libcompel1-debuginfo-3.15-bp153.2.3.1 4>$  Ap`N!M@eee<Λ9Zaز3/4GIQ:݉?`˂H; { " a ._퀴<si>]`b(o c'fWE>T(ܶi>\41lkx޿06ce47085e294016c1fbb655a44cd706171224cbcc905560a8ba0cc7e99f4d96f9963e01df780fa0fd5d25ea55bb54c689e4bd9ad`N!M@eee}Oc{ـhu(&i$8;tEGBo# +<-z4=4_4yz@wrih*d'T*sNttz924*#P gQxڭI„`}ϤLdfI6v%R߅}`-Zl(ڢTr3t:_ncg zxJ?d_$WgQl!J,zd{Nݰ< dFNZ|<j#\}>p@? & O-6D ]o    8 0PpH(u8|,9,,:,FGHI8X@YL\]^Ybcd%e*f-l/uDvdwx8yXz\lplibcompel1-debuginfo3.15bp153.2.3.1Debug information for package libcompel1This package provides debug information for package libcompel1. Debug information is useful when developing applications that use this package or when debugging this package.`Nobs-arm-8x8SUSE Linux Enterprise 15openSUSELGPL-2.1-onlyhttp://bugs.opensuse.orgDevelopment/Debughttps://criu.org/linuxaarch64)Vx8AAAAA큤`N`N`N`N`N`N`N`Nb15306dc368dbc1228b9b4badd9fc202e116e1335f684e8638474edbc6a7b40e../../../../../usr/lib64/libcompel.so.1.0../../../../../usr/lib/debug/usr/lib64/libcompel.so.1.0-3.15-bp153.2.3.1.aarch64.debugrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootcriu-3.15-bp153.2.3.1.src.rpmdebuginfo(build-id)libcompel1-debuginfolibcompel1-debuginfo(aarch-64)    criu-debuginfo(aarch-64)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.15-bp153.2.3.13.0.4-14.6.0-14.0-15.2-14.14.1`8@_0@_k8^^@]҇]o@\![[ @ZZZ@Z>E@Z7Y@YYoIYV=@YI@XXDXXf@X@XN@X)@XWڍ@W:WWaC@W;W @V@Vf@VMU@Uc@UlI@U?v@U#U@T|X@tiwai@suse.detiwai@suse.deDirk Mueller tiwai@suse.deGuillaume GARDET tiwai@suse.deantoine.belvire@opensuse.orgtiwai@suse.detiwai@suse.deavindra@opensuse.orgtiwai@suse.detiwai@suse.deavindra@opensuse.orgavindra@opensuse.orgaavindraa@gmail.comaavindraa@gmail.comtiwai@suse.debwiedemann@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.decbosdonnat@suse.comtiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.de- Fix the build with protobuf-c 1.4: criu-protobuf-c-1.4-underscore-fix.patch- Update to criu 3.15: see details at https://criu.org/Download/criu/3.15 New features: * Introduced criu-image-streamer * Added MIPS support * Allow checkpointing out of existing PID namespace and restoring into existing PID namespace * Added additional file validation mechanisms * Added support to checkpoint and restore BPF hash maps (BPF_MAP_TYPE_HASH) and array maps (BPF_MAP_TYPE_ARRAY) * Initial cgroups v2 support - Fix build with nftables package: 0002-Fix-build-with-nftables-installed-in-different-direc.patch- fix filelist mismatch after libexecdir change- Update to criu 3.14: New features: * C/R of memfd memory mappings and file descriptors * Add time namespace support * Add the read pre-dump mode which uses process_vm_readv * Add --cgroup-yard option * Add support of the cgroup v2 freezer * Add support of opened O_PATH fds Bugfixes: * Fix C/R ia32 processes on AMD #398 * Fix cross-compilation * Many fixes here and there Improvements: * Use clone3() with set_tid to restore processes * Clean up compel headers * Use the new mount API - Add libgnutls-devel to buildreq- Disable LTO on aarch64 and armv7 - Add '-Wno-error=deprecated' to fix build on armv7 - Exclude armv6 since criu/arch/arm/bitops.S uses 'dmb ish' which is armv7+- Update to criu 3.13: New features: * VDSO: arm32 support * Add TLS support for page server communications * "Ignore" mode for --manage-cgroups * Restore SO_BROADCAST option for inet sockets Bugfixes: * Auxiliary events were left in inotify queues * Lazy-pages daemon didn't detect stack pages and surrounders properly and marked them as "lazy" * Memory and resource leakage were detected by coverity, cppcheck and clang Improvements: * Use gettimeofday() directly from vdso for restore timings * Reformat all .py code into pep8 style- Fix build on Tumbleweed: Add -ffat-lto-objects to lto cflags.- Update to criu 3.12: New features: * build CRIU with Android NDK * C/R of IP RAW sockets * lsm: dump and restore any SELinux process label * support restoring ghost files on readonly mounts Bugfixes: * Do not lock network if running in the host network namespace * Fix RPC configuration file handling * util: don't leak file descriprots to third-party tools * small fixes here and there Improvements: * travis: switch to the Ubuntu Xenial * travis-ci: Enable ia32 tests * Many improvements and bug fixes in the libcriu * Changes in the API and ABI (SONAME increased from 1 to 2) - Updated to libcriu2 subpackage to follow SONAME 2 - Dropped obsoleted patch: criu-asciidoctor.patch- Update to criu 3.10: New features: * Support Python3 in ZDTM and CRIT * Keep names for UNIX sockets, that are unlinked from the FS * IPVv6 support for page server * Set page server socket fd via CLI * Large pages support for aarch64/ppc64 * C/R of Per-thread seccomp chains Bugfixes: * Failed non-container restore could kill random task on the host * Failure to dump namespaces was erroneously ignored * CRIT didn't show cpuinfo image file * Tasks that got PID-reuse couldn't be dumped iteratively because previous images were missing - Update to criu 3.11: New features: * cpuinfo: Detect compact frames and handle noxsaves * Add support for configuration files * Add support for external net namespaces * Punch holes in input files when restoring anonymous non-shared memory ( --auto-dedup ) * C/R of + epoll: Add support for duped targets + tun: Add support for multiple net ns + x86: Support extendable fpu frames Bugfixes: * mount: Better handling of mount points propagation * nmk: Make collect-deps to be more precise about targets * lazy-pages: Don't mark current stack page as lazy * x86: CPU -- Rework feature testing * files: Fix O(n^2) restore in terms of the number of fds * fdstore: Unlimit fdstore queue on start * mount: Fix regression where open_mountpoint failed on readonly fs * page server: Handle partial splicing * ... lots of small fixes here and there Improvements: * Remove all magic of service descriptors when it isn't required - Switch to python3 - Use asciidoctor instead of asciidoc for formatting manuals: criu-asciidoctor.patch- update to criu 3.9: New features - C/R of + Tun-Tap devices in sub-netns + File descriptors which were opened with O_TMPFILE Improvements - Restore of inotify watchers - Restore unix sockets in proper mount namespaces - Print CRIU and kernel version also in RPC mode Bugfixes - Random memory corruptions during lazy restore - Workaround the iptables issue - Don't use standard descriptors when tar is running to dump tmpfs mounts - Fail dump if dump_one_file() fails - Fill kerndat with zero-s before reading it from cache - cleanup with spec-cleaner- update to criu 3.8.1: a bug-fix release FDstore was initialized twice (re-initialized) causing e.g. - -shell-job restore to fail- Add python-devel to BuildReq explicitly, as a preparation for fallback to asciidoctor (bsc#1075764)- update to criu 3.8: New features * C/R of - Multiple network namespaces - Overmounted tmpfs mounts - Unix sockets and epoll descriptors in SCM messages Improvements * Rework service descriptors not to cause fdtable enormous grows Bugfixes * FP state wasn't reported on Skylake due to a kernel bug * gcc 8 warning fixes * Resource leaked on error paths * Attributes of sit devices with value 0 were not saved into images (and were restored into default values) * Tasks with pgid of a zombie hung the resture * Ghost files on RO bind-mounts of an RW mount couldn't be restored * Random memory corruptions during lazy restore - cleanup with spec-cleaner - switch to https urls - list binaries and man pages explicitly - remove rest of static libs to fix rpm lint errors- update to criu 3.7: New features * Pipes usage statistics * Run page server as non-daemon via RPC * C/R of - SO_REUSEPORT option - IPv4-mapped inet sockets - Net_prio CGroups - Overmounted shared mountpoints - Non-broken and breaking leases Improvements * Show criu and kernel versions in logs * CRIT decodes socket families, protocols and types * Much less pipes is needed for pre-dump, which is especially useful for big mem migration Bugfixes * Files in /proc/pid/map_file could be opened by non-exiting name (with 0x prefix) and it was fixed in kernel * CRIU log levels were used to configure logging for libsoccr thus breaking its logs * Overflow in various IDs caused bad image names * Compat (32bit) syscalls lost signedness in compel * Corked sockets lost cork flag * Preadv() syscall was declared with error which resulted in dump errors on 32-bit processors * Musl compilation failed * Ghost files in / dump failed * Crash when releasing context for ghost files, due to free()-ing shmalloc()-ed area * Lazy restore could receive partial page and crashed * Erroneous closing of lazy pages connection caused restore to hang * Lazy memory fetch restore could start before tasks are restored - Remove 0001-images.py-remove-shebang.patch * upstreamed in 8e45ce4905d186abafb7c20abb3b00207fefdb53- add 0001-images.py-remove-shebang.patch * fixes a lint warning about a non-executable python file being executable due to a superfluous shebang * upstream: https://lists.openvz.org/pipermail/criu/2017-November/039907.html - run spec-cleaner- update to criu 3.6: New features * C/R for files (except for unix sockets, ttys and epolls) sent over unix sockets * C/R for threads with different creds * Ipv6 over ipv4 tunnel (SIT device) Bugfixes * Some s390x registers were not restored by native sigrestore way * Overflow when parsing autofs info from /proc file * Dumps of anon shared memory with sysvipc one raced with each other clashing and corrupting image file names * The "dumpable" flag was not restore on shmem regions * Trash bits leaked into image when dumping fsnotify on some kernels * Lock/unlock of iptables from different criu processes raced with each other * Closed TCP connection with non-empty send queue blocked the dump * When --empty-ns for netns was set on dump only, the restore failed (Docker case) - includes changes from 3.5: see https://criu.org/Download/criu/3.5 for details- update to criu 3.4: New features: * Support for s390x architecture Improvements: * Unexpected death of restored tasks is reported with more details in logs * Merged many images containing info about files into one big files.img * When helper utility fails (ip, iptables, tar) its name is printed in logs Bugfixes: * Compilation failed on newer glibcs (ucontext_t) * Dying helper task could deadlock the restore process * Install-related makefile variables weren't configurable for distro build * SIT (ipv6-to-v4 tunnel) presence on host blocked dump of any containers * Potential NULL dereference when dumping net namespace * Dump via page server might not work across different criu versions * Failure to restore a subtask could be ignored by the restore command * EOF on page-server socket wasn't handled - Dropped obsoleted patch: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch - Add s390x to exclusivearch- update to criu 3.3 * Add --tcp-close option to help migration of Docker containers * Allow to override build time to fix build-compare (boo#1047218)- update to criu 3.2.1: bug fix release, * Restoring a stack fails on recent kernels due to kernel changes * Restoring on a host with LSM profiles failed- update to criu 3.1: New features: * Each boolean option now has the --no-$option pair * RSS explorer in CRIT * Multiple plugins in compel * Run-time check of 32-mmap BUG on x86 * C/R of 32-bit futex robust list on x86 Optimizations/improvements: * Start time is improved significantly with kerndat cache * Sigaction image is merged into Core * Unneeded stages are skipped during restore * Restore w/o namespaces uses host /proc * Restore w/o namespaces doesn't parse host mounts (not needed) * Single-threaded tasks do not parse /proc/pid/task/ in vain * BFD engine is used for more /proc files * More verbosity in libsoccr * Fsnotify dump w/o namespaces doesn't walk mounts tree Bugfixes: * Python bindings left zombie in self-dump mode * The last_pid sys-control was reset by restore * Threads caps were compared with mistake * make install put crit/pycriu to wrong place if DESTDIR was not set * Fsnotifies C/R w/o namespaces restored with errors * Inherited control terminal restore was failed (but dump succeeded) - update to criu 3.2: Optimizations/improvements: * Invisible files restore is de-serialized * VMAs restore performance is improved significantly - Mappings of the same file re-use the descriptor, not re-open it every time - Not-COW-ed mappings are restored in-place and are not mremmap()ed - Empty RO mappings are mmap()ed as such and thus not re-mprotect()ed at the end * More verbosity in case TCP locking fails (#292) * More verbosity in case VDSO magic mismatch * Restore or legacy epoll target descriptors and fsnotify marks is unified with common case Bugfixes: * Restoring fanotify marks from old images (<1.3) dropped the mark * Binfmt_misc mount could be mounted into wrong place * Compilation failed with gcc 6.3.0 (#315) * Waiting helpers could race with sigchild handler and would result in restore failure * Missing VVAR page in 32bit tasks wasn't skipped and resulted in restore failure * After restore consumption of files is increased (was fixed as side effect of mmap optimization) Deprecation/Removal: * Deprecated separate images for fsnotify marks - Fix the installation of python stuff: criu-py-install-fix.diff - Fix the build for ppc64: criu-correct-ppc64-AT_VECTOR_SIZE_ARCH.patch- update to criu 3.0: New features: * Compel library * Support for x86 32-bit arch * Version check via RPC * ASAN support * Force VDSO trampolines via fault injection * C/R of shutdown-ed UDP sockets * C/R of bind-mounts made from external mounts Optimizations/improvements: * SysVIPC shmem segments are now dumped as any other shmem (taking holes into account and sitting in common memory dumps) * CRIT show decodes socket's states and types and task's states into strings * CRIT show prints unix sockets names in more human-readable form Bugfixes: * Unix sockets' names appeared in logs with mistakes * Contents of SysVIPC shmem segments was dumped twice * Dumping of any memory segment more than 4Gigs failed * Migration of unaligned SysvSHM segment on Armv7 failed Deprecation/removal: * Exec action is removed, use compel instead - Create libcompel1 sub-package- update to criu 2.12.1: Fixes: * Content for external bind mounts was erroneously dumped, which could lead to dump failures or huuuge images * Unneeded collection of host mounts on restore could cause restore to fail- update to criu 2.12: New features: * C/R of external TTYs (for Docker C/R) Optimizations/improvements: * Sanitized the way the -v works Fixes: * Checking features via RPC crashed * Resting pipes in user-namespaces could fail on modern kernels * Shutdown state for UNIX sockets could be lost on restore * Dump of huge (over 2Gb) SysV shmem segments didn't work- Update to criu 2.11: New features: * Added "pre-resume" to action scripts * New --status-fd option for better control of page server * C/R OFD file locks, RO root mount for mount namespaces Optimizations/improvements: * More strict checks for extra CLI options * Report errors when probing locks * Restorer logs now contain timestamps Fixes: * Regression: v2.10 was broken on ARM * Use-after-free when restoring ghost directory * Array out-of-bound access when restoring VETH device * Page server exit code could be screwed up * Clang over-optimized string.h routines resulting in random crashes * Parasite failed to send FDs via socket on Alpine Linux * Restore of huge file tables could get stuck * Restore of epoll in epoll could fail * Errno value could be lost when reporting failure to restore invisible files * Dump of sched params didn't work on Alpine * Restore of huge memory dumps (over 2G) failed * Installation guessed /lib vs /lib64 with errors * Migration between xsave and noxsave didn't work for wrong cpu feature being checked - Update to criu 2.11.1: Fixes: * Page server start via RPC was broken * Fedora build didn't work * Ppc64LE restorer switch crashed- Update to criu 2.10: New features: * C/R of SOCK_PACKET sockets * Libsoccr -- library for C/R of TCP sockets Optimizations/improvements: * Logs cleaned up (removed bunch of useless, fixed '\n' in perrors) * Action scripts errors are printed in logs * Removed several iovec-s copying over the pagemap code * Restore degraded linearly on Xen guests. Breakpoints disabled until solution Fixes: * Py bindings fault on restore error delivery * Fd leaked on file restore error path * Fd leaked when restoring invisible files (gets closed with criu exit though) * Link remap restore could fail on kernels 4.8 and higher * Impossible to restore after restore error with link remap file in images * When going daemon a descriptor could be leaked * Custom setting of mmap_min_addr could make restore to fail * Sending pages over UNIX socket could race and fail with EAGAIN * Error getting ID of /proc/pid/ns/foo link not propagated and could result in bogus NS ID generated - Add libnet-devel to buildreq for dependency- Update to criu 2.9: New features: * CRIU can now be built with clang on all supported architectures * Ignore missing sysctls on restore with --weak-sysctl C/R overmounted mountpoints Optimizations/improvements: * Batch restore of memory contents from pages.img files * Link-remap type for invisible files is explicit in images Man page for CRIT Fixes: * C/R with --empty-ns still handled iptables configuration * SCM messages inside UNIX socket got lost after C/R (now dump aborted) * Empty unixsk.img file appeared when dumping tasks without unix sockets * Install procedure wasn't PEP-394 compliant * CRIU blocking netfilter rules were added at the tail of the chain resulting in unlocked TCP connections * Dump/Restore spurious failures when open() returned 0 descriptor * When dumping shmem lots of zero pages were written into image files * Ghost directory with more than zero ghost parents caused restore to fail * Shared mount could escape to different group on restore- Update to criu 2.8: New features: * Ability to configure CRIU build * Show statistics on the screen with --display-stats * C/R of Mac-Vlan devices Optimizations/improvements: * x86 can now be built with clang * When dumping files useless garbage was sent with descriptors from parasite * The clear_tid_address and regs are printed in hex with CRIT * Big code rework for compel (part 1) * Removed duplicate error messages from opening /proc files Fixes: * Restoring cgroup NS could use old path prefix * criu check crashed on btrfs mounts * RO external mounts in userns couldn't be restored * Unmounted on host binfmt_misc could cause dump to fail * Off-by-one could cause criu crash when dumping shared / bind-mount * Mount namespace' roots could have flags changed on restore * Dying tasks could erroneously be tried to dump * Swapped shared memory pages were not dumped * Errno value can be sometimes spoiled by RPC * Restore of netns with newer iproute2 tool could fail Deprecated: * --ext-unix-sk, --veth-pair and --ext-mount-map, by --external - Set BINFMT_MISC_VIRTUALIZED config to build- Update to criu 2.7: New features: * Option --cgroup-root now makes sense on dump too * CLOCK_BOOTTIME timer supported Optimizations/improvements: * Output of iptables command leaked into logs for no use * Helper dev environment installation script for Debian * Man-page updated and prettified :) Fixes: * Unmounted binfmt_misc with rules wasn't dumped at all * Malloc() error could result in crash * Device cgroup restore could fail restoring empty record * Some entries in device cgroups were restored twice * Potential crash when dumping cgroup bindmounts * Sign error caused dump to fail on btrfs partitions * Shared mounts with the same mount path failed the dump * Threads were restored with unshared FS (cwd and root) * Shared memory changes tracking disabled (regression found) * Restore of autofs can hang * LSM profile propagation could be lost * Mountpoint with lots of options blocked the dump (too small buffer for parsing) * External slave mount (with external master) blocked the dump * Mounts with STRICTATIME restored with others flags dropped Deprecated: * No reg-file entry for TTYs- Update to criu 2.6: New features: * Ability to leave process stopped after restore * Memory changes tracking for anonymous shared memory * Deprecation option/environment * First error message is reported back via RPC * C/R of More IPCNS sysctls, xIDs of PTYs, TMEM on PPC64LE Optimizations/improvements: * Use service FD for transport sockets on restore * Ability to turn pagemap-cache off (some kernels are buggy) * The criu --help text has become better Fixes: * R/O-mounted root could block the dump * Restore of cgroup.mm.oom_control could fail * Cgroup fs bind mounts were detected with error * Unaligned futex-es in parasite could cause dump to crash * When compiled with gcc-4.9 parasite code crashed * Failure to freeze cgroup didn't result in aborting of dump * Wrong ns list was parsed when dumping userns (invisible since nesting works only for mntns) * Non-inheritable non-tty as stdin caused shell-job restore to erroneously fail Error path in criu dedup could crash Deprecated: * Per-pid rlimit, itimers and posix-timers * Separate image for epoll tfds (target file descriptors)- Update to criu 2.5: New features: * C/R of fs.mqueue.msg*_default sysctls, Unix sockets with overwritten paths, and Link-remap files in removed directories Optimizations/improvements: * Micro-optimization on namespace ID evaluation * Restoring shared files uses one socket instead of per-fd ones * More verbosity when refusing to dump a file descriptor Fixes: * Restore could fail on openat() with ENXIO when multiple mnt namespaces get restored * The criu exec action got broken * Link-remap and ghost files remained on FS after restore failure * TCP window could remain clamped after restore resulting in connection lockup/slowdown * Dump could stuck when injecting a parasite * The --timeout option wasn't taken into account when freezing tasks using freezecg * Race in freezeing/seizing could result in lost tasks * Memory leaks here and there on error paths * Double free in xvstrcat (crash) * VDSO length was mis-calculated * Symlink on --root path could make restore erroneously fail * Potential memory corruption on reading mntns images * When restoring on systems with low pid_max limit restore could fail * RO-protected SysV shmem segments could be restored with PROT_EXEC * File mode of mapped file was evaluated with errors * Restore of cgroups' mem.swappines and ..use_hierarchy blocked sub-groups creation * Impossible to restore cgoup mem.swappines default value * Zombies living in orphan sessions/groups failed the restore- Update to criu 2.4: New features: * Generate core from images * Ability to forcibly drop half-open TCP connections on C/R * Ability to specify cgroup ctls to dump via API Opened/mapped files' mode is compared between dump and restore times * AutoFS mountpoints * New cgroups (perf_event, net_cls, net_prio and pids) * Memcgroup optional properties * Devices cgroup Optimizations/improvements: * Pagemap image entries are cached in memory Fixes: * Configured kmem cgroup limit restore failed * Mem cgroup oom_control * Cgroup's pids.max was not C/R-ed * Failure to write cgroup property was ignored * No init PID in pre-dump action script * Sigactions inheritance didn't work on ARM * Opened "/proc" dir blocked the dump * Working with iptables was racy * Sibling mounts detection error on dump * Devconf accept_redirects devconf could be restored with errors * "All" devconfs could be overridden by "Default" * Name-less unix sockets got auto-bound * Mode was lost for PTY device file on restore * Newer protobuf compilers didn't recognize PB files * External mounts could be remounted with MS_PRIVATE * Build fail on Alpine Linux Deprecated/removed: * Per-pid file locks images * Per-pid fdinfo images * Ancient pagemap/pages images - Enable builds on 32bit ARM- Update to criu 2.3: New features * Ability not to show payload for some objects in CRIT * Pidfile is written at the end of restore * Ability to join existing namespaces on restore * C/R of Data sitting in TTYs, Partially write-protected SysVIPC segments, Debugfs and tracefs mounts, Overmounted tmpfs, IPv6 devconf sysctls, External block devices, Unix sockets with mismatched shutdown state Optimizations/improvements: * Relaxed calculation of AIO ring size * Tree-based search of tasks by real pid * Less mem-to-mem copies on restore * Saner devconf image format * More verbose explanation of why task cannot be seized * PID is printed in PIE logs Fixes: * Too many mmap-ed files blocked the dump * Potential memory corruption when working with IPv6 sockets * Overmounted bind mounts could cause restore to fail * Overmounted bind mounts could result in badly restored mount tree * Incomplete restoration of RO bind mounts options Deprecated/removed: * Greedy mode of pagemap (non-root) caused dump to fail (disabled)- Update to criu 2.2: mostly bugfixes New features: * "Post-resume" added to action scripts * Root task's PID in environment for action scripts * Devconfs drop_gratuitous_arp and drop_unicast_in_l2_multicast * Serial ttys Optimizations/improvements * Lighter link-remaps restore on newer kernels Fixes: * Race when restoring userns vs setting ns' maps * Tasks with zero fds failed the dump * Restore of TCP recv queue could fail due to kernel mem alloc constraints * No errors were written to logs when launching helper (tar/iptables) app in userns restore * User-mode dumped no memory pages sometimes * Bind mounts considered not as bind sometimes * Two mounts in the same directory blocked the dump * Off-by in on /dev/tty{1,63} dumping * Forking of cgroupns task was done with screwed clone flags Deprecated/removed: * Greedy mode of pagemap dumping (on some kernels we do not support user-mode) * Removed the --namespaces option- Update to criu 2.1: New features: * Checking now classifies features to important/extra/experimental * Ability to bring some disk files into images. * C/R of Completed AIO requests and fallback gre and gretap net devices Optimizations/improvements: * Code coverage collecting now works * Use native rtnl library for netlink messages processing * Using --output - now results in stdout as log, not a file with the name "-" * Signals are printed by names in logs Fixes: * Make tar generated tarbal with bad name * CG restore code lacked rollback in some places * Error code from raw syscalls was treated with errors resulting in wrong criu check reports * Dumping task with HUGE amount of file descriptors failed * Task could be stopped after pre-dump if respective option was used * A /proc/pid directory from dead process conflicting with a new alive one could cause dump to fail * Zombie from alien session/process group caused restore to fail * CGroup fs was wrongly mounted in CGNS on restore * Irmap scan was mis-checking devices numbers * Use-after-free in irmap scan * Btrfs bindmounts detection was mistaken due to 'subvol=' options met * Propagation of mountpoint's shared groups was lost for propagated mounts * Unaligned allocations of restore shared memory could result in codedumps when used by futexes * Temporary mountpoints could result in spurious propagations * When aborting the dump criu could crash on use-after-free objects * Locking the network could stuck doing the DNS resolve * Several build fixes Deprecated/removed * The images from criu prior to 0.4 are deprecated * The --namespaces option makes no sense and is also deprecated * The --ms option for check action is deprecated- Update to criu 2.0: New features: * New code layout for sub-projects (e.g. Compel) * Unprivileged dump * Dump/check cpuinfo support for PPC * Explorers for CRIT * Added "post-setup-namespaces" to action scripts * Added timeout for dump procedure (5 sec by default) * Ability to override LSM profile on restore with CLI/RPC option * External bind mounts can be fs-root mounts too * Skip netns' internals on dump and restore (for Docker integration) * Advanced support for external files * More C/R supports Optimizations/improvements: * Align parasite stack on 16 bits for correctness * Compilation with native libc syscall wrappers and helpers * Parasite code injection done via memfd system call * Make vaddr to pfn conversion with one less syscall * CRIT shows device numbers in "maj:min" manner * CRIT shows mmap's status in verbose * Docker files for builds on all supported arches Fixes: * Absent readlink syscall on ARM (use readlinkat instead) could cause dump to fail * Wrong argument to timer_create system call could cause restore to crash * Extra tasks in freeze cgroup caused dump to fail/hand/crash * Unaligned restore-time object allocations caused lock operations to fail * Opened /proc/pid dir of dead task failed the dump * Unaligned stacks caused criu to fail on aarch64 * Changed device numbers on restore side could cause random failures * Fixes in mount points sharing/slavery/propagation restore * Race between mntns creation and fds closing in different tasks could cause restore to fail * Hard kernel limit on TCP repair recv queue restore could cause big queue restore to fail * Unconnected dgram UNIX socket with data lost packets on restore * CRIT didn't show IPC objects * CRIT didn't convert IP addresses in images * Logs from PIE code contained corrupted addresses and sizes * Not loaded netfilter modules could cause dump/restore to stuck on dumping netlink socket * Shared external mounts were restored with error Security: * When checking for namespaces' CRIU entered userns with host creds * Deprecated/removed: * Completely removed 'show' action. Use CRIT instead.- Update to criu 1.8: * Ability to check CRIU features via RPC * Pre-dump and pre-restore action scripts * The "info" action in CRIT showing stats about image file * Python API * C/R of read-only bind mounts, IPv6 routes and iptables rules, ip rules (it ip tool supports such), ignore_routes_with_linkdown netns devconf, empty bridges in netns, FILTER mode of seccomp, and IP_FREEBIND socket option * Lots of fixes, two security fixes Service run as root could allow users to violate ptrace policies Service run as root could give users access to privileged files and directories - Remove superfluous dependencies - Clean up spec file, as systemd and logrotate supports have been officially dropped- update to criu 1.7.1: Fixes in mounts, notifies and userns found while testing openvz - update to criu 1.7.2: Fixes for IPC in userns, venet C/R, socket buffers overflow and unix sockets name off-by-one - Add the package dependency on python-protobuf- Disable systemd service as a temporary workaround for possibile security issues (CVE-2015-5228, CVE-2015-5231, bsc#943105) - Update to criu 1.7: * Improved cgroups management * Support for seccomp strict mode * Support for stream unix sockets inheritance * Support uid/gid-restricted mounts in userns * Support deleted bind-mounts * Ability to specify maximum ghost file size * OverlayFS support * Support relative unix sockets' bind paths * Altivec and PSX support for PPC * Small PIE loader * Temporary proc mountpoint is mounted with nosuid, noexec and nodev * Less memory copies when preparing restorer binary * CRIT action "show" for less keystrokes on common use-case * Fsnotify log messages now use hex everywhere :) * CRIT output doesn't mix fields any more * Many fixes - Drop obsoleted patches: crit-install-prefix.diff lsm-prototype-fix.diff 4c5b23e5-criu.pc.diff- Fix version in criu.pc file. 4c5b23e5-criu.pc.diff- update to version 1.6: * PowerPC 64bit LE support * Makefile.local for 3-rd party build rules * Ability to "enable" filesystem on dump (--enable-fs) * Ability to skip mountpoint on dump (--skip-mnt) * Prepare to deprecate "criu show" command * External mounts auto-detection * /dev/tty (current terminal) support * Netdev and netns (all/default) confs C/R * Images v1.1 with extra magic at head * Support fusectl (only ctl) mountpoint * Sub-version format is now as of git-describe * Apparamor labels C/R support - Fix library path for aarch64 and ppc64le - Fix the prototype for lsm.c (to fix build errors): lsm-prototype-fix.diff - Refreshed crit-install-prefix.diff- update to version 1.5.2: * fix error in mutli-threaded tasks restore with --restore-sibling (Docker and LXC cases) * fix too big RPC messages error for service (and swrk)- Fix build failure on FACTORY due to comment-in-comment in google/protobuf/descriptor.proto - update to version 1.5.1: * fix crash with 4.0 kernel * legalize swrk API and add the ability for inheriting fds via it * cgroup yard destruction and properties restore- update to version 1.5: New features * CRIT tool * ability to request CPU compatibility on instructions level only * C/R of empty AIO rings * more detailed errno report via RPC * per-feature "criu check" * inheriting FDs on restore * ability to automatically move veth device to host-side bridge on netns restore * VT terminals support * more user namespaces C/R stuff See more details at http://criu.org/Releases#v._1.5 - fix installation of crit: crit-install-prefix.diff- update to version 1.4: New features: * Dump and check cpuinfo * Initial support for user namespaces * The docker_cr.sh script for Docker * New API for writing plugins (old one is still possible) * Service workers change their title to better look in ps output * Ability to feed socket for pre-dump and page-server in swrk mode * Page-server can auto-bind its port * Ability to perform several actions during one connection to RPC service * C/R of opened /proc/$pid/foo files of dead tasks * C/R of /dev/console * C/R of virtualized devtmpfs (openvz and future upstream kernels) * C/R of empty mqueue fs (posix message queues) * C/R of shared bind-mounts See more details at http://criu.org/Releases#v._1.4obs-arm-8 162400225151c55ec6efc4a7685f9da32064cecf41e77e72dd3.15-bp153.2.3.13.15-bp153.2.3.1debug.build-id51c55ec6efc4a7685f9da32064cecf41e77e72ddc55ec6efc4a7685f9da32064cecf41e77e72dd.debugusrlib64libcompel.so.1.0-3.15-bp153.2.3.1.aarch64.debug/usr/lib//usr/lib/debug//usr/lib/debug/.build-id//usr/lib/debug/.build-id/51//usr/lib/debug/usr//usr/lib/debug/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:16524/openSUSE_Backports_SLE-15-SP3_Update/f48f9c24cc35888080fd31ed2c085453-criu.openSUSE_Backports_SLE-15-SP3_Updatecpioxz5aarch64-suse-linuxdirectoryELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, BuildID[sha1]=51c55ec6efc4a7685f9da32064cecf41e77e72dd, with debug_info, not strippedP.od45;: >criu-debugsource(aarch-64)3.15-bp153.2.3.1utf-81fc1f27e3dff481487d04c7d16171ebb17876d354991078b550d4a0f226a63eb?7zXZ !t/}o] crt:bLL +n?8stRn"4%]羾uJ."A+x<3`+c 77ӦzE{7KyOo:*W ?ȭn],]%\&@HZ",( b$S!L/REa_46 &vMEY5Uu4GZ?,~k5BIN"E ~aqBp=m]l2@-Pb GPyomg_J!e\lPZEڪcq.ʥM:p!O ,[8G.| |rX|X N\YѼ ∔7;8{nG FMj$"-Yl0n>օnzEQ*ˎW'4/ڔɶlhE%`bԜ-aOg+"b˪[q ׎bz&B.4SA%L+lkT( ZWI؇d^.#g7j33kNw&@xތ]wiXG!l0|Sg%aB oUFFno S †%Q{}{ ]mqSz ZTae{WCm%I3&b*#6{`u]GR1ŏDj b XwG/A^Ԙ8WkNt6@u X׽" !b$M[GM%>(ŃCQqB Ǹ7 D g]kx U1Tiޅ7q5236s;#gc5yHx$j!QitI^0ۨ$.Ti,s+mb:斪]0]bف1ldb'3F4bRaO 2' J:k@Ճ>Fh%2!L_-CZ{׷ZXO)yi|JrwIKf.Kbv[<?o+ҕөOkzcB<ڒr6|:rD< bZt>KrnhMwG"hv[վW]ih![pe@!='ۧ{Un?cެIfq` |X 7b1F<%VSI!Ew#_f2XvȎz" 9$A.;>;ݬ+I$)+¨6-+W]׼]bp4) ăԗBNѳS_>]C/K-՛MY[:y[M4OGlE60Ž8}}\] k۳ U@iͫHj@$a|q؁q/6U?|˅;){SV9Rɒg-nFN7DѢMj{,Y[DorbV]j_b˗ݯ\ 6?,S', uiQz}(:"ؽyMyzaɔ!Kc)ӂJPtGd Lg-Y]zG~T98hTK r0^Nj"AZt?`&/,_" ~*+DuJ/ й"6>07P=N` MNYc6*'cHtV"VLN< +o01]F]4;o Ufb?*{?QS/YyI:_+>ezJE3)PP2.z+ZQv84>ߐGrρF6GWU֢x4B^f@j.Nht8 ͩ𳅕ݚĢ/Syn./}gLHR Vں+@NKP?q4 G^gw6B?X[Y/[i=W5(:IjF I@10/c؀a%4"^̳|}ɷxgg/r^3;](%>Ɔ]CX7Sރh✆ATK~M&u(ڠqEM Ik:,иj&kwcEPt(kˊJ@,G (x)07Yz,"jFeB@%מ%,iR3(Dykx 0Y}X$_F;n҃ @ -Ta F4ҋz$$ERuH_2"ݞ-P ͉y:X.iV&@ؼ&"Ë1N_}-⧝{b0Yn~%49\MeO6&B||+ `p ?jg{*6>fN؛$qBj5؆]Nj qȊeOfT#Ф74>c13e\/+WdG`! jrp0!;Nv / Bouta1Rpps*11^b*Q('0A |bG7xd{&ţ'90#*CYJH8 E3.Kz,֕P qQ6I1מK̥.%V^VdĪi'2|^vf-@<:)ASWwuWztSuUF(2njsiobj^_ocr@`˦rz/V zC`e?YE^#UΧ&w1aC]7řQy0evq[Z<%0ո%?5B$ {R_2j1K[(jL)> ȁVDs.l2Y$$ΟL)m :HT{A s)4Dj_=m)N6ll AOEvD+1g k0\:qos|5V1p.œAي)US[:}}:5O'?"yA97~Y%3wgCd#ٳ^ O䉚!YAXbl;48](M2;? \g'(֡~ٕ57k9%,0/{\Or]%4R 5e=bD!PLIBIk?Gtk)7 \b{ߦ&,aKEL{ť q_=7|z5'S_ɨ,SV]³:$+Rq)(|;GF'Mx¯ usxEC8Kr#k &İ.znj [xw?cdj;!Bv52rjr!9ȃ|`szryE8_pA=w;Wf+?2⏮d& $#x%YL ɩ~_6vg"!*+?DN b 4*tʼT:]zL5~ziQ9Ⱥ̫=:IǞ_c,p(ʩiaǀ0bt!-尤g᠛BF%!q64[5ο{ v㨚KcC"QPkK<;K7h䊱D|6Q-^ӓb`WG*!Od`E Sp%㚙ʸ>j 1Цir?]$>Oa&~U3*G:=mok*Wny+qRNK\)|\NW c Zwgab؝x]}պ bQu43GY>ovT. 8@t(x`łSNL1 M !Ec0 ᒍ2GPiE ٕ42@:5ΏX](>;9cuA%?V +I[ȗפP]W6p]}bчh#k1 yrʽ|a|bkOaOi5gIOJy]z%)5z2Ņ$L&Jn.w'gh#aSȢHG @ށi˪CK/̝л)j-Ǟ 3!G{O{EEAp$OAtlmP-%-8ßFuX]b,tD@Lc',^3:ڟ\1 솙CM'l?!oEb%}vzڷ 2Mrb?V_aynsȅ!ǀX u'I6A[bZ=8vd/˝w?-NCĔ, ڌx@2-6鿈UpObɐzѥ@7#SNZQ6.(QAbK4@AnOdPOǀxMQy^PؗwGϔ_l ̰Х$OŧsZc>`LnW/pޑncŮ b=wф٢}9?5w"x#X"EǎZp#bBUINA9{]Q&mڮ@{T/%՚qDƬ %`}u#!# k/iCNm,)i`winH$)&;4fq9mJ TV-Oqͷ A7I&xeM[&6Tⱝ,Ҋe h~HBEGlA[ia^*⒞7o衞zC AY܈DI⛈wFpH߽D֡/cOzp"egj>>.}0ǀM ",nRϞk{4Oabn&ABl i(,/J}eh¢ bU ޥk"r4&/%ZQ)/͊ :Βbʽk bWl.@6OG8/K]"}ŏNbX!&XUmgzXaҽx.][a\ :` JL#*emoL4.lT)p7_m! .s,pɣNnC()ۆ=nled>ukpg($WkO~@u͋&$cv26ئnXYX=W_+hT= 'g}hd$Ȉ gU2]]N$.F4 lcphuŁ(l^b# H}e"J:mj߅[ ߶i$Wށ06'zW Esp.sR,dqReݛt,KeCq2[(fQ#ҰrP3:y$o-sVk~˛Bpe%-e@Zh& fAa_=P\q ۄ }fm]=M6\z@po6e_8!~݁͟9Z"HӺM8[]3zG={♐]Q`+~L.l /o]e~G ܠE^]|%$^gј̛ҔwvStk0B{fN6K;u%mkÎ& ՙ͛cǺOɧ+sJs]FOlv(Ua-LGA$KDt|C3k;D?oӊLA(=V~pwH>W_ۙTWM{{Џecz_3:<;-@Rh`l =l!y*4P.[܃oa29 F[TCYy|L D fCIkLF8HGTJ|)Wm%. 1ń[8)} $tm6 o.n`Ԋ`Om+!E`4CHt x4(fr$fLj=|#Z!E-шφȼ*u:a˖eL?șxA-c/<^An@_;otHSl>F}n!jnj9͋NںQUXK!*)U3ÛCl0G'_! Ѵ> XvfO~VO&P,[PE [U!U5X|wZYOfے">JXfSuӞ,ziPq#KX;V=F||xU;Mx-mG ˔u5J_O4Rv>(dph/V6c̮.2\@p趭R+//csjKcSjR$5ZVs힩RiК Ԩr9v_~3_lOӍI _Var:q8TۛP!?ЙHSōa\$lQ s+uHtAJ<4H?կߒ3FY(Aj_K@k9=iz1~$Pߗ &I*?fU?G(# kL'ri?r pѭC7^y~_^΂9g,<-l!5.8SM>2rzw /_Nؠ=ֻ.SE3  T&~ˏP^AƴkC?dBx#z|/{T$qV <7Sg`#f6UW *;f/DΥ6/a$Oǒcm b?BQv~:I('#蟆&=OhӚMKUM2a P{ͧCֵ"@hV} 2dV[kɸs/bx P}j FgȏXnyidGn\/G^:8E8iU mBZUp&:ȴko^K}_0юH"TpF H/DP.f>p8YhG^rF8~%zԁ9vNǔ*T1I˰5%mVT=[0im>nǰS!p3 mDvS| [f^n#h{34׏P\ŮJwki^T" &tַ$ GYoP'xz):un0)+ߖ0I9Nt%hy`?fxQ֠uJ{EPJqw09)_7 , jH!Dȸ^;nnI81EwY r`Ɨ `hG~^7?r$Ϡeqk9wz9#rS`onUcwHz)suoX(8yJZ \uY"^2ʹE[-AU'B)11kArnnapON:\x`R m2*Q׮Um Ӌ;Jඣ&-\+7b_~>|N8.pP|\z~̗9?+VWGN9"'翡0:;%%g|\FcPTEZb3OQ}b$S!g#ͯ槏_~^7ON|YYqBW\\/If{U8yHj()W"yyfNپ|"<,1+왕W_)ܴḓF>D5`Cw:L7_>""6(.!X=jS]]q8 DE}4:&J$ x.0$gn#4 ؂yuVyHҝ18mRu4VVX^Tj SFN(<- a(rףE\S'v`/gZF "Q ^E^,&l!`S7>lNގבOQ-!h)6`~z`W1ʛx dԮPq2TZhb~^ߠ0fFWpSl4%=\{;ΉU<І7Mh{사giCk Oq.x0r#&+|Ve]dӉe`o4 vf) v.f_z诖iڃA'd},ևF &M oM!;e H[pƃ@) i7~_R|Ey[*QBxp`3W:GX` ;0ݶĉX!L 8Ñ`_Ͼ* KepO'O䞯%:L1;'w6$/N/УkbΑ:BAR/_ӼNY]Ҷ"=BD2BQ٢pib^`T{V4$G d@R~ڂ/#wB. c | f[*BP$c&9zjk~s{,mgxE'FsL e 79$mR'CޟEx)ŐId=X$hS;jJ5J+*UA/t; @t=wԭe8 "t^GnbLh2Lpixyyaфi[nLjGzY:E QL*6\v o]:1Dd=c*ęW՛ãW6p681e^Z. 8da[dQ܊%<ݱ [qD\_xj9Њ2mw٦{QԂnr&듒)_ V>)G t돤̧pGm!dºzSy`t=z \ܨ(Ih<<I%k2:b -։|[Q_| ^* jhH'Z|%NG)t4yݝ D0FߋB% йUs GRB{EJfCu}}&$)6 D.?;-hq&=jcSr  75=NO̐j7ltK,pdrn"ɉ~zxЉaXi5kaѣ{mB)^u&?stv2o #pCuW xڬnf,} 5TLZ1 /f`OeRnКSVJ[vJD3u5.Bi"ajGiK5QD XY~U펣_5q :x>0xv\K8"Y^ᶋ \/ohjQ08~;mIA ,R˷jI]#dҎ-gc2L~x@mÔ:,. ^F,>mJ۰TvssWú+7 )OxFar]TڷzC܄ꍨRySN%Ii82`p˛k-UOMgut>[36<RPs*2fXA4$HN!6j" Ld 콫,+W|M&+t珓Gib Pn9m`xyg! M\-*HK^?#g:$3zhyo?mBiD\]jm9z0wǁ%}hwjH9Hfj~V5l9=#]$}GTB@+V _jp'Up Hj7ЂC؃}c&`I|4MsiK؅=I gcFQFAl!.q h7ZU y 7H 4Zi&3tBd^P3⼍EldO_ܞi-󑃉4[sc1Q9U L?{cX:>) [{s#+N45d=$K61K jt~X66*m( #e1 t+LGn~b977áI}6zHXtkI7qѴBsI_ndҞ䰅*z |$2ZL)I| j\V?J|\]D fuJ.$22ۑhy[ހb$Hs訹jn}mGOvfy1e2%k']>{QG |M]sC<3~telrޅjm ^Hf7RaZ!oAݗAy\QԔpD*Hp̐UwrȌU+f`+/v֏ ArtaSUS\PE*O-]ӼX 7 he*ޖEUးIa D+c/{օ#uԶ QBoΓiQFjm) ߓ'ԘSuЎ+z!OW"[~jo8][Q8?8hA_"P]+i[Ar$qU[(!ҕӣmZAL_V*#&bú$lMYmJrHWzI 3/-'7C4{< I>|F>=tnKְxc%6}sX3 F6 kք&_>sO+"^( |0rFƐUj#%-?AS{ޤ?GH~R}0^PHݔ>t7 XG iI:W! qAP< u I2J ՚߿#"33mtLINUqvLZG!\B Kƕ'YM4o MA (#.-I}wTwӫzkI_7c9.lⓅpS$ uH93N'g]5FV u8bzD[LdpRlfr̻l%741jcUim:K3QkGЮv'cKF؛NiaZŭILVP2a%Ysn=a;4R\lQCOazK(+=i|"x0BwMhZ@[UqzPDz=ý8Kz] _+N_e$1Rv)3u|úDձi'JpMċ. e6(Z: >C@հh,LP|6m/]'%@kڻo] [.yc#RU23 ]!8eNfRQvHx$c >'|_d(|֭фʉL]fK7hudtp΀+(Umw0qL%RZ{C [Ё0!aZu^4_ 9]7OBp?Q#]y3>Gi5ҙNq-u_}';yGP}H͕G/G18;d\1KcP.Os>dxoj}U@RZ% tN_[Uf/wϪvlP99Q-BE3i*oq䭕6 Cu0]U6O5rawYh&i`g䷿\Um 5).DC:(f!ƤyMN޻#hi[cyPG u4F-ّ+:_/ [a#1g"J6"6~P|b }'ʤ hQ,ZAKOWo7DaLYU4G7|sBγ5Kvnʁ 9xTZP9 6a&KC{\4U?rYU;. d,̕'LN}XlDzL'Vm8 逴?MH)>&.(2׹̄O&6/Q¥q9K ˢظUfw`,X*Plu/#0i`Ig4# ?Skq :kyïbK"PLѤm=zMUK#B5 zdX ~D8\vU2KZi5 R\L W{PV"Vg! y>\I |riΰcS PCkUh1M.s S䚏A@[b n̊ˎ؟,U7B*MlyA|#mpc YIx/UCcDϻDPEh>HG_ GWk {(JH-󮨤R!l33+ElM{Gzp)Ɗ/iÒ,MA6e#CUAֺƫ5heչjx18^lCW/hhQc&7x"E_X@ S8/1Dt݋0B { ?]ϻ9>U$Iz)  3q 3t ظ1ݚ>m&$ߏڲ̀ZN O a`_ Q `ֱan?uܭ9B,9l ;Z|c.]m%gwR, ~]2$V÷[́d{[qCx)ZzVoC(z۱t>dt}_w9ʗqFwVgr `T"u݅Z*7T~ 7E:x^-#FK-G*e9BZՉH(RG%#LMT#-V=_^";ܒYK, #05 (ieq+DӦK^2>,P5y`(XTI J 2>ȥA Z0\XT'oyP2"M'L:22K&'$y7r@T4]~2QObA (Դ!でH"+%Z%q*4.KwvKsUpK(?AFhpͧ`J-aŅCKIG&B>C{Q clq6(.i~8) N;y^FpEܨ330:ż lu*"vn#Ȑgj$V)݂$[H/9[T'0#ӀIjiL6L'sis(3Shz  /Ñ:oh $g$2ytOV-PeR>A)K˞7L2/!)$>;׫.LV`qN};0Wt.vKQ )ҔGj*Dl""f=H.&Q&@N SHEE"gb Ԝ.ӿCɆx1;&v@Bpٖz56$(qqK ,4N-#Zٿ .Qs}~01YNH7X[,f[tDʟ"{Ye @Ә) M'K_ErK {c iMbf(uFJAs¼Ǫ@ޟH1wrmh<xG?䬹).8jK9G>{w.!Lܱ12$[ vcDΦUtUHB+š$\ V~b6GD$épT`n# ]W6j0*(N|~G.B!;$@x,4xuLPICijzGJat@틐iMG,8m*\q`.m3{}+~Vz|/OmҮӸ={qx 9j,PR(&8DhLL,%0nKæFuNVX`sGNdT'S=oE$Z)p,&bfW6Ro˟wk)LxT(*QvbR R^Jk%4+!x|QaÙ; T+Ф"=Ȅt0]DBJ *2TZ'90It+:CMImLlH1 k%:ozlάzڕ?gMHVm)CmnӍzgvpV6gc-]aUɖhl:VZIew?9/hxD< )mE.6MXG3+6sAض]/%"G%%Ҿ.Z Gv (y !Bi)1{Ȍc 'J5 ѨI\azWWVc z'OI+hCdiå"niB-2ș!oug^ϡUGr W9: (vќ,pJZ.^x%%&m͹Fw*Mm,qx^RȀ{d'\PiYh Wnf2U2P&K:$7N7YoU\ PWӌePq ]||p^>6gu=#bK1Q0d ǭIf|_J:Q"2ﷅxz%tϑB=mWw jM.ȸOB(-m^d\ĺH&ҥHvfGB%Q'|WJp9-w ??X ܣX [RYl $}?^dW"Frh?c߻ڄ}rq|ohx;gk6E ^ YT5 &ŝgc= %@Wv4>hJKhT\nK7B1dg9qe9*?!-8uVDGomWhو |@ *o$C|o!j*בj,7&WK&6}e-(u[*lcûtyxH~ǫ${zb"z># @f? ,wS?lQȶDDy, .J jf`Ŷ")=ҏJb>QSOVSAﵬ +N;75V_X} ګL.Qlsuភ.M75sqF/Ԧ Qggр!PX6%c<뼳`+>L#|ӏ4-4MYH5 _fBP;r73$]%+WLj-ں[a~xwЁJr}Ajż y !M=$,)Ǯ639eB dQP ھ~wJm$FٹU y]0stf8ba%Fb4C>aaLΒ( glrb•&A:ߩ,$8[?`n1ΝmYo ֯rTڵfʀ0wz)< =~ Y@Or>ią_g3йٿMu>"7K DnȆQ(Y Py(#PXUL^f=vm^gMOe!abSrEbhr4HjuBv[eJD$2Su)ƥO @55fNUk${R[)V Y ;WMiṌMtr=~=)]X{gրa%-eAcd9{bؾ@O0ĭ,kEǰVvj3E΢Q<]ߠd;~l훫s3GwC?{=).W%%kV#7"e|*Y²$5>;H׀Jyxpv3=H|P08㯾܇EỎ %49ލ:_`?ěqSLp0. !]i;JZD4zB/i,)2| GU0U| L8yTbحR RP+Qީ7-سC[BB<?{veUvZAR,זwi+\S*sfD2Y'}`q/CE0nJtvuƵ&od Y\3et%͓Qz|Fr)_4zEWC\: 8!5ɡD* _ȫٷ@95ڒ'ON)G^^%Sj? Zlp@՝sqV G3zw):e1kFvX8ᘙ$%?RVObB 4%ug>fR|zqĴ,oˏ^dMOV UP:Lgg2 Kl+(>8 `ۯ){{lE޸)a9Q͟gA(lO1hlc<˜c5K#0$jol c 6'aB <&͂Sv=!ܘ l\=,LT]{!,ŃK2{PoYl:ξ%ɼY 5vCGȫ;*DaP$7BJo2%l[t%g0E`Ʌ(F5 LR7Ppy*7|G*7DYl@:7~JޥkmYuܣw$$[Nƃ$cF=$0NSOЄ ،'^gž6ġa-=gnj@vQ* 1oݪ[X3lH ᄲ;@B&R,6KS>Y̝eBLe;mpDR!s_++Iy'W?ygGcVԔlє7HP,'<@. /I'Vc"+{b1qϞ0SӀTZM K&9|~oJL6W,Mm2|Naӛ0aIo_UXb:w`NӔ4|S@;7[R>0EDd(S{Ň&sJ cfn~Gxh/P^;դ ԃ]m_$h*>32V#5ͣ RB)j[28k9+ObYDns*g6,6A3&UD3؈y<5 C2%;6/aC[h)N }Z]q`_d\a@Maj[twUP"_֖09Ru ̬̑pçJe;jguz4DZ'XRn-F#kӫjwl>c7Bd1iT{#?ؒ4N;^:?;4$7u?:x %" ?wx6!njH^J!*uy*j4%֖C)Eݣp;Xa_hcBsjOo[?]/4熽;ԳOjoKh tF!FX5d/3yM f$:1fd#ڻ{f'=h%D-N?kl&;LIXb*2w1ZsLq/М~b)Az_M3=Q(w"#" n'2Ngy0*)Q;rgG6YW"eA}aH4ys뒬EmhUK]>Cۙq\u0K/o#ZGa=ȼ__i~@gHlqMX"4W;΃YWӞ O=8i|d׸NL,Mz$B{;ʴV#Sj٧ԔZ S+^mt=2Ezg M?y>RrdWV0 t4&Rn) H.8k "]}[IOk['!6/pP0; 'GAG\@GTTM$+[+*';4ӟyZ,07MͿY!G!#TZp bGVǼ#o. I;8ҢO8|m>z։y)T !1F:/2s,9TeAatVXfi["JɲX?Ƴ*vde73V0촆?SE5ak¤0fIGjGFCxPb_P**';ϓ: #"'X! ZeLlm;0^X[PSYcNе)6.e(.X+s̍O t۰@;n&י#4\fXHbKzY` [S2Ɗw<} Xw& Qh֟f%lR@4׼oVD%296<HwEq]S^l-t(, !;&Dr)-?%rꖢwV\P >) [M݁JMҷ5mO3ݚ*MC+,r lj8SRAqoDY6Nqc(i |6l*ÁYgs˒65J)օ)x"OWXE˥h;Wr&w9\Ɂ-AC!?A.ʜ{ dI/'1ψ0 RXvGɋ?;-09Ur(8`oWBeގS+м&s䧥E rbZ Owm̖bX+G&Kh~ָv/@w[O `<YߗFU,C`{ "~3Q[LC73#~Zӝf.`eSF\Ia ; ]JXVW9~NL ML'UIm=ZWsZb/?,&q2{b"1y?A8*L0ZYt_,"I+ZDw*$gyRDx"}el3ՓwO b g.^v"pgtz5mcYzni Raܼt٭!ͤi)FAO܍9;!mt'>wng:t^iW4\CI+aV&u^-tgVf#pI_kue lur IUl]'XK]\x~pߛ8 l3NfڅIaȃ\'_^尧/t{5eK'ʐ&2Reoj8:`/fZVsÑ臄Jg)HXs_! W΀ mSψu}4~?Ӄ'Qa<3V(h\'e"e|3OR|1otɃ]0b0+/9xɘ Q'fОM |ҐxrOWV`Z/nu(BmTmWh[{O wpd/_=98&_";,މ):R TĞ>ToB2R")U9~ 7}˫< .?:߹Ͷ@6O'Cїh ?#Y +e.N`S W5B :"ZsӰ߅IWN;LTIm T3;;U=ş";ɓڿwW9S2> |x k^S##n2xF1J<֮t8+ɭK,U-ӾR te5X4Ut4Q')8c,UiϨ}iJ;zFQٽȯMj8Q)go=ch gY[C۲5#rk@4*#]]w 9uoxR:HwD{^OCƆ 3  gBOnoH/"B/ OfxrLޤM53ġ'~H'an=~ݝh\n6v f,'a#i GƸ̬I:בath?-.>bxx"(Y_r @&&,H K4ԕTS78ffEUgC^rs)eO(6c,m} P•_ mB%xQGpu{*݃^O$! '$_y+vB/(qFoG9Q55ܵp8jc%Z] ɰ3qah7HD~HE$(͹T)h9/%^F9IQ}\*([΢IbilA C!};DŽ:dfB@dQAgG'ڗ'Hdsܵ VxDpF1N4J)KY?5-E^iW5QDݟl3n_aHځX >M&E6(՗"u'Munx*1]ucCB,=.kxaSogG}NjcTw(,y˲P"f>4L|vT 0Kə4i:s=׵NZMo>g1r K<*т}>IuRA grxyb0>d|}2|m,Su;D 4ȉ6 `!%ƛEf x7Y%/c(jtnOVaH%y_,u،39Lx]H7{Wj\wȏ7lhÑ$16[ۆO G2N~[rFSܢ q^/$C.CKE744\)e YZ