libpacemaker3-1.1.18+20180430.b12c320f5-lp150.2.20.1<>,ф]I/=„\kuJFd@~CԼqOA0HubxaNIZr0Edž"]S4aCpu~J- ~d[mr O HXn;c_Ǐ_"bR% /O6sJ'5SA:YY"ܷ\ݧ ^4!) [fs[HfTv&!knMji!}M"zѬqTk"TMc0fXu}0K *x%PP>B?d* 7 P $7@c |x  0   W  `  7 h7A7(89:= >@!F0GDH͠IX YD \Μ]^Кbcяd"e'f*l,u@vҜwHxؤyzl|ۀۆClibpacemaker31.1.18+20180430.b12c320f5lp150.2.20.1Core Pacemaker librariesPacemaker is an advanced, scalable High-Availability cluster resource manager. The libpacemaker3 package contains shared libraries needed for cluster nodes and those just running the CLI tools.]Ilamb10mopenSUSE Leap 15.0openSUSEGPL-2.0 and GPL-2.0+ and LGPL-2.1+http://bugs.opensuse.orgProductivity/Clustering/HAhttp://www.clusterlabs.orglinuxx86_64getent group haclient >/dev/null || groupadd -r haclient -g 189 getent passwd hacluster >/dev/null || useradd -r -g haclient -u 189 -s /sbin/nologin -c "cluster user" hacluster exit 0@` I@tؘ0%òA큤]] ]] ]] ]] ]] ]] ]] ]] ]] ]] ] Zr&Zr&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.so.7.0.0libcrmcluster.so.9.0.0libcrmcommon.so.13.0.0libcrmservice.so.8.0.0liblrmd.so.8.0.0libpe_rules.so.2.4.0libpe_status.so.16.0.0libpengine.so.16.0.0libstonithd.so.6.0.0libtransitioner.so.5.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpacemaker-1.1.18+20180430.b12c320f5-lp150.2.20.1.src.rpmlibcib.so.7()(64bit)libcrmcluster.so.9()(64bit)libcrmcommon.so.13()(64bit)libcrmservice.so.8()(64bit)liblrmd.so.8()(64bit)libpacemaker3libpacemaker3(x86-64)libpe_rules.so.2()(64bit)libpe_status.so.16()(64bit)libpengine.so.16()(64bit)libstonithd.so.6()(64bit)libtransitioner.so.5()(64bit)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/sbin/ldconfig/sbin/ldconfiglibbz2.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.15)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.8)(64bit)libcib.so.7()(64bit)libcmap.so.4()(64bit)libcmap.so.4(COROSYNC_CMAP_1.0)(64bit)libcorosync_common.so.4()(64bit)libcpg.so.4()(64bit)libcpg.so.4(COROSYNC_CPG_1.0)(64bit)libcrmcommon.so.13()(64bit)libcrmservice.so.8()(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libglib-2.0.so.0()(64bit)libgnutls.so.30()(64bit)libgnutls.so.30(GNUTLS_3_4)(64bit)libncurses.so.6()(64bit)libncurses.so.6(NCURSEST6_5.7.20081102)(64bit)libpe_rules.so.2()(64bit)libpe_status.so.16()(64bit)libpils.so.2()(64bit)libqb.so.0()(64bit)libquorum.so.5()(64bit)libquorum.so.5(COROSYNC_QUORUM_1.0)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.2.5)(64bit)libstonithd.so.6()(64bit)libtinfo.so.6()(64bit)libtinfo.so.6(NCURSES6_TINFO_5.7.20081102)(64bit)libuuid.so.1()(64bit)libuuid.so.1(UUID_1.0)(64bit)libxml2.so.2()(64bit)libxml2.so.2(LIBXML2_2.4.30)(64bit)libxml2.so.2(LIBXML2_2.5.0)(64bit)libxml2.so.2(LIBXML2_2.5.2)(64bit)libxml2.so.2(LIBXML2_2.6.0)(64bit)libxslt.so.1()(64bit)libxslt.so.1(LIBXML2_1.0.11)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)shadow3.0.4-14.6.0-14.0-15.2-14.14.1]@],j\Q\Ɋ@\8\f\\@\R@\I\E@ZYan Gao Yan Gao Yan Gao Yan Gao Yan Gao Yan Gao Yan Gao ygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comjengelh@inai.deygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.combliu@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comrbrown@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comdimstar@opensuse.orgygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comtchvatal@suse.comygao@suse.comtchvatal@suse.comtchvatal@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comrguenther@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comygao@suse.comdimstar@opensuse.orgygao@suse.comygao@suse.comygao@suse.com- cts: ComponentFail: killed corosync doesn't respawn immediatelly. * 0001-Test-cts-ComponentFail-killed-corosync-doesn-t-respa-1.1.patch - fencer: improved log messages regarding fencing actions (bsc#1151007) * bsc#1151007-0005-Log-fencer-improved-log-messages-regarding-fencing-a.patch - fencer: no need to check the length of a non-empty list for pending fencing actions (bsc#1151007) * bsc#1151007-0004-Refactor-fencer-no-need-to-check-the-length-of-a-non.patch - fencer: Indicate fencing target in the logs when scheduling and executing fencing command (bsc#1151007) * bsc#1151007-0003-Log-fencer-Indicate-fencing-target-in-the-logs-when-.patch - fencer: Make sure concurrent fencing commands get triggered to execute (bsc#1151007) * bsc#1151007-0002-Fix-fencer-Make-sure-concurrent-fencing-commands-get.patch - fencer: Don't let a fencing command with a long delay block any other commands pending on the device (bsc#1151007) * bsc#1151007-0001-Fix-fencer-Don-t-let-a-fencing-command-with-a-long-d.patch- scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511) * bsc#1130122-0001-Fix-scheduler-wait-for-probe-actions-to-complete-to-.patch * bsc#1130122-0002-Test-scheduler-wait-for-probe-actions-to-complete-to.patch- controller: confirm cancel of failed monitors (bsc#1133866) * bsc#1133866-0003-Fix-controller-confirm-cancel-of-failed-monitors.patch - controller: improve failed recurring action messages (bsc#1133866) * bsc#1133866-0002-Log-controller-improve-failed-recurring-action-messa.patch - libcrmcommon: improve parse_op_key() efficiency (bsc#1133866) * bsc#1133866-0001-Refactor-libcrmcommon-improve-parse_op_key-efficienc.patch - libcrmcommon: return error when applying XML diffs containing unknown operations (bsc#1127716) * bsc#1127716-0003-Fix-libcrmcommon-return-error-when-applying-XML-diff.patch - libcrmcommon: avoid possible use-of-NULL when applying XML diffs (bsc#1127716) * bsc#1127716-0002-Fix-libcrmcommon-avoid-possible-use-of-NULL-when-app.patch - libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716) * bsc#1127716-0001-Fix-libcrmcommon-correctly-apply-XML-diffs-with-mult.patch- controller: avoid memory leak when duplicate monitor is scheduled * 0001-Low-controller-avoid-memory-leak-when-duplicate-moni.patch - libcrmcommon: return proper code if testing pid is denied (bsc#1131353, bsc#1131356) * bsc#1131353-bsc#1131356-0009-Low-libcrmcommon-return-proper-code-if-testing-pid-i.patch- libcrmcommon: avoid use-of-NULL when checking whether process is active (bsc#1131353, bsc#1131356) * bsc#1131353-bsc#1131356-0008-Fix-libcrmcommon-avoid-use-of-NULL-when-checking-whe.patch - tools: run main loop for crm_resource clean-up with resource (bsc#1140519) * bsc#1140519-0001-Fix-tools-crm_resource-C-should-wait-for-all-replies.patch- controld: fix possible NULL pointer dereference (bsc#1131353, bsc#1131356) * bsc#1131353-bsc#1131356-0007-Med-controld-fix-possible-NULL-pointer-dereference-1.1.patch - pacemakerd vs. IPC/procfs confused deputy authenticity issue (CVE-2018-16877, bsc#1131356) (CVE-2018-16878, bsc#1131353) * bsc#1131353-bsc#1131356-0002-High-pacemakerd-vs.-IPC-procfs-confused-deputy-authe.patch * bsc#1131353-bsc#1131356-0003-High-pacemakerd-vs.-IPC-procfs-confused-deputy-authe.patch * bsc#1131353-bsc#1131356-0004-High-pacemakerd-vs.-IPC-procfs-confused-deputy-authe-1.1.patch * bsc#1131353-bsc#1131356-0005-High-pacemakerd-vs.-IPC-procfs-confused-deputy-authe.patch * bsc#1131353-bsc#1131356-0006-High-pacemakerd-vs.-IPC-procfs-confused-deputy-authe-1.1.patch - libservices: fix use-after-free wrt. alert handling (CVE-2019-3885, bsc#1131357) * bsc#1131357-0001-High-libservices-fix-use-after-free-wrt.-alert-handl.patch - pacemakerd: only one active process check needed * 0001-Low-pacemakerd-only-one-active-process-check-needed.patch - Shutdown corosync after a fatal error * 0001-Shutdown-corosync-after-a-fatal-error.patch- libcrmcluster: avoid use-of-NULL when searching for remote node (bsc#1128772) * bsc#1128772-0001-Fix-libcrmcluster-avoid-use-of-NULL-when-searching-f.patch- scheduler: cl#5301 - respect order constraints when relevant resources are being probed (bsc#1117934, bsc#1128374) * bsc#1117934-0001-Fix-scheduler-cl-5301-respect-order-constraints-when.patch * bsc#1117934-0002-Test-scheduler-cl-5301-respect-order-constraints-whe.patch * bsc#1117934-0003-Test-scheduler-cl-5301-respect-order-constraints-whe.patch- CTS: really don't require nodes to be specified if listing tests (bsc#1114840) * bsc#1114840-0001-Test-CTS-really-don-t-require-nodes-to-be-specified-.patch- cts: temporarily disable any enabled cluster serivces when running remote tests * 0002-Test-cts-temporarily-disable-any-enabled-cluster-ser.patch - cts: service counts as enabled only if it's explicitly enabled * 0001-Test-cts-service-counts-as-enabled-only-if-it-s-expl.patch- cts-exec: still run the tests for the other resource classes even without python systemd bindings (bsc#1121808) * bsc#1121808-0001-Test-cts-exec-still-run-the-tests-for-the-other-reso.patch- CTS: ignore monitor failures when testing remote node fencing * 0002-Test-CTS-ignore-monitor-failures-when-testing-remote.patch - CTS: lower remote connection failure detection time * 0001-Test-CTS-lower-remote-connection-failure-detection-t.patch - cts: use bash in the pacemaker-cts-dummyd * 0001-Test-cts-use-bash-in-the-pacemaker-cts-dummyd.patch - cts: clear constraints on cluster nodes (bsc#1121272) * bsc#1121272-0003-Test-cts-clear-constraints-on-cluster-nodes.patch - cts: resume any possibly frozen pacemaker_remoted when cleaning up the test (bsc#1121272) * bsc#1121272-0002-Test-cts-resume-any-possibly-frozen-pacemaker_remote.patch - cts: simulate failure of pacemaker_remoted by freezing it with SIGSTOP (bsc#1121272) * bsc#1121272-0001-Test-cts-simulate-failure-of-pacemaker_remoted-by-fr.patch - CTS: don't require nodes to be specified if only listing tests (bsc#1114840) * bsc#1114840-0001-Test-CTS-don-t-require-nodes-to-be-specified-if-only.patch - cts: set default number of iterations to 1 * 0001-Test-cts-set-default-number-of-iterations-to-1.patch- fenced: Handle fencing requested with nodeid by utilizing the membership cache of known nodes (bsc#1094208, bsc#1107270, bsc#974108) * bsc#1094208-0002-Refactor-fenced-Handle-fencing-requested-with-nodeid.patch - controld: able to manually confirm unseen nodes are down (bsc#1094208, bsc#1107270) * bsc#1094208-0001-Fix-controld-able-to-manually-confirm-unseen-nodes-a.patch- Add missing %pre section for cts- spec: Install /etc/pacemaker directory for storing authkey file (bsc#1082883) - spec: unify quoting in {pre,post}* scriptlets' action soliciting - spec: add a simple retention of pre-existing log move targets - XML: upgrade-2.10.xsl: resource meta_attributes: tweak diagnostic msg * pacemaker-XML-upgrade-2.10.xsl-resource-meta_attributes-tweak-diagnostic-msg.patch - XML: upgrade-2.10.xsl: re-apply on scheduler CTS test cases * pacemaker-XML-upgrade-2.10.xsl-re-apply-on-scheduler-CTS-test-cases.patch - XML: upgrade-2.10.xsl: resource meta_attributes: validity conformance * pacemaker-XML-upgrade-2.10.xsl-resource-meta_attributes-validity-conformance.patch- execd: avoid memory leak when testing remote key * pacemaker-execd-avoid-memory-leak-when-testing-remote-key.patch - cts-scheduler: avoid unsupported usage of requires * pacemaker-cts-scheduler-avoid-unsupported-usage-of-requires.patch - controld: avoid memory leak when synthesizing failure * pacemaker-controld-avoid-memory-leak-when-synthesizing-failure.patch - XML: upgrade-2.10.xsl: resource meta_attributes: isolation* items * pacemaker-XML-upgrade-2.10.xsl-resource-meta_attributes-isolation-items.patch - XML: upgrade-2.10.xsl: make diagnostics more direct wrt. context * pacemaker-XML-upgrade-2.10.xsl-make-diagnostics-more-direct-wrt-context.patch - XML: upgrade-2.10.xsl: remaining "marking" space with op meta_attributes * pacemaker-XML-upgrade-2.10.xsl-remaining-marking-space-with-op-meta_attributes.patch - XML: upgrade-2.10.xsl: simplify 2/2: HelperIdentity, no INNER-RECURSION * pacemaker-XML-upgrade-2.10.xsl-simplify-2-2-HelperIdentity-no-INNER-RECURSION.patch - XML: upgrade-2.10.xsl: simplify 1/2: resource instance_attributes * pacemaker-XML-upgrade-2.10.xsl-simplify-1-2-resource-instance_attributes.patch - XML: regression.sh: modularize "XSLT processor", allow substitutes * pacemaker-XML-regression.sh-modularize-XSLT-processor-allow-substitutes.patch - tools: improve error messages from crm_resource --move * pacemaker-tools-improve-error-messages-from-crm_resource---move.patch - tools: use output redirection correctly in crm_standby * pacemaker-tools-use-output-redirection-correctly-in-crm_standby.patch - tools: handle multiple values properly in crm_attribute * pacemaker-tools-handle-multiple-values-properly-in-crm_attribute.patch - tools: bash portability issue in crm_failcount * pacemaker-tools-bash-portability-issue-in-crm_failcount.patch - libcrmservice: don't consider a cancelled recurring operation as failed * pacemaker-libcrmservice-dont-consider-a-cancelled-recurring-operation-as-failed.patch - tools: cibsecret --help/--version doesn't require cluster to be running (bsc#1102915) * bsc#1102915-pacemaker-tools-cibsecret---help--version-doesnt-require-cluster-to-be-running.patch - spec: package cts-exec-helper with main package instead of -cli - spec: move old logs after upgrade - scheduler: improve failed op message * pacemaker-scheduler-improve-failed-op-message.patch - libcrmservice: find absolute paths when used with "service:" * pacemaker-libcrmservice-find-absolute-paths-when-used-with-service.patch - libcrmservice: separate LSB-specific code into own source files * pacemaker-libcrmservice-separate-LSB-specific-code-into-own-source-files.patch - execd: handle systemd actions correctly when used with "service:" * pacemaker-execd-handle-systemd-actions-correctly-when-used-with-service.patch- contoller,scheduler: guard hash table deletes (bsc#1136712) * pacemaker-contoller-scheduler-guard-hash-table-deletes.patch - controller: don't abort after delay if we're no longer DC * pacemaker-controller-dont-abort-after-delay-if-were-no-longer-DC.patch - libcrmcommon,pacemakerd: kernel task name is at most 15 characters * pacemaker-libcrmcommon-pacemakerd-kernel-task-name-is-at-most-15-characters.patch - io.c: restore -Werror buildability, put conversion specifier last * pacemaker-io.c-restore--Werror-buildability--put-conversion-specifier-last.patch- libcrmcommon: avoid memory leak on failed IPC send * pacemaker-libcrmcommon-avoid-memory-leak-on-failed-IPC-send.patch - daemons: improve connection loss messages * pacemaker-daemons-improve-connection-loss-messages.patch - libcrmcommon: improve connection loss message * pacemaker-libcrmcommon-improve-connection-loss-message.patch - pacemaker_remote: correct documentation URL in systemd unit file * pacemaker-pacemaker_remote-correct-documentation-URL-in-systemd-unit-file.patch - libcrmcommon: check file/directory writability better * pacemaker-libcrmcommon-check-filedirectory-writability-better.patch - spec: no more buildroot XML to modify- Update to version 1.1.18+20180430.b12c320f5: * XML: upgrade-2.10.xsl: fix "mark space" issue (bsc#1091661)- Update to version 1.1.18+20180427.a34ccd926: - crmd: avoid double free after ACL rejection of resource delete - lib: Changed to lowercase comparison. - all: correct misspellings - controld: remove deprecated configdir parameter - controld: deprecate and ignore configdir parameter - controld: consistently indent with spaces instead of tabs - libcrmcommon: don't record pending notify actions as completed - crmd: improve messages when a node is unexpectedly lost - cib: improve shutdown messages - cts-regression: allow specifying to run multiple tests again (bsc#1091360)- Update to version 1.1.18+20180417.24df451b5: - alerts: Delete redundant code. - liblrmd: cast time_t to long long when printing - cts: separate dummy systemd service into separate files * Drop obsolete fate-323526_pacemaker-tests-shebang-python3.patch - crm_diff: rhbz#1561617 - Ignore attribute placement when comparing in 'cib' mode - spec: remove reference to long-gone file - spec: mark -cts & -doc packages as noarch - spec: fix malformed conditional macros for systemd-less cases - alerts: Change timestamp of Alert of snmp.- Update to version 1.1.18+20180411.2f77f4922: - libcrmcommon: free signal triggers when cleaning up mainloop - libcrmcommon: fix memory leak in schema workaround - fencing: avoid memory leaks when freeing remote operation - fencing: free dynamic memory at stonithd shutdown - crmd: delete resource from lrmd when appropriate (bsc#1117381) - Test: rhbz#1565187 - Ensure failures that cause fencing are not removed until after fencing completes - rhbz#1565187 - Ensure failures that cause fencing are not removed until after fencing completes- Update to version 1.1.18+20180406.633845120: - libcrmcommon: add a byte to pid file holder - attrd,cib,libcrmcommon: avoid %z - crmd: avoid memory leak when synthesizing operation result - tools: avoid memory leak on invalid resource - crmd: log rc code as extended information - cib: avoid file descriptor leak on temporary file creation - pengine: avoid redundant test - libcrmcommon: handle compression failures properly - libcrmcommon: improve empty string check - various: improve NULL checks - libcrmcommon: improve patch xpath searches - libcrmcommon,tools: use format strings appropriate to variables - libcrmcommon: use correct argument type for duration - libcrmcluster: avoid potential use-of-NULL - libcrmcommon,libstonithd: avoid resource leaks - tools: get sensor lun in ipmiservicelogd before using it - schema upgrade: temporary fix to avoid crash on newly present text- Update to version 1.1.18+20180406.ce623681e: - fencing: convert fence_legacy to python - fencing: fix typos in messages- Update to version 1.1.18+20180406.18fe1cc2b: - XML: upgrade-2.10.xsl: add transform for automatic upgrades to latest schema - Log: establish correct character string literals also with qb_logt sink - pengine: fix swapped warning message arguments leading to segfault (bsc#1090538) - cts-pengine: add regression test for notifications for unrunnable actions - cts-pengine: update regression tests for notification changes - rhbz#1545449 - Do not perform notifications for events we know wont be executed - bundle: Added add-host option. - liblrmd: add API function for new lrmd op - lrmd: add new lrmd op to list recurring ops - spec: require corosync >= 2.0.0 - crmd,libcrmcommon,libpe_status: guint can't be negative - xml: Allow local "kind" in resource_set within rsc_order (bsc#1085515) - Pacemaker Explained: "symmetrical" defaults to "false" for serialize orders (bsc#1085515) - pengine: "symmetrical" defaults to "false" for serialize orders (bsc#1085515) - pengine: Avoid potential use-of-NULL in unpack_simple_rsc_order() (bsc#1085515) - cts-pengine: add new regression test for interval handling - libpe_status: handle ISO8601 intervals when checking for blocking failures - pengine: properly cancel recurring monitors - pengine: improve recurring operation messages - pengine: check for duplicate intervals properly - libcrmcommon: avoid misuse of crm_get_msec() - pengine: treat reconnect_interval more consistently with action intervals - libpe_status: use default timeout rather than 0 if timeout spec is bad - libpe_status: use correct default timeout for monitors- Update to version 1.1.18+20180322.d37067b2a: - spec: Make sure shadow package is installed before adding user and group- Update to version 1.1.18+20180313.2c83c6872: - cts-pengine: add regression test for changing bundle replica count - libpe_status: handle unique bundle children correctly- Update to version 1.1.18+20180312.31c732adc: - spec: make shadow dependency explicit - spec: drop requirements for bison and flex- Update to version 1.1.18+20180309.e51687162: - crmd,liblrmd,libcrmcommon: improve remote node disconnection logs - libcrmcommon: add function to get text equivalent of client type - crmd: always write faked failures to CIB whenever possible - liblrmd: add function to create resource info structure - crmd: functionize setting fake operation status - crmd: always assert when operation can't be created - crmd: avoid core dump if remote connection doesn't exist - crmd: improve lrmd failure handling - crmd: return rich error codes from get_lrm_resource() - crmd: match only executed down events - crmd: functionize pieces of do_lrm_invoke() - crmd: don't abort for v2 diff LRM refresh if actions pending - crmd: validate CIB diffs better- Update to version 1.1.18+20180305.9cd0f6cb8: - libcrmcommon: avoid memory leak when schema transform not found - tools: warn if crm_resource --wait called in mixed-version cluster - Install /etc/pacemaker directory for storing authkey file (bsc#1082883)- Update to version 1.1.18+20180226.f788652cf: - crmd: log transition ID when aborting - crmd: always log unmatched down events at least at debug level - pengine: deprecate require-all in rsc_order (fate#324508) - libpe_status: deprecate stonith-action=poweroff (fate#324508) - tools: already latest schema is not failure for cibadmin --upgrade - libcrmcluster: prefer corosync name over ring0_addr (fate#324508) - spec: add gcc to BuildRequires - attrd: Synchronize attributes held only on own node.- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456) * Drop obsolete pacemaker-cibsecret-tool-temp-disabled.patch- Update to version 1.1.18+20180216.ae50b7f5d: - various: improve string allocation - XML: upgrade-2.10.xsl: re(drop) rsc_colocation/@score-attribute{,-mangle} - XML: upgrade-*.xsl: bump the validate-with field from within stylesheet - XML: upgrade-*.xsl: omit XML declaration - upgrade-*.xsl: don't be picky about comments, PIs, etc.- Update to version 1.1.18+20180213.965befd59: - libcrmcommon: use /tmp when creating temporary XML file - tools: crm_master should always work on node attribute - tools: crm_resource --cleanup couldn't match clone instances - tools: crm_resource --refresh should ignore --operation and --interval - crmd: quorum gain should always cause new transition - rhbz#1527072 - Correctly observe colocation constraints with bundles in the Master role - Bug rhbz#1519812 - Prevent notify actions from causing --wait to hang - libpe_status: recover after failed demote when appropriate - lrmd: always use most recent remote proxy - libpe_status: limit resource type check to primitives - PE: correct mispelled constant - PE: Ensure stop operations occur after stopped remote connections have been brought up - PE: Remote connection resources are safe to to require only quorum - PE: Only allowed nodes need to be considered when ordering resource startup after _all_ recovery - PE: Ordering bundle child stops/demotes after container fencing causes graph loops - PE: Passing boolean instead of a pointer- Update to version 1.1.18+20180209.7acb22379: - use proper way to make output files executable - spec: move lrmd_test to cli package - spec: make log directories owned by cli package - spec: move all test data into cts package - pengine: move regression test to cts as cts-pengine - lrmd: move regression test to cts as cts-lrmd - fencing: move regression test to cts as cts-stonithd - tools: move CLI regression test to cts as cts-cli - rename top-level testing files and move to cts directory - tools: drop crmadmin -i and -d options (fate#324508)- Update to version 1.1.18+20180208.f6a261987: - Feature: crmd: modify feature set handling- Update to version 1.1.18+20180205.b44c57e35: - pengine,doc,tools: rename "master score" to "promotion score" (fate#324508) - libpe_status: rename bundle 'masters' to 'promoted-max' (fate#323415) - pengine,libpe_status: rename master-{max,node-max} to promoted-* (fate#324508) - various: merge clone resource type and master/slave resource type (fate#324508) - attrd,pacemakerd,libcrmcommon: make "Exiting" last message - don't use corosync logging settings (fate#324508) - crmd,libpe_rules: drop support for notification-agent/recipient - tools: improve crm_failcount exit code usage- Update to version 1.1.18+20180129.c801ab11e: - allow configuring specific python intepreter version (fate#323526) * Drop obsolete fate-323526_pacemaker-pacemaker-configure-AM_PATH_PYTHON-python3.patch - use auto-configured python executable in python shebangs (fate#323526) * Update fate-323526_pacemaker-tests-shebang-python3.patch - xml: drop score-attribute and score-attribute-mangle - pengine: avoid misuse of function parameter - libcrmservice,pacemakerd: improve privilege dropping- Update to version 1.1.18+20180119.9146c3c20: - crmd: Avoid double-removal of glib event source on stopping- Update to version 1.1.18+20180118.9c3f7a49c: - libcrmcommon: put exit/return handling in own source/header files - Build: bump build dependencies - Rebase: * pacemaker-Wno-format-signedness.patch- configure: Check for python3 with AM_PATH_PYTHON (fate#323526) * fate-323526_pacemaker-pacemaker-configure-AM_PATH_PYTHON-python3.patch- Update to version 1.1.18+20180112.bd7115b8c: - tools: improve help text - libpe_status: deprecate restart-type and role_after_failure- Update to version 1.1.18+20180109.57d48a1b1: - libcluster,libcrmcommon: improve BZ2 error messages - all: use consistent exit status codes - libcrmcommon,tools: improve XML write error handling - stonithd,libcrmcommon: auto-calculate stonith-watchdog-timeout when requested (fate#324508) - logrotate: switch user when rotating logs- cts: Operate pacemaker service on startup to prevent triggering StopWhenUnneeded of corosync service * pacemaker-cts-StartCmd.patch- Update to version 1.1.18+20180104.7ba28d854: - tools: improve crm_standby option handling - tools: improve crm_standby help and error messages - tools: improve crm_master option handling - tools: improve crm_master help and error messages - tools: remove deprecated stonith_admin option (fate#324508) - tools: remove deprecated crm_verify option (fate#324508) - tools: remove deprecated crm_attribute --node-uuid option (fate#324508) - tools: avoid using deprecated options - tools: remove deprecated crm_resource options (fate#324508) - libpe_status: use consistent monitor for implicit remotes - all: overhaul log locations (fate#324508)- spec: Switch dependencies from python to python3 (fate#323526) - tests: Switch shebang from /usr/bin/python to /usr/bin/python3 (fate#323526) * fate-323526_pacemaker-tests-shebang-python3.patch- Update to version 1.1.18+20180101.494eacba4: - migrate cts to python3 (fate#323526)- Update to version 1.1.18+20171221.c91a650ec: - libcrmcommon: drop special handling of pre-1.1.7 failed recurring op history - libcrmcommon: drop special handling of pre-1.1.4 migration history entries - crmd: drop support for DCs that don't support throttling - cib,libcrmcommon: drop support for PCMK_legacy variable- libcrmcluster: use crm_strdup_printf() instead of calloc() - attrd: avoid small memory leak at start-up - systemd unit files: restore DBus dependency - libcrmservice: avoid memory leak on DBus error - pengine: validate more function arguments - Upstream version cs: 098d557cc495944e1b6ebd9d05b819d6da74825e- libpe_status: drop support for "requires" operation meta-attribute (fate#324508) - tools: crm_resource --cleanup with no resource specified (bsc#1071503) - tools: crm_resource --cleanup (bsc#1071503) - crmd,libpe_status: drop support for legacy option aliases (fate#324508) - libstonithd,libpe_status: drop support for pcmk_poweroff_action (fate#324508) - libstonithd,libpe_status: drop support for pcmk_arg_map (fate#324508) - libstonithd,libpe_status: drop support for pcmk_*_cmd (fate#324508) - libpe_status,libpe_rules: drop support for default-action-timeout (fate#324508) - libpe_status: use correct default timeout for probes - libpe_status: drop support for operation meta-attributes in instance_attributes (fate#324508) - libpe_status: fix precedence of operation meta-attributes - libpe_status,libpe_rules: remove support for is-managed-default (fate#324508) - libpe_status,libpe_rules: drop support for default-resource-stickiness (fate#324508) - crmd: drop support for LRMD_MAX_CHILDREN environment variable (fate#324508) - tools: remove crm_mon SMTP support (fate#324508) - tools: remove crm_mon SNMP support (fate#324508) - lrmd: remove deprecated -r/--dummy command-line option (fate#324508) - tools: crm_resource --cleanup for non-primitive resources (bsc#1071503) - pengine: unfence before probing or starting fence devices - Upstream version cs: 4528eb3b726197ab077243ab923ed291473f0ed7- attrd: ensure node name is broadcast at start-up (CLBZ#5330) - Upstream version cs: 407ded8de381543e71c5b94b3ade296fcfd2c828- libpe_status: remove support for default-resource-failure-stickiness (fate#324508) - libpe_status: remove support for resource-failure-stickiness (fate#324508) - various: remove support for pre-Pacemaker-1.0 CIB XML (fate#324508) - libpe_status,tools: remove support for legacy ticket state entries (fate#324508) - various: remove isolation wrapper support (fate#324508) - systemd unit files: enable TasksMax=infinity (bsc#1028138, bsc#1066710) * Drop obsolete bug-1028138_pacemaker-pacemaker.service-TasksMax.patch - Upstream version cs: 53a3fe14b15b087bbde9ccb524d11d0a413cc6e9- RA: NodeUtilization RA is now shipped by resource-agents package (bsc#1070347) * Drop bug-1015842_pacemaker-NodeUtilization-RA.patch- crmd: default record-pending to TRUE (fate#324508) - tools: enable new crm_resource --cleanup/--refresh behavior (fate#324508) - Upstream version cs: f36ad364748880815bf00151c516a1f2deae2fed- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Update to version 1.1.18 - libpe_status: always use default key location with bundles - attrd,stonithd: more efficient regular expression parsing - libpe_status: avoid potential NULL dereference - tools: use proper variable in message from crm_resource -g - tools: use uber-parent for crm_resource -a/-A - tools: use g_main_loop_is_running() properly - libpe_status: monitors are rescheduled, not reloaded - crmd: determine restart/private digests correctly - systemd: add TasksMax comment to pacemaker_remote unit (bsc#1028138, bsc#1066710) - tools: make regression test insensitive to line number changes - pengine,tools,libpe_status: avoid unnecessary use of pe_find_current - pacemaker.service: Recommend not to limit tasks (bsc#1028138, bsc#1066710) * Update bug-1028138_pacemaker-pacemaker.service-TasksMax.patch - tools: set the correct OCF_RESOURCE_INSTANCE env when crm_resource --force-* executes RA - typo: overriden -> overridden - portability: the difference of time_t values is given by difftime() - pengine: avoid not-really-possible use-of-NULL - PE: Have bundles log to stderr so that 'journalctl -M' works (rkt) - tools: don't expect reply to failed send - pengine: use newer Pacemaker Remote terminology - pengine: memory leak when writing graph to file - tools: don't reinvent the glib wheel - tools: implement clean-up dry-run correctly - pengine: avoid potential use-of-NULL - Update regression test outputs - PE: Improved logging of reasons for stop/restart actions - PE: Allow all resources to stop prior to probes completing - PE: Correctly defer processing of resources inside containers - crm_resource: Ensure we wait for all messages before exiting - crm_resource: Have cleanup operate only on failures - PE: Have bundles log to stderr so that 'docker logs' works - PE: Resources are allowed to stop before their state is known everywhere - PE: Use the node we already have and know isnt NULL - PE: Flag resources that are acting as remote nodes - crmd: Scale all cib operation timeouts - PE: Bare metal remotes _can_ run resources now and must be probed - PE: Bundles only need to wait for other containers on the same node to be probed - crmd: Scale timeouts with the number of remotes too - PE: There is no need for port mapping directives when net=host is specified - PE: Do not always expire failed operations of nested remotes - PE: Consolidate REMOTE_CONTAINER_HACK logic - PE: Exclude resources and nodes from the symmetric_default constraint in some circumstances - crm_resource: Don't cleanup on nodes not meeting the discovery conditions - PE: Restore the ability to send the transition graph via the disk if it gets too big - crm_resource: Prevent disconnection from crmd during cleanup - PE: Do not probe connection resources until the container is active - PE: Detailed resource information should include connection resource state - Tools: Allow crm_resource to operate on anonymous clones in unknown states - tools: Clean up everywhere if we don't know anything about the resource - crm_resource: See what cleanup would have done for a saved configuration - PE: Only pass requests for promote/demote flags onto the bundle's child - Upstream version cs: 2b07d5c5a908998891c3317faa30328c108d3a91 (Pacemaker-1.1.18)- pengine: if ignoring failure, also ignore migration-threshold - libcrmcommon,liblrmd,lrmd: improve messages for failed remote sends - libcrmcommon,lrmd: meaningful error codes when sending remote messages - libcrmcommon: lower watchdog messages when default - tools: set meta_timeout env when crm_resource --force-* executes RA - fencing: don't print event twice with stonith_admin --verbose - fencing: memory leak in stonith_admin --env - fencing: improve stonith_admin help - crmd: hard error if remote start fails due to missing key - libcrmcommon,liblrmd: report meaningful async connection errors - libcrmcommon: return meaningful error codes to connection callbacks - libcrmcommon: async connection callback must get negative error codes - libcrmcommon,liblrmd: improve remote connection messages - pacemaker_remote: warn if TLS key can't be read at start-up - lrmd: tweak TLS listener messages - pengine: don't probe offline or unclean guest nodes (fate#324441) - agents: ifspeed - Try to detect interface name from ip address. - pengine: don't keep unique instances on same node - pengine: improve messages when assigning resources to nodes - Upstream version cs: 23be51236edc34477a99d6979bc0e2cc1e1a7684- libpe_status: avoid use-after-free (again) - lrmd: don't reject protocol 1.0 clients (bsc#1009076) - tools: print descriptive messages for OCF exit code - tools: differentiate trace log level for RAs - tools: show RAs debug logs only when verbose mode for crm_resource --force-* - tools: suppress an invalid error message for crm_resource --force-* options - pengine: don't schedule reload and restart in same transition - libcrmservice: list systemd agents alphabetically - libcrmcommon: add function to sort list alphabetically - pengine: new regression test for unrecoverable remote connection - libcrmservice: avoid infinite loop on bad DBus reply - libcrmservice: list systemd unit files, not only active units - libpe_status: print container type in lowercase when outputting XML - tools: re-enable crm_resource --lifetime option (CLBZ#5251, bsc#950128) - libcrmcluster: improve error checking when updating node name - tools: fix crm_resource --why output when resource and node are specified - libcrmservice: parse LSB long description correctly - libcrmservice: follow LSB standard for header block more strictly - libcommon: Erase old exit_reason - Upstream version cs: 36d2962a8613322fc43d727d95720d61a47d0138- crm_mon: error-exit child if execl should return - crmd: avoid memory leak when caching meta-data - tools: ensure crm_resource data set is initialized - libcib: ensure xpath result isn't empty - tools: missing break statement in attrd_updater - libcrmcommon: check sscanf() result when parsing schema version - tools: check sscanf return value when parsing failed op list - tools: treat bundles with replicas like clones when restarting - tools: allow crm_resource to be called without arguments - tools: update regression test for recent message changes - tools: improve crm_resource --show-metadata error messages (CLBZ#5287) - libcrmcommon: add functions for using agent specifications - tools: improve crm_resource help (CLBZ#5251, bsc#950128) - libcrmcommon: improve cluster option parsing - Upstream version cs: 27b631162104d90e944cbc107c2d46e983f94ca7- spec: Disable deprecated crm_mon SNMP/ESMTP support (configure alerts instead)- pengine: add tests for no-quorum-policy=suicide - libpe_status: properly detect when nodes should suicide - libpe_status: always log startup-fencing value - libpe_status: generalize ability to log warning only once - pengine: reset loss-policy from fence to stop if no fencing - pengine: avoid use-of-NULL when unpacking tickets - tools: ensure crm_resource works if no command is specified - libpe_status: validate no-quorum-policy=suicide correctly - tools: use-after-free in crm_diff - RA: ClusterMon - Correctly handle "update" parameter - attrd: "peer peer loss" -> "peer loss" - Tools:Refactored Crm_resource to have proper assignments for require_* - Upstream version cs: c4a09cfec99570a2509831f4b8974457dcdb1af6- Log: Reduce verbosity of developer logging - PE: We most definitely need to probe connection resources - PE: Ensure the bundle nodes get set with the correct discovery mode - PE: Implement probing of container remote nodes (fate#324441) - attrd: Tweak log messages for clarity - crm_resource: Do not send history erasure commands for nodes where this is none - PE: Resources in bundles should also respect failcounts - PE: Do not send notifications to unclean bundles - PE: Prevent graph loops when fencing the host out from underneath a bundle - Tools: Allow bundle resources to read/write master scores based on the same logic as attrd (cf34f4c) - PE: bundle: Send an additional host list when container-attribute-target=host - PE: Correctly interpret colocation with bundles - PE/attrd: Allow bundle resources to read/write attributes based on the physical host rather than the container name - Upstream version cs: 4328c6a65424d1caf9785107664ec1b7fc824664- Rebase: * bug-728579_pacemaker-stonith-dev-id.patch - Fix: -Wformat-truncation=2: prevent format truncation - snprintf: use correct signedness in print format specifiers - snprintf: use sizeof(X) as size + prevent off-by-ones - crmd,libcrmcommon,libcluster,tools: handle PID as string properly - tools: use right size for string buffer in fake_transition.c - crm_resource: fix a memleak - pengine: sprintf -> snprintf - libcrmcommon: fix possible infloop in buffer_print - crm_snprintf_offset like parts: fix off-by-ones - attrd: improve update messages - stonithd,lrmd,pengine: spelling/formatting corrections - build: install ifspeed resource agent - libcrmservices: avoid assert for HB resource with no parameters - crmd: re-enable local collection of meta-data for remote nodes - crmd,pengine,libpe_status,libpe_rules: remove support for versioned attributes - crmd: avoid memory leak when node state is unknown - crmd: avoid assert if LRM query fails - libpe_status: more error checking when unpacking bundles - libpe_status: bundles now respect PCMK_authkey_location - libcrmcommon,liblrmd,lrmd: validate PCMK_remote_port - PE: Bundles: add support for rkt bundle type - libcrmcommon,libpe_rules: unpack new alert filter syntax - xml: allow specifying alertable events - Fix: a proper calculation of a speed in case of hfi1 for ifspeed RA. - pengine: detect proper clone name at startup - pengine: don't ignore permanent master scores at startup - pengine: handle resource migrating behind a migrating remote connection - stonith-ng: advertise pcmk_on_action via metadata - liblrmd: Make sure the operation of a remote resource returns if setup of the key fails (bsc#1053463) - libcrmcommon,pengine: improve log messages - PE: only print to stdout if run from command line - crmd: eliminate size restriction on node state xpath - pengine: add regression test for remote connect interval wait - pengine: re-enable unrecoverable remote fencing - pengine: Make sure calculated resource scores are consistent on different architectures (bsc#1054389) - PE: Allow resources inside bundles to receive notifications - PE: Update unfencing device change test output - attrd,crmd: erase attributes at attrd start-up, not first join - attrd: accept connections only after CIB connection is active - attrd: make CIB connection function self-contained - attrd: improve messages - stonith-ng: make fencing-device reappear properly after reenabling - crmd: don't need meta-data after resource is deleted - crmd: only get meta-data for OCF and stonith agents - libcrmcommon: generate agent key without :: if no provider - pengine: avoid fence loop for remote nodes - attrd: don't log error if CIB doesn't have an alerts section - PE: Only retrigger unfencing on nodes that ran operations with the old parameters - PE: Output resource changes in a friendlier format - PE: Attempt to indicate why resources are changing state - Mechanism for recording why an action is required - Support unfencing of remote nodes - PE: Ignore optional unfencing events and report the fencing type - Upstream version cs: 20cffae1e9c64217339173c197edac8612ad02b9- logging: ensure blackbox gets generated on arithmetic error - crm_mon: overcome crm_system_name no longer influenced with argv - crm_mon: make CGI bail out on suspicious arguments - crm_mon: make CGI bail out properly and w/o help screen - crm_mon: canonical casing of Content-Type CGI header field - libcrmcommon: handle schema versions properly - attrd: don't reconnect to lrmd if already connected - PE: Ensure nested container connections run on the same host - crmd: send alerts via lrmd - lrmd: execute alerts as cluster daemon user - libservices: add ability to specify user to run an action - libcrmcommon: improve user lookup messages - extra: correct ClusterMon metadata - attrd: avoid memory leak when disconnecting from lrmd - attrd,tools: avoid memory leaks from use of crm_itoa() - attrd: be consistent about attr/host logging - attrd: delay lrmd connect until needed - attrd: add timestamp to alert just when needed - attrd: improve log messages - libcrmcommon,libpe_rules: avoid crash when alerts section has comments - libcrmcommon: add API call for next named XML child - liblrmd: only set environment variables with a value - attrd,liblrmd: handle adding env var at head of list - lrmd: drain alerts at shutdown - attrd,lrmd: generate alert sequence number in lrmd - liblrmd: better trace message when creating command - stonith-ng: avoid double-free of pending-ops in free_device - crmd: log correct feature set revision - PE: update start-failure-is-fatal help - cib: avoid unnecessary memory allocation - stonith-ng: add pcmk_delay_base as static base-delay (fate#324488) - XML: upgrade-1.3.xsl: be explicit about non 1:1 wrt. ACL @attributes - enable upgrade XSLTs to use meaningfully - Tools: Added option of --why/Y to crm_resource to inform the status of resources if running or not - various: fix spelling in messages and comments - cib: reword trace message - PE: Prevent use-after-free when creating bundle constraints - add versioned operations support - TE: don't bump counters when action or synapse is invalid - obtain metadata in CRMd via async call - tools: add version options for cibsecret - alerts: Support of meta attributes(kind, attribute_name). - attrd,lrmd,lib: Addition of the transmission function of the attribute alert to attrd. - extra: Change alert_xxx.sh.sample for attribute alerts. - extra: Change PCMK-MIB.txt for attribute alerts. - XML: upgrade-1.3.xsl: simplify branching - XML: upgrade-1.3.xsl: drop superfluous branching - XML: upgrade-1.3.xsl: simplify "weak identity" transform rules - XML: upgrade-1.3.xsl: easy simplifications + redundant declarations drop - re-enable versioned attributes - Upstream version cs: d134f83b4f0188f6d7cd381c8cdda1a2a7c38bd5- Update to version 1.1.17 - PE: Ensure unrecoverable remote nodes are fenced even if no resources can run on them - iso8601: strftime needs fully populated struct tm (bsc#1058844) - crmd: abort transition whenever we lose quorum - PE: Ensure bundle nodes and child resources are correctly cleaned up - PE: Generic ordering for anything with bundles - PE: Default to non-interleaved bundle ordering for safety - PE: Functional inter-bundle ordering when either side has no child - PE: Basic inter-bundle ordering when both sides have children - PE: Implement bundle ordering - libpe_status: properly disallow other resources from bundle nodes - libcib: get remoteness correctly from node status - libpe_status: avoid memory leaks when creating bundle remote resource - libpe_status: disallow resources on bundle nodes - pengine: make checks a little safer - PE: Clones within bundles may also have notifications enabled - PE: Correctly implement pe_order_implies_first_printed - PE: Do not re-add a node's default score for each location constraint - PE: Bundle location constraints should only apply to the IP and docker resources - PE: Bundles: Allow clones to be colocated with bundles - PE: Bundles: Implement colocation of primitives and groups with bundles - cib,libcib: support option for IPC eviction threshold - libcib: correctly search for v2 patchset changes - libcib: always use current values when unpacking config - libcrmcluster: fix spelling error in error message - crmd: DC should update stonith fail count before aborting transition - cib: Broadcasts of cib changes should always pass ACLs check (bsc#1042054) - Upstream version cs: b36b869ca8fe74caa077c286304f653f0be117ef (Pacemaker-1.1.17)- pengine,libpe_status: revisit fencing messages - PE: Improve logging of node fencing and shutdown - PE: Fence unrecoverable remote nodes with no resources - libpe_status: propagate multiple-active=block for bundles - libpe_status: set parent for bundle components - attrd: broadcast local overrides of sync'ed attributes - crmd: attribute write-out not needed with atomic attrd - PE: Prevent use-after-free when creating bundle constraints - PE: Ensure remote nodes are fenced when the connection cannot be recovered - PE: Improved fencing logging - PE: Assume resources on remote nodes do not need to be restarted until absolutely necessary - PE: Correctly compare a point with NULL instead of FALSE - libpe_status: correctly flag remote connection resources - pengine: improve internal bundle constraints - pengine: re-phrase trace log for internal constraints - libpe_status: set #kind to "container" for bundle nodes - pengine,libpengine: avoid potential use-of-NULL - pengine: avoid use-of-NULL in bundle without primitive - libpengine: don't double score when adding first allowed node - pengine: improve detection of invalid constraints - PE: Prevent use-of-NULL when expanding containers - PE: Partially restore 62ed004 to ensure remote connections are available before attempting resource recovery - stonith-ng: Trigger on constraints added to cib (bsc#1042374) - Upstream version cs: e47bd5bc77a3d1b38589b3716f5112ed39329e7b- RA: NodeUtilization - Use xl if available (bsc#1015842) * Drop obsolete: * * bug-1015842_pacemaker-NodeUtilization-RA-1.patch * * bug-1015842_pacemaker-NodeUtilization-RA-2.patch * * bug-1015842_pacemaker-NodeUtilization-RA-3.patch * Add bug-1015842_pacemaker-NodeUtilization-RA.patch - Drop obsolete pacemaker-lrmd.h-include-libxml.patch - lrmd,pengine: remove versioned parameters from documentation and tests - lrmd,pengine: don't support versioned attributes by default - Containers: Relax docker/remote colocation constraint when appropriate - Containers: Ensure remote resources are only allocated to full cluster nodes - lrmd: Ensure verbosity options are handled after crm_log_init() - pengine: unmanage guest-container puts guest in maintenance - pengine: unique ids for meta-attributes of guest-connection - pengine: update regression tests for probes of guest-connections - pengine: have guest-node connection-resources probed - crmd: clean up throttle memory on exit - libcib: avoid use-after-free when deleting CIB connection - systemd unit files: add dependency on resource-agents-deps - pengine: Allow use of resource params and meta-params in location rules - libcrmcommon: avoid evicting IPC client if messages spike briefly - libcrmcommon: don't delay next flush by more than 5 seconds - libcib: downgrade ACL status message to trace - crmd: don't destroy election structure twice - crmd: avoid use-after-free when disconnecting from CIB - libcib: functionize destroying op callback table - crmd,libcrmcommon: update throttle when CPUs are hot-plugged - crmd: remove I/O load checks - libcrmcommon: add function to get number of CPU cores - crmd: functionize checking throttle thresholds - crmd: functionize setting throttle load target - CTS: update corosync fail patterns - crmd: check correct timer for being started - crmd: improve fencing result message - lrmd: Have pacemaker-remote reap zombies if it is running as pid 1 - pengine: add test for per-op fail count - libcrmcommon: filter attributes with '#' from XML fields - extra: Dummy stop shouldn't fail if monitor is in progress - extra: use whitespace consistently in Dummy - crmd: don't fence old DC if it's shutting down as soon-to-be DC joins - crmd: avoid DC sending offer to itself twice - crmd: don't restart transition if no fence devices - crmd: skip restart at (not above) stonith-max-attempts - crmd: allow clearing all stonith fail counts - crmd: track stonith fail counts on all nodes - crmd: forget stonith failures when forgetting node - crmd: consider target when checking stonith failures - crmd: check for too many stonith failures only when aborting for that reason - PE: Remote: Allow remote nodes that start containers with pacemaker remote inside - fencing: ignore empty 'action' parameter in fence devices - crmd: fix remove attr_id from update_attr_delegate() - Fix log showing the node status so that it is easily distinguishable from other logs - crmd: don't abandon fencing after one "no devices" failure - libcrmcommon: more useful message if can't open dump file - libcib: use new convenience function for sanitizing ID - libpe_status: implement active check for bundles - tools: update crm_mon RNG schema for bundles - crmd: add set_join_state() - crmd: fix line wrapping - crmd: update_attr_delegate() instead of set_standby() - PE: Containers: Allow custom docker run commands - logrotate: rotate pacemaker logs inside bundled containers - libpe_status: improve bundle docker defaults - tools: crm_resource should free result if re-running function returns one - libpe_status: avoid memory leak when counting failures - crmd: remove functions from crmd_utils.c - PE: Containers: Ensure replicas_per_host=1 is respected during rediscovery and startup - libcib: change the format of the state id in set_standby() - PE: Containers: Allow the internal and external ports to optionally differ - PE: Containers: Allow custom control ports when using the machine's local address - crmd: set_standby in first_join - PE: Bundles: Better support for net=host, allow the pacemaker-remote port to change - Remote: Allow the port to listen on to be specified on the commandline - libpe_status: allow more than 254 containers in a bundle - crmd,liblrmd: handle crmd-local proxy requests properly - common: Prevention of the double definition. - pacemaker_remoted: Allow compilation with glib older 2.36 - PE: Containers: Default 'replicas' to the same number of 'masters' - PE: Containers: Correctly find the right anonymous child resource running in a container - PE: Clone: Simplified allocation function - PE: Contaienrs: Better checks when assuming a container will start - PE: Preferred nodes are only accepted if their scores are equal to the otherwise best candidate - PE: Containers: Remove containers on termination by default - PE: Container: Add support for non-default docker networks and supplying external IPs to container resources - PE: Containers: Allow specifiying the maximum number of peers per host - PE: Containers: Force a sane hostname - PE: Containers: Add support for nic and netmask parameters - PE: container: Parse network and mount options - PE: Allow the graph to assume container nodes will come up and schedule actions for it - PE: Force node scores for containerized resources - PE: Basic allocation of containers - Core: Track the line number of callers of crm_(set|clear)_bit - xml: Correctly find the first child element - PE: Basic container parsing and expansion (fate#323415) - PE: Correctly test for clone functionality - Improve recovery when demote fails with OCF_NOT_RUNNING - Upstream version cs: ce86684f5d0672791e9fd3043a84f0931cdd97ea- libcrmcluster,crmd: log join phase as text rather than integer - pacemaker-remote: pacemaker_remoted shutdown while unmanaged - tools: disable agent stdout/stderr for crm_resource --validate - tools: Add "--validate" command to crm_resource - tools: crm_resource should set OCF_RESKEY_crm_feature_set - tools: make crm_failcount compatible with per-operation failcounts - tools: support clearing failure of a single operation with crm_resource -C - crmd: support clearing failure of a single operation - crmd: make clearing last failure more efficient - attrd,libcrmcommon: support clearing failure of a single operation - attrd,crmd,libraries,tools: track resource failures per-operation - tools: support crm_failcount -q as advertised - Upstream version cs: 77ea74d01bcb6b7100e1c7acab0e66e79aceaf8b- NodeUtilization: Never set hv_memory to a negative value (bsc#1015842) * bug-1015842_pacemaker-NodeUtilization-RA-3.patch - NodeUtilization: Fix mixed indentation, set executable bit (bsc#1015842) * bug-1015842_pacemaker-NodeUtilization-RA-2.patch - RA: NodeUtilization - Use xl if available (bsc#1015842) * Drop obsolete bug-1015842_pacemaker-NodeUtilization-RA.patch * Add bug-1015842_pacemaker-NodeUtilization-RA-1.patch- spec: Merge the SLE and Factory versions * enable_fatal_warnings=0- crmd: new cluster option stonith-max-attempts with default value 10 (fate#323417) - crmd: Change of the log level and addition of uuid. - crmd: use new attrd op to clear fail counts - tools: crm_resource -C should clear last-failure - libcrmcommon: add API for new attrd clear-failure operation - attrd: add more detail to legacy attrd messages - attrd: add API for clearing failures - Upstream version cs: e55d506cc390f0a0335b4ec6e365ea89da30b6b1- pacemaker.service: Add presetting TasksMax=4915 (bsc#1028138) * bug-1028138_pacemaker-pacemaker.service-TasksMax.patch- Build: lrmd: Include libxml/tree.h in lrmd.h * pacemaker-lrmd.h-include-libxml.patch- libfencing,fencing: properly remap "action" in configuration - libservices: ensure recurring actions table is created before using - libservices: improve error messages when creating operation - libservices: properly detect in-flight systemd/upstart ops when kicking - libservices: properly cancel in-flight systemd/upstart op - libservices: handle in-flight case first when cancelling an operation - libservices: prevent use-after-free when freeing an operation - libservices: ensure completed ops aren't on blocked ops list - libcrmcommon: assert if can't generate operation key - libcrmcommon: improve remote connection polling messages - crmd: clear failure only for requested node - crmd: improve message when clearing failures - pengine,libpe_status: make failcount clearing messages more helpful - pengine,libpe_status: don't clear same fail-count twice - cib: properly mark variable as volatile - libcib: avoid memory leak in query_node_uuid() - tools: avoid NULL dereference in crm_resource debug message - cib,libcrmcommon,lrmd: handle IP addresses better in messages - tools: crm_attribute should prefer node name from environment - libcrmcommon: Correctly delete XML comments according to their positions (bsc#1024037) - libcrmcommon: Correctly compare XML comments to prevent crmd from getting into infinite election loop (bsc#1024037) - crmd,libcrmcluster: minor log message improvements - tools: avoid deprecated function in notifyServicelogEvent - libcrmcommon,pengine,tools: pass local node name to resource agents - use callback instead of sync call - libcib: make querying node uuid more efficient - tools: allow regular expression with crm_attribute - attrd: support regular expressions in legacy attrd - attrd: support Pacemaker Remote node attributes in legacy attrd - use status scope to start node in standby mode - attrd: ignore unsupported requests in legacy attrd - attrd,crmd: implement peer remove requests in legacy attrd - crmd: don't clear remote node transient attributes unnecessarily - crm_mon: protect against non-standard or failing asctime - libservices(sync): partially prevent killing foreign process - libservices (sync): ensure no zombie is left behind - cib: improve re-sync handling - tools: implement crm_failcount command-line options correctly - tools: use correct regular expression for fail counts in crm_resource - cib: never disable legacy mode with corosync 1 stacks - cib: improve warning when legacy diff fails - libcrmcommon: ensure filename is not NULL before opening - crmd: be more resilient when checking an LRM command's "from" - crmd: improve crmd's LRM-related log messages - tools: properly ignore version with crm_diff --no-version (bsc#888726) - Ability to start node in standby (fate#323416) - Upstream version cs: a7825f4f0a8db272d1ce0b1f93e8044cbcaa5144- libservices: properly watch writable DBus handles - tools: don't reference hidden parameter in crm_resource help text - Alert: Set SNMP_PERSISTENT_DIR directory for the snmp-trap tool. - dbus: Prevent lrmd from hanging on dbus calls (bsc#1015264) - spec: add %check to run a subset of tests on rpmbuild - crmd: update cache status for guest node whose host is fenced - pengine: consider guest node unclean if its host is unclean - pengine: create a pseudo-fence for guest node recovery - pengine: guest node fencing doesn't require stonith enabled - pengine: remove unnecessary assert - mcp: Correction of the difference in access permission setting. - stonith_admin: Addition of the list-targets option. - stonith: Check for missing params in new device and dup - libservices: treat systemd service reloading as OK (bsc#1059187) - crmd: increase severity when fencing didn't happen (bsc#1011240) - rng: Create resources-2.7.rng to update template class validation - libcrmcommon: Don't report error if the output file isn't syncable - crmd: bump feature set - pengine: disable migration for versioned resources - add versioned parameters support - Upstream version cs: 2817a2081e9e70e7412f0d0a253495611afab55e- wd: Fix to not compare NULL when environment variable is not set - mcp,pacemaker_remote: order after time-sync - configure: fix fouled parameter expansion * Drop obsolete pacemaker-configure-systemd-detection.patch - xml: rng: Keep score-attribute{,-mangle} in the existing RelaxNG schema files for graceful upgrades - Upstream version cs: 94ff4df51a55cc30d01843ea11b3292bac755432 (Pacemaker-1.1.16)- RA: NodeUtilization - Use xl if available (bsc#1015842) * bug-1015842_pacemaker-NodeUtilization-RA.patch- spec: Prevent overwriting existing sysconfig files by conditionally running %fillup_only (bsc#1022807, bsc#980341)- spec: cts brings an RA that needs python-systemd- Explicitly own %{_defaultdocdir}/%{name}.- Revert "Build: configure: make systemd detection akin to + before Upstart one" * pacemaker-configure-systemd-detection.patch - libcrmcommon: fix CVE-2016-7035 (improper IPC guarding) (bsc#1007433) - sysconfig: minor tweaks (typo, wording) - various: issues discovered via valgrind and coverity - attrd_updater: fix usage of HAVE_ATOMIC_ATTRD - Upstream version cs: b6f251a13fadca0cb74702b0c007a55275c8ea09- Rebase: * pacemaker-NodeUtilization-RA.patch - extra: add resource agent for managing a node attribute - crmd: cl#5185 - Record pending operations in the CIB before they are performed (bsc#1003565) - ClusterMon: fix to avoid matching other process with the same PID - mcp: improve comments for sysconfig options - spec: require libqb >= 0.13.0 - tools: crm_standby --version/--help should work without cluster - spec: reorganize so %pre etc. blocks are self-contained - spec: require python >= 2.6 - spec: comment better - libpengine: ensure child is not null before looking up value - libpengine: only log startup-fencing warning once - Upstream version cs: 722276c442bf023931842313bfe0dfb7d90a7c15- pacemaker.service: do not mistakenly suggest killing fenced - pacemaker.spec: consume "systemdunitdir" via %_unitdir - libcrmcommon: report errors consistently when waiting for data on connection (bsc#986644) - libservices: use DBusError API properly - remote: Correctly calculate the remaining timeouts when receiving messages (bsc#986644) - libfencing: report added node ID correctly - crm_mon: Do not call setenv with null value - pacemaker_remote: allow remote clients to timeout/reconnect - pengine: Do not fence a maintenance node if it shuts down cleanly (bsc#1000743) - install README in doc instead of now-removed AUTHORS file - ping: Avoid temporary files for fping check (bsc#987348) - all: clarify licensing and copyrights - schemas.c: treat CIB with unrecognized validate-with better - schemas.c: avoid downgrade validate-with in a corner case - xml.c: better info in cli_config_update on no validation success - fix infloop when no schema validates on update_validation - xml.c: internal self-or-less reference inflicted infloop guard - crmd: Resend the shutdown request if the DC forgets - ping: Avoid temp files in fping_check (bsc#987348) - crmd: Ensure the R_SHUTDOWN is set whenever we ask the DC to shut us down - crmd: clear remote node operation history only when it comes up - libcib,libfencing,libtransition: handle memory allocation errors without CRM_CHECK() - tools: make crm_mon XML schema handle resources with multiple active - tools: make crm_mon resources section more consistent - crmd: bump feature set - pengine: set OCF_RESKEY_CRM_meta_notify_active_* for multistate resources - LSB init: try to be a little more compliant - pengine: avoid null dereference in new same-node ordering option - lrmd,libcluster: ensure g_hash_table_foreach() is never passed a null table - crmd: don't log warning if abort_unless_down() can't find down event - lib: Correction of the deletion of the notice registration. - stonithd: Correction of the wrong connection process name. - crmd: Keep a state of LRMD in the DC node latest. - pengine: avoid transition loop for start-then-stop + unfencing - libpengine: allow pe_order_same_node option for constraints - pengine: avoid sisyphean score-attribute-mangled parsing - xml: score-attribute{,-mangle} has no meaning for rsc_colocation - Upstream version cs: 4cce2b26f6f468c342adb24bf74234a12a0070c2- cts: Restart systemd-journald with "systemctl restart systemd-journald.socket" (bsc#995365) * bug-995365_pacemaker-cts-restart-systemd-journald.patch- libcrmcommon: properly handle XML comments when comparing v2 patchset diffs - crmd: don't abort transitions for CIB comment changes - libcrmcommon: log XML comments correctly - libcrmcommon: remove extraneous format specifier from log message - crm_mon: Avoid logging errors for any CIB changes that we don't care about (bsc#986931) - crmd: When node load was reduced, crmd carries out a feasible action. - Upstream version cs: 58fef06198fef17873d0d2e2d0cc5c7db73c5724- ping: Log sensible error when /tmp is full (bsc#987348) - crm_mon: Do not log errors for the known CIB changes that should be ignored (bsc#986931) - logging: Enable synchronous logging when blackboxes are enabled - libpengine: print target role and blocked status in XML output - tools: add maintenance mode and disabled/blocked resources to crm_mon XML/HTML output - tools: break up long lines in crm_mon console output - libservices: include socket units when listing all systemd agents - fencing: fence_legacy - Search capable devices by querying them through "list" action for cluster-glue stonith agents (bsc#986265) - extra: correct quoting of timestamp-format in alert-snmp-example - pengine,tools: Display pending resource state by default when it's available (bsc#986201) - rng: Allow rsc-pattern in locations for version 2.6 - pengine: Expand regexp references in location constraints - pengine: Allow to set base score for progressive node health strategy - systemd: Allow unit names ending in .socket. - watchdog: Correction to do to change action of the system reboot by fail_fast - Upstream version cs: 630d0d112092042b6f79c2a02bb442e82fee93ec- Remove conditionals that are not really needed as they always kept the values - Remove the cman conditional as we do not even have the dependencies to build with it in OBS - Convert deps to pkgconfig style ones and remove deps that are not mentioned by the testsuite or the configure.ac- Update to version 1.1.15 - crmd: mention that graceful remote shutdowns may cause connection failures (bsc#981489) - alerts - drop 5min timeout to 30s since it is configurable now - Bug bz#5292 - crmd: wait for alerts to finish - libais,libcluster,libcrmcommon,liblrmd: don't use %z specifier - alerts: ensure sample alert agents handle undefined recipient - tools: crm_resource -T option should not be hidden anymore - PE: Correctly update the dependant actions of un-runnable clones - alerts: make timestamp-format-string work properly if strftime-escape is the last character - extra: make alert-file-example cope with spaces in timeformat-string - attrd,ipc: Prevent possible segfault on exit (bsc#986056) - alerts: fix SMTP recipient defaulting - tools: properly handle crm_resource --restart with a resource in a group - tools: don't assume all resources restart on same node with crm_resource --restart - tools: avoid memory leaks in crm_resource --restart - tools: remember any existing target-role when doing crm_resource --restart - tools: correctly count starting resources when doing crm_resource --restart - Upstream version cs: e174ec84857e087210b9dacee3318f8203176129 (Pacemaker-1.1.15)- Clean-up with spec-cleaner - Drop heartbeat conditions, no heartbeat around - Sort CMAN conditionals to be actually logical - Run fdupes to not waste so much space - Add logrotate to reqs of pacemaker-cli - Cleanup rpmlintrc to contain only bare needed minimum - Run basic sanity check in %check phase- Drop sysvinit support we now run on sle12+ only - Cleanup the define conditionals that are never used - Drop profiling and coverage options it is not enabled by default and better to run separately- libcrmcommon: really ensure crm_time_t structure is fully initialized by API calls - extra: correct syntax error in sample alert script - crmd: avoid timeout on older peers when cancelling a resource operation - crmd: use proper resource agent name when caching metadata - crmd: avoid memory leak when sending fencing alert - liblrmd: avoid memory leak when closing or deleting lrmd connections - extra: improve determination of successful monitors in SNMP alert script - tools: avoid memory leak when crm_mon unpacks constraints - pengine: avoid use-after-free with location constraint + sets + templates - pengine: better error handling when unpacking sets in location constraints - pengine: avoid memory leak when invalid constraint involves set - Build: rename sample alert scripts and install them in datadir - pengine : Correction of the record judgment of the failed information. - Upstream version cs: dd46368eead0d756735216a4bc765466b99274fc- alert-helpers: some fixes in pcmk_smtp_helper.sh - libpengine: log message when stonith disabled, not enabled - pengine: only set unfencing constraints once - tools: don't require node to be known to crm_resource when deleting attribute - libcrmcommon: ensure crm_time_t structure is fully initialized by API calls - attrd: don't leak memory when returning due to malformed update request - crmd: always free result of crm_itoa() - xml: adapt crm_mon.rng per recent reorder of the summary elements - Upstream version cs: 1a05449500f015414b6df68b6d4feb64b713f533- Rebase: * bug-977201_pacemaker-controld-self-fencing.patch - pengine: properly order stop actions relative to stonith - crm_resource: don't pretend that target-role:started would prevent promotion - crm_mon: consistently print ms resource state - controld: use "stonith_admin -H '*' -V" (bsc#977201) - stonith_admin: allow -H '*' to show history for all nodes (bsc#977201) - controld: fix "[: -eq: unary operator expected" issue from PR 1022 (bsc#977201) - extra: Support of the task designation of a resource and the fencing. - extra: Change pcmk_snmp_helper.sh (2). - Upstream version cs: 6a8c1e9d35c65cbfd4019cfe797cb7bb9dfd4322- controld: Prevent unwanted self-fencing if "stateful_merge_wait" state of dlm is not available (bsc#977201) * bug-977201_pacemaker-controld-self-fencing.patch- libservices: clean up non-signalfd code paths - spec: fence_pcmk only eligible for Pacemaker+CMAN - crmd: Acknowledge cancellation operations for remote connection resources (bsc#976865) - controld: improve DLM check with stateful_merge_wait (bsc#977201) - attrd, libcrmcommon: validate attrd requests better - crmd: clear remote node transient attributes on disconnect (bsc#981489) - Revert "Fix: attrd: Correctly implement mass removal of a node's attributes" (bsc#981489) - crm_mon: Fix time formatting on x32 - resources: use OCF version tagging correctly - libcommon: crm_procfs_pid_of() would always return last /proc entry checked - crmd: correctly dig into cib-query-answer if alerts section is present timestamp-format defaults to "%H:%M:%S.%06N" - crmd: Take start-delay into account for the timeout of the action timer (bsc#977258) - libservices: make systemd override file world-readable to avoid log warning - libcrmcommon: correct directory name in log message - Log: make crmd messages more user-friendly - Log: make messages in common quorum/fencing situations more user-friendly - Log: make shutdown messages more user-friendly - pengine: lf#2560/lf#2588 - Correctly set the environment variable "OCF_RESKEY_CRM_meta_timeout" when "start-delay" is configured (bsc#977258) - Log: make operation messages more user-friendly - Log: make startup messages more user-friendly - services: Correctly clean up service actions for non-dbus case - uninitialized use of nano_digits - attrd: Update also dampens when synchronizing attributes (bsc#977846) - Upstream version cs: 389294fd1ebefddad67fff51306f585b758ca860- Rebase: * pacemaker-Wno-format-signedness.patch - RA: SysInfo - Reset the node attribute "#health_disk" to "green" when there's sufficient free disk (bsc#975079) - pengine: Organize order of actions for slave resources in anti-colocations (bsc#977800) - attrd: Fix the synchronization of attributes (bsc#977846) - pengine: Organize order of actions for master resources in anti-colocations (bsc#977800) - pengine: Respect asymmetrical ordering when trying to move resources (bsc#977675) - fencing: Record the last known names of nodes to make sure fencing requested with nodeid works (bsc#974108) - crmd: first implementation of integrated multi-agent, multi-target alerting mechanism (fate#320855) - ping resource: Use fping6 for IPv6 hosts (bsc#976271) - pengine: Consider resource failed if any of the configured monitor operations failed (bsc#972187) - ping resource: avoid undefined func w/ OCF_FUNCTIONS=/dev/null - spec: make Publican docs not depend on pre-existing packages - cib/fencing: Set status callback before connecting to cluster (bsc#974108) - xml: use spaces instead of tabs in schema files - extra: Support of the dampen change by RA. - Upstream version cs: 9e382568ac3cd54c222496501088ab3fc158b2e2- crmd: update cluster state in CIB after fencing an unseen node - crmd: don't abort transition for expected remote node shutdown - libtransition: potential memory leak if unpacking action fails - Upstream version cs: 5a6cdd11b4f93b4d55e1b2654078018c339931d4- attrd: crash on exit if initialization fails - build: fix scalability regression - pengine: Suppress assert if a stateful clone is not being demoted/stopped (bsc#971129) - attrd: Support of the dampen change by attrd. - PE: Correctly handle the ordering of demote actions for failed and moving containers - Upstream version cs: d076e9dbf9827f7801c89c6d635df370aeca5e90- crmd,tools: Set attributes for remote nodes directly into cib if it's legacy attrd (bsc#967775) - libcib: Correctly determine the node type (bsc#967775) - resources: match agents' default for globally_unique to pacemaker's - crm_mon: Help admins identify why resources are not being started or responding to commands - PE: Memory leak - crm_resource: Prevent segfault when --resource is not correctly supplied for --restart command - Build: Create CRM_CORE_DIR during installation - Upstream version cs: eb89393a82eb41ff50d041b91765ccac52e873e0- cpg: Ensure group name is never unset - remote: Simplify calls to accept() and inet_ntop() by using "struct sockaddr_storage" (bsc#964183) - remote: cl#5269 - Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767, CVE-2016-7797) - remote: Correctly display the IP address of the remote client (bsc#964183) - spec: declare also BSD license as suitable - libservices: Add error handling for pipe() failed. - libservices: Check resource agent is executable or not before pipe open. - crmd: Prevent use-after-free when an unexpected remote client takes over (bsc#964183) - pacemakerd: Correction of the stonithd process judgment of pacemakerd. - crmd: Do not turn on stonith-watchdog-timeout automatically if SBD is detected - remote: Correctly check for SBD configuration consistency - resources: Fix state file metadata in Dummy, Stateful and HealthCPU resource agents - systemd: Modified so that the cluster to stop before the rsyslog - common: Correctly locate sbd via its pidfile - common: Assume processes are active if we get EACCESS - Fencing: Simplify watchdog integration - crmd: Only poopulate stonith-watchdog-timeout if SBD is active - remote: Ensure SBD is consistently configured on remote nodes - remote: Allow cluster and remote LRM API versions to diverge (bsc#1009076) - cib: Do not send notifications when the dryrun flag is present - Upstream version cs: cf67796823c4429714857411e614cfacfbc59d89- crm_shadow: fix broken --display command - ipc: Respect the parameter of pick_ipc_buffer() but don't let it affect the global value - libcluster: crm_peer_uname() should return NULL if uuid is invalid - remote: recover from remote node fencing more quickly - crmd: update node state for migrated pacemaker_remote nodes - crmd: update node state for stopped pacemaker_remote nodes - crmd: update node state for started pacemaker_remote nodes - crmd: add new message type for updating pacemaker_remote node state - libcluster: set remote peer cache state based on CIB node state - libcluster: send notifications when pacemaker_remote nodes are started - crmd: report pacemaker_remote node state in CIB status section - Upstream version cs: c851a117bc77bdefe15181a7d753f1aed867cde6- spec: Move the common directories under /var/lib/pacemaker into pacemaker-cli package - liblrmd: Prevent potential use-after-free (bsc#964183) - crmd: Disconnect the relevant remote proxies as well when disconnecting a remote node (bsc#964183) - crmd: Prevent potential use-after-free (bsc#964183) - liblrmd: Prevent potential use-after-free issues (bsc#964183) - PE: Fix conditions for internal sanity check (bsc#971129) - attrd: ensure remote nodes are in correct peer cache (bsc#981489) - crmd: set remote flag when gracefully shutting down remote nodes (bsc#981489) - fencing: Correctly track active stonith actions (bsc#938545) - fencing: Functionize adding and removing active pids of device (bsc#938545) - crm_shadow: Do not invoke shells with --noprofile option other than bash (bsc#961392) - lib/common: check return value of dlsym() and not dlerror() - lib/ipc: allow PCMK_ipc_buffer to be smaller than default max sizes - lib/services: use self-pipe sigchld handling when signalfd isn't available - spec: associate subpackage with correct licenses - spec: rely on system-wide RPM macros if available - spec: C++ compiler is not something currently needed - RHBZ#1286316: Do an ordered shutdown of systemd resources - header == NULL when parsing compressed message - attrd: Correctly implement mass removal of a node's attributes (bsc#981489) - attrd: Hook up the client name so we can track requests - crmd: Set the shutdown transient attribute in response to LRMD_IPC_OP_SHUTDOWN_REQ from remote nodes (bsc#981489) - PE: Honor the shutdown transient attributes for remote nodes (bsc#981489) - pacemaker_remote: support graceful stops (bsc#981489) - crmd: support graceful pacemaker_remote stops (bsc#981489) - lrmd,liblrmd: add lrmd IPC operations for requesting and acknowledging shutdown (bsc#981489) - fencing: Support concurrent fencing actions on each device (bsc#938545) - pengine: Support concurrent fencing (bsc#938545) - Upstream version cs: c54f10440a7bba5a1491ea8506925c7d6d9ca2a3- Update to version 1.1.14 - fencing: free only after last usage makes coverity happy - crmd: 0 is a valid fd makes coverity happy - tools: crm_resource compile issue - crm_resource --list-agents: don't print uninitialized memory - extra: update SNMP MIB with new pacemakerTrap OID containing pacemakerNotificationTrap - fencing, libfencing: remap fence agent error codes before async callback (bsc#962309) - libfencing: topology is not used - fencing: topology is not used - libcrmcommon: when caching attrd connection, cache connection flags as well - cts: Plugin-based cluster has its own PacemakerUp pattern - Upstream version cs: 70404b0e5ecbe5e51d07c6c2233eea640cbd720a (Pacemaker-1.1.14)- Rebase: * bug-806256_pacemaker-log-level-notice.patch * bug-728579_pacemaker-stonith-dev-id.patch - core: Mistake of the parameter order. - RHBZ#1287315: stonithd: Trigger cib_devices_update in case of deletion of just an attribute - CLBZ#5253: stonithd: Do not intermingle stdout & stderr coming from stonith-RAs (bsc#962309) - resources: allow for top output with or without percent sign in HealthCPU - controld: Return error when DLM status is wait fencing (RHBZ#1268313) - crmd: Don't update cluster/peer CIB fields when processing stonith results - Upstream version cs: e16447de89d25db3b3578c7e080c1a4c2f85806f- ping: Clarify the description of host_list parameter in ping metadata (bsc#956459) - systemd: Prevent segfaul when logging failed operations - systemd: The underlying systemd calls default to 90s for their timeouts - cib: Do not terminate due to badly behaving clients - Correctly check for recycled PIDs in crm_pid_active - crmd: Consider only fence and shutdown transition events to be "down" events - pengine: Support of multiple-active=block for resource groups (bsc#942491) - crmd: use 300s timeout with notification scripts, not 300ms - stonith_admin: add ability to target topology by pattern or attribute - fencing,libfencing: add API support for targeting topology by pattern or attribute - Upstream version cs: a7d6e6b56fd2779a07970df7de4e0fb0b22742d3- crm_report: Call "crm report" if available (bsc#950483)- fencing: crm_resource --show-metadata drops documentation strings for fencing agents (bsc#950375) - Upstream version cs: 6f22ad7312b703289da5d24e918a78117a0825e1- CTS: add "try except" to deal with errors that raw_input gets EOFError and add "--yes" to skip interaction (bsc#953192) - Upstream version cs: 577898dc4ac1efdb5989a996cb5f9ac60ed2eb7a- crm_resource: Correctly clean up all children for anonymous cloned groups (bsc#950128) - services: Directly add operations into in-flight list in the execution functions (bsc#952874) - systemd: Return PCMK_OCF_UNKNOWN_ERROR instead of PCMK_OCF_NOT_INSTALLED for uncertain errors on LoadUnit (bsc#952884) - systemd: Return FALSE for systemd_mask_error() if it only maps an error instead of masking one (bsc#952884) - dbus: Correctly return the result for pcmk_dbus_find_error() no matter if there's a DBusError passed in (bsc#952884) - services: Prevent potential use-after-free when trying to add an operation into in-flight list (bsc#952874) - systemd: Directly return an error if the connection to System DBus is closed (bsc#952874) - services: Correctly determine if operations are in-flight (bsc#952874) - systemd: Reconnect to System DBus if the connection is closed (bsc#931271) - lrmd: Finalize all pending and recurring operations when cleaning up a resource (bsc#950450) - fencing: don't poke peers when remote node status changes - attrd: don't try to communicate with attrd on a remote node - libcluster,crmd: never update join info or processes for remote nodes - cib: Increased paranoia when peer updates fail to apply in compatability mode - crmd: do not accept remote peer data as enough for startup - crmd: remote nodes can't be DC so never add them to stonith cleanup list - libcluster: never autoreap from remote peer cache - crmd: improve generation of node state - CTS: get Reattach test working again and up-to-date (bsc#953192) - libcommon: Ignore CDATA of metadata of the resource. - cib: Downgrade the log message on forwarding CRM_OP_NOOP requests from INFO to DEBUG (bsc#949267) - fencing: Return a provider for the internal fencing agent "#watchdog" instead of logging an error (bsc#949441) * Drop bug-949441_pacemaker-fencing-provider-internal.patch which has been merged upstream - Upstream version cs: 7bd00f3f3010bc10d13b87e2ff501b597ea6ca03- fencing: Return a provider for the internal fencing agent "#watchdog" instead of logging an error (bsc#949441) * bug-949441_pacemaker-fencing-provider-internal.patch - spec: Move the normal resource agents into pacemaker-cli package (bsc#947197) - spec: Move logrotate configuration file into pacemaker-cli package (bsc#947197) - spec: Move attrd_updater, crm_attribute and crm_master into pacemaker-cli package (bsc#947197) - spec: Move xml schema files and PCMK-MIB.txt into pacemaker-cli package (bsc#947197)- crm_resource: Correctly observe --force when deleting and updating attributes (bsc#948197) - crm_resource: Correctly delete existing meta attributes regardless of their position in the heirarchy (bsc#948197) - fencing,libfencing: use level tag consistently in internal XML - crm_resource: Correctly update existing meta attributes regardless of their position in the heirarchy (bsc#948197) - crmd: properly detect CIB update failures for remote nodes - cibadmin: Prevent potential use-of-NULL in print_xml_output() (bsc#947180) - Fencing: The device list is expected to be comma separated - Tools: Do not send command lines to syslog (bsc#986676) - Tools: Repair the logging of 'interesting' command-lines - PE: resolve memory leak - libfencing: make topology level removal compatible with latest stonithd API - fencing: parse from correct XML location when registering/unregistering topology - tools: improve error handling when modifying configuration - crmd,libcrmcommon,libservices,tools: potential memory leaks (bsc#948197) - crmd,fencing: avoid potential null dereference in string searches - typo: OPSTIONS -> OPTIONS in crm_mon.sysconfig - cib: Check if the configuration changes with cib_config_changed() only for v1 diffs (bsc#946224) - liblrmd: don't print error if remote key environment variable unset - libcib: properly handle temporary file - libcrmcommon: better validation of environment variable value - crmd: avoid potential null dereference - libcib: potential user input overflow - controld: replace bashism - PE: drop probe_complete actions - PE: Allow resources to start and stop as soon as their state is known on all nodes - Fencing: Correctly construct simple topologies with stonith_admin - Fencing: Correctly remove topologies and detect invalid entries - remote: Revise a misleading message in the ocf:pacemaker:remote resource agent (bsc#946332, bsc#967383) * Drop bug-946332_pacemaker-resource-agent-remote-message.patch which has been merged upstream - remote: Correctly display the usage of the ocf:pacemaker:remote resource agent (bsc#946332, bsc#967383) * Drop bug-946332_pacemaker-resource-agent-remote-usage.patch which has been merged upstream - libcib: find_nvpair_attr_delegate: check buffer overflow - libcib: find_nvpair_attr_delegate: check alloc failure - Upstream version cs: 7906df92a713052db1edae851579ea229d8a5393- remote: Revise a misleading message in the ocf:pacemaker:remote resource agent (bsc#946332, bsc#967383) * bug-946332_pacemaker-resource-agent-remote-message.patch - remote: Correctly display the usage of the ocf:pacemaker:remote resource agent (bsc#946332, bsc#967383) * bug-946332_pacemaker-resource-agent-remote-usage.patch- crm_resource: Allow the resource configuration to be modified for --force-{check,start,..} calls - Fencing: Correctly parse 'by-attribute' fencing levels - Fencing: Use dedicated fields for fencing level patterns and attribute matching - pacemaker_remote: memory leak in ipc_proxy_dispatch() - crmd: don't add node ID to proxied remote node requests for attrd - membership: Safely autoreap nodes without code duplication - PE: Resolve memory leak - pacemakerd: Do not forget about nodes that leave the cluster - corosync: Display node state and quorum data if available - crmd: Implement reliable event notifications - extra: Added snmp trap of type "NOTIFICATION-TYPE" to MIB and snmp helper script - Date: Correctly set time from seconds-since-epoch - PE: Bug cl#5247 - Imply resources running on a container are stopped when the container is stopped - Upstream version cs: 20c2178f076ff32fdf9ba9a467c193b8dac2f9e5- lrmd: Upgrade start/finish log tags from INFO to NOTICE (bsc#943295) * bug-943295_pacemaker-lrmd-log-notice.patch- services: Reduce severity of noisy log messages (bsc#943319) - xml: Mark xml nodes as dirty if any children move (bsc#942382) - pengine: The failed action of the resource that occurred in shutdown is not displayed. - tools: memory leak in crm_resource - crm_resource: Correctly check if a resource is unmanaged or has a target-role - fencing: add ability to target by attribute - crmd: Resolve memory leak in remote_proxy_cb() - ipc: Do not constantly increase suggested size for PCMK_ipc_buffer every time we find it's insufficient (bsc#940992) - Upstream version cs: e8888b98cd7dbdfb986c1a46bdb4b113b96e914f- crm_resource: Indicate common reasons why a resource may not start after a cleanup - pengine: Ensure fencing of the DC precedes the STONITH_DONE operation - crm_resource: Compensate for -C and -p being called with the child resource for clones - ipc: Fix output formats (bsc#940992) - fencing: ensure "required"/"automatic" only apply to "on" actions - fencing: Remove unnecessary casts (bsc#940711) - crm_simulate: Prevent segfault on arches with 64bit time_t (bsc#940711) - ipc: Correctly compare values for the size of ipc buffer and prevent suggesting a negative value when it's insufficient (bsc#940992) - xml: Reduce severity of noisy log message (bsc#950551) - crm_resource: Correctly clean up failcounts for inactive anonymous clones - crmd: Avoid cancelling transitions when we tell nodes to shutdown - systemd: drop legacy SysVStartPriority from service units - crm: Set the attribute from remote node. - Upstream version cs: 4ad07f5f464c84b80c739922bd9fd708e8d36e5a- dbus: Remove redundant ref/unref of pending call records - stonithd: potential device list corruption - cib: don't destroy peer cache in peer status callback - systemd: Ensure pending structs are correctly unreferenced - systemd: Track pending operations so they can be safely cancelled - crmd: memory leak in CIB callbacks - attrd: memory leak in legacy attrd's CIB callback - attrd: memory leak in CIB callback - libcib: allow free function for user data supplied to CIB callbacks - xml: Prevent use-of-NULL in crm_xml_dump() - crm_mon: Memory leaks - Upstream version cs: 3fb7f71bf9ca2a3d6e1187fa3b74c7841d6af5a7- pengine: properly handle blocked clone actions - pengine: Correctly bypass fencing for resources that do not require it - libservices: potential memory leaks when executing systemd actions - libservices: memory leak in DBus-related log messages - crmd: memory leaks in recurring operation history - pengine: Addtion of the clone resource clone-min metadata option - Upstream version cs: 3d781d3fe61504c841e3c89b2e8ccff8195d4af6- Rebase bug-806256_pacemaker-log-level-notice.patch - Build: Update version numbers to 1.1.13 in version.m4 and sample spec file - fencing: Broadcast uname as soon as a peer's state has changed (bsc#938410) - fencing: remap sequential topology reboots to all-off-then-all-on - fencing: remap sequential topology reboots to off - fencing: support remapping reboots when processing fencing query results - fencing: treat remapped reboots as reboots when appropriate - fencing: support remapping reboots in fencing query results - crmd: check for errors when searching for CIB daemon's load file - libcib,libfencing,tools: memory leaks from xmlGetNodePath() - attrd: use-after-free in attrd_client_update() - fencing: memory leak when searching for a target's fencing topology - lrmd: memory leak when freeing command structure - libcluster: work around peer cache destruction in client status callbacks - fencing: add support for operation phases to device properties - fencing: add support for operation phases - crmd: Do not enforce restart for resources that support reload and don't support any unique parameters - crmd: Do not enforce restart for changes of non-unique parameters - cts: change the stack from openais (white-tank) to corosync (plugin v0) in set_stack of environment.py (bsc#936149) - Upstream version cs: bd8c4b5a30c9cacd0257fe50ab50d3a6436db42a- crmd: Make resource_supports_action() really general - crmd: Remove a duplicate invocation of snprintf() - pengine: clear failures after reconnect_interval expires - RA: Prevent an error message on stopping "Dummy" resource - PE: Ignore comment blocks when unpacking the cib - fencing: use "off" timeout when remapping "reboot" to "off" - fencing: do not set call options twice in query - crmd: don't synthesize op failures during shutdown - lrmd: prevent double free after unregistering stonith device for monitoring (bsc#1035822) - libcommon: crm_ipc_get_fd() must set errno on error - PE: Record the execution date in PE files so we can re-use it in crm_simulate - pengine: allow guest remote nodes using containers/vms to be nested in a group resource - pengine: Resolve memory leak in expand_notification_data() - cib: Prevent use-after-free and return -EINVAL when attempting to delete the whole "/cib" (bsc#934609) - cib: Prevent use-after-free when invoking "cibadmin --delete-all --xpath" (bsc#934609) - crmd: Prevent segfault when erasing resources from disconnected remote nodes - pengine: do not timeout remote node recurring monitor op failure until after fencing - crmd: No need to re-process actions we've already marked as failed - crmd: All pseduo ops must be allowed to complete - crm_simulate: Optionally include action IDs in the dot graph - fencing: properly decide whether a topology fencing device has been found - fencing: properly sort peers by number of fencing devices found - crmd: Record actions in the CIB as failed if we cannot execute them - pengine: do not stop notify a fenced node that the rscs on the fenced node stopped - pengine: fixes segfault in pengine when fencing remote node - remote: do not fail operations because of a migration - remote: handle merging duplicate recurring monitors for connection rsc - pengine: cl#5235 - Prevent graph loops that can be introduced by "load_stopped -> migrate_to" ordering - PE: Exclude nodes which don't match any exclusive discovery rules - Log: improve IPC connection error messages - Log: make syslog less noisy - lrmd: cancel currently pending STONITH op if stonithd connection is lost - fencing: Correct the all_topology_devices_found() implementation - crmd: Pre-emptively fail in-flight actions when lrmd connections fail - PE: Include a list of all and available nodes with notifications - lrmd: set recv timeout upper bound for tls connections - services: prevent recurring monitors from colliding with other operations - crmd: handle resources named the same as cluster nodes - crmd: make actions incompletable after remote-node fails - crm_simulate: Correctly invoke the policy engine library - libcluster: overhaul peer cache management - crmd: Prevent use-of-NULL - crm_report: Enable password sanitizing by default - PE: Keep the size of the secure list small in the cib - PE: Reduce noise when sanitized policy engine files are replayed - attrd: handle removals of cluster peers and remote peers consistently - libcluster: avoid possibility of invalidating a hash table iterator - membership: Ensure peer cache management supports all stacks - libcluster: do not re-add peer entries for exiting nodes - PE: Skip unrunnable actions when one-or-more is in effect - PE: Ensure recurring monitor operations are cancelled when clone instances are de-allocated - systemd: No need to trigger assert if cannot obtain an unit (bsc#931271) - dbus: Use operation timeout for dbus reply timeout (bsc#931271) - fencing: correct choice of fencing topology level - crm_shadow: Fix "crm_shadow --diff" (bsc#931166) - cib: Calculate and add digest for a patchset after accepting changes for the target xml (bsc#931114) - remote: enable reloads for select remote connection options - crmd: fence remote node after connection failure only once - remote: reconnect_delay option for remote nodes to delay reconnect after fence - tools: ignore stderr from crm_mon when running via systemd - xml: update RelaxNG schema for crm_mon XML output - Fencing: Correctly handle changes to the fencing topology - fencing: Allow complex configurations to apply to multiple hosts - tools: Update regression tests for ACL fixes - tools: improve failed actions display in crm_mon - tools: implement printing tickets in crm_mon HTML/XML output - tools: implement printing negative location constraints in crm_mon HTML/XML output - tools: implement printing operations and failcounts in crm_mon HTML/XML output - tools: implement printing node attributes in crm_mon HTML/XML output - tools: improve cluster summary display in crm_mon - tools: improve guest node output in crm_mon - tools: prettify plaintext output - tools: prettify crm_mon HTML output - tools: prettify crm_mon --simple-status output - crm_report: Allow log file discovery to be disabled - crm_resource: Support debugging promote and demote operations - fencing: Allow semi-colon delimiter for pcmk_host_list - Upstream version cs: ef86b494a411ce920eb18b9b6541a3a0425a41e0- Update to version 1.1.13 - Build: Update library versions - Build: Move new struct members to the end for backwards compatibility - Fencing: Gracefully handle invalid metadata from agents - Upstream version cs: 6052cd16c2f455809f8088af76ce86483bf98353 (Pacemaker-1.1.13)- pengine: cl#5130 - Only check the capacities of the nodes that are allowed to run the resource (FATE#313105) - cib: Correctly add "update-origin", "update-client" and "update-user" attributes for cib (bsc#931177) - fencing : Correction of the log output of the practice node of stonith. - Upstream version cs: a0449d443fa5c834207def5fe36a117a53c334d6- xml: Correctly create v1 patchsets when deleting attributes (bsc#931170) - xml: Prevent potential use-of-NULL (bsc#929960) - Upstream version cs: 677f53216662d121a47b4c7683ec3749c614437e- cib: No need to enforce cib digests for v2 diffs in legacy mode (bsc#929960) - cib: Ability to upgrade cib validation schema in legacy mode (bsc#929960) - xml: Do not dump deleted attributes (bsc#929960) - cib: Revert d153b86 to instantly get cib synchronized in legacy mode (bsc#929960) - cib: Enable cib legacy mode for plugin-based clusters (bsc#929960) - Build: CRM_STATE_DIR is created dynamically when needed - Tools: Repair expected output for ACLs - Build: Prevent rpm packaging conflicts - pengine: cl#5130 - Choose nodes capable of running all the colocated utilization resources (FATE#313105) * Drop obsolete pacemaker-colocated-utilization.patch - Upstream version cs: 0b79da3e73fe2ced8b9602aa59d55873d857b3e7- crmd/pengine: implement on-fail=ignore without allow-fail (bsc#981731) - pengine: Prevent use-after-free in sort_rsc_process_order() (bsc#930368) - crmd: Prevent the old version of DC from being fenced when it shuts down for rolling-upgrade (bsc#929955) - xml: Fix upgrade-1.3.xsl to correctly transform ACL rules with "attribute" (bsc#929681) - crmd/pengine: handle on-fail=ignore properly (bsc#981731) - crmd: respect start-failure-is-fatal even for artifically injected events (bsc#981731) - crmd: don't update fail count twice for same failure (bsc#950450, bsc#981731) - crmd: report operation rc as advertised instead of status (bsc#981731) - xml: add RelaxNG schema for crm_mon XML output - Upstream version cs: c9ad9cd503f071391efe17d3c45d578d6f152acd- pengine: process rsc parameters during unpack (bsc#929842) - pengine: handle setting container attribute in the correct location (bsc#929842) - lrmd: move isolation wrappers to hidden directory (bsc#929842) - mainloop: resolves race condition mainloop poll involving modification of ipc connections (bsc#929835) - Upstream version cs: f47ea56b4ec23c7d8e0c129535a9b49cdbd80482- fencing: Correctly make args for fencing agents (bsc#925751) - fence_legacy: Avoid passing 'port' to cluster-glue agents (bsc#925751) - corosync: Bug cl#5232 - Somewhat gracefully handle nodes with invalid UUIDs - HealthSMART: OCF_RESKEY_drives could contain multiple values - pengine: restart master instances on instance attribute changes - spec: move report.common and report.collector to cli package - pengine: only kill process group on timeout when on-fail does not equal block. - lrmd: Hint to child processes that using sd_notify is not required (bsc#956626) - Agents: Fix the HealthSMART metadata - make targetted reprobe for remote node work, crm_resource -C -N - crmd: include remote nodes when forcing cluster wide resource reprobe - crm_mon: Support of the start from systemd of crm_mon - Upstream version cs: 195559d47b0e9186b5d131981f6f7fee96ecad76- Rebase: * pacemaker-NodeUtilization-RA.patch - docker-wrapper: per resource logging of lrmd and remote client tool - pengine: Avoid trailing whitespaces when printing resource state - pengine: cl#5207 - Display "UNCLEAN" for resources running on unclean offline nodes - docker-wrapper: add reuse option for presistent containers - docker-wrapper: only override exit reason if docker daemon is inactive - pengine: handle isolated resource scenario, cloned group of isolated resources - pengine: handle cloned isolated resources in a sane way - crm_report: More patterns for finding logs on non-DC nodes - lrmd: Use original timestamps when reporting multi-step systemd operations - lrmd: report original timeout when systemd operation completes - systemd: improve unit files - PE: Turn off legacy unpacking of resource options into the meta hashtable - acl: Do not delay evaluation of added nodes in some situations (bsc#927828: CVE-2015-1867) - docker-wrapper: add demote, promote, and notify actions for multistate rsc - docker-wrapper: properly forward key value pairs during isolation - attrd: fixes double free in attrd legacy - lrmd: do not let isolation wrappers inherit the wrapper attribute, or it makes a loop - pengine: pass node name of pcmk host into isolated resources - lrmd: isolation wrappers are moved from containers to isolation OCF namepace - pengine: Fix colocation with unmanaged resources - stonith-ng: Correctly track node state - stonith-ng: No reply is needed for CRM_OP_RM_NODE_CACHE - crm_resource: Fix output format of the warning from --force-start - crm_resource: Display the locations of all anonymous clone children when supplying the children's common ID (bsc#870339) - cib: Correctly track node state - Upstream version cs: 7a2e3ae6b736621933b24f4cdc9ea260021d878d- Rebase: * bug-806256_pacemaker-log-level-notice.patch * pacemaker-NodeUtilization-RA.patch * pacemaker-colocated-utilization.patch - crmd: All peers need to track node shutdown requests (bsc#917625) - crmd: Cached copies of transient attributes cease to be valid once a node leaves the membership (bsc#917625) - crmd: Wait for all pending operations to complete before poking the policy engine - lrmd: preserve exit reason string when isolation wrappers are in use - docker-wrapper: properly separate docker and resource specific attributes - docker-wrapper: set authkey file permissions and properly set container 'node name' during start - systemd: Trick systemd into not stopping our services before us during shutdown (bsc#913251) - mcp: Allow a configurable delay when debugging shutdown issues - systemd: Kindly ask dbus NOT to kill the process if the dbus connection fails (bsc#931271) - systemd: Tell systemd not to take DBus down from underneath us (bsc#913251) - cib: Correctly set up signal handlers - PE: Do not record duplicate copies of the failed actions - lrmd: enable ipc proxy for docker-wrapper privileged mode - lrmd: properly handle poke requests in lrmd client when using ipc - spec: add docker-wrapper directory to spec file - pengine: disable migrations for resources with isolation containers - pengine: disable reloading of resources within isolated container wrappers - pengine: ability to launch resources in isolated containers - extra: docker container tech wrapper script for pcmk remote - tools: crm_mon prints Stopped clones only if --inactive was specified - tools: display node names more consistently in crm_mon output - tools: Improve crm_mon output with certain option combinations - tools: make crm_mon last updated header consistent across formats - remote: pcmk remote client tool for use with container wrapper script - crmd: Reset stonith failcount to recover transitioner when the node rejoins (bsc#921102) - systemd: fix crash caused when canceling in-flight operation - Upstream version cs: 3e93bc1dd6c1c3f2ee101f754567aa007b24bb5e- PE: Support non-actionable degraded mode for OCF - lrmd, services: interpret LSB status codes properly - tools: add crm_resource --wait option - tools: attrd_updater supports --query and --all options - attrd: attrd supports queries - pengine: remove unnecessary whitespace from notify environment variables - tools: free allocated memory correctly in crm_resource - attrd: properly write attributes for peers once uuid is discovered - cib: assignment where comparison intended - attrd: only send ack for recognized operations - attrd: make each client operation handler its own function - tools: attrd_updater supports private attributes - attrd supports private attributes (not written to CIB) - pengine: Reschedule specific monitors when resource definitions have changed (bsc#914761) - pengine: Resolve memory leaks (bsc#914761) - Upstream version cs: e32080b460f81486b85d08ec958582b3e72d858c- properly record stop args after reload - pengine: Do not reschedule monitors that are no longer needed while resource definitions have changed (bsc#914761) - Build: Fix building when heartbeat support is disabled - fencing: cl#5134 - Support random fencing delay to avoid double fencing (FATE#317136, FATE#318381, bsc#970733) - extra: Use crm_simulate for the showscores script - attrd: refresh should force an immediate write-out of all attributes - service: Leave synchronous calls to be free'd by the caller - service: Additional pointer safety - crmd: Add "on_node" attribute for *_last_failure_0 lrm resource operations (bsc#918839) - crm_mon: Fill CRM_notify_node in traps with node's uname rather than node's id if possible (bsc#918839) - pengine: ensure if B is colocated with A, B can never run without A - cib: automatically update .sig files in file backends when clients update live CIB - cib: file-based backends now detect whether file is live CIB - lrmd: add back support for class heartbeat agents - lrmd: provide fake meta data for ra class heartbeat - crm_resource: Use-after-free when restarting a resource - cli: Ensure subsequent unknown long options are correctly detected - crmd: Bug rhbz#1181824 - Ensure the DC can be reliably fenced - attrd_updater: Allow attributes to be set for other nodes - native_print: report target-role as well - membership: fix crm_update_peer_proc to NOT ignore flags if partially set - crmd: don't trigger a stonith_reconnect if no longer required - Upstream version cs: fa1311a0159588385f24cd8c3530233f4b90f3a9- Add pacemaker-Wno-format-signedness.patch to disable - Wformat-signedness added by GCC 5 and enabled by -Wformat=2- pengine: Handle ordering between stateful and migratable resources (bsc#881160) - crmd: Check "watchdog" daemon option before setting "have-watchdog" property - crmd: Correctly add the local option that validates against schema for pengine to calculate - Upstream version cs: 3021d731fdeba29e1136c117a62f3201785be6ea- crm_standby: update accepted options to match documentation - cts: Fix bashisms in LSBDummy script - pengine: fixes pengine crash with orphaned remote node connection resource - PE: Do not aggregate children in a pending state into the started/stopped/etc lists - acl: Correctly implement the 'reference' acl directive - Upstream version cs: 03ec61210c82471161f6cf3366e8afc30d737d67- pengine: imply stop in container node resources when host node is fenced - Build: Fix building if ncurses doesn't provide pkg-config files - xml: Do not change the ordering of properties when applying v1 cib diffs - xml: Do not prune leaves from v1 cib diffs that are being created with digests - Upstream version cs: 4109f1539a625bfa3e884d19ab2fc42d7a4daec4- xml: add 'require-all' to xml schema for constraints - pengine: require-all feature for ordered clones - xml: Ensure ACLs are reapplied before calculating what a replace operation changed - cib: Ensure file-based backends treat '-o section' consistently with the native backend - crmd: resolves memory leak in crmd. - pacemakerd: resolves memory leak of xml structure in pacemakerd - ipc: use server enforced buffer during ipc client send - pengine: do not recording pending migrate_to ops for pacemaker remote - crmd: never stop recurring monitor ops for pcmk remote during incomplete migration - pengine: prefer migration target for remote node connections - pengine: properly handle ordering during remote connection partial migration - crmd: Ensure remote connection resources timeout properly during 'migrate_from' action - crmd: gracefully handle remote node disconnects during op execution - pengine: Fence baremetal remote when recurring monitor op fails - crmd: Handle remote connection failures while executing ops on remote connection - remote: Treat recv msg timeout as a disconnect - pengine: properly recover remote-nodes when cluster-node proxy goes offline - systemd: Correctly handle long running stop actions (bsc#948989) - crm_resource: Include group members when calculating the next timeout - crm_resource: Ensure --restart sets/clears meta attributes - crm_resource: Clean up memory in --restart error paths - Build: Use a wrapper for realloc() which calls abort when we run out of memory - services: Prevent potential use-of-NULL - crm_resource: Memory leak in error paths - crmd: Mistake of the set of the variable. - Upstream version cs: d0139e9a00c32b9bc1d7d206d6210126045b49be- crm_node: Correctly remove nodes from the CIB by nodeid - fencing: Allow nodes to be purged from the member cache - xml: cl#5231 - Unset the deleted attributes in the resulting diffs (bsc#905641, bsc#967254) - fencing: stonith -l option for custom log - cib: Avoid nodeid conflicts we don't care about - Membership: Detect and resolve nodes that change their ID - attrd: Simplify how node deletions happen - attrd: Clean out the node cache when requested by the admin - crm_resource: Allow resource restart operations to be node specific - crm_resource: Implement --timeout for resource restart operations - crm_resource: Calculate how long to wait for a restart based on the resource timeouts - crm_resource: Implement an intelligent restart capability - crm_failcount: Better error reporting when no resource is specified - cib: tls sock cleanup for remote cib connections - Upstream version cs: 7dd90226e10035340d6707d9fd2b04f2e0141194- pengine: make resource-discovery work with location rules - services: Conditionally clean up services actions - Upstream version cs: 5093c095c5f517ab58375b2b69ecfc5516c86b5b- Drop conditional BuildRequires of system-devel: it was required one line lower unconditionally. - Replace remaining systemd-devel BuildRequires with pkgconfig(systemd).- pengine: exclusive discovery implies rsc is only allowed on exclusive subset of nodes - dbus: handle dispatch queue when multiple replies need to be processed - dbus ref count leaks - dbus: Ensure both the read and write queues get dispatched - systemd: Ensure failed monitor operations always return - Perform systemd reloads asynchronously - Upstream version cs: cd7c9abbcfc620aa84194ee07aade142240db15a- watchdog: Allow startup without sbd - service: Prevent potential use-of-NULL in metadata lookups - dbus: Fail gracefully if malloc fails - crmd: Prevent use-of-NULL during reprobe - crmd: Correctly obtain SBD_WATCHDOG_TIMEOUT from the environment - pengine: add #kind=remote for baremetal remote-nodes - Officially support the resource-discovery attribute for location constraints - xml: fix xml.c memleak in "missing upgrade XSLT" case - Prefer to inherit the watchdog timeout from SBD - stonith-ng: Correctly observe the watchdog completion timeout - sbd: Attempt to locate sbd via its pid file - Fencing: If configured, wait stonith-watchdog-timer seconds for self-fencing to complete - Resolve some potential issues spotted by clang and coverity - PE: Watchdog integration is sufficient for fencing - Fencing: Correctly wait for self-fencing to occur when the watchdog is in use - Fencing: Ensure the hostlist parameter is set for watchdog agents - crm_resource: Allow -M location to be reinforced with -f even if rsc is already on node - mcp: Turn on sbd integration if pacemakerd finds it running - pengine: Fix the behaviors of multi-state resources with asymmetrical ordering (bsc#899403) - lrmd: Prevent glib assert triggered by timers being removed from mainloop more than once - cib: Improved tracing of callbacks - Upstream version cs: a9c81774b89f21f990be255f9862446d1a38afee- remote: advertise default port correctly, further adjust default timeout periods - remote: report timestamps for remote connection resource operations - pengine: allow remote-nodes to be placed in maintenance mode - xml: Prevent assert errors in crm_element_value() on applying a patch without version information (bsc#900296) - pengine: prevent disabling rsc discovery per node in certain situations - crm_resource: avoid deletion of lrm cache on node with resource discovery disabled. - pengine: per-node control over resource discovery - mainloop: fix potential segfault for fd = 0 - ping: Correct metadata for attempts parameter (bsc#899324) - ping: Pass extra options to fping (bsc#899324) - ping: Remove incorrectly advertised migrate_to|migrate_from (bsc#899324) - ping: Add use_fping parameter (bsc#899324) - ping: Correctly advertise multiplier default (bsc#899324) - pengine: resource discovery mode for location constraints - cib: Ensure upgrade operations from a non-DC get an acknowledgement - lrmd: cancel pending async connection during disconnect - systemd: Ensure we don't call dbus_message_unref() with NULL - systemd: Perform monitor operations without blocking - dbus: Notice when dbus connections get disabled - pengine: allow baremetal remote-nodes to recover without requiring fencing when cluster-node fails - crmd: do not remove connection resources during re-probe - pengine: only fence baremetal remote when connection can fails or can not be recovered - ipc: properly allocate server enforced buffer size on client - remote: advertise more reasonable timeout periods for remote-nodes connections - crmd: properly update job limit for baremetal remote-nodes - crmd: Remote-node throttle jobs count towards cluster-node hosting conneciton rsc - crmd: Ensure throttle_mode() does something on Linux - systemd: Perform actions asynchronously (bsc#956500) - crm_attribute: Correctly update config options when -o crm_config is specified - crmd: Fixes crash when remote connection migration fails - pengine: fixes segfault caused by malformed log warning - Allow fail-counts to be removed en-mass when the new attrd is in operation - fencing: Use the correct define for origin - fencing: Reject actions for devices that haven't been explicitly registered yet - cts : change default cluster stack from openais to corosync (bsc#894871) - crm_resource: Ensure fail-counts are purged when we redetect the state of all resources - corosync: Avoid unnecessary repeated CMAP API calls (bsc#870771) - cib: Do not update on disk backups if we're just querying them - mcp: Allow orphan children to initiate node panic via SIGQUIT - Support machine panics for some kinds of errors (via sbd if available) - Fencing: Allow the cluster to recover resources if the watchdog is in use - crmd: If configured, trigger the watchdog immediately if we loose quorum and no-quorum-policy=suicide - crmd: Ensure a watchdog device is in use if stonith-watchdog-timeout is configured - Fencing: Advertise the watchdog device for fencing operations - PE: Allow natural ordering of colocation sets - stonith-ng: Reset mainloop source IDs after removing them - Fencing: Force 'stonith-ng' as the system name - crm_mon: Repair notification delivery when the v2 patch format is in use (bsc#909286) - mcp: Teach pacemakerd to ignore SIGHUP - Rebase bug-806256_pacemaker-log-level-notice.patch - Upstream version cs: 28aee948cebd51305a2cdc3ec4f94252ce975655/bin/sh/sbin/ldconfig/sbin/ldconfiglamb10 1575019081 1.1.18+20180430.b12c320f5-lp150.2.20.11.1.18+20180430.b12c320f5-lp150.2.20.1libcib.so.7libcib.so.7.0.0libcrmcluster.so.9libcrmcluster.so.9.0.0libcrmcommon.so.13libcrmcommon.so.13.0.0libcrmservice.so.8libcrmservice.so.8.0.0liblrmd.so.8liblrmd.so.8.0.0libpe_rules.so.2libpe_rules.so.2.4.0libpe_status.so.16libpe_status.so.16.0.0libpengine.so.16libpengine.so.16.0.0libstonithd.so.6libstonithd.so.6.0.0libtransitioner.so.5libtransitioner.so.5.0.0libpacemaker3COPYINGChangeLog/usr/lib64//usr/share/doc/packages//usr/share/doc/packages/libpacemaker3/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11614/openSUSE_Leap_15.0_Update/efb20285b35734f3bb10541660745edb-pacemaker.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=97bf86d8aeca8dc4cfb0e5e7de95fed5f4b9a2c3, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=e1a2d232d9b69865e2578c5954fdff94e8a88c5e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3a09622dcbd41c617376d860303203efa3e52c54, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3e6f3bb88c1e966557a375a098ac6c2a0435fbc6, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a6753adf865b5003db6e2efa61de5d6f10d3107f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=805b1339681570c3a388fa1f5e807d76d6d85d39, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5cc2f03e8027457749eec3712f13e1c8444a6caa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=280955d5b96164bd665627682e240919fd1f91cd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7482c27170dbbf72dd157645b294ad2de35f98fa, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7f6fce9ccb3ac9508b4354a8359ed04be5c974f, strippeddirectoryASCII textUTF-8 Unicode text !<IXcu    PRR,R R RRRRRR+RR!PRRRR R RR#RR&RRRR"RRRRRR!PR%RR1R-R/R.R,R*RR RR RR RRRRR0R)R$RR+RRR!PR,RR R R RRRRR+RR!PRRR R RRRR&RRRRRR!PRRRR RRRRRR!PR,RR(RRR RR RRR'RRRR+RR!P RR,R R RRRR RRR+RR!P RR,R R R RRR RR+RRR!P RR R RRRRRR!ϧ/).f7Z`utf-8906073b28172e26225c6c0e71813a9f5bea948a36f956efde6212f166ea98c4c?7zXZ !t/ ']"k%`/K[id1UڧNr'ȠȵoG0Uc"az V*Xjbm脵ͤ[2G I_0'Tl'RҞeuG) _5#!`橴tTۇ̉@ʥY'\VH\r.7L`\?,/Fćy/K4 lɪbN`i 0L1+.:8zAbd$Jzi=ar'U&W|}2A/<# $@f*:rګ׮b"RF20ed\٬YYGnZנ%}ITt͏!kS.ˡ(N16wю̆ma: ~)DVٔc/)CCOcf6M*~, eO!Eɳ]邜lSKxŞܚhs=5٢#$Q( 4N.}E"{ũ*,+^PHXO$)=k }|_8|WMnwDZ ULvxm'=\\Xٚ^ >49$`L@9M6DkRk Y_Cą Da upü[geݍ;0spA[*QM ɣ,*dD8`eirK҅,VA^_ŢA*4W! XU|:qKNo<. a3ݶv S:z>nK ,P< cQ\..\k p%9&8Lʫn΋4kfj %I*{Y?U3p5y99 RPYi}gYm.JE IwPSnwJnEK5Hlב—  _Ez+_g>N@s֪p&4xt̮KkThgѻxRgvJDr2qUJԯc- L谒C`SD6E8gJemXpAӹYq=#W.4`"޳Tp*Syw}E?lYtb$o[ P21\{ T&/{S>>KE?Xb-]n ϒb] 펴˭$ٿ풾f?ރTC.tsqe7 I:@,Ȱe a!&wg'M$~?8cQ橯ұXP=6M]o\5|ŀw6o~{`6Vyo# (LVLY^v1L0 &ߴdq ;U`Ԥ(. w( 3z'rrʐ R=mbdr @]FrMnG\+J, ;55+j=kUX=8 $h$yZWMq6Y>je XW}at1PNm,ABU"=!;/ј|͒lV^O){ ?HTl-n #Z`PŌ܏ۍg܎&9҄QS9G$5Aq1"l/>#ڥ|% ּ^w ;/ '/#~s%П/t*L[bZ!`fXrWZ8r"5ÈV֋4o("cK0W@41K%. V{Iِ\+~B7FO%#`|yQRmޅ10UV)u-t?aT/\uС<.a LL ѹ7'0&IL 9t :kao6.1:LSbHO(nfbtZAɩ,qb;>QB]o%ve0M6yzbtIBzgk_LEGQjE/‚*trMF4]$}9?K;qa n9KX#:A3F|U}2-ᙝV%jtf7OpLQ)4HzFFꓵ@p5O MW8 GTzτI0V8L2pj0hT;A4;%AAZ]T\)\ZMtĢv$lKrez Am41^91(}~ߑugI͹ ^{lv1$ I(~v=h 1slQp~#w+Nɛx;>$ƺ@>H݀b+eGzvݗ۞p ֨\d|ga{C`,3[f)ٌlXw&=~ϥn_096}\ؤy`vrc ^-Ma;Bw \EjDk+8UT!& t'\Qd~>ΆZhJ|J\E[32mTe/!pj 6$yBA`5'vTX/&бm1b MWP"o1|%\bq-.uV%7O3HIveb:=}6{}wWN=VЈ.{c1Ӭ?qiR"gVL+z_C#,%4;|o%FOJ+&ي\8X&NcBOG^/T/aDާcPjPmhgOA3Mdf.Y&Y6`И> 唭If \r*i`*e6r)*,FK&QZ;c+aA"$A6lmyPg-hrvMl;|4"ER%`][$pdۚ>By_+=`0xonKYdvY5еrjr >w {DR4Zedl<,n&L ʆhf 7JU!y1IV]/3NnesEwxN9׈YݼUͦg=0,~z  đ뫝 I2lƽ2APDcF`M1F^<.DZ;  R/Y#gnҴYs =O0= #Y8Sh@e QJW1l_l< :XlD><L'x3?„ ?ix쉠E`5=:X)HPrh@$QҸe96dPn>StCG)xL:zہoC'rլ(5c.5"\m|^ 1V pKBSv#}[ Ekg4RƙƉ'#ɯ>D0_ιf\ E~"a%m 3:TɧƩ8zɍ;߂fm_3T/mƼO[2OZ5WTVwʯgԈj)+"iP#ğt-Ҏ6^0$B5f A]:52U[-i- 2YЪH-<κ`ukrSުچ7*jk|Y;$Io?zN } M ȹJ24od`pJeI-92VcdBiJJg9C"1:_rA {BűbQjGyґ[3rIIU=c=辘Ϯ4 lcLNm !3-<=e+Nql#,XIe!Yw7= qw/qY:kw{L?bBa+A5vUnϫ zEK l])wѮe mKdNt8TpJJDw*pJn\Ad*] 99v,Ƣ# $CP^R'|NQT}y~kSrwqK"٭ϚSw^D)dWʰO4~vmi#sٞ%+M?J81$1_H`<1^Α0 \uQi.Qiq.Z湻5ΐ"ҴBu 8+%b$o )nﾮsaE>ʟ߀7䍻|,AUw3oϖ_,5fWY(cX/?bNL %p=-l(Й{SSVcH#a>]u+SՀe&w*~l0 HF_.Buk>hDV^G,jB %pǮVA%fWVW䗊Qߝ\5kNAqq1?6w 8pSdt=>"#%]j$x+[1-'-ZE/~lt\48 gTW1C_sJRmG$.#'KUAꤤsBu3rxo.ɽԎ6;ϱ~&5vtͼǝp m| 1E{  &’4N,:R7ƿ{&rE AAO R@QTXF6VzVE˧2 ;*eMƨ+6% 5/m9Ѕ p)oyqYƞkr&D {E i^[ }d:-> aa}nJst] Ԃ\[C 9#3P-|6FR q^S3Bhq2(E(:cm5i;:uhוwh~Vv<4{d8a<\OK"/U'M֠*&k(@WIto[矧u$) 9.)цU{Uj Ӕ. ț1_쫘ЛM;oDNfԍ{̸p}8V<즷; A ם;"$u\@7ՑgR7S5Z%xܐhXVmwcWgS+՚q&D>9S ٚ6~8mk_Ӣ6{N=?4=%ȑK&_*}ZzجڏΘ2حVB.Eng{ZΙE;(y+`rYf,ssw5˒U !~+GOwj9I 4ߒ*\Jv> PM݅p y'"vD0|cAY=TA龿htfSv_SLM<*G:{XªOؙ\2 *cD?F5*)j44߂-;*/%oT\Ӕ1p aH&/"Z|q3 !P\'B12y~Po!+F(DO݀;هI?0+Yv҉Np9gwxf[/>NPeH y=_wػnKgLx996HsAF#`l"[1BeSp k7+QJok<^SglA\ptCUnK֩tyy9u!@ťxi-pAHuXhZ8i^9uR.FPC/*!;q֡Tl+c`xMk6*|9ixN*__?| bC~2b߹EKJ`B8MxH>e[5bʔ/hKMNuLF|xusiWQV\OdkF7_'ۥ\(S` "c幊%_2ΰgK♤OR}y症Hsoح*-/ -@]a4\W[9jDPoZ 9U{w HOg(޳vӯTפ`n(ЫفNZf/ !>4Kx`X]4|؆[Bva:W FYͬV'! dEP@&RrY4 "@eGPqTzjLsٻ!3> Y I9IuA4̳`SAX@G3F 6b>f\{T& uك|[zCܰ*ǫLiL3< ª+hP*8W.Exȷc(rk 3ނ=p@G]}co{mD~~ϹD'׬DsIA)y;edV4r$g &j M&+A6_qXx#Mn-hᖞNks>Ɗ*#rqT;ʖxtRS<*p{ kcH D?ݬVXⱵa/ & r~ISN2Ehrݺ-ut}4#K ϭWӉJZ1qxFǠ }$wRPu`hb>nW1/DaSU kf6!cƷUcNʩM*.,e kSۃR2'3lӕ⍰"@׸˨7$㼰hR;ʛ6ip-5wl10IlPQ8wq{b^ x%40nIq0 - 1RbtBTp Dl/˛)u f}J, Qe]Ug$$KNP f_H|&UɳpprŞCbϵ$GJ3vqh{չ DmaeD͉(ǫ!|&yuH$]26C܎Zd'fKhO"2poHJ 4*5 ҉wZ~ ,&/wg a<"ew';q'jh.h-S:' <OwLF ?fdX^b?zQa*(^/b)zI^rp_uExWFӷ$<9jUUU^C L?}åZD"s/^G!\HO;y8[+@~U %k,BoG! +^RTYi80ABd_e z\ɨW=<_}> + Œ7xL>tkA3P eGʧY,~O4p%[1x]UѦ]}Fvx骈"]oͼk(LBD2&?&T#@od9Vrp]QXLR4EGQb+딃<0s\d{#yE΅,OW=L{` Y<9ׂ hnC@mSߙ5&w?KUM?:3C3Ȉǔ6!aHhI%3J_gmV 6yqfDf+dC,gھk!vz&RphM ؈0e1mBJh\y&"Ym 5 pJ'ԗS)D#"Wk ؤ-Uۨ{>R\G U2R-1iS9=5ھ}"WpW%.݆iEaa@egu 4ẵݴAsӱ;G"?:7[U7F^#l&3+}mH4ܨXW\n K~]Q탠n,Zcr{_5?֔M2RXpfc]8GoGg5"sC]UIu@jEJ0v^C*t?"@*1*+O'62av@ ֊F 3ߥ#hC"Z+~ca 2C9#SV-q5r>(.> tcaǙ%2* èC#JbpPS()ls0%1φsJRqk [אMN6>-'] ~Wۚ, `8|Wj[Q/EGYVh-o/sB'FzU:Udz#Wl">@ފX ף:>~Y}HCݥ IR1_Ah Bcoqk. ZV<8fLc"k& /v~&9 K3XYܬTޛCHz2{UtV/\a%Eg~ oY9}C6Y9#7f/ƂD1fQy# ' UnEgF<>;o?L(d) EbMH ߵG_||! Ȟ;, K{ 2R|~^2 IvtG8kUm(mPc$F)T;176  %s_aYءMWc%6qEbp.#iL8q f9(TI}?1D̋sFء^Fo/$d(Wi@ՕIcD=PM~wrGwmVμ]BIy zq\uE3J@PG4€yJ:lTآ7Fۮ <YMm O%ZYT&Y*aUOyFO.fSnCs +ˡmqw*K94<,Å*!6߱^RpiYBA d%&unh | kMV^ ZLlA‰'x9,4bxI !ߺ7cTA?0&R )Y{ƶ< R;Xò0&;1VGo6a{ hkWS DU3-pE6D*@c}޲.eGK2Y 1@QD}mR y1(O`bE"纭Xx.ҍG G0`d e2oqX$u{aGH9#= L\G.v,ċL$QdO6gD)krw<"@w|s[3'N1G&V@>h%dZ[^ԫ^(C%Vek(ٲUU!$yYi_ BYw߹@9owtj$OǜO X7ڃaY%R~K29)KW#-lNtJݤI9( GgX;6H_^P.!#7/mLb۝D_󣅓TVPZӥ@o.VQSGN{5 9k*M)zdZVN! 5xu%78Ai]^‹I qzK;c-c"j(n xaX@ʎv9;f৙*"SB/ PC# DBH:%Hl߭bt / obgT~ \ l\3$0Z+bM%̢ 0u҉߽bU.Ȇ>-+$)n7]YY߆[V }|Y܍³cDTnl[%:T*~A^mɤ款w&˹:"˞:->:! ;w[{KQ΋^ O惬&x8Td+9rWTBU&0v'$IwUvwZ r|@417vT]sf`,8"z]3qSJ;TNZ;gId vÞU4lgJ5kw[Wxw_c~.`57NWOfS^9܎H [U5!=%P*Ay4?tm#tn}E`orA9ӹĉ]U 9Md.d,$o[AL6 ģ-#D_*S/ çM³n9rDoLb,*qsB=0ЗÁH\`N[ lMi5KD:Jz2c2.dny8b;saaPNt؍}Ml0 VYk;HxHFx\'ػA\hy2cKت5;H폀o]"` h QaJ}@q[4K>Buo!Lx7Ŭn2C]{qc>L@fmz*`x?HnTPy3|~j[Q7> _bS[ 3FknIOQ^Jj%5uZAzɤfCyү\(4Y5:';|Z G!w'W\oL*<˳Kp1p=iF+IJe8!`t 0DyxHuEгdwYN`5*uD?Q@c􎾲c/ZvͯP|Id0r H 9.Pog.驕#"FX/!ݔfa@Q9u z6OAfW޿{rz/.Ky]g$hYKfd f5a:H^U bPF+m\=5+P̍6c0 %*<Ҋo@HuPvrX°-"o='Bp&Rp3v{.h;]E6JId,/yD}THHv>잉 rQv}.D7F7ɋbUj_Gy"%1sȞLJ#Amk^;.x/M`Đ.Ջ(?xx="2(׳YQMҒͻ&$Cl\_H%4?}61w ˿_r\@ H>{K,DJ1:bm1Iā8ڵvk~Or !Kڄ] Y4q_α?: LL/9T4,Cԓ°ܭhNs]k.~r Ln1fy ֚sVK]KSϮ75@Yؐ۩,*W!VtWB%b_)FipA5IdMԩ?/C +|LG[޸WxRqo\`0#Bqrx/!$^Z*qnV(RlW[1dM2*ؤ dJhxf A+\p++Ye~ R~$-vuIJ5TvDa=|?W{iZӛJ3QV֩E Chx_T̯]uB/#3Df!Oi4ޤZ N9O~S ?'Z-87kn`(c{ŕse b!^$@2O$)!xu^tӖ9DkE_d>U`f6G2 bW+ NӴY 2l[9cxk7E6h -, O6G)B>7Y-@gmL!c˫6X^s?z3,.2gʠn@,$s⒁ܼ) =L!w -d,زNsS\h2pLpb4‡k~ Jݔ8e* i 4(xH&y@CA0X5lQ雿\9޻B4~ k=U]? c񴍖`1N'p=N(#GW_l)tpUoG}{-B]7>Zl$zW guCUm+:0Tt'ӶL?ޒ@U|TdV[g?t8⒊S2ӟ|t}P|"P<3 ,^$7,S5\igQ3 . >t#4Az^ɒ<3y4B;y ې5Nmjn|vaۜv&ݡv_^+\HOI=[瓧zlto$ݍ  (1@N?C:!:&R/[O/<{ E/;0)M-sBs|ZάQH!?p71]*Os(WҜ|1wz |~h o:Ѕj3ĶW(?eaI! Uh*@'ᾜsKYww nG"NC;G sbCph>cH>rzP>bˏߖReݔ&V*G}" 5b{A3X 01ڊuNujHT:o:PF+So6 [W+w*ɘ'~3ޗ]^qD+p5Iin7ün6oEc  0 seS. NhA`"FR:DPϜIuFlVGgV>F <&x9xAtʖEj-]e*:hxN*lMAI]Ljiy$:҉t~S\+=?M RDcPX3r.{qBX+w/N)Ghٶz B<C+Yo=LRQ [|yC9X K`NG72CP}ozE=Cj3||ipCknÿoNj$K+Bu܉#%T#BOLj- f'dtOtl^/4Cu9 | ψt93e$ F8mQ,Lt$>wm~wAW(_7 SRP|-n᷍Xc?{`S7aLݖ#M2XسSfVC)}T(ߙALL#PobIZWyl$ YWhFYlL2̍bx漖h;a6WWuWR{g숱vntZ-N11;QQ/c\@an Gwl$9&HK?O ,GU۷A0<_V X:H;|_Yc1USp|!Op- ZVӢPi:U;b(~? & 21r PzNǶԺ6݈Qa\~{ ݈Das3"9=r]K5Zq-HIC P 3,1 ɃC=J0Fz|>1Yd&WvR})G-U@nQq^3@E*ݡ3}n,4)I`%r̦}cٌؕT?ew (^\%+dٺ*wSkd6/yH#M󏆺BR­@~0{A}oN$$TcN`dq%B6?ML鵞/Դ+ 3FFcY}4R&Aޥ$ 蘈xI@OxJ,U$N]֙Fl-%cY~OHH xߺNmvpHH ,E -h Ea٪K ,5>^Z1yٖu3k: InGw-쀇8iW=[2$nɴlq DA T@y2˩]3A|#Q׌(,bC%sCFBM[퀯gML%J%s:+Sze(3Xo!nx~(Ztv}_iU.a+JdF/질lOEѾA%*۷YkΠZ٪,~#zƹ9xZ,w| 4ɽYE zk܁k*>`_ߤ WI}I8Bp2 xJi.jLA&'ed|x'>W8Lz_$UyLlԎ[-IFo +o;8 8Yr=&1ci.DBꎍGS0gq*2RAؠK*(`Ṻ'i_K^1Od'esŸ .*aiMԯm `l.+x"18r ֦ɢ}2koc^@\Ľ`M%K ȓ P̵_q{he'14Xiͫ٫3ETt`74Gc 73GJ^u S -컾bIׇ+M, f_<Kw=W 6κYMr;B{~n> 4ש3⼽u=a(_2r߇1$}8w_/ZCj Ja7 #!6:#|>([dDCTTm_w PC`uN5 7 9z t=v[ARŷ#c $~!2ifȵ\2?IV. 3qhAa=2~m Wr;2#\?RsS79+vmcO(n Cו| EO.p{4i> 8d-Zt'T, M+/XiIM!A.' `83{IMHv0|`Z r@å54V4V5ZO*!!$=z1Ir+"ATme4]u%UR͖t2g{u$/LIm.fuge8ڞT`-"˻ 8= Bzx#^UGٙZ4iAz<<:}f1k8J sԔ; Xeϧ;ɫ'=RE_4H2 Rn(ZjF ̗t/d \(N EC7c?ClmDʷTTnaqs6rHZg^&|*_P~Y:RmW-fx^j.|h%x_*@Y׺~,}M8ݜ0&|{E3)b[_W_h SGkg$n9$9 '`@ !eEms:51 ڜSnW9O,?ϸ17""ەf0=l VEZ5J2KؚA95҇m m!zj[x1XZ3C-bMXӧ8zz! &ղȒ ʏ;WT!j8sXWDlE]K#CZwVRع]\/`{;|56hl!ecԍV6)}"˗gLm *& 28aGUu|ˏ5n<9F 4srv]Eb[H>rݫ".ɢAL0L3̪?ȋM<6e} #D7C 4[ĞS+ $&K9y2!e"UjYDaz~eXbRRO9\DyB(Oj2u[5 /ZqR+zgwtx2)ኊ̇h_+b@ꅗAx?S1F*Zyzc=i'ٓ/*bрc]-- }u,Er"ZeK|/V`(UmP@@RGDο-tͧ~!w ]Bx+--}`v!({,S@pUͨ2(BVŴ [M}Ru! ( xѦf<>gkyFxmeH& Ih #r:*l/* L଼҆#nu Fu2]CW˄A'6ݚ/7d/-L8~ߓ\}X?51!lu۽>Q}4܀ $ ]OWaW[ZTtPt [)Hi-;w#a*zB;K.`$> 6;5!wwld/AŞ!{ ޛQU9ȿ:Yλtn2 U* _;ѵզM_@_Ӳ\UGI>0ůRh}C|QRd6b9'SV9! ̣KBDh'gz1A^'/f{ Io dg?17f>OpZ8lȼ?DX}Akl!/FnYW"+x87ÌCxQmǿNljaG܎^@!,e $ HOǮ.r\urpxB~{m(D(Xh+&X4/1tZ/:8Pq}wXد5M_ͲO&\Jis?đRTpJhޛ QB[ՙ걇ul'DUR+)}ܰKhX[|Kp,Vc!hb$J}I!mV,nIslv@QO0 ֿ鮼+P9bօS7I{ <7b"k(2a1șIt^bfrOgǹM0ZzYRV+=úydF@=3"+0ybB2alL!SnKr-2K%ԍSa6B(}CgYӧݝYXgl{ [ќL'1? %^TNoIe6dC *-X5ͩjn' ܮQw7%a:Im-oS&Fӳ`sBFaA]3uEW\U~v&ŦuJjd3Ӣ0_)|?{&Q`ػ-[YUụ'J};/KXi͵Ͳ?HE}r/Vѫ+jjwAexE^_k1/!nZH貱Qf)$2,e3,ZҢ]V轗Tm!£B+jdBxm4wlf*#sgh(!=4_{W^0E54$EҪ o.+u`Ͷ(msXTErÚGP>J(." N>5 I8d^HϣCeLwl&ezЖDy2qQX[;Hv T0 ah(oc= ;5t|ԕŞuЋ-W'p̹?=ӨsY.Gt0.qH̿#d!8z'NNXڭ+~nwsuf7p~>K"tSqr"Ӷ&'z?}~.kg,RT(u?]3>E1_muO% M v4lǟ)@ɶ@mDYH D T+p4wƹ"j jz5aӳ ?;Z֨A8TE.Gni Dņ+ SG (r)jFC8$CCOB6hs rEFX84sNp,$x 6/f03Z6$O94Z `[SK /XcԿ9e`S)I8},fe+S_zggV +bU4R#M5E nN0:$(q$c5R^? Z$*}lR 0~gZ Bv;3 ^M;ő *ޙKHPО 8ֽJix|KG@r2-C38rrJSw{gC *p>|bGw=/X?vnӠPI1]+Wr SʊpUoq)gEsadؔh.ˣ~V;3O*R?\ٴtn%#g{hJ¨b մ<ځ90܋+hK# '%t'AgBN're~9b&lg(Hvo&;~ xKulaxWi9]7ld-/^,GMK.(9y1qrgθ┠ĹeE7xt0CJSjSb ʉQi0rܓ'7YCap3~q9TKs7'8V'_Al_?V{6sϸɨiF-Mn3=ʗA xѤժ߇.GlA2B6v$471!<9 &IG2.P_o3?@>fG#W5_ve <\HKXBy|1.|5it]4_~6ʲ 'ڂ_x~]`D,e%`*< ?3+g0(+bg ZwQ9['!&v\҄qX)<ǟBT"8 "N#}(e+KkʗY_-*^OXu-Q0S6&'V6j]ϊ*_V|~HC^=SE9%1U],b] 2\,_w~Z՝[hoTg ř^Hy͚/\7J;pWע Cmuc$6f Rof&npBf޾sX6 '(`xAFV9 h._Q?yOF+%.4}5?$ZIgf oڲ10M >iNWzd7;UȄjw 9u.X' ?d{U D2NɴXyita7Q-65/|U@J!}0l)E#_[f.GS$3 2R_d&v -CbKtm YxQ:YO`h$= TȃRq%%-JT_f'_̷Hߍ7^Gq:[4zXunswa-]ϐ$v3AO8~oS%a߉w9ӏGkcR0-.c _xX٣3`$LW޾UK?ű?[~ : 6*-iKb~GrhwibbVflV@BT1wL[K ֲijr'$u 1 Ɍs;ཿV HI:v+$R޽"P|%;ar@Q=5dZ(@ @/d7s(`lz`<5lgxlGtP+is-$\?o nf4Ot>n nD_Ipywzv^h[O O~sPB5Q~vl$1.އ5TLU>)%~Of/E|e5A[moqnT^qm$[}!ȋ=F3JS1C\dE2܉(0 5 [T3oz}ՙVdAjaXBcG۪.!gw@mm~hr׵Ԟ)'Y3J8'I-2+"W #!j71%=oUK-ԫ{v>dsJvTn0* ?σAs'r}5"I(uհh] $(Ny{~jTLz W %S0}{k2D)Y;n!a">J7~ iΕ OGLz8l{lpiRTp29voffP UWvTk3l]r-G3:SnBjJ-./U\l뱭?)ڋ1<CBnrџ.-.)6%9أ:\'<϶ϸPFf k:W87 rhj)>݄KR D"3㥀{dږ`b<[;3YЈ,/;(Yx*;:"|gLn뇰r{'Q"A"(74f=3[*}V.h+踘j~p`#@ӫ{@kukV l5@OӠmFKdD*'N+Dq"uD0~i2vj"'Jl &!F0i۷;_?6-^@n0=]{< V@WΧ7`(,6y8 ڮSolEVaΎ+B5bG9Vpo5pYԮ.ZZ'Y#P8H3-i]U)];>=D%s|6M~:eJN.PWcBu5@uH%,K>WxP;*}VWnr-I.u ȘƥQnO;V^ROKZqɍXm Ϥ+$U/CKWPȈoU'nt^Sx4u$1=C=%PW{urN؅ +(t}0.z5R bo͝HlmX/IΚ پԋ5'8>Ex"ҦLO[g&7LoX$0٪L<*|FdIM㣞~@d?fq+QRl RgRN֜ESh#n*]1xU$@pmSjt=LcJDyԪ!B9 ƺb͗B<:tYd$iHIjhL|,Ey+ lo0e U]8(e+krY<]M%p?7(IzpϴZl.rȜ9wC\i j#JGn>d5SSۂ~T '7폒Tj!>'RaGp`ݡ9NsrfڬU`'Z5 @f,oSHƒw4+%$(#C>1"E  ,M +(F[ZT*8I077uo}:?Y x$͢cR),hY>K?Gab"u^w0XD:O,լ&9?ƥ 2;&tS[I8v';:d5X{a-R#}#RrY'=Q;p Kro/MwG VM۝Y2?Vi3Fes}-6uYhPhp$JVe^Jt]X5%WN6W1uO7mkN3Bs'+#-Q0SbY*~/Jgn=vKoEAL:T̄vz2MR 7띑=@8|E=ZB}d9y_0W*`)OtR!`bQ 2{RkmRD@-7bJY3`ϛLhDEwӣ1NR5hvmwry{8 > .+9@tvX$șjQ;x* wCΏHΟJQ WE[U K^w*O J=qF@GAp“'i_PRK|i~öesAo[hάm.:T`BKO75n6-DgOt5ĕwd[ V  |=IN)Vo뇜2 Į_C@6 |]0X[b[Cft߶JTtv F<7^jW՗/Wm K#7;ܚsi >gg/yLpmy(wHd-M+&yTj<ֽ#=# !4Ơ0FOs/G"7poQg%TD$g ]k+/h`>d)ktͫ܏>`ޟ:Z|2Q;`DFp$m\Bқ#h뛘P Q=C.3INm1c8bƣո2jN; \o3)%WZdBHuQ<2y3FYIН>޽FM8$%g|EI4hgCk߇AG8+k&ǥ;(i`LD+9Tf qF^(/+}؈U;+#\]"3&WwD6.P CozGQZ&tOp_bC1B;z=ox`J>o>Kiҭ6ֽh7\w'K/"tk#r (؊E0vZJqTESZ**m C(c< I弣Z$F¹e.\^1򳘂Bu%:l4)!,bj<}dSbl 9x,2Х$۶×wX{ډSd ,ģ.sN/2I[|+n>3 @< C o6}l{p\{Չνn,Ӧ+ 9@sH}?:DzH{{i&jY;:&kW)SR@5;e0։5``)%trU)Xi` Ϩ6s~䮜=Ї?=H*aie<{bㅟt}=#t׭>;UQd?"ϩGW Dtyo|IV?GmcoW4 *7N R pix! ,է\ S em,;vp/٣Y%EU@'))_ =6F Fo[d[ Ɨ:MV"~,d㋹?KȚ`$!wA?RsSH?nU~|$_:!]ȤvĈU|lAt~ϼ*߯nZkg}8UZ;G2Dp_6bc鏈vlwۇ̴۲s{9 FQ&];P~* yNH@OO>]ir 3VBUh%ꇦQʙ#sO;o7= (:2*x^;"zb#T{}NpC%V"j͕%rMz/d⼨[DSN/ZSl},c4Bj>:⳯}vٱoJ}p5xA:X4WPN8M>5!ܭ̚ eYxz<;z:B c8G/\$<#\p{ܟ2N"ޗZGU+ayw,G<; ĪEbs$z%>/8ҪyHס򛓞F+B2[As^4MOGBQ S>#c=Yyȯ?qXg>Df?SȢql0T^"8<9dmi3d*7xihǓRe-zMEs۷029fL3O=- #ƼѤg?_bgNTAE'rd3Z]eÛm+Q7B`^K]0UVk~X{2g;B,x{[ \grVid/t A8C„k䶺Ǟ Bc{Koie[XsgH4B 16:y̑XCZwLa >.ֽJ dDAF0*ԯǿPfKy 2{gO2 J/R%aԖZ~?[vD.+U5p64TlQ5RR~NwN_hxw{Fú@!C%ҵA:xH?RSʒ'`Q0>+/*Ij2BX+k4-8_Aqu0DnE7.<ڵx%M7(;5:k@`,D uvK5YH KQn?>2*PDR*Pp`O^^SߕMVroxxd0w'֩qjmuFz?L$R]T|0qtW5,Vz$do^X>ho:, P)10wF&wH/ݒ!CPǣn%а 1u6S1KzK7n Mw`[ \*Ddۃ >vz6zr'7N#o`pP_fɞ>2']`+@=QpZx*Hj꽪c.VH4%Qpu@6,$ (K&&L kdi*jMU=*ω>^& sIʨr06"N}gHlr 0OT*]i2@h-#hk|\4 wYO;4۬lFZwUxI˒Eޭ kÿ[,?/o;(H+X1.a6 ,&_HsTnWЂP\JqP|)bcEYS -u՟}LjڹmC1*>.@\ޒ̆&Ӥ/%Bđf940]g+?]Yajp2r? TXtmHE(_阂Hc|,\3s ~˚Ya}hoW:LW !Qb=j0t4wmWck@;ـ|>rZ4qHn``Ď _cE|j\ #5d1AN㯈W;a J<"yykvA&)wiC> JM|ec LvwrGKw{&E{I4t%Clb'>Wn sX>ULG\7r!Xpp#{w Qõt}[޾aA"V˨B%`M:(XEPxk&?fӃI0CP7~6N?ΉA^QbZ 3SHAAn2.BEBPG}L[N~Y.Zrq>NV÷Y*$/&p=T g* X6KH=4M"0|4 6z6Y6~(tk"E YejTBYTy;HOoTqng<87J]-E(R@eMIRh[J7Μd HJ@J05I@s9bcjjD7s`QV4/酎Gf.Dj L/1Usʪ߂"~Jkd۟l~ҸW Nx#XLo|FC!Oԉi {Ty{_YmP:҃BF#(~fO O4ԑbT o,0c#BDb$c'Ui - Е_FmTK]"@ t }-B6KD깢}rΌS fW1U'U}CÒE &%y_^MLSp휈a Lxbc?FCq6* \1®۹ikms1&"Ds bn#Z&A|m!f m5Y/~c+$fiq0.Bxt\6@S3M/.i #%VM ]TJ 7+.@s:~]߷Ng>&cwW}ÈN>l u:/ Pp^!dCHY'* 9; ( YLMܲDYPFRH> rҙ^#;T'WzT=!5]ǓXd1"?$E d儹ԘJzuX:l$hJ1Eu,/2R~/]??\WtSՋ\[cg8؇:xw\ӊ.7 zގuF'k70[էڰ5*zגH 7L)|q&|[+^~K|=ty:HV:r(g}W en- 9;wXe,ÙuxjepʁΜDY~{hKzZ)}OKuOPWip!Cp!-Gv"q+W{h"Z9%݇/ٿl.'c5-̹@0 Q9};ž6MT 7xYꪵ2[taL|䙜z)%0'fAdUlvān-0M%8z`T&BT(Gږu8%vߠL?D\k괈Uayh /~D$ f&/ 4:Ck~%zfw(]VT^R5:m£#2Ԡ)ʄx-TdM;{\f~z%D~V4 \ܨduÿNru=lYJXK~<05x 0;Έ+OzSۏ9m370|# t{/gV$žWM$i@8[pZb.Wt^4Q5qHʂ䵣Q.e|s,cYNcV?(ye_Ml+nQWjHnq /@9r#w7ygʒ+A&\  Yh9JRր}t9SA WZkW5' d)PᒈiK+MA:20漹iX1Ix0KFءl;SkbVY 7ݥvkmvQ`N%̘nj;IF&l~ jT7 Qds*qFi1&_sy&`_]H7VmSt;Jwh#'־g#( \iș(˶Ѻ]ţ-lDx4Z79NzdV x NgJ˰%oҞ_n}jδQ[lI. .ne20kE-Hiזk ֽ: Cөqh!'R []xox,YahǹxA 0:5C5j[ Cyc6mB- -U062iVh(Nz6%YJK|HU}y^DcFpQ[0|Pay ږ(EVH0TS<'KBdZEM ^c~\o.?#(J)4|=-&w-+lZZv~R*wo)6RtG[f)z>[[R\)*NM><"`:1n-⑆đ\+Xhfhwm17yr2, fdO.?PHȢ Nt>_dذWfKeiE$E%rʟs=(Uו0Vfm__1Pv2D@mҮ eZf܏p ӣͩ+'錦8)֯[ME])9#`ڗ H܅갇h4Y@i7tc;r2/ BZ+Gy|jfeF1\[8RK݉.%z ]gAUݓԻi #,R4+x1E$&Ey֓4_NȹNJ lǭ8q᠟ƅZYf#ߤo d[:._u(v roc.jTyYNÜuF@wUTUf >`TJ5v~ HS^)4PVaϼSz=}fVL@-$x ׄj~V8'u.L+{sh~!?6eY(d>Prl䟸Ur1?­-jҕ VʹH흳hN_T\G}ɴ1x`< =1qEs&y#c9?EM2S91_[j"8rwXw,*j_drp}Q%ts|ÍWf]gj:EY5'J;TZ;i,%7..6$#Sp\Q*SZ3P8B|엊V\g0d:kV{O׬ܑd&^f4z>]hfx*\n"Ռ[#<v]xy I%=C_G'@Ӓ3NRzNHɷEh%H(]jp8_~LO,HB O>!о&fKv}k,[oG*vvuzB y+b^z0f ctqOMdEhp!^}.ݯzچ~0!:(畠]RoC'ck q!aOptH;:(_Ҩַf3 <5\xY3'G?zgV7VoSzW}v2" Tgag!efsp @ fק@RwHk>|CLz ;Ϫ-ˏ;?n%r4 lzEllY=]_?0kX SY06-ÑS\N3 `6.0%YTas|r;úCr.AT|pe_qg)}"wdqAI)l!wI@S1bF!\ +ARG J@,aZK*{nkYX s;`!>@O vټPnc.eWI=ꇦQ(y96!}7zjxK.&d;ㄺLؿ~l*Z O!5%!Mfr>sQb}S+Oq A{<%@)(ř={&}*P8=fm^&)x,Azâ ]҈2 Fe LZ (Q:BlZPOwnR`_focja' J+VE$f8gBc蓓C7V|kſ@{3tqk7dz7WyNpDz48oYu4eN1XXfQ[B})XBhry1љ']^ۚDy\[/=X]xߐ2 :pjϐTA_*[wyhԴf%ˀx% Jk g)iw>%_6+9N#,xxrN*Va1I8fFQt7Cѹ}?(5 r43h7-ﱄz R</AOy}bR.efSLZ*%ͦ Qz2}.\;HE&SMwצ˷bO\߇-|Bc#ÊR. mrbnTfsMI$Od%سօ ɑO-Z n -*rX=҈a5kU"?߷5"5`KlzCivOHDX~<ڥ\x4Ij/W .8{ %17(MRs Х !o`ZogߚӍg `"4wxѻw N3Ւv/7jp8wOX5 꼲oԺ-3eSJ AeL8E q!d|a70v;xhgbP3{?0V D)Qƃ h43UD]umlfߏK:"k|Fb4-r-.)cmVNdwUTٹ9>8gt!p!ɧsEͶ = wVAOVe*#` o&4MedS_\+aX%Y5@MÚm \mZne5]/Y0B/v#p]glO`m AhCt 2oD*Zg$^!ݱѴK)?{ܹOFt;Z`!7Y9z~<ۿ޿ĝLS ӳoMYn|?Gj. $)CMƅo NwH WS# 8 Y1[dlIK=n)\N_d#(IJΨ:D Gqj(hQ31吜ѓ3W:o}ivV#8K参2X%OOԣ+*r>YfVLXbgH\Ʉ ّ -}@g.G,D駽-J:SJ-h(]uר3 8+Vɱe/G.Wa&Vd' w x:,FY+$ء?UV)>N_û4)ja>hk G~ V$|b?$cާVgQ(U ~ZCTX?}34Ɗ{R& =WÌ=NT)Y% |8rK=Mfˆcm")¶#Å;ZYtq=LKG:JƱL]E(z*ehiOI ά-oHGAwl!qnMȕ5VuF:oTŎ"c<1%`qf4$KR+ۈz.-gg!fD E)8;aHPs)5GkGso sN 3aZ[~y$ Ub UAPHe-@aqW9\߅}36y1DM)̎\63:}T>D<=5lO"ɬ&utAY`8zeBMM|FM r wƴJԨae$zEtNs.ɘ,}8Zr澣:U܄\z-Oz\"Agʠ*(&Xj01<O9soWרH+&4 Td(u{"ٽ &qX& Ol A4ϳ;JLbKΫ}bvNӌz#(7%=i"Trvnvi^'*n圦;NgLM[-}m͌ͺ/Aap :Lʋ@*q o""bS=)F}QNA/%m M(K۩bcB:k*$[ *ja2tۈϥd΍ 'z|vʍjs_>ifALQ­E[b7a~=ئ2O]VdQ_&[ ǥKIK'l+>~ cP[Ul iaެN %&-tj;`ڌ 8C1 3zCw|T0|*%;>0Pyuu?kb&_;AA1IG޷XU Q Ee,z:LZ{q_#Hupگ.W;@)V&7`!dC$v4{9ΐ/04=(Ax'$֨$ Y29ll+l,rO!j(S6^ i:j&:X¾UhPZmgf mj@6)e ?2lO >v(ŢYǓ:@'< )P¤/@D.OZܯ{ c6}/h)]) 0p2g$M|5N;4Ш';TsCp59,,IX##\>crD5iz@-A:t@JC^=^x\ ي Gy&%P&JՔ= wTVT/wBDj vQeе n-  Us'qS ,V qM:!W]I95&-+.> sl@z^N!9DEXrh*ռGrAHȾ.&@ Rx+&܄譛ƞBH5N?TQU{cik^ ׈mc 2T!4gb AȪgvL|+ŗֈ*H]cU.m)v%ϛ\)m8WN0n#m`X`GNv Zू'NF`>~iÁRY6օ$4S'P"!_Ch7t$>nEGl~ۣ 1srlyxYMqq]r?B_GM۹MuGe0ElJ6 7V"D햣]#6ܷgqf֠U^K%=!b,9%oS FU[`ޖp/jb+%2̴7aa(49"/-D| b61տ6.!n))eO*5,1АQK+%Ԡ<z f(EqXVGr~FTFX#;.Xe8|+N\sJ|zgR_|NrMA[ Zg(I /Ɏ=tƳi6pi(j799FJƏըHpLST{7}8M`{̃%a}fkfi(:\tb3KUA*̵`ȑ{OwZ(Wz'*g?T1^bD25>Eyp=dT .,.3+9@S+{Oƒ]l6]˃ u:a,$UhO,,ļ< ,:B+ă);=U:r Q6jTWҭ;1q)%lI>Kvv,AʂPjYHZf*a>[ll|CsO'#wk4G-]BXp\[đ2]?8[*/&23 7)R _bCx @SI??D6GĘҗAC-cGz,A!BBY !no0}gE8* $bZphAPLɨ$,O*q7#5Zm{z"A1?j~N h?|\HZ)ީWo{p̴, ԭQ=I.pC?vlj{y 2 :cᾭgEb=SwH]uZ/Y68^KPTR~cy!G@ в3JZ;d,N$mKn ZHikM90 [k"]܎!ו5@^ 億७;t!)_=+ 62̓V!)^_:L/VAmzSemC{5zb .!0IhGMx׎U("3\yyja1?3@RmG6h<̚E_FB1{{M9WwL?sMք"! D[rkt׌hӉV/g e~ t M@ 9z'8TzϫS8v@4xH kbV(;Xa!&Fb%A!Ӓܟ@fK0[jOY-_P,+o֔޳w9tTHARϖrzG. 5Z)nփL04SE0i-%7TXn7K9P2LNfp~b6B窓ͅo'7Ԩmǜ cS!2Ε;0 ;7< لk!E(A@EyJLT~,:Z**drԆW/)iܨ G=%$JSdNM䑾t^m*`}H w6D@WE Se|oJ;U\GӿC! lOyUhZռ\0\ |HܘK6q{ZO]4P09Ժs9+~rXDXI9=%ؓ:ą"=/ 7~_۟`μ\ *Eh  ɜ>/t~~NJYEo^Vݞe2t%Զ$u&J\'){ݡP z`e*X3->b8xP$1`$!S1``j|AW/ḫRJjM9Ngr)TǩNyh1/@!$AbI;u70L#r ܿ? -?*%#wMaxo;b{ޑ}$SAGqv9 uk'ĩ_̼*lWs,nZVߵ?SĢz s$ /f3$*zF`?K1tlDs Pve;HD`(`Rq\2Z/ לz:SU}==}YU} /6C0nb68on{܆Fm QwRG'Ā3N>͆Of*Q eAG̋W~vޜ:"$b9aRz60ôM^]oE bP0A YRA':n^$#ᡏ?̀RsmEzr?9ufo~7Y8;+!*)z9qVib~Y*y|*:6&*~,bGYf־VB׌ 8ͥkǻ/C R}\ 5$$w7IJ;sEyF]šyx՛W'js LcIs3i)&G="jw[ڀ٣n/Vx?e4 2tGrפ5{OOE'Ω 3y=ikد]v%)\8҃b!zhIT0D%1K"bRs=_a9 !!] ?@%cf,B^e|!_#{DO|>x0>a^ aG.<7S(͈LBT* ftSs:&@umb0 oEd4Le},ѕ`yZaϱGl:T~};^=M?zC:n TʻMӰ!jBHCx=FSzS75ײ7~00C;}7"V_9 !h`*Ht{b&BU hS1V&z5:9[5.c>ڑ)ȨE#4)oJz9lu!m Qir*i9O vúzcg AIK/__-5W7ɽ1Uh{Y#۵iّ۪zMFIxZ_d/CnNz7B ܒ_ZfMpxY܇؏үx\Վh76'X~zOCspc>G_b@,T.3d+Dy_/|{ZHXU>8~\ʖ3prਐ嚽߰>H41in.@yd4 igDDwzJeMn0/BNgهsXb>] l?4 O 9)5>CjCM_ TJ/}=Ŋo< bonzd{ޭVyB>\Y.Y(!XAӸ_Kv+S/V_$X>bK:rxQ&g`:. J9pbwCVI 'OH#Zxd=ĩۀ69"pZKH-=I4oarG2mޚDi2l7R9m-3=dk"1Xy'.a?5f?YҎ%a"PIyryEI /=W_/6 LMl2FGՍ.yʹ%qal; =|<и? :6TbGsƻ^,2BlgOiXGWqdU  /̙gM ȪA3n9k0${HP}C1e.qv!P̣kBqXb/0~i=k_ĭ&i@J06O)e6;cpeM߫:%!Wne% CLXeA<wfYhMs !R?Q\YeaS -=7NQJVL(Z^@ _ [AmAGdr9UE$HMRV"$%Kfv :AZ>ѕGxq{X7WI\F:C5[e'm?_76 rFRڴ DAO}#_x^ slˊJ$IQ{&@ǟ뤥MGAi2J,')uǂJGpbۈ>1AZ6w++0^yK: Ah@>hz5NM7,ˎTqI:8`f.8 ~C*0llLŸTb[h8:oy?,je-"]@y 2pzTV/J;Jdm{]X6xP eiDXQ v)7)~sdօEC(syg GlA"HNuE k6RC"1od~x4gp.WI@Zl0lM}| {5{wJ?x`0 ?BnzUSoF»uzk8ea2c^PEgj#:G2$! < FK%4*] &Bc'&/I?&':GIt*,HN|lFMzʤ8r߼}5ȸEGBE 5ة/EI sͻRI0ABe2`3yvU?NJq`b/}֍k>][!6"T!?Hq? z8`,ԎHh㳛 Cԅ2K]nB'.N'N#BSM,GB`D#ci}AeteS@ Iku/煰x6Ka _l}CX1s u|g1 FfIB5%umF-C7zQyJ^ eS|ՠ~cbS޾J 8ȏP/[-T7/aบ9AƮ: \A ~0.] X-i#Bk.<3Ze9Zv*hX ˡelv.z-sKmBr utuptn(:Rt)^;epގ1d)vN.ԟAϠ*p o~ոo"s\LV>Ax90߅ F܀tO80i>(VŨ|Ļ'(V! Kan@욺Kq1RisIZ`CnC~8()0wT,0*xk#  KР?JSlMϮov5P-X̐I+w;i*ԗa'1mrK~ -LS;9|P%:Nnrm ;%ʀc.D٩x$I;CTo^ 0/}u(cS772F$~@ uj4+:NLOIO;J|7]:ݲ˗_ϴ6F;@+ 65&MCU%ܻz]"D0EF dVJZO' XH8IVPVLF9ct a*xҫ[˥XWp:+{ ;&=(唺~Kȷ|޺JSd|C9{e 4owVOVkj'ֿ/e9͔j0q8پlڭz'6=u"e4/b-t%󌘩"E0U=FQlv|j(Z)gEq#dI4-q:a:ȅ:ZE(L W͖`u )9pai"*̛CEC22 u-ȝ|քĻ&Q'q 6NEB$׼`:a.b1PU-aHV.J-aGPjY7AGXj@ɹhQ5]<<UwVtωBcm)\;mz@Oc1G^coމ!A~%ECzk!/w ܪm(:PYh>ĖL9= zטg=n^ThAkH`Fff l>zjn摗Vvҟr&߀*&I|SVaZ>/9][jCA)3Ծ:BܩFD0d ^eU)x_8Teq cFq5MssxQ7޻)tޗCY(Ȟ-i/a?B!C9`m(6o#5!';Kg9{̔M>%;5бm}2j['&jBOC֍#= "H(G?*FmcGthkWҩH'kZn/]BBSW9*Ռ6s8VBp'B3`,ޙ әz\SЮdg=/0DF:ᓅ?O >r0J11t#qC (YP;?놸~K]ۙ7fk.UbU:Ee!+!e!] CzeܰP_mv o6QG=j$B3ypl$޹Be&-կQJǧ+*"(* N!_@E@̰NZx> m!?MD2'#݇NlY_(GHe Jx)ꗛMºiC<ۙ ̢jLWa7@qX,ѷkẪBq78F@Zd $.tzͷ4oMqAz%Ni Ns@*٩+.k'ukӎ  <2 C;4eX>t{їLU=Kb+rW  [Bֹ@pʳ ;ˆ3+1/) c'%61;9Ϟ-\-$|8;4I#5GBPm@+6ܜ` [u*`W\śdG̅7cAfG^F%WζԄ*#3_Tءc@'?^;x Dwaw&3SWڨ35n_U3ϯ-(ɉ=Ȃz*W} Ia R%q> QMӚk+B >68"HoP '땞qeҬ@.!.>`₸f(ejkAANYR?{قo6S].9A_Y'?{LՍA-Qq $t1V1h(ci;?Cd4'USYR ĒOfL\l<.\yy % tǛr 3[Qb4H`R ]VQ jE,sޚ r1s_;w_Nhb/ʢ/U<f a;qMgχi"RYG^oQozMDŽ?8IIxfIbt^^VbMOGwգey ?w80“b-uZx4ޏH EnJqc ݋ʡ[" 0ƥfUUU5% zbWNv|!)2tJ@ٮԷN&b+VHSusT?b쳂L\y'8sڹ$rf[r=["las/,x* |~>2|!IR؁f u\?lbꉥd@g"*:FIx ~n?Ig!ڱn BMq@u},5z {=?PKϒkYT78 uJM\3SO*;[3ʼnLj[=4n8qjcwӼBn[5kĦwR/tplCMgCףiZn%ԛ0[)G#6 Hym~w,(iui-8q m_By@l{_Y@廴;<939mZ*NTDy;k&YV&a ga2Rk6υzX8! OFVDq E""]fKjbkc_qV/}ʤ{ӆyrk!g!S%1'!/wݨmHI+9zF[Z(A0%&y4YG0=@hD`hR$:{;I-=+[<`槻- `s*h(Đn֙MF>B4:ɠ7UѦN\]a8i< '{^݅ epA\x'Z@iAGo$PsZ(tPp~79f+V98 ^HDDŽŌ?SKw Y5Xa!绢 j2ypDE?J.kէBvŧe=iŐS$ZWw!enO#;MD.{4)<w/!_r33AK7j);euzxJ`̯O8ؑO Nmwts{^a= 1D?6?jDcVVQ,yh0}ߋ4~Ev/l~X<1O<\{!dnE!M5"v]>yQ&b'@[M7,["2 ͧ,4Vi@ ƍRvqH27P_E+N'a8(ߤxv: tSĄ>L+(!KM4[ 5O]ݑ J򸼒O[FJQ-fǚ̀_j>R&sP_koɦrKϿ1_Kp?h۱]Pin7?,D0 &Ր?dI/pp0ir!$Q~Oo+Zw~felgqV>vU8s[ ӎKrJndXN!eSZY$wZO]D`IOU*K{iNJ Xʁ'[bdg0SQ9aeUîj=gEF!04 v3,Ū+',NPErs].o ʿFZъ;!^s,6X i<[ҥҸÏ3}q$y򑺳=J1uMÞJan2~DHg)" Nj633'p`&UYݬ9] w37xlW$QIn3K,W!\xH_j0If}@Cƈ>շyDӮ^~tHT _t;|:xZ{]̩ |+ [F ZI\/zQV\'mj<*:}s8 ^da.2sb8[yEuɔIX"!*Qa*T??Gxx\@rG;g^wrGHo8q[1E6BoÃy>xy8eh,YQ֩YIämH_O)L+ׁAJa|l^;2%SݿKhq]~m?11f+~ݜ׼Gu!74CXl&r"?|ެ9O ިf'Jҟ ~ oiytbd @p>/1'l`lmŽ8d0ƍwgYTít:uV Pj`Ee#8qѽ 4. g;-Ѳ{)MlI/qvs56t>yw,~výp-U{D$i@֩~n1 %[49UHI"aգ(Έl ,$ *qmNJNz/0q lqwf4vksxJJ= NK3o#[ĈJF4j F dj,m4C1yZ'쯪)6ˉu=}d)ƪ$jkc ش gx,qT/MWgPS0ed:fQjpB{v\TwI៶hyOtbnћrzv7Ƀ[q8V/8XLQ Ax+fjZQkD^ 2V5/%6pν]A=c6bҗ&WkqM ٮdE7MVa($q]πҹe35TUQmh{@ݱ؇PKZ)nxK;PmFr?g,K~O-%aSV%eX#SoQM0~)/^hkiFe6wFݘ43B}Xc S L9Ur1P =bή4+I-/Gpl;֒=֬m&>U׫$u3|25Cֻ7^91C,o? !'܀=T,{]_AqG3;+|Jsxv:a圻L$ڻbҥ׼iʥA%~'P>ΑҜZV7intAσrC\d+1-9kЗASВcB{73P}I=iu`T1\ }Kh`i-H2!K kST[˖g[[Vg0ϟM(鄽 шEWİVW}r:~p듷dXl=+i6ro`Uj;FG7W=F=_.fCR߬ U{)e"_qi7sƃCD?tIuC?:i)PnŧMdCq߮$$~1>SrU2$H쏣m O+6c МGP%Q!%z0k,9Sᥒ{m%] D`w)R*0m1F8P?]ZJǏRoslۀ4QנbrT02QjՐ Oq52ҋE IH g=̳}e6ѿf2\5%Q N9N#coU>if;% j]iXY^{}/Rt>;|k7^Rd}A|.׶^I䀡h[oXrmFZ]묲| u]@Vp9cJa*h f5aTx,GY"\m\ߦ>tR4KsK!Ґ9ëDž4vGVn!&qQMCU:H4wS'9)9 HXqWrHzOxOS ?Yr&grpX~<ܻ8^6ASjYظh8,ʵ)Α|6sR`w5sCg3lkx2^Ezɸkޭg˪B;.$s}=a*pok)LiЛ >~҂EJWJfKSR12+D=.Dd%jnF@9A.J@` ,X .M'=k⛽L\z]zjMg&FV?D3[9Q@;,qP4g];iHLط`nYߑZaHHȯ=](4ܠ{^{+y03!|8݁ͯd9Чl`lizby)t?d;cl"bL5U-'5E^FQ g'uܞ# ȕWE4=9[XhڌB)W O7nPg`G9P3OG8s2ךl)9mnowm]{nBBrR-Y -=gM!.ݸYDEB:B 3x⛗ظ^BlgjEj}㫦OEqwws3Y4="  -Z@- MEMhB#oF[ƒT{58׍)[Bh A'}'I2gQ-+1*1h-ݻ!uǨJ; `ns蛝y@|2!qw+e'-!PmD/|L?VHbCΨ8Ow3i5'nʎEwwY>$.#; 5wc"KqxWMˢfH6j ]d.O&\(U Rb 1-O9{/qY[r?4 ckY9pO P㱸VLܛaS^ב΅>)Ip%+4>&_Cfqg,C>EGN=;ͤ0ѫ$Cp",} o7ے5:D̵R蚲g2t b'`k3szYPS!^7ea㻁2ʕ5`$][U HG/G} 3'EqemM$Qe3bwMP Vh!8#[LBX ؜gz}*irHuq=b!=qo?-DT%fܪ/_'G:!fb?ȍD۩zH ,sQ]RFg0jSweK ]-8`3Enq @m3|O93^$[K8-"L9D{ZBd k?xJ?Dn/GDϑm!j_[.qF$txţ ˡm+9 $ PP ?|YYFxN^,N {b)-AO ը}xck!骺10rkM;G~`?e:LV@Ʈ4mn;"dw}`M*0vE`+DY[FO60-<#x"Q.lލ/}QkeѬڻCL`2?:`!)EȰ2qxvPǮ(mG,$uUͶ9˃rkK.#ԙѓֵOFMn=|zPFpo HA L<Ëb|$xp&2{2Ya^V(e svl{߈?Kt A¢&_W7qrP@Bj%rrSs7u&ŌsƪS2W^gӽG8rΙVr 5mĝ`6F)k<]u٤BϮ׽V9`fN8~!j1%f[{@]z Vĵs>ש W3o*MI5S:ޛb3~%}SO hAl]75 D>] AܰLHX˖K#$ԏ!5LӸ\CQrPHu^}8͐<_N{&zz) dgѷ 8^F#'XmR?F?]PUZ.i9s{1bAv* tHIu#$eJーc-ja_,NjR'= %"c᫹'+)WPruEܺp($F3ÉY.su?X F$i-9 @!{q. >.+5-IrLtV uxї+65#G|yuPFb+EU 'aޱvBn-4G4f Ý!Yk0aÓ#wcx<B~cυ=C$<)!PWUi: Zu*[)ŐV{=۲EeEs'^ Xߘ{Wwo6 ɽXr2=tD0kRx̶c׊ >0]h&9o<6~:^FFhumA!$2JP"d?h¹Pu!@wӗ:̓Z4$;x"1iIivܵ`Ô9v bzplh6݃v忙֣ý1sى-7+lYYK` 2WG)|8n\lJWPNJ FUhG4iT CѦbzh"O׽%2qV ]6_I(F.\RΫJZFCYVz6MT cdo@`"YzZ60Ns{1Lsk X(2 AvonM<9$ĚSϞ{- t2pPNߚыZ=@X>Њ)h‚3=W98KMQr{ Cskrge'Q qР+`t7[[mj~*C-!ÕɩPns ܕO=V({|"g5/N:z-\!t!I1Cᚍcrn~\%ѫ3ja ݨDdXc~Qō9"R^<᧥*ФoGvૃ8\}l&f(ʼ:RL}8E|LU^`2Af h$i I^v\q͒#yT|ϥ~4͍>>pHqyMfhFWuD"^:547cW'D$)沤0w'PecBN%N~Ҫ]8ƭ P5LB\C(K'26M.Cdc4Tq)C=ZV-hZ''^J`Á2䂍b ! WfȑnvY cܯ5ZT7Iεv]/jjmz:j@/;@4ywź,UԈ ~فNN|]W'x#S=Eܟo)NGIK d# UeʺRA#]4|֩(=B?g !ܞϿ@8}:uP?"J!({n7 ( j@sÂr+VF?u3cYJn)E] qgۚD+6e-CbNֶt?x>mkAam}#cƒ؎<4qɫ*l,qXF e C ЯٯWPY2ßϿ QՔUD6d|u!ZbH }o'@|Ľ9˜6`}ݓnQ'sSBDK@CkDjƝWIdg/NwUDW.'79,ρ"5-8X3dyA|2@\*QTDrI ̇V<i(-D^[Wzvd!򈇳ï.;2e6t+STZj;(DH: m(29m ԗy2m%Ւnt^z^ꖧheH~2E܌|f|4\V9pUI8P]u?iAk{* @ ݘք^G s{ЯOz=fOX PKHәo` yE\os U1bj cUh-88W6-ʹ/0^N)ٿ@) rSE&-F4g]=`$li~LM560Zo71*晰BbI\qH'f"8 \)[-ꐤ?OvW;=)tsMAYF^qi ׬ОGF*'I(;0Xg(B`\py[VQ**6ˎQLL" I#6,po*'v!OvZH^" "ÚR1ώyTG_%=cu`iߺ GZ~;nwiݭV;2 ]_⃼oe͐,wܨqXf-[:1Y'vx+Ruj 8"ޡH-\M,R's;Z9WT])?ƙ[|Og{Wha~'cwikQހlkVOWx gI2 @}WMׄ<9RfEE0_c j`z8m:"T-XK$tMNײSQ99rU'$_E'< 5Fdx{ <|AĬ;gw{pPy$ P,K3Z$jeG[~^8)ۇ'!k5_ްZNayDM|#!NPקIGj^ f|ޜSf_幇373>|Z,[/ÝV=OFkf,T1 7zXBlzܵs'#ky0a|4 6e>۱b+4He+o>QWcd"aS1@oXO&mnDĢֶǒِpqExpChvgv*pc+}[=K#? 2d|i>B=CV&ydw-0t{*4Rkۓۊ0<9'fԁ9 ^9=k#ǂUnVg+/MHa$.uqЬ0 5^R" Z>c64(o_Q*-jyFK,?0|DxAl9gBث_ znEA0vM3kr$]r.4\,6W_SF'~z?{_ܝo,ta],rTd8Rbc6PSJup, **eT,l_͛|0x䰖,mdVKjD@k@#oA݁+x[d\ϲ?G#8擦mfedy JzZQ>nWXka+_owDtڻ8bYBMne6bcm@3>5J+0vD'>C4eɠlxĨ?XtݛK+9d9]tj;nsήl >Q ƆC \ZQԹXϯl<+}Ke^ժqA6=|+}" C]ּf. I!k\u ΂ mu"9ɵnqb)Mѡ-pi}NjIeGNj |.{"D4-'0c@Yޭ!ă'A=g@q͖deQ2G3PvȌf1o>8eO,mm8dlxqfb fJpίAQ,hvt=1حԛv=G%NXA(Ub5"Δ"-'P(y3bx}}Q yK?.\ g:lIyRي,=| @ y>n^=d u%G6L ѱ7&R@'CŨVM2}{i;׻5Z:I}>dwp,!,K.rףMKS2j>ٔQ@;mޥ6RNX)(^ 2SpFH遍{BQOJO2W[A\Zڀ!3Or)WVlH{[L \)};=^%覣1=O&/#@'r 5rU+=MT8UR]̂ϳh+-5j*זHf(D+JЬNB.דe^2IȭxL@4] ;-oExeY嗻1z>oCp1ϧd \[ـt=xA4eʼ?rVse{ٶ 砓 qtOM['6u^XKۥNW n.9y;WlVWZ:Ox&8z,{eC}c79GH&mXw4k`C}Ra4dAEhLUfp~<X' wo+iF!f-w^Ar EojJi7὿u 0% K>j~aG5qj"$E8hRN ̝J@9_Ǜ_:ie<рGF̸#uI bB4Gz(v< <: zMx| z;%TڙhM]_"$0۾Jnd诀`]ܤ;Ẽ$350V,%Y0=P(17WGѥ̼k/2_Fuq˝]:s5>x!ۤ;hS6 ':G x"{)'MLzTs ])V4f9zDn@Y *RpubVuM ۹nZ*wc:%Zl/c?ᭈY;Ԍv MjӒ:(ӻa{ۉG Ơ25J`pP?O##-ʭK ݹ[{΍- = @bgGhKA:M7":8S^׺Us$%i9*0׈z= aK\rCf1>>lKqs2+L=GAr2HK`w8 BM"QEa8xRk,3{o2~QSjRەrN` 7pGb*q;E+1B/>1QWm˜bri%#]B;#_@nҫn#!p2&Sn0HC&31'(hti'ڇȶ!xKכ{#WL 4iΠ a3\W5ʌ0e7 36AwV >%\9;?-GGR-Xv@7,Kv=1^໢)I;&%ݴ}KdmvGR3Zjۢio,%alRl"Ùiv\C(uM"Ќ 䑵ˢ-ݸpk>`Wqě3 =ʂq\ʠzoHsñH a^ @DdZnM[Q8~ WeiQ" ek0t.Ee&sd"w04YչaVh׮ t]QdLZ^޲3x}gJ0qB6HhRǠV"%@&{0{ZQ#3ңwҹ}0ЕS^ èzG)ޠ0'fi/D>PEw@L]"*%ŋ9pyjK%t1{'} 3/ZM4>g3< KK@(سp $FuYۣFrq[Rł:mHCTAy06uEeQcn,ȉ2iZBA7+ZSVi#ݾ-1`O0+3Ԇ`.w Tpl5fb+AW1{%@{T-_n\6Nv-wȈ8J_/ϕ$n̻M*7js']-+g%-MD2A`Y2zT&h#h+,n#-)SXOS,iB숒Dn( ?) AIY@x$Gv|l_A) zE21Q&nPo;)5lOQ(빸zV|8D_BtT`n뤵s`-OK *Z Җo7aXkߕ:5yR'-oj%Jd0׬ 'mStQI^K$ɿgAI%[8#RＥWO)$%V MEf*d\Ծ4Hi=@-pfɷλTb XC>Үai$F{glEEU~w@zV |Sk k"DBj6}, UfrQhoX\HES^P zIjp@ؐ3xlyl!{VGi>76Vq}O<G,gKg ثDž-gNI4 gB;f$dNNԠxgVN2ɷ` Ŗ_5SaPmٝhR;j2ʉ@K(D+yjaS}1-D+۷r#ڪĞe, _!8 |G8*ɔ5fX2v^DbSV5D;`MV#OԥV5npG96.-!pCCfl+;/_?ȵF5>k\`PkmQ"ʚ|Rh7c$Qr艡4(<З${>gU!O'kPk;ӿw0nXa9zѤI )At'&L[D^uvwVXuEU S@KtvX񘗈2A8|n1M9l @NM|_y UL>D.452tz2eKwU׈uAqbU [+s 6_2Ԑ\7;w,^> Dir=\*rq^V}cw\SS|]πݶUo yΗG3^ VofID ((Ń]PC8z4 HVsyYrHTcJ_60 da;cݣI(-ݒe!uu%jѝ.ѓƓ9ը2w@kM[&ևL;ݦ4"~|A@B`'fpfS!RK{\$R!vT!MTգp+5BWllv KEk0IZʂg.B oFP:ܸqWP8&#pهճXL# Hʼn/<ݫzA83;1ЅjvE}Fol}>ULhv!>QG2ҌIlƋJJ2؍V!Ϗ^q]>, ]$KU oc\ :MÊ/(U(]fRv.qة~P3Jn ZqVq߁k޼ ZZ7ş`d!<$+3Mg)2*$*":kD#ac, W2_5le[Lief= nUd=o wiM -NJ;Lz(4wt i8Kitw[rHM%@SzEuh_?~2v8f4y i2A"$_H?7IK&/oɉ hzQ ֋Z dvE{]#w-Yr$IڟUU Wh˝$vڛ1)g2&MFkțUmNӢ?-xGH?ZO05CLTvEs=P(31~ț%!n *ڌJl!3n ](]PĦ(3-qMZh4x(Pv/SjkIz ꊎioM4m0sFY-LjR0 Ap𥨻N!Q?N4,Y+ґ'7X|3u{EϺ(Ȗ;J({T3 f>F&=53*!$3Lf +'h@RYsi+yz8dmYi48qM6!zϣ=Y1 e7CQ hhNw)4U*y^?I[Q2Y^PV+@1'LhNǖ1GX5is+уtM"HSAvRצK1\DL}O+R|ueqe Ƣ}}*,XkFm4dʩŮ17?S[y-J?c}j#7v4$ XcSB3aMUKdžsD*& gyotVe' dgvzVYgo=.dYjk=ezHhҜS=;lAVh=bi؉*TzOug2|k3pVSuOތݯ2C|IK۟EzX@x^6n7 F>2QѬ,k'~oc'orKx]5?gKT2\@, mtje/M"H:Ixqc.$dwtL|w2>]!/c@в08)9g:g M Ųq 9Vl]! `AЦ U=iofC'Žk.|RS#f(Ƴ:֊KN9@B~atz>Ow>bOخJI{Ψ7\VDぞK(jPQdt+:ɮ8-~z XZ]~ ذAE &Q{i^5|$wHQ3lҲrdOE-J&GC0hkbD?)ۊ/?yu+>3|>7TJH԰cKl O_) A~mCp-40J)ܰMd` ǣu;ZnVMt4s3B B}FϰXFp\ 'Pu_U4b ,-)4zuK֝ٓ'"ɼG拟:8ŘiݥY[xM&{+{WK 8qػ/EcY"7uIQv6e; Q]5sFS:ߕ WR\wHhG  Z^=iwb>);(<҂yup,跪PF0|pzH}=k$d01b>#CgA(㟪M` ?|="JZ3_ lX'!ӆ+#vX%TrZ9'._b4|5U HqmC0ct|WBzM,.j%>L"Pa# 5 ۧsNO1h?@:1]^p@G_RiOΙixQ+ӥhۚp)fv-%~U:#sϝVyl=!]G4J*}gwq 69=5w7Nא\FSM{ 6F^q3 |;Q:新"p:IKA8)E_I_u nH!srzaq;zx/~#]!b9^.mn$!x jNlYYZߺg6~mi\.(LbPyd+F+| %T~'3o!=wA]7!ߦ|.hPg#zr"-}Y#pԘgRHAو_&IBбfJRXA8i(`7Frcq 1لlbډOFxzb@GPMTg@땃1nqO'0?GHJl'xE|TƄ"kunQ]QZ`؁ee:ZD](\rFt28QABG9֭Kh V0RuHLFϹ-b;+Q&O$/̷ꊃ\ĵGF ⌟:GHJmN <NTppvU,m>s<>OxKT㵔B~] gM0HU堻ldD=+ 3Kw;qoF\iF4ܩo[cdR3=Ϸ23,PM?_mlHWƝ9C+/;x4GTŹG4ʔw׳t+vť? ]ESEŌ1H 2eC@콞QJjaT%KJL2*X; l^X2xͦPZկ]~_,FjvK9dQqՃ?C $mgaΔT5=\M cS7hjmZE#M ?0#鶛\w0SE KI'ni+OH6{ v%-ʂ⩸ R^ މ~sQ(j#sUKU8:̨&0 Doޜ")o!I5FP>m h:iBVJ/|~&c#]8n8p،ζTcZkV z[]ݒy\co~-qBJ2Ѩl,պyr27l BA"GK;ݧe'[%ji,fi{6TvH|%͔t0U-:is^^QMiGNXHk]ttˈcB;^6A_5D6j7P}'MKɤ bC?j2-WQ&a@,:Fw備 ƀS 1FE2 {b#Dp~ǝv]gImPB CȁK#gx͏pYiZ5A"|xZ~9pO7{9ݫ:'#=z _is. wnoN ]vFz*^ϳӠo=!Ц*^1yW+D,I:e]Kqcz0݊KvMNbWUq6#o/ ,uM2fS7PXh7ng=xlU+^evWB\#P?k*!1 /\DCݿmszZ$S|'!&y^T /B 1 ZӗZ]1>) ?ߘK'B7W*cam뾯6I _͡/п/ؓ*ii=5o_Nb۠&3!zznM[C%g}p!@ uOmb#X9☱svp3#` >AJ䢜s>d@ 2Xlgb)0jsB8%:ky"6s|@A``~)\Cwky]L&i⓪.yƦ^`j[VVJ[縊_*;.:1m^ԦQE2p4^1n-HI?^y3EE"l4`ϺpNV>78Lj9v(}_&iŏ;ጫĮ~4E'5SAxfSH,}gAlfQx@$V 2*z&l(9*,ۭDɭezCyV!ϐ}-pٓӷ"SvϮ{y!h̙%\<&[7K&Dͣ01k _nt!672k*vX,@Z:Yݳ/wp8+}n#AL m.%=d &e;}/d)d1@jCxSg^>$>xxe!I״j " -[r& JweACTځ'ԞB).B2tu30=Zq(l~Jp^&uQiP27 G=yD)3O,Ō+U MCԸZ=6>>h f-Oj%E7⤊3c3;7MS'bNKNj(؅,j- Ŧ&a!\hm,,%]fH(pL ΖNi)KyV /*z.;P\a86"g!hd  )O-ٖ3siNP!:pY;GT9tS3k\/?L=}E۸nSi/Y%=i c J\X7p(ֶx\?ofk!؀J- }7o:H7q["ز6Jߑ}^ K""8w`Tud-: ioP܃< zk}o 4PSG.v>@{_Q]۪@/b9&> KrT[؁0eI<`>uژ3[!4Wyp$7(rMΰ/_Z\Rv @T<>; 7ihLe j=*x`Mu-(>Uوk&O%v\rtDxFjص5W-C<۽QUI2} f}jGiV<$1gi'mPk1?eе%v[dq }-ӗ`chOg@}CQ=jޮyF WP0׌g{ &5=k MoMb~vJ b^0:=R:M21tkg7S{9GcT`ps Ӧ$: W0R/nϨQ Iкz9h^nĔK(b+\;]+iїWy4.oa `-E.cU)0vqI{ܻ2NW%s&$P4*Ur@Gl pX%^ڊ- M4 :%>ymmp.}>?cpc>]+Z]wwt=P*VZ!G w'|}5zX ou+ @%SYi31I%QjcV0҆Hd_lw\L$ŌXH'!Uo.y)vM& x}.p3vIy㽛dZ-CGz.Pl$AKƩb3XaN?dHG$iőq" ռ>:p-VbQ[ .f^=jI6LjGLZ#l.rG"Wo#/Gy4j篇J~̿)Qf0{37TmSq>e,5PQU`oyGƅq~ŰZm.ʭ_+Dp=}=VJ"iG?cwpd O/+6i^#-lZŌ)^B¼QEVaտnsA"nlZaYuv^45N̿ CXSV: SNJyvsX8}}@J*O]nuƫ0H6Z~dbs-̤s3iݺcMP~ ?%rRTGsxM[s=r\Fi@M1zd oӗW>};o8uhv/2i_8;Is";>^^Y;FyS4OdHoW†uX)!#o>"0<" Boc6|2mnh  /AOkO.$)ߥۦ_ٍpSIt?täidP6xRc|:,B0on@jfJqA“ OE, qmZ}!U|wCW1OӮlnjSeI=0Q[r?LI7N:7&+^?&""|-:ue%-SqZ8+q HOzrnok3D69'qao()GF|B\ҟ!HOF!𚯄Pva[9MG1@Ap<Ί5b>˪AFt {ؤ3'D3!7^4sc1 Ϫ^=fs+C1nh-ÔxI l3,'6$iq7řO;ґbQgpd0[#W'UzmJT õNRfJ_.`YCԊu$sU?f?QY;dp48`%(a$E8&k\{ZP\ {+a-yߗ~Y?E>@!AN!;x 2CKS5"FÐ^Ě{:ʵA 5.^. Ӂ"H#X7/+aIZуъW̽n륔-Eub 2u R| ke. UbDDttZ3NRȑ2^D/c@l -$@{0 v.U%iϸ~XUe2Րʙux=Ԓ Ѩ62>XZsdu))Um/oNTzDsEQqjx&XW+5z?xK19MFjaQ!L]9~lgǎ(AG|Y喔=0e#Urz]ȍ`еbӘawj+EE`x8c&1~ r̻ӟ8A2Q(Kd:9X!ME V/2i>\l2--C%K'z[6|Sc+f\ [r E0} [3>.ȃƯ}9A(4uT+*l~MgNqO8Z&ŕ(4dJg]H?@y MȔo {΂j8Xng'xN] bs 3عK2;[_;>P>A/{fn(.Pŷ]_WnׯsnfNV|)\dj.O6W086234WUhc+>}dE!ժlx=,<ֻQ5dw;> ,DKI+vz,%];ƛghƶ* }`KaCh''l_.DT b6>֞~! VO"d l`3 tgB"ŕYz-r ̴ ӭ~me+]a B< 2)I`O7r+5<9ѹ2u(`,R 40_P(b}ʔWf<:1F3[%gzIazq,e!UDh $|2桃, 1/OJdCn- ulSY6O|3.Sc#f"i!v0Y3؋,|()5 1ŤU=DvoIU/3j/!9K\mC&yBh~4>9_;e\-.)Ph/^5ֵ~Sģc`VqTM$Gi*#̫ shUIcK[GEO߁8vAR|eYdK2B) gxzl5 OB{IUC7I|VDؖ[Qm4AO(HO6^u:^` OV'ϘWQ wI/ ؞'f k) BrI 9֍T1PJRd2SLNUCP%~ȧgkqg^S ar|jHCRrl Ya:jQhE+ :ST .( 2T<|*wá KߞO|M^_..\3njYb`V!u*a=4I503I\ g^;.KAZY c=(Kٵzt{@WLl΂QFLXz|Ӂ>N* <޻XN2ϧĞrnK< d~=&?>"%TI:O\;I%YzTѧm^V0_>,'ÅRc_,bM8iɹF l2e%ȓˡ3t{E2[&ӋO@_4 9~N陪沆&1ylɯ)&ھW.n48b5 #{rgBX&Ѳ\u7'd\-%8A{:,X:+iφUx76kG<,@9Cf+D%n~']%qڠÏP_0# 7qbՂtGrއ~eJMfˌpSK(|S황>%;k=Nq@\JqWJA11fD|o.2nvn@})Ⱦ?vֹC5W%P |k\PkMcIvh?;eQe_R-1nI-u:_H;3lO$ AiN9Xƭ?j"N~@&Zum"lXh 'kt| ) Gug7;9vΛuza9uݼnD7a7^[oOzP@nټTc8%c7M7GP˰=);fgS yR{P*W%@'bfOt|.Cd~|\1  d/ʴSA 0DhNtQPdr"}ٽ`R,w̐y7岞)oDyO*UUX nw%f^*E_ Y+K rHS;Moi{c*ߛb<'p+ֵTb/+2H_wN@\Eڇ"{ h{̭UVE=\֨ fR,E* qmiOKq}=ͮ\u+5vr Qf_}I$_x QK SㅝmHZcukA_-G{Mx!ӯs>+:LYF/bМG*@rw?q`L`\n3>"5'R=g7 `HP6FI|sQuX6!ADIx+5u9'}K->&&ZJ  X+QRra` cUN? 7$7ΠM˘84f0Ldk .Tc/ r%g̖p_M^ve4{ǼI=Y ;rvD^`){Z%`VagF| 9?~޾8 \RMаCXvN?. y,ꫤ&. z 3~m!\{b=ZH>5N^('~狀h\adɍ$fõ0E^&jU-fXy-Zq'bXm̞֗?WC*YPHe߷8MVahd f<| o$1#軓rRLC)3\Q]QC*@+d,@AugT!> ZN}rXFxr`2Spf VU-<4 6ᄳ u@ l@ʞ5&ebֺ&8g c~[qX(97c+<*kTeU T&gZ'V] @0lۇB1CPp> 6 q$tBMЮ*1w4Fb2P$/"*5(Ma;UK=V@Ҫ~'< S`*PuIrK=܎)7,.%߿pTSBJ.4TY%J> T6y~,$B7,'J@=:tYXW~c$}|ڵM^ɥ$RwM1v!z8:[!x'kr?;ߔvaڽoWM8>~r? |)u*]bw c0r-'Qx| QKԦ 1S֓mtmJJ:jƼ(=o+l[ՔfU떊knhXoY$\@i|,Wy~ҮHq"PT B;xm:}f5vȌk<7˵؆`bp$ B**x(7c:]&NtH;AZe_4-Uxُ¢. 8rHTܖ\XIp5ߋQf0yW<< ;!Kׄ'M/#ť ZEAəHA>t e `&2iz{ f 6aŭ#L+%"ġ8^>SL |@()v}66|*oBm$Icے0 *YwK- f1Bf+ g0YrmO:f._^< n7xN('v )*&p6uVx"cRaZZ׍_6ep9IJ*n"P*XOx2s5O{GfAEYs>JCwv7O q{*\"$ZHRXr?R cF`Z@ 8LD+'CPd%}U|SR/qnR ]]S9q3PūތXm0R''s $zS,2%qdTшۉmLRb*B=D)_h, !)KFy;"t$4K_vFgr㴮JsjFpVKrnx?V~c%8JY37%4"IP e&ݞaGH\3C=# m"y8;e-v<>Wnb> ''9c,9`FzU.8VME| }4VPkϦ;ޭ/T%Gmc$ rm"vm;yT*9y2[?U7 ݋}oKTԎ-3KsuBmXRS-߁}V@3.ɤdb@It7(gwkY/uUy0ir/dٝTNP=v0e R1ue*y2z$sUhچ-Iu"l}"k9K< k^`f[`3E++P[1\̈ENߖb'Ϳ1;S$ eO l-=QMzIt`LJֲCl?Tr1ǤG(*X#7-T\,Aد.-3M{YŪ'WǏ$G>[1*@J Q.oUEϺ-TߤFP=v0UTRf4VxR(<"YlHwD=u1ޑ}DrZoD}ZWsˑ3G.Mȭ A32[}/4 ,v-b;:8[)L1]>0s54@hc殖) F2 H6hD?5V]s: Lullp#G\8ژF&ŏ 73'8p\Xݸ&jAg[:iUZ]kڍQ@ɤjܥ ΏQR3m/ymQ GU!5]xraCͩ7eE\a m<}^2*l>|IgS\yp[eLs/͐NmtҪp}7rdĮx`Σ䈰uѬ#Ƕ.Kr IMDd m{*-ίb6ѣor985sORԖ:YNCoӀf0r\wKKз21JWfS'~ܷ P");*fQ"Gy|dv8AZa_9^g}>XS3 g-dy {[}Z?1Y\ {-V ;i3-c</phXA.lWP^H3 jVۿ9k1ݕCE_T̲/U(jUeeNOzZw-zk]b?vK|ޟ*UG'#j߻Vre"5ҕ5 DbW= 5:Xz:%qwbaq>?7HA,q2t)eQ7y\ԨUYzďc!vfc0*WDe >C\?YSne!TsA";j3?EmJ]pV>d=pPcvϯK ȕ|;ԜT]tՌ:n^Kl yi]y⣧t^?ٌjPhoe?YXE!8I׹MUMmcxw#{_ӐJUI<e QNEB1OVO[Q%Px \z@1Qil8 A \i;,c@S<7Du2p]q [8s/ñVU~+;d࣠Uw>=fsf/c@X! a7*8kO Yq5þ'q&LЃo?:V:ԏ|IucʩTq+ܫg'^w<0e3ZAN \ e`>b$>MW;4Tt< X}ܡϸ$eGDk׬0`|g)%Ͻ ,v^6$aZ5O3=s$.*Saћ!99*iI; GA2Ŧg@9|΃(ey5ZsĴg`C<[ĿK)6qc,炶Āyu07gҎF,oSualj,1k dO"~4c״W#ivfVzƬ5KS2kNT]',dNy?+1zre?=`3b?C8[z LFC<_D{T+1X `~*3#3 BliؖJ9'("dL|c,ԡL2o8‡ /=7@ApEh2כ5 It/DT~M^ rdFM@A tuYJ١8s݉}zܺa{ 5?8޹PX&EDk;*?NpeִQ}{\{UܦAM\%vrIeIwZFZQg.ƭ^ <POJ}@lLܣb1>{Ht)N.gJ/8qR+ c` ׈.0|hiśm7vpZOeArq1H\h :Qe{ os<[SEW"N(%a`*K0Hm^f n|SQ4,Xڄ$dkxj;3'KVz|m`dPUO{^N¡J1NX wf)>wFy۠iFKö#b*/N`N棳.e-ƵuNt0򒃵c(^Kټ͑IuEa,Bt4͂IkIUD 9Xh!@2t\_ =d="/Z=zFhPO87,(˴ؕDEaM˄6I +3rـugooa043vw[9ABS_OޝoiFe(ESEө׷r(oƿQ,4q]Ҋ}uU@_q%8ۂkʙ g}|/zM9sQ4*Gep-mmœ԰I'Щ.1]BR(w76*NZJDOB2tŚ9l7X"0g Ė’(3LIlpCiuWiQ>sL@t*iE"7 üzɤZl =:)I*)i4l+Hsg/p 㩎n0W02\Qs /x50 ѓSqcwà]Bhވ?I0}_ib:BH56.aE >hÃ^%a[\0E lX.AҾm1wŧ9wFxhuE=:S_ր=5Me]_{n[o/gM5d݋o(3[(i[Rx]Pgq@u gY[TAPi9LenYA EaS% =~}Eidɰ iGx#@g۔3Ã+(6bAqO+0yM8梸p!ѯI (PA@}ǣ"KF|UTZS 8̻LJqb?5QkXğ$d0S. BqP|5*)-7Y~0,9xeetwFOF7A" KPD`vBT/FAR{9ˌ%~dv\kf;`>'¢rD/@qcj;&b(Yr!FquƟCkÏ2]V,Z}'(;<dxrǡkPX:R }iYjC12 ;}U `Ԓ $r)ݫ1Ճ25җ[4ʀX~&˩qR/u'*Vƭ\^n4A~\E_ο(ʑӢ6ɿmr0FJb /fNS_ATlZ_ΕG?br Ӷg>2nc 2?%b:$VÏ9;“`1eGg%)2 %%w#X"m":ؐ%Nqs YHa 7qJޮ%WH 9egC{4z^ɐƖ&|u! ^] qD \qMe|m dƟO@.MQeF(7Xg/Q;L 2!7{]hQ-T6c%2xo|TI@E6u:FGe&kCQV?%+Y=q݆0_sd߰C<@j$~鎴\/bn~QcVǩ Foou`j(7WE?FXQ}/4)9An{€Kz+m 蔆2aecuzgYYE\01oR[Pld8f] ouMNV!%kp㵮3Js| 3AℭG@j7?-IfnJs 5cri;PS`W)aXVczwjy:gN6gW&7кcJѵ#)@`Z[y6jB} .dnmZ%qp:L>{~88>NϖQ>', H\_2=N>R+a_r~@ey´犜_y%ET_=8>V {lYa }Rlc"XEn`ʖuRl-/cIa0`KQƒ1#Wv|M"A2sBGQIn;j %opЄlZ GU#f!a*\4a6 :C=ب)hьwvd=GR%Y9vOF@eя,Ӥ~' uUoA$vw64߮yTo }'9A ToZ:$*tg~/A `tѩ<95”>9//>k`x.gא :j!A+d*or)lP)4͋~2=ˏ94e>pTrBYjZ7ɢzzY:ub|)R??%к>ϐ'Id"C|Cp;'tESAD~_t,H3]xc!)JgM"a9Wf.JTnnM $qhVs0ݪz_lCo<7- 7S%82Ar˷x4ֈ~<.P>b^ J|7"ʭL?DMhv`Bb@㘦G1Kej"߰$ UY`jp/kד5IiluGBp#TT^ 7zG8JѐƄr#8PJC{mȭUy6. \k-f }r8C c0nºطrx{۝WZ &y%cM)7FxIGhNf1=a9/P?pX1N#z?ߝ(=1c*(L;wM؟ʬYo[&; 㣿@h嫑lOJ u ,I=Op?rmu8 l,A oۆ[O q4 gIs-I}v{B9`Wc1o21T}; ¹bF! 0n4EVnUߍԹm6U) \1: c0\->k:dx98FGLwu#qU;h$XZ4Z%olYD-x6 t7Vr2XpeؓHhI]ih>‐͑ם]phC{KyVrmߵo"Y:;Ҩ7M-Ǝx1ƷEOd nSJpۜHX1H+ HcBGLTMQLECI(֨SsdXie螁2ɧEY*He=֧:A.6[Mx¬58p!%$ ߗFA&}3(khƖ++7x2[^ !(Ac\/: =iא\%<ӁB=B[9컘xȼb\$lH.0\\/{ 6 PGe|@ vٱ/r[.<'Qn'jbNi/,sوg˔d,h kK'!LnBᣨ%E.U4敟m׵ U`jnh0*ӎ A7i `o;ye\dN@uqMd&\du "s0я!< Ē >U2Zuo (A3OD7<NK2 Ga]qӕ]-4CmQkP O"0]XOBa9_80iцWS9OBND5@nCq]cH<7g =] eV;wY .]oT̃ѳ* O)?匮a>iRŰ?n\}qRIPIS Rw(GM#Il<.,{A'G`6 6>n[uJHx L΍y*/IǫL'y7ak]St$,|%4mɢ?U8 CVNTGNu%e"AHg=zI$ 1vT@P% tL'O㷘GpxU3‹E##AvȋZ<%_J<<1A>ab̀AxZ5>YԜlic%Q첽/ {+` ԇk[\9&4Ue:NHRzUb%\(S4su|z#B~8)& Zz,kg.dC_&@G\nMd&/UcLc uJH,cNMm#.Jm@G 6ה*7qL* 6>g؟,LaIF-j<v-ڌ‹/|EGؽ]vɔfMPD;;?򻚏clvQr|po僆X]H8yK B///^+̍+8RƂZ Գ$[!Cez'Kt.CCOV{ -5\ٜS3 z=S,|RQhGd$̥nb&1ؗ|8B6W0 )r=Ji@0ɳgVMf_"NBUgȶ\H[@͞3KZ"/(M>8(ҙ%$Z) otx*n?*3 D7+Uw"0{\?&aP [0^'N@ gw#v!z8y7įm DF)3u"%0E C*dZY̾*1bq\ |OBt vf)ۧ_df0i5DriHqfc+Xr!SBMǝ\aPgmG\ω]r/դDUݹ.loGm`zF׍QrKɷ$C<]`gXyuJO6imjW^{Bb@[v&2c|DPh2bA90@a)6Lw} c<1%jAJ2'Ed<@TIZg^MN@Kk\`vƝZC!cc^~*\NZ:B5Q11{O|=I!$ yLO~#'Sgw;yH9{X]Dv'G4I{(|Q4NR|UK)6_O}"ǜE㜟uv5[:dmwVphinڤpyib'~fY֮ˀc;,ςy%tmZLĞ,g˅p T=P<ZjOitwenj< Yk7 k̪'= y"Y܇bFoxbn}6R})5޸& _I` dSqɏ vSw6B>\y4XR]/<k|gӛG,s␦.~4 +^"@qw!=Dr)!._1%$l9bt%2&/2]^^y+E"n/>(t q/ SS =I 7o=zbl:Ar jx~Y>#`BhylOwͷzIV6gW۾ >uA_Q 6욜~xP2"w}T~5R_-/36q9g{랱f{2B*XQ~).O'~wXlskZl/Qich2&ig9˦>9\%T ~;Ozĸ{ɜ<o{KGI$SoeϘP;1,OՅ#d|-8\z-^L>[2) iP0S _|= JdnВ1o"d+E\@C2x^oU4[)sJH؝ǖeUa esjY`:r5|'G~wбw {FF 7K;Yk5XTt'X@U! EDO*5CƯpeiǫ^E,oLTdJ kb~Yn g/dŽ +-@Gqv<<&A/ǷPQ28:d+_C%&(`QI#ٖN!0Tg].ra p~JӑtGUha6vg[JލI9>b*kFWyvG,n!66p¥pm1:=fj;C;4.{_lEr[q.5+ [,mL32rZZzeDE"7tX߱L6b*\)"sBVЮ&NaQ.Z"ZS7@_%{, ѽnLmJ#!Ѣ[eursZX>}_ HpD,}VXi"_d|'oL cx0MJdOԚIÙwpE1w7KiMEh"_y>9,k<}$vςE紾3R-,A# x56 mRx/P V.I !jM}tV*#Ҧk`rvLKA,j%}m4* !3o Ƌ}mL.l(A׊h CR㰑{1/AL7g8_ŚQ6UCL:nA 8.f"M_p'锫S349"O fY1e_g e tO%S/7`O5y{2&ѹd cτlUQY.$ .cM42CaajʧNG)N:,m"?-*v5G݅ۧCBnwKI"ޒ T(Pj7q@U8~aʯyN CJ=M'X FZTs@zGDzL'=TYoatyhuZb$ dkMI ׳zHQYWeffHˇu:1}Z 6`3u+}*,6Zq ʂ4-Txޜ e,l6y14Jv@&`[=!3gdc/LM$bJ6fa5O|r3/^t$2Tnt~jZ;`s#9T\olu %7E߼rЉ2HJka̰[}M% 3eߵU[ЮVlFQK)H\^ʽyPRb;~/n` c` qNzR=#MBM(!} L2]U Y SEٹ7^J t.4TR9 2,8?+{ >wd' jgm= a"͂W6Q3SOfhh,hwfdNйnrg%ˏPIn2}x4@<:=ߍm5ljA.^BL*rc)UUw[O>f9_@1M#I<Aqi߼i/AD} rK|ح.nh~<,i(8bWoǃ/le'{ΑZIIb&՛;gػeQI*%n@A8~/Ҟ"v',|ljOkX!\f-^]ՁO34QBWh/ϫfoit3 HsPL ":ӻWYKfdUӭfZ:Z5L{VU_{<7Ykk8MP!gT~ݜ"R@P d0eYqA6nԤLJ;/齟BWb;[ B{ЕMYawJڇ,G**M>`" Z@ݤ'ā)dslX  ᯅAܿPYE0(BhUsُH0A~dTr>7|^wţ>\+VqjH'e-rD!sި !zSDžs`-oK>jU= ωsDwE%x$@N2@ νS9U ,A\v8fsh1% Vg󵉌gVuT d<G3#@xn;5XʷLϑ<%;}ؙ [_5[齋c.eeCqtO/ ]Âa 3McgH+ega0ʋ1jL/kb+tSHlrdrg]b[N:0,8*A1Czʭ3=>Qi(%d :=I)30&W%[a%N/"EzwV 3J<-čo=`՞9 ]Gv?yԆ<6#df?J O+I[iXea jL &=msj؞/̋V<(>+ǸխݶCFCyj+Sj6+(A#CWo&+EL:k~5iAoA@?B;8{ ^H[086jd~hrN8Qxܫ`y[=uFUzGxb"Eq`ƕDAӘh2J-`o һUaVJpUc#8Q dwZ\H;oLR\jG"X/W$Kw15޼Rt#ګ}%tA^_dmҵm˚ճcvyʡ-xh"1;"qp dGWVbd0N S3Ae͹-{]^}oAkJehuBăoS{h0-1|<39 O[IoBNaHoeҗp3]MkCz5uIh*2ZͻRi3Vm#GXHrD-{ r ؤ~ K&TrD'nA4/ Lq׼iU`El&H>n̷fc`a]ZtewMqsCiK&zgG59E" 7!W7񟜟&q?#]xʿȇR](߫G=;Ke8).D.PSr HE4f[A_ch_p)|Jla# *R- iUu/hӧG8||JqW=%ɟ02Z2q߷4ܪɊ rLA4P*oO31% ?ѐgX D{V7UBTȨL38YSJRBk>xRzA8aVpMYalu9}_ XZ? šJnTӗ@<(֟zbIRqƒgרe_s-z _O|DFAǺhDj?keY< r3Abp,Uof1ʪ|W$$) 3|ؿo5__ l29WG%/ 8+Ǧ5_~V;(@ n5F |]iLbE{7`ZC9 ڧmB&vwl-!MNϜDL3 "͜t|> ?5 QVL+QO߳μ02(-DGFGlzzãyk=krjl PgO;<ﱮ/>F!羐=Mh-ޮJJjI0 &lÒMq棳SL񷵼XI=d9 &suܟ}( s&@j)S%B1]c0$R] 9/ܠ1S{{bvxl+\|6~=ٛ`S~Zޡsh[P~R_G_"oM i$]Õ@RONrn̝M74_ofښ!( ſp}cIXw~G54JG}`' m*&RjpmwLVYߜQZH3E 20R5kZ1B}5/Ɗa#m?BHcu̩Ae>lpTccO$[ֈ eHчM+8pK >K+m5 9;p\;yPw).UH0cJZWfI I0 ^ 38|` )8U| 1`?kL7NU\A!(o+OqS=D++4yuOӖzj,:ϾYs?QnTZ#N:> >6ωv/|uJؽ4v@&|sIJm1{e͐ǁt)65aG{Tc[.صB}UgrUHS+Q+V s GpOH't3U b(eW JAxXz5&I2"Nvov ayO#|0CB'!jb$]ۛxgw+%;2c u{gJ+'l1qreioQ3H~w7eYK1O.Sۏ{a YIjtUUBFY2Ȟ֑2 J*4?$p^Czp& 8ShNYUc  GlzADĝg[GiAw#sw駝/"<)j`vuR7{, TvLY:j'ib+ bZ٭O*11'Lo㣗;-5ʈ[ihC;P$Ѿ1nђPi PE 42/\aLa "Y/ Bbea3q|lcS:?Dn?w*91}۲:{dKI vlEHVKEYf˳`R?jctceYɓ{*8-O]UH>wzX"=9L*Ozk 5V+:ɼzpA=XWLKN\::(;Y0{Tr/TP,bH!/g&Z.o#mse¶YoVÊ8ijܝ2(msWWc JR$x8`.~ץFts +^ݸ剩I{,Qnm8 &b{~!5FM -a41Sѩ׈ʛG. };3̲)]ȿ@?:[%{~RH ϗ\{y)bSHWuz:Е03~ #YuVfYZ: ke뵂VHR<3gQ/ms.KPS.[ u@;Iow缐y0T( hКJ*yN5ezcpʪΗ8ZhqFJzCA#>5&_b[PSZ:i@a s Q,oTp9-p駵 Z+K(3'Y =ע,@eq͝sAO~|{s^7mPTxtي“K] BLyN6 ZLu3hT㾩,{H߆G_aT,d"_R‹^ᵄ=שg 1+˒)h@)In=43xE!A[M|?LG͛ӀջdSpq%D/^&cLmO"-gp?EƙR~NAc&S3/"?SY( 3H$o:QSvqm+^;ӸEB,*z_za8wL^6 ,d=XҎPY32gz3šӳ#1;Ɋf75$nNf6u70C1%=lO>; i'>.sxx#տ{K1AޫY@PEt>Κ MFB!HVC`a . |!j/ ]eO9|H!Cmr%fxl ډaྜ'~79֤2e AW)ekuWS"%z'ӒQ,@S x{ʰ(k4OEɊ2N1Ct5iiI_n)'";faP̜cP_b$vPt L | ONK Prɝ#LNM |ھRJoAjF销Ϗ( j.P8odU1p3*B)l /)tMc"Y.3_t7]T*rB=&veP2wMQ%~9X)`3~>z=WX׃qg sݷ& SNo sSN_:6\ȏ#߲2/Δη.ƿ2;bI.CI S6.<\ڬb f~Jkj|ᢪ7# muEkkzLH릯􋉓KcXE*Pa$qtRI((x*y? Rvh{ܼiUVnCHEp_ %,:Ť1ZD~WBڑ'͞|rQC>>̕絝c[̞u2A޿qz2Iq9=,aDLx߄ C28kw!<0VI,$|ىUߞ,\;> d;\jJ.1T7 fnOoȫ> ]Hѩ*< 9msE;}BL.W@ Wb) a1A_ -#!S); d(`<-NEO)0D JϯfjC#\+)2S?pthod)"ځH~$! yGov-&&͐PADƍ:l/ȁ3sRWNéb-8cY:nl֎YZ NwK}1Lj6P%KQViLS=J$OȐHe\lE2nfLIJت[!NO^3F'5f8V=7 k-s/A2R3Jӄ2ÏPKNʂrkCxcݝ'/+K-4^,> ,*ln#Dt^[2'S{qؖ" 9#WY9FŃ!æ;TwI=Hw_Y _~ دb7Vۀ=mAMnu-Hm?8 "XaLBl%~#,@/KOC X$-ǿ~vsd*!ّ\ff]rL\mSsߜ ՚O[EcBЅ*]Nh?$3`p7tDr *&c{pzDHOlӬaRmh_Qݫ>N376W1pNnR!?*S+0+4>>+eX}WjSm7prY)g+& 5GIR6i 0sfm@YW3M+h y[rǺ0_M|8?.A ymKB=îFBՅTkۨe>F.GRm01NQSUCyw Ipu*M $65`[;Bw 5ð ΂;ׅ.inaiTw ~|~)Ďk:U vKQ 8n]%Nu,CzиO}:ӔX6(]On睂霅#P = 5}`T2CDxM6n/Oa-fM(Y"I$72%>/~_2vn)}\*_B/ kٌ@u^W5ͷ{%ir"l d/p=>|SFm\TeyXޥҭ\!_o]iSPX2ÍcXb;u`:pе::|ǯ'"HE>=r"k. :j><_$|/z%H !; 8tro;߇DN3Zow< ݪ!<#5 YXRzcx0}*^aQ=R"V:H u(Y$",HDl01賽7*e{uT@ak jD:tQUu'ϩڱK Xij[v٣Q2&gËgI3}6{_0W0LDY4-}dT73A},E1Fr170Ә\|#n^ڸ:]{ o,uLoFf7vֈ3}@bÞ,H(dUϏu dƌu5Sؓ^M{2ÇUஈqjb-_۳dy?!X[xo ]F<0^k,{6|70jQcXQ FptYɆ?_8l'-@uI9Pb*(z/ 2sxv[HO4dQ7Ctb-!jmveBFO@ 3:,d^|4]]c'{U`lq73z碨` g\ zI6.mu:MW&JjQ?DeՀZz("1 zY'-RLY?uOM><@W`r2v0ZGu ]6] {q f&֗%R˴Qan2hVN#yw eGAoaOSOᲒ Q3:f;Pl@ ȃ %B%r h܈v}1h(fls-pwdy`jq^/Kz<@Et()8ϲia-Pa?pW%rb7SZW 2nA25C'V|1EFWD@4}󽨠"XKvqru<}ຽtVJ'΄ZkGHΆN,VoXOOdz-L|ZM'dQRˠFP 4OZ5Njpj277-!& }=3 YSZR&h/d8VtVlf9d,>eoUU8~Bk͢mnt.bo #uSG!"T7=(̛J咚?K8wnGL?XIE8.  q“Yh"Z zc8ճBdwVa7   !"}hFqA5U$M SXL嵳09h14sI`bOhwAY:Hx>N ƻq]h+QE򒑊K|2~ kpWgWcژtg@w461ځ8wY⺨ؠ 3`xmvg>f]cv$8<`uy_W?)Em oͮd{Ê*xǩ9]y"682R|8Ԁ,$tY7Bte2_%֫2=gz[JuE^f|D#$ն-@M |IiQc߶FC@ ^;ǚN]7G7%E^&G~KqN4Vv8}SxW+v5&vI5V Є(1`  pDߍUUd9dt$N-n 7jNdde:Y)7|piC'qN`6Jv́ B\8ѡKn.H#v`%+kY+Ήė߷{1#Cvn_>:'s Eq\뉀V#I>{h~QpӦ?@;AJىR eޠtD;Z1 ox,4jYxi.WfdC*1W7=mY .m~tG*7}s)}P%Pj:læN{Ƹ>iv<$+^O^mBѲ$Ҍ|iSGBZ>;}b1j_L,ts^3&ͳÊ#fs1tD{oRp.(~Th8E&TfbLNL32qٜ]ȈۓA@| pcF1M7bD`&=ػw8/ʐ۸VfugOFm`9/  j,)L;@wB[/ kNxIHv3(3GA:&qsjA ITHT' `UOhDdbROyc5)^FItl|%٩T,YGغa]!P)ް" JӘBYܓ!4Txd>FF Mʑ-K%= }E ;>sW _1tCC9T&vc娢Wtm VTf\xu.*F؅| m6+h^5eؼZdlw*ʩȜM: ЇU+#+Bϵ=VrGE5q/.4j-J]`7ƻF16)rs`{5]4$jRnj8ўvdePSHu%:|'^@-C"&; hK D@A/ V[p@* p? nmv[h'@ ER J=JSN )OI,JUR0ϟg'm2FM:铓7*×OH%- MErnXYjiy.~2G\뀧% XВһ h&R?qJ-0 %e)xunv7/_ 도OQ;p^|g@̣'V(@U݇h DURNowT1I1MM-hy5dؼP2 :&2mR߁У3'65lT7 ] "&8SsGiXd׉~ ;6vuQ˰* %õb]U|[(AM"v6I7>QjqIhܒ 5NWN3u(y p1^®"1<_ccG𡩿p-Ud򑀟ޥ<M}nIa2,}-VZ gk]M9#L,J!_D؊f<^1t >X)iE37:fU~*.Fp /8(kcv"?:b?k kHƳH"&tvq<4Ehq `:))%m'Oέ̑EY퍦ԕ20pUcm0T-5O;5ڦ`6ZՔ+E'?TmWd RdfEk+ka !u80}'0dbO:o/=7+J.nZ-% DQeŌ2LŸL5X={¥o8g5(p@^c_!Ȉ_1436YPp-9T#'l{΍?Me'E&jڡ :?q' np=\89;E߫dBYaV=pYպ&z+> K*^`._K{Z\+H{n׸# lVc <qdC~e˺YƣCoO ,U!Kyuަ~7Ѣ]ǠB_>5'o38 y4,hl%myrZ_LRf~?ӊ :v#Jf=+5FPbf+UQZ!CByVV/9K?~6Κ==܎C($|N1]8x.whl*D-{?>zЍǠ¤*qM2BMeLz=i1g"A%Lm̷[9V ~,vdM-F|X`EP54H.dp,9+jFnl2={ n#?x)o1PmKV˔`Fx#%}Vu%C`TB"!kqӡ1h$[YTNZF|i25~bšZ׷ "4bt(u>9d~X&H%",^lRl͵%o64Y2=Vju.NoI06}u?̢epH yb c@CvRp7h:\ \AKOܧhi{@e('渉]myhiE+ $> 7 YZ