sysdig-kmp-default-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 4>$  Ap_=UǸ/=„~gH{,~y*Οc#t8|72EB~P]|d@wVq i}F=c@.j'{ELQN)tzd‘(#zB/PfCz>昒@`oľk[؆0CJK"PIF)H}BBZWUgKG\؀T)2Z8/}CшKb`ܨgM-'*͘7`5&hcIGb1c5bbf1078a2fc128bf1e2e7d82b2ee1009434f43a9960626a6cd1655cd331aedcedd750520fd2fbba964a8ae5f3d047eb1fa1f%ԉ_=UǸ/=„߾8˭+_ed`_xy, =VeF RF3pI{뾬,nj!ь@v/_< _Wuب׸*.Lm$7̪fh4g~M0 \W`Q&m4Fg$?=q 'JpӭٙN>usr(DݽCJEe㵎`(7Cjts(%Gc(VmR"'1Wh+kt( >pM@?0d- 9 R<@HL_hs      &HTW@WvWHLp(q8x&9&:9&>zy?z@zBzGzHzIzXzYzZ{h[{t\{x]{^{b|c|d}Ke}Pf}Sl}Uu}hv}t}~~~~~~~~~~,Csysdig-kmp-default0.26.5_k5.3.18_lp152.36lp152.3.2.1System-level explorationSysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce. With a little Lua cherry on top._=Ulamb10 openSUSE Leap 15.2openSUSEApache-2.0http://bugs.opensuse.orgSystem/Monitoringhttp://www.sysdig.org/linuxx86_64nvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then INITRD_IN_POSTTRANS=1 /bin/bash -${-/e/} $wm2 --add-kmp $nvr finvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 rpm -ql $nvr | sed -n '/\.ko\(\.xz\)\?$/p' > /var/run/rpm-$nvr-modulesnvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.36-lp152.3.2.1 modules=( $(cat /var/run/rpm-$nvr-modules) ) rm -f /var/run/rpm-$nvr-modules if [ ${#modules[*]} = 0 ]; then echo "WARNING: $nvr does not contain any kernel modules" >&2 exit 0 fi wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then printf '%s\n' "${modules[@]}" | /bin/bash -${-/e/} $wm2 --remove-kmp $nvr fi AA큤_=T_=T_=U6b9571da6bb113efa0a60427b1f1cf6754cde5d376ab726d349f7b58b83af685rootrootrootrootrootrootsysdig-0.26.5-lp152.3.2.1.src.rpmkmod(sysdig_probe)multiversion(kernel)sysdig-kmpsysdig-kmpsysdig-kmp-defaultsysdig-kmp-default(x86-64)sysdig-kmp-default-k5.3.18_lp152.36      /bin/sh/bin/sh/bin/sh/bin/shcoreutilsgrepksym(default:__alloc_percpu)ksym(default:__check_object_size)ksym(default:__class_create)ksym(default:__cpu_online_mask)ksym(default:__cpu_possible_mask)ksym(default:__cpuhp_remove_state)ksym(default:__cpuhp_setup_state)ksym(default:__fdget)ksym(default:__fentry__)ksym(default:__get_free_pages)ksym(default:__init_waitqueue_head)ksym(default:__kmalloc)ksym(default:__per_cpu_offset)ksym(default:__put_user_8)ksym(default:__stack_chk_fail)ksym(default:__task_pid_nr_ns)ksym(default:__x86_indirect_thunk_rax)ksym(default:_copy_from_user)ksym(default:_copy_to_user)ksym(default:_raw_spin_lock)ksym(default:alloc_chrdev_region)ksym(default:cdev_add)ksym(default:cdev_del)ksym(default:cdev_init)ksym(default:class_destroy)ksym(default:copy_user_enhanced_fast_string)ksym(default:copy_user_generic_string)ksym(default:copy_user_generic_unrolled)ksym(default:cpu_number)ksym(default:cpumask_next)ksym(default:current_task)ksym(default:device_create)ksym(default:device_destroy)ksym(default:fget)ksym(default:find_pid_ns)ksym(default:for_each_kernel_tracepoint)ksym(default:fput)ksym(default:free_pages)ksym(default:free_percpu)ksym(default:from_kgid_munged)ksym(default:from_kuid)ksym(default:from_kuid_munged)ksym(default:init_pid_ns)ksym(default:init_task)ksym(default:kernfs_path_from_node)ksym(default:kfree)ksym(default:ktime_get_real_ts64)ksym(default:memcpy)ksym(default:memmove)ksym(default:module_layout)ksym(default:mutex_lock)ksym(default:mutex_unlock)ksym(default:nr_cpu_ids)ksym(default:param_ops_bool)ksym(default:param_ops_uint)ksym(default:pid_task)ksym(default:printk)ksym(default:probe_kernel_read)ksym(default:pv_ops)ksym(default:remap_pfn_range)ksym(default:sme_me_mask)ksym(default:sockfd_lookup)ksym(default:strlcpy)ksym(default:strlen)ksym(default:strncpy)ksym(default:strnlen)ksym(default:synchronize_rcu)ksym(default:synchronize_srcu)ksym(default:task_active_pid_ns)ksym(default:task_cputime_adjusted)ksym(default:tracepoint_probe_register)ksym(default:tracepoint_probe_unregister)ksym(default:tracepoint_srcu)ksym(default:unregister_chrdev_region)ksym(default:vfree)ksym(default:vmalloc)ksym(default:vmalloc_to_pfn)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)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.0.4-14.6.0-14.0-15.2-1sysdig-kmp-default-k5.3.18_lp152.364.14.1^S^g@]A\Q\d[s[U@[0@Z4@Z@Z|;YdYYY]XXf@X@X^c@X*WF@W@Wx@Wc@W @V@V_VuFVs@VrVrVm]V9@V9@U5@UUF U@Marcus Meissner Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal mpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.commpluskal@suse.comrpm@fthiessen.derpm@fthiessen.dempluskal@suse.comboris@steki.netjoop.boonen@opensuse.orgjoop.boonen@opensuse.org- sysdig-32bit.patch: make build on 32bit- Update to version 0.26.5: * Fixed segfault that happens at startup (#1475, #1528) * Fixed memory leaks from certain thread/socket operations (#1491) * Fixed handling of SEND_SIG_NOINFO in the eBPF driver (#1493) * Fixed a regression in reading certain partial container events from scap files (#1513) * Updated use of Kubernetes APIs to support v1.16 (#1521) * Fixed rare driver deadlock that could occur during a context switch (#1522) * Added more detail to probe loader error message (#1541)- Update to version 0.26.4: * Prevent double-definition of ASSERT macro * Added fillers for chmod syscalls (#1472) * Added support for reporting cpu usage per docker cpuset (#1473) * Fixed build error on older Linux kernels (#1477) * Fixed driver build for RHEL 7.7/4.13+ w/CONFIG_VIRT_CPU_ACCOUNTING_GEN (#1471) * Fixed cmake to look for pkg-config before building grpc (#1470) * Fixed printing of strings (#1466) * readv input parsing improvements (#1463) * Suport Kubernetes liveness/readiness probes [#1320] * Fix edge cases in handling clone() and prlimit() system calls [#1401, #1465] * Stability and performance fixes - Drop no longer needed patches: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.26.1: * Changes to build the kmod with 5.1 kernels [#1413] * Explicitly disable psl to address build failures on MAC OS [#1417] * Fix handling of container metadata in "infra" events [#1418] - Changes for version 0.26.0: * Perform docker metadata fetches asynchronously: When new containers are discovered, fetch metadata about the container asynchronously, which should significantly reduce the likelihood of dropped system call events. [#1326] [#1378] [#1374] [#1381] [#1373] [#1382] [#1388] [#1389] [#1384] [#1392] [#1396] [#1411] * Add field to display time in ISO 8601 UTC [#1317] [#1360] * Performance improvements of ring buffer processing [#1372] * Support major/minor device numbers for fd events [#1315] #1383] * Add the ability to prepend encoded log severity in the log message [#1327] * Raise the iov limit in eBPF [#1390] * Changes to pull user event logging out into a separate component. [#1375] * Log a debug message when looking up an IP address of an incomplete container [#1398] * Support cri-o container metadata caching [#1399] * Logging API with lazy parameter evaluation [#1394] * Support BPM container type [#1319] * Fix bug in fullcapture range check [#1386] * Allow chisels to receive the full content of big buffers. [#1361] * start the analyzer before forcing next for a scap file [#1366] * Create a grpc_channel_registry for all channels [#1369] * Modified the behavior of fullcapture port range [#1370] * Check file before dereferencing [#1397] * Fix build for older kernels (<3.9) [#1400] * Added -fno-stack-protector to avoid clang errors [#1401] * Addl loop prevention for traverse_parent_state [#1411] * Add interfaces for async metrics collection [#1346] * Use epel 7-11 (7-9 is no longer available) [#1362] * Make some global variables related to fetching container state thread-local [#1356] * Allow downloading prebuilt modules without SSL verification [#1358] * add test helper to container manager. [#1365] * Cleanup old docker images after building a new ebpf-probe-builder [#1367] * valgrind clean for analyzer end to end test [#1387] * flush flags change to new namespace, add code enabling easy use of sinsp_threadinfo in std::set/map [#1395] * add friend class for unit testing [#1406] - Changes for version 0.25.0: * Support Linux 5.0 * CRI container runtime support * runtimeSpec.linux returned by containerd is an object, not an array (#1343) * Fix gRPC build with gcc 7 (#1322) * CRI-O container support (#1310) * Fix check for Docker pause containers [SMAGENT-1305] (#1306) * Detect CRI pod sandbox containers (#1297) * Container Runtime Interface support (#1277) * Prebuilt probes * Prebuild minikube kernel modules (#1294) * Build probe modification to include Fedora-Atomic. [SMAGENT-1251] (#1293) * Fix for newer versions of LXC not being detected (#1345) * [SMAGENT-1433] pull legacy GCC artifacts from local cache as debian no longer supports (#1342) * Use TBB_INCLUDE_DIR for consistency w/ falco agent (#1329) * SMAGENT-1297: Rebuild gcc-plugins before building kernel module (#1305) * Modified BPF probe builder (#1301) * Call set*ent() before reading the user/group NSS database (#1341) * Properly initialize default settings for tracers (#1339) * Fix bpf ptrace filler (#1338) * Fix potential memory leak in libelf (#1337) * Fix case where fclose could be called twice. (#1330) * Handle mmap failure gracefully (#1324) * Add stream event details in csysdig output (#1335) * SMAGENT-1400: Make sinsp_logger thread-safe (#1333) * Never drop socket syscalls to ensure we have fdinfo for subsequent binds. SMAGENT-1270 (#1312) * Infer fd info for sendto system call [SMAGENT-1282] (#1304) * Async framework base [SMAGENT-1247] (#1303) * Handle events for unknown threads after scap start [SMAGENT-1082] (#1296) * Add ability to print filtercheck field names only (#1288) - Add patches to fix build issues with shared components: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.24.2: * Added the ability to specify a set of ports where data is captured with bigger snaplen (20000) (#1256) * Made fd resolution work for getsockopt (#1280) * Check getsockopt event before accessing it (#1284) * Fixed snprintf placeholder for size_t/{u,}int64_t (#1279) * Disabled reading environment from /proc by default (#1272) * Excluding suppressed processes during initial /proc scan (#1269) * Fixed Windows build in CYGWIN environment (#1270) * Changes to eliminate warnings with gcc 5.4 (#1271) * Trigger build errors for extra compiler warnings (#1265) * Handling thread table overflows (#1263) * Deleted threadinfos that we failed to add to the thread table (#1260) * Reduce CPU usage (#1261) * Lua parser interfaces (#1254) * Fixed a compile issue when trying to make the project using VS2017 on Windows 10 (#1248) * Added ifdef guards to socket options with (#1257),(#1258) * Improved getsockopt()/setsockopt() support (#1188) * Fix fd.net comparisons with in operator (#1252) * Only check out sysdig for initial invocation (#1251) * Build probe modules only with sysdig directory (#1244) * Fixed spelling and copy/pased comment errors (#1250) - Changes for version 0.24.1: * Fix struct packing - Changes for version 0.24.0: * Switch to Apache 2.0 License: All userspace code moves from GPL to Apache 2 license. Kernel module switches to dual-license MIT + GPLv2. Enjoy! [#1233] [#1242] * Complete IPv6 Support. Sysdig previously had partial IPv6 support, but this release rounds out full support for ipv6 addresses in filter fields, csysdig, etc. [#1204] * loginuid support. Add user.loginuid & user.loginname to track login users, which do not change despite sudo/su operations. [#1189] [#1214] [#1218] [#1219] [#1227] * Track connections by domain name: New fields fd.*ip.name allow matching connection ips with resolved domain names. [#1213] * Add endswith filter to support suffix matching on strings [#1209] * Add minikube support to the kernel module probe loader script [#1205] * Improve error string return handling at startup/when reading capture files [#1215] * Disable boot2docker kernel module builds for pre-built kernel modules [#1232] * eBPF Support Improvements/Fixes [#1235] [#1236] [#1237] [#1239] * Improve/fix windows build [#1242] * Don't drop setns events when in dropping mode [#1198] * At startup, wait a bit for an existing sysdig-probe module to be unloaded before loading a new one [#1201] * Support extracting container metadata for containers spawned with just an image id and not an image name [#1207] * Properly extract image metadata when the image contains a host:port component [#1206] * Minor compilation bug fixes [#1212] * Small packaging fixes [#1228] [#1229] [#1231] * Fix an inconsistency when writing capture files containing unknown fds [#1234]- Update to version 0.23.1: * Fix ia32 check on BPF for 4.14 and 4.15 kernels * Adjust wrong events lengths when reading older captures [#1195] * More flexible captures: the flexibility of the capture format/reading process has been improved to allow backward and forward-compatibility [#1163] * Support logging elapsed time on tracers [#1186] * Fixes on custom containers support [#1170] * Avoid invalid free() calls around m_suppressed_pointers [#1184] * Properly set the address list total length when reading a capture [#1185]- Update to version 0.22: * eBPF support for sysdig: eBPF as the instrumentation backend in kernel space (beta) * Parsing an argument passed to sysdig-probe-loader as a custom URL for the kernel module like -e SYSDIG_PROBE_URL=http://54.183.253.176:52354 [#1085] * Several changes to expand the set of events that are skipped by falco, and to centralize the logic for knowing which events to skip [#1105] * Improved proc lookup in libsinsp [#1107] [#1110] [#1112] * Improved performance [#1126] [#1120] [#1121] [#1137] * In dropping mode, drop events that don't change system state [#1123] * Introduce non-STL thread table API [#1142] * Add the ability to ignore events by process name (comm). At the scap level, ignoring is by tid. At the sinsp level, as threads are added/removed from the thread table the comm is checked against a set of comms and if found the tid is added to the scap-level ignore hash table [#1139] * The container_manager can now receive callbacks to call when a new container is detected or an inactive one is removed [#1133] * Add support for adding custom container types alongside Docker etc (on sinsp level) [#1149] * Parse and store three new container_info fields: repository, tag and digest [#1127] * Skip proc scan in sinsp_dumper w/ threads_from_sinsp=true [#1164] * Allow k8s filterchecks with analyzer [#1160] * When creating the sysdig docker image, add the ability to directly set the sysdig version via the environment variable SYSDIG_VERSION [#1166] - Drop upstreamed patch: * sysdig_proto_ops_getname.patch- Patch sysdig_proto_ops_getname.patch to fix build - Seth Forshee : Update for proto_ops.getname() prototype changes in Linux 4.17 (#1114)- Update to version 0.21.0: * Track Versioning in Capture Files: With this release, we will increment the pcap major/minor version in capture files when a release adds new event types, additional event fields, etc. that are incompatible with earlier sysdig versions. [#1081] [#1084] * Add s390x as a platform using Docker [#1029] * When saving container information, also store certain mesos-related environment information associated with the first process in the container [#1021] [#1057] * New filtercheck fd.connected returns whether or not a network connection file descriptor is actually bound to a remote endpoint. Think of udp sockets that only use sendto() vs udp sockets that use connect() and then send(), or tcp sockets that have been created but not connect()ed yet. [#1051] * New filtercheck fd.name_changed is true when an event changes the connection information for a connection fd. This can occur in some cases such as udp connections where a connect() changes the connection information for a fd. * Make the thread table size configurable via sinsp::set_max_thread_table_size() [#1056] * Add support for new AWS Linux 2 AMI [#1058] * Add process group id to execve events [#1044] [#1080] * Expand the set of system calls returned by the driver when in dropping mode [#1075] * Handle AT_FDCWD arguments to linkat, openat, etc. and resolve the path relative to the cwd [#1020]- Modernise spec file using spec-cleaner- Update to version 0.20.0: * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966] * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990] * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982] * Reduce inactive container scan time from 20 minutes to 30 seconds [#985] * Added the ability to parse and represent RAW sockets [#991] * Handle finit_module syscall [#996] [#1001] * Add error message when scap_open() is called with incorrect mode [#997] * Use explicit versions for all Docker API Endpoints [#1000] * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016] * Add support for bpf/seccomp syscalls [#1031] [#1033] * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]- Update to version 0.19.1: * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS - Changes for version 0.19.0: * Add per-cpu counters when a tracepoint is hit [#947] * mq_unlink syscall reports as ptrace [#927] * Fixed copy-paste typo [#946] * expose the event masking/unmasking mechanism at the inspector level [#951] * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952] * Various improvements and fixes for Sysdig Inspect - Changes for version 0.18.0: * Changed language of CLA to also cover government contributions [#902] * Support mapped container docker networking mode, currently used by k8s pods [#922] * Allow an external event capture dumper object to be used together with an inspector object [#912] * Handle reading large execve args/env that might otherwise cause a page fault [#920] * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935] * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934] * Small README changes [#936] * Support additional flags to clone() syscall [#909] * Support page faults as events [#904] * Support for upcoming visualization product [#931] * Compilation fixes for sysdig monitor agent [#942] * Fix minor problems found by valgrind [#938] * Fix crash when reading large messages from docker daemon [#932] * Better cleanup of failed installation of the sysdig driver under coreos [#926] * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914] * Fix IN operator so it works with non-string values [#913] * fix compile errors with newer versions of libcurl [#895] [#911] * fix compile errors when O_DIRECTORY not defined [#907] * Use session id, not process group id, for proc.sid [#904] [#905] * Small docs fixes related to container.mount.* [#901] * Update installation script to use latest version of EPEL repository [#897] - Drop no longer needed sysdig-curlbuild.patch- Fix building with recent curl (gh#draios/sysdig#895): * sysdig-curlbuild.patch- Update to version 0.17.0 (boo#1051562): * New features: + Support netlink sockets [#809] * Bug fixes: + Fix a bug on cgroups parsing that prevented sysdig to start [#835] + Allow sysdig to read k8s state from very large k8s environments [#856] + Improve compatibility with older linux kernels [#889] + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]- Update to version 0.16.0: * New features: + support for Kernel 4.11 + sysdig -N is now the default option, server port decoding can be reenabled with -R + Decode unshare syscall * Bugfixes: + Fix rkt detection for containers created before sysdig runs + Fix container detection if docker itself is running inside a container + Fix detection of lxc containers + Fix compilation issues on RHEL5 + Fix memory leak on spy_users chisel- Update to version 0.15.1 (boo#1032025): * Bug fixes: + Fixed driver compilation issues on armv6l + Fixes on Kubernetes support + Regression on rkt detection #748 + Fixed high cpu usage when sysdig was used with -M parameter, #783 + Fixed a memory leak #772- Update to version 0.15.0 * New Features + Support for Linux Kernel 4.10 + Use /proc//status instead of custom ioctl to get process vpid for kernels >= 4.1 * Bug fixes + Various fixes on Kubernetes ingestion + Fix some happening deadlocks in the driver when ioctl were exiting with error + Fix mkdir and rmdir events, they were skipped in case of page faults + Bugfix on topports_server chisel + Avoid some cases of infinite loop when evaluating filters like proc.aname * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734- Update to version 0.14.0: * JSON output is not: an object per event separated by newline, instead of objects inside array as before. * New filter proc.pcmdline, which represents the full command line (proc.name + proc.args) of the parent of the process generating the event * Fixes for kernel version 4.9.3 * Improved detection of Mesos containers * Fix compilation with HAS_CAPTURE disabled on Linux * Fixes for merged captures support - Add sysdig-no_return_random.patch - Enable building on more platforms- Update to version 0.13.0 (boo#1017181): * Ability to open concatenated capture files * evtin.* fields can be used also for displaying now * Fix driver for Kernel 4.9 * Fix on IPv4 mapped IPv6 parsing * Fix memory leak #694 * Fix issue #687 about connecting to an K8s API server via HTTPS- Update to version 0.12.1: * Compilation issues when using non-bundled OpenSSL #672 * Compilation issues under S390 architecture * Various issues on k8s parsing * Stale thread info when parsing processes within containers #665 * Avoid getting cwd from driver, causes issues on Kernel 4.8 - Changes for version 0.12.0: * New filters container.mount.* to match container mount points * New filter container.privileged to match containers running in privileged mode * Support latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available * Added glob operator for strings, works as classic shell glob path matcher * Added pmatch operator * Add less package on docker image - Drop upstreamed sysdig-do-not-use-private-jq-api.patch - Enable building on s390x- Use current macros for KMP building * drop sysdig-kmp-preamble - Use exclusivearch instead of excluding architectures- Update to version 0.11.0: * Support for tracers. A way to add user level events to sysdig stream. Seeannouncement blog post. * New csysdig views: Traces List, Traces Summary, Traces Spectogram * New evtin.* and span.* filters startswith operand for strings, ex: fd.name startswith /etc * evt.is_open_{read,write} fields, true or false if an event is an open() in read or write * Improved performances of Kubernetes metadata parsing. * Bug fixes for IPv6 - Add sysdig-do-not-use-private-jq-api.patch to allow building with system JQ- Update to version 0.10.1: * Minor bugfixes, mostly related to Kubernetes and Mesos parsing- Update to version 0.10.0: * setsid event * proc.sid filter field: the session id of the process generating the event * proc.sname filter field: the name of the current process session leader * --force-term-compat command line option: try to configure simple terminal * settings (xterm-1002) that work better with terminals like putty * Many minor bugfixes * builds with gcc6 (boo#985121) - Use pkgconfig() style dependencies - Build with lua-5.1 as builds fail with lua-5.2 and later- Update to 0.9.0 * Mesos and Marathon support: + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps, arathon Groups + -m sysdig/csysdig parameter to specify URLs for Mesos Master Marathon API + -pm sysdig parameter to get a Mesos-friendly event output + Filter fields: mesos.task.name, mesos.task.id, mesos.task.label, mesos.task.labels, mesos.framework.name, mesos.framework.id, marathon.app.name, marathon.app.id, marathon.app.label, marathon.app.labels, marathon.group.name, marathon.group.id * icontains filter comparison operator: case-insensitive string comparison * Support for SSL based authentication and bearer token authentication against the Kubernetes API server. Previously, SSL was just supported for CA verification. See the updated documentation for -K * New actions on csysdig views: lsof and renice * New network filter fields that support a CIDR notation (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet- Update to 0.8.0 * Bug fixes + Better terminal mouse handling for csysdig + Minor bugfixes * New and updated features + rkt support (when running sysdig in a container, bind mounting the rkt directory is necessary, e.g. -v /var/lib/rkt:/host/var/lib/rkt:ro for Docker) + chroot event + container.type: the container type, e.g. docker or rkt + Prebuild sysdig-probe for Debian kernels- Update to 0.7.1 * Fix sysdig-probe compilation for kernel < 3.4.0 * Fix compilation on OSX - Changes for 0.7.0 * Fix sysdig-probe for kernel 4.4 * Fix a remotely possible deadlock during ioctl calls * Fix Kubernetes support when data returned from the API server is particularly big * Minor bugfixes * Spectrogram views in csysdig: spectro_all (System call latency spectrogram) and spectro_file (File I/O latency spectrogram) * Ability to authenticate to a Kubernetes API server using a certificate, via -K or --k8s-api-cert=. Can also be specified via the environment variable SYSDIG_K8S_API_CERT * Ability to sort columns in csysdig views using the keyboard * --filter-proclist: apply the filter to the process table * -M: add the possibility to stop collecting after X seconds evt.latency.quantized: 10-base log of the delta between an exit event and the correspondent enter event evt.latency.human: delta between an exit event and the correspondent enter event, as a human readable string (e.g. 10.3ms)- Fix .spec file bug which was causing Frankenstein kernel modules: https://github.com/draios/sysdig/issues/496#issuecomment-165929462- Exclude archs on which build fails- Fix whitespace issues in .spec and .changes files - Remove duplicate %{_datadir} directory from %files- Update to 0.6.0 * Full support to Kubernetes, even when saving events to a trace file * semget system event * access system event * Automatically build sysdig-probe for boot2docker releases * Properly filter process table serialization in a trace file when a process filter is used * Some csysdig actions now ask the user for confirmation * various bugfixes * drop GH_496_fix.patch- Update to 0.5.1 * Fix connection to HTTPS Kubernetes API servers * Properly compile bundled OpenSSL * Fix sysdig-probe build on Linux 4.3 * Minor bugfixes - Changes for 0.5.0: * Full Kubernetes support! * Add a convenient USE_BUNDLED_DEPS CMake option to enable/disable all bundled dependencies at once. * New build/runtime dependencies: libb64, libcurl, openssl. - Add GH_496_fix.patch - Update dependencies and not use anything bundled- Updated to 0.4.0, notable changes: * Support ia32 emulation on 64bit kernels * HTTP chisels now support UNIX sockets (e.g. Docker API) * New events: mount, umount * Support Docker containers when running in a different cgroup root layout * csysdig view actions: press F7 or F8 while inside a csysdig view to see what actions are supported- Updated to 0.2.0, notable changes: * New version scheme * Update ncurses so it will compile on GCC 5 * Don't use GCC 5 inside the Docker container, because older kernels are still not ready * Support CPU hotplug * Fix improper access to socket structure during accept() * Docker image now includes the RUN label to make it easier to run sysdig on Atomic Linux * New events: semop, semctl, ppoll * Port numbers will be automatically converted to service names unless -N is specified- Use proper cmake macros - Remove conditions around fdupes as package does not build for old releases anyway - Enable parallel build- updated from 0.1.99 to 0.1.102 - notable changes: * Support for decoding setns and flock syscall * Parse O_CLOEXEC flag on open and related syscalls * Parse CLONE_NEWUSER flag on clone * Support truncated tracefiles * Now sysdig can rotate tracing file when capturing, using -C, -e, -W, -G * Better extraction/filtering capabilities for event related to multiple file descriptors, like poll * Precompiled kernel modules for older coreos releases * This release introduces csysdig, the awesome ncurses user interface for sysdig * Support for intercepting signals via the signaldeliver event: parameters are source pid, destination pid and signal type * Docker container ships with GCC 4.8 other than the latest from Debian, to increase compatibility * echo_fds chisel has a better formatting * Correctly show container output even when renaming containers on Docker >= 1.5- Cleaned and corrected the spec file- Cleaned the spec file up - Build version 0.1.99/bin/sh/bin/sh/bin/shsysdig-kmp-desktopsysdig-kmp-tracesysdig-kmp-xen0.26.50.26.5_k5.3.18_lp152.360.26.5_k5.3.18_lp152.36-lp152.3.2.10.26.5_k5.3.18_lp152.36-lp152.3.2.15.3.18-lp152.36-defaultextrasysdig-probe.ko/lib/modules//lib/modules/5.3.18-lp152.36-default//lib/modules/5.3.18-lp152.36-default/extra/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:13737/openSUSE_Leap_15.2_Update/71bb22b69d3e450f1b8a513917e322f3-sysdig.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=84a08b68a028ec9c51698c3295f7364a6f2333fd, not stripped if test -x /usr/lib/module-init-tools/regenerate-initrd-posttrans; then /bin/bash -c 'set +e; /usr/lib/module-init-tools/regenerate-initrd-posttrans' fi/bin/shpackageand(kernel-default:sysdig)kernel-defaultutf-8029966b1ac090f6e9303496b248355512872436aa71cbfae8b2d9f04403a33e6?07zXZ !t/Y] crt:bLL edomt\ƃ 7Qo/:[,p@>$ ;y8ggHߙ,NêmZC&3G7D4d\ oneZa;Jr')=]2VUv;7l~2;hp1J{WӢ2")FX'8,",@9DfZʳ#EXJ"OxE+<XK.8B HV%Wھs\@1 0ᘠhé. ̲"|w~b|5)CbmqLR)AQfG=3?`憡4a*c QCсСG s*KnU_;{\@qM6q 4cA2}U9s ΧE/@R767h0un'4".5v\=uk/bc\1% C®nseOyzwc;Nܺ}J?`3߆L:[l ~*h?0sQqYmXK=!.̭Z(ᦿF 8|oz$xg +Pb7emLyX` _\Ll/@́.^6G,iұ^䢭L:Am&JxN]V~Wsйb 0|&xt8ˍo㻿]$H}:lO(;zlW57+E|!:̷T?Ӳ;rY`)7H swq6Y `IHu#nQe?&r%BXƇjzXjM:0u9Ӷ=PSgYN槥:t"eYSP$A@=@|& fg2-\s\AˍuEI_X2~p^_Iߊm 90Lh['DeLMHe3+tydy'jfܑw@U\hK-׻Ǚnzs?P{y+1/lyҷ$dUgwB(u-!zra|Ⱥ_ Ŏ: kԪlnz0:\@ug4RצU ?~`f# az2/_0SΪ2?# #|og *~buqa#ѾKĀM!eKV=p;!97r{gor/iFa¿ ʭp1n'@Aҡ4 yV9ftOq8Ze`O!j&mI"L3 OШYmbʌjṅiasq9` vTԞp KWūe |7͌HxL/1,Y޴TJ[Pu@F4eB큑 ^{YX'9/],8vM627^cc}Ui]zפFMj<5}:;Fik[JƑ){G%0Lֺk zi(0(Kg~Y+PAÃ#͢E ÃC[I+ t'=,:}_Y$ 0(9}t:PVb,nLYjMɥ۵aa&+KU}`"!O"YJiXE LXz])LЄ 5+m2%T$Re4fa8kvw9T^Oz΍9U$š_4n\v% BvU>g >'vv.: G׈1Qe,kG]I & d932}9.lN R;\h*V=rȁaG[M"e >jp=Js8Y>!;dA#=}B] H;ߺ$mfg} 4Z(1gQَ; l Ҝ<)3b><a"@p".< '>f@Q10ʹ%0p}D:NTvhj/%uS,K]D 2bn\w('`}6IR-]=D[V5Wm Qa_AzMlaJW% 9;EQ2LoR$@E2atOjb\Y%Uip42B"Ql+( veqs)Xev"jV+~k=[<!.{U~TLV] ^&;U0l1ڗ-NKw<%Zq@"#/KDYVUd :5 yrﮏӹ2zD$l̅$qkwx.0w ݗ1%4 HOYEecv-Gڽ߄+FJ`CfDN'wxO>[ {P+F[ު]N$0fW.6m:RT-+nEzcXG%:+Fducra"7Y{|7VoIr,BއoQ^Cv" }9j!;^Ws\s-kVmc/镬 M6`o(Gow>9gzH;8v21yّd^G'o ,JR 3U'H ~lC1. ʩ DL#qk[ 1ф%k(HLEJBjǁ,&,hP>٬Э#qp\}-U bUf=re$ SS֞ #=ؖ0a tt .R)ַ@^ETEUoqD [zvLX*HOx7R7>q@EPOn\-RZ6brWk<_=M\,Gnh(4Fz''9AX_R@ _ײp%f Β%'sqJۣ~Ɍn1(53HC -) ]n)J$/+ e/'㍨j6Gzp9imYO%Jь@X>balF\JhOq "oc#kqJZ%C"Lhk.B>NJ ctI_,%SK/R7Gy*ac#R䪾Д d0ݕl*DGRh&掊 lES=%wMmHP2{Ò@qW pR oSDLVs^@V_6=LM9Eqư'k!BmpkZ8)x]Kvh>L{B›aTy24;ڦ٧ 44nVU:x+0qZ3i] ˭#+rrpOvT-͆ɰrvq-yͳ|hz^H֛]2"_J{*HT^Ջ?'z[IfxC**>@@ T!ۘ.UgzSpEq `E/O߾6 a٣5`g>֜VԝyFZPvýqq|zO3?4qжxLܼjSz?x0XE`sOClHPgK2h/;O(z)t`_A>U<@WdZ} >Jҥ2b@u,JBg5%f5;Ef ^܏:};_C;rj5,(e,\e`==bQ0 J&s W1%[jf ? -GLPO|d /(Pkn Q?ﾜO(}n7rKa9L{Ř_fugKCmt.$O!K}!5S(/ ̰R1𛹣ЉL /^dr>͜~>R_te]>ɗZXFĕPvẄ́O$O·լ,_ |?$VC&V#=9O޳^oVicyp/ɑ0/DK 7_Ð6evtg)Unњ?Ҟ'ݐ&֊}Q',|,|ҳw2 xWw "1iCף%rmlwY#m[YZ0cT4zLgiD;~eB~Z-<@jįxY06)CY7 l&f ~J:%C⢜'o0\|/qfMLhMs:K>'`q {:+@=kQ0_ozIKB+,컀>nlK0' m]82+΋ Y`0$ m-ofvHs颎.?p݄|) ĭ@ҹ,l:EK*>tg=F-ʪȸ> bӶ6Pdpb1ig1f> T Ѝ?ǧoO=P@S-\N49]Rܝy17Ӳyqt)_w{9k>W^{9i }5_=dJ"E~\>ʼ 5c6D ZdBIPb.@IX'7s ў!dž:Мn$(Vl2|>+\%i4$~>*t> p>[4+e=T@~/гz/3 tϚW/r y~6a]{}pq\Q>łj7}jtTGQ:Ψn& p¾Knc ,*nb:̌BdW|ؿBCjdlG7;v11]ϥxc?O 0ǬNVSwS{[o }yY3{r&4ǏN18 f,@0-+BpA~E DU$>Jf݅EFJӇFT[$-jݏ Q k/r'=2_.+ӡD= 73uL.$_} + c+ֳ-ɓorkSzkr6B˄.&rm_od+_X4M:Ŀ*&끷kkl%95h*2H G\j0P4?m>^t vl~GAv9pᇅiWPVVW]!74b %} >!H<}qRn&D3 Tq[7ז5CHH( I#f@& {߃( da$ĈsQZ>DzrT@6)""}'n)RÝ__̩4Ub擀HWx<-}>)DpmT9$NNe`MuˀG%Ky tDeJEMZ-:@7 +i]f K?q)c/PR_5S @qsE*l/^O(Na 6A$u ?܌K-E ^\Q:dy'yCJvbRQ~n|}FlKg6C2`&DC~LPh_Vr:22O&Wچ AaI_գLnV7`)APKЎGaԯXE8O9l&|56,$/)bݣJ|O{ F,o\S`[`%?V;ahK-wtn3':a9Mz8]1Gh2rU Zt5l>fp>((-SöI9|E#qHX,O'T'84lWs?Ighѳ:Ǥ6onK.B bti(G ,geID3ĴwF[V[%s3FjE!q-cݽ eYERʎɋ3*RnA޲pxR\%d*?hpܕ@ 'FZ:]4 hBVr`׷:Եv fkJUT$S/9V Ұ*t >ѯ D~q4sHpMU:94s/*G͜u_~Kd}4 kڕs si4e=, do;" \|d=$w%44FI9Gݓ*|<}HwNIJXebo,I9#/U8AXm#[hW%^!_s0_PU9+\% o{y`N%3*!%"owڀMVRYI|qI^:\^Wf|oVGΩ31ŚA!"ՎHjO p!"!n4e-u?2b셜R$Znϧg nA $hJ,i>ڵ ahnԊi1!Eh-җkPpAN웈<؍tK= :WQ@W3 Yع wc2):1u$Giݘ e$cL$M$LZp!ԗi3΋u)^aB!'Cֶ )*JG#wzvbXoÿ1n|a \4^Thi`j=/zHyvCs_֊{1/AxpEvn:~9adG,hc;QI+S6ũ:BaɱFsοUWٴFbIpʰ&_n gۊN)( ^fxYe8 RtndZ;xz Z2`:NPurI\kuC/?Ο7{j0ߖ!kd9ṧl E  ~URXV0JQyQu8NM8l/mh Ѕ-W"J,vHL.QQ0| JZoc~ ~]Me:Ĝ@7(= ص_ᴖʈ|Cь{>ڸ7t}4W&j:;]NC"ˀ~D{ꂜVbK7)ZpZhʙ:WK `V1dz6(&E-@ xy PRo ^yeE\ Ͷ+ w LZ/p)R Gm(mdD ̒3# 6$OJ^$mf *0^;;E?++dKW^aZw$]֊sxh" 0pe1/ ȯ oC -}ݧv2*kFՖIBRiocv|n-Hps=[+SEȪ`$,WQx*bffٚΟwъ -7cB+aࡀe5M2^zAD)6)*["Đ" r-ؤENAI5=b"?jPh@G4 6X1@ߤ2g*C/Q~H $1PTQ*믌ܣ)nXe!O.E}frBE7Z gb]xNIUD 7pw? Q Ԃ07uW(+mUYd;u oPڽ>/[#d1akjX Ch}dSh5ʠjjqHen굩x4Xw$v['Yv !)& e-k#%6W5tS3J$D=$t<5nD8D4,^ b@+a!{FIISZlkӓK .{_є AZF8،ma8RhyU!-A1o$^Ж2o1sճ=q]dV ѓHu6y] ;S^H!!lEC}Abnl#h^gE\dqgZUS8h頿rDBfd,p"(pm)%36N%t9f3I[zoͼ6X_YN]:p8U>K8&s@32xk2MNr*;ߏDqݥr3QeGX:d-a vqWR|Q "$m4-X3{=WUhM)%3DdF@aI{ P&K9mCVo/ ~-ٱt IҀK,5,s>W2 /hcgħW$G:߉]!| ؝k[}EMqkz~4n7ʉsj-$ح&퉷GnOfTR'ӽh$ 9sK::ڭ i5o.y 5;+c]tДB`c<cF2E?b: $|}_}aOMSz|(uf(훝K7.@02?x` Duwg hq)kS),~D?P!/b$at@! H= f4w=+di gN-R*TTL`\AzͰUpDR`RˡI(DCSz gXAz<~+C23NeiOӒHY.V,VU#RVn}IdA?$Յ.Ap}ٷ̂'F?\CY2qdPCH4jʊWnZ볎eo f˿ZSӔ;bN b,z X>%e%="5pu.\|3VB8"0]3!;S=Ax`9u&EKx<@K_ɭOnpoxDD g@_Qc6m0P eW "B?n~+4\(s7oNr i36r~6ϝn{تo":4Vocr@oo+a5P;x٘퇹ďR(@ͯp];D:gl&Q;>jX~z _Xй9p1|}O?;3FD! j~AA¬`'_4"Itiy?\ Yve*hh6m!ƯZ,}:0)pTV)'b%h @϶bSp[~ZTӕ(^j.TyLC|h=q#b߳W9 U^>3bs`bhKkc8jVݎdUr( ޥ} gwD.ar X3r.=@IJt o e m3t!ea̫*ע:@**:m͹NhȈܕ]3+k1\b|R6DGϞrΞSP7#%tJ=6biw ){\w2 @F+#KbE[!Qs982=%cS~lot#Tռ@t^v#rWAuCY.FO2.lKTvN\V mB.vʙ dJQBȋN"݈D _?a ;F^nD_m4OUN;h?IrR*l zĹffC\Πϰhݿ3JYcrTkqX+ϒDe@xsAQ(ElyXD)LMZ vYdb1DI*oR~Spǽ 5yAKAl BD @Q8>ɂy<N$`cHěۚ{k d({dJl[ûaDANK]  %ea)g+w?^G'>#lQ'Nvo0\t7i]a(Rw]в!* _¯0S(;]!NEiސ|ݴ> @ƜFA>YrGu6ZA\^2PTW"Z.9Ѐ읟Y"ɷjx6",n@`zquQ,~M hr+o1@ZWMQa|`bx~\N %Da#IZ[ՒƂ xd: ;eR˼[5|.CTx<0*|i[L/w6fϮn[o!Oz~ 9? XAY okLU㟃G|E'ZvħY_=Ilg [NaF6LJmwAۂy\*1+g"Ve42 Jѽ،v 8A5 '9٥؃ ݒ,ڹ:BbrF"ɍXYEdV@T<T2Zg K}pܟE$qrk/9 zG? ZrCJ֔dly ۪>-ᣣKwoÉ[d sWc٧jgg~0! )ʫo§կO4b]W2?[s|16^0nSgb`.vWT*9CS$p,Wwt=-r"`5ylU 3JD?TKVāU6` u'˩#@oϙ5` hZ:1*_9zdP(P4%6 4dn:EPMg ~ʓ\t~(\'ϨԧӭR":vVlc^A;sf;KWMpł߶P/o(޵؍a%ϓe\c6$RЕ5 --Tw# XΛϋ>%uY.ۆvsҶ dO^% b]Bm\X)E2ņs,QC*'FXl؅NUW B($z\K@9ӛ.;ṗFGbGu1oD"?+D<)Dԡ 6pu+8W[V)7b' mj5E'R9j$$)[ U>ƽSlg+{yZ`lOw3)2NBDrHԴac3jN*w/PҜ쩷 e]t]6eT-a8Al|/`|zL0B\60 $@ u]x;Ab} _;{P謵쌤!S ޚtDH-)IUq{)$:F-q۳)>}9f+z*skK_3=4Yi.gv6\ GWD^Մ&{nQ/ $Gq}`\x;u&۞>$j? L5 㡌1/4- {xe4 VN݃w\Wuq¤D&_ xj?٥}6߮x\u-k B3l4fr^_cN.wfc" _t-{?J׶%6^dfx_ZZ*N@w,EYR3Eν~;*ZXu.2YJ=DbAlv{o-7 z x8'Cgu?ao.O̝9͂]$G. 7=;Ow$͇O;|7+6p ^|ɶƴ&Dyx5fDb۪&$)3(EF ֛ѻTf8fFglZSҕȁq4ܸnn\ow7y]"L*=[E߲꘥U^͞xoc`K3{PXeK6LTl%Dt'C(wsyJ4ݼIC<9k:_< 3q+4U5[K:RAh鐗?W!G?ѲSVE?[n`^`IkB4 *%GD'V:-+*.8?f}S:[_}dh YC \쉄kADjB4J?p½aUDH T@MM\K -6_L"`10F/ܱk5B~rGHSE#> ',r@R?pJСNjD?X8x-4qMP/KPY|lϲF1-Nx8#zz"D?IZqǦvXzLqy7z(%!~ ;%%£~ح|'|y]nBAJy'a&$v04kCA|3-$ ܜGOeXPЙ s//, B˯4tSM~2Hy6GG@<nXВrLu}Sc덁'E{Z( cC^q+f@vC?Cy5(~˝;Sv!E8GGt;>l|ȄƏ]WEL-鲽#` ۾ |^Ō$X%Ý C%EVdH_\Q%I&Ҟ]$ ]Ŕ5֙]?pgz,6G-쎩ϩ=d.Crr*LQm)cƣHoWb Jɧvuy7`Y&nAM-7pǷ,dA0;@[̴QlYL O!2߳ɱ7? 4+\$ q\W2gŽi븇1. * Fj԰gX]C¤q;wx0o|V`ѹZ.+uԠGw\:@o\ٓfw%%GQu60 d7 ,Q OP*QߒP4Oqv$ygn)S> ,h麷?&4y^ Dӡ #5![CתQԘ"`)DGѳ .b?WLlYHf h==wNŽf*{ #7TsCjjin (\yY}!o#qw6eۚ`h9Uqi n:N6'E|PȏCiuZ g%O^י?]jC;NscuT ~BǕkK+jVeo$Y"j!ox*5l|ŁL!ƾ L}|K2GֈwMF<0[AX*+!R'McT5.3׀njWyAښBryp읳J1řyoF }U$]ºwB(8mk[҆B y60 /k[cъ$0^nH5B<ʓ3UKZ ] ڤ`VTFvi$䵉c |QqB!HyB|y0i3ACI]({ U h{TI5",1Z.,aRk$7LviSCugy(~GeƂpL35Qž_wM7z5ܥD3N!aeP`Z!m:`5"У2>w#|[r /)"^#YKAj[@BY߰ Y%Jw@Rˬ#^KRJh m/Ub:[o]fL1eC]"r. TY ;,J}a:c$ %b.(ق_RvldyxOrƿI.%jUJGJcb`dE޼:冘B tQ˽E?]9PπoRH7Q)yĪFm̓+eۀ>HqBهtc! zt3T|L;ʴq6$ ZӼR짻5/`uMpugh. ?a= E^XA!NnGG#0RQ!63`[QfKЍ+{F.9V j|~81MksxE)@Z+|ӗ!fr,JSNw9:&ZX0(3g=[n{t+G0o2OV>Ű10^GMSӴ@rZOPYu/ϙrDD_w$  ~Tfz` g 54e ˺6”L'Bd4} OC'lt Y.+g ^dZKJT̀_} AڒF:fv58›V.7L!TތUjg39\dIFC"xevo.ivW'T ozvPSӤKŎYe0can%? H2 e˪%# B\CedةwKMZș"htV.!G.0# ^a}' vܕUb-N}oh[ ¤hpGN_@!LGg;b.XDɢ uyań+\ 2a%E£Vۡd5߂'K}=vhh,+6WQD 8i@c9<FxiOlG_&ŕI2=T4ӌ\ݖ;[Vyajt_"}tjMgDVf@_\GjSCfSpBPMM|ib-N!PdaV;uGHu729uC])>t:5ԟ}viƁJIyµF籾#.{Ymc;Fio47G TYe{5sm0ICM_>wݲ,lf Km6 Oxi?RYئcd6\;S/zrXgn*QK2oZ>\k=Ȓ4F:;/- _=cV ϰ*•QJZŖ<|"^cېNJ(7|ځ$`iÂXo}`|c?XԙICBQ‹q~ V>A}Zi~J{<JOy* 0ddP@/^ržz~A]ߣth攰*.ǀвW*6 TFꙀ;Sw'QN:E諪#ӟCIJ~jam";',P)?=,w3<`uP+Fvx?rO"0\ TmIdbԒÚaIƒ;.`&Y*F%S /p'iLw IkoՆ J6_gǁ{rq%ʲ6p ƒv9y6Տzkk[+viWyV%ſ3m s $Rm7ѥ[Qѕ0ބMS誥q0EB HU@zmeV\Gn؉h~:(iŃ5l5iW;Yn; M ;+H09#|Fjd챎N(M5ׄ$wTȁJ9W Έ !yW,f@dY>-v ҰHTBp6Ap},y4әOh̔,uS뎚AQZFˆ,`t{ XkeD F3} բtwoϾdycr\5x8ߊDtW*'$[өU@pJB7gky_SV[K @%7 pc (Q'?ݣ5ഉ)ua@2W͊_@XO˴ ;N!5H1$fhTp)r0{UZ€.ɢyp|ժ 1HW D=$br! hӢPMd|R˖rNj.)VpVgg:4(c2B ?9r1Nk )—PTٗs4uc Eh#JQ9"ppML1hM{OP_JS2*"]|z'2hyiƚ;hyXsuՀv- n;h4 +^f$31T1 T+=CQ( zlգe50J١U$hf9ze)R&AgỌ81S2ʭ#10 -6A#$JgГ)DJ$xRc2lv wu.Q.:Wւ?*u8rdr2`g;o^jnQj 6n) ~^^n5-an قqu֨Oy%HoQPd ;wo?j as ʗ$[1}uX4sLA= S}sZ5b,`SuQ]O*K,t:'!+(kc?ԫC(9XȂ.Ԓr|l~!nU_! "ڬ޶(Tk]]mR ky\`:F 5zBΖ2Ny3*s*t+#>3P xakXY ZA`kh{ydH<>4Rp 20JU+,!)$2 ?XY:շwfpWY G^LvRB{-wmMq>WԨZ_&-:eo&]}t{.j 巢eLn/vc6E]wm$r`4}7& CyG;T"xW4%`NĀ;Hй`' PL%B<?U\0xˌ`5lHG-QILd2֕o,H{ÌV*+$S-n*~& |@l6H KP`< tJ0`~s i ; 6O#F/F·-3Q ? 4ÌZ}wlrqYH &G6#Mꖁi)INl~AJ`{y֘ev5+CZ|'#hgr@zo;XL!JVXYѭvfuPcަe7OC-JƁij$wp1e +#C B>R n(d@DpG@Wzmn Y OPhB۟Y04 &9]ᤁt k$fe'|_K"=2nQBwU2"86w#-_ =j <>ĠΜ("|p4v(d$G 1j0MN[;bii~,tI!KUT Kc٤z\SV5ɋOļ=5O{Huw!'^ĥb <[Ga?{%ZŃ#4B/~;EeQwFfo5H{ g\^.$6N,#p_t p6*?#2  z#U\6uS2z/<XnNw '7 K蕵5 noce(=,/TR" ķS{?u)L65bx;됿$j0D 6ш! .%7 \k%ߠP~J_S{N# MCȀp^Ȇ5,A!/oPθ¦{zilP]Y _ҬW.f/psurE#jx $<3k 6*Օ`Ց&JXYk:kx`LEl}*)\wriSuR?'U)v]LT+`zZ3Wv{Bmɔ/17/% hG J޷{P^ =p8z1~)7UV:\.9zE9tKQ0QTBJ3}{% y%$+s^ƫi:|}v+xD+K%IةZ4pBKbKӵ'7o(JoeFS}YeB,^2<_p3ؽΤCU5W|$B} []\hݒbdOxuY_$)֐qil -)er<S ۽hٹ3`!zGJ(S ᷷#i ީEbxu~ V<:%y`qK ZO.2"{i7sڧd<$X3_Ň%@g`v4k7~*k=<Z+D27Zj!T]Bғ9P^@6/ƟnNZzR3|yPea5C"fY6OM-S{ gHSy@8K;_Es}D Xhh)e IORRwԁZIr V(x7= e:oa,K0Cikhnk!ʁR"ؔw_/ WAWھuנD3 _mPV|Kaš|j ), &T D(uFyXS= &)i[Ihez8Xwmw+?Jo]*Vёa9!%\_:C nIzAشf J0(| B'wŦ5Z@7[ zscO؄ǂlPM#Km>"҉[e>?(Avwtw"60CVF_c'u;lq>Sn;#P*S`ܔVn0 xl;-$9E ptQI|2k >wNV𵓖.LI)2vq  &Kd MvOVv26470y#əC{`#nh +J%KYT1LkrzLOʧY]ɐ)?*:zʒVYP!hJD-crbFu}MfN`Z~{MDTc}3Y5n?D hO\rJ4#Q3[8C.D-D`,bgCD aO$ |ځXy9HmzA)2X_}_|0Xv\2= o^p El#Cʹ\}ѫu7a"JHyFP$U,jK&ch4N\S{N1Hl Rq0v?@l066XrAX?0x _E|64qa[O X V-h'KZ_:1Ƌ>RA;{y'eHH EHN&"d ] ':SuNg@Rcn<FJ5:y4πˬﯻB|n=&6;{|37%S}qHpqisy3%qG21V9&:ińhv40P߫Z*Ҫ<734dnamf-KE_V[pl?,' o$>{P8hcfCI޳霌ZiP6=%) \ЮAThSfKϞFo(iث*rgqjlР{Gd.a#,GfWAϩ`.Q}|(PC\(~b48Ed.Jm$iw]#|c\O*v2I%EK t/Ep9y"{AR2+k jzDKdJ<]ݾE77GXDƟT°+ӬmVy]K=U5yilVn3r_q˓7-Adg^W<,$H RoM7R]lS+6(/8಺u]WMCs+칵RjVxB/F ,/ҳ_L!ydm\pODŽ{Żȭ5MjFm§Ң(< ~k]xOmќ~~'yk?7 _ծcegk<$U9[yFaa)nB" QUHHk$Vcu7VZmc5b5a䒠tv|b%ehZ,H0MZ&9,#~%%ecϲ泆` n&oRhβw<Ƽu<N*Jb>4'*:ޅ(^:Z;te⋥Ydl;ii\y?Q)A1*-ψfZqE=;bŖM:rwEQF09=EwKl68gV]iĩ~)Q[Oˣpgu>/Xz EÉPZi.EvӸP<ŕYS TAvq,2S 1[,DݫR8w5pgĿn+EBRESvSXKk3;jX~` FqGlTWAc.Sf+_JutL ~|p*}K*? &i3k /ᕉYxc3{qPS@6_w^9vaxM5"_iu&%pKфQ lg!&pdyUc;\Ics՚.$]Jm;0ZPs~AF*`B ]:OOج]}@{a/j4[5NG=TZ>$6㵂݅Ε0PH ?_z!MPf#oacKVDqPk Èrƕ=x`FUm:t:tX _ &sH QO KNP0J}CM>ꉻ  q$Q90_2Ã6!C~ :ʵ$?ꍡi$:8X6܉jyOrj %.!M 9΁ ^Xe_B|ec$~ aSRu?\5{搻M00{)~ ( wP?M]_6I]K1ŠkoКZrb?|ݻ%􍷟.0@ps+[~u("Z ջ䫂j% c2Z#,Q.pJ?!}%UGEGmvOHj:M ˯#-&x ` rr|$ Ln*14TFOۦPpp*`o т!)M:`t\Vrfad/V;V! x4f JoUqYl3J?"l Dk&hWyuAMҡN sQbD?GvIbϕ 2߇|u ĺXuAS VL-p+.2 Obma 1cV^p-δӒkʚJU r4$ YGW|]IogǸ_9m P. h$ۺM)HF^fKJici[!!lV~CG_OMڝ5 W 6~3PwyC8hܩ. [Pr;u[l _LsF a,+:4To<+8,v0/% S.5ܻEg;q3Za8<-nvx3:XN[,d_56sCX݃hbu*d{X.JMWkxatq~npybk^C.U d%K"H $4AĹ[^nGh-6meghD0}<\o4Nf4*2KX(wUg7W?NFJ9>ϙd"A sL7Λ. %ǫ?M6gFT6,ǝ؋$w TvG5$,VTMHVU4;Y %&>tsї^2\JZm*[%Qc1.=()9 F-u|bi\cg?-Y tE CBnz3v $Q;QUP`ȩh(A6-NyGalj=C 'O8jB[g&_pf VÞ )fϑ sz"W[2~s] 4Ld2VSI'8A <0,fEDBlojroR(|X4% &:q71`k1o3MEE-*ZZ vV)rS"O?|tט]t|*y:˳M i4l}<;gZX``CO6G6g9ss2-950Im#Z`qwPxAGm+jïKm%QFi+sE`|CW2D6^J;MVjts9 uй ^&riWGqWkj^Z3ES}lXS_4r\-=~p(ß V-*Wd~ϑ_=G;f*RJ -P|՗NS7**b {G:AcsVg#4y(eVfS}|:.mAMW2Ou% y,>4~s* V뗕s4a~._ku2vv˜ls,k45qoYf ,,'Gmq[La] u&L&mEGݮ4|tfs{ ̈́ogRnA_NZy,X>\<ҋwV^ @=u6ڄ? dO\OLS8Si$r{7D-H{8=ds]B&LŖ1Q*x±2&^tَ.T #yf;{}?ZJp/Y50O#,3(o=@fDtugHI67p5&UKX{9k߼\[h "GБI]tse 9E҄4@7f|} 6"[+R#CԔTX]҈,:w#$h\Z$˃?07˜ #(J׺"oVP.WJlt &/@>~8'}uh`0?3ZQqD\ݨ'`2O-NkYi1l^XC]-p%y ] 7O`hh|1" 7 7hl "(x~=zB0bN lx(#A.ØyڊH>˙T͜S3S/_U94dz4l.܊ նՋYk;Z!$w^#/y[4**>vm@| J- M̀}";,EB 2Upô>Y/y٤P!xc}pDɌkb`"!3QpfHHޖ)X_Y1}zF}b{7U 4Q9ib]i]}Id]g AK 4xb֡t1 qm*$fU>UՏ,|2H[iwV_;k4i;ƈ7hbk.w [xv^iCo-)@8rYMdX<8ן<uPq,[(G@+ '|4I16OVgn{+so`{e5ѭDoΞ$#U\;`oIBJ7N7x CkےAШzՠ<ɺ'7 D.my}ubǯcPp9P @6 m,<\PX>ʼnA -!s;Yۯ=LOU\ Z9_kR{0_p!d_'.mUAk茂Q4<ϡn9q]ǨČ =YfB4$; um`(ȁqAHDQ*B{QՓaa&"CQ?fŢ'eafʌ6ת!ϝ*E Я+%ڌԯeغkYɽ|Թ+^ͫȠks$6P(/dDHgμO[c]Öaܮ! 2".WP͐T}0Ř^|.Z*H.`F[5P#Ƴvs-{{o|wxN _+ o5.կ?`'6] [tmˀ[jM{ a|]RCXHU/+t8K6<9?,As)vU wzr2{8@Nvi (0,bP]TU&LLU3 D9=>XJ%vXmqͻXaR (Xze1F(wv: _~eQ0fNhqHk1\A oT/Kz#Zk+b,aLp"6R(^<Ae^F/ߑ(A$ 8Eq-cj'utEp%apeǗeYRP{T\1I:4)4#X-gP?pJxU{N/)MwvmTon9Qӥ2J*R^z7+xr* ~}}O2Y6ڣ|7~R5iu-si,,db5ն#!Ҿseq,m2Gt`I?@g*Ո$'7  9tlR=R Cdma5I5~/z%ulcOLo )C<09B$OaG.d"름z)1AbFߴįqE8We41w5/JiqB?pU<ʌcǜZc|3R#=Πr_O(!h5C S$PʮF޿c!&°ѶsexÝNiԿS ;0?A듐}}\'/;6 Ď=eR祄jĘE鑳r6†K8IND|xͶ&_-VpVg˟ +ё3[@IålP^uc~͋!K E Ӡ <^K7dN`'%= ! a(b:)j ZaK*'@Tmk[)?ĿbI#:CyRϜy6iwݢb/o3"I"+A/FN@m˰2_{ qCQKVL5.#"|S/I ylenbe…n{(ϡnS<;&)ܼͬV/w̚M,3eS8x'{n]hA}3S2FDw7=6rhnsm j@@!> Fpk_B-KvC?wO@t:N|Uy24uc,RJ[קaE^ F'@dSrJMO!Pə:J,y^>'d^x@l ycma\J:B4Uhn ,MTy3fdx2صfn{gu~Jb\͙> G(DQ+`P!r"YO)xI Zds~.\j`)sp!Ro8$L[yZ)giņa$kuZI2@Tb27fTAl-21bD8NrIIp‱+< f -¢?GB$o s0Rg-ec_j.RWji;$!ci]Ȟ_/w,Qd&}zE"ˉ[8 -J!L3'C  q_s8]fu';_BV&zt)w{ۚgAX+SаpA{/  ,Ls=oT{mI<;ЃiGOV)A;T-qY 18<^Qs|i7m嗤>7|4WR[fqW ƥPG9A&Mo0cJQ7^UQ1@%l"S]-%0Ӵ |( RgM/¼(-4NЁ& *bl9{H+" p8=% >6?jq+<sM Y@c82o`kSV1a|O>M5Iv=_ʸUd<%&P(>tl`ÝkgGAiRk $dp$&'B {$I>Q $+Xѫ:֘0Aq-u\iWm`8nsk& JZbW;{ֿӖ YfcdyBUT^#z ^op84& !(`&=k|iYOB,ٔ{rꢛJd>Bb.҉ }KgO 6^ *ⲭ,yhU[kIT-^7q{ZȆ8S fWUs*~gp}(6??w!HOe0'#㎉@8עV6xvos3 #qY q<6VY:1hTvQoW{8|)tQɱpYR 5Os]0"519䪃-sBͮh#3,SkXK_/i0^=𑤄_?E6t]-YkwAIp [5}M!n>EB1iE>暽m\ekX~?qlDa.Eqߝl-Om҅bn R߫;Sv[~iGaЏ2_S-dNq>7o.m ߤjXVfp]b lHvu2N. ?ճïyx札l/{r{ ms ;+2g1ު"c֭Tu˲Wֵ" b_P0ͬ{&t9!_A۠Q8>!H HW=77ߴK 5~\8 M/}]9BF(9N8,uk쟠خ6fƚ1-{>Qf=Tۥ ;)/# .WZJE%AK>Kl  `kr=؇grJ4zyߪ}b-[[[d%[/>mbt /ٵ6\?bs=YjMè G,P.Ԉ8QveIWiJv/ yzA3a%,0 ne @aZVN+4pn/p8),4&b'7cDifG.^b8Glp\뚐>Q{7h괺1$lB.]pGWݩro`B:P& nZ*y;A>M-ꠤ޶ӥJ$7V4&R.h)v=ֺ2I3Te/8m£cJ{qBC*ag({yY` p${%UralX IwbgLѽfxQ! <U/,N Ew#k$)^5u="`/cDp6#ǐ=+챶D71 ij1dZxajSx#Ţt#[= z3-cQ-VeV`>ڂDզ@,^ LX } "O^L:/ryIZgmd+s[5E1kps!|5v&a[J52v^u Ti/9[2զwY8tNmZ_R3r?HP/~!g r:Ō/977O|nURC=9zCp\GS{'FߐC |ٌQ'y,rÉtKDF p;ǻ[7CVFw@0櫐f]f 1Q $D^;) f۟L'^kt08qE_Bp> 8>kɕkt #p`3vQ[`J*D5㑚©s+)$?`j9C8Teǒc[ 6Pf,6TI KHaM7(^OK6ҘyǀEϚJڵ.U# VNJ^[D)ޥ)kj7$ҡu@2nm*chIUe});a2}YNgrЂ;z;0 Dw:1#Y{tΥE0^6W3<¡k]e{)^+?hLr*bau[3x5 B咝#aFmL4G*͕ҕh^zu=Is, ]6"WMC6T߆e$ꬤ wO"@c1NS]gL!39\1nQx3|d-0Z$#-a{aE rM& 1j/N<4ex\MAx!LpOOE̡dhK+;=g׺GJ@`/w׏1{J}Rjmj辘T|3`t~t.8 XLн3 UiD%USzr%̛L%t\0}j0_ȶ7cOiơO[Nio{ WwK1C>Ϋ5n]nY7emGpE&|\p1hVK%gxh0AJƄgOz ,r-o{HEO$uf1[=liOP?O PoԡI( \8YW.R5O1QѢ;BR6sйc`9WHBamk8\4E!CÚAx}щ-A\C产 rlxQFȔ>ǪH~  :̀A8 FY(MNnpXuJYկLmqˏauYc/P"?KmW~*Xx\G:VZ--퍔~-6utl&g,afZX%?,s#ڏnF~vhEV|:zݝ[X'YC@k!^s5jِ] ~q$[l8ȓS1@[FvA3ؠ=R[wb*b[΂+YR"j]`&OFUlKS #d< ӟ,v6 YZ