kubernetes1.23-kubeadm-1.23.17-150500.3.12.1<>,fp9|J;9ħkj3x|U::\nSA_4j)\zUv`0Ex2^MHϩ gYNqvwq3,OT$breM~RivzG=x-;8@f)Wj;֖К3r2_g,C1HM.fM0'n\S߹z0Ӳn "nOMS9"3>Cdy}.]{g2IG~x(H>D?d! / U% ;MdjtwPw >w ,w w $w $w&w)'w+z+w--./2/`/d/(/8/9/:1BrFrGrwHtwIv|wXvYwZw4[w8\w<w]yw^ bcBdefluwvwwxwyzCkubernetes1.23-kubeadm1.23.17150500.3.12.1Kubernetes kubeadm bootstrapping toolManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubeadm bootstrapping toolfh04-ch1akSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxx86_64b0Y*v ;,^S~B\\\5UDBkm<d`-al=Ic8T 7B F yf Ffc] sA큤A큤A큤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.23-1.23.17-150500.3.12.1.src.rpmkubernetes-kubeadm-providerkubernetes1.23-kubeadmkubernetes1.23-kubeadm(x86-64)@     (kmod(br_netfilter.ko) if kernel)(kubernetes1.23-kubelet or kubernetes1.22-kubelet)cri-runtimecri-toolsebtablesethtoolkubernetes-kubeadm-criconfigrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)rpmlib(RichDependencies)shadowsocat3.0.4-14.6.0-14.0-15.2-14.12.0-1kubernetes-kubeadm-provider4.14.3f@e}@e7@edd@d6@d!@d!@ddb֜b֜b֜b֜b֜b1@b a@a*@a@priyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgbwiedemann@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comrombert@apache.orgrombert@apache.orgpriyanka.saggu@suse.compriyanka.saggu@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comjkowalczyk@suse.comrbrown@suse.comdmueller@suse.comrbrown@suse.comrbrown@suse.comrbrown@suse.com- add new security patch for bypassing mountable secrets policy imposed by the ServiceAccount admission plugin, bsc#1222539, CVE-2024-3177 * patch file – bypass-mountable-secrets-policy-imposed-by-SA-admission-plugin.patch- add new patch to advance autoscaling v2 as the preferred API version, to fix bsc#1219964, CVE-2024-0793 * autoscaling-advance-v2-as-the-preferred-API-version.patch- Use %patch -P N instead of deprecated %patchN.- Add kubernetes-sort-custom-column-print-flags.patch for reproducible builds- Security Patch Fix for CVE-2023-2431 (bsc#1212493) * added patch: fix-seccomp-localhost-error-handling.patch * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631) * added patch: kube-apiserver-admission-plugin-policy.patch * this new kube-apiserver component patch prevents ephemeral containers: * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727) * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion- Stronger conflicts for completion packages- Split individual completions into separate packages- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io * kubeadm-opensuse-registry.patch * revert-coredns-image-renaming.patch- Update to version 1.23.17: * Release commit for Kubernetes v1.23.17 * releng: Update images, dependencies and version to Go 1.19.6 * Update golang.org/x/net to v0.7.0 * Pin golang.org/x/net to v0.4.0 * add scale test for probes * use custom dialer for http probes * use custom dialer for tcp probes * add custom dialer optimized for probes * egress_selector: prevent goroutines leak on connect() step. * tls.Dial() validates hostname, no need to do that manually * Fix issue that Audit Server could not correctly encode DeleteOption * Do not include scheduler name in the preemption event message * Do not leak cross namespace pod metadata in preemption events * pkg/controller/job: re-honor exponential backoff * releng: Update images, dependencies and version to Go 1.19.5 * Bump Konnectivity to v0.0.35 * Improve vendor verification works for each staging repo * Update to go1.19 * Adjust for os/exec changes in 1.19 * Update golangci-lint to 1.46.2 and fix errors * Match go1.17 defaults for SHA-1 and GC * update golangci-lint to 1.45.0 * kubelet: make the image pull time more accurate in event * change k8s.gcr.io/pause to registry.k8s.io/pause * use etcd 3.5.6-0 after promotion * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14 * Add CVE-2021-25749 to CHANGELOG-1.23.md * Add CVE-2022-3294 to CHANGELOG-1.23.md * kubeadm: use registry.k8s.io instead of k8s.gcr.io * etcd: Updated to v3.5.5 * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent & Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes. * kubeadm: allow RSA and ECDSA format keys in preflight check * Fixes kubelet log compression on Windows * Reduce default gzip compression level from 4 to 1 in apiserver * exec auth: support TLS config caching * Marshal MicroTime to json and proto at the same precision * Windows: ensure runAsNonRoot does case-insensitive comparison on user name * update structured-merge-diff to 4.2.3 * Add rate limiting when calling STS assume role API * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.- Update to version 1.23.9: * Do not skip job requeue in conflict error * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * Bump cAdvisor to v0.43.1 * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join * GIT-110239: fix activeDeadlineSeconds enforcement bug * fix: --chunk-size with selector returns missing result * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs * Winkernel proxier cache HNS data to improve syncProxyRules performance * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8 * apiserver: printers should use int64 * add missing error handling steps * add missing error handling steps * fix image pulling failure when IMDS is unavailalbe in kubelet startup * fix: exclude non-ready nodes and deleted nodes from azure load balancers * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients. - Require only BuildRequires: golang(API) = 1.17 pinned Go major version. Remove potentially conflicting BuildRequires: go >= x.y.z. The plan for future updates is BuildRequires: golang(API) >= 1.17 minimum Go major version.- Update to version 1.23.8: * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules" * test: update graceful node shutdown e2e with watch * move the ignore logic higher up to the reconciler * Ignore EndpointSlices that are already marked for deletion * kubelet: Mark ready condition as false explicitly for terminal pods * agnhost: bump version 2.39 * Update Go to 1.17.11 * add service e2e tests * kubelet: add e2e test to verify probe readiness * kubelet: only shutdown probes for pods that are terminated * kubelet: Pod probes should be handled by pod worker * Enable resize feature * Reject proxy requests to 0.0.0.0 as well * ipvs: fix prevent concurrent map read and map write for 1.23 * cpu manager policy set to none, no one remove container id from container map, lead memory leak * fix audit union loop variables in closures * Updating e2e test to check EndpointSlices and Endpoints as well * e2e: services with evicted pods doesn't have endpoints * e2e test for evicted pods * endpoints controller: don't consider terminal endpoints * endpointslices: terminal pods doesn't receive enpoints * add pod util to verify pod is terminal * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7 * Add test for checking ephemeral volume expansion * Fix resizing of ephemeral volumes * untangle fix with healthCheck feature * Winkernel proxier cache HNS data to improve syncProxyRules performance * Skip updating Endpoints and EndpointSlice if no relevant fields change- Update to version 1.23.7: * Fix requests scope classification * Update Go to 1.17.10 * authn: fix cache mutation by AuthenticatedGroupAdder * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller * Wait for cache to sync in job's TestWatchOrphanPods * Fix OpenAPI loading error caused by empty APIService * Test Foreground deletion in job integration * Fix removing finalizer from finished jobs * Don't mark job as failed until expectations are satisfied * Integration test for backoff limit and finalizers * component-base: replace url in rest client metrics * fix broken find command * Allow KUBE_TEST_REPO_LIST to be a remote url as well * Disable JobTrackingWithFinalizers due to unresolved bug * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6 * Correct event registration for multiple scheduler plugins. * kubelet: rename closeAllConns to onHeartbeatFailure * kubelet apiserver: be gentle closing connections on heartbeat failures * fix: race detected in TestErrConnKilled * Replace hardcoded kubectl with kubectl.Name() * kubectl: fix hard-coded value in zsh completion * kubeadm: add etcd flag for member data consistency * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config * ipvs: remove port opener * iptables: remove port opener * azure_file: try to get secret namespace from ClaimRef * azure_file: add namespace tests for InTree to CSI conversion- Update to version 1.23.6: * Update Go to 1.17.9 * Fix: abort nominating a pod that was already scheduled to a node * Fix the overestimated cost of deletaged API requests in P&F * omit enums from static openapi snapshots used to generate clients * Drop enum tag from certificate request condition * Addresses the issue which caused #109115 * Add test for indexer with multiple values * Reduce number of pods in Job+GC tests * Adjust validation checks to pass for both client-side and server-side validation * Remove finalizer when orphaned * Fix: Clean job tracking finalizer from orphan pods * Add test for Background delete propagation * Add integration test for orphan pods when there is GC * Copy request in timeout handler * kube-up: use registry.k8s.io for containerd-related jobs * kubelet: If the container status is created, we are waiting * e2e: Wait only for the service account * e2e: Wait for kube-root-ca.crt to be created * client-go: update generated * default kubernetes agent for generated clients * Include pod UID in secret/configmap cache key * Move kubelet secret and configmap manager calls to sync_Pod functions * test: Verify that nodes do not transition to Failed while ready * test: Add E2E for job completions with cpu reservation * test: Add E2E for init container pod deletion * kubelet: Delay writing a terminal phase until the pod is terminated * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5 * generated: make update * polish comments of non-enum values. * unmark non-validated types as enums.- Update to version 1.23.5: * Remove apf_fd from httplog * Update Go to 1.17.8 * cluster/gce: update konnectivity image tags to v0.0.30 * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30 * fix dryrun when ca file exists * fix regression introduced by PR 100320 * Add unit tests * Fix nodes volumesAttached status not updated * Fix default config flags * test/e2e/framework: include the new control plane taint * kubelet: Clean up a static pod that has been terminated before starting * Add an e2e test for updating a static pod while it restarts * cronjob_controllerv2: do not filter jobs to be reconciled by labels * kube-proxy: fix duplicate port opening * increase Azure ACR credential provider timeout * Updating EndpointSlice strategy to retain node name in topology until field is set * fix: do not return early in the node informer when there is no change of the topology label. * /test/e2e_kubeadm: adjust label checks for 1.23 * Ignore container notfound error while getPodstatuses * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4 * Add PDB selector patch integration test * Revert v1beta1 PodDisruptionBudget select patchStrategy * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error * wrap error from RunCordonOrUncordon- Update to version 1.23.4: * Update Go to 1.17.7 * Use serializable struct for x-kubernetes-validations in openapi * Make JSON schema round tripping test more strict * ignore CRI PodSandboxNetworkStatus for host network pods * set secondary address on host-network pods * Deeply copy JSONSchemaProps.XValidations. * Ensure the execHostnameTest() compares hostnames * Revert "Fix comparison between FQDN and hostname" * service REST: Call Decorator(old) on update path * add namespace in azurefile volumeid * fix: azurefile volumeid conflict in csi migration * Mark device as uncertain if unmount device succeeds * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3 * kubelet: fix podstatus not containing pod full name * Fix bug with node restriction blocking pvc.status.resizestatus change * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true * Set max results if its not set * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2 * Update k/utils to v0.0.0-20211116205334-6203023598ed * [go] update to Go 1.17.6 * fix: remove outdated ipv4 route when the corresponding node is deleted * fix: delete non existing disk issue * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration." * fix containers order after applying * generated: ./hack/update-vendor.sh * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1 * Execute sync before taking the snapshot * Correct the feature gate string for RBD migration. * fix: azuredisk parameter lowercase translation issue * removed unnecessary log line * kubectl: add integration test for result reporting * cli: let kubectl handle error printing * cli: avoid logging command line errors in more cases * Fix header mutation race in timeout filter * clear pod's .status.nominatedNodeName when necessary * use node informer to check volumes attachment status before backoff * When volume is not marked in-use, do not backoff * kubeadm: remove the restriction that the ca.crt can only contain one certificate * flake fix: remove the error handler for cronjob integration test * Fix the leak of vSphere client sessions * fix nil pointer in create secret commands * Fix order of commands in the snapshot tests for persistent volumes * client-go: Clear the ResourceVersionMatch on paged list calls * Improving performance of EndpointSlice controller metrics cache * fix the error when cleaning up jobs for cronjob * Update CHANGELOG to add missing release notes. * apf: ensure exempt request notes the classification * Enabling kube-proxy metrics on windows kernel mode * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1 * add gce loadbalancer no-op finalizer and existingFwdRule tests * disable gce service handling if has rbs forwarding rule * add ELBRbsFinalizer * add gce elb rbs opt-in annotation * cherry pick of knp 0.0.27 * Remove JSON logging performance regression * Re-introduce removed kubectl --dry-run values. * Point flowcontrol users at v1beta2 * [go1.17] Update to go1.17.5 * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63 * mount-utils: Detect potential stale file handle * Skip creating HNS loadbalancer with empty endpoints * Add regression test for CPUManager distribute NUMA algorithm * Add unit test for CPUManager distribute NUMA algorithm verifying fixes * Fix accounting bug in CPUManager distribute NUMA policy * Fix error handling in CPUManager distribute NUMA tests * Add a sum() helper to the CPUManager cpuassignment logic * Allow the map.Values() function in the CPUManager to take a set of keys * Fix CPUManager algo to calculate min NUMA nodes needed for distribution * Fix unit tests following bug fix in CPUManager for map functions (2/2) * Fix unit tests following bug fix in CPUManager for map functions (1/2) * Fix bug in CPUManager map.Keys() and map.Values() implementations * Ensure we balance across *all* NUMA nodes in NUMA distribution algo * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize * Round the CPUManager mean and stddev calculations to the nearest 1000th * updated deprecation messages from 1.23 to 1.24 * kubelet: set failed phase during graceful shutdown * kubeadm: avoid requiring a CA key during kubeconfig expiration checks * kubeadm: print the CA of kubeconfig files in "check expiration" * kubeadm: validate local etcd certficates during expiration checks * publishing-bot/doc: add component-helpers to the readme * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules * Changelog: mention kube-scheduler bits deprication * rbd: initialize ceph monitors slice with an empty value. * Direct v2betaX users to migrate to HPA v2 * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0 * [go1.17] Update to go1.17.4- avoid bashism in client-common postinstall script (bsc#1195391)- Increase _constraints to 13GB- Restore & rebase revert-coredns-image-renaming.patch from kubernetes1.22. Looks like it's still needed until all supported k8s versions allow us to change how we publish coredns containers- Initial Packagekubernetes1.22-kubeadmh04-ch1a 1712760549  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvw1.23.171.23.17-150500.3.12.11.23.17-150500.3.12.1 kubeadmmodules-load.dkubeadm.conf90-kubeadm.conf10-kubeadm.confkubernetes1.23-kubeadmCHANGELOG-1.23.mdCONTRIBUTING.mdREADME.mdkubernetes1.23-kubeadmLICENSEkubeadm-alpha.1.gzkubeadm-certs-certificate-key.1.gzkubeadm-certs-check-expiration.1.gzkubeadm-certs-generate-csr.1.gzkubeadm-certs-renew-admin.conf.1.gzkubeadm-certs-renew-all.1.gzkubeadm-certs-renew-apiserver-etcd-client.1.gzkubeadm-certs-renew-apiserver-kubelet-client.1.gzkubeadm-certs-renew-apiserver.1.gzkubeadm-certs-renew-controller-manager.conf.1.gzkubeadm-certs-renew-etcd-healthcheck-client.1.gzkubeadm-certs-renew-etcd-peer.1.gzkubeadm-certs-renew-etcd-server.1.gzkubeadm-certs-renew-front-proxy-client.1.gzkubeadm-certs-renew-scheduler.conf.1.gzkubeadm-certs-renew.1.gzkubeadm-certs.1.gzkubeadm-completion.1.gzkubeadm-config-images-list.1.gzkubeadm-config-images-pull.1.gzkubeadm-config-images.1.gzkubeadm-config-migrate.1.gzkubeadm-config-print-init-defaults.1.gzkubeadm-config-print-join-defaults.1.gzkubeadm-config-print.1.gzkubeadm-config.1.gzkubeadm-init-phase-addon-all.1.gzkubeadm-init-phase-addon-coredns.1.gzkubeadm-init-phase-addon-kube-proxy.1.gzkubeadm-init-phase-addon.1.gzkubeadm-init-phase-bootstrap-token.1.gzkubeadm-init-phase-certs-all.1.gzkubeadm-init-phase-certs-apiserver-etcd-client.1.gzkubeadm-init-phase-certs-apiserver-kubelet-client.1.gzkubeadm-init-phase-certs-apiserver.1.gzkubeadm-init-phase-certs-ca.1.gzkubeadm-init-phase-certs-etcd-ca.1.gzkubeadm-init-phase-certs-etcd-healthcheck-client.1.gzkubeadm-init-phase-certs-etcd-peer.1.gzkubeadm-init-phase-certs-etcd-server.1.gzkubeadm-init-phase-certs-front-proxy-ca.1.gzkubeadm-init-phase-certs-front-proxy-client.1.gzkubeadm-init-phase-certs-sa.1.gzkubeadm-init-phase-certs.1.gzkubeadm-init-phase-control-plane-all.1.gzkubeadm-init-phase-control-plane-apiserver.1.gzkubeadm-init-phase-control-plane-controller-manager.1.gzkubeadm-init-phase-control-plane-scheduler.1.gzkubeadm-init-phase-control-plane.1.gzkubeadm-init-phase-etcd-local.1.gzkubeadm-init-phase-etcd.1.gzkubeadm-init-phase-kubeconfig-admin.1.gzkubeadm-init-phase-kubeconfig-all.1.gzkubeadm-init-phase-kubeconfig-controller-manager.1.gzkubeadm-init-phase-kubeconfig-kubelet.1.gzkubeadm-init-phase-kubeconfig-scheduler.1.gzkubeadm-init-phase-kubeconfig.1.gzkubeadm-init-phase-kubelet-finalize-all.1.gzkubeadm-init-phase-kubelet-finalize-experimental-cert-rotation.1.gzkubeadm-init-phase-kubelet-finalize.1.gzkubeadm-init-phase-kubelet-start.1.gzkubeadm-init-phase-mark-control-plane.1.gzkubeadm-init-phase-preflight.1.gzkubeadm-init-phase-upload-certs.1.gzkubeadm-init-phase-upload-config-all.1.gzkubeadm-init-phase-upload-config-kubeadm.1.gzkubeadm-init-phase-upload-config-kubelet.1.gzkubeadm-init-phase-upload-config.1.gzkubeadm-init-phase.1.gzkubeadm-init.1.gzkubeadm-join-phase-control-plane-join-all.1.gzkubeadm-join-phase-control-plane-join-etcd.1.gzkubeadm-join-phase-control-plane-join-mark-control-plane.1.gzkubeadm-join-phase-control-plane-join-update-status.1.gzkubeadm-join-phase-control-plane-join.1.gzkubeadm-join-phase-control-plane-prepare-all.1.gzkubeadm-join-phase-control-plane-prepare-certs.1.gzkubeadm-join-phase-control-plane-prepare-control-plane.1.gzkubeadm-join-phase-control-plane-prepare-download-certs.1.gzkubeadm-join-phase-control-plane-prepare-kubeconfig.1.gzkubeadm-join-phase-control-plane-prepare.1.gzkubeadm-join-phase-kubelet-start.1.gzkubeadm-join-phase-preflight.1.gzkubeadm-join-phase.1.gzkubeadm-join.1.gzkubeadm-kubeconfig-user.1.gzkubeadm-kubeconfig.1.gzkubeadm-reset-phase-cleanup-node.1.gzkubeadm-reset-phase-preflight.1.gzkubeadm-reset-phase-remove-etcd-member.1.gzkubeadm-reset-phase.1.gzkubeadm-reset.1.gzkubeadm-token-create.1.gzkubeadm-token-delete.1.gzkubeadm-token-generate.1.gzkubeadm-token-list.1.gzkubeadm-token.1.gzkubeadm-upgrade-apply.1.gzkubeadm-upgrade-diff.1.gzkubeadm-upgrade-node-phase-control-plane.1.gzkubeadm-upgrade-node-phase-kubelet-config.1.gzkubeadm-upgrade-node-phase-preflight.1.gzkubeadm-upgrade-node-phase.1.gzkubeadm-upgrade-node.1.gzkubeadm-upgrade-plan.1.gzkubeadm-upgrade.1.gzkubeadm-version.1.gzkubeadm.1.gz/usr/bin//usr/lib//usr/lib/modules-load.d//usr/lib/sysctl.d//usr/lib/systemd/system/kubelet.service.d//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.23-kubeadm//usr/share/licenses//usr/share/licenses/kubernetes1.23-kubeadm//usr/share/man/man1/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:33337/SUSE_SLE-15-SP5_Update/b3d79ff566f2129e54d173fc934fd546-kubernetes1.23.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, strippeddirectoryASCII textexported SGML document, UTF-8 Unicode text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)R @Dk"@utf-81366c7d0607c2d18784429266f3990f95318bf535ca324f99984c22d6c01314f?7zXZ !t/)]"k%]{~nt LY[n/1tR@'h{vSKY|lQ?p~HIQ>ґYoZ?:8_Z/6ǝ*w5) B-&'k4$zfiؕq3j 0FLٱQ'ZgVdcSmz:bWkqx"wd%tQ!Ïp{K>.higgTe%,ASՂ͢XϪ:M)#{AjĪQ\1zeOs寧,U̯¡+;c!E)<\ L3X0jϩ9Vb:k(!Gd ͛5v#7b˿7mZM_e S'KV g-=f$,|OeN:4 ig-u{v0g^{%5 t'Cg$t8F dJVJqL[Oﴲ4F fLǂį|~92Ven:\ "1j31ֻ,ǨLZ [\u& xG@'{<2SsGROB6ӳ.,@Lb4NӹGGw?* Tj?} E0q>CŭE|ℹ1=֪ +d> KH~2t NS[]XV_윴8uG|f>D-Ϊ`OZ \G8puyEs KYsL[Kw_| Vf }YV < k\ZMg}I(žZy_pSdI`C>*Z]i+'d!Г4 u#؅Xh 1e瑼{ľj ̩@&Db ҾպŠlcZgQN6J Cd0PAv)l݂S"$Rܣƫ6@?WL¤լ%!I d _+W-p &l a$(Yw֏: CMa'fh 5NdvP8 7%'+ɱT7_E`~fEpf0|nu,)V \ް쮭R7BC͏%)i'4׺?1´w|hk]IA PsSy 9U~G\$ :A48 \}RrkaQ$( 4#C5Y?\KPk!qXXJ4ltw*"J"1j~bd^7q~