libcompel1-debuginfo-3.15-lp152.4.3.1 4>$  Ap`N /=„(byCS4w*0o*fϮlaCEz|tAqV4ug5#;z^zzg$0[y`U˓dLW=:\p5Q=ȾܞK~f#S^-{? 53"R;ˀ'6`È$˝?lC,:` !kHRu.fv)%*-]_1tT}ږY|@Tؤ'L:v(+ۖ,RfҙK4>p@? & O #,: Sew}    , $Dd:(g8p,9 ,:,FGHI(X0Y<\]^Hbcpdefluv<wx y,z0@D]ptzlibcompel1-debuginfo3.15lp152.4.3.1Debug information for package libcompel1This package provides debug information for package libcompel1. Debug information is useful when developing applications that use this package or when debugging this package.`Mlamb17popenSUSE Leap 15.2openSUSELGPL-2.1-onlyhttp://bugs.opensuse.orgDevelopment/Debughttps://criu.org/linuxx86_64)UpAAAAA큤`M`M`M`M`M`M`M`M3a6c202dacd4c787b92d25915599c50edf401a5207e903f40469c166bf78e641../../../../../usr/lib64/libcompel.so.1.0../../../../../usr/lib/debug/usr/lib64/libcompel.so.1.0-3.15-lp152.4.3.1.x86_64.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcriu-3.15-lp152.4.3.1.src.rpmdebuginfo(build-id)libcompel1-debuginfolibcompel1-debuginfo(x86-64)    criu-debuginfo(x86-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.15-lp152.4.3.13.0.4-14.6.0-14.0-15.2-14.14.1`8@_0@_k8^^@]҇]o@\![[ @ZZZ@Z>E@Z7Y@YYoIYV=@YI@XXDXXf@X@XN@X)@XWڍ@W:WWaC@W;W @V@Vf@VMU@Uc@UlI@U?v@U#U@T|X@tiwai@suse.detiwai@suse.deDirk Mueller tiwai@suse.deGuillaume GARDET tiwai@suse.deantoine.belvire@opensuse.orgtiwai@suse.detiwai@suse.deavindra@opensuse.orgtiwai@suse.detiwai@suse.deavindra@opensuse.orgavindra@opensuse.orgaavindraa@gmail.comaavindraa@gmail.comtiwai@suse.debwiedemann@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.decbosdonnat@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.de- Fix the build with protobuf-c 1.4: criu-protobuf-c-1.4-underscore-fix.patch- Update to criu 3.15: see details at https://criu.org/Download/criu/3.15 New features: * Introduced criu-image-streamer * Added MIPS support * Allow checkpointing out of existing PID namespace and restoring into existing PID namespace * Added additional file validation mechanisms * Added support to checkpoint and restore BPF hash maps (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY) * Initial cgroups v2 support - Fix build with nftables package: 0002-Fix-build-with-nftables-installed-in-different-direc.patch- fix filelist mismatch after libexecdir change- Update to criu 3.14: New features: * C/R of memfd memory mappings and file descriptors * Add time namespace support * Add the read pre-dump mode which uses process_vm_readv * Add --cgroup-yard option * Add support of the cgroup v2 freezer * Add support of opened O_PATH fds Bugfixes: * Fix C/R ia32 processes on AMD #398 * Fix cross-compilation * Many fixes here and there Improvements: * Use clone3() with set_tid to restore processes * Clean up compel headers * Use the new mount API - Add libgnutls-devel to buildreq- Disable LTO on aarch64 and armv7 - Add '-Wno-error=deprecated' to fix build on armv7 - Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which is armv7+- Update to criu 3.13: New features: * VDSO: arm32 support * Add TLS support for page server communications * "Ignore" mode for --manage-cgroups * Restore SO_BROADCAST option for inet sockets Bugfixes: * Auxiliary events were left in inotify queues * Lazy-pages daemon didn't detect stack pages and surrounders properly and marked them as "lazy" * Memory and resource leakage were detected by coverity, cppcheck and clang Improvements: * Use gettimeofday() directly from vdso for restore timings * Reformat all .py code into pep8 style- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.- Update to criu 3.12: New features: * build CRIU with Android NDK * C/R of IP RAW sockets * lsm: dump and restore any SELinux process label * support restoring ghost files on readonly mounts Bugfixes: * Do not lock network if running in the host network namespace * Fix RPC configuration file handling * util: don't leak file descriprots to third-party tools * small fixes here and there Improvements: * travis: switch to the Ubuntu Xenial * travis-ci: Enable ia32 tests * Many improvements and bug fixes in the libcriu * Changes in the API and ABI (SONAME increased from 1 to 2) - Updated to libcriu2 subpackage to follow SONAME 2 - Dropped obsoleted patch: criu-asciidoctor.patch- Update to criu 3.10: New features: * Support Python3 in ZDTM and CRIT * Keep names for UNIX sockets, that are unlinked from the FS * IPVv6 support for page server * Set page server socket fd via CLI * Large pages support for aarch64/ppc64 * C/R of Per-thread seccomp chains Bugfixes: * Failed non-container restore could kill random task on the host * Failure to dump namespaces was erroneously ignored * CRIT didn't show cpuinfo image file * Tasks that got PID-reuse couldn't be dumped iteratively because previous images were missing - Update to criu 3.11: New features: * cpuinfo: Detect compact frames and handle noxsaves * Add support for configuration files * Add support for external net namespaces * Punch holes in input files when restoring anonymous non-shared memory ( --auto-dedup ) * C/R of + epoll: Add support for duped targets + tun: Add support for multiple net ns + x86: Support extendable fpu frames Bugfixes: * mount: Better handling of mount points propagation * nmk: Make collect-deps to be more precise about targets * lazy-pages: Don't mark current stack page as lazy * x86: CPU -- Rework feature testing * files: Fix O(n^2) restore in terms of the number of fds * fdstore: Unlimit fdstore queue on start * mount: Fix regression where open_mountpoint failed on readonly fs * page server: Handle partial splicing * ... lots of small fixes here and there Improvements: * Remove all magic of service descriptors when it isn't required - Switch to python3 - Use asciidoctor instead of asciidoc for formatting manuals: criu-asciidoctor.patch- update to criu 3.9: New features - C/R of + Tun-Tap devices in sub-netns + File descriptors which were opened with O_TMPFILE Improvements - Restore of inotify watchers - Restore unix sockets in proper mount namespaces - Print CRIU and kernel version also in RPC mode Bugfixes - Random memory corruptions during lazy restore - Workaround the iptables issue - Don't use standard descriptors when tar is running to dump tmpfs mounts - Fail dump if dump_one_file() fails - Fill kerndat with zero-s before reading it from cache - cleanup with spec-cleaner- update to criu 3.8.1: a bug-fix release FDstore was initialized twice (re-initialized) causing e.g. - -shell-job restore to fail- Add python-devel to BuildReq explicitly, as a preparation for fallback to asciidoctor (bsc#1075764)- update to criu 3.8: New features * C/R of - Multiple network namespaces - Overmounted tmpfs mounts - Unix sockets and epoll descriptors in SCM messages Improvements * Rework service descriptors not to cause fdtable enormous grows Bugfixes * FP state wasn't reported on Skylake due to a kernel bug * gcc 8 warning fixes * Resource leaked on error paths * Attributes of sit devices with value 0 were not saved into images (and were restored into default values) * Tasks with pgid of a zombie hung the resture * Ghost files on RO bind-mounts of an RW mount couldn't be restored * Random memory corruptions during lazy restore - cleanup with spec-cleaner - switch to https urls - list binaries and man pages explicitly - remove rest of static libs to fix rpm lint errors- update to criu 3.7: New features * Pipes usage statistics * Run page server as non-daemon via RPC * C/R of - SO_REUSEPORT option - IPv4-mapped inet sockets - Net_prio CGroups - Overmounted shared mountpoints - Non-broken and breaking leases Improvements * Show criu and kernel versions in logs * CRIT decodes socket families, protocols and types * Much less pipes is needed for pre-dump, which is especially useful for big mem migration Bugfixes * Files in /proc/pid/map_file could be opened by non-exiting name (with 0x prefix) and it was fixed in kernel * CRIU log levels were used to configure logging for libsoccr thus breaking its logs * Overflow in various IDs caused bad image names * Compat (32bit) syscalls lost signedness in compel * Corked sockets lost cork flag * Preadv() syscall was declared with error which resulted in dump errors on 32-bit processors * Musl compilation failed * Ghost files in / dump failed * Crash when releasing context for ghost files, due to free()-ing shmalloc()-ed area * Lazy restore could receive partial page and crashed * Erroneous closing of lazy pages connection caused restore to hang * Lazy memory fetch restore could start before tasks are restored - Remove 0001-images.py-remove-shebang.patch * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53- add 0001-images.py-remove-shebang.patch * fixes a lint warning about a non-executable python file being executable due to a superfluous shebang * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html - run spec-cleaner- update to criu 3.6: New features * C/R for files (except for unix sockets, ttys and epolls) sent over unix sockets * C/R for threads with different creds * Ipv6 over ipv4 tunnel (SIT device) Bugfixes * Some s390x registers were not restored by native sigrestore way * Overflow when parsing autofs info from /proc file * Dumps of anon shared memory with sysvipc one raced with each other clashing and corrupting image file names * The "dumpable" flag was not restore on shmem regions * Trash bits leaked into image when dumping fsnotify on some kernels * Lock/unlock of iptables from different criu processes raced with each other * Closed TCP connection with non-empty send queue blocked the dump * When --empty-ns for netns was set on dump only, the restore failed (Docker case) - includes changes from 3.5: see https://criu.org/Download/criu/3.5 for details- update to criu 3.4: New features: * Support for s390x architecture Improvements: * Unexpected death of restored tasks is reported with more details in logs * Merged many images containing info about files into one big files.img * When helper utility fails (ip, iptables, tar) its name is printed in logs Bugfixes: * Compilation failed on newer glibcs (ucontext_t) * Dying helper task could deadlock the restore process * Install-related makefile variables weren't configurable for distro build * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any containers * Potential NULL dereference when dumping net namespace * Dump via page server might not work across different criu versions * Failure to restore a subtask could be ignored by the restore command * EOF on page-server socket wasn't handled - Dropped obsoleted patch: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch - Add s390x to exclusivearch- update to criu 3.3 * Add --tcp-close option to help migration of Docker containers * Allow to override build time to fix build-compare (boo#1047218)- update to criu 3.2.1: bug fix release, * Restoring a stack fails on recent kernels due to kernel changes * Restoring on a host with LSM profiles failed- update to criu 3.1: New features: * Each boolean option now has the --no-$option pair * RSS explorer in CRIT * Multiple plugins in compel * Run-time check of 32-mmap BUG on x86 * C/R of 32-bit futex robust list on x86 Optimizations/improvements: * Start time is improved significantly with kerndat cache * Sigaction image is merged into Core * Unneeded stages are skipped during restore * Restore w/o namespaces uses host /proc * Restore w/o namespaces doesn't parse host mounts (not needed) * Single-threaded tasks do not parse /proc/pid/task/ in vain * BFD engine is used for more /proc files * More verbosity in libsoccr * Fsnotify dump w/o namespaces doesn't walk mounts tree Bugfixes: * Python bindings left zombie in self-dump mode * The last_pid sys-control was reset by restore * Threads caps were compared with mistake * make install put crit/pycriu to wrong place if DESTDIR was not set * Fsnotifies C/R w/o namespaces restored with errors * Inherited control terminal restore was failed (but dump succeeded) - update to criu 3.2: Optimizations/improvements: * Invisible files restore is de-serialized * VMAs restore performance is improved significantly - Mappings of the same file re-use the descriptor, not re-open it every time - Not-COW-ed mappings are restored in-place and are not mremmap()ed - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed at the end * More verbosity in case TCP locking fails (#292) * More verbosity in case VDSO magic mismatch * Restore or legacy epoll target descriptors and fsnotify marks is unified with common case Bugfixes: * Restoring fanotify marks from old images (<1.3) dropped the mark * Binfmt_misc mount could be mounted into wrong place * Compilation failed with gcc 6.3.0 (#315) * Waiting helpers could race with sigchild handler and would result in restore failure * Missing VVAR page in 32bit tasks wasn't skipped and resulted in restore failure * After restore consumption of files is increased (was fixed as side effect of mmap optimization) Deprecation/Removal: * Deprecated separate images for fsnotify marks - Fix the installation of python stuff: criu-py-install-fix.diff - Fix the build for ppc64: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch- update to criu 3.0: New features: * Compel library * Support for x86 32-bit arch * Version check via RPC * ASAN support * Force VDSO trampolines via fault injection * C/R of shutdown-ed UDP sockets * C/R of bind-mounts made from external mounts Optimizations/improvements: * SysVIPC shmem segments are now dumped as any other shmem (taking holes into account and sitting in common memory dumps) * CRIT show decodes socket's states and types and task's states into strings * CRIT show prints unix sockets names in more human-readable form Bugfixes: * Unix sockets' names appeared in logs with mistakes * Contents of SysVIPC shmem segments was dumped twice * Dumping of any memory segment more than 4Gigs failed * Migration of unaligned SysvSHM segment on Armv7 failed Deprecation/removal: * Exec action is removed, use compel instead - Create libcompel1 sub-package- update to criu 2.12.1: Fixes: * Content for external bind mounts was erroneously dumped, which could lead to dump failures or huuuge images * Unneeded collection of host mounts on restore could cause restore to fail- update to criu 2.12: New features: * C/R of external TTYs (for Docker C/R) Optimizations/improvements: * Sanitized the way the -v works Fixes: * Checking features via RPC crashed * Resting pipes in user-namespaces could fail on modern kernels * Shutdown state for UNIX sockets could be lost on restore * Dump of huge (over 2Gb) SysV shmem segments didn't work- Update to criu 2.11: New features: * Added "pre-resume" to action scripts * New --status-fd option for better control of page server * C/R OFD file locks, RO root mount for mount namespaces Optimizations/improvements: * More strict checks for extra CLI options * Report errors when probing locks * Restorer logs now contain timestamps Fixes: * Regression: v2.10 was broken on ARM * Use-after-free when restoring ghost directory * Array out-of-bound access when restoring VETH device * Page server exit code could be screwed up * Clang over-optimized string.h routines resulting in random crashes * Parasite failed to send FDs via socket on Alpine Linux * Restore of huge file tables could get stuck * Restore of epoll in epoll could fail * Errno value could be lost when reporting failure to restore invisible files * Dump of sched params didn't work on Alpine * Restore of huge memory dumps (over 2G) failed * Installation guessed /lib vs /lib64 with errors * Migration between xsave and noxsave didn't work for wrong cpu feature being checked - Update to criu 2.11.1: Fixes: * Page server start via RPC was broken * Fedora build didn't work * Ppc64LE restorer switch crashed- Update to criu 2.10: New features: * C/R of SOCK_PACKET sockets * Libsoccr -- library for C/R of TCP sockets Optimizations/improvements: * Logs cleaned up (removed bunch of useless, fixed '\n' in perrors) * Action scripts errors are printed in logs * Removed several iovec-s copying over the pagemap code * Restore degraded linearly on Xen guests. Breakpoints disabled until solution Fixes: * Py bindings fault on restore error delivery * Fd leaked on file restore error path * Fd leaked when restoring invisible files (gets closed with criu exit though) * Link remap restore could fail on kernels 4.8 and higher * Impossible to restore after restore error with link remap file in images * When going daemon a descriptor could be leaked * Custom setting of mmap_min_addr could make restore to fail * Sending pages over UNIX socket could race and fail with EAGAIN * Error getting ID of /proc/pid/ns/foo link not propagated and could result in bogus NS ID generated - Add libnet-devel to buildreq for dependency- Update to criu 2.9: New features: * CRIU can now be built with clang on all supported architectures * Ignore missing sysctls on restore with --weak-sysctl C/R overmounted mountpoints Optimizations/improvements: * Batch restore of memory contents from pages.img files * Link-remap type for invisible files is explicit in images Man page for CRIT Fixes: * C/R with --empty-ns still handled iptables configuration * SCM messages inside UNIX socket got lost after C/R (now dump aborted) * Empty unixsk.img file appeared when dumping tasks without unix sockets * Install procedure wasn't PEP-394 compliant * CRIU blocking netfilter rules were added at the tail of the chain resulting in unlocked TCP connections * Dump/Restore spurious failures when open() returned 0 descriptor * When dumping shmem lots of zero pages were written into image files * Ghost directory with more than zero ghost parents caused restore to fail * Shared mount could escape to different group on restore- Update to criu 2.8: New features: * Ability to configure CRIU build * Show statistics on the screen with --display-stats * C/R of Mac-Vlan devices Optimizations/improvements: * x86 can now be built with clang * When dumping files useless garbage was sent with descriptors from parasite * The clear_tid_address and regs are printed in hex with CRIT * Big code rework for compel (part 1) * Removed duplicate error messages from opening /proc files Fixes: * Restoring cgroup NS could use old path prefix * criu check crashed on btrfs mounts * RO external mounts in userns couldn't be restored * Unmounted on host binfmt_misc could cause dump to fail * Off-by-one could cause criu crash when dumping shared / bind-mount * Mount namespace' roots could have flags changed on restore * Dying tasks could erroneously be tried to dump * Swapped shared memory pages were not dumped * Errno value can be sometimes spoiled by RPC * Restore of netns with newer iproute2 tool could fail Deprecated: * --ext-unix-sk, --veth-pair and --ext-mount-map, by --external - Set BINFMT_MISC_VIRTUALIZED config to build- Update to criu 2.7: New features: * Option --cgroup-root now makes sense on dump too * CLOCK_BOOTTIME timer supported Optimizations/improvements: * Output of iptables command leaked into logs for no use * Helper dev environment installation script for Debian * Man-page updated and prettified :) Fixes: * Unmounted binfmt_misc with rules wasn't dumped at all * Malloc() error could result in crash * Device cgroup restore could fail restoring empty record * Some entries in device cgroups were restored twice * Potential crash when dumping cgroup bindmounts * Sign error caused dump to fail on btrfs partitions * Shared mounts with the same mount path failed the dump * Threads were restored with unshared FS (cwd and root) * Shared memory changes tracking disabled (regression found) * Restore of autofs can hang * LSM profile propagation could be lost * Mountpoint with lots of options blocked the dump (too small buffer for parsing) * External slave mount (with external master) blocked the dump * Mounts with STRICTATIME restored with others flags dropped Deprecated: * No reg-file entry for TTYs- Update to criu 2.6: New features: * Ability to leave process stopped after restore * Memory changes tracking for anonymous shared memory * Deprecation option/environment * First error message is reported back via RPC * C/R of More IPCNS sysctls, xIDs of PTYs, TMEM on PPC64LE Optimizations/improvements: * Use service FD for transport sockets on restore * Ability to turn pagemap-cache off (some kernels are buggy) * The criu --help text has become better Fixes: * R/O-mounted root could block the dump * Restore of cgroup.mm.oom_control could fail * Cgroup fs bind mounts were detected with error * Unaligned futex-es in parasite could cause dump to crash * When compiled with gcc-4.9 parasite code crashed * Failure to freeze cgroup didn't result in aborting of dump * Wrong ns list was parsed when dumping userns (invisible since nesting works only for mntns) * Non-inheritable non-tty as stdin caused shell-job restore to erroneously fail Error path in criu dedup could crash Deprecated: * Per-pid rlimit, itimers and posix-timers * Separate image for epoll tfds (target file descriptors)- Update to criu 2.5: New features: * C/R of fs.mqueue.msg*_default sysctls, Unix sockets with overwritten paths, and Link-remap files in removed directories Optimizations/improvements: * Micro-optimization on namespace ID evaluation * Restoring shared files uses one socket instead of per-fd ones * More verbosity when refusing to dump a file descriptor Fixes: * Restore could fail on openat() with ENXIO when multiple mnt namespaces get restored * The criu exec action got broken * Link-remap and ghost files remained on FS after restore failure * TCP window could remain clamped after restore resulting in connection lockup/slowdown * Dump could stuck when injecting a parasite * The --timeout option wasn't taken into account when freezing tasks using freezecg * Race in freezeing/seizing could result in lost tasks * Memory leaks here and there on error paths * Double free in xvstrcat (crash) * VDSO length was mis-calculated * Symlink on --root path could make restore erroneously fail * Potential memory corruption on reading mntns images * When restoring on systems with low pid_max limit restore could fail * RO-protected SysV shmem segments could be restored with PROT_EXEC * File mode of mapped file was evaluated with errors * Restore of cgroups' mem.swappines and ..use_hierarchy blocked sub-groups creation * Impossible to restore cgoup mem.swappines default value * Zombies living in orphan sessions/groups failed the restore- Update to criu 2.4: New features: * Generate core from images * Ability to forcibly drop half-open TCP connections on C/R * Ability to specify cgroup ctls to dump via API Opened/mapped files' mode is compared between dump and restore times * AutoFS mountpoints * New cgroups (perf_event, net_cls, net_prio and pids) * Memcgroup optional properties * Devices cgroup Optimizations/improvements: * Pagemap image entries are cached in memory Fixes: * Configured kmem cgroup limit restore failed * Mem cgroup oom_control * Cgroup's pids.max was not C/R-ed * Failure to write cgroup property was ignored * No init PID in pre-dump action script * Sigactions inheritance didn't work on ARM * Opened "/proc" dir blocked the dump * Working with iptables was racy * Sibling mounts detection error on dump * Devconf accept_redirects devconf could be restored with errors * "All" devconfs could be overridden by "Default" * Name-less unix sockets got auto-bound * Mode was lost for PTY device file on restore * Newer protobuf compilers didn't recognize PB files * External mounts could be remounted with MS_PRIVATE * Build fail on Alpine Linux Deprecated/removed: * Per-pid file locks images * Per-pid fdinfo images * Ancient pagemap/pages images - Enable builds on 32bit ARM- Update to criu 2.3: New features * Ability not to show payload for some objects in CRIT * Pidfile is written at the end of restore * Ability to join existing namespaces on restore * C/R of Data sitting in TTYs, Partially write-protected SysVIPC segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6 devconf sysctls, External block devices, Unix sockets with mismatched shutdown state Optimizations/improvements: * Relaxed calculation of AIO ring size * Tree-based search of tasks by real pid * Less mem-to-mem copies on restore * Saner devconf image format * More verbose explanation of why task cannot be seized * PID is printed in PIE logs Fixes: * Too many mmap-ed files blocked the dump * Potential memory corruption when working with IPv6 sockets * Overmounted bind mounts could cause restore to fail * Overmounted bind mounts could result in badly restored mount tree * Incomplete restoration of RO bind mounts options Deprecated/removed: * Greedy mode of pagemap (non-root) caused dump to fail (disabled)- Update to criu 2.2: mostly bugfixes New features: * "Post-resume" added to action scripts * Root task's PID in environment for action scripts * Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast * Serial ttys Optimizations/improvements * Lighter link-remaps restore on newer kernels Fixes: * Race when restoring userns vs setting ns' maps * Tasks with zero fds failed the dump * Restore of TCP recv queue could fail due to kernel mem alloc constraints * No errors were written to logs when launching helper (tar/iptables) app in userns restore * User-mode dumped no memory pages sometimes * Bind mounts considered not as bind sometimes * Two mounts in the same directory blocked the dump * Off-by in on /dev/tty{1,63} dumping * Forking of cgroupns task was done with screwed clone flags Deprecated/removed: * Greedy mode of pagemap dumping (on some kernels we do not support user-mode) * Removed the --namespaces option- Update to criu 2.1: New features: * Checking now classifies features to important/extra/experimental * Ability to bring some disk files into images. * C/R of Completed AIO requests and fallback gre and gretap net devices Optimizations/improvements: * Code coverage collecting now works * Use native rtnl library for netlink messages processing * Using --output - now results in stdout as log, not a file with the name "-" * Signals are printed by names in logs Fixes: * Make tar generated tarbal with bad name * CG restore code lacked rollback in some places * Error code from raw syscalls was treated with errors resulting in wrong criu check reports * Dumping task with HUGE amount of file descriptors failed * Task could be stopped after pre-dump if respective option was used * A /proc/pid directory from dead process conflicting with a new alive one could cause dump to fail * Zombie from alien session/process group caused restore to fail * CGroup fs was wrongly mounted in CGNS on restore * Irmap scan was mis-checking devices numbers * Use-after-free in irmap scan * Btrfs bindmounts detection was mistaken due to 'subvol=' options met * Propagation of mountpoint's shared groups was lost for propagated mounts * Unaligned allocations of restore shared memory could result in codedumps when used by futexes * Temporary mountpoints could result in spurious propagations * When aborting the dump criu could crash on use-after-free objects * Locking the network could stuck doing the DNS resolve * Several build fixes Deprecated/removed * The images from criu prior to 0.4 are deprecated * The --namespaces option makes no sense and is also deprecated * The --ms option for check action is deprecated- Update to criu 2.0: New features: * New code layout for sub-projects (e.g. Compel) * Unprivileged dump * Dump/check cpuinfo support for PPC * Explorers for CRIT * Added "post-setup-namespaces" to action scripts * Added timeout for dump procedure (5 sec by default) * Ability to override LSM profile on restore with CLI/RPC option * External bind mounts can be fs-root mounts too * Skip netns' internals on dump and restore (for Docker integration) * Advanced support for external files * More C/R supports Optimizations/improvements: * Align parasite stack on 16 bits for correctness * Compilation with native libc syscall wrappers and helpers * Parasite code injection done via memfd system call * Make vaddr to pfn conversion with one less syscall * CRIT shows device numbers in "maj:min" manner * CRIT shows mmap's status in verbose * Docker files for builds on all supported arches Fixes: * Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail * Wrong argument to timer_create system call could cause restore to crash * Extra tasks in freeze cgroup caused dump to fail/hand/crash * Unaligned restore-time object allocations caused lock operations to fail * Opened /proc/pid dir of dead task failed the dump * Unaligned stacks caused criu to fail on aarch64 * Changed device numbers on restore side could cause random failures * Fixes in mount points sharing/slavery/propagation restore * Race between mntns creation and fds closing in different tasks could cause restore to fail * Hard kernel limit on TCP repair recv queue restore could cause big queue restore to fail * Unconnected dgram UNIX socket with data lost packets on restore * CRIT didn't show IPC objects * CRIT didn't convert IP addresses in images * Logs from PIE code contained corrupted addresses and sizes * Not loaded netfilter modules could cause dump/restore to stuck on dumping netlink socket * Shared external mounts were restored with error Security: * When checking for namespaces' CRIU entered userns with host creds * Deprecated/removed: * Completely removed 'show' action. Use CRIT instead.- Update to criu 1.8: * Ability to check CRIU features via RPC * Pre-dump and pre-restore action scripts * The "info" action in CRIT showing stats about image file * Python API * C/R of read-only bind mounts, IPv6 routes and iptables rules, ip rules (it ip tool supports such), ignore_routes_with_linkdown netns devconf, empty bridges in netns, FILTER mode of seccomp, and IP_FREEBIND socket option * Lots of fixes, two security fixes Service run as root could allow users to violate ptrace policies Service run as root could give users access to privileged files and directories - Remove superfluous dependencies - Clean up spec file, as systemd and logrotate supports have been officially dropped- update to criu 1.7.1: Fixes in mounts, notifies and userns found while testing openvz - update to criu 1.7.2: Fixes for IPC in userns, venet C/R, socket buffers overflow and unix sockets name off-by-one - Add the package dependency on python-protobuf- Disable systemd service as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) - Update to criu 1.7: * Improved cgroups management * Support for seccomp strict mode * Support for stream unix sockets inheritance * Support uid/gid-restricted mounts in userns * Support deleted bind-mounts * Ability to specify maximum ghost file size * OverlayFS support * Support relative unix sockets' bind paths * Altivec and PSX support for PPC * Small PIE loader * Temporary proc mountpoint is mounted with nosuid, noexec and nodev * Less memory copies when preparing restorer binary * CRIT action "show" for less keystrokes on common use-case * Fsnotify log messages now use hex everywhere :) * CRIT output doesn't mix fields any more * Many fixes - Drop obsoleted patches: crit-install-prefix.diff lsm-prototype-fix.diff 4c5b23e5-criu.pc.diff- Fix version in criu.pc file. 4c5b23e5-criu.pc.diff- update to version 1.6: * PowerPC 64bit LE support * Makefile.local for 3-rd party build rules * Ability to "enable" filesystem on dump (--enable-fs) * Ability to skip mountpoint on dump (--skip-mnt) * Prepare to deprecate "criu show" command * External mounts auto-detection * /dev/tty (current terminal) support * Netdev and netns (all/default) confs C/R * Images v1.1 with extra magic at head * Support fusectl (only ctl) mountpoint * Sub-version format is now as of git-describe * Apparamor labels C/R support - Fix library path for aarch64 and ppc64le - Fix the prototype for lsm.c (to fix build errors): lsm-prototype-fix.diff - Refreshed crit-install-prefix.diff- update to version 1.5.2: * fix error in mutli-threaded tasks restore with --restore-sibling (Docker and LXC cases) * fix too big RPC messages error for service (and swrk)- Fix build failure on FACTORY due to comment-in-comment in google/protobuf/descriptor.proto - update to version 1.5.1: * fix crash with 4.0 kernel * legalize swrk API and add the ability for inheriting fds via it * cgroup yard destruction and properties restore- update to version 1.5: New features * CRIT tool * ability to request CPU compatibility on instructions level only * C/R of empty AIO rings * more detailed errno report via RPC * per-feature "criu check" * inheriting FDs on restore * ability to automatically move veth device to host-side bridge on netns restore * VT terminals support * more user namespaces C/R stuff See more details at http://criu.org/Releases#v._1.5 - fix installation of crit: crit-install-prefix.diff- update to version 1.4: New features: * Dump and check cpuinfo * Initial support for user namespaces * The docker_cr.sh script for Docker * New API for writing plugins (old one is still possible) * Service workers change their title to better look in ps output * Ability to feed socket for pre-dump and page-server in swrk mode * Page-server can auto-bind its port * Ability to perform several actions during one connection to RPC service * C/R of opened /proc/$pid/foo files of dead tasks * C/R of /dev/console * C/R of virtualized devtmpfs (openvz and future upstream kernels) * C/R of empty mqueue fs (posix message queues) * C/R of shared bind-mounts See more details at http://criu.org/Releases#v._1.4lamb17 16240020432e7e56e70c0f321f553caad69989b0fba5cf509c3.15-lp152.4.3.13.15-lp152.4.3.1debug.build-id2e7e56e70c0f321f553caad69989b0fba5cf509c7e56e70c0f321f553caad69989b0fba5cf509c.debugusrlib64libcompel.so.1.0-3.15-lp152.4.3.1.x86_64.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id//usr/lib/debug/.build-id/2e//usr/lib/debug/usr//usr/lib/debug/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16524/openSUSE_Leap_15.2_Update/2047c81a1a3dc65cd176b525f9ff5e94-criu.openSUSE_Leap_15.2_Updatecpioxz5x86_64-suse-linuxdirectoryELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2e7e56e70c0f321f553caad69989b0fba5cf509c, with debug_info, not strippedPĵNcl6HVt criu-debugsource(x86-64)3.15-lp152.4.3.1utf-81139947359b34444000c97267b7fe25cb18d8dd7caee7db3f8ddb346f362b080?7zXZ !t/3] crt:bLL +hev,!5j) _}h\:NiPHL ^T. O齫|x"k}Gr)>kNxJ_d[fq=e&vΟ-l~9A͟l t?K_l#W*^7'VM-R(v3^nmD"(pJ6%\p}FdQ \^]g׌g5c:v%{5Б W39jbY(RMK$ճS-7oKuyt[t*U&N,0.L8b+ N梍^ʌ\ ҏ+{fA>Ro曃hϧMuFyԕai,OVDN\#Ē"6b-4qVaqN ,!J9N78u0u ̌GԜBbJAB&OUf J];dfl_|p׆,,"[]rZPlթ_<^UOap|t ĢʉW%m+E5?^(v T}Q,=aњ }ױ1Ҿ/\:򀂏I4zIh|WwuIYO%E1>jqQ>4ΐV~ǃ_vi11š٪jk . YL˃L=cIKy%4Ȃj*\Jw$f"HroZj"4|H&_owNf#ߛ=mm]~؀\K:5p:SauIF疚J9Hrlf%8J٧#JC~]W(ʦrx70TAoQ>z\ zF/ԻŸYׇq"^?UN*Z)[Gh#Ő.-[ҷ*.5V͊w}B@tU3<g7Mv󅙮ܕ*sW~0$l2 SKqtK"2!62>0A'zvBL6WMlC|>zJw=#=,y$v>/q`+Q܏2zil{HdGmxKoz弘qvq nz 9jbb]@ -bP_aS\',1-'`5*`̣yw:N 4޶sB.V  ?J)i)dz `vTe%4#F!N)!uzv+kkkrX4Iy>*x)H*o8xQ7)8c^ܵgࣉ>/G.oY߮Fs5Q|Tyssu5"YY&S@vGgꂒ~l]‘cSd o'G U5i x6/"f{4\-B^XcaR#}!:-4kGJ˔ <{4|f<$46Bѳu0|ׂxn .f 'Е`ӨW'|L[A^D쮛vRSNwIzLo[eX9{z6X8zi.&ͰMqIemSK#8Ŝ,tJ"r_/,v-QH6ApOC&hMm[ O;:pTМ$ hU R8Lw~byApky)AۇULD9V<{aBpߊBJX3g3{(0C'UEX7w !Daq:u}AIlPn,ZH t,1 z'+({\O ~]P՚Ω) q뚌$O]O3>.=3nkin6Rm5' daHj 7!q! +<"dm/\\.'XVzOS/m`V&M[0=WA*ˎ󚉰ZT_}vj?H. OYUX%&%+`z-EiֱZz D4h/?TŊ eSGYdNFr0<^k!E@ydrLH$( ݁GYWk6v=o $EdP8da"˝{Q LXrSGE"@9 '[(;Y!0,%N>xSX %pt'M}X^g_:3%cD3eZ| M뛵dR2ʹK1 qEGE~Lp=.-TnBglPHӝIG<{J]p]dn,ì& ڱ&6]@S=Evy&` ϱ#D'ͬO?YA*?bBθM p Ih=2L`t;nֹҖz}JN])&3X7od,]P# +MaW&^v%~iJqxX+fYH5cx3/NT{Cahv#tU$ 2C43gg5d<<+ꍾ'[NqC1覤L)U+~7* / x xy$a#LEf `j17Q07/ ;=L ' h5%%ko[w4q RcwZ>#G6oFK!K2%ÿAS.WwLʢ`TcL+L#\1XW zcN8 C ĝI=*P4G,԰x7D̳=,]GtJōvqDdJ6-= 1ay(FϠht؀F*5U7**SΆ6@[uL#-Hg}{vs=z̺ʉ7J xzi ډ-VU]ׁ祐];B@ϙ;u9ڨ-8p)SY{ l6%WA/|L\IO)! CZޖУ¿LCU]*N"oBbH_ͷ_X&f6q'N8.tߣLkqVaÄNg9ԶB8e",W8a(X'qy8)+/O*ZZ2ELjI2ܵѣ5?(ogrGEܑ]b.)? +炣' .~HD@ܙD~+{NT+RΈ=7JD#n3qf7IɌ}s5p|f4S3s69w>CŰ2s@Wl*ΡA{Ňew^H@v6!gӎ@؀YPm]#oj,]oNd)B>Wwl}a b, ފ F~\Nm_T^ٟ1Ku@# H6"ao Cuc׽!M^ݕE@t,Ly$J9)(=&@w=ؼc\e(NuĒHK-kS$ڽmTlj~ :!  T2wiN~( ;]'ρ.侥=v kMB f1ʰzVV84 ×d= *Qxa0jHG &P;lkH>E[^ CM*aE;QY(ٶp0&7?=WkO"T1T!M ]Qُ#Bpy 1cK~d'I|;FƕY?[l$N5u/58ܮqqқ.:9AHX2Hܒ筂kGϱtjVi%Y|1+ ww$^S3RD6"T j,(_f*@| yc ̄t]jSa#FIϼ+7JX>h~ m wL7ɸLgŎır↗?RP1]H]1B &oKzP}YI  EnfZ|Bb] )V:v3b۞c(,oJ\SEn!%"-4NGyUWgO|[`/,=HL`zO}EXWZ'N &웲Val IRR|D_'"ŭ.{fD$=}ޑ Rx9Rn`|At౱D~p8L3'r*WLLy4hvjyJ"zQ L7+VqP2M0ĈntRQiR}ʎIϣ[?hj~_D!w܃ƵӔeO@l}Oq$8M;ڮO"h%)A`G{ErpC:iee^.! c ?CsKjO ۶NB}TOOv-P44ĬOk$VڤvGX4R1fXj}것'8Y7r-o*n/Hҽ7YsC4/,>1/ kU W6j(!S ]D~2I#a}ٌd;Y%[G,pS@Ynj?j7gOA Ovi?'%t)Mk;pmg Z(eKF?DP1XxN2 ˽UUΪsƄM(Rk<Z]R:F$jOr5R~y& YJha_;jA߰zCm-2I2Y|4bp/~ttr"<დ[˛<1,q3q'|Ef*v lz P'e0T.#"qϏd~n}toZZr=`U3x$%"$R+TftcJ.k>ak j YŲ]ϰЗ^? kY6V֨gXW'BDyAz(u1OOВΥJCbn{ULwQթ@W֦.kD'˲y=n\%327 /2GEhԡ>摺 .w4h_u=d$ oZDž,ކ-:6{ 1z}Ѫ Nma*i!6XZg@ ޛa KJPbb#R TkD] p hߚT l`XaLa;Іg]J./en m_\Gv+lx𢙂j@>򺟔^ϦCD(;*/dOW7bv`Dg/o8}cLAG4g1m uUtȮD TEӺdEFU- ݛ3c:^ AJYoM/-?B>Pϣigyn/i2$ L"?}/ 7&&<\tG `pPу(xƾ eaQ-jJQ6\,ψe[Ѻbc-ٝ3M7HԾ)z̠v# +w#0?DQ[&CxwK`CW2.k:] |5#B;t]ߤ`>pXDtOa\JPv} KN 4A!%b .?ud$(Ra+cpY"|Bh|\$;״^GLm66W0R*s[ 3p%s!Cu{26P敽+٫v"D0RؑWQ2)k*:;KUvTԁR4G ZQT@>mf9ǥWe& ;tJ}K, Y4[iD`21}Gs%tHDP(BQXR;̔V>fP5 .(;rPTVʗ|jc8ܷJ_.~6^-?DZEd߹؂XC-Rh))`@aE F1`/%Vh)δPidimRXj%5QYجc#7%꼰(g -3CU96o ެ5M ڜ6W̙Fon "Д^qxWW `%G#%Z4Ȯ1 =hBp@@n1 ^FoPD{L{%9=I) *1/FaJDBf~$puJ}r*҉2dPMqB %J,"3&]PZk#7RfkK'n#sV?a,KXoFٓ0l__73s9oF_ٰ"WC *q… o$:7 ~e)W.am*;oc/};Dj7!TUE0LX^_Hr)1>d vJ2PTN!"@FS ᒡ̕9);(8x OF"/inHUᅉ}r |j|Jݑfˣqsܭe52lZ$k~TئgHR tcVvhfm*1dhX4dTrC$YOʕ #m.gfM~?,)v\9kDC/Z1`U-Q"&a|chTJvM\c!dKj4KoqwmB%*8.O6$-ڧ8 ?kjx(6WҪh|=Sv- z.4R̋9͑~-{$P(` uߙwIUrRV(5wB~jP=(Q#kA[~%?\$`eU"Ah9i" RF%L sgVd9GLqmiBNȕbJR.Xa!֛AJgJ Hڗ6x6TƈNlqAr\\Y(7m?G[ YxˉVU!m"qV W;BF Id#gqGLe/p㼰V.-SWgE|9*Rm:lP&L0-j*k–yUw('PQSDZvNGQ[gn++ͳmtz) ˠx\E#RS%HmbTH: BlfcO?hOQbK AS<(vXN^ EE[.|2nco+;-^AhrPURABUt{Etұ$XC?|h-O2ͫ  6Ig廃d63)um"ص%oG%—10Fh"c(Gh:5R7K(P3ۯc<ݻVQ$ NCr{9B4Ub"k/5),>\F%#;ŨfjwmvE@VFhD YU͛WA<r~~Dbqy%3ֲ\|V/͕{n %~lphG$B%.ZQڗ k0\M}ֶ2 lR-acCt#' .>j6>=]}f|=>}F˄D IsH%)nm\4gASM~XL'jO$x+Jŗw[LG)S22$=dS[x"KۘV6Ӣ.8PI=O2y|UHHz{vЩD~+؞f咥3*|6rItUA'|G6b 31,9es|F}]M%H!gE ZWKn5 n(Y-7nk55kكM&]^TNƟk7R;mBmW܄8%f%`U`Lqw_519^զ0p~nI6qI||F&10i WynKI؇ei ^y^UlVevu;:Bkb8DkC\ˡ3sR١y'46B<{J ׅ?>Z?*K7F|cN/WoCk}'ܘdSK.8=¶%C'rbQIdck*q6tO'hDɩsM$SAŃ!"]"0R:9`u h:Q|}J | ȱF@ LMjCJa\' hjXf! tyCS.oc/T&R3P\o<`j1kӂ8lJ?cYE'.SoUHYj;wX}&uಌ^J҄yOggg+qxl9ЏЂ#(Y81g aa"Slb^m,XQ'a{f\N*T4_9/MxƐwDhQ>WF~2B [` ,hbp#.cX0Hy֛UkR=fb~buJl _{ɺާVb!KEI ni?fgA\֎AC%QկYA 4QonDNm ^*xh6`jMf[&ĺ]D餜>;Afiݠ Qcgy<3A4üAaFOix7 ^kc^;EÝǁkej]h*\5o6)J0^<^#  >c1tLĀlڎvME_G!~܌塂3R.oޕ M$7o*M%@y6x}ut EwԞ?ҧv7fz0\_x%bCg 3 VCIus۔Ix$Els(}T=A};NkQZ8gaoAu17#N?[n&}X V?^&ٸF0nz$Q%Eh12 p+L|¢nNZo@[k'nQۛL-sĚaOፍ0U1+!ȵ{fLqWK?y]M;6ӑ/Gu@/0c`ѱ7Y,U EaAaVF}y`0DG%; tRQ;ՠn+QAXcL=jpa pr `ECPig|ψ6YRkpr Y%3S{ u4?JdMUlZ&Byi 57NL:OgsG6Zv,e'eqo?C-OL_UL)5ǕvJO4C 7* f$H0*52#rf41u_Kv/ʜy5[&ޝU|VKPMj*|p 0HZG~G&jBiy ]3lD3a0P!Kq;\j!u0=L8!>vQ#<$4HQ!S6bꪫ Ț O g$p*}n)2Cm\tnPPe8qi H:GK 5/ gBajqiIo8z^iϧ,t?5#6T8 6T=S_[cwud $]䚺qixK9(zSKVuB`v+/=u"J qM̓fn׉AϺH kDTu)̭r.| p$R(&ur`JܩJuϡDl4*,|ibAqb 21- G_D>aD<zKb0 MMg즊α0$4iSF2Txґʅmj,7}7w`C`_=_R7mW&W>w^B~x;ڤpw 䮉vqO|&ȱ-9?r]m[H_+3KR|=op]5KJn#E:ּ>H*VE86;1wVAJ)nUw++>CR_kk^; `԰[lGnm^bd"L7SIɁ r%bo濻;bqS ^ar,<7|gc DS.T6pA mtMrk%gn)*ن e)g'炲P3S}pƇ̌/T1Q0H1Ut$_@P:MK$2W/n%2rHld}.40XSfΥ3cz|CԆșK `m^^"-?U,)%TQwg-A|EѪ䨛=;"+4P9QʸmB3p #h eRLO.iPˡPZAdqԋ.&謹wkbT1>L֓LYއjdߑk&cK?gw>?/Un]h[`Fs`f^c^:+(V8 'K$[2+901t:-,۲}i&NrJG㺗aL؅4~IhV}ZHN>8 ay3Yj`ڇP)MFVLE98 Jt'V4lsA4bPk@; ƴ כbwiheÎ;"+4L 3e멚ݫ2=fl ;w5G1iS1,SvEkAP-`LܑVlˑ-?0Y!`>  ?~o ܌3JjL>Wᅁ|UucA7gX.Ugfm \_hDu>x%›ѱXJ_8u;'*agX :(YZk$ a×Is*4_O/%gN>k8Tbd2A{"Z;::6uÕ3!!,F)0Z#E Xx<:yh$x-a;v>-V آƈp{ioDF uaA.`"p9ȖRRִ7>Zr\ P╬HmJc;1J,~es`n wL&|8BQKb?4^4i.Zc~ g%!p LJ7#Qy"1?;RΚC %ݣ_,_%s%^Y]{k2g?3^;^[;gAyI%^Y˾0`|pObU\lt8Ys4׌7?eĭ&61LZxKܕkf>2aU+,TaRU0Ӱ1$-P㤲`k5!m4+e9%y3F~uL#]MymٙS&b`+x RQu20VHx1|ү\5@l(@h0ip5mnl <cl@=)e HENْ@6I~#Zu p^e.&!n sb@0)k?{(,sts:#AuźmI $.(Zqm̝qEfNj1x ")ҕsI8yl&(wmyota"ݩ|7 ֊d3׉3gۚ_9giKvb^r2̶:PWlP M^bkWx!Q]K6;p $VoX﬍ylE$Px4ӕ ij)˵ȟ@AO5Xu./ͣᏚ[9%mw}56+h4eSir$e6^?pY=_)OnI"%LPTuiޮ5ׯRƳıY;fܔZZ:[ʽ2C,-Ҝ_X^c |~ :7>(Tw,h4ԈnroGbL+j>7>F\(qxebH( LM~#4*Qݫd46iq3䑘oN"(1;!0jƐ=aFхd|0 [Q4(XSa50 h=9-ktX06{*By\GqQ+ yKcZ[+V.`yslŋҧ5[" ;07Ք3ߞj9rw4bKa{DwO3iİ,Z \=}(F hкHU>, A1E]=^-k nV 1qsY%6?~/ QqYUbċ32ԑK.1_)De/:3X6툑PR 2̨Ւ41;,&xՒbZLUOvh"OS\IyPNrxT׏vsP4CIE=(~x M}5p[#+A{4@\XIZݴ]f[> &0DQ-~Ӱ _U{QLN]I \mBJ ^xo^7B,7xPK&&Q87%(f~ Wݶ-w39(հ[߀V/*Ɏ$@Y>Q7uf+Վk[{tg 7Q(tPvЈ3fW@z;d{\a84q6eNrKƿ+Ey2ۀHʥdīر9l;G.} 1j+ϡ[`X%?|='ApB$3 rĮt'g5ȜoD]#$g]3%Y%x0w8uMŽA ZM7nl(EDzSC~n9pi jkg#S=+R[}uW7eVh9/*|== >`VC\'1HL)\IOAXӒ&8v#3fٴ|9K7#r$ 0~IJn3-'>i4l3fr.9IAzDcuOSCB`dӕܕ"rС{2.PxG/|'+0_K0)}VǂWPVU&(%z`_F~xc&cXU.P"u9T Day4Y` tLWn-0DWH+$/+V9;6Y3zT85!Dxri䖋 ϼӾ|l ~XP'M{،蠔E c67G0e/Ip2[093 et8IZ  \Tw86S=P\MS&u=RVrc|3_%B/ݬYe@Rooy`aDxĈ}[?Л&ɛ w$OU8wTlWSC^#ygu^2~9xB 8$sn&4)?akfY +vт1@48?ObXN6gXeZd0. 8J,^mcU H!΃ҢVPE6AvF]J^sFNK\pV쎲,m#$G]I0cV#,YueTfo <֧OV3=57diV(埦7eS,){u-ņ.V UrEY1S<"\:[:5ns/Q:hERd!ʿՏl/ugck5-Z˓)xZn*W&?vC)!$=;g:$ZNkhcA%+S݋xםYqbC"AM's.{FXE(9-MjY v_ m:je۶Ԛ57@l~_5p>l=/xTcd׉Y%PWsK(7D:ondY_ (O4޵xTLQCbmc#D9_$cUuޜ`Ek W-owJPO?}]ڼ9y\)/z)4o*rC +QV!Fi.lwL,c-U*ᱦ|l㈴bi-JZs| Cl›gmqbң5Aw"}1#3\ 601?wK4%TOFʀ-PJreHPQ@ǡ .8.DO%T#"&'NUu ZH=m$,/vT.Gɣ#,VM}]E>K+ 2?eQxJش`>!ҝkr6ι<'0G2gX5.-[hlC{vN}hwڭ e|Uygp\7-kⶃksßN55׶7?^N.[hq0`|TkBZHHey`"w6*O|XYX[F/&vݧ)&h.r%LXTf w,"KLO-Q5|T7\T5_ŃQmN Aళ[wJ^>AQyINʅ^S,֙!O:7͈QwplMpV(EE~Ir,CpH;i[+yξ u9!s=6IoSJU>~?Eä}2Pl˶KS/ P΍ɜ ۀ툲R c@)թut-t13uL: ņ2BpI&Ze)4AK|%_?LÔsveg-OjD ~0ݞX5 4 7ܞTa/Pwr!d/qx:(#U1픛Z#̀Q0@yxił38Ef8a^jm=?mq.a*{qDv8[\CzO3 A:&pcitu}8eiSR/8oGN6/n!$,_*B\] f\qr`hu,FScZv%H%6Ҁ ɏ#W,5%*}aFjVijOQ6m(oe:>g{ݩ'chhcCb$n$8q4gz=,n& !qЫ^](1j9>XCh䉐 ?qގK,e*U2yȥfaLhS<; D&?!Vqg;`R\c+^"/[W/IJA+[lX0*]eַh"'FwtixY tfi)M* pQX (60!p°5|T Dbc-㛶;y/Ш瓫Tw.9 2!Rm/g y3D ]#rYTKvɎ(HQ9 㺺'$bIMLDuY8g aAjr~Ùz' gCο9_GΟ{&56HI >  yE; ͍JʝKiLR)S+, ʣ:%2"vZg~[gSӈ]:9j٤8)yri#V KB/ī:NZؤ '78Sw&d_}p|W*Zߓ=F qN7+qlO.V}7s6nR噎1`bK#L :f,"evaw{,,A@;ܶ=mN1&3âRE=,T>a $ '"S&){ 8 ; WNprlUYFؖmN$TX#kaAJU9W۱I3#T#/aU4Y&udHD_no6}ЌRz`^gm}=05= Q*lRL.xY^]`nե_ۇTo1Վq7౶&g!2WҪnC6/F{hPgCُDNhcZݷgmaA܅[CuT_rɏH {̗)Eioj?÷"A)E984~&7&SѴuX00tT|HCp )|\ZCY8c ?jg&= ߦ| 8 :&tC~0`q4&KL>/AQB]')$ \W'ߑg䜸)NO(]Y )‡jc1-nXrE_3 џ-Vh 'Q }MtUe"Ts޼"|.OiՄ/EBQ3\UƯJHаֆ]Qxx h mbD_nEw4gC بXU^Oo[Iz)6ƾ.PeAA oUeZ)2-/LTDH>-1[. 1u[X:Y;Pī<7?u }.-8>mp]?idv翊\9&$8Yq"e3} Ǐr8 6E㬯'z@R(*nJtckICЍ:$)]W*+t0n3/|jȲdwؒMY~s[A8=96ABe&& Y`kPxgQ`SoQ!OǠvA}0k$<tÑޛT\Hem]d7$J\OYD`  ɥ*G:TU3$ )) 9 5ocQP N#9 -P{4K6KMX&rS }htEctuasؼx/r^W'.=@DZ@o2$e"i kߟAQJSX~rzfJU:0i$u" v8ڔv9#w …7G¯షk-7x䆿6V@NS1ø?4eL {'PePKue~VfB囊kQ^iXbFS{-5$G>Ҟ{ѩuX[5d7mYq2GiNi)߯MB0}sW?8M kV%f)܇lߪij?ݧ3G!3]JOωM"it#@:GJ}h2^. 2z|٩Q̄k}Z2$ Ą!:C`ڣ{[LU*j܉\1q`8k r0[ꥋt{߄ez.q?>T5̵pJ(`MV>O.VL(>^!Yb#jR8AL.m^W*%B殲)c6_pKmH1/ ܥq3B@|-dda=]i/C 5H.̥ISeWCXv0 o'BF6;Ir1j!Z?N>DnJ.4' FcEQN#*Y>sV /$eq [Մ(t]60q;&lVo1;~(3 >牒=`ь>⇖Jq9rENbTJ 䥐rKAE B|EG[|S$I*KΘjv_1,} 3jD.{# :9^/כ $QX Uu"ׯ͕82VxbV rs t5\Z緐.[ Z+Z57~ qVSE*s[n#+}RmOw,yFA MW`򦉁d͖T lNX끞H8 #͈Bys x6cAq1' =X; 0TӗV/oj*ULŁKk:`{FOkmF`zc8?T2_Z]!BLl`Ø' ^ى|H$eZʣ4MJX431,gpFY},)OA:YeXs mʰ5yg)i7[;1M6BDDՖ8m&bDjKZt@`'4@?FnB`ċhp`H#,}~ a]K&` ogN Z!MM/gag*ʓ# 71S@\HLE>` #PejjB'Ԅbr -d֬A6oO(zzz՝т:ͧ/ڣ)r^ܪ$Qً(n7V"NQQ׾|]'¶"vܙǔ0Uy>c=T+rҷd͘sř\|1%1[tZ110qIέR@}?)!c6ޞ"3F֜8a:Y jJ;7&ƑI.2 seF'@'/"g`?vw =LAq]r!uՉ778^`(60-}a2:?av'c{#MaÞX ^*f0Ē4>~@ q]c`5k| ^q/Ulj_z>_96 ݼᢪ{ٙ@GڦP%U8sXDy|:%{=7 ntLjE*,1-nAJc qsP=5<334BUe*tW<DH0 ŠEh$xP[Bj!(h- *~w@l&[xotꙮ,|WH^z/<<5@2m:?)ZӅgf+L<ѤLؐ9mѥ_H6Cd"%c~g{ ,xR(8Be o|6ڳBP-%y!N}v澔7̵WJDXȼySi{XbV:%=$k - Q8Nnce٫_ f@ҲB4geMvf^ RD m4cBɢ#s ,+l|,1MMzDmаA/xMRc;P8p{Rw sZI3[Ŗ(|D*peӋWoArhA|TSַ`ac>KL5?3~j8ꦟ4.pr6/BuCX:µ(VRS%xa#vjv=1D~TA+wϭ$u"(K mle&mܽ=Ur MD^ CYk ԤS[rK2`Gq3iO9s2{={L?ޖ 6Pk[Rt2SA~0 Q=f)~5ą:1ԩY5XsWƷ%pwl$Ay!ցmۣjج3*| HL.g>GC ,OMO@pa\^h)r[!c!1;4lz& Z2Qf@Dr I^*1Lq:Apacqye 'N"p:`XkBc [XWQG `kK 0Gi3 zkv,>Lqts8Q@ `f˙i̸sJ0n6<|zj&0k׋I6h,|K]ΚV :kfRJnhEp4/RGEFxObm3&C<9K4i&vϒNXtW0L:١$^~Q#GD#03Sn&< z 9/œn%;pwd!kTLkpLZKg%Otl vpd%Տ: JTWo#Ճ ;53@TLL}HYWPOOaS$`K\F:n8Nv-}HzVo,_]􋵸V亟,Ypxk'c!RfZ!WĹbwW###y\[Sh.7( )yPFk.9(Q6<܁&֛[ @e*O*m/c>7T q\?JE>$低T ,pȭo5XlRTM3Q9Lh= k Pb;r5Mli`)Z}>zDuA?&y/~BNtEQocV$/Iu>Yt .~`>YJw1Q"dn\D|P n\}C[a#1ʻ'!5k^a$Tr$߹s ke#ni\KDX-E͚c#4rͭ#/pd Kxnm.O4i&=gBS_ڔN\z痢A`YeCUOoՏB'u 3NYf`^h(zJ뤉Mu(f`+͟8HY$w'ɜc$> 6^{ }#U߆NlR`{c@䵧^+akM=KU-pGJYz|iN]bz-ÔB@غj͈QzDkE!/$@)4zO!|OsO\UtjH,VgDkN] ^4/ƑJ#薱+Gzlz{У[X8왎[\"F,ۃ+b?dY2zL/Fak4Fk56G{] (SN3nj %`X_TJX)M("z=bUF,?{ۧQ֫LN ~榷(W?٘oJ- %PfLMXT="IVHDQTDt en?DS<;->>m.g%~eM`'y!c_8 v0rYõ|L iA<:I9ꙬhQ?DOȍpW\× :ι.ԝN&p@ksgP#i 為rgX"@cgbNz! 4RM{&c gw:DI]VPVgx=1NrLBQ_o^'O܌(MRk)Imn0ɍ -8qbaH}8$7m 8JU C60$bԽAYpolx#CV 'O" ^[UH*mZu5P*QÐQȔW\xfSϳc?GnT?}˅GWp"p][Y.캸c=yJWIw{w2zדRQNƚ0U`,N~Ęp3tJ%n 1 w K-'-_g: *QE|P!^0XTĺN!PW܄dXR!'# +Lk!lcU.dﭟ+@O0 $T3_Ο;<3[rm66eCh.I[E+dGEƆ D c+8#DT![Ku C%٘IWnIⶽdp5Bο{hTDq n+ZmfҳO:wF%`c qzӷDf}JCcs,rOtiG*hfwyܚNY`Gz]@TTJUJ2CؑaYC%GO(G*THHfMXL #[՛?΁l8ߘBzy*i zw׻G?&Ԯ*ܝ^?/R_:)˩@>dzZBC@> <{-\ricf:}`#@pkHJǻ ēO K`lCu uRWZWp\ǖu!*]4m'"3d?y>YRUz4Gh1F.+)l }lɄ1ekЕ+A,w'3s#J1d5]8- yyǘD3| tg yݪ2\ B[hݞG_|f2Kp{gdyAŷ .㞓#i') Uݑ|ɇ2mX$oQ,.#ͱߴ~jaAdY+QJ풙"$TYfQVJHJ.Iu~a+<0C`D-gtl `Q#+4>M6Ec$3fjY{yul$#r j(<ƜhƋbEv}"#i Ti /TGJ ^}J8KhoƤ6FӎŶ YZ