kubernetes1.28-kubelet-common-1.28.13-150400.9.10.1<>,f܉fp9|Z9>'oy[-L|t{, 58V]46aEX3GL Jf*)4L]ܼD-Pm9s+(۵FdwZ6A%L{L{`@4yJ*Kp1+5fKU'5RϴF Rx"S\m,"qA~RA"pfR>d,;? Y >pъCT P9 5nA$<>I]?]d ( 6 P  +=TZa 0x    Z tpH t " HLf(g8p9:-=V?>VG?VO@VWFV_GVtHVIWXWYW$\WX]W^XbZcZd[9e[>f[Al[Cu[Xv[w\x\y]0z]4]D]H]N]Ckubernetes1.28-kubelet-common1.28.13150400.9.10.1Kubernetes kubelet daemonManage a cluster of Linux containers as a single system to accelerate Dev and simplify Ops. kubelet daemonfh01-ch4cSUSE Linux Enterprise 15SUSE LLC Apache-2.0https://www.suse.com/System/Managementhttps://kubernetes.io/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in kubelet.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi PNAME=kubelet SUBPNAME=-kubernetes1.28 SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # Check if /etc/sysconfig/kubelet exists if [ -e "/etc/sysconfig/kubelet" ]; then # Extract the value from the fillup file UPDATED_KUBELET_VER=$(grep '^KUBELET_VER=' /usr/share/fillup-templates/sysconfig.kubelet-kubernetes1.28 | cut -d '=' -f2) # Update the value in the sysconfig file sed -i "s/^KUBELET_VER=.*/KUBELET_VER=$UPDATED_KUBELET_VER/" /etc/sysconfig/kubelet fi if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in kubelet.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi if [ $1 -eq 1 ]; then # Check if modprobe command is available [ ! -x /sbin/modprobe ] || { /sbin/modprobe br_netfilter && /sbin/modprobe overlay; } || true fi [ -z "${TRANSACTIONAL_UPDATE}" -a -x /usr/bin/systemd-tmpfiles ] && /usr/bin/systemd-tmpfiles --create /usr/lib/tmpfiles.d/kubelet.conf || : test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable kubelet.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop kubelet.service ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ $1 -eq 0 ]; then # Package removal for service in kubelet.service ; do sysv_service="${service%.*}" rm -f "/var/lib/systemd/migrated/$sysv_service" || : done fi if [ -x /usr/bin/systemctl ]; then /usr/bin/systemctl daemon-reload || : fi if [ "$FIRST_ARG" -ge 1 ]; then # Package upgrade, not uninstall if [ -x /usr/bin/systemctl ]; then ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services test "$DISABLE_RESTART_ON_UPDATE" = yes -o \ "$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0 /usr/bin/systemctl try-restart kubelet.service ) || : fi fi$.D/ >,^AAA큤A큤A큤A큤AAfffeffffff f f fff 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@rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkubernetes1.28-1.28.13-150400.9.10.1.src.rpmkubernetes-kubelet-commonkubernetes1.28-kubelet-commonkubernetes1.28-kubelet-common(x86-64) @    /bin/sh/bin/sh/bin/sh/bin/sh/bin/shcri-runtimekubernetes-kubelet1.28rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-1kubernetes-kubelet-common4.14.3f?@f@f@f|fGFf! @f@f@e}@e7@eee`@e:Te e priyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.comdimstar@opensuse.orgpriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.compriyanka.saggu@suse.com- Update to version 1.28.13: * Respect controllers on PVCs for retention policy * Updating kubelet on Windows to query uuid from registry * Update err message before ratcheting enabled. * Hot fix for panic on schema conversion. * update container ubuntu sha256 * update driver installer * mount-utils: treat syscall.ENODEV as corrupted mount * api: fix ValidatingAdmissionPolicyList json tag * apiserver: fix watch namespace * Fix that PodIP field is not set for terminal pod * Use omitempty for optional fields in Job Pod Failure Policy * bugfix: dont skip reconcile for unchanged policy if last sync failed- Follow up changes after go version bump to 1.22: - For ppc64le platform: disabled `export GOLDFLAGS='-linkmode=external'`. * to fix the build failure error: `-linkmode=external requires external (cgo) linking, but cgo is not enabled` - For linux/s390x platform: disabled building kubernetes binaries with `-buildmode=pie` * `-buildmode=pie` with "internal linking" is not yet supported on linux/s390x platform * ref: https://github.com/golang/go/blob/a63907808d14679c723e566cb83acc76fc8cafc2/src/internal/platform/supported.go#L223-L232 * ref: https://github.com/golang/go/issues/64875#issuecomment-1870734528- Update to version 1.28.12: * Add funcs in pkg/filesystem/util that can actually set file permissiosn on Windows and update container log dir perms to 660 on Windows * Mark a test case which sets up a sample-apiserver as serial due to potential conflicts with other test cases which do the same. * Fix pv reclaim failed due to its phase is wrongly updated to the Failed state by kcm * fix issue with using feature HonorPVReclaimPolicy in csi-provisioner * defaultMaskedPaths must be kept in sync with moby/moby. * gitRepo volume: directory must be max 1 level deep * Bump images, dependencies and versions to go 1.22.5 and distroless iptables * Fix endpoints status out-of-sync when the pod state changes rapidly * Fix verify target to not update env var if already set * fix: skip isPodWorthRequeuing only when SchedulingGates gates the pod - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.22.5` * `BuildRequires: golang(API) = 1.22` * ref: https://github.com/kubernetes/kubernetes/blob/v1.28.12/build/dependencies.yaml#L115-L117- Update to version 1.28.11: * Bump images, dependencies and versions to go 1.21.11 and distroless iptables/setcap/debian-base * Don't fill in NodeToStatusMap with UnschedulableAndUnresolvable * Revert "scheduler: preallocation for NodeToStatusMap" * add an integration test when nodeAffinity specifies a non-existent node. * base on allNodes when calculating nextStartNodeIndex * backport verify-govulncheck.sh to 1.28 * Don't sort under lock * Fix printPod panic with spurious container statuses * Cherry pick #124618 to 1.28 * Fix NFS related issues on GCP/Ubuntu * fix requests tracker concurrency * fix conflict race in statefulset rest update * fix stateful set pod recreation and event spam * fix pods tracking and internal error checking in statefulset tests * Updated & added visibility to apiserver x509 test certificates expiring this year- Update to version 1.28.10: * scheduler: preallocation for NodeToStatusMap * add e2e test when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod should be scheduled normally if suitable nodes exists * test to catch illegal nodeNames returned by PreFilterResult * add integration test for pod with pvc has node-affinity to non-existent/existent nodes * hotfix when a plugin (in-tree or out-of-tree) return non-existent/illegal nodes, the pod scheduling flow will abort immediately. * Fix PersistentVolumeLabel admission plugin on Azure * cluster/gce: upgrade cos-97-lts -> cos-109-lts * storage e2e: update hostpath and mock images * add log verbosity to endpoint topology hint loop. * Rename `cluster` to `storage_cluster_id` for apiserver_storage_size_bytes metric * gce: fix test for non-existing instance in cloud * cloud-node-lifecycle controller: add fallback for empty providerID in shutdown- Update to version 1.28.9: * Add envFrom to serviceaccount admission plugin * update debian-base to bookworm-v1.0.2 * [go] Bump images, dependencies and versions to go 1.22.1 and distroless iptables / set-cap * [CVE-2023-45288] .*: bump x/net to v0.23.0, bsc#1229869 * Use the right feature gate when updating uncertain volumes * fix panic with SIGSEGV in kubeadm certs check-expiration * hack/tools: bump honnef.co/go/tools to v0.4.6 * Serve watch without resourceVersion from cache and introduce a WatchFromStorageWithoutResourceVersion feature gate to allow serving watch from storage. * fix aggregator path filtering to include / * Filter aggregated apiservice gv * Use DBG=1 for conformance verification * build: use -trimpath in non-DBG mode - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.9` * ref: https://github.com/kubernetes/kubernetes/blob/v1.28.9/build/dependencies.yaml#L115-L117- update .spec file to set FORCE_HOST_GO env variable, to force k8s build scripts use the local GOTOOLCHAIN version from the build pipeline (i.e. GOTOOLCHAIN='local') * ref: https://github.com/kubernetes/kubernetes/blob/9791f0d1f39f3f1e0796add7833c1059325d5098/hack/lib/golang.sh#L507- Update to version 1.28.8: * remove --v arg from kubetest2-tester-ginkgo test args * ci: bump kind to latest for kms jobs * [go] Bump images, dependencies and versions to go 1.21.8 / distroless-iptables to v0.4.6 * [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/protobuf v1.33.0, bsc#1229867 * keep existing PDB conditions when updating status * Validate restartable init container state transition * Test that separation of streams work by using progress notifies * Prevent watch cache starvation, by moving its watch to separate RPC and add a SeparateCacheWatchRPC feature flag to disable this behavior * fix UT failure TestPrintIPAddressList * Fix race condition between external-resizer and kubelet * codegen: don't nuke files if only verifying * dra: increase timeout in setupFakeDRADriverGRPCServer to prevent tests to flake. * e2e_node: replace `registry.k8s.io/stress:v1` with agnhost * promote agnhost to v2.47 * fixing issue with GetCPUUsageNanoCores on Windows * Fix cleanup of file subpaths * etcd: Update to version 3.5.12 * build etcd image v3.5.12 - Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.21.8` * ref: https://github.com/kubernetes/kubernetes/blob/v1.28.8/build/dependencies.yaml#L115-L117- Update to version 1.28.7: * [go] Bump images, dependencies and versions to go 1.21.7 / setcap/debian-base to bookworm-v1.0.1 and distroless-iptables to v0.4.5 * Add processStartTime in metrics/slis * Revert "kubeadm: fix a bug where the uploaded kubelet configuration in kube-system/kubelet-config ConfigMap does not respect user patch" * kubeadm: better checks if the node is CP during "upgrade node" * If a pvc has an empty storageclass name, don't try to assign a default StorageClass to it. * Drop PendingChanges methods from change trackers, move into UpdateResults * Squash some unnecessarily-chained methods in the change trackers - Update .spec file to bump go version build requirements: * `BuildRequires: golang(API) = 1.21`- Use %patch -P N instead of deprecated %patchN.- Update .spec file to remove go version build requirements: * above build requirement causing build failures with following error: - `go: download go1.20.13 for linux/amd64: toolchain not available` - ref: https://go.dev/doc/toolchain - Update to version 1.28.6: * Revert "Graduate Evented PLEG to Beta" * [go] Bump images, dependencies and versions to go 1.20.13 and distroless iptables to 0.2.9 * e2e framework: adapt unit test to Go 1.22 * use context for lazy evaluation. * Handle edge cases in seat demand stats * .*: bump golang.org/x/tools to v0.16.1 * fix: 119921 * Use a separate function for checking if device was reconstructed * Add tests for checking of uncertain device paths * Fix device uncertain errors on reboot * fix(scheduler): fix incorrect loop logic in MultiPoint to avoid a plugin being loaded multiple times * Add unit test for Job Controller for panic when PodFailurePolicy is used on 1.28 * etcd: Update to version 3.5.10 * kube-proxy: Fix etp:Local for externalIPs- Update to version 1.28.5: * enable SchedulerQueueingHints feature gate in TestIncomingPodsMetrics * fix: disable SchedulerQueueingHints feature flag by default * Fix panic if there are more terminating pods than active pods * [go] Bump images, dependencies and versions to go 1.20.12 * Move adding GroupVersion log until after an update is confirmed * pass GOTOOLCHAIN to build containers * handle GOTOOLCHAIN in kube::golang::verify_go_version * fix: requeue pods rejected by Extenders properly * Bump distroless-iptables to 0.2.8 based on Go 1.20.11 * fix: smb file share unavailable issue when it's deleted * Make StatefulSet restart pods with phase Succeeded * run hack scripts to update cyphar/filepath-securejoin to v0.2.4 correctly * update filepath-securejoin dependency to 0.2.4 to fix security vulnerability * DRA: call plugins for claims even if exist in cache * Fix panic when process RunScorePlugins for cap out of range * e2e: bootstrap vsphere tests earlier * apf: request ejected from queue should use reason 'time-out' * apf: remove RequestWaitLimit from queueset config * apf: remove timeoutOldRequestsAndRejectOrEnqueueLocked function * apf: use context for queue wait * apiserver: add flow control metric current_inqueue_seats- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.11` - Update to version 1.28.4: * Use golang library instead of mklink * [go] Bump images, dependencies and versions to go 1.20.11 * Fixing attempt to deploy past allocatable memory limits test on Windows * bump golang.org/grpc to v1.56.3 * Add more test cases ensuring nextScheduleTimeDuration is never < 0 * Modify mostRecentScheduleTime to return more detailed information about missed schedules * removing the import of "k8s.io/utils/ptr" because it was introduced after 1.28 * Fixing CurrentReplicas and CurrentRevision in completeRollingUpdate * Use Patch instead of SSA for Pod Disruption condition * KCCM: fix GCP ILB by reintroducing readiness predicate for eTP:Local * Fix panic testing intree vSphere dynamic PV. * service controller: improve node lifecycle updates - update nodes if providerID has changed * implement Stringer for podActions * Retry operations if CSI Driver Isn't Found by Treating this Error as Transient- Update .spec file to bump go version build requirements: * `BuildRequires: go >= 1.20.10` - Update to version 1.28.3: * Register UnauthenticatedHTTP2DOSMitigation into kube components (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Skip TestUnauthenticatedHTTP2ClientConnectionClose http1 tests (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Disable UnauthenticatedHTTP2DOSMitigation by default (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Prevent rapid reset http2 DOS on API server (CVE-2023-44487, CVE-2023-39325), bsc#1229869 * Fix concurrent write when filling PVC labels * Modify test PVC to detect concurrent map write bug * [go] Bump images, dependencies and versions to go 1.20.10 * Fix to honor PDB with an empty selector `{}` * .: bump golang.org/x/net to v0.17.0 * Mark a volume as uncertain-attached after detach error * Unit & integration tests for OpenAPIV2 AddUpdateAPIService * Fix 120878 - Refactor cacheabledownloader so handler can be updated and fix AddUpdateAPIService to update handler * Fix 120739 - Prevent AddUpdateAPIService from blocking on updating spec * Fix 120758 - prevent cache Load on uninitialized spec * Add nil checks for hpa object target type values * Make a certain ipv4-vs-ipv6 config error non-fatal, for backward compat * [go] Bump images, versions and deps to use Go 1.20.9 * Only configure swap if available on node * Use local isCgroup2UnifiedMode consistently * cronjob controller: ensure already existing jobs are added to Active list of cronjobs * reintroduce resourcequota.NewMonitor * change rolling update logic to exclude sunsetting nodes * vsphere: adapt to govmomi bump * .: bump govmomi to v0.30.6 * Increase range of job_sync_duration_seconds * sync Service API status rest storage * kubeadm: remove reference of k8s.io/kubernetes/pkg/apis/core/v1 * fix race on etcd client constructor for healthchecks * e2e pods: fix WaitForPodsResponding retry * kmsv2: reload metrics bug fix backport * scheduler: start scheduling attempt with clean UnschedulablePlugins- Update to version 1.28.2: * fix(queue_test): make sure the first bind failure via counter * [go] Bump images, versions and deps to use Go 1.20.8 * scheduler: unit test case for concurrent event with other pod * scheduler: fix tracking of concurrent events * sort stability list of metrics in the shell command * Feature-gate SidecarContainers code in pkg/kubelet/kuberuntime * Add an e2e test for the pod sandbox changed scenario * fix: concurrent map writes in e2e test * Automated cherry pick of #119776: Fix a job quota related deadlock (#120319) * TopologyAwareHints: Take lock in HasPopulatedHints * Fallback to legacy discovery on a wider range of conditions in aggregator * Fix OpenAPI aggregation cleanup * apiextensions-apiserver: generate applyconfigurations * Revert to json-patch 4.12.0 * update build cross image to the correct release branch image * Mark Job onPodConditions as optional in pod failure policy * Incorporating feedback on 119341 * Release commit for Kubernetes v1.28.1 * Add wait for cache sync * check for overflow * Fix CEL cost handling of zero length replacement strings * Use env varaibles for passing path * Use environment varaibles for parameters in Powershell * e2e framework util subtle bug checking endpoints * Pass Pinned field to kubecontainer.Image * prep for go1.21: use -e in go list * kubeadm: fix nil pointer when etcd member is already removed * update to golangci-lint v1.54.1 + go-ruleguard v0.4.0 * Make gomaxprocs install optional, limit to tests * Drop [Feature: tag to make sure this tests runs on pre-submits * Statefulset should wait for new replicas when removing .start.ordinal * e2e WaitForServiceEndpointsNum take into account the address family * fix: when PreFilter returns UnschedulableAndUnresolvable, copy the state in all nodes in statusmap * Fix a bug that PostFilter plugin may not function if previous PreFilter plugins return Skip * Add test coverage of result size of string operations * Bump cel-go to v0.16.1- initial package for Kubernetes v1.28.0/bin/sh/bin/sh/bin/sh/bin/shh01-ch4c 1727179800 1.28.131.28.13-150400.9.10.11.28.13-150400.9.10.1 kubernetes1.28manifestskubernetes1.28kubeletkubelet.servicekubelet.service.dkubelet.confrckubeletkubernetes1.28-kubelet-commonCHANGELOG-1.28.mdCONTRIBUTING.mdREADME.mdsysconfig.kubelet-kubernetes1.28kubernetes1.28-kubelet-commonLICENSEkubelet.1.gzkubeletvolume-plugin/etc//etc/kubernetes1.28//run//usr/bin//usr/lib/systemd/system//usr/lib/tmpfiles.d//usr/sbin//usr/share/doc/packages//usr/share/doc/packages/kubernetes1.28-kubelet-common//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/kubernetes1.28-kubelet-common//usr/share/man/man1//var/lib//var/lib/kubelet/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:35820/SUSE_SLE-15-SP4_Update/ff9263e04f1057f6f69d28a2c4666df0-kubernetes1.28.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linuxdirectoryPOSIX shell script, ASCII text executableASCII textexported SGML document, UTF-8 Unicode text, with very long linesASCII text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)RxTtKkDXvutf-88e02c347803570e98c89608676fc9a044f5e585253795d6ed0bcb813deed69a1?p7zXZ !t/>]"k%ܙ]{~+m^:ixk x2;n"qv$[Ӳ =1=I!l~%+0Ůbݞətf OCg(@#W'ʲ Da5< ~@Tȥ&E65?* WLDxR2}1;mQ$ރ1̞)g'3Ɇ$CCE^ڭaa!̉oǑyҳ)g@ƨ`DXu}a:ElѬ<,NYKCkaVKTRQ} _{ [:<ȏm.jnV)L6!0ǾghebaݳĪE P 7fG4iv襥]f@„ڊFCi28Bڹ.Kɬ @utηSB=ӍZ;>)ߛ&#-f C1AYRV!+`ޅGO]& ϳcֶA.^,_ ʪby<7Ѩ5É60cOSNTе7cLcMMRZ<:G ƜXA mE_^LQ!˼D%_jv^Olv&}}P0PhrX)}<6cw9xH3{a\*>t{k4dE:.d I$8fZ™C&E1i 2a)}m[!On"q^BL>THdQf99| 8ptߩ.v4}&5@릛Q%f*(Nj󮼠.+FĈo` 92 O,8FT*Ok~h}brF^%|+ʚlR[dXtH]%]*{qd2\P-}aoפ9ϔ)5E Gō_5jaGf+2&|k_dx%X