q&rD,U;=a˙" Rz R18q*,ߢw+D.Y*ɡL ܩ,T%^098ϬGH0OXL\Dcѷ5B'C>l$/ ױR zϡR Ԯx{vp57UH4W[ʷ&}1FU2QN\% .oɋ+؀5Tk'cj^k1#x ^|) :/ڠdE}!Y{ycg/|pXOvt vS k?:)UX}.{X[.Uǰwb8挵7R*i FOh Qhĝ'[.l^PC:xԧlI)2/>/eΨ{{Skf ?~nk0>muN:.Tf&|fY>OPkˁ X2n5>ԓFPu܄I4hσ*J| X*!BZ`yr'LZݙb5~cul`]8Mn{ȱ0`׶gQqoi|A8#'~ळ7 <[Qien٘'-"OO%湙}&P`k qrhZul΅pZ- @\-mϰB~*1:„2":*"'H<7b* 8>ynHjd05cYMc {19yY# VY+ ?P.UZBR)Ux%<r(26A#[ђ: WB2﫲\_PX] DCJCd*"_K]%XP0b<=*K, a2؍ Y.@\a‚_by7\ wpeCQKWWsKa_a0ڮx[uvT6]"[` ~ p'#Ǟ]_3OK'ƫef"$hv)"G! F4>{˴"3epSY&Gjjl<vm zVγ)t2|٢xsο+1.h '6TPM*c#M'UTmY&,\v!˻xx1B c?@a{s|=ܿ' ez.ΡW$RZ:K#&W[/J"+WFG3qts5Jzj"YŮ.%3\G!bvX&z%g\Q Э[AGWWg]@gE{ [OAJX <|$*RiɡxǦotUL P(ߨq;"J(%d#҃Q\l_{RF> ;1z:x${֜?Ax)SaB 4nRrdD&=+9mfCt)& eդw=)oq뉏F,ʅA̝B~7JKldѪ2bv EOiîF2܆X)t䡘*KZGV K\=^Xa Y H'@_p@< {z^,e FG؅]8o#Y RFc ?:0 |h < jIi4 Pּq@Ch3%$^Δ#|+BqI^;'a4a"e %)A:zq8bv\V2F}7 @$ls$qz- k4R,J3OY-G?W@FMI=1Whr ?qS{Z3['ݰ }5AU4*t @&'^7e!]3dC<_>Dى=s5-n'yYʠx>" {gh#E9F(Q7J{< #eMv,^ NkIs8ۡiIٿH8/h|;x(~XtaG*%=R1 [<n@(z DTFXx]`'[YAV8(՘kV6Ӿ/_3"W;H*!.2m%zM8|RVp]*(PHaT!ÑY2ԥpHbCdE_*+ Z^'"h|3WRZN0ts8al4 <ĜʏF_>v+p5mQs1~J# jTADx~gvռŤPG0G@$# ~W5QA 61l)k ꖅ\L؍..럶)V@kG:}E}`}/"? A2Ӻ4M⊦BD'q4MZDz?]p ϗro#n*PkKYRx/HP5o/e}VCW,ZfNhG7zF2ZjIFoU@7]3$~)[ɖ6Od?/蹰c!ٚ1_k1p*F=Νg#ӛoWO`J? NQ|paWLU-v|^vtQ|)Ugm*Q˹ǰv_:CN ,˲iz6l$Ky 6ߘxr?5@tM"ͫZ(+NQ-)) >-|w߮PWBX}-e'q|8 /Sx8JB/f!Lcbͼ1,>H7L6hS0PZ"?KIhr_*4Xj,VmG6SI 3ioTX^"1DT%C#td>>%e<*lj~{i|~XAIFR2 uzр&o ")-j| ;HL?- –v֚p ,EM`VCd6l&Yi}N|4 7ī~3˖kYUκ5d.p+]+[l/66B螎+qȃtHүk}W'y*pڴe?E9@uE<ԎW˜&r.H=(t4uuXe{+}%ک!촰qv%?/1 ەpnTɈx\w6_<(qHe]AaR|f}H•d` )l(#E/2É1}Lf(Lʟb߱pĈwZHWqCY3YEwŋ\"c9[+#O.q V<_iY;8T]"U~}c+:7p$ښ>fjA% Ss~?_eӑf6 U'ne.G@s ҮpO-rNG;bː7ȚB#ﰇjB DqKT$vw85 bdP qi(gK:l&$$&wӒ08nmAk_{Eqx$CT%3+'5G#ew4j޹cGx!+(} 8vxjgs3L 3GM_u338mG&!'cgӭ @ !*fH/AXTPNG\;UU_ss#pd,]4<|c^d- ]uj{phE`Ň=D *s4ۆpƫ _K."U;E^K*#z~A>qg#T(Ƕ{G65>42OcbR{Sfnq@](_)\Ͱ7\L?4I7xX,="BRз6G9u)J/z䀖Q"VdH ,ZyQ[NQ7oDY`3撊{i8Э IC;0yEMsX:#6D gvdtt@pK \?bcC&`Orxޱ#0"?0D?W FEmXdBȸkPOΤuU+p@Cѓ&'/D?*NXRhN Ld4fvyKZ$S31tWo="|tNA MWp`6C ̎ѥ oFa xdnϡJ (e\'WC NQv-(2E` a86 Vs#oOjT7|<sMZ`& x:ᬪxͬ{}ɰOqwz(BS E3gRc 5%8RG6I^l@CJ:yKn2 7`Z73=l PÖ hр~f/b^ s.蓽qdzJP%+T@Ns#ruA#=q=W93AUZ#@X)9Cw`5K~ q;N쇸O{oY@&Nl! ƻeI{kAL*!1XkKjw+]Bw1nTe(?=dQf$1חFDEu _gq>Wy&wƱD8 o+:(y"㒷p2>́rx!ڜl{ h0J МdIQPz2oɛuaO]Ӧs] +>C/~ȤkI&1227JWՊg wp&LҴyFTkhp݃:ݭHϴ K鎦c;AΊht[[1^(S֌Z6v= 櫪9<D rX-Da*3zY*wo';(Rs) gÄPe6FNTqpeAT$9h):wިkxk gʔWAÝ3o;fL;m3n ӛگ霢-_ї%ŵvL^ 7+6 F$:e7'震lR߿%st1H{/։*[I֌/W'$u q9hT`Aq}m(?c<3peG,tceOFkK taGk"#R'|jor3) =Al4SL 6̍%oLA6vv]qqë6&D7ů *ƌ\me)QYbSUY# EgDřzHTjduaiE2Rrr\W]P 1sX8o-cg'ف"> E0v[ uU HX~t'J?L3]lS F@$p5UjmM `kyFqUx;C1W!+*X$zO3<|ן3S4op7@RLuWf"~eA7J2DY]?@+;7VPT_M`0XfUkh`)#+A੬r|ԯݝ|$w)Ф)ZquoT~_lKs( 굗˓J7&y"* e ={ K{m5P}`g]~CiwYИ-8P6oĎPhQ4;M5݉3haNIsG~ߌ_~aSXoc%K֞.Xz 6h>k)gA:`DXE[ nf'iwTiu3ه#D Du&;ڰ= K=YۻB ³O$ #F4S!n?gf\LWc,8'V@>ϨⲲǛc.hS V̾9%_RB.#Uߍ ZVķD*%yiM-]”VpEDp_n߾@=?#~F;)ƅ@*n?"l nk/,LS%J9O;Ĩ/vЭ\r:Zl7dRQ<6~!@M?RċI@`b %4tnҭ9_#ʓ[(C'E1-#)m`.@;9NU4a( rvSyFm0 O8ŕrUµպuJ$sЂl=|GFӀ?PdEyǜa0ua8^B 4v|*E6Luq0}M%Y锔aǭ>gQ(RAOb_A^s)9M=Ii@qhM) Eό/GgtbEzm.FL6U-\#1O+`I:ϕܨxB g(g< \F}^.Qοqۻ7jbEqӦzm\)zMޢf)wxI@|@عBtR,sDzg.@Nz6 H,iV⏽W=F Lk`mDxPqBK]${><(]TS|+lكlM KX{>U1⺓;/䁖qmed7YJ \#T:Aa@0s(FlĝtUp0B ^t1]w7 S6lqO),(/(HoN;sA(QMKT5=}2Ww ( _x׊:Ov682TR$E*E<}1H7/J*D-_0@#ߵ-RtƖuG2w>[nGq gMnvtUQ=e8g}ׄ˥x OlE?jĭw!0'S`φjڲ-W ʒVpeE{ȜCEfKg}Fm{ritކj!+H402$!L-GNNM%"),yճȚo\Ft;ˈrCBjib$0.#1)KäY{ˑbfN֚|828x=+(9ڢmXWmx53=0j/Svwi`cZNB߱īɦlm*1C)iJ#2=_@m5r| O˂ 飈֗f#qrzsSp)saxXd*$4@(:C?op|x65Mhܓ$ze/S6e۾C@EL9uWߎv#(o{ Ȟk[{ƪۚ(^GGMS,(O#XE| 0TBoŹKNX}B䮬R߷ws 1ιZ6H΂~ El"~:5 mSOrUB7FPX8ɤB--+?ũ\+4#*Taඟ'a4Y@H*w4md(7/JaF"~#<ɁS[tE MVsL/`5l{!7ԅP"/V&'j;s>Ɛy0 \ m1wlučY|wՠЧ}4FUO/"}:x7Q*iv8 9tH9;~W;|1iٺ stݥx${(6l'&޵)i_]8"TO z]Bge]$G'X(#7bb[0"pL$nfO#NPms{4;(p!S.µS|#"7eL E?8qOcyw7m&w>-rP8MJT }\r=]+V1Hqsp* PZK?-Tg#ڞmhFCfoS7$8OAl1cGBϒr"U6SČVZ;]_S~Q7hՈy.Ҡ31Ycs ؠekwWp=5^^)rtc=g ̳ԚVkH[@&q[pe8g)]-nȼbIZw~^caX#D4S0F P\ThR e^'O]=U/00>h~! qhNPyO] ZE{VUSs4Wlɋxzl}1 P@xE%8[$C[j=<K:#dab"$wĈ~*OVMYwQ%BAPU]j֥ }hg,'T[?gUheH#M~׹h"`]^ʳPU4W$0l~fOceT1U=~nT B:cPW[DRe2֎ԥz蝎9$n Y243zFhFCv^P>Fk[T1QwWܠ7R2Fm?X]qqǽhI;Ai;Kﳸ\Oo P㛷Q- k[*!bYr%!C 7R$\ ܅H\u(2_ '.]=~أ3Z)OY݈;?hi:&OvQCt60]di nlS^i:H޴ r&xku u4|~$W\ W\3"}E|jѯGzSALID eD?NŽ*Yw.›wPh|ЗΒtPJP_ 6+طa]:Tw"3Lx:ڑM{< hHx>9'±ߖdfsC! |S~n햸PE6j ہ {m`o6t(K~IOooוn$Xq] o}V$ h}N  D6ZZ'q# lח$9r'U~81ñ"(̐ (U} ^ o6X =M+g7$Y@^RKOQ:<ʟ&YLvfV; .P)^ R4S:Ld60T%omB ֜揷mI݀UM%Nm 9)ƫ+fM2Q9!n )>n~EFE5gD݃Ce&Pg"PclwPw lCNComs-Pd]\Xr_Z1NDftM zlrpT+]Q}fuj$5sS@JbT tFg^Mxc't^7tP Z:s) ? Xq0xVs9Zｙ}-1u?)n > b֫76lWio֠r}n\f$b3L-Q?u Sdbjˆa#̳(qןw(ankn1.a?4UN[gM -_Z.>TcJk4nMOrcǣ4syϛk%ѥGjľ)y䣳!*J0Q,b~s%Fr-,PV=2ِIƣ&|alQ|oQ-$@MW/yؿ Oĸdv(W+ pFɬ~ROY ХA}b[g4{:E$A " k8e`xLҀo q._銧Fw$qqxk+Si;S`琜aK{G98tMgC 'tf -"_Wj#f1:s,k Nϊ&)T"Z< $NODC_WB۔uYgi(6GdQ$+yX̒sYj֤ #{Cq@[o 3A)O("&14j$zKN)w" #; 5[l$Y kJ3fQ+ms_,|ZהGQ]Eڟi=+xURMe؛Ώe3`;{Xڶ9y}qï$+u>E} 15(!iBӹ\&}O("x6'j^ B%2t`٦ >vKjI+:(T" *!>wdF^aP׆}cXLb'˭3fَcy:'f3X"77&kw5F=X lp)Ν%DOaD:9>@ ƒyz3Z:U~2VZ-YQĮ2TP/CttGJ[\v>2?u(Wֹ^VpjdKe>h6@+ɛ]@ttAGeaשwZYQW?x`'> rb܀SΤ(4IDh3}2~P՘o J20 sك)P3¤.(яG fJ -~e>3|W5`37[eWVIYD7y GH_t PJs( T W75 fw%K-^ v,kP<ʭn1S侉A({t܎S֚1Z.OW*(ú(7N tjFc mj8S&B ѳݎj.pvI=pUk=0o2X!Af`2lurUI.K6xҽNh}W}? CwU+>& U_ tвSPL 7OšWF!ݳi{0]TĎbPM5DY.GbzAd0M0Ja%O \2 A•FUq b,3/! o bT_%e,Bz9B0^slc4l'-%! pd,dB_"lTBl`Z7<H=;}?f‹2u&i.0^BMui"h۔]T髽b3'lYK|хɯ?AP$5 O,]߷$JoA|}v^?D4Wqǡ ?PIuzc?<α@Nd]Wze2Yx;6eɊ!55I 6KIK9- 1ͨ9B9ryQD 1hOjSnmB%A4iaГgzo4*"Whn MW7}e~;_AKU&m mO#^)lL5$qrw2?rIofYu4mͲioLa.4QZeukitG\i Ϫ8{`l5[U{㔰E.4D#n ':7/b|s(21'β&au*{@_;e!6L7y?{Ҿ>C MB fc=0ЭIOx Ź@g~(c_u7"v {}>4\R/3bE"=b,v>{n:[LR2Ku^ͅeD^>njU0ֱز`Vf ݴ1،^ N$F $02F~7QUՆ`qOTu% ;^vZkv QX (?Bu/`{R_V "*zN.Ag IjfY׎SS:}p7vw FI.}*i(FX΄Э"-Ҩ_KO2 ;U{\wFa,rI<8H^q2󫩿nj!KV% V?nfgr U7 FyȳE0tQWRYwd-7TOO]T?zUu8zdZj y::ŗ:V(;Y*=8t#z.fƎL^{6R_g%BwZ؆ dԼFo[/+K|ot՛[z sm}ZRIߝsq9Y4'o[1iv,dB0.Ǫ ɹXA1tsx"%;-р>ٽtJ.㇦}wіR1,Sp0:HmA* p4D%hU3EIŽaA\v%փ0="ȬP DI2n%8"IH? |O㔤"ۖ+DÔ^bWjGlKTpxWU]dj1%#2z:wXņi\ba1#]`y+5O 2 />4.*!j.Q/"F)X !26l*y<dO$٢#BD"֮ =qy4RfЬưswdk@+RWy +H*e^ڮˑK~qI"{Yl,_49l Dtva"==j%Ѣڿ,貇3^[Y r&k.m<"z#I9GL,pC(Xk3wE;@4ik/ܜx)x_;BsXyo\u 7 J r`T-c(S^җX&/Q9{i:dk[hṢWBlڈR%0Ui+6i8챁oн U7٤3R:{%7X7+%=M|M=pGzpNѨ($?#rا,tu}Ru%_y@PW+M?#"WeGq?U9maĻ:ج8l8|:20ЏH@fȃ6NG~tO;a^*[dGRfOpI# Xoz F#|:2b/NV1f &h;Kpy':,ZG.5۾-A!m*^edUTr]}92*U!f,k rNQ%'IFhHI=+x"8ܡǷA.Ո?v`Q-n7^JbAI7)+GLZjW5o C"Y8y+h29qZ츂.eNqm䶳,c^z^,:\@#ݚ2&D>. tOBb 1 Rm?Q:GUijAaT,d*ͼI<@\sji[T 5sH5fA%5a*J`~)@? Kܐ)OԕC~&qNB5ŌE@u %v6^]:x&tk.¯"RǟWF&hYja U~/8M(-TG>0XpNAzx:0٪k 4 ,Hbx'g5o =pH6M|-/ M b_Mf>s-=6)8q}RO FY/KB\ړ N:NYMⱥ71dj%( 2 7$R4_zdڨYfVM=p+&l۞ ?[s/V\l0VxIwʫHj!vbPE*6̄/#CцXBQxKfSbxmZϨTz6&r?E+bU8v]T,ʶ1=MnMtIq'M:"`Lmoԇ9{^%CM yZ &T=")Y G3(=/G< mɛ"3bמN NǪn@ q.3WF'Cp ٫[ ߒP p5״G6;n_^ ]# 6e WQ(/#/zqj9n99}8RC-P ,Rso8Vڼk3&-a~ſvEӌ^]RGOu3V]F%JZl>ժ_e$Rfa}}|!ː(BUCdjw*Vq<9G aFĦحEs c gM3mRQ˟R_YzbE,/16Z#)4D-ޢ;9qI"!=KUNPσulBC'ZPoK(J,,xk^  R c[*\'gr\?Eqfi1*UZ2$nOªZyJ"E"bRִ"!J@ȴ d;Wp ^-'`z 8)l{q+J5;b3v*)lIrW?Y%G4 Xzr˟ǐĜP ɵkۃ-F~\줔l@B<Ǔv$mupڣq#غܘP1|(y 9py}~Ʒ/r/h'. G}NtgGyt@ hH 2UV (ް@Hd$a=1vC]IjEosDh/;U_ ޿DmpHf }߻ܝ49lId=L*!Țr%7l$^oq%>G&(;K0|*23R>oP!rT4oԖ2ay/6|-?^'aE{h2'DI6h/pإwOPJrj3"p;j'StEsKw¸ËDXVjAB7\t\7!ތޟpØ0RhzRQ/qi9YSXzj׬b^7Po^A|E̠gC9Kc81FLzs4.\p% MVQUq+:1GM$brVgxwk>t– ߆ntX׿,g_wYo;S+grP&l RM: 7R ,.Ô~:՚dA+Rsԥ˶F`܉ Uueln?#(5^iRWãjxB)x<A~n86M7yMZjvz@}͔\.;$ᔝ587 t+>6j N~3/+||eyl;:L Haeyf(.$Z#N-7ոCּ'ЛP~CE8*r}M?F!a"a̫0V~no:HazccLC#JJ^6ܱ, +$2MURz:-@ "29|5*Otq3'1Tɥ*](-C^F(XCp{gbYg&ZC/w'tچri5Nʤl4Jcai1id"MSfҿڧ;qTZv8Z JՖd|CSƐrf:N>e޼bE cj\#{vtrXu{w0k!ٍ5 FF*"E2ocqN+Hn% pV|V-4 K!Sك5P9Rh6[Q]#nXZ}f f^рKS}o.[].Op:S]tlTXR)A bVB\g.{aǓ!DA~RX,ˇ9|v On 8b{S]-"͒եOBڨ~[S"fnwq1.bUyb瀥+Fwn};ߨVlپkS"jsj!޴0lHW??e4/Myx;gεۍT≻W߳rtK&qPhN:çw}u*]_s]cwo{zG[(Ɇ3J ,X£J!'2Jۄom52Z_~M8WnF39AңU $2 ZP|D lѸFK?ά,b[|p70"LT/PFm,oM͒W`|vSE)s'Q!K\;GF R9Dt̬g'OƋg!]ǩz*yn1Y[Pdz(Jۢ to ,8A3jBȪX^ 'bF֞y`t6=8v=G1+nZiPi;Vk@Xm1~Wѱ>4|3<^ʮ<3NQXHԒu]/3JIoN^_sXXdfM&0?k@;$tѵj60ľB9tQMZW mAQʋ+Dۦ(hFIq0lW4ǪBI4L~Вg)$@{nW70YeܹX)|M& (7Wħgыl bZbP`>H\nw:='W]ɛ%nʿ 3,_`oߕirTNCkM:qGwTaʈVxB :OڑQГbl͒錅&ޮ>M)2FzJ bBI΢Sa@9DO&ߏ ;]Aʆm?_ʟ'ew'-,{{03#MƢ"-c sbu|G"<%v|3/3;~o#SaVv4550%gy`&$F#gm}UH ?27E-[TV6 sebl^]~ؼ>Ib4/uǍp @UL|I +y\Jrve =J @lJ->>[NM{)p*{pp%n|szM>;E?TPHP,;%P ~fumm{QjmM,u ~#&3' gHDT@/qגG2Ş\bx>X>R/F ^E.=@G^0+d02$_&54W9ޗ5]9ӶT'pWbH.} . xCy1)liYbB{: THLu-tg PoB9 C3Utqe&f/uvW =^~U.8>HG3 7׀CdBgOFzL2=NB"F$ף\`y` My~5)(}&Wf(LGGsr}޾ka]eܠXa+%y dH):X݆+j`pжXfػ(.X +Z;=V02X"B鮲ennPc/ Ē~ 0bĢi]Y.}qE|Jʸ׫ٝ`w;v;n$<6FXnd6K l2=,'UYSo,ڠPq~vsg8Q:8?9`60;a>iR}N#L?KjRӇsU>djMWa6Wtj*&M\517nnťJ`d>l ?pq*w9z}tʖ:•xBP 4Eqb` * ]FJ=v8-"7eLXZ[|IYV,2Jw˞wtoװT8u,~8KC> a̲7uSn=i> /f 1I7u.MIcs;쮊%kgOL{^[va hc@[pJu*b.T?Yl|Y, ofa&yMɾoq"X,.g ͍?#r ^X"δ@7Ei3z2t,b!>ӬB0yZ~\ku^f.g 'S!;$*֒iit xя7IU/SX@WS̥?3OP1a@?cFwRb"\>Oa-TL:Bvm͟0r%AER|~ 8 ̹H g4ܒw0eC>YT>QaՐ)?ȫ@s|+ 5*d YW"%p+'Ƕ|]A<м-')~$X2 LTG?dɹ$W8%v@d*#4R#8Y_hb ։/Q|SμOt(pr~ot{TEQhѿm*H]^>GJifuj L}Pb{e)fDlxlx]t+`)XLűYD.\JS'P.=$&,4t^E9H GH0L@U){J'K+? Z4᰸ki+!{$Eddr8c%(fZAH0/K_og_iffu(miO88 _nnSP[돝Jru[|a*rk\()w,;f2ғ=?.pZGX$K4ևNwU#fDre(A{>0!D 0YFYQ&/ċ4gʑ,*7[UþcYfLUpq./.ҥgbcva/i߷EٌYi= GZU`|D^ YZ`lfBYאތe6IE1IԧDspHMHd#ߋGg1u/H@1r[j ;Hq >IC*nyF:é۾^Hڻx1%^4%EgߓFKxSo#~kF8_$AzuAšjoxn6צ 'YqJz?iVsg'w3/JFȆx`P_-XRԒh{1UɃ17hсs:5ؙދn7d 'a!TW ͶߵƒCAD>qZ VB~5٭Fin$7Ȓ JƆtqCY'6oZy$yF?sς؄s?@glVRۛAl:zxդe{;B\g2˝pDs;or ے;Ѐ@JN/ul !5~4nאJiUZB,!39-d=2/5xƱvW6Uihz; ˔K[g~JɾJWCkA3y{ ŅͽiH%Ayˍ.t-aX:3Y^qf/GC+ܟ17lMĈ7 .& c}:O:y\U_;"'/zMz4cړEm{DQF"fDgv.-jf-[r"},}2f֯'B =TDe#ħ)6%m՜(|'-c IQ7 r ޱ{P ߥ=7J{&mLmDLvrmaUV&Q ̕ Y 7+>7;]2UB-}5G݃h8*\A",`% 6`y|%2x~ufMly9SG F_W# | 0Cķt!--ZJ} dB~ϒUxwlF-6B]@55rg=Žgvg@3Vj^jL\ϜI ~a f)B{n|aE!۴`qmα엪D[X$g[hiTxD`ó `gQD^IPc: õuܒW]F%{?RޥS6Jɀs6uxĢ,jjD% %w`q a-OYzC٭9bIXnPR]Y|Hex)S\Q3Io6 BN}*:RhY5dL4N rV+[[ /-@ӥAa$:E>[ (KG_1,"-a ߕSlm WBi^ㆀP%%;b (?JKY⬈N4tMpSߞoѕrs8HM2:?\fB> $f06tg SmQnw qw~ ibS~>T5#5FN&3^o6հ9ŜSA@e%Zh"H\ U9.&%wG cbQ.GT }璉TF+H˳ݯc3͖صѢ͠cO77v˪iF bVMv߉S<=6JH[:Z}'IZ|eE3F["[|AkStzh.f&qҪ=U)̝|Τ-%#j@ړ ?43ՐI$^@%)򩳬Zh5l|ul$_Q(&j$U,}K ̟AXnEXʀ"BZuRDIqnݺmT!\jiUӋW0*񽽺=48\jDXQgSIG%˸1imgX҈_)T D݆3KyÉWIj;Q QKR0uH|Jhm!$ൂ}";&Y7U[ܪ]d\09GsM;$E8}mFNu t^;S3Z!dEŰ!ai'R8xY N@8 4L/) tB~)V!fٺEOQE%n))߁A`~fTrʖj4y_mNV2t(ץkslKRa;#oqb#c!iʍ [;) >yK+88e#` :99][ 1~}Ї g-j8(pgu։hRBNVu\^}\LЇɝVGv ϭo/DS' V5*ə7UV6n,(cdAQ+$<`A҃a4D>MYv5XJÌd#L+v-&|@]1!n;u%on 9Ã\ce6&Q{(mI}?nxg+n)Wjs|n 1I}YbJ ~oDOZ)1Q\T4K5+{SD$t 'AHapлޠmJjv7y k?Ӎh|Mi):F="ĽRWTQZFAػ;s+c;FrUp9u5K^*裥K ͈b:5;j5oiAnH \ 6nQ @&rԘWERTx}`V{#4HO0QT}r=1=a +{ž; o+ 9ۯ #\S9ӞL4^'Eg9ؕ)n?A!\!ؾbF,r"?> JxD7O #o9vzMԴhbeD# X?; v`%jQ  "@W _lkc{icե VJ!' \!iimW,_85Qr*b~?T vmp +j$>`F~7{;^&w[ڱM(ts0YƊ壿^'&$&9^cf bbCC, Ve޹ 4o<9evEjc?ߔ0&B)yT0~jCh"Li¹=_^hvý4|JSG6g9wX7܈7BT[R:l>mۀ5RA"_V`>8g@],θfEiq }y'gV:?/Qqh;\w`\#e>sǎA mb !Ykm0e=)5ՁhpX" 7q2uR_2h'ĂEо\댦+mW.Ky8 c$ v-%nG)@JUٻ)&-\')#(BEqq]ۗoIHʧt"Ė!s }bSbp[o' `ބ3kw[/-)nN-^pJzT)m>T֛aU¯&}~TNX w=XFbm:9.eSkԗ28mo豎l+4]A\W\qaf>^xDkE?z%Y*~9ٮ/.(C RGNhŭҝC{`K;]|'7ymMy"R|SggjAt4o춺 yH:T#+S~NکUG<֬ Os㲷m[6Rrp%W#JKK@1ΩpMmParB$'S}^AqT%18I{jɆPF$ դ";bDIX˼jv)_w&'][vN\85C75f")iwс4x9@偂KMAY9A>\Y,PK/v*:p\I8=TB3䄾WjOAY3W?hdutk,9mL-WlL$H; ~A~Fl4>[EW齖Q3g?\Jwc[!JJxǣ߀a$=H3y4 J)C6M(5aNv=-h 9b=yqtx,֐{?oW,AM/{EopiT>]}Lƨ';ht$"Ihf^&&Jѱohj%!G*<'DS i=sv֠#moy<,gz>'k:3 y75Y1̙_))OWʸ| B#O6KrkN3%7tՉg3;,`v*LWA;hu o~#! KX[j<폝qlg% s]]X:֨ץL;:Xd񵚾\[M!Vh =-k6Ԯ:@PS_D(o/][9eJ_E:irɘEOTRʱ!B<zpjbXZeqԙ5h}^gBox )#<01h|d@ֳv)pP!I{aι}q\ɣ}ȥy/Dzn u.y!YakϓM,{(V?,CX-{F:#{+ ^tEL1RN{ܴ4աL0Qa)V7E^o<@O2Ԩ0=J >T?n΅7%wCbe@1n ` V_YqTq/b-vq̙<ƴW؆QlzklĜMY$0D-~}TA>>>iRG>[*AJ!'àJ"LYY0gr֖`DUHtҨw|QPÅ+h+.~(k:ekx0^8Q4'?ຆ%oԦ6՜sz Ͻgv17 +.hlk%dB͙z[/pq۷IAEv!wΨ#[u'&Ǖͪ2{8/FTnվS;H<| utLD%rJC5Dhw)ßww~z~Uɀ)BF;7؝\þZ('O֮P@(|F,Qգ[%%kPR$:kϕGBc31)_\_PAnmTҌsB1MN fиt_7ڇ95%å޻ঘ魔x]ND2{=% NAw&ēB/Bv%4E%D96Tr2}7q +`͎(ꇉדfl mK$0A/}z70_j.W 8dA&+j2;-wn wڬ{ק<, sMO}欄݅8|)G2 U7HǔicP;t<?HoL^d?qp..>|Ns@ckW]e8=~̓Lu -@p6I $'YmujktDf~9m#dou?$ @/c~.h9Ǽ]3 _\#;,d|jɏ=Og}vd7tX_SlCo I5.-+h6Zd4C,>~RG0k,L](`UA*D~mnK8 R}Dk6q ͥ[Ӡ;~rҋa%7v#g﩮7vov 9:+dwoVa ?&eC#28}hObJJ#(<\l =CZ/$hty&B @q~KF+\'v֙?>?X<_[ekBh(Rc ~paޒ=Dȣ?2k$O@5yVLw#0k&^a]v4n??F.+ "aKU; ];Mg&QEA<}3s|_ H5uϿr Z}V_,(6k&TxT8"$x]0TXoHs+R E1vD3nʁa8CdZ}(:=o|v {PΤC)'+,YbeuXJQyM|-]OVfvta-㿀G"XmsuwW5 }Nt~K" ]+ ׶+--p[ć3T7zI)' U'||qp <%SG^j۱$-k]$iKk/:\Gj2Z7PuBݖ(9gBB DH4Nȵksp C]qCX(t᳗>b =A`6j@Oq 3Ii:/yr52:tgpXp`cB߈X_c 2;gFf ƽ!c3N[BϪ}{5PS$2t%QI_&tkMJMd\Dѻ B/t 3-A4JJqDE|2`v[^6* <<ٰ'ʎ]s%TJaё$ejѰ?n {d-2QFqo;ҦMwշtb4G?ZW[U 7\63-dmqBLl$?ٕ;ì (O'/T\f@YrZyk4AX 9M_ʙ7r_vtrhtz %l&ӵ,haaxƓv 0ב볦_ɽ}1F=$ >oa4OzHFj!4K-Ҽh 8m(E Fi;9^?G 㜤RVE:K [bFKo-9x"Ѐr׀$1Ggc3&u;-5ōw/*v\_rl"JN)D}~a-SP{v?2($'(Ef3֪\ŁLqKqO@GT+n|P T a-~rΡXLFF" [-Va[4(Icl6]1dNu2%+-N+YtDȺiS eTǜ @R҈ZPdO7 )Rs7ަɝjm6 t.$LǣU|axݟg%To>7Mh}-C#f/N9ß<;@_8JQ1%/Q?` oAjAjZ戛уG ANBI *_tpfN h[-m0>/ 5TM_(~/^&S? Q-aM2?wD&B}l.(ul:O,DYt&9#3j<X]LOjE B嚏,lع>8weg?eBiEץÀX}u-p =!\F sFpЁQ8ƹݓBg?t_(%\Ԏb/B=׉CfoMT^p)Gps||5g?"p, - Bsȭ|˯{bh1'@E]OaGYYpǗn1k]3ߒ t Г\!;] P8jc4|{KnMMv4iG9x}p6#n UROƭ*L"&~- 05 {v‚,6Mb o2BAʧGP 12ժIPVآ 8%N,B̍h8 0:4:fv9CC6%ᠩS^b5Aˎ0㹗׈_0ȩ2|}$: ݓTp˴}z%D3qLUg MwOģiokfˆ htG :B4˪&wvN]=":}?"sAHD4ض ' r GM5mޘUQ$PQZx6H<`1L7l H% %|ubʹu"h{X I/":kB"wMP<Qʣ'0ap;մMYOMcN,C,Q{p7IsQMCIL9虚*1ؽy){Tʻ?Jv9ړwl&~' 0L쎊$IF]G@xX( ^Һ?N(|S(~.Kp"=dV`+RQjfd!8 vK:uy~y ~U%0h2~S;ilh uL.016'n"VK&>u2O ^FH&&s { +@QU9Rp`KcchftuVs&ۥϐ_&uwZ >^Tx8jAM$b2TzʺDRKA ksS;VxCX&Jҡ/T@dU%wQ[dgckvLK8 ~'뫛=]%=:fm-Gm꛺N/D_9OmUM(A˶߷^ϝ]1o9/ /| _0"jW֫_twi'WO/,s76˙oj|@gY(EǠI9e̹k8A`# B+'@1KU)&)C1=o wȤB 0$5>,?HXG.efo/R|/$'ٌt2|A~r@>GBa 8DVnCTaWc#Nn/z"sCkZQ0Gh1zJid(d1[e5=Lnz*8_^Ly?뛖1wGy<܂/>4B$z`@)rd||NӝVQwC\gS!4xṃt Xj ?S \ჳ/7LH#IV9gD,\)#y)ó%aԃIIͿiK$' \6ǵbpM>Nf}YVV_A*u)0T|/ QјWQKFnE]9s=B*;%I 6^ f|s{ Z"_R5d[8dj>@3cpÁ(?Pmw? }Ѿ} ?T?[ZoSw@yRNy~^&7sv0Vk@*Yg>if O&*au"&x]ɲoڛ$#O|]{_֔Vc)wy {l8mtk+X^xrҴԷgR\a(j\nXL^77\8Q:AG#/tMsV:+lX{rsa™"W~H9wBz\Dۢ[!%AiA-I\:b \i' )薝]rźE$;Z@ϏS}/7k{_4ΤWwCAc(њxFWxXFq?0&lkt~7+GdB=9R(xxgB*+{ytYZ<&&:i!8f6A8k9(/F!gJZ#lAu9_{ҴMxqQkjT.Z#"\,p8wa } 3rSԨ?n[.]A_ֹWۧ0]Y41Ōd "3X?KOB7ٌ'bxCCwGn#O1 #.J9!֤҃N$+qrrv4K.6OQ0{.Жk'@c=sw0D&Qx^:'& <77]2[%ZJb6R&G2V #5US[߸ ՖI~zLrƏ;(njhANA&^Q6PLRnYE!/,K@u>/?R0ԥLt]\Y-%ɉĘ !q%N *H6|(Fq n` "YfWmPFKT1eE]2 uU"u lWNN7t8-yg׉\y5(#_B%*VGom(‰!glɁqQ_,nPHfzJ6;?*8MRpq$V>,YNmCN6ZGą\x(.`:CbZeGחx< x7 g>^ \uPZ>Ө6 i'`,LԚcL1ɬ&oL 7M-PŞ[]:_'jxw?I7Υ_/l490e>=>Я-] ϠgTMjEFgBx |k+Y$IٍџLXӣYrJaZhC"ʈOu6w5NC\?IذrE!\X~u3b&qvsK>d C9fIC2T5B喺j_3{ID`SQJZÕ1Q6Wh`,8i ͓zFizU V8abB=^ya4L}seHaw-:Hӊ1DHe <%wp&qcSM-ɟcDZ@[P3J,bX( RB@Ą@e*HIw\85ʵ!C:1û`1'5SF/7,DGj|3 qSa0hw[{pob /km>7l.)š~ -9Zt`?vTP zEC`>g^OEaR{1Õ"TXTlm`̌\ClNH9dzhYMIDÒF{i)azV&y;؉;16$%VCLy)& |b GG$bӜ N"#r=n A2c`,AJ@ǧ`2EרmTgXV>`-WCeRg!hlW} .C]xHOf ,fr D vF}'*@92jAXqGޤ 4d ᾂӢoH^eAli$bMqwT9vn 뤆b¹KieT2u"|Jl[ ;{JA9T0U<3$ A'?)Ձ} 1M^7RX 8nsʑK*FNɉTG}O{M{=%҂?~I% x®G98X)T"v:7upF"yGRh\*浉q\ mSϱSmIt9NΨWKyac{Noǚ  a#DV0Arx.ebxF*r8d Q{Ƨ,:3F׌!I+FJMi/{72*a;~a'nտV(zLAHor%wocś-&$V~4$m<}⹔gaU8cQ!:؇uߔ%8d#k㴑"&gְ(}`A[]>M rZOy ~ek? )'Y9DbYh6\o0FAY(ȴ˄}N 2U._JF#A`mC}>8D!M~]rhXbL|Ͱ7 l[_ep&R?yG { 3I%ٲ{ʝ$OIJY ezj;tj7pz$kaI}(+Gste eb5Y}zYnf[cDm2T\PC`wpwwsKae )"y6R?AGvlG3%-eR07h*aYH WUOt~&D.d7n ;k4=qMлk4z쮻kI42KH`ʬIsk2vvvEqG(/nhUöLMqOO}\"K,RR@Jy.sD̏_mCA;c] 䑱clopM*_t\&0u) IQحۮ?={kyPz;J:M-v/3 ]k$? LĝZYTk* r f) j||.HMR9vÛ:^[7p俗eEz;~!ɀI OrH;Hn`SR}I|?Evbt.lHgM+j/W8­`~YjbC[$DD`H]BHUM=:k7m|:>ShbWl)r$Q1|eB&^<(Lۮǒ'.3[ORޘB?Lx,uԂ]"{s^c:ÎgN .i " R2iw/󈏙>9!XIJǓFt2r*BYhDzdM'ҷ`?g'e~Mo$BP ﬤβ(ヰt@QAh6=Uɼsn̸xI yHiL|Ħ6`v?@Y y^@ d*6]11,֗D@t˺B\^ ]&]h7f?܆,PygXcSX2Ep2eU#.vd3{[ j0q*RJ~ i%plm1OHM ÛXF<Zհ; |8=;G<}u8N ,l_g؍L+w@qۓ_3ڧQ) pSW]\Vk. ߶W'p~Ph!@YK۝^v׬bY!n2QK+NGX}R%ؚ[R FD(XvyJXQٜ>'K!^ޗhf'hr602T1v? [!]I0\Pwe{%څ,8p(V J)u;B98( 9MW c1{//JYgg^h݄?z,G c0 ٖ`wL>w9d_ahgYhՐI S*#E,v$@['l35Q$;`TWw]iuT9Y!K0p+__7~LF\:U3v,w0BkO.q Ұu;e}e鱵 Ǔ)Luԑ&//I>,EP''w',mL=VH Ej_S`Ki/Jգ"e;SFx-{\N3m),_&,~o2_9w^hh5NnOim!9gQ>`e ʦI%X4EBz+t#\Q.+;'[#`Wg)F%H1;5@h%I]@r dL9'Otq<$ T /E GzZL.27g=Tp>ԎW3]v$$f[ZsOyD[_JS՗BEG`=³hHe̜6_* |[g^>xuq'$a`x3jVYjzآS;791`e58?lH7J=߃ZcGgShuؒj%pi mz>^\Fh љn%bt^VB|s {?PpeƟto]-H~r_HahOǷ(h.qrfp]e< [$R$I 1g X9˿8ofK-u(&>? (9+f?02]:J^'Lmݘ>)|[7VR x`9< eyEԫ DzJS>'|/=;EN3Zik+}>Q.(H)""=p_϶j'#n gɮ] JܘT=kM5pV"qQMs8l'm1`>3 ݗ+l6aDcp\HX|Ԏp 7lDtkD<^J(ϊh@`>CݳEAGIjzvwtp6QsD UՓPTmă VAt&/6.~b勳j.djӷ'gc׷OWgYm;kXNcgQ$}}ڭIv0GBNIu4(ԖŞ.:°K lK ǫ'έ.d5Q" )EaF+16ɿWSyK$d2$3O7N#w\SM) ??Xlczh0'W|L4R, MP,PP/!Rh皳M's?cSuSB.K{fVͻհh]R@^qunPX통.ߪf(d X 9U1čyf4Z"5 6a#0=ȠQR݅UVQsPm.?է~_BL^LsġkK PkGN$r݇p< rcm2\{n a􋟂׽â dJo96@Ko@>R;BXJoZ؆TqBQ~2)€.612l`yR /IŖH֑ q6L/:+pDkyQj%)ëYWW#uɗhAWL4cIHY eG`~;خCZ>#^{F‘DCSshpgvSS BCFeOiԑ;uȞAjB]&ӿC<Kk+UI쓧 @-f+X^o5Dd6G]0hWL8x]팱ۛzhMHՒ5C :+XYSseBTu{v?4n99)%+cHC6` C$vI;@f2kR0It5'ƄCNrܧYb^\%'Ddا_(PQ5>)Sta(xdɯځt< i lkf}Gz-V9^Ϋ~A$Ot ;Fb>CZPT{Z~ZթP銽n5ue˯8vh3܄^ӯTeBLm=D 5wJ#uuMaAdՕ={\ZX6x[HO }~e\pS]J;w<aaI @]*&W< 2M+0p@0 =JŲz}ᒽ]Pt2e!\,kQj.C=2RRv!I`[KSfa\h#.1ç0+ht@ˇEr:YO%0B<-ewW$)70u8C_Aޠ̫@ U֒bL><<E-`ě_U5ΜTDRBj[Ut P-lw`0;Qn;Z4dUakoA,=%ux{׻qqV8eTiwՠb.X'B|9Yjm ]yI01qL~q<ryr?Dʝsy!L̺ؾe87dVޡ:+ˆύ1/i-Tʱ *S2bׁ/%"yW1;iiR<ɢ-0~qTXdByv<6hRjˈ%U~5E'.}M  :Y51J)th~tof +ܕ#A@raԩ_Tq~$U7^cD;GʇxS]"ֵ4Z `6ERJY RuЗf:nY.-;j_s j wIÍyY<o X#EzơQO8脇ϝêBg@O-!vN+='x3yAQZŀrIɖʻYL\# T"Dm 4[{Iogd]xr0ڔS`ٹQ4&AbR 1M}Q*c* ?Bܢ<]Dq_0Bwݧnuf#DX):&# "Gnl%hUG6[4cɔ` u#.t<d\Ow*qj:g$ Ng3BLWRo~ZX:].iY j%, <_`<8lriD[!~dǫLl,krd_-~c<"x%7r^&L1j7X@_v7JT$Dߢ9hU )N(>S9USWy8!9)2O.F|naQ):}U-gx\Z&Qgً{9:-pwdԪZ Rk4w,'!&냚{5J-@^'9[p [Kd !Dڤ"/%WϼSΡh ;CEn={լwǴcKIA\^ba"J#ld Cʪs Ru^:Vz)^׽ #p9?c'bEdMT-ZEm$ ;kDبXx.Oy O!KfrZ2?kx)IF/!Gʾh&mDE=;mCM;!".(zX>{:&܈ml"^Ԫ# E(|OOErCu $n5]n{0*KիX*:8um.-囐uwt]y:&Jl ³9d Ꭱ 9sNÙ[`sιP*BmRiGnw(Y7N|2|1o-a?O+6kRЦ3 Y׆á vͿ) >[3/Xj(_:md n#x.VPՖ,XFĐ_tpL'Cp1+?_՗Zt'[&جEǾS_4+#R)\Vwukc~)Ǝ2_d_[[YO[ʦim1;5jr%l~ak_@٨Ȥ~ty5?nYߗY8-atno>o <'p ec#Xj Y-dF`#a۱1 vɅ QQ ,pէ{!bvg𘼏SZsõkޮD&vL%xCc#W4(S30,Hn$"CsB:{[j.v#ͺ Է{2tw=hmS35\[:X,*??ْA&8Ey[}Q': ˍښ^^:]PP} ciw%4©p|jj1)u$_+Iʭ #:)*īq jXin <,Ʃ;W(YNK@Ŝ$ ҿbg;:{7% )ʯùc!XA]YR؁2 4Yk?֌ݩ(VmfgXށ?~޲x#Dt54 >়=sOCĶ( w}l~dP)<9*Q+>2:{t|>+ ˨ uC R(ˌozP`l[B"L'[]֢`WJvwch4`jOxreM+mQU)$wV 7k)x;ŕ0`#Z(W+rA۵r:?y<KC̀7_U'A'.;@h\6KP]ra?¥N뤸|,#ޘ7˙/2}vO?QπQKq+\$;md: +F@]yh':EU80(/ >aoaSz [mY%)cS2bu 57c~U~:ZkϓxW)wCЁ6fbza;{Uk}q mao]1?xh2])ID_DDSϣ`x%rm.uB삾rg +1xy}.EX0C5qz"pMH^ Y?JpZo3* U&J*,g6F (ʢQ]'٦e&f64dԶC@-4Bf+tPa~p=_;!‫>@g4dMQ/!&!?Tg1cm,߲6 XkYV+@yj- ]ruWeơwA]|+> qOďHFG&})0B{ڷS\M%&=*[ (x⿹D"oh7ڡԁ!ޏy'D$UU(VQEM:OӒTL )r,ΓN*q'ʅ 8t)._Өfbb?~ )BἽmZ]evղe0rZza]"Lix[geZ?PqΑ4ejuEa8V [M$|Tks/ﻫ̵.q(wFJx#|'cn 7<>M0C EW8(2-d?ʇs28+Ro7VIhaMv,*DTAPw0J)u!,@-݈Qf۳q_pfکDƲw'aGh  >#UWD}3g:9%ϼnK!f'SUA%?6/b{kJ(pP2)Tz{^΀ 'M'*jBmR8>w9|UcR:QvO6’ZfM.*ac5oN\A)ULyšg',Hy b1e 58awV *WhlYlf vcMOS ҫ(N-}o4*f?T׫s8p-pTG .r 3aPؠ%@#bbgɰl|$Q׵ O l:=9>eϲ{a)0Žs][ YI */2rr "mEvO10>ĚRscR4zq|ƙd鎐4})F! dY L0ReC/Ci|Aa%5^r*x[ SE ^o*U* >1Z&BipHHracd65ƮlxxD-0Ql_zsdo8E[6ˡbc#ܧ5 s#|vm=PLdb̲I1 $PnaOm6eÁTrsIkB.QIE QB&#cmf'1!?vZW1FU &G ,$̉γ;w?wd~ZC-zIQ"k+:Oe o 1AgiU{h( ixԡjf vO aAB@- %j.<_ -,b4N%L&[&g]?590:sF2eC[*aύyWGV$np^83 I}Mj36;_rV7 J_e!u6&"QSAM EyiVC^ '3u{#:pMߝ*B#]da; _~*F%9[VC-U S͹cA:%v˰D.KPt*V5պ'0dE1WLdW1A@*k΋XohB9PMuK+yU~\z):jse]a]a*4.A#Ç#Koi _mIu&2jIQ3I-mXş0B*G0~ Чv|&1.]x{ k>6tsen6NTXP?$,G7 Hf !u.~|u: KQS)Tx@H3/k`A2R u8d_8p8{p1 i2$^KdS1h-:#>ga}#֣Mש]l_7Lw#]-K_j]D3=[v|(;:f;5"@ZlH4fŨ(٨q:cZ kS'Mx\`^l3n{͎0~#!G+1NE89Y8}HJ,F<SyAUf5}. ,jbҢ"&ϭn18f7ޢǺITegԶfdH,&M8)sޛ?͌$'%$Z^pi[=DPy' fMHDQ0sܢnT$" 4Z֚c2Dm5)1xO@HN/G̰>[tsz~K4/TE:Fi9pN(݋A]3֨Aia}b ng_M`%M„)($ɏT4fHpe߯؈H $.cN)1/w ǁ|9vБ9>wT>j[y%j. t~9{ P?T"[p+u6- @Ksݟ#=YɆ e$s3oz^vQ2 N[#&+l+ {ΝCCNq FX/z{i%Lˍ%kJ0w#=Y(WU/^uB O\|P;N7ybk4 %;y}?bD&bv3Ȫa_;Zak~u؞&>c_wᨴxog4Q'Nyܬs)֮҈׎a0EyɌ, - @fT}CTq7Sw;a\vծ3y;Ƴ; IjD|4&eqi)$\H̔v1n1!w_u끴 =7> 䮢PXuL?.1eDtqah BD|r#֎&(aTx=@9%/(M.N} y>?p|@:߳Yӕsq`K*7o~c"@ug㚄ċ^:FO`F!&Ɵ7VѕͺoB-T8{rr6$ ˹42X?RL־3W,-Qv R_e{O./n7@؜CY\^Ⱦ:_ յQthDmI;ɴ~St^_7:^>ܽ=@~l,DRlQωkERw2Uw:B49&I={ckS,brÑ ~'= 9@m!ď5D~-Wxa {-=KЄ>~EO+^¼'B- Nެ?bF|KEY&^KD8}7~Q1T\c @n]62 N?pZ &))b([*%1>Szlְk&(O[Y1j=(rl?bygjt"|1C&M;t+ҽ5ur(PG. g pz 9`útk q7ɯLa(?8'faIKNhQS|A?-]ֻR\s\e"9~ itLBgnxNFW5W,8~|ДL tWQ/  5=;^9S{`чP|G_ 0 1Ju$)鯄ڌj\u 7&ЃFyD5(iīr&cgo%nw$3f""u?*'qz5>H޸P=WL1t@di~L-p$1e DYDW~–`M򮑣5&iuC+N(#h&3D|Z^_2bz&׉C]E7y>J'0Mہi@ݘ$R >{-sSJNqՙ绩qQdaN#$<)w[<* _]A1y{rd|Ri~+5E*b 9(klnx|4 p>8-_!= %DWc\M\|rqǬieIMuT'{"\ DVfzLbO|6>,^%M0;}@cTHjd[t x-V!b FEPrDWڢ(Q*D+ܴ@I?4@ /t-5+ >Khͼ7R,8>tHٴA IakEpkG*k0dMH\.us_O `O,? E2FluXz`w>sy]z'Xp-67#NHOuxW--.dFNS3Z\i̙zxA8 DB1V/oP7c)Z;|juh6)?{z8qB{-l#24S6o:kPC}?ۡx,eSZ*.,C(QeEKdJo{YehS5Q jZ+wYJ^`yif#ns g4D^!_.CXZ1{#˼8^/Tr5>_"r\IOɝl5TSƂj׍2K%h8cZa]rt 4f}Jv&! .qroE= - j]\ h~ +Kld%3Y(,կ7Dzz"Fo IJIy~'mol|Zʺ`SZU4s@2/̳''N0](.nٱ `wnab%k}Pz(~+*Oкbmd"8KMN9iς) GAGUаzo5*kzR.[YϒԯخH7fb>I+YOhPkG]+L'xЬ2~% Ձ1I'TrIMeK1r!ZQ ;x>f8r'knPd0YPվp<] |SEwA⿊7:17 ֦Y 3Ոiqm* `ؾB"J H=8qn$pmVKOP29gD<<jm3_'Kx*5.9g{H3,a3|tu9>S=3YFG5xy/"-Q:RN4(p5$Ql7 I#fK) R?',G|1a*A]Y {(j@h$s/~L# h#LRP{>i`N9&u1'= M?;%.%g$#P;N*'%UFL7-H*\Mk_\a:5/UÏz ;_~zS^_[ip-tm v֤ ^Z^ccPF픚z/^Kj貾iԄM;;Bi6~P}Z@ޑHU; }_nzA 7eIk`ʥ+zYńrCcZ:ʪ_n"9UN"H M#V9W `@b+)= #-PpQazF& aٲnl4֎ ".CPJDG] W$DJ} u ^ 4Sk򂩢$1,6IjYJj2nLf=Ot%N ?^̇Uw0Z9#ڀGSޭG-cKv?:Z*Qlzi'@iDSR8軝Jt*#M=8ߠcY78FgL!dP:)'i.SQ>}rr="=Ljag3Tmqp_:%H=wў#H^^~1{{RZeV*_p8`լ/yJb\< 2,:;\,M-.lvd9wΖ%2|QL OJxWt8L*/bd-)aFy۠Ki%.* G3La\ɳ]P;do]Ctg<>xXl[WYPc>`.wgTH~ʻ0vW؍RT/hX]<4o|L t.eP<^8t9Bm;%@DC]>T4zغ=h t6* 5MðSi17Mɭ}W*U_`VT8V`%n7cnb!$f a500ǎU4 EFfA85x5;#Y к|'up} hjNh/i;zMOa;C.sVD3̡yied/]S6Y) +f ;L]X~S3M;?*G*H;oQ2)λPǙ_ > y=>a(զ) f4\:LUfsLRhL-g\S&Ko x5#`)Pt3#uTI$eٸZu4Nl+hFitvs{}Vچ<kkRz̲Ěq234kEfG/^am0ߍB]{`mm{3UUO;J}j8'l)VגG]5I!sU:G>)z>ԑJ;-&{a04 .>>y>P^9*$څ \ %4+$‹72(}=9*}1BQ0)kZzQ&T_UغdFr[|Qgą\b?#%\KvVK2_I)h4{8I1`i )(K`w\: Eh5}Ʈ? $,R{O>p;81O=J߱?]h#ueo~.M#ZLJYUĉ'Q<\b*pvz <Bd`^ B)1A~5xI9z92UPÅeS SAXC;R"`8bQlQ %n0esԭe"bkB(!Rf^S%~<^ ΜDµD]_R x=l _-P4^OVӘ[e=jd#0 U{BUe6b1kV& d|efjJĜ@,,>G\o%# ʯyC-.%L9.~nvشEqJX,O.JI[XbFqY}@ޜ+s oЕ׺ [8&_,eHp~ %4QpZv_%5QFɚWa/W!`~Qi'W6HaiWY>b#:QaFh@4/ouDS (vpw[%Z'')C1Zo`՘8.ag|^7|ŝ)q|(6eKau rTșbQJV,csf&kWB7H Ve༈](\PZ4İ_"v}B!Nfgd"#Q%0]*iE .C@m&2M3f)SfDnVQCU EZEu0w(>BMZJDgxp{m[AR.qa_st 1zO"GblHV@幕>}pked}WC 3ŽTRWd$ /I?հ )ɱTb"['>m1299LGʣىG1RYAZ:a6=6om*)J\>ݫ'@AeLb2'!#ނ,vK/J亄E|JjS!%޽-+-q^lׄg׫v!I%2,=:b֨`cXX 򿀪̵DAգN}L4w @EHlxeViΊ%̟|,PC8*f\ [Ϙk2ֻyk$S2["k1pw\%qgɉר$cmX0sAv!Ղ]lBzQlN]\&'yQ j; 9k$(Kr"MC4'NشQE!b>Ir폑*4joZɎLge3]EN۽/|9jl"))mMPv;n_ҡ=G@5g})J[݌@Āfg\7 Dwf)6 &G2,c=)}w\qr4;}F-_wf2R&Ę:č|3_|Z8"XgEt>Y) #׷GJ)nmg1r`㳈5E72ΔpQtXkfzb۷-7L3{` >Ջrwoyf#)jA]?|&i|XLm09F#wwYtIrx,xp~}_ZSWD`ysMgo.E}Pea-. `;ޤLXkmйiHSTX,hdO z ZC8mxLvUr4huȜ{G5O{*VgS2oV43d?Q&KD'w ?nGJWFErX|PqևV[ɢ@z ͦ[\ECa}nO3wƘ4d!3 Qt5v'^jr$Q'd{?z<zM}C!f[;v<6=x+vGdpn̂AjJyRMI*5sz! dZ/TFe= ޒ+c؉;-a3D&JzTkXOAКgQ;zt] ~||LUKS0}#B;|C YP=:?QtWOډsP-k{Un6,HҺ'ΣCm)@5iR`bPE eioP#' *[dM$1BӜK/dx{Te }><-[)VzJ1s&5?jAG/w膳vē%LO @yOc%je T$`ԻϘz T//4wTˈ<_had iSE—,(%B&)!WH7&0!<)䧎Q YĵQp!my?K]溻x$**-GnL.(!;Ɍ#h|޺⤡JԖ9=\c2KXOQ\ǁino omr~FuPx ׃ȫ,{5-n-gsb a} r~LLF4.N!$^ﲸmWQ\_ɭ:t)?i(ReCM|6̔{|sقg:xOUZl{ǮJY6N|wrdQtwwv}w9D3"|IHh6´hz~q֧JP%OA997G.zu*F`DCEx>XNO#;͹}r-Tr~s !g!!0mqF@MACA3=BcaS Efڃ<ވ2O8A9&kD{`aw/.~ Yv~쿖z1OI-7NO#O65`NI>ueCR7N_R(BRf;]F3ot[,Ka#(8䞕k2I n].(2㒪K"oRk67jG7Ùyכֿ܇%Ѽ) X3ac{4紸~Pu[Kxxܱ%~@2kTe@r?W+wEǓ#ףLjmSF^4u)hBO4e+(mQ+ފ3$OL|ҢzYfV2 [p bU udu>nxOU*ql:3QqJ)W/nR4[zMÅ`=")ހ  9X|OvGͨo uhlϷdN[ 1S&#j<f̰mv\6a#beW&"3IFF >-*RSR=mA0YpY]wIy;f錔_*UKŌuGMڰH)Ǝ9׌Τ/TnLIgDT>cNUzx%EQ'8RB7/re~ٴ޿~‰!v39VNmBHtbQ¨nR Pʠܯ$5p>fמΠA'ĴV# ħe 3`!1$pkJIi@ߛIVq84 6J#^*ŷq\O b6 DL.Z̗b528tQn /;kE;.G+Hr5?#2KąfA/M;O`53l2:n@fBdoF kuiY{/.KVո!4\MqМ7"ļ7|tWf.1 "" na1|i!.aP[I$lE?4 +ȹɏ\c0όPȪaN zc Dw0)g08/X`sA^ɱ>O;d#ZBƄahqR4 E%u|.G6jh< C!L]KV<ʌS6SPRm6ٟ);i]#a;l<`w'swCW~%vcYylmU!z`o$EGf0iYc:MΓi:R d&k" i"vNഎWb^<鲋ԣ-))Ar_^T.1k(赻QRO_iUPٮa/Fv&h6v WWkc@b/ X|! dɻlHH~wC(CчZ1qǚ#o 'P)}i(xJ4y5WR)Q!8D]ʊRη *FnlnPܸ̲=|:9!  Iڈ&~MS|~Itx, RGs]*Wd4߬Қ%r8`.;_x?mub8iLZGK9,Nȳ7AsIݻ$-aoʶe٫mQ dt $_D>nh!aUEOP{ q~D&*!6mJCu ߓ:ގ^mh 5-NYhh+lCwH~j?G.RdwnSJ- @k(7Ew ]:im ח;dqǐ)pK\5ѳ@]13n&à(tM=Dh~jJ 9{p;Z^"YRMfZvpoϗՠlIc05G7d [Gf'PC'jֿEQЎ/ mzv tO0Vb16N2SCdd,BUTU͑ t!wK#v #/-&n]1llｹ=ٻ =(4H2,?f(Px+o . jL :d[e4{6y&˻: Afz5zOV4]<^6UZU{1S+#.CvP&h}#lO. s@ 7ɱAЏnZn Ï^G.9? r qd<M #aT)' 3 ~g: "#@<2g5<; s62DY?:'~TKĤc1maf^*eC݉S=@wva؃ڲ?䢴$a_Kt~5󓭻.5k@ /U$;A'cCkP#('P_RU5 nO>؊8Z ;Ԯxwkb3I]qJ!hL;5 Im E}aн!eL>zA3zNHHU#D=s0dNJβ.k;ҵ9$OdJe70b xa~"l'8NrzIfd <9zTb=$tРL. r?{TmИ=n|h ̲< xmݽ5)*|Cj SW iĞ/VG%S"^q9hX]Q;=9"&. N/UgLO' =PtbId9YGTj1 +H :2%&%'Ǘ`0*a '\%Tsdj3B̸]ޤ6 `xH^:-\j rH"aڶSe>jױ<d>4nzOvL@N ۢ]yqԽff#}goS-=>xsjBD\|+%j`FY!6B~f=AsOu/Y!e10Hϓ1,q+ ;k*ͺ"ݛ>uɻO ʅ@EG:'$XxԮ54?JNQVl773lfrKTUfғv*KqxHɅ0\!}? I$q(v*橌)؍VO"IطV!7`xJI @Pf|G WJ L}|HIZ g.Nٯ4zҠ"H7`|}wZͰ 4uFm,>_J"^Kʱ%7*m?vqǻi7ʪ}7peZ Ȧ+' x:*[mgIR ']J&مu$x| pe{IpfMSNH=Ԃ` (i3yL5gan^R˞( 6>ɿ**H<(Yœւ ^x:\%EX4|"c)jP_ZiU2RNUw M e $t5-3]oI 0\91)k mqV~jW eU,!x(#oHO?k)dY%^Gvm7me?[';;ݹ-ɜw?͞M+JkRc1"ṛjjnﵣ\k_XVCKzEzI/gG-\YqH?d(#쫲<]8?;\'BɨCJ@-o RJz ~vx>KIg⥓yv]hl@-TJl[8( V9h1\8(8oj<qKAU1M1@%qW'I-8cQGbwLᓰsڈ 7W}BZ63iLȢ=ſT$&HOZcQ| ]}*ۍ-;w̺V.` R|O ]\EfC>'nDWk:CLc碠T rz@F4EZdB`=S7wxbÒlĴbуxH(:?#km/ќWp¸Hً1JVQO)ivj|*hŵdӦ;E~ire3kU >i,Qr JQE-\i y .4OC/0糗a^E0tXnKT* :}(Wg gxAҦ7CfEEuG(tohE@4 XlTT2KgHtItYlkjU;[ǣFwΫυvK udZ[$t3UZ%_{eH{?$!Ƶ ʲ,D2Qĵ$ON+'*F;eQ$љre&| WǹՕSvU'sxfx;VLfC/}k^&ۼooaM;HGwމ-a]w|r0G#ʢ$$^ouӀl\d>ŕ[~и?/F%!+cђ§>9,ە؇}-\6`2x\]rUWU@(|@q*O(FV yjWKF` C}8n-&1EfZqXTڵ3K%S)3?Otu{gZϐNvvKCP^#+ǜm@9Pcnї_DtV5ɳrW /+8^x} {Jy@:ҶgCՊ5cH32$i Z@whG ȏOw:]:`MT V:K.An=H͆2wL$~>b"n!_OeS`ddlF#62sj¢K+-v o^ƠvIB3x3 q|[͇hURim7Oσ*8]rs"lΌHukidh,rt$D5Q1mE%$(km'pşkb<:@]Z@29c'nJ-q@sg˪O8_$r6_j f|k6[6ʰ^U¤U >8Cf2D$iGkV#3q:D23;zS"' &"/Ha40fƒh%?#tvO8UpXv4ζ4%rD— u8,>T0_pրW7 [, H|'^*c ?k'S 75iO=XJB샒 yqL& f#~ 4Nc"8^sfq$y$4@ F!.fy7{  z#x(sAlxiDEjOJТFN;cGTF^2z9p0oX%\ؗQ{}.cj-/_7};[i}r~B8rm_Aͅ]e NќlEO1 }#XD] TUIrɚ6vt]M Pm mi(C" Ng>b?)tơX5YR 4ݪ,'=0@T=\d~#s6tȷDZ];YjʻrZ&?К*ah)=)b,7%[ JJ~Jaˡl;x9@wb7VI8%Ң*`&6P$]g;^;\Y|0>LT [5+w9^bH[֌JhLuɓ`7,B#n#yalTe(IW ܑٻ`vIzm]*u7ةgB80rkFy7TȭYOx~U]Ś4<;M[g;ٽ WS{X\O%Wh!;qZSRDy 9J2`xZ⮊jPFu)wJ M<;Pi=Z@bX䏖 n~s*x1Sy_$ ҍSƔ'əu6~;m⒋Gǀy!̙|cT6uYjS_qxZr]WW=I_႒bf©}iso5cJf!}]sy/LdԵ;#6a+焋Az]}9لL<̆|ͲdK&~+fC>lKԍ]xFܭcgkSDQ@jB+Au|n!gXHقbQG,wmnq#ܶSUjfsߘx0FUeV\'dS^2ɢ 6Ļ}fGX7՘n Cs4d7_&{g2ک hA|``Jc uqufIb雙o2R0K^;fį{5>;S'%Öڽ w i侘+6X?#@-m'T7 tCx*Cyc[o mc$}(=2V+h,){rj@xE*˕mZt"}-Bcɥ/豳4 ի)^_o8X-AD~ׂa-+ЉeٿN2n Sz Ls8|YzV#jD.[!A6-/]Z-9,ُ3NLcń0ZSʊ-O|^+ b,|Zqi HR?>4+FLtaQ&a4Yٝp9f q@AhezbA U :£y _nC~2MLԔM/dD[}TyCO`rd$~ 5gh*8z x=P9[jO7U7PƼ/DkN<_ x=C4j!1w0rn! ;h`O>YdckϠG؜'J~+ʰGv! CG2$@N=VsZ8Sx~_&ֵ]­C!me2.pK>t}ayÂx^WIKb\$].ÍqgT\A@E϶I B#1 }~H O_L.n}yyHgMtKIiqwꝳ%w o6}ol/#&уK:蘞;q[l1^;3]̼pTģ:Co׆q~:VV&S:Q~$|X* gFy+`vs8;gw9v_/t+w -3Nu |6EXUeZoW%ڬn֯p@E @IBMsQ[76U܇^WVXXf03>#=pjӭڎ|)jA}w#4T $ỎYQTk|nL3ܺ\r)`*jj;eiru3[:3b33ɤW.'ƄMr~O)ba-@ȻB!3K~-T`ۘbB b/dq鏒6nkRuagkxS]ս-;9T0y\a[&R>t)g2" m!]'+ӓ"RĢ6hQ^&-1#Pl1Ɂ!sy)J;!* [a>ѿB&o'DX_}owc9