criu-devel-3.15-bp153.1.15 >  A `f!M@eee B<ıW ,K*/R`)a*bu@c6Vy̅Lngz'x*:8ǘجDʻ (Kt>jtTE+ 2mY|x0—%S2T"umORmSJ{jU\~unpv=lҫI`DaG dUP ٙCHht,j8&%Z.γIQPI;W(3֮@6G`$oS$79137980191ae1be671d315ca4a21f8107eee7344f0ddc98c8c556be8c44cad6ec0b198e877684ee99ed52f6116129b3aa84b9ddb`f!M@eeeUsF H^wG,H&w4XX=L}{ @2>$>a 0Z;I)T27#EDJ|g[ ޒ+nhn.RXUDuwd:'咵f dqn SЩqsܓbk^O a1/Ӡ69'R~)?(!.`w~>_g3fD [˝!b7D,u?pF1ng>pED>p>?d   S *J\bl0,0 0 0 0  \0  0l0\0Ll0,\|(;8D+9+:+FFG\0H0I0X Y\@0]0^ bc~deflu0vw0x0yzCcriu-devel3.15bp153.1.15Include Files and Libraries mandatory for DevelopmentThis package contains all necessary include files and libraries needed to develop applications with CRIU library.`fsheep87 SUSE Linux Enterprise 15 SP3openSUSELGPL-2.1-or-laterhttps://bugs.opensuse.orgDevelopment/Libraries/C and C++https://criu.org/linuxx86_64LZ _xV<CG25;vi#+%AA큤AA큤A큤A큤A큤A큤`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f`f9d9aecdb3029c85f0de1c5fc753574891911a63e6ffb66627ec65682a020b50d24e1e091a4559ccdc3472f761436fa638a265bba2bb3bd03cae5671e43eec7bdd5052ddea4242d9503dfb3761e4742c504bf349f024b015e77635f4038ae251031889d0090cdb781935c723bf28a386c9afbd9dbcb63ab4d680bcbf2923e29c38472881fb6a0fd59195a3c55ef0ae159dcaf003846b3a762ba84c6a2f3d509c24738a2d55e248014bab401a13865ae8fd7aea12d6200630e48f63e6be56894a532dbaf29827955d421f3362abc2ce3ca7260a1dfa68fb9703f9134e0229832af151460824b5ebb13894e40f248090097ada242d031c931fa696840536a5413a834afeefc8a8e2e98078bec990b3662d7ad9510208b549e25fd8bdc8d1fb58fc1a2e527b3b4bc8da72a3dc78084887f346d74133fee26494ec3ab3fee884c843ba5682e329ed5ea31a05a379fb9d37862f7b10b2643d50b667773c2df05653bce17dca92a7d5651a96723a779c9a6207adb62fabe11f88824b6fa42b6ef30757a304fe8a65bd13e7a8baca89e3b3eaff44781ff9976939a0fce66a1aba21fab46591c4db5bc08cae6e305f075f91dbfb407357cbfc34693355c6a6e8dc996f974cb28280ef902999d3e9ac54fadf0c2f19309fcd1f26977db3ea7dfa5adbc07436f15b3b8a4a22d03ae37f24482eeed293f8e05589098743f79d7d7bb4409c88582724e8ef2cc3a46a327ffd7c14427dad6132118dc94e203005ee5aa1c9efb853cd6f2c1ac47173bb1ebc74fc2c42d4881b50b53959d592275a3ae7bfc1818b6d580efc2ed5a994cc033a728c0dcdb529f833e6249160f5685c946d4eca8dca38d6a0d99e78f2622aa1222a47172ce293f34d43759bd1c50bcdf7ae78c34a66da62e274587569b6345ac58b41fd9b2caaa086854e32c083c640a8a610a123ed4f68c330db0080b1cac6e8685105662ef356f77830295a46382efe30b33c334287272c0c44a449ecbf2f022338251f7ab69965322e42f61114fc3e686bb56a4d6ee5f2e0e5a60d15f229ae97b64017d9366bee244aae087293776c8e93b18bd6d6cc00bae8dc90989d6dd7046074092f068ce022d3670f64b7535c81c87f27f492244a226171f4a19d33f5466740b990770a1741c4d51be300dbc0f7ca927694ebb365a411153e6cc0a88ad54b3a262e3eae829beba4aeb52fda3ad13b350d476f59bdb95c51c6bd31ee8df9f9ad91d1493fc706d34748ead75e1d24c0474b7525b8988e1584548b52361e62034f6ac7819fae6b72f161b75bede567ac82077e5df996fae0050374ff705dc67b9754943a0daf2b0a0400b1cd76455a547aa15e856098d04cd16953e96bf46c30b508092b8b6b5ec6d5a5767b4cb32832a68f50346e5e289f5392ecadd4b5e334ab7b5e17b5e247f738ebb1e0c9f9e9c8506afcc998c12f1680be41ffa958e84945796c5bc331c08a79be946b329c3a461de548e040e01c2bad04680197e810edf98de3992fa2452f3b4bd33eea8cf6f38428e3982d8d7284011508624a6428bd5191c3dac18177dd7aa1cee042d294b0a4421f10e0a53b7f5ec3c1de60e883c7040aa5a32175c32f6693a7faf36bfb8e1146dc8fcd92996160a280380ed59d1864a53fce21aef2e70692562275537d668f4aaf6c0dbed27c9d9b2a00399f35de88828e21e4df45615f518e7fb145ce61d9fbbc6libcompel.so.1.0libcriu.so.2.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcriu-3.15-bp153.1.15.src.rpmcriu-develcriu-devel(x86-64)pkgconfig(criu)@    /usr/bin/pkg-configglibc-devellibcompel1libcriu2rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.153.153.0.4-14.6.0-14.0-15.2-14.14.1_0@_k8^^@]҇]o@\![[ @ZZZ@Z>E@Z7YYYoIYV=@YI@XXDXXf@X@XN@X)@XWڍ@W:WWaC@W;W @V@Vf@VMU@Uc@UlI@U?v@U#U@T|X@tiwai@suse.deDirk Mueller tiwai@suse.deGuillaume GARDET tiwai@suse.deantoine.belvire@opensuse.orgtiwai@suse.detiwai@suse.deavindra@opensuse.orgtiwai@suse.detiwai@suse.deavindra@opensuse.orgavindra@opensuse.orgaavindraa@gmail.comaavindraa@gmail.comtiwai@suse.debwiedemann@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.decbosdonnat@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.de- Update to criu 3.15: see details at https://criu.org/Download/criu/3.15 New features: * Introduced criu-image-streamer * Added MIPS support * Allow checkpointing out of existing PID namespace and restoring into existing PID namespace * Added additional file validation mechanisms * Added support to checkpoint and restore BPF hash maps (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY) * Initial cgroups v2 support - Fix build with nftables package: 0002-Fix-build-with-nftables-installed-in-different-direc.patch- fix filelist mismatch after libexecdir change- Update to criu 3.14: New features: * C/R of memfd memory mappings and file descriptors * Add time namespace support * Add the read pre-dump mode which uses process_vm_readv * Add --cgroup-yard option * Add support of the cgroup v2 freezer * Add support of opened O_PATH fds Bugfixes: * Fix C/R ia32 processes on AMD #398 * Fix cross-compilation * Many fixes here and there Improvements: * Use clone3() with set_tid to restore processes * Clean up compel headers * Use the new mount API - Add libgnutls-devel to buildreq- Disable LTO on aarch64 and armv7 - Add '-Wno-error=deprecated' to fix build on armv7 - Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which is armv7+- Update to criu 3.13: New features: * VDSO: arm32 support * Add TLS support for page server communications * "Ignore" mode for --manage-cgroups * Restore SO_BROADCAST option for inet sockets Bugfixes: * Auxiliary events were left in inotify queues * Lazy-pages daemon didn't detect stack pages and surrounders properly and marked them as "lazy" * Memory and resource leakage were detected by coverity, cppcheck and clang Improvements: * Use gettimeofday() directly from vdso for restore timings * Reformat all .py code into pep8 style- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.- Update to criu 3.12: New features: * build CRIU with Android NDK * C/R of IP RAW sockets * lsm: dump and restore any SELinux process label * support restoring ghost files on readonly mounts Bugfixes: * Do not lock network if running in the host network namespace * Fix RPC configuration file handling * util: don't leak file descriprots to third-party tools * small fixes here and there Improvements: * travis: switch to the Ubuntu Xenial * travis-ci: Enable ia32 tests * Many improvements and bug fixes in the libcriu * Changes in the API and ABI (SONAME increased from 1 to 2) - Updated to libcriu2 subpackage to follow SONAME 2 - Dropped obsoleted patch: criu-asciidoctor.patch- Update to criu 3.10: New features: * Support Python3 in ZDTM and CRIT * Keep names for UNIX sockets, that are unlinked from the FS * IPVv6 support for page server * Set page server socket fd via CLI * Large pages support for aarch64/ppc64 * C/R of Per-thread seccomp chains Bugfixes: * Failed non-container restore could kill random task on the host * Failure to dump namespaces was erroneously ignored * CRIT didn't show cpuinfo image file * Tasks that got PID-reuse couldn't be dumped iteratively because previous images were missing - Update to criu 3.11: New features: * cpuinfo: Detect compact frames and handle noxsaves * Add support for configuration files * Add support for external net namespaces * Punch holes in input files when restoring anonymous non-shared memory ( --auto-dedup ) * C/R of + epoll: Add support for duped targets + tun: Add support for multiple net ns + x86: Support extendable fpu frames Bugfixes: * mount: Better handling of mount points propagation * nmk: Make collect-deps to be more precise about targets * lazy-pages: Don't mark current stack page as lazy * x86: CPU -- Rework feature testing * files: Fix O(n^2) restore in terms of the number of fds * fdstore: Unlimit fdstore queue on start * mount: Fix regression where open_mountpoint failed on readonly fs * page server: Handle partial splicing * ... lots of small fixes here and there Improvements: * Remove all magic of service descriptors when it isn't required - Switch to python3 - Use asciidoctor instead of asciidoc for formatting manuals: criu-asciidoctor.patch- update to criu 3.9: New features - C/R of + Tun-Tap devices in sub-netns + File descriptors which were opened with O_TMPFILE Improvements - Restore of inotify watchers - Restore unix sockets in proper mount namespaces - Print CRIU and kernel version also in RPC mode Bugfixes - Random memory corruptions during lazy restore - Workaround the iptables issue - Don't use standard descriptors when tar is running to dump tmpfs mounts - Fail dump if dump_one_file() fails - Fill kerndat with zero-s before reading it from cache - cleanup with spec-cleaner- update to criu 3.8.1: a bug-fix release FDstore was initialized twice (re-initialized) causing e.g. - -shell-job restore to fail- Add python-devel to BuildReq explicitly, as a preparation for fallback to asciidoctor (bsc#1075764)- update to criu 3.8: New features * C/R of - Multiple network namespaces - Overmounted tmpfs mounts - Unix sockets and epoll descriptors in SCM messages Improvements * Rework service descriptors not to cause fdtable enormous grows Bugfixes * FP state wasn't reported on Skylake due to a kernel bug * gcc 8 warning fixes * Resource leaked on error paths * Attributes of sit devices with value 0 were not saved into images (and were restored into default values) * Tasks with pgid of a zombie hung the resture * Ghost files on RO bind-mounts of an RW mount couldn't be restored * Random memory corruptions during lazy restore - cleanup with spec-cleaner - switch to https urls - list binaries and man pages explicitly - remove rest of static libs to fix rpm lint errors- update to criu 3.7: New features * Pipes usage statistics * Run page server as non-daemon via RPC * C/R of - SO_REUSEPORT option - IPv4-mapped inet sockets - Net_prio CGroups - Overmounted shared mountpoints - Non-broken and breaking leases Improvements * Show criu and kernel versions in logs * CRIT decodes socket families, protocols and types * Much less pipes is needed for pre-dump, which is especially useful for big mem migration Bugfixes * Files in /proc/pid/map_file could be opened by non-exiting name (with 0x prefix) and it was fixed in kernel * CRIU log levels were used to configure logging for libsoccr thus breaking its logs * Overflow in various IDs caused bad image names * Compat (32bit) syscalls lost signedness in compel * Corked sockets lost cork flag * Preadv() syscall was declared with error which resulted in dump errors on 32-bit processors * Musl compilation failed * Ghost files in / dump failed * Crash when releasing context for ghost files, due to free()-ing shmalloc()-ed area * Lazy restore could receive partial page and crashed * Erroneous closing of lazy pages connection caused restore to hang * Lazy memory fetch restore could start before tasks are restored - Remove 0001-images.py-remove-shebang.patch * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53- add 0001-images.py-remove-shebang.patch * fixes a lint warning about a non-executable python file being executable due to a superfluous shebang * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html - run spec-cleaner- update to criu 3.6: New features * C/R for files (except for unix sockets, ttys and epolls) sent over unix sockets * C/R for threads with different creds * Ipv6 over ipv4 tunnel (SIT device) Bugfixes * Some s390x registers were not restored by native sigrestore way * Overflow when parsing autofs info from /proc file * Dumps of anon shared memory with sysvipc one raced with each other clashing and corrupting image file names * The "dumpable" flag was not restore on shmem regions * Trash bits leaked into image when dumping fsnotify on some kernels * Lock/unlock of iptables from different criu processes raced with each other * Closed TCP connection with non-empty send queue blocked the dump * When --empty-ns for netns was set on dump only, the restore failed (Docker case) - includes changes from 3.5: see https://criu.org/Download/criu/3.5 for details- update to criu 3.4: New features: * Support for s390x architecture Improvements: * Unexpected death of restored tasks is reported with more details in logs * Merged many images containing info about files into one big files.img * When helper utility fails (ip, iptables, tar) its name is printed in logs Bugfixes: * Compilation failed on newer glibcs (ucontext_t) * Dying helper task could deadlock the restore process * Install-related makefile variables weren't configurable for distro build * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any containers * Potential NULL dereference when dumping net namespace * Dump via page server might not work across different criu versions * Failure to restore a subtask could be ignored by the restore command * EOF on page-server socket wasn't handled - Dropped obsoleted patch: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch - Add s390x to exclusivearch- update to criu 3.3 * Add --tcp-close option to help migration of Docker containers * Allow to override build time to fix build-compare (boo#1047218)- update to criu 3.2.1: bug fix release, * Restoring a stack fails on recent kernels due to kernel changes * Restoring on a host with LSM profiles failed- update to criu 3.1: New features: * Each boolean option now has the --no-$option pair * RSS explorer in CRIT * Multiple plugins in compel * Run-time check of 32-mmap BUG on x86 * C/R of 32-bit futex robust list on x86 Optimizations/improvements: * Start time is improved significantly with kerndat cache * Sigaction image is merged into Core * Unneeded stages are skipped during restore * Restore w/o namespaces uses host /proc * Restore w/o namespaces doesn't parse host mounts (not needed) * Single-threaded tasks do not parse /proc/pid/task/ in vain * BFD engine is used for more /proc files * More verbosity in libsoccr * Fsnotify dump w/o namespaces doesn't walk mounts tree Bugfixes: * Python bindings left zombie in self-dump mode * The last_pid sys-control was reset by restore * Threads caps were compared with mistake * make install put crit/pycriu to wrong place if DESTDIR was not set * Fsnotifies C/R w/o namespaces restored with errors * Inherited control terminal restore was failed (but dump succeeded) - update to criu 3.2: Optimizations/improvements: * Invisible files restore is de-serialized * VMAs restore performance is improved significantly - Mappings of the same file re-use the descriptor, not re-open it every time - Not-COW-ed mappings are restored in-place and are not mremmap()ed - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed at the end * More verbosity in case TCP locking fails (#292) * More verbosity in case VDSO magic mismatch * Restore or legacy epoll target descriptors and fsnotify marks is unified with common case Bugfixes: * Restoring fanotify marks from old images (<1.3) dropped the mark * Binfmt_misc mount could be mounted into wrong place * Compilation failed with gcc 6.3.0 (#315) * Waiting helpers could race with sigchild handler and would result in restore failure * Missing VVAR page in 32bit tasks wasn't skipped and resulted in restore failure * After restore consumption of files is increased (was fixed as side effect of mmap optimization) Deprecation/Removal: * Deprecated separate images for fsnotify marks - Fix the installation of python stuff: criu-py-install-fix.diff - Fix the build for ppc64: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch- update to criu 3.0: New features: * Compel library * Support for x86 32-bit arch * Version check via RPC * ASAN support * Force VDSO trampolines via fault injection * C/R of shutdown-ed UDP sockets * C/R of bind-mounts made from external mounts Optimizations/improvements: * SysVIPC shmem segments are now dumped as any other shmem (taking holes into account and sitting in common memory dumps) * CRIT show decodes socket's states and types and task's states into strings * CRIT show prints unix sockets names in more human-readable form Bugfixes: * Unix sockets' names appeared in logs with mistakes * Contents of SysVIPC shmem segments was dumped twice * Dumping of any memory segment more than 4Gigs failed * Migration of unaligned SysvSHM segment on Armv7 failed Deprecation/removal: * Exec action is removed, use compel instead - Create libcompel1 sub-package- update to criu 2.12.1: Fixes: * Content for external bind mounts was erroneously dumped, which could lead to dump failures or huuuge images * Unneeded collection of host mounts on restore could cause restore to fail- update to criu 2.12: New features: * C/R of external TTYs (for Docker C/R) Optimizations/improvements: * Sanitized the way the -v works Fixes: * Checking features via RPC crashed * Resting pipes in user-namespaces could fail on modern kernels * Shutdown state for UNIX sockets could be lost on restore * Dump of huge (over 2Gb) SysV shmem segments didn't work- Update to criu 2.11: New features: * Added "pre-resume" to action scripts * New --status-fd option for better control of page server * C/R OFD file locks, RO root mount for mount namespaces Optimizations/improvements: * More strict checks for extra CLI options * Report errors when probing locks * Restorer logs now contain timestamps Fixes: * Regression: v2.10 was broken on ARM * Use-after-free when restoring ghost directory * Array out-of-bound access when restoring VETH device * Page server exit code could be screwed up * Clang over-optimized string.h routines resulting in random crashes * Parasite failed to send FDs via socket on Alpine Linux * Restore of huge file tables could get stuck * Restore of epoll in epoll could fail * Errno value could be lost when reporting failure to restore invisible files * Dump of sched params didn't work on Alpine * Restore of huge memory dumps (over 2G) failed * Installation guessed /lib vs /lib64 with errors * Migration between xsave and noxsave didn't work for wrong cpu feature being checked - Update to criu 2.11.1: Fixes: * Page server start via RPC was broken * Fedora build didn't work * Ppc64LE restorer switch crashed- Update to criu 2.10: New features: * C/R of SOCK_PACKET sockets * Libsoccr -- library for C/R of TCP sockets Optimizations/improvements: * Logs cleaned up (removed bunch of useless, fixed '\n' in perrors) * Action scripts errors are printed in logs * Removed several iovec-s copying over the pagemap code * Restore degraded linearly on Xen guests. Breakpoints disabled until solution Fixes: * Py bindings fault on restore error delivery * Fd leaked on file restore error path * Fd leaked when restoring invisible files (gets closed with criu exit though) * Link remap restore could fail on kernels 4.8 and higher * Impossible to restore after restore error with link remap file in images * When going daemon a descriptor could be leaked * Custom setting of mmap_min_addr could make restore to fail * Sending pages over UNIX socket could race and fail with EAGAIN * Error getting ID of /proc/pid/ns/foo link not propagated and could result in bogus NS ID generated - Add libnet-devel to buildreq for dependency- Update to criu 2.9: New features: * CRIU can now be built with clang on all supported architectures * Ignore missing sysctls on restore with --weak-sysctl C/R overmounted mountpoints Optimizations/improvements: * Batch restore of memory contents from pages.img files * Link-remap type for invisible files is explicit in images Man page for CRIT Fixes: * C/R with --empty-ns still handled iptables configuration * SCM messages inside UNIX socket got lost after C/R (now dump aborted) * Empty unixsk.img file appeared when dumping tasks without unix sockets * Install procedure wasn't PEP-394 compliant * CRIU blocking netfilter rules were added at the tail of the chain resulting in unlocked TCP connections * Dump/Restore spurious failures when open() returned 0 descriptor * When dumping shmem lots of zero pages were written into image files * Ghost directory with more than zero ghost parents caused restore to fail * Shared mount could escape to different group on restore- Update to criu 2.8: New features: * Ability to configure CRIU build * Show statistics on the screen with --display-stats * C/R of Mac-Vlan devices Optimizations/improvements: * x86 can now be built with clang * When dumping files useless garbage was sent with descriptors from parasite * The clear_tid_address and regs are printed in hex with CRIT * Big code rework for compel (part 1) * Removed duplicate error messages from opening /proc files Fixes: * Restoring cgroup NS could use old path prefix * criu check crashed on btrfs mounts * RO external mounts in userns couldn't be restored * Unmounted on host binfmt_misc could cause dump to fail * Off-by-one could cause criu crash when dumping shared / bind-mount * Mount namespace' roots could have flags changed on restore * Dying tasks could erroneously be tried to dump * Swapped shared memory pages were not dumped * Errno value can be sometimes spoiled by RPC * Restore of netns with newer iproute2 tool could fail Deprecated: * --ext-unix-sk, --veth-pair and --ext-mount-map, by --external - Set BINFMT_MISC_VIRTUALIZED config to build- Update to criu 2.7: New features: * Option --cgroup-root now makes sense on dump too * CLOCK_BOOTTIME timer supported Optimizations/improvements: * Output of iptables command leaked into logs for no use * Helper dev environment installation script for Debian * Man-page updated and prettified :) Fixes: * Unmounted binfmt_misc with rules wasn't dumped at all * Malloc() error could result in crash * Device cgroup restore could fail restoring empty record * Some entries in device cgroups were restored twice * Potential crash when dumping cgroup bindmounts * Sign error caused dump to fail on btrfs partitions * Shared mounts with the same mount path failed the dump * Threads were restored with unshared FS (cwd and root) * Shared memory changes tracking disabled (regression found) * Restore of autofs can hang * LSM profile propagation could be lost * Mountpoint with lots of options blocked the dump (too small buffer for parsing) * External slave mount (with external master) blocked the dump * Mounts with STRICTATIME restored with others flags dropped Deprecated: * No reg-file entry for TTYs- Update to criu 2.6: New features: * Ability to leave process stopped after restore * Memory changes tracking for anonymous shared memory * Deprecation option/environment * First error message is reported back via RPC * C/R of More IPCNS sysctls, xIDs of PTYs, TMEM on PPC64LE Optimizations/improvements: * Use service FD for transport sockets on restore * Ability to turn pagemap-cache off (some kernels are buggy) * The criu --help text has become better Fixes: * R/O-mounted root could block the dump * Restore of cgroup.mm.oom_control could fail * Cgroup fs bind mounts were detected with error * Unaligned futex-es in parasite could cause dump to crash * When compiled with gcc-4.9 parasite code crashed * Failure to freeze cgroup didn't result in aborting of dump * Wrong ns list was parsed when dumping userns (invisible since nesting works only for mntns) * Non-inheritable non-tty as stdin caused shell-job restore to erroneously fail Error path in criu dedup could crash Deprecated: * Per-pid rlimit, itimers and posix-timers * Separate image for epoll tfds (target file descriptors)- Update to criu 2.5: New features: * C/R of fs.mqueue.msg*_default sysctls, Unix sockets with overwritten paths, and Link-remap files in removed directories Optimizations/improvements: * Micro-optimization on namespace ID evaluation * Restoring shared files uses one socket instead of per-fd ones * More verbosity when refusing to dump a file descriptor Fixes: * Restore could fail on openat() with ENXIO when multiple mnt namespaces get restored * The criu exec action got broken * Link-remap and ghost files remained on FS after restore failure * TCP window could remain clamped after restore resulting in connection lockup/slowdown * Dump could stuck when injecting a parasite * The --timeout option wasn't taken into account when freezing tasks using freezecg * Race in freezeing/seizing could result in lost tasks * Memory leaks here and there on error paths * Double free in xvstrcat (crash) * VDSO length was mis-calculated * Symlink on --root path could make restore erroneously fail * Potential memory corruption on reading mntns images * When restoring on systems with low pid_max limit restore could fail * RO-protected SysV shmem segments could be restored with PROT_EXEC * File mode of mapped file was evaluated with errors * Restore of cgroups' mem.swappines and ..use_hierarchy blocked sub-groups creation * Impossible to restore cgoup mem.swappines default value * Zombies living in orphan sessions/groups failed the restore- Update to criu 2.4: New features: * Generate core from images * Ability to forcibly drop half-open TCP connections on C/R * Ability to specify cgroup ctls to dump via API Opened/mapped files' mode is compared between dump and restore times * AutoFS mountpoints * New cgroups (perf_event, net_cls, net_prio and pids) * Memcgroup optional properties * Devices cgroup Optimizations/improvements: * Pagemap image entries are cached in memory Fixes: * Configured kmem cgroup limit restore failed * Mem cgroup oom_control * Cgroup's pids.max was not C/R-ed * Failure to write cgroup property was ignored * No init PID in pre-dump action script * Sigactions inheritance didn't work on ARM * Opened "/proc" dir blocked the dump * Working with iptables was racy * Sibling mounts detection error on dump * Devconf accept_redirects devconf could be restored with errors * "All" devconfs could be overridden by "Default" * Name-less unix sockets got auto-bound * Mode was lost for PTY device file on restore * Newer protobuf compilers didn't recognize PB files * External mounts could be remounted with MS_PRIVATE * Build fail on Alpine Linux Deprecated/removed: * Per-pid file locks images * Per-pid fdinfo images * Ancient pagemap/pages images - Enable builds on 32bit ARM- Update to criu 2.3: New features * Ability not to show payload for some objects in CRIT * Pidfile is written at the end of restore * Ability to join existing namespaces on restore * C/R of Data sitting in TTYs, Partially write-protected SysVIPC segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6 devconf sysctls, External block devices, Unix sockets with mismatched shutdown state Optimizations/improvements: * Relaxed calculation of AIO ring size * Tree-based search of tasks by real pid * Less mem-to-mem copies on restore * Saner devconf image format * More verbose explanation of why task cannot be seized * PID is printed in PIE logs Fixes: * Too many mmap-ed files blocked the dump * Potential memory corruption when working with IPv6 sockets * Overmounted bind mounts could cause restore to fail * Overmounted bind mounts could result in badly restored mount tree * Incomplete restoration of RO bind mounts options Deprecated/removed: * Greedy mode of pagemap (non-root) caused dump to fail (disabled)- Update to criu 2.2: mostly bugfixes New features: * "Post-resume" added to action scripts * Root task's PID in environment for action scripts * Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast * Serial ttys Optimizations/improvements * Lighter link-remaps restore on newer kernels Fixes: * Race when restoring userns vs setting ns' maps * Tasks with zero fds failed the dump * Restore of TCP recv queue could fail due to kernel mem alloc constraints * No errors were written to logs when launching helper (tar/iptables) app in userns restore * User-mode dumped no memory pages sometimes * Bind mounts considered not as bind sometimes * Two mounts in the same directory blocked the dump * Off-by in on /dev/tty{1,63} dumping * Forking of cgroupns task was done with screwed clone flags Deprecated/removed: * Greedy mode of pagemap dumping (on some kernels we do not support user-mode) * Removed the --namespaces option- Update to criu 2.1: New features: * Checking now classifies features to important/extra/experimental * Ability to bring some disk files into images. * C/R of Completed AIO requests and fallback gre and gretap net devices Optimizations/improvements: * Code coverage collecting now works * Use native rtnl library for netlink messages processing * Using --output - now results in stdout as log, not a file with the name "-" * Signals are printed by names in logs Fixes: * Make tar generated tarbal with bad name * CG restore code lacked rollback in some places * Error code from raw syscalls was treated with errors resulting in wrong criu check reports * Dumping task with HUGE amount of file descriptors failed * Task could be stopped after pre-dump if respective option was used * A /proc/pid directory from dead process conflicting with a new alive one could cause dump to fail * Zombie from alien session/process group caused restore to fail * CGroup fs was wrongly mounted in CGNS on restore * Irmap scan was mis-checking devices numbers * Use-after-free in irmap scan * Btrfs bindmounts detection was mistaken due to 'subvol=' options met * Propagation of mountpoint's shared groups was lost for propagated mounts * Unaligned allocations of restore shared memory could result in codedumps when used by futexes * Temporary mountpoints could result in spurious propagations * When aborting the dump criu could crash on use-after-free objects * Locking the network could stuck doing the DNS resolve * Several build fixes Deprecated/removed * The images from criu prior to 0.4 are deprecated * The --namespaces option makes no sense and is also deprecated * The --ms option for check action is deprecated- Update to criu 2.0: New features: * New code layout for sub-projects (e.g. Compel) * Unprivileged dump * Dump/check cpuinfo support for PPC * Explorers for CRIT * Added "post-setup-namespaces" to action scripts * Added timeout for dump procedure (5 sec by default) * Ability to override LSM profile on restore with CLI/RPC option * External bind mounts can be fs-root mounts too * Skip netns' internals on dump and restore (for Docker integration) * Advanced support for external files * More C/R supports Optimizations/improvements: * Align parasite stack on 16 bits for correctness * Compilation with native libc syscall wrappers and helpers * Parasite code injection done via memfd system call * Make vaddr to pfn conversion with one less syscall * CRIT shows device numbers in "maj:min" manner * CRIT shows mmap's status in verbose * Docker files for builds on all supported arches Fixes: * Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail * Wrong argument to timer_create system call could cause restore to crash * Extra tasks in freeze cgroup caused dump to fail/hand/crash * Unaligned restore-time object allocations caused lock operations to fail * Opened /proc/pid dir of dead task failed the dump * Unaligned stacks caused criu to fail on aarch64 * Changed device numbers on restore side could cause random failures * Fixes in mount points sharing/slavery/propagation restore * Race between mntns creation and fds closing in different tasks could cause restore to fail * Hard kernel limit on TCP repair recv queue restore could cause big queue restore to fail * Unconnected dgram UNIX socket with data lost packets on restore * CRIT didn't show IPC objects * CRIT didn't convert IP addresses in images * Logs from PIE code contained corrupted addresses and sizes * Not loaded netfilter modules could cause dump/restore to stuck on dumping netlink socket * Shared external mounts were restored with error Security: * When checking for namespaces' CRIU entered userns with host creds * Deprecated/removed: * Completely removed 'show' action. Use CRIT instead.- Update to criu 1.8: * Ability to check CRIU features via RPC * Pre-dump and pre-restore action scripts * The "info" action in CRIT showing stats about image file * Python API * C/R of read-only bind mounts, IPv6 routes and iptables rules, ip rules (it ip tool supports such), ignore_routes_with_linkdown netns devconf, empty bridges in netns, FILTER mode of seccomp, and IP_FREEBIND socket option * Lots of fixes, two security fixes Service run as root could allow users to violate ptrace policies Service run as root could give users access to privileged files and directories - Remove superfluous dependencies - Clean up spec file, as systemd and logrotate supports have been officially dropped- update to criu 1.7.1: Fixes in mounts, notifies and userns found while testing openvz - update to criu 1.7.2: Fixes for IPC in userns, venet C/R, socket buffers overflow and unix sockets name off-by-one - Add the package dependency on python-protobuf- Disable systemd service as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) - Update to criu 1.7: * Improved cgroups management * Support for seccomp strict mode * Support for stream unix sockets inheritance * Support uid/gid-restricted mounts in userns * Support deleted bind-mounts * Ability to specify maximum ghost file size * OverlayFS support * Support relative unix sockets' bind paths * Altivec and PSX support for PPC * Small PIE loader * Temporary proc mountpoint is mounted with nosuid, noexec and nodev * Less memory copies when preparing restorer binary * CRIT action "show" for less keystrokes on common use-case * Fsnotify log messages now use hex everywhere :) * CRIT output doesn't mix fields any more * Many fixes - Drop obsoleted patches: crit-install-prefix.diff lsm-prototype-fix.diff 4c5b23e5-criu.pc.diff- Fix version in criu.pc file. 4c5b23e5-criu.pc.diff- update to version 1.6: * PowerPC 64bit LE support * Makefile.local for 3-rd party build rules * Ability to "enable" filesystem on dump (--enable-fs) * Ability to skip mountpoint on dump (--skip-mnt) * Prepare to deprecate "criu show" command * External mounts auto-detection * /dev/tty (current terminal) support * Netdev and netns (all/default) confs C/R * Images v1.1 with extra magic at head * Support fusectl (only ctl) mountpoint * Sub-version format is now as of git-describe * Apparamor labels C/R support - Fix library path for aarch64 and ppc64le - Fix the prototype for lsm.c (to fix build errors): lsm-prototype-fix.diff - Refreshed crit-install-prefix.diff- update to version 1.5.2: * fix error in mutli-threaded tasks restore with --restore-sibling (Docker and LXC cases) * fix too big RPC messages error for service (and swrk)- Fix build failure on FACTORY due to comment-in-comment in google/protobuf/descriptor.proto - update to version 1.5.1: * fix crash with 4.0 kernel * legalize swrk API and add the ability for inheriting fds via it * cgroup yard destruction and properties restore- update to version 1.5: New features * CRIT tool * ability to request CPU compatibility on instructions level only * C/R of empty AIO rings * more detailed errno report via RPC * per-feature "criu check" * inheriting FDs on restore * ability to automatically move veth device to host-side bridge on netns restore * VT terminals support * more user namespaces C/R stuff See more details at http://criu.org/Releases#v._1.5 - fix installation of crit: crit-install-prefix.diff- update to version 1.4: New features: * Dump and check cpuinfo * Initial support for user namespaces * The docker_cr.sh script for Docker * New API for writing plugins (old one is still possible) * Service workers change their title to better look in ps output * Ability to feed socket for pre-dump and page-server in swrk mode * Page-server can auto-bind its port * Ability to perform several actions during one connection to RPC service * C/R of opened /proc/$pid/foo files of dead tasks * C/R of /dev/console * C/R of virtualized devtmpfs (openvz and future upstream kernels) * C/R of empty mqueue fs (posix message queues) * C/R of shared bind-mounts See more details at http://criu.org/Releases#v._1.4sheep87 1617301203  !"#$%&'()*+,-./03.15-bp153.1.153.15-bp153.1.153.15 compelasmbreakpoints.hcpu.hfpu.hinfect-types.hprocessor-flags.hsigframe.hcommonasmcompiler.hcpu.hhandle-elf.hinfect-rpc.hinfect-util.hinfect.hksigset.hlog.hloglevels.hpluginsplugins.hplugin-fds.hshmem.hstdstd.hasmsyscall-types.hfds.hinfect.hlog.hstring.hsyscall-64.hsyscall-codes-64.hsyscall-codes.hsyscall-types.hsyscall.hptrace.hsigframe-common.htask-state.hcriucriu-log.hcriu-plugin.hcriu.hrpc.protoversion.hlibcompel.solibcriu.socriu.pc/usr/include//usr/include/compel//usr/include/compel/asm//usr/include/compel/common//usr/include/compel/plugins//usr/include/compel/plugins/std//usr/include/compel/plugins/std/asm//usr/include/criu//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP3/standard/5324f7b150ab978231f7d0e90ace32c7-criucpioxz5x86_64-suse-linuxdirectoryC source, ASCII textC source, UTF-8 Unicode textASCII textpkgconfig filePREZ 7S%EoxoP utf-8cbe4be306b10cc9c5dc2d798235a8f1471bf137c8c2416d3c03b4234503cfef1? 7zXZ !t/CiX] crt:bLL j\Bv/yEKjMsW3 L6X0jA'`r-<IԀ HYKzOw5 QJVuf !Ǖ5 )KBm8*P#beCf F2wÄn`QIR*Vm¿|o,;%8kΈwd2 ij%}5a$4@(.3fG΋XN:,W)|?HfO@is'3A϶ +rTO@ͽzpR b6YS+'cL$i!%%9=yj5 yfuj\?T M"?GC \%pЌOHv.{6<w^f8.#2Q+W;KgPU]ްTp# g?YUxN.2]G0k/:V!>l q+5]+C1wQ h)M%㛘H,w/?bۊv*8 6+B \^N;xT~vu-gt*_10f 2*mnڐi6Ս~: 9P&3&;ϵW:N/[{WLw]Ig& C6s3 Di/@SOdy3#ٸ;3'Mm-2濅l(.CEΪX\?UQNm.ݞj.B}RYk"@gT4>lbdn+ݜ[3Ƣ|fto_2E\eR((s<%DwI\sz!cbBt+whJҸp$cً%lF Ml5[+.!.3mOU_̈ +/5R)\5]-~YG믬kz$7[ & UiSh&d62:**QuBd!) +qI%k~?27bn%KkXa7+Fz@enk'/F?|d(UV/+f$u<_:G57uTR5B 2=ls6vWȈN9 sSbw)eQ39\ r1([K,b(Hq:-ԟaO;qOf?5 Su+nbk=E!UC&=uDWD T* =A(u۪(4Qޜ!Su_,+oHp+,ۻ1[ֱxJD*"<*^e=]'ҬXF^-j7X lt#^uZGh]A8`.&"j#8PN#$5'$UO SMtԮwKRYj}-ʘjF8˄B砋;p)&tz_&iUdZ YNIxB%YMM2]Ra΅ Q8XoPAL`I wc7!\֖YSG+?%6/m` JcSYAMrZ:jp M1|!$,;8!X2vMEw[r{ωQs{]n1&nhjJ͝ MQ84(\Տ9gfB\ݥôJѭFZ ~,@5sO3f͚njXXYovkmܭH ‡/ݲkݳuX dDˇ[lvU5d$sK#Hlͭ2vg;l,Ĥm0;1ivЦo[ B 7HT#H.p^ /\SVjOtkZAǖGnLp*t1vIY#`kODJn69X?`kx Y7,+˞Wح'jQ"\[pf-bʌDfb6biu}T&VH"g4_5EΑYMm p1;c%CN"0u/*_JfWҏXuvLFXRl ~"Ľ=n}0l^ٚ3P U͚;ZaG`X 1Z S!նi^/HTPx> jTq.|-Mt`Fc.6?Yg[99ju,d@ɇof(aP9U\C[}hux¦+G,;O4FJM\b}6@-L.hf;A0YAJXN;,AS f‹ekS$EYYxu7Uh To7 S氬Y17ҐA4"y6nĊۨ Rp yjq㣁&cgD{3Ӓs%%5wϠ9tXWHmd\ћH\jIyE )~!iATxVxZ26NzKAof%'T`_N}:AZ[Crb͒9S)d0 ~ac~q0˒hZ*ySt!$wAŊ@쁳x F #6^?ӆ%ỹ[XgU;g1x򵼦l9ՊdK6]hKL:+//ׁۼ /NѸB,rnBpDn`/StcdR{ǧZs J$fإ{ -Y]@k&][R mN)iG1[;HmlcZ.|vM:nb.m"3dcQt$}\jSc; :{3_d4ׅ,y M\UNvkfdy%WLFu*r>4K) uj(&=w~^ xpx sһ%;%%1Uڑ`{':oc(ĪZm#Ѝ☌6%ЍzlCo7|#i45]WV$,),c|%Џ_]̮vےY HƖ=}+[?mP9;sutl$ Y7jHw6 9ޤ93O2 =DAF`c&\ _?t n_D`Q[ؚq>)v6giVܵk>_:H3HQ\gLI@>,ngO]~S ɽC '#<%1K.SОُ#_u*?ԤX̏E%,4U\HO A7 PrdzF$_,ħZmപqa7C>w5:HՓ ]Mba]]U`j ,VO4v^5ZX(@8j@KE)T˗&MO1'(XDNnCq jbjmc5T vNKYG>ڻv-3{ZSf&G.RmmQAYKҝ a[)>KJt 4݊(FffiQ>ҳiܯVfB;ʠ&qa"~v9֦idOprX:@Щ}KvXa'm[ζ=XMƐщ'{pG㰶w$–w{_!:\JG\?)1tLuL;FOHZjِW$;zr):KT> Qxm͹0g{U0@sVrI0LYr^Lb!gFl_ U=2+C;&GX9`yRO}5GL[2R$. Pf9FLeW`XC+~I~5j M bܸUv[ [ r%w ؜Lxo)mPKQA{ -tgrnS^ݦ1zE-fb_5}/𽲹4o$faqpwwXKZ!E]>T۵oEfD2#If:h'# ߍEE*vKñlxPvqM`b[*8Ip㪱b |T_fԓ>Oucq9<~iz'BWQ_xMSKi-(O󘘍 BD*UFyGV4;ɮce?oF6nTDR@n4iF ձ8S[ұ$=ELsuGVP\[Go*+M-.1ɴ.'2X"/ #\@:RS: Vjw$BԦ J ldUa-s|_ZDžQwT s/V 4)XGcS#{}I}h?N[2+4. uU KOAL<2'on u%~G]iB>=<6b ?GJcWÎg BӍD;g:&'?V_WȾ&ZH z0saq~GjˈtUwRղ%=XoEJ$9ݦǂ4VVOңcc4a߇w_=ߩ׈TD6X0跺.i5l^TI2r6FbM($Їw1 y}Ɯ|z5kYue,x @jmsF8pHt"nB{9&nٛM& \<dWc +jp?coѽZ[j{;y\\ST.h6Ċ-頹n 4u,PZ ,]=pgcm7. coKpf8Ro3.'g֠Hd%w0 .J#ql;ᄮ~z +Β*]kYY2 w5Y0Ft%71: λMdgzIZ2|kA6+2!|Hpg u7_&o'>r;ԾC iȊSlvC'F67ʡW}〼#r$LX(%bq~ɹ$G߁dH6ҢnZv JBƒ͠g>]|Ykkn!Oq}zm+޾SysZ@#b˯b.;ׂB=)mJDsMoR떼 0yt2@5,C-Cx{̟/$@L#fyQO^ߌ;3>b&Φ۝e_jj%uyn$Hk39=ݑ;Y07'rhA{>ct"4@ڜb2^^%c?z& f_cms,{"muߴ Q[HfqXAZ1f<ȫxy~eu8Zskg!HfoP\(=RG3-vxZm_[1+kVΟI&A!8ϩHG,QG~={v.r\Kc<ja97O[쾬n^g-~+Bg/АRNyCqY8a T>t>KƧY/!(/+f*͎+#T mO`roF@۪J;=uiU{fT=]Zx#`QT 0LVcu)^@t^#(? MI1|CS~Q]%GإJj} YZz 4=ط䰌s3HJNn(Unc܇L(He$"Z {a6Ԯk?^M[89~`@e04> ט1L : .} e0 踦L Nt(k (ҵe ϬKƛ ihx}3 kT;ZE ,yPӃr4:zW#q 2ie;J/.,T.*z0}PV0%j^ygZ8 'TP{֯ŔZDB11a޼u2n'7 Lj,Vܭc;'FMi{f0*z,ڢ00fHIN4.t}+Җ`J͖ +htIS%U]EB .\z4;cBlҧG4+g_m ϖWr6f+%U2&yK:U/VIy+:Wv{5lH A5tZ/pY8dy:Ng#@Q@K hW(LO؟iU殱pd[D$A&dmvĔfY:?_TZ܍ EV-T(1wtƊ1 pG/A[`O~h~<Zt< 2hQB9Q]UѪ3כ}Yǐˎ9HP5?" #+6ԥܒUS90LUS{Y"F8MeBs&o8ocĀ̜0=QyZ; 0&$Pb# e+Ń CEW:xcPFϸߌ&84a· 4W,G\1Ζ0ϹwwF aߪ]-Ҧ[*VUr@*ErWolHzcCeڽ{Iu\pAwPs{IKl41S TEvc AxA}$Ft\.xp,1 F``i'z.ݥz* ѝiNcՈ{ G tՑJ[Zy ye;{ԳaHnI,r;jawHg`kķV;9Gh 얬9w @}~1xx';"4bQ"6Yr ]iQ˹6(XT5~ʏEa$bas MfzdwW3. AėVmj I%X)o$|=ՠޘ9E90pBIsq}_>$lcIO- Oc%&W-ߚ!'3ͽ)\= \T\B7;㨮گR̙UI@u뼱I-ϩxؐԞeIO)Q NHD;U9#6m&(E 8eΔ?FPuVm.'d"1DI;Zb{|xp Rֆ:2RclT,y!Tityb_`_z5G^aJd .[A2\/ec^cqIbyù5 )?P x10|!oeeB{?=fC$k )UpfQ3dN,08]+p&X:ߍ3{H&LG5P^8/90{ m qCXHaS&UWMC@![$5gF,͛DG7RcFw5 ɕpɓY+h@L(5Ad G-ŨqAjEcө o"c׶3 <㟂~iАzX=­lnN40 j~OY6s8x_s~R^я,X*x֍Im9JKG^r/fG^j&sd$l)#BE"1 n^,?ņKiT|#wm>~,r(.UoЙG! ԡBѐ:<'BU&X欀!agFеjqqvzu zn'N$1y n$Ywh' XJ Ҡ~x)Zsֺhi=~0dP{/v%MV)Vخ+̲trգ=#'BgzI+Hu m|-:0V^^oۓ3\8ݚ2| GhW5y,荚fbݢDg!~W]] o`lﳶe?oIrs+~60Չnr񳞰8{r)C{hD;ZD4)Kh``]jTgqXr/7CDC[&~|OlO%|`_@GOţ+HU H?`xݟ3L!M&L>| @PA)d&kxjSj'cE*(A౞ kx푗oSO``-1~z4 9ۃϪfTd7Մ`'W:rmd߶U}Ɨ\[!Q%Uc 4OȗQi eDϝ?uݼ&0ܱv;d6 o)Gcb{ 9}uo#83ǺY:9a)s>gXWA|7 VTf͸t4&o*.3w;6ی}QfѲ0=MQ+if7oJ{a*+ ̱чRm1c3J[+xPC zzJ"RN ]kB <_..}pS>Z= G43GD9srԣf#BbQj qz@q,Oyw J7QFER+Կb9B>tony|kECR,e *>҇l1pŏea=N_TbבO1#~ GLWYIN{Q㫻*NVrՄJ gaʾ}X닁q`,2 Аॵ2"]joxlUKƺ](? G/pfcDt6Fm ~aS&M%ToCt)~#9?M-VCRh9w7:) !3q8~*ob_ٳ(~BcXlnJl $;&Qgz[zq TeMA(Ȃ4a}30 EQɧ-A2FWu7I޻'9pg+sMcq!͠ _bB8ߋO]'l8ʅg?;VFy1#lg1=zAToVI$ElB2/0;~W]Q?5j85HSW "ۺ(&%8ff ŷ?Kjo} qV{_ps#.T=3e'EFH:Cx89udhUՎ4-XXSԜi؅s\OTb8.`ca!Uq>s{nShG.a{ hH)?Z+Pş /h kut{Ɔd, y/-Mf$E ,A=~KgMljfшKUT@'$͢P/V/EF\doS !2y\~#;~3GJ3-78\SQUvO>ԝ@10@y1"[imyoWIH2{'b J⢡YghȆG->ECb@90vhj(S/R bz{# >l_W*1偁 >3!W"R"갋;}\٥բWr-k 'Su|ƻLmm0guH 帾?V>CJ0hݾ.}a "X HDpBȻŇ%@m\y2VSn|zt(~ ߂ PLHHb}l矏#*VHM %xݗ+=;\5Oqf'_("144 S[i/Dޠa) ~Vӿ[~,-OyCIښ BÊu3N` ^ Lj0Ppgl!ݍRe Z蔮ɭvnh0n6ɦq ϙNB XgosN{}g&<@^P*zZx%vwW!zr!jKZӻ8_ `Ʀt\(K6SwVZC=.᪤4G5RHhArㅩ@tzdI #!ov\Xy:O@t&X->UWt,i{ X^JGEЍCuW2]CQOH5H$gdA$BNjyq:do4 ͪvʲb.~48A:JAE U%xX{ǥ21I~c h geGP(rlO8t :x&@E]F†91y XQe&[i{^9-({[b@³~IP.Ak1O ǸN"Ibk9^ h)\uXd^ M龿!?A<thk dwW)J4s&2~MFzչ!~eț~ҽv,Vo9E^Y>K狞c^sB.M]6V~ /OrxM_ɢG˜7 ͂*$Hu10E `IiM嚵Z!޻anq3v`RxeI.$Ej6 ]Qf^=/GK)'^(FgBowsm[ZeޥE" - fY |_RB{|WuENԣ PH} =Xd&/$l0/=F'zGf 20,:nQ3&TmG̶K}etg*_F}T%Brjy3wMKrD?{یAj) :K;i&-4X}oKGӫ\ӧn\Ըj`/XӉ$E Vqˎ^7y,?z& IV+#-ܓ&ͽNWA !H(OƦ[pIfso#!*D ǯ%j{huBr#aA+)pܺI0o] xؑqAnSى 3GvjØ5)q,,3D aW8}1694slt&ځaǘj tPdM?'p଱ l>*2Yd3~r%)/սYʪvll+ irnW= *υߩ|4**P-{Κz/~)w]>:E~>L"61|7Ň 0AaҪ.Y6_ ^ 欛I1N;vNWspN@ŝJ |di8#SuQoR U+/N}:@$ze: 6g߫;!gMQ3HfR1M`;\GQ,:VjG$Z Wqsi3 Q7Za ,LHQl]@vIFfAP2f$qQFB[gÓfIr)`\RWrms>#0IjTi7<6vzG7)N!b*د2"ye+]P"N:椳/|THؕkBS;ȱuB̲!MH ԇ~1U3IyUu1 KAL:CkJRe+nS!(_0e`80)]" 6g^b'jܔT|(K9㐰mf`` ջo"bnZW]#auh.= p{r\Ys J{kkgUE虎p/& XX |jxA4$iP^W[|2<*; yp<.~i4ʴBJ^Fpd(%; ,f^ qʄNؽ,P<ֶ8_̴lqEM!7W))zyB9y=׷\,=2[FjR^C)o8{T\qi΄<:kak& >w%{q/:jE21g@rH ti90c'9&*p83G0ʧ'Gr[K*li-zUELpu:v'my :ʬ%2&֒\$:&S[Yޭ02q.J:kS>n1Խ:4([IZ|`u>7c{D].v%K`g y"޶Д'ld-ZR8Bܺ i[ԝ<{z;GxmNT8X}7Ҹ:!l1Ih\ ܿ]7<1Ϳ@>ʮÍq2726ŏykJ15 ߏjDtYׁxOK,.ìU^(/A%t,1ۼHU <& (2 1 uuBA}XTy[NW;N [0}~p|k˯|,^"$fM? ݡCP_A sARHtf{jD^MEoܙrGJ; 2PW]$$U<=D5ΣI=B Zvû5V(-Bz)Q$8xsC2ϖ @;LL+v,zD`ڮa*RYydoTr (#k _@ >>3Mt$#(R@?nBp 6AإAGL5=$V[i?&Pr"^֟ǒ} vNGgrJ|F. ^1?uaH>ڪ34C-`l7 0XCXwXzFbh/vj %I:V{;(Bo: ,A txĘMH•%#,%*N9'qeO1QLUObqI`M3_8ck*j3 ]ӔD`"_epDX˩MKFKP/~p";EeNGEʴLh2\z,m3),м(3h_D^}Rf?? bqN.V諄hA-Рb6Py 3~滛XWjzAzsS57'8S9Rjf~)pVu%>" n:= Ka_@lMiI ·]r%OWRwf i%hVt4آ\ÿu6 r0jmQAꥢ'*$^jlQ3~Sw.Մ+W9cb}OLrtAq< {6^BAv$0B:D]6%>KP\ WàYQz^} ('8tw- -IIVlfGhƌ *}~zw|o6YEA/pOEG v*S<z<O_|bRT3a -\!|cE#MoؓZ@I:V PB1ņ+#BJ9wn ;| F%eY쬡$ $ *NRq}c/j 9AY:>Ow`%n{Q®2yp4U_ѐGm`k|*-;(5[WZhͳeJ˖Ҽc=fݍCI.QH Uc,}BPgS]VI6wP3>TC#62NxvUPrXǸ,S[;)O8X:rB1l$c- 'd+i]ȗح5]0DXNG曪z4.$pŒ% wsCz۩U| ӈv.Q>tup""oano3J % kɚ.iHi$DŚ̅p>r]*MzL h^/"I; eІh"硋nj}he,xClֶ6HJUۦn33"RG5 ݓ݉dŒeQO~ezP姶'59Tw6"!X@+Rx! Baf Ntpך36:ÃowB6"^Ipd9Eø.7۠Ǵ&y E EV58شXp6^ ɘ\S9U=X?z2V܃l|d !ОdS.&-hPʡqUnu[a^jhٜ )6hk [-$n]g_bִACdc[P&XW |9BY Q"8Aug۷F$j0–oZIӳ?jlz8f,]dr:=4Yf/<bf̃;嶽ŧ0Zery4  +ˈFe.lUvQC$8!}YAQwYO2RheVQ=Д>Qʇib}ht@f{. RU!i{hDjm/J]R­C z̝l5鷣xx#]~sA=ϔMbnĢ(P3%˿|Zhk܇Pv@%C,7C|А>-2"60^ܲ_;e)_]WzG^kf,x8 +’+93F/Jv+"i7'CG5 /TWXd- 8v.,❹V|R'+Q7!`-?ʬw0N=նs7 [y; )Ca&/Td%L z(7Dꘕ]uw죁nBm/o#qxB)!nXD#Mr3µŀ+"!`;Do!o~naO& <Ġ䓢lJ 0m躑AU&k0٦oZF5shiE~?e\hi/Zs1cׅař5Z QhҞ4gOݠ͈(o{[v4IdXLI6#!2~ҊM:"F w9kzjiGIt6BX N݋ ?XCpiv$Ph[^9Tv(wแ,Z=j"`$ڎ*unZJ&hZ8db+652pH#B1G4DY s5h'q%pC*fe:>[eCH`h^ӑ+2~IAV~9ZWLUYהnۤy,H'yZt=zdyCd^/ޭn>N+d鸴Ul\|yMHWh,U\[_q圛_)p~@@x6NΝ\}ܪm_u]dЛ؝EuP"A-K1K!*2VrǨt[>RsD!={Sv3\t%qI{bcO=!N߉DŽp@` dۏd9J/+K֘ܨ>%*r3SeY?/ɾۍjnՉ¨ F69;,icͪO< mrq!f!y|}kQt^RVw9w6C\nXY>j}te Q?D[4iכaR"c' wKO\TohU1SEe)f܏ d֛X ;4O7r&̥ͨЦ@c.-ׄ|NÞ(Oy6LM?1=!W)6 + ;fߗ:,it% ϘXP')4q=ίIXfT(AK` 1@u=P+rFpboW P41vu1F;kUT;w5 .p\%^(hyk&0;dγAi2h5 l.=V7 ;[ҮȀqԻ94eԽ>`DK iQa? 'PC;dj`#報 ԵDeY ;"/wI!1z]tkYvijFj,F3)ƎI1)idZt^SᾆB//` Dĭi۞"b׼*qxxmLe~uw`)3-,M@fTQ. pjvv|@LH9 Pቴ[*ӣzD ?νRYˌ] N: a^|Ww9 Z!a]xհK/TmfY$ d t f = _KܝJݭ{P7UhbE{K/Y)_lZONT\H |ӎQP\4o%MJe<m".mΔ|k)ci]ʂ&i w91o맙~ݴM8w&:Jl &TZ@+ pF6`yԞi&^/^Sk*n񫭃޸u5b빢}% c ѿJ_xw ? 36c½zr0؈s=?uzahJ\ 0h8ft$軲uby,- )0,kIq0r.1K }r60Vf)y' D")(gm렾EG`N4Zy}J0$ܒSJ>˲Q B~%H"r:SAЈ$8=rUSF$kg@JL'!d$ 5#E*Lα X=e;j됎FhIˉY o+jϤA*iirҡWɒĩOƷAgpw,eޅ:s![a8ZX־>0êd4B@ h̉RRWTq?Ͼ;k)"D@ܵŐFWq&wCbh߷AI8BU)LkO6YiU^oꗁXqzHi3M1',19+E6@>$KGYgwߛߜmbwo'A>fӫC8Xq@5A$"d:s)юPAjWRw %"!,@H_eH_ H&9.YYa1+ M-.Ķ9X* k$M9h$ 5a /a6?M?4w;ѥ;L!(zwD#m58L/M$"e|<(`h}(,671 {s :3Es"@e K e_f֘vR~X:p /}w \|Aי^7 ƈ- P}s/7aˇӫ fؚMght+1+>O`m-j i= 0{KU@i^xTVi "(T)㟋4[0u'n# 29jz8Rhc4YxX*#r@@[L$AuTVcv@Ht0̞V&b ψfg=8jd%qDs?YوP> Kфpp RP /+dvw+̕aK0x ra5hD3.]1lJhSEq& .&܉"Wx>zXw!q'bm2V1C387s6ޫrRsv K8T>IK}KšyT-Tc~͑: ;\*9