sysdig-kmp-default-0.26.5_k5.3.18_lp152.69-lp152.3.6.1 4>$  Ap`qӸ/=„r 䴽LለN,|Շdp-9zɐ3&YЩx ¦2,p 0v;'ݒW6Tc=O%9 UcL ,v1\39̻k5]VHi0@;BpYc&YL+,]L~/)D}ZC Г<>K_,74{eXJ4.p*2pP?d- 9 R<@HL_hs      &HTW@WvWHLp(q8x&9&:9&>zy?z@zBzGzHzIzXzYzZ{h[{t\{x]{^{b|c|d}Ke}Pf}Sl}Uu}hv}tw}x~y~NL /04:|Csysdig-kmp-default0.26.5_k5.3.18_lp152.69lp152.3.6.1System-level explorationSysdig is open source, system-level exploration: capture system state and activity from a running Linux instance, then save, filter and analyze. Think of it as strace + tcpdump + lsof + awesome sauce. With a little Lua cherry on top.`qgoat19 openSUSE Leap 15.2openSUSEApache-2.0http://bugs.opensuse.orgSystem/Monitoringhttp://www.sysdig.org/linuxx86_64nvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.69-lp152.3.6.1 wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then INITRD_IN_POSTTRANS=1 /bin/bash -${-/e/} $wm2 --add-kmp $nvr finvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.69-lp152.3.6.1 rpm -ql $nvr | sed -n '/\.ko\(\.xz\)\?$/p' > /var/run/rpm-$nvr-modulesnvr=sysdig-kmp-default-0.26.5_k5.3.18_lp152.69-lp152.3.6.1 modules=( $(cat /var/run/rpm-$nvr-modules) ) rm -f /var/run/rpm-$nvr-modules if [ ${#modules[*]} = 0 ]; then echo "WARNING: $nvr does not contain any kernel modules" >&2 exit 0 fi wm2=/usr/lib/module-init-tools/weak-modules2 if [ -x $wm2 ]; then printf '%s\n' "${modules[@]}" | /bin/bash -${-/e/} $wm2 --remove-kmp $nvr fi AA큤`q`q`q3544bb0166a38417aef854e37cdea24a710b4ae7b863d42a88ea909da4bc8faerootrootrootrootrootrootsysdig-0.26.5-lp152.3.6.1.src.rpmkmod(sysdig_probe)multiversion(kernel)sysdig-kmpsysdig-kmpsysdig-kmp-defaultsysdig-kmp-default(x86-64)sysdig-kmp-default-k5.3.18_lp152.69  @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/bin/shcoreutilsgrepksym(default:__alloc_percpu)ksym(default:__check_object_size)ksym(default:__class_create)ksym(default:__cpu_online_mask)ksym(default:__cpu_possible_mask)ksym(default:__cpuhp_remove_state)ksym(default:__cpuhp_setup_state)ksym(default:__fdget)ksym(default:__fentry__)ksym(default:__get_free_pages)ksym(default:__init_waitqueue_head)ksym(default:__kmalloc)ksym(default:__per_cpu_offset)ksym(default:__put_user_8)ksym(default:__stack_chk_fail)ksym(default:__task_pid_nr_ns)ksym(default:__x86_indirect_thunk_rax)ksym(default:_copy_from_user)ksym(default:_copy_to_user)ksym(default:_raw_spin_lock)ksym(default:alloc_chrdev_region)ksym(default:cdev_add)ksym(default:cdev_del)ksym(default:cdev_init)ksym(default:class_destroy)ksym(default:copy_user_enhanced_fast_string)ksym(default:copy_user_generic_string)ksym(default:copy_user_generic_unrolled)ksym(default:cpu_number)ksym(default:cpumask_next)ksym(default:current_task)ksym(default:device_create)ksym(default:device_destroy)ksym(default:fget)ksym(default:find_pid_ns)ksym(default:for_each_kernel_tracepoint)ksym(default:fput)ksym(default:free_pages)ksym(default:free_percpu)ksym(default:from_kgid_munged)ksym(default:from_kuid)ksym(default:from_kuid_munged)ksym(default:init_pid_ns)ksym(default:init_task)ksym(default:kernfs_path_from_node)ksym(default:kfree)ksym(default:ktime_get_real_ts64)ksym(default:memcpy)ksym(default:memmove)ksym(default:module_layout)ksym(default:mutex_lock)ksym(default:mutex_unlock)ksym(default:nr_cpu_ids)ksym(default:param_ops_bool)ksym(default:param_ops_uint)ksym(default:pid_task)ksym(default:printk)ksym(default:probe_kernel_read)ksym(default:pv_ops)ksym(default:remap_pfn_range)ksym(default:sme_me_mask)ksym(default:sockfd_lookup)ksym(default:strlcpy)ksym(default:strlen)ksym(default:strncpy)ksym(default:strnlen)ksym(default:synchronize_rcu)ksym(default:synchronize_srcu)ksym(default:task_active_pid_ns)ksym(default:task_cputime_adjusted)ksym(default:tracepoint_probe_register)ksym(default:tracepoint_probe_unregister)ksym(default:tracepoint_srcu)ksym(default:unregister_chrdev_region)ksym(default:vfree)ksym(default:vmalloc)ksym(default:vmalloc_to_pfn)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)949f734288db9f48a06f877a564405cb2548c0326e2f4f38266087eac1d8cfafbdfb6dbb6a5cb5eed9a5ea54eb233a455ecfeec6b8e7ce2cdecd0b29aef28dc72ea2c95c362ef408b44ad4b3dbf17652e3ec2f2b867d91d0fb29722575e1610213684b6b21271fd01f199d24ecdcabd27a2af7b4d41f54024ee45ec274b497c29128848321b783225d26ed3640ab48f56529cb94302d0ebc9ec4e214600b3a4cd884986c98346fe392d15a623f93a665cb8ed737a0cba9ec6ca9669acdf38b0e602eb77d815002ab7989d409bcb6217de3d5669ceb3721b2893e599e89fc58501102e1da9fbfacce597c77d4c1d8a35b432368102905792f848754d539c9166fadaa916b6946091797ff92d013a7191539150de7d22659e63f8d2c8ae77c7a69bfc6091b333999e8297d6ee688f3744cf363.0.4-14.6.0-14.0-15.2-1sysdig-kmp-default-k5.3.18_lp152.694.14.1^S^g@]A\Q\d[s[U@[0@Z4@Z@Z|;YdYYY]XXf@X@X^c@X*WF@W@Wx@Wc@W @V@V_VuFVs@VrVrVm]V9@V9@U5@UUF U@Marcus Meissner Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal Martin Pluskal mpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comjoop.boonen@opensuse.orgmpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.comaspiers@suse.commpluskal@suse.commpluskal@suse.comrpm@fthiessen.derpm@fthiessen.dempluskal@suse.comboris@steki.netjoop.boonen@opensuse.orgjoop.boonen@opensuse.org- sysdig-32bit.patch: make build on 32bit- Update to version 0.26.5: * Fixed segfault that happens at startup (#1475, #1528) * Fixed memory leaks from certain thread/socket operations (#1491) * Fixed handling of SEND_SIG_NOINFO in the eBPF driver (#1493) * Fixed a regression in reading certain partial container events from scap files (#1513) * Updated use of Kubernetes APIs to support v1.16 (#1521) * Fixed rare driver deadlock that could occur during a context switch (#1522) * Added more detail to probe loader error message (#1541)- Update to version 0.26.4: * Prevent double-definition of ASSERT macro * Added fillers for chmod syscalls (#1472) * Added support for reporting cpu usage per docker cpuset (#1473) * Fixed build error on older Linux kernels (#1477) * Fixed driver build for RHEL 7.7/4.13+ w/CONFIG_VIRT_CPU_ACCOUNTING_GEN (#1471) * Fixed cmake to look for pkg-config before building grpc (#1470) * Fixed printing of strings (#1466) * readv input parsing improvements (#1463) * Suport Kubernetes liveness/readiness probes [#1320] * Fix edge cases in handling clone() and prlimit() system calls [#1401, #1465] * Stability and performance fixes - Drop no longer needed patches: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.26.1: * Changes to build the kmod with 5.1 kernels [#1413] * Explicitly disable psl to address build failures on MAC OS [#1417] * Fix handling of container metadata in "infra" events [#1418] - Changes for version 0.26.0: * Perform docker metadata fetches asynchronously: When new containers are discovered, fetch metadata about the container asynchronously, which should significantly reduce the likelihood of dropped system call events. [#1326] [#1378] [#1374] [#1381] [#1373] [#1382] [#1388] [#1389] [#1384] [#1392] [#1396] [#1411] * Add field to display time in ISO 8601 UTC [#1317] [#1360] * Performance improvements of ring buffer processing [#1372] * Support major/minor device numbers for fd events [#1315] #1383] * Add the ability to prepend encoded log severity in the log message [#1327] * Raise the iov limit in eBPF [#1390] * Changes to pull user event logging out into a separate component. [#1375] * Log a debug message when looking up an IP address of an incomplete container [#1398] * Support cri-o container metadata caching [#1399] * Logging API with lazy parameter evaluation [#1394] * Support BPM container type [#1319] * Fix bug in fullcapture range check [#1386] * Allow chisels to receive the full content of big buffers. [#1361] * start the analyzer before forcing next for a scap file [#1366] * Create a grpc_channel_registry for all channels [#1369] * Modified the behavior of fullcapture port range [#1370] * Check file before dereferencing [#1397] * Fix build for older kernels (<3.9) [#1400] * Added -fno-stack-protector to avoid clang errors [#1401] * Addl loop prevention for traverse_parent_state [#1411] * Add interfaces for async metrics collection [#1346] * Use epel 7-11 (7-9 is no longer available) [#1362] * Make some global variables related to fetching container state thread-local [#1356] * Allow downloading prebuilt modules without SSL verification [#1358] * add test helper to container manager. [#1365] * Cleanup old docker images after building a new ebpf-probe-builder [#1367] * valgrind clean for analyzer end to end test [#1387] * flush flags change to new namespace, add code enabling easy use of sinsp_threadinfo in std::set/map [#1395] * add friend class for unit testing [#1406] - Changes for version 0.25.0: * Support Linux 5.0 * CRI container runtime support * runtimeSpec.linux returned by containerd is an object, not an array (#1343) * Fix gRPC build with gcc 7 (#1322) * CRI-O container support (#1310) * Fix check for Docker pause containers [SMAGENT-1305] (#1306) * Detect CRI pod sandbox containers (#1297) * Container Runtime Interface support (#1277) * Prebuilt probes * Prebuild minikube kernel modules (#1294) * Build probe modification to include Fedora-Atomic. [SMAGENT-1251] (#1293) * Fix for newer versions of LXC not being detected (#1345) * [SMAGENT-1433] pull legacy GCC artifacts from local cache as debian no longer supports (#1342) * Use TBB_INCLUDE_DIR for consistency w/ falco agent (#1329) * SMAGENT-1297: Rebuild gcc-plugins before building kernel module (#1305) * Modified BPF probe builder (#1301) * Call set*ent() before reading the user/group NSS database (#1341) * Properly initialize default settings for tracers (#1339) * Fix bpf ptrace filler (#1338) * Fix potential memory leak in libelf (#1337) * Fix case where fclose could be called twice. (#1330) * Handle mmap failure gracefully (#1324) * Add stream event details in csysdig output (#1335) * SMAGENT-1400: Make sinsp_logger thread-safe (#1333) * Never drop socket syscalls to ensure we have fdinfo for subsequent binds. SMAGENT-1270 (#1312) * Infer fd info for sendto system call [SMAGENT-1282] (#1304) * Async framework base [SMAGENT-1247] (#1303) * Handle events for unknown threads after scap start [SMAGENT-1082] (#1296) * Add ability to print filtercheck field names only (#1288) - Add patches to fix build issues with shared components: * sysdig-include.patch * sysdig-linking.patch- Update to version 0.24.2: * Added the ability to specify a set of ports where data is captured with bigger snaplen (20000) (#1256) * Made fd resolution work for getsockopt (#1280) * Check getsockopt event before accessing it (#1284) * Fixed snprintf placeholder for size_t/{u,}int64_t (#1279) * Disabled reading environment from /proc by default (#1272) * Excluding suppressed processes during initial /proc scan (#1269) * Fixed Windows build in CYGWIN environment (#1270) * Changes to eliminate warnings with gcc 5.4 (#1271) * Trigger build errors for extra compiler warnings (#1265) * Handling thread table overflows (#1263) * Deleted threadinfos that we failed to add to the thread table (#1260) * Reduce CPU usage (#1261) * Lua parser interfaces (#1254) * Fixed a compile issue when trying to make the project using VS2017 on Windows 10 (#1248) * Added ifdef guards to socket options with (#1257),(#1258) * Improved getsockopt()/setsockopt() support (#1188) * Fix fd.net comparisons with in operator (#1252) * Only check out sysdig for initial invocation (#1251) * Build probe modules only with sysdig directory (#1244) * Fixed spelling and copy/pased comment errors (#1250) - Changes for version 0.24.1: * Fix struct packing - Changes for version 0.24.0: * Switch to Apache 2.0 License: All userspace code moves from GPL to Apache 2 license. Kernel module switches to dual-license MIT + GPLv2. Enjoy! [#1233] [#1242] * Complete IPv6 Support. Sysdig previously had partial IPv6 support, but this release rounds out full support for ipv6 addresses in filter fields, csysdig, etc. [#1204] * loginuid support. Add user.loginuid & user.loginname to track login users, which do not change despite sudo/su operations. [#1189] [#1214] [#1218] [#1219] [#1227] * Track connections by domain name: New fields fd.*ip.name allow matching connection ips with resolved domain names. [#1213] * Add endswith filter to support suffix matching on strings [#1209] * Add minikube support to the kernel module probe loader script [#1205] * Improve error string return handling at startup/when reading capture files [#1215] * Disable boot2docker kernel module builds for pre-built kernel modules [#1232] * eBPF Support Improvements/Fixes [#1235] [#1236] [#1237] [#1239] * Improve/fix windows build [#1242] * Don't drop setns events when in dropping mode [#1198] * At startup, wait a bit for an existing sysdig-probe module to be unloaded before loading a new one [#1201] * Support extracting container metadata for containers spawned with just an image id and not an image name [#1207] * Properly extract image metadata when the image contains a host:port component [#1206] * Minor compilation bug fixes [#1212] * Small packaging fixes [#1228] [#1229] [#1231] * Fix an inconsistency when writing capture files containing unknown fds [#1234]- Update to version 0.23.1: * Fix ia32 check on BPF for 4.14 and 4.15 kernels * Adjust wrong events lengths when reading older captures [#1195] * More flexible captures: the flexibility of the capture format/reading process has been improved to allow backward and forward-compatibility [#1163] * Support logging elapsed time on tracers [#1186] * Fixes on custom containers support [#1170] * Avoid invalid free() calls around m_suppressed_pointers [#1184] * Properly set the address list total length when reading a capture [#1185]- Update to version 0.22: * eBPF support for sysdig: eBPF as the instrumentation backend in kernel space (beta) * Parsing an argument passed to sysdig-probe-loader as a custom URL for the kernel module like -e SYSDIG_PROBE_URL=http://54.183.253.176:52354 [#1085] * Several changes to expand the set of events that are skipped by falco, and to centralize the logic for knowing which events to skip [#1105] * Improved proc lookup in libsinsp [#1107] [#1110] [#1112] * Improved performance [#1126] [#1120] [#1121] [#1137] * In dropping mode, drop events that don't change system state [#1123] * Introduce non-STL thread table API [#1142] * Add the ability to ignore events by process name (comm). At the scap level, ignoring is by tid. At the sinsp level, as threads are added/removed from the thread table the comm is checked against a set of comms and if found the tid is added to the scap-level ignore hash table [#1139] * The container_manager can now receive callbacks to call when a new container is detected or an inactive one is removed [#1133] * Add support for adding custom container types alongside Docker etc (on sinsp level) [#1149] * Parse and store three new container_info fields: repository, tag and digest [#1127] * Skip proc scan in sinsp_dumper w/ threads_from_sinsp=true [#1164] * Allow k8s filterchecks with analyzer [#1160] * When creating the sysdig docker image, add the ability to directly set the sysdig version via the environment variable SYSDIG_VERSION [#1166] - Drop upstreamed patch: * sysdig_proto_ops_getname.patch- Patch sysdig_proto_ops_getname.patch to fix build - Seth Forshee : Update for proto_ops.getname() prototype changes in Linux 4.17 (#1114)- Update to version 0.21.0: * Track Versioning in Capture Files: With this release, we will increment the pcap major/minor version in capture files when a release adds new event types, additional event fields, etc. that are incompatible with earlier sysdig versions. [#1081] [#1084] * Add s390x as a platform using Docker [#1029] * When saving container information, also store certain mesos-related environment information associated with the first process in the container [#1021] [#1057] * New filtercheck fd.connected returns whether or not a network connection file descriptor is actually bound to a remote endpoint. Think of udp sockets that only use sendto() vs udp sockets that use connect() and then send(), or tcp sockets that have been created but not connect()ed yet. [#1051] * New filtercheck fd.name_changed is true when an event changes the connection information for a connection fd. This can occur in some cases such as udp connections where a connect() changes the connection information for a fd. * Make the thread table size configurable via sinsp::set_max_thread_table_size() [#1056] * Add support for new AWS Linux 2 AMI [#1058] * Add process group id to execve events [#1044] [#1080] * Expand the set of system calls returned by the driver when in dropping mode [#1075] * Handle AT_FDCWD arguments to linkat, openat, etc. and resolve the path relative to the cwd [#1020]- Modernise spec file using spec-cleaner- Update to version 0.20.0: * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966] * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990] * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982] * Reduce inactive container scan time from 20 minutes to 30 seconds [#985] * Added the ability to parse and represent RAW sockets [#991] * Handle finit_module syscall [#996] [#1001] * Add error message when scap_open() is called with incorrect mode [#997] * Use explicit versions for all Docker API Endpoints [#1000] * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016] * Add support for bpf/seccomp syscalls [#1031] [#1033] * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]- Update to version 0.19.1: * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS - Changes for version 0.19.0: * Add per-cpu counters when a tracepoint is hit [#947] * mq_unlink syscall reports as ptrace [#927] * Fixed copy-paste typo [#946] * expose the event masking/unmasking mechanism at the inspector level [#951] * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952] * Various improvements and fixes for Sysdig Inspect - Changes for version 0.18.0: * Changed language of CLA to also cover government contributions [#902] * Support mapped container docker networking mode, currently used by k8s pods [#922] * Allow an external event capture dumper object to be used together with an inspector object [#912] * Handle reading large execve args/env that might otherwise cause a page fault [#920] * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935] * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934] * Small README changes [#936] * Support additional flags to clone() syscall [#909] * Support page faults as events [#904] * Support for upcoming visualization product [#931] * Compilation fixes for sysdig monitor agent [#942] * Fix minor problems found by valgrind [#938] * Fix crash when reading large messages from docker daemon [#932] * Better cleanup of failed installation of the sysdig driver under coreos [#926] * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914] * Fix IN operator so it works with non-string values [#913] * fix compile errors with newer versions of libcurl [#895] [#911] * fix compile errors when O_DIRECTORY not defined [#907] * Use session id, not process group id, for proc.sid [#904] [#905] * Small docs fixes related to container.mount.* [#901] * Update installation script to use latest version of EPEL repository [#897] - Drop no longer needed sysdig-curlbuild.patch- Fix building with recent curl (gh#draios/sysdig#895): * sysdig-curlbuild.patch- Update to version 0.17.0 (boo#1051562): * New features: + Support netlink sockets [#809] * Bug fixes: + Fix a bug on cgroups parsing that prevented sysdig to start [#835] + Allow sysdig to read k8s state from very large k8s environments [#856] + Improve compatibility with older linux kernels [#889] + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]- Update to version 0.16.0: * New features: + support for Kernel 4.11 + sysdig -N is now the default option, server port decoding can be reenabled with -R + Decode unshare syscall * Bugfixes: + Fix rkt detection for containers created before sysdig runs + Fix container detection if docker itself is running inside a container + Fix detection of lxc containers + Fix compilation issues on RHEL5 + Fix memory leak on spy_users chisel- Update to version 0.15.1 (boo#1032025): * Bug fixes: + Fixed driver compilation issues on armv6l + Fixes on Kubernetes support + Regression on rkt detection #748 + Fixed high cpu usage when sysdig was used with -M parameter, #783 + Fixed a memory leak #772- Update to version 0.15.0 * New Features + Support for Linux Kernel 4.10 + Use /proc//status instead of custom ioctl to get process vpid for kernels >= 4.1 * Bug fixes + Various fixes on Kubernetes ingestion + Fix some happening deadlocks in the driver when ioctl were exiting with error + Fix mkdir and rmdir events, they were skipped in case of page faults + Bugfix on topports_server chisel + Avoid some cases of infinite loop when evaluating filters like proc.aname * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734- Update to version 0.14.0: * JSON output is not: an object per event separated by newline, instead of objects inside array as before. * New filter proc.pcmdline, which represents the full command line (proc.name + proc.args) of the parent of the process generating the event * Fixes for kernel version 4.9.3 * Improved detection of Mesos containers * Fix compilation with HAS_CAPTURE disabled on Linux * Fixes for merged captures support - Add sysdig-no_return_random.patch - Enable building on more platforms- Update to version 0.13.0 (boo#1017181): * Ability to open concatenated capture files * evtin.* fields can be used also for displaying now * Fix driver for Kernel 4.9 * Fix on IPv4 mapped IPv6 parsing * Fix memory leak #694 * Fix issue #687 about connecting to an K8s API server via HTTPS- Update to version 0.12.1: * Compilation issues when using non-bundled OpenSSL #672 * Compilation issues under S390 architecture * Various issues on k8s parsing * Stale thread info when parsing processes within containers #665 * Avoid getting cwd from driver, causes issues on Kernel 4.8 - Changes for version 0.12.0: * New filters container.mount.* to match container mount points * New filter container.privileged to match containers running in privileged mode * Support latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available * Added glob operator for strings, works as classic shell glob path matcher * Added pmatch operator * Add less package on docker image - Drop upstreamed sysdig-do-not-use-private-jq-api.patch - Enable building on s390x- Use current macros for KMP building * drop sysdig-kmp-preamble - Use exclusivearch instead of excluding architectures- Update to version 0.11.0: * Support for tracers. A way to add user level events to sysdig stream. Seeannouncement blog post. * New csysdig views: Traces List, Traces Summary, Traces Spectogram * New evtin.* and span.* filters startswith operand for strings, ex: fd.name startswith /etc * evt.is_open_{read,write} fields, true or false if an event is an open() in read or write * Improved performances of Kubernetes metadata parsing. * Bug fixes for IPv6 - Add sysdig-do-not-use-private-jq-api.patch to allow building with system JQ- Update to version 0.10.1: * Minor bugfixes, mostly related to Kubernetes and Mesos parsing- Update to version 0.10.0: * setsid event * proc.sid filter field: the session id of the process generating the event * proc.sname filter field: the name of the current process session leader * --force-term-compat command line option: try to configure simple terminal * settings (xterm-1002) that work better with terminals like putty * Many minor bugfixes * builds with gcc6 (boo#985121) - Use pkgconfig() style dependencies - Build with lua-5.1 as builds fail with lua-5.2 and later- Update to 0.9.0 * Mesos and Marathon support: + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps, arathon Groups + -m sysdig/csysdig parameter to specify URLs for Mesos Master Marathon API + -pm sysdig parameter to get a Mesos-friendly event output + Filter fields: mesos.task.name, mesos.task.id, mesos.task.label, mesos.task.labels, mesos.framework.name, mesos.framework.id, marathon.app.name, marathon.app.id, marathon.app.label, marathon.app.labels, marathon.group.name, marathon.group.id * icontains filter comparison operator: case-insensitive string comparison * Support for SSL based authentication and bearer token authentication against the Kubernetes API server. Previously, SSL was just supported for CA verification. See the updated documentation for -K * New actions on csysdig views: lsof and renice * New network filter fields that support a CIDR notation (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet- Update to 0.8.0 * Bug fixes + Better terminal mouse handling for csysdig + Minor bugfixes * New and updated features + rkt support (when running sysdig in a container, bind mounting the rkt directory is necessary, e.g. -v /var/lib/rkt:/host/var/lib/rkt:ro for Docker) + chroot event + container.type: the container type, e.g. docker or rkt + Prebuild sysdig-probe for Debian kernels- Update to 0.7.1 * Fix sysdig-probe compilation for kernel < 3.4.0 * Fix compilation on OSX - Changes for 0.7.0 * Fix sysdig-probe for kernel 4.4 * Fix a remotely possible deadlock during ioctl calls * Fix Kubernetes support when data returned from the API server is particularly big * Minor bugfixes * Spectrogram views in csysdig: spectro_all (System call latency spectrogram) and spectro_file (File I/O latency spectrogram) * Ability to authenticate to a Kubernetes API server using a certificate, via -K or --k8s-api-cert=. Can also be specified via the environment variable SYSDIG_K8S_API_CERT * Ability to sort columns in csysdig views using the keyboard * --filter-proclist: apply the filter to the process table * -M: add the possibility to stop collecting after X seconds evt.latency.quantized: 10-base log of the delta between an exit event and the correspondent enter event evt.latency.human: delta between an exit event and the correspondent enter event, as a human readable string (e.g. 10.3ms)- Fix .spec file bug which was causing Frankenstein kernel modules: https://github.com/draios/sysdig/issues/496#issuecomment-165929462- Exclude archs on which build fails- Fix whitespace issues in .spec and .changes files - Remove duplicate %{_datadir} directory from %files- Update to 0.6.0 * Full support to Kubernetes, even when saving events to a trace file * semget system event * access system event * Automatically build sysdig-probe for boot2docker releases * Properly filter process table serialization in a trace file when a process filter is used * Some csysdig actions now ask the user for confirmation * various bugfixes * drop GH_496_fix.patch- Update to 0.5.1 * Fix connection to HTTPS Kubernetes API servers * Properly compile bundled OpenSSL * Fix sysdig-probe build on Linux 4.3 * Minor bugfixes - Changes for 0.5.0: * Full Kubernetes support! * Add a convenient USE_BUNDLED_DEPS CMake option to enable/disable all bundled dependencies at once. * New build/runtime dependencies: libb64, libcurl, openssl. - Add GH_496_fix.patch - Update dependencies and not use anything bundled- Updated to 0.4.0, notable changes: * Support ia32 emulation on 64bit kernels * HTTP chisels now support UNIX sockets (e.g. Docker API) * New events: mount, umount * Support Docker containers when running in a different cgroup root layout * csysdig view actions: press F7 or F8 while inside a csysdig view to see what actions are supported- Updated to 0.2.0, notable changes: * New version scheme * Update ncurses so it will compile on GCC 5 * Don't use GCC 5 inside the Docker container, because older kernels are still not ready * Support CPU hotplug * Fix improper access to socket structure during accept() * Docker image now includes the RUN label to make it easier to run sysdig on Atomic Linux * New events: semop, semctl, ppoll * Port numbers will be automatically converted to service names unless -N is specified- Use proper cmake macros - Remove conditions around fdupes as package does not build for old releases anyway - Enable parallel build- updated from 0.1.99 to 0.1.102 - notable changes: * Support for decoding setns and flock syscall * Parse O_CLOEXEC flag on open and related syscalls * Parse CLONE_NEWUSER flag on clone * Support truncated tracefiles * Now sysdig can rotate tracing file when capturing, using -C, -e, -W, -G * Better extraction/filtering capabilities for event related to multiple file descriptors, like poll * Precompiled kernel modules for older coreos releases * This release introduces csysdig, the awesome ncurses user interface for sysdig * Support for intercepting signals via the signaldeliver event: parameters are source pid, destination pid and signal type * Docker container ships with GCC 4.8 other than the latest from Debian, to increase compatibility * echo_fds chisel has a better formatting * Correctly show container output even when renaming containers on Docker >= 1.5- Cleaned and corrected the spec file- Cleaned the spec file up - Build version 0.1.99/bin/sh/bin/sh/bin/shsysdig-kmp-desktopsysdig-kmp-tracesysdig-kmp-xen0.26.50.26.5_k5.3.18_lp152.690.26.5_k5.3.18_lp152.69-lp152.3.6.10.26.5_k5.3.18_lp152.69-lp152.3.6.15.3.18-lp152.69-defaultextrasysdig-probe.ko/lib/modules//lib/modules/5.3.18-lp152.69-default//lib/modules/5.3.18-lp152.69-default/extra/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16064/openSUSE_Leap_15.2_Update/95c0677837f50a74de6fce043867c1fd-sysdig.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB relocatable, x86-64, version 1 (SYSV), BuildID[sha1]=904516ae4da1ac730c30271fefb25dd57f7c3e71, not strippedNRR:R RR'R1R R R8R?RRRCRRR3R0R9R+R-R$RKR R*RDR2R(RRHROR)RLR;R5RR RJRRARNR/R,R.RMR#RQRRRRR=RR!RIR@RP if test -x /usr/lib/module-init-tools/regenerate-initrd-posttrans; then /bin/bash -c 'set +e; /usr/lib/module-init-tools/regenerate-initrd-posttrans' fi/bin/shpackageand(kernel-default:sysdig)kernel-defaultutf-8f93cebb59ca32fa2c3981203d2616acfcba2084a1d053f8a6ec4f2aafb269cc9?7zXZ !t/] crt:bLLSw~ڷBMq⣽%:7r2ۼa;@ZcsI! xb_K'[0jWoeD$lzr^YA@ax &Q (~H&2:?X){b9a8 ΜKאLh}IJv|QU?#HsָVyJI &!RLn1~)R _$x?_LP7,35$)E;,8"!B~] LlN:x`gZĐuR[̇ޱCh~wUʊկ%uu=ԦIKc#@>y*OY!Ƙh\vKNu!U8",;B4UI<#ʜPЛ# 3?kclp4sF„Yt+(!嶘XIb4Ÿ- jDgGr$E/&Vx)&ȯI1|)WFF'}(AHg#G %[6b3&*9却E3+d➢3GJTUkt1 MÚ(\䵀3F5I4h4Wy4mn(!t M^(XHxv81fA ţx[$κ)?cǍ rsiTmjG(FB"s0 ~C&`|# 9t.KƇDRa._ݭbUMNka+3ѨQpB"FA_ɥjE(<nmd@hڼL=*?pl>,\:8\J2 rSsiLZPsWX׎ǣW<JA<1C hK_[36u[nA$YU+Mѡ'H,)XjVJ"|T2Q'% Aga ԇ(3>ewrnySBo6:F1%=Us:Gvf?dI.*IGKR|{q%$޵+F8$`u5a1G }cu0)0߱tms&y0D'T>l(J R\MX}NbtfP3H7r*[4;mݓ860m]ŴUsmDԿ$Tdw{?NToBL[p"dMvlO`/P7[G h$>2UwN;~A9qW/Pqp9M(Brwt$~|?Tr6_>} Iu[$4bnb #S)y];mkP֯5{ 5:&酞9 p> K{=f]{O,Oǂq^ <ODX=_d6s0QX0%eEL ǎoɿQ69GU` F zt2N)M Rr~#5mC53I6P"Ѷc +0'p&k6lS4NXJH}%C1](jGnON*SmW ~ƊK'ͮJDbP|;̫tWW4ԯI-@?_݉aFs9^,c+, WuiQut"Oylr&.,p [y.Ҷ%]Lڗ@o^K$MKRGbRHX9Uh"s(+̘Yp-yRm^՚~S, z3g|X1GP dExv:Al*/PIݞ5~tp:Tux,3]0227k{Y#\HSQgv[M/bDGLF=v%5{S$g%^pFpsYYD\kh:K~˾eQG7 B?*DF¼2.Е:;"GC/ &,p@ܥ-QYduC͢]Tɰ$7zKg"3 +Pcv~(}c'2,i׿hB=MjNq$Slai_Qk q]&8`#ԛp `=ʢɔgC\DKȰ662;sEK@bPJC5CAӷ7rAb’@ θ`0&[="SZ* .|0\\!Y΂j-*q%dg.gyHuF`gʃ*[SbPȗ!at{w9 c+Ay=A` K*4`Dv":g)s..éaB UrȘ8 < 1M rgKY`!`=x5+"X*!̞/f^ cAƒhCU{*N}>L}tJ3 '츾m=;%'0NY,ގA1SH+B)it+{oڐNcD_ ]GqqE#[Y.fz2= "S*%Oع`ՙfRS#(j'g!P:"Jo$4I$+Cl1gbMV,-8-x-}Er7SV[sUO& \ E|P=Zj<*VZL 1?<D$̠[YB& u:}Hf X&t_&rE|1֌Smk$9&2#Ҋ%/DMdU!vdڗ!J96b%ZPԗvN T_C.Jru09ytM,s؎7lImݦ;3Vxz"ZFt|>}1O y{DSԆg/ q)qO ^$x3S.~&'`2a97$= G ``eqc%W+`%g6hb`Vd8DhnX)ój5$gK(p4 A놚ۜ!>xiKq/d9Ј˳- .7P>LK&6 ;MRY&T[ F@GX;p~?e~'2v dބݳg=z;o;m oZ9.O[(ѵРWl`]4A7WE&\<+*i ML7Y>xk 3UٗFNcWe45}%#'i4jܭb- NOhC9ܜ.iG= bѪ;ځSH~(gL|LTpEx9̇WOIF 4FkeP1`$Q}Yɧbh|Wӭ HQNpFk~'sj\͍=v P%PMJLdaZ_Ci@F6Bl!=A,R޼rBw oN {%›fFEj;e^Ij.;ȿkt¸(~Ue۠V_BBCi~ƶ ӫ^Q6tVD5}A*ѤdnGw>Z/N): ^(Sz?`[8_#62k%?\zmGDWPJf+tXBJY)dJ;8Si%󝭔tWX%F1VDeT v<h^|I/^쁏D`D:kVq'D@-%pIvƮN-Ic =ZuZƩ~ TpT pkNnV ̀,bSN+QM^c',&`?wDWif-ebwѣKE ϥ&?g !c׏&VH#j^b\ fVUx^i쳫] Ύdg5@n4QZgc9iizBސ_)n#,qGnںc/9:Hz|r~}S"@'ʖPWQ4)"TvtpZiF&FBwڽMSsZj_J4P]0 ".dF=e}>tvBǣVCx'hb]J'>py<1구qC0@ePZx<{BN9ūE1{^NM'h7蟤?U=ռsis,"==.͞t˝U\kQj zɠOw6EP3^quprO!fW H`#I8FՎ޻ކ;xy7:P)Q]Xh3mu(q>V˂4 SkgM 2bDM=MkD(̡CM_Tl`r-dy"5ǻ|u(,9U]r}]0?]a=!v\^(NlXa/ޠ|!Ƞ#+0VpƏXe~9 U-$ݰ΂Eŕ…:ރ>z`[ec55鎛4$.Dbgζ;0ktT -MS楞,e6dF`h[NsN"5Ѡh҇r9(hH8{>ily!F4; Jvy5/  `E9 ^lۯ⅑ xԩc #%8h=3C U&; 7Y2"S_'TI}nAN ϛ*D51XLP%q $K/W\G<$_':W&J\@ )q1\T纉:oHSxF_ٽ]J*(7Z¡L+IZD2`25?L֬.%4@IhT@ixOu+ a9/\ȯ70j놮O?~8+` l[.Q/2ЖPr9}^%?O a8d7؀b[B6Vz]^МxE{7RNWFRh?z\}?pM$S[1 3A]:P󐹂,aGyZɢ#U1-MKX .uU5ʩٕRg*L~\/sॠkB$*>/nr[Tv Amh 6ʏa)I%;Y &Ȑl*[ɢQϠМoew8 ,9)!9QB][e:^2Ii2@t.1L="?"uR98>Bb"zV_;O9?~9g4n&]a|DwQǶ1Wښ>Z(P (%ې:=;o)܎r>t;A-D|yutǺ4l R?8%Hmzxm yБcBc-vi<u~e )CDC]kMSyNٟD%rR-7̠E.c\mro_<~! 0X찁M('F]r$$CO FUrI>⅔h鿊QqMM6P]\Q6^P@ 'wku4YjY{b{:B2xk-pKp!us*.clRH֕{h)0Θ!C.%Ռ7ˑ˒@\$G+;&xYXZfor(3*\|5CbJ@deb1SeO}kϼ|f fn_1} yVI/N]/56QXsJڿ+jkqFL AAuξض8h0,(}ۈg (<劎 _")|5P.PZ&WFW*/A jԉr2V[c@sFr} 2%ZEΓ t`^Q5r5vw%Vfdo2o-~<4.L`_@)mۧ/$Js8An  E4ɦȶjr~ M͊W -W9g 9,0^e6i?ìZsYx$B~\Jg9xz1r cަ(0qRqk^LE $T.vKu1і8:.=vU:;c5G"}C^kR݅s9]zr 4`1o;~.oЪK#UPԦ?B/ۻ> ~0M*/B(-zj}KC*/Sޅ "PKĚZf`ZſJ#FOPq5=!oGY%GZ,`?,qn)B1l0a0UŐ̂n#]嚱(QC.P~6]Z]%ø2ǹSLwr=%8H/omYXoliST&=ٰw[22o2Z/@02 rAe-|',`Ʉ+/F茬RߒnYOq`Msў՝e6Kzֆ 7@' c| Kfb+V@lOT8@7|xiSlm:AڃgP'wn5wfY(ȝ>DsH7!1o |'1uD[ޔI" zuH8R}Z(,=0& VUЌ"Έ%tgqzs]ɘ1p2 2q2&7Λь 2$.>.1J>1[lBŊ62%^.W@cμ3n<Q&u=!ȁ!lxc]a.^(5^,W p"ЩM?N4ZDcZ$&\1ZmgSjK+GR[l=P1ȸ ;8B UV"Qg/KhX~2aJa*?aSܢ%L~.$MuPBins<ەhLֱ'b^4PJN*sǦ6+0/;>]PP0-T;egκ́L ,ɻT%}Q+U(ũ?t+.~F 4azen9kttW'h47:L]~']}ьtqXAQlYKL!N8;Vn" fw 6<8!s3Q,iZV]_~NS4x;)<{yfjM_!raBM$H“9H!/f2Hidw*?f[@6Z{*Mm$Ds _@Cr EQ:jEJT^B60|+ zRR:#sq`3 mLߠ%."]gBP/#J _f:m9ȑa p-PʕV= )fjXVJk󕽛f]i,-?~g%Bfhڕfv˅)ْ!홆2qEHG 6B$~~qxdԬpT_ ,,QG WL(_E4? ʓ ̵$@*G6=SX8qڛq~ }o|}L~̨1r;%7Lg.< ⬄Z>|s6'yٷ+6|F0@" m@T/?P5UwOcn--`uDKzw>JqQBɉ!!>5šMZ H_'J^ݭR> hpܝTޟl1m؟c#{5cEGE|yZft153M R_وЧf`5jؙ}E4`.#.Go0E&@|\▞AS$)ىO0]F&, hu}=zGHͳVh_\s:#OҖ|A4.wtzo8 xLQ^ Cgͻi ο0upކ ם/y(\}[ٺ<{b2ؾ< NK;i?#q׭8ȂPEq==jܥ堲k(W{ӸwZk5 tZIcŽǿǑrsE6ѳ[OR0 I~Ef]~e䚢e @v~ \Mϛ`?v+>ۺDWAՠ3bacLD9.=H_D)j[c:Ejo1ow;;9̭S+Kq. b*e6^8mWʩwgzE%*j5[UIR>;ׄD M ALKRn{%'躸;}k{/ҩ_G=~5<6^}~˱FkJWfjZVn,H*߻45DψIN&yP!*^H\]_5cYc{KNuy JN^E*nG,̓Pj ^jGL-XH{L.T83f;]w#b,#2y_:]Л Tډ?F܂ftd48/TH'l)82xc]똯K8wSFcWW,4cbM3rf䤦zFZM-h. )da̾-fw^pמ+v{rX< 8RM1Q-ԣ#_MPLGA;ᡆ6M3gpm$ &wMqВ'V9]fWIzJ«e7G_ ɢ]1Ϩ~FWˌuk6M@_2j ݭBOZ m^͵mB}fP | `Jap;W:@ANL/xo|+dAQ}o@({;S쬖s!o!GBQxxa}Yq0$Ӟ롣›ecs8&8\#~O'-ڷ<[vM`7jR۲)s4MN ?k2j9>'C .dCה. Uj*ۿDIh4ys-@AH)ςj#x8A$ x!%jMoJs5vP*\$ϐhYULݷlo29 2?+(0aThjO6krK{f<µ [/;/jՑrZxnĵS*Lǜ>YF Zy8 rHD9{OwkJYZ nA \@kYp:yƛ8/9Bե?M%!龴(ϸ-3j뾞7%I|9! ˗TR`_(Q>~ 4Fp0c塩q) P n1Ğ /w2NYjBv`` TX 6MY&Z]O^@AAXjesA%{LUT{!6qAF/5ȋ/J_5']oXU!qI\b-FMD9Hѭ0oϧƔAhu,e:^s~Ҝ Ѻ6aSa5!kqSm ?ϷWH.K؆Ayb G q Mf |9mfpSsQ a\C(c=u>1ں*(<9o>KVZڝZUF*zt)X)~38}LW?šD[cv,$c2V~Q Q]0~3fYč)oIņ^+\ؕN̕H;%q~/I2 2̚/kcBWgΘ8җUYv' E[7Ew{j0͙Vo9CPsC,QCQq[)T;k)mK 6 DJLEjrN%vC9 1^wxj*jAoF9J ѿW,%ѡyIaeHBiBȰ2'9\Pv.س_ HaRզ{0YE<&}J؉D;b@Ijp[ TBĝQXUNڰnNH4n"2<,)7(9z-mC"S2G \a: p&QZ_Ig_VHv;:rioR:ī P+6W٨ܵEcT%y7!{tp/' Euk=޾+F}yV1|(q,I#/ XoIٮh7i}K0$\%}>!j)9R4Bat_z }d ]ˮW)8Λt͙ZB7Gk%G#4wn~U~zf@fG~_Í㼉]G*616|YdhUօrPgk'_9@qKQSepN_1ɲCziƼ( u*cD>惫TYX,W3Zv0sXT]yi\;[`ԏ黩&*#Cu"],1*ADihHPLV5 l]P# ndlMN~n%,P.͚sMNU@`z&"EZ?,w;U;l ϻ8_&)j_qƓ #'5ވcy΅KF)8b-g}s=kt[&ޑU}+PEV&:)`̌Ai(htE͹_:`|Nڞ1_D֗k;(+~zro1] /lhGlߑ|qe5۴A;7Hg/A\*Ґ+aU™+eoEH9ys80piVaW@iS1hu~٘?ШvTa `;9keL#nG#[鍧 [u֦@ͦ؝,S1?yŭ -r[W*\\ނD]x/ qw -tZ,~8,HjӐMIGtv0AUY4r>S s6T*`FjkK6uF'cS'|hd8=ٯ *cį&gL8~gy閗\Slb{ l<{Fڟl340=\5u(GE@Br[ Lf.e{,٨yzf[%| cX$/{(R'j^GLl&vб_>}*PLK-秧K TaI=vqC<0q0z%ȝs`{xKjwqF c ;ħR F_F1;yTt~ #R'ޅ08'T[HTF-,T[E XI9>A@-ꬥSwEN/!2AGBMneP2Fr!͍.&ɲKǭkEn6Q ]H%Į^piU4Dw $^i$ۦN>i3[[B㋱}hZJ- ݓ{&L- ,|(KI$z={a_6d'aoFg}~q4z',.y n%q# Vͫq0ySpoDFu0/1I/lc@$K™5O!jXߵz;?4޺s|2 ]%Wy?-RΦ$l0[Yp9=4b:lg^~ڂ;DS:MJCV 5+uCM7i=/]g6 tzKx9F94|7`qlc{GI sxW^8=F5duӑMjj+;`GVY:F̥V乪UU!fyXI\DDFjz9aJIxyP}~'4׏Yz sclQcvԕE>X~uiglkU83F}wf=@-" }1qӊδ0+.G4Y:](*_=eJh߲;7( %:-]Q ,wu<,#/Hn=dmHmbͽ6=W*m^Ťppf>MK4~k .}|yxnKDKSF͚HN6To!MsԆ2?Yh;~zEu|- b^Ue8ҞP#|%)iMK$'f~HdZRR :/䃵 HV9X<˜) YCUW2Q|<$Iٟb/}LxzEN6fV;xǜ+(1uU'\";O;g7R$R 4$$fkoYک/"?njɆkiȋp6[5D$ kk>]B>`B2DaR~'ڵE#%Oȫ5~ bm1#51T > {!{8K.Y[Ihlr %b(\SfXY0qEVYRD oYdD6[[1Za?S ?-n-ɞŹa" D<ƪ1XXYX:(6V$ .] űt5.o\F7Op7P~3T%4Ȏhǹ `i7nW0O!1O,D'WoFI?`p/^{Y<ﲧ9Eu繝w Zp^}ej cFcik 8ЦQ]5_q zw Xprar\-Hac+qJ۴nV v&{<?p;Mmg QW BpDZ ~6D:GQ(r!_Y;j*Ύ`x<kE@]0űx4SF$c|'uEHTtI@9WX:fԃ>Ҙص+umH3'\(VŕD? GDF.z q 6MݫUOVyBZm@ݜO]3Dp˹`nT2 |<@(x-,yŦ.TWQ p/"jUOI1gtIZrf.Ɨ랴Z,\,Y+< +w2/KV}?x2w1Z mqrpr8K{81_qM|ZP>bmj~h3WE`D ;gBr֢D(0,!ᔞu&_ QN8j|W6D12*b/^s,b NA@7'zea4p=eEB:Feȟa9_=P+M ܠ /vw(5I@܂-a =_*t V$LgoƓaf#+86,.4-Ta9+H iɥxn!g8J)cCy6LI1*l 4,{atOT%~c}IMJ=!ӌyОT5]*=𖩵|,y<GPDZL߸^XF˩,ˣ:GSLޔҞJТsƌ1Cy8H2eEy >0!hب0Ô3l̗0^Mc*ވ'gA#PǦ-XJ٧ѩ1:|?Jۅ삶;KO5GY."+0 ^ɢK4"ƬgJqm BfX=%-&>W9 [j+..6<N mAgX|֟V5= qb&+NhL4B\F^ &/7 3U+YE/"S\o%ze1Hv-7l=q4O^!e.&R`_g| ̧Ґ +: +X3(" =v5K8s-̼k|8bnJn+▲89SPj\4-?R99!fn 'A]4 O@I'L\ i`#Q{u"&=ZKgJq.iG6{I@ۗ[_۽UJQYZ s7`_ `+t2qΐwsbM=xŖT*>ZrL% F>CrTW:X~3"` l~" m[ l n4THf))F˞W{D>M#Jܖ"P*gVk" 7Y{ۺ &+kLa1g=y.r#rC?Ǘpl9A-H]-{]g\~`j%,RMٹT-L'H7XyF%]% *>t [q}N`}ʈ{jsÔk-M,s `)NxsOdV9=#^SH-)a:S1>Fɗbuq=Ek5ST տJ˸Ġmr.e$!^<}!l80kS ,6 V(Ԭ0[:y2'*ig[*8c;9rsJL{gm3n.3D{3zS*wb^AxoM@ j~v]huz`|f OY Pr=;U{Ǜ_*+BLUpTƟ4y:v4Ƴ2cSJ-Du v}Sgk҅j]D({o¡VF-`V9"t~N|굊:T?mGxu@tx8Y1>r.5}8]b1.HOڞWJ6t8M [ALN ˦  !%fñ Np Vnj%-4H)`EtFBcwW{Q@ą#q}.-b0h sg LRl =XBsmu𛍯8e#`3wdL7M.ڪʙvW蔝빸6)dlPiF;ri{&z?.t1tNKoq 뒲bg.QumBv BTX>I vmTAg"S !Fh/C&Pg1 &Ud>0/oMu Q0X7:~#Lz˹T3̬BYP7geVzIݶ ͓q#F_kVԺBg<\x2H~STQyL[JڶV̈́53 U]i5m6vU{TtՙH Hi4g؁s$WR{Bdcz *ܽj" qbʀ^%Z]]WzڐJOE$8Ti{ Rr_圵g랁 'O;?U07lڻ|Z\QE `>`"Hw2( QfM~,1p)ΰQns< I›CAv0;c UozrԫIeұO$Y2̚4LpI!~ ӢuPzi<#f\#n(-1tkOgT.V3|DRcNO!;?T/DW6-S#9 dV>Us |sj2XP npPb օaF_˼7}(cZB[53+[xBz@HjܲI0H?NQ8qH[ J|rش%SaXǥ㘯5V."p ˹[sQ lE?4eBӺhFlI9 HAj=H6\9?8]w)\S`VӚ]=M `{Nt~=aBL 瞕NVΞ0t-݃![SedШfP+ jk\(<v8/-/In܋s+|5-<(v- B.~0$O#6VzWb/rbDF&C+VPϏuf^!(EɣҴ"@(ӷ,xþ Q.mW5H*@!ľatBZEU5]e_sj` XH{a DڃD%pK~! nSw'7+ #7];H%UE<uƝ1<[3ECU}R l2Q muR]j?y[Уpm@}oLGL.o{M2cCh}lH|} @̈g_EHO]39gI덺~0cȫ7kL,J]!(Dwr`+B{'NשvzTO8fZܝ2n;mI<, LeL)?I=`Mz jܤ+;Ӆl-EjOܱ_ՔfXU#Z{AT[ f؊bhtߔn#/wۂ;XuwԿ |Jh<R4KNFN^K`>Ȏм(""s-qƦBDj`["QH'ܷgV;ueQ?i8Mwf~6;R;>Kg ?1VȾ]WYھ9^Bnb }vC9ge^ ka7 ӹEƇ= ɆRkA*A8=hZ>6\dǢA4Ry rfVX(E@ vL$?&rTBJ NM OOߝ~>&\`K}?f7,nհKqv 奙PNOZHA/Iz}Oi1 G\וfY䤍J%7M{M5 Rb u;Wv캾nsy}6|3`) } CusR|7Ct,[ͲmC^#na'bJM*E\9ZP4# ѪH0jPbXf2 TXq/Bq~g)\2]RnX:B ! C||扒S;s낯!R"_Vßw*ܺ5ڏ5O@ HM E\^D&b+ZpdnY CL}1\v[hQD/bw-HX3W!'b#D 0A8@#?;_"0= @NCk/eM5^RJb09tm>>4 XˇDCފDyr(^nΔaaI} s0'2]Oc/?pFER^,+2 ɵ  ,O\SU :٤; ji$V5k2m=Uy@ǖګ?^8te C/g.BYAV^/0#s]%0QJVT\q8VRųyqX4&}hGba@fotc2Y!CRc,Nb䑖,dR92pwѱF)pԱ|ȲPq +:djZ'*0`8mr*NW/tDCN_H#iT̏AsmulbɿIE=S~^~Sm!,x7m3bQKUy?wj5IUHi$լFځ*˼H%9tp%Mi!wz S+,k=@ݦĕD؜ Ch|uvo- tZh|*ef!Y}\{&@1/Oh#,,̓eP_~lk\H%s4o k̯mˀo'?zFyL"ͬ׶  /Vנ*NE5,&PU%Ч/o|?wpgd 5bƵk26`KًWKjxm[#" D83ed>ϐ ~ ]PoStQ!`('{Uv~+ P$27SZ>y!AoSc;9qAyw{N/&{u}"h@ U5ge>ŁLg[vU幐M^"&{9P=!~pz/ ;_Lasog*+i2+6;] ƙ15eB|Lb.qa3? n {/4.1cVfc=0uA1`E49zEGA=;2G v bXtsPCَ`k='Kk8ABv%*a 7m]{=e`F}zt-a##^PN&1YNftao(y]jUi_|%aеvgɤ=n!vB6W:ó/mpbTy"8|3Bj g=67ÉGUrm} 3V0'/WtM!s]5yzw8+YW.Nhpa@MyT.+*>o͍Ϝ.ܔF[i2S |\g݈#kNRXRNVjÐ>- v:`0H 4{-Ajvk9^+^$#8'I&[`b#p㘍C7^_?kCD<O@\^=h;+'?sؙ<{U_ 渲BN,9pϿ1xG֮X ,&Vǐ /P}$JK#xEn,ZqBf7AO:kIx'OC 8L$P?_ ݕ0~@hC~S(Z68`ԙFb̖deqUo2vv,`=U?@4o` 4Ta}F<2:S GrܨI}q|!\43Y'N0_{!ƙ oEK 﫠:7@0x'ƈFN7@$niVlX_99GDcihR-g/B|1{fF=^oA9 W#Wd딿 SϿ?ִ;uԼ"3EJHl@8X.nF) *UxM)tdq݇bpkt3|!S)6\?:I;V@=W  iSloʆ ~T먈X%/Q#F< em\-we&z_=A\*Q. vp 1# 5&~~ϚeVpFƸ(N_ ~RInQ('#[()뒸LbQOzushHX-"_Ô,8J{Muu9F\yhDD6;QG{g]Q: ڐQFʭL 3K+:fu&~ިM5! |hԺ#2~ɜbAXRob5}K`_~brg7D6/n6]cT`>͡g=w`g= ?{o|wȁk WPDl$nh%̖[DBAؔhlCNzu Q>M Q`GĘVA99:Bo]0kA}!$`à;!)'[H-}i舊6Lbʫ\[ƌg TWu$«fMN({w}SX vTԎHv%[lLS$N͢9ge3]% Ű+uYND-2p?cr6Ҭ tH]I>Bva(;"sxzRM)] fN`|<}@ȵeo1`%,a]YY G6[dn~e}B6V;8FJ6j5>:+Lx{;T ->  \wtM٫dXڽf9^mi}{AQ|j(mM2XXדuQ!왺,rXy\f*yE[cS ?σX;~(ԛ$^ƾkt3K.׹Iލ  =R2׊Kk܈FrY~IHSy b4@E[ Qñʮ iN(S!<ճOQ(s7 ٥cH~R,s4yW#`?aYYxm*妊xٟ/d "n JaT%Q#SEj7|kƪl.Ʃjp*śq\t(E=0nX_whSzG~N."+%L5(ݵpLn_a,'Lw_L<%33uLp6=i Ea$r\;';1 U`LLMeTk}":E sϻfL&q]9F<)-jXvE%"YYdj:F7}ux ajA$H@M,MRzdɼkwb.q&q|ѦB dz37dO i+F_:ٮ˛NgDON!Fߺ9Q̰֔%03$ Qg߯zpبp&,7kT[C j'^;SA-mli D!EӼRk>w\˙Q]i{1{CPI##_M=s[M{lJ '5'fY;7c䙖BN˘1XS#M|"ӬPvW?=mע+#bzOo0ȷ|}p P Z7Cr \&֡`/ =Y\~0ѠJyS)Z9/၌ۥLRְ`a-^w8I,Qdo&|='5?YF‡y?" `2Ai/vͅ^M-l 4yVN{nI:;slK?XcS\J]u2+N{ T(BSn bGs’x=@=2 =laLz nLJe֏<{)Qd9TR?5n[$qk56%Ŝ(wBIôgI ,agP.--0VFlmQ H2lQ?LBOpѶf*x$)cP]&Kۂ+`6rPX=S o6/&Q% `5:m<fNOw'_d]gӃBCE7||>)q(*Qu詌m%wf<{wmq_Y.B,Z9K_oRJmF$$6 +%ufΟb[mwDI٘`rPKX1P׾&c&(<-fwg9%Ggj}uH&=KR ^gc͊^*[vxH!֢CMv53u1ܫP\$ZɺGϞYC-HFkA+EzBQw ÔHw 9pMи},-xLgp Dɬd 8l8(>:fp;PYttJ}XbG, 3f/Wq}<3DžJxALeb>Ma,% m?<^Ѝ+.W݆GO\w452WN{J9C{6;Ӿ95(pu"WJ ˣ_Z|!$9~~jN(b>:^ߜywb!z (n"mee/(!-l_:ټH9/JUNn!dGȜE+s{*KɎ}46Ryt$L׏EǗ"E}/;bȃyCD ' rS\ :\x/) &Ak ѧfFsgk, ]O0/]a Xf!wjougvTt ldlߗ4{kKq:1Oa|ȾW2onTOz^9Hmn6FOIPd٬P6PZJ᧝3ºD3j2to=X[Dhh AujvlwB]ZK}L'M]kԇK@؆vd(޹ӂcS`j*w_9+)dxEO]0YtwyɊ,WkItҍ0V0z%B%lC$Iwci!_ӑ@B~{cMl''RZ#A%֨<>P-AYwa%fM_ϔ×TS}[WR٦l ܽ?EDt~sQkf뮓nSYjjl pf<:ޘUc~;ZbgiT-~('Dޚ&fk N59a_l< ӷȈ .i*IZ멫wKŽ^VqTe]2E?G) oQK-e9\j"/_Bob?,>>dZ[dT= w53#C iEjU1{fsvEV}Xc YTj&tdPdI6PSܯ`V3_sâbu/M]q:[@ ɣK3 MYGy4Z2>0|g͘ )%whuiumoӓXƧVMeE&,)n)+6VV $҄G Ȧ+n7b!".͟㱅1Xy柈&G=̳4 "?s[=u~Bf(mA?{-[P,_ Wg&;ͿVq`q6q~Kˣs%72{G^Eb 2KӘG\;q.;o:|,Ձ:Q4WdZ&ξilg[k|# /^8뙲G㢆܀vn@M CDiTiA1`Q녅Hs>m!yR%)wS-NV6VXToI,e2@U`N32-Wݸ-: ^⃐7+`i`ed~Í_O ,F:G;M x-S|Ҿ3lKС Z5f;ޏO~%)ih41$8Bw%[)\CjC 6'MnK̈_x|Ϡ Ō`#gfjSalMz4X`k0C\xUwJ3qq6#ZcIuٸwBћd1[`"GfP(fd518/U$#DW?i0G2:fx6邏1?u9ze$K,3] YZ