libslurm39-23.02.7-150500.5.15.1<>,Xe!p9|]z 5Cجzuq>Id!N(w ` p N#Kt85qݮ#l?/ޠTɯBwteX7V ~{72J g~2_4e"Sf3_dW}m=locՃk^I@QgkV}(%s\F;`FDX~&:NC?d  # 7 )AGPX \ ` h  H0<_(o8x9:>U@dFsGHIXY\]^bcdCeHfKlMu`vhwxyzl|Clibslurm3923.02.7150500.5.15.1Libraries for SLURMThis package contains the library needed to run programs dynamically linked with SLURM.e!h01-ch3bSUSE Linux Enterprise 15SUSE LLC SUSE-GPL-2.0-with-openssl-exceptionhttps://www.suse.com/System/Librarieshttps://www.schedmd.comlinuxx86_64Сe!e!543b25bee20e88527c045dd7b9c6e1c4d3b83ae71f0393501b03fe6b69537fe8libslurm.so.39.0.0rootrootrootrootslurm-23.02.7-150500.5.15.1.src.rpmlibslurmlibslurm.so.39()(64bit)libslurm39libslurm39(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.10)(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.2)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libc.so.6(GLIBC_2.9)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libpthread.so.0()(64bit)libpthread.so.0(GLIBC_2.2.5)(64bit)libpthread.so.0(GLIBC_2.3.2)(64bit)libresolv.so.2()(64bit)libresolv.so.2(GLIBC_2.2.5)(64bit)libresolv.so.2(GLIBC_2.9)(64bit)librt.so.1()(64bit)librt.so.1(GLIBC_2.3.3)(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)slurm-config3.0.4-14.6.0-14.0-15.2-1libslurmslurm-configslurm-config23.0223.02.994.14.3eL@ehy@ee@e[J@eH@e'e;dQd dZ5d=4d&@dd@d'@c>@c`c@ccRcIO@c.@c)@bb?b@ba@b@b@bzSbu boa@aa{@amaa]aSaD@a6a0``f@``Q@`4@`@_I@_I@_T___ _F@__c^א^Ǿ^^}^d@^_@^Y^W@^W@^V]^M#@^E:@^B@^:@^.^*@^*@^)^[^@^ @] @]@]]B]]](]@]x]W@]+@](v@]'$]#0@]#0@] @] @] @\v{\T4\R@\R@\I\U@\[@[@[@[@[[[.[r@[b@[`O@[`O@[\Z[E@[{@Z؄ZЛZJ@ZJ@ZZ@ZZZo Zo Z_:Z!D@ZY@Yp@Y˒Y@Ycl@Y-^Y]XDX@XBXXXk@XAb@X>@X43@Xx@X@X@V5UL@TVTVeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.combwiedemann@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comaguerrero@suse.comeich@suse.comeich@suse.comaguerrero@suse.comaguerrero@suse.comeich@suse.comaguerrero@suse.comfbui@suse.comaguerrero@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comeich@suse.comkasimir_@outlook.decgoll@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comeich@suse.comdimstar@opensuse.orgcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comcgoll@suse.comjjolly@suse.comcgoll@suse.comcgoll@suse.comeich@suse.comeich@suse.comjengelh@inai.dejjolly@suse.comjjolly@suse.comjjolly@suse.comeich@suse.comeich@suse.comeich@suse.comjengelh@inai.deeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comeich@suse.comscorot@free.frscorot@free.frscorot@free.frscorot@free.fr- Update to 23.02.6 to fix (CVE-2023-49933 - bsc#1218046, CVE-2023-49935 - bsc#1218049, CVE-2023-49936 - bsc#1218050, CVE-2023-49937 - bsc#1218051, CVE-2023-49938 - bsc#1218053) * Security Fixes: + Add `JobAcctGatherParams=DisableGPUAcct` to disable gpu accounting. + `acct_gather_energy/ipmi` - Improve logging of DCMI issues. + `gpu/oneapi` - Add support for new env vars `ZE_FLAT_DEVICE_HIERARCHY` and `ZE_ENABLE_PCI_ID_DEVICE_ORDER`. + `data_parser/v0.0.39` - skip empty string when parsing QOS ids. + Remove error message from `assoc_mgr_update_assocs` when purposefully resetting the default QOS. * Bug Fixes: + `libslurm_nss` - Avoid causing glibc to assert due to an unexpected return from slurm_nss due to an error during lookup. + Fix job requests with `--tres-per-task` sometimes resulting in bad allocations that cannot run subsequent job steps. + Fix issue with `slurmd` where `srun` fails to be warned when a node prolog script runs beyond `MsgTimeout` set in `slurm.conf`. + `gres/shard` - Fix plugin functions to have matching parameter orders. + `gpu/nvml` - Fix issue that resulted in the wrong MIG devices being constrained to a job + `gpu/nvml` - Fix linking issue with MIGs that prevented multiple MIGs being used in a single job for certain MIG configurations + Fix file descriptor leak in slurmd when using `acct_gather_energy/ipmi` with DCMI devices. + `sview` - avoid crash when job has a node list string > 49 characters. + Prevent `slurmctld` crash during reconfigure when packing job start messages. + Preserve reason uid on reconfig. + Update node reason with updated `INVAL` state reason if different from last registration. + `conmgr` - Avoid NULL dereference when using `auth/none`. + `data_parser/v0.0.39` - Fixed how deleted QOS and associations for jobs are dumped. + `burst_buffer/lua` - fix stage in counter not decrementing when a job is cancelled during stage in. This counter is used to enforce the limit of 128 scripts per stage. + `data_parser/v0.0.39` - Fix how the `INVALID` nodes state is dumped. + `data_parser/v0.0.39` - Fix parsing of flag arrays to allow muliple flags to be set. + Avoid leaking sockets when an x11 application is closed in an allocation. + Fix missing mutex unlock in group cache code which could cause slurmctld to freeze. + Fix scrontab monthly jobs possibly skipping a month if added near the end of the month. + Fix loading of the gpu account gather energy plugin. + Fix `slurmctld` segfault when reconfiguring after a job resize. + Fix crash in slurmstepd that can occur when launching tasks via mpi using the `pmi2` plugin and using the `route/topology` plugin. + Fix `qos doesn't exist` error message in `assoc_mgr_update_assocs` to print the attempted new default qos, rather than the current default qos. + `data_parser/v0.0.39` - Fix segfault when POSTing data with association usage. * Other Changes and Improvements: + Prevent message extension attacks that could bypass the message hash. CVE-2023-49933. + Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level MUNGE tokens and escalate permissions. CVE-2023-49935. + Prevent NULL pointer dereference on `size_valp` overflow. CVE-2023-49936. + Prevent double-xfree() on error in `_unpack_node_reg_resp()`. CVE-2023-49937. + Prevent modified `sbcast` RPCs from opening a file with the wrong group permissions. CVE-2023-49938. - Fix %do_obsoletes macro expansion to work with SLE-12.- Add missing service file for slurmrestd (boo#1217711).- Explicitly create an Obsoletes: entry for each package version that is obsoleted by the present version. These are all published versions of the last two major releases as well as all minor versions of the present release lower than the current one (bsc#1216869 2nd part). This prevents the current version to upgrade a old Slurm version for which no upgrade path exists.- On SLE-12 exclude build for s390x.- Add missing dependencies to slurm-config to plugins package. These should help to tie down the slurm version and help to avoid a package mix (bsc#1216869).- update to 23.02.6 to fix (CVE-2023-41914, bsc#1216207) * Removed Fix-test-32.8.patch as fixed upstream * Bug Fixes: + Fix `CpusPerTres=` not upgreadable with scontrol update + Fix unintentional gres removal when validating the gres job state. + Fix `--without-hpe-slingshot` configure option. + Fix cgroup v2 memory calculations when transparent huge pages are used. + Fix parsing of `sgather --timeout` option. + Fix regression from 22.05.0 that caused `srun --cpu-bind "=verbose"` and `"=v"` options give different CPU bind masks. + Fix "_find_node_record: lookup failure for node" error message appearing for all dynamic nodes during reconfigure. + Avoid segfault if loading serializer plugin fails. + `slurmrestd` - Correct OpenAPI format for `GET /slurm/v0.0.39/licenses`. + `slurmrestd` - Correct OpenAPI format for `GET /slurm/v0.0.39/job/{job_id}`. + `slurmrestd` - Change format to multiple fields in `GET /slurmdb/v0.0.39/assocations` and `GET /slurmdb/v0.0.39/qos` to handle infinite and unset states. + When a node fails in a job with `--no-kill`, preserve the extern step on the remaining nodes to avoid breaking features that rely on the extern step such as `pam_slurm_adopt`, `x11`, and `job_container/tmpfs`. + `auth/jwt` - Ignore `x5c` field in JWKS files. + `auth/jwt` - Treat 'alg' field as optional in JWKS files. + Allow job_desc.selinux_context to be read from the job_submit.lua script. + Skip check in slurmstepd that causes a large number of errors in the munge log: "Unauthorized credential for client UID=0 GID=0". This error will still appear on `slurmd`/`slurmctld`/`slurmdbd` start up and is not a cause for concern. + `slurmctld` - Allow startup with zero partitions. + Fix some mig profile names in slurm not matching nvidia mig profiles. + Prevent `slurmscriptd` processing delays from blocking other threads in `slurmctld` while trying to launch `{Prolog|Epilog}Slurmctld`. + Fix sacct printing ReqMem field when memory doesn't exist in requested TRES. + Fix how heterogenous steps in an allocation with `CR_PACK_NODE` or `-mpack` are created. + Fix `slurmctld` crash from race condition within `job_submit_throttle` plugin. + Fix `--with-systemdsystemunitdir` when requesting a default location. + Fix not being able to cancel an array task by the jobid (i.e. not `_`) through scancel, job launch failure or prolog failure. + Fix cancelling the whole array job when the array task is the meta job and it fails job or prolog launch and is not requeable. Cancel only the specific task instead. + Fix regression in 21.08.2 where MailProg did not run for `mail-type=end` for jobs with non+zero exit codes. + Fix incorrect setting of memory.swap.max in cgroup/v2. + Fix `jobacctgather/cgroup` collection of disk/io, gpumem, gpuutil TRES values. + Fix -d singleton for heterogeneous jobs. + Downgrade info logs about a job meeting a "maximum node limit" in the select plugin to `DebugFlags=SelectType`. These info logs could spam the slurmctld log file under certain circumstances. + `prep/script` - Fix `[Srun|Task]` missing `SLURM_JOB_NODELIST`. + gres - Rebuild GRES core bitmap for nodes at startup. This fixes error: "Core bitmaps size mismatch on node [HOSTNAME]", which causes jobs to enter state "Requested node configuration is not available". + `slurmctd` - Allow startup with zero nodes. + Fix filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file, or removing entire directories' contents. CVE-2023-41914.- Updated to version 23.02.5 with the following changes: * Bug Fixes: + Revert a change in 23.02 where `SLURM_NTASKS` was no longer set in the job's environment when `--ntasks-per-node` was requested. The method that is is being set, however, is different and should be more accurate in more situations. + Change pmi2 plugin to honor the `SrunPortRange` option. This matches the new behavior of the pmix plugin in 23.02.0. Note that neither of these plugins makes use of the `MpiParams=ports=` option, and previously were only limited by the systems ephemeral port range. + Fix regression in 23.02.2 that caused slurmctld -R to crash on startup if a node features plugin is configured. + Fix and prevent reoccurring reservations from overlapping. + `job_container/tmpfs` - Avoid attempts to share BasePath between nodes. + With `CR_Cpu_Memory`, fix node selection for jobs that request gres and `--mem-per-cpu`. + Fix a regression from 22.05.7 in which some jobs were allocated too few nodes, thus overcommitting cpus to some tasks. + Fix a job being stuck in the completing state if the job ends while the primary controller is down or unresponsive and the backup controller has not yet taken over. + Fix `slurmctld` segfault when a node registers with a configured `CpuSpecList` while `slurmctld` configuration has the node without `CpuSpecList`. + Fix cloud nodes getting stuck in `POWERED_DOWN+NO_RESPOND` state after not registering by `ResumeTimeout`. + `slurmstepd` - Avoid cleanup of `config.json-less` containers spooldir getting skipped. + Fix scontrol segfault when 'completing' command requested repeatedly in interactive mode. + Properly handle a race condition between `bind()` and `listen()` calls in the network stack when running with SrunPortRange set. + Federation - Fix revoked jobs being returned regardless of the `-a`/`--all` option for privileged users. + Federation - Fix canceling pending federated jobs from non-origin clusters which could leave federated jobs orphaned from the origin cluster. + Fix sinfo segfault when printing multiple clusters with `--noheader` option. + Federation - fix clusters not syncing if clusters are added to a federation before they have registered with the dbd. + `node_features/helpers` - Fix node selection for jobs requesting changeable. features with the `|` operator, which could prevent jobs from running on some valid nodes. + `node_features/helpers` - Fix inconsistent handling of `&` and `|`, where an AND'd feature was sometimes AND'd to all sets of features instead of just the current set. E.g. `foo|bar&baz` was interpreted as `{foo,baz}` or `{bar,baz}` instead of how it is documented: `{foo} or {bar,baz}`. + Fix job accounting so that when a job is requeued its allocated node count is cleared. After the requeue, sacct will correctly show that the job has 0 `AllocNodes` while it is pending or if it is canceled before restarting. + `sacct` - `AllocCPUS` now correctly shows 0 if a job has not yet received an allocation or if the job was canceled before getting one. + Fix intel OneAPI autodetect: detect the `/dev/dri/renderD[0-9]+` GPUs, and do not detect `/dev/dri/card[0-9]+`. + Fix node selection for jobs that request `--gpus` and a number of tasks fewer than GPUs, which resulted in incorrectly rejecting these jobs. + Remove `MYSQL_OPT_RECONNECT` completely. + Fix cloud nodes in `POWERING_UP` state disappearing (getting set to `FUTURE`) when an `scontrol reconfigure` happens. + `openapi/dbv0.0.39` - Avoid assert / segfault on missing coordinators list. + `slurmrestd` - Correct memory leak while parsing OpenAPI specification templates with server overrides. + Fix overwriting user node reason with system message. + Prevent deadlock when `rpc_queue` is enabled. + `slurmrestd` - Correct OpenAPI specification generation bug where fields with overlapping parent paths would not get generated. + Fix memory leak as a result of a partition info query. + Fix memory leak as a result of a job info query. + For step allocations, fix `--gres=none` sometimes not ignoring gres from the job. + Fix `--exclusive` jobs incorrectly gang-scheduling where they shouldn't. + Fix allocations with `CR_SOCKET`, gres not assigned to a specific socket, and block core distribion potentially allocating more sockets than required. + Revert a change in 23.02.3 where Slurm would kill a script's process group as soon as the script ended instead of waiting as long as any process in that process group held the stdout/stderr file descriptors open. That change broke some scripts that relied on the previous behavior. Setting time limits for scripts (such as `PrologEpilogTimeout`) is strongly encouraged to avoid Slurm waiting indefinitely for scripts to finish. + Fix `slurmdbd -R` not returning an error under certain conditions. + `slurmdbd` - Avoid potential NULL pointer dereference in the mysql plugin. + Fix regression in 23.02.3 which broken X11 forwarding for hosts when MUNGE sends a localhost address in the encode host field. This is caused when the node hostname is mapped to 127.0.0.1 (or similar) in `/etc/hosts`. + `openapi/[db]v0.0.39` - fix memory leak on parsing error. + `data_parser/v0.0.39` - fix updating qos for associations. + `openapi/dbv0.0.39` - fix updating values for associations with null users. + Fix minor memory leak with `--tres-per-task` and licenses. + Fix cyclic socket cpu distribution for tasks in a step where `--cpus-per-task` < usable threads per core. + `slurmrestd` - For `GET /slurm/v0.0.39/node[s]`, change format of node's energy field `current_watts` to a dictionary to account for unset value instead of dumping 4294967294. + `slurmrestd` - For `GET /slurm/v0.0.39/qos`, change format of QOS's field "priority" to a dictionary to account for unset value instead of dumping 4294967294. + slurmrestd - For `GET /slurm/v0.0.39/job[s]`, the 'return code' code field in `v0.0.39_job_exit`_code will be set to -127 instead of being left unset where job does not have a relevant return code. * Other Changes: + Remove --uid / --gid options from salloc and srun commands. These options did not work correctly since the CVE-2022-29500 fix in combination with some changes made in 23.02.0. + Add the `JobId` to `debug()` messages indicating when `cpus_per_task/mem_per_cpu` or `pn_min_cpus` are being automatically adjusted. + Change the log message warning for rate limited users from verbose to info. + `slurmstepd` - Cleanup per task generated environment for containers in spooldir. + Format batch, extern, interactive, and pending step ids into strings that are human readable. + `slurmrestd` - Reduce memory usage when printing out job CPU frequency. + `data_parser/v0.0.39` - Add `required/memory_per_cpu` and `required/memory_per_node` to `sacct --json` and `sacct --yaml` and `GET /slurmdb/v0.0.39/jobs` from slurmrestd. + `gpu/oneapi` - Store cores correctly so CPU affinity is tracked. + Allow `slurmdbd -R` to work if the root assoc id is not 1. + Limit periodic node registrations to 50 instead of the full `TreeWidth`. Since unresolvable `cloud/dynamic` nodes must disable fanout by setting `TreeWidth` to a large number, this would cause all nodes to register at once.- Updated to 23.02.4 with the following changes: * Bug Fixes: + Fix main scheduler loop not starting after a failover to backup controller. Avoid slurmctld segfault when specifying `AccountingStorageExternalHost` (bsc#1214983). + Fix sbatch return code when `--wait` is requested on a job array. + Fix collected `GPUUtilization` values for `acct_gather_profile` plugins. + Fix `slurmrestd` handling of job hold/release operations. + Fix step running indefinitely when slurmctld takes more than `MessageTimeout` to respond. Now, `slurmctld` will cancel the step when detected, preventing following steps from getting stuck waiting for resources to be released. + Fix regression to make `job_desc.min_cpus` accurate again in `job_submit` when requesting a job with `--ntasks-per-node`. + Fix handling of `ArrayTaskThrottle` in backfill. + Fix regression in 23.02.2 when checking gres state on `slurmctld` startup or reconfigure. Gres changes in the configuration were not updated on slurmctld startup. On startup or reconfigure, these messages were present in the log: `error: Attempt to change gres/gpu Count`. + Fix potential double count of gres when dealing with limits. + Fix `slurmstepd` segfault when `ContainerPath` is not set in `oci.conf` + Fixed an issue where jobs requesting licenses were incorrectly rejected. + `scrontab` - Fix cutting off the final character of quoted variables. + `smail` - Fix issues where e-mails at job completion were not being sent. + `scontrol/slurmctld` - fix comma parsing when updating a reservation's nodes. + Fix `--gpu-bind=single binding` tasks to wrong gpus, leading to some gpus having more tasks than they should and other gpus being unused. + Fix regression in 23.02 that causes slurmstepd to crash when `srun` requests more than `TreeWidth` nodes in a step and uses the pmi2 or pmix plugin. + `job_container/tmpfs` - Fix `%h` and `%n` substitution in `BasePath` where `%h` was substituted as the NodeName instead of the hostname, and %n was substituted as an empty string. + Fix regression where `--cpu-bind=verbose` would override `TaskPluginParam`. + `scancel` - Fix `--clusters/-M` for federations. Only filtered jobs (e.g. `-A`, `-u`, `-p`, etc.) from the specified clusters will be canceled, rather than all jobs in the federation. Specific jobids will still be routed to the origin cluster for cancellation. * Other changes: + Make spank `S_JOB_ARGV` item value hold the requested command `argv` instead of the `srun --bcast` value when `--bcast` requested (only in local context). + `scontrol` - Permit changes to StdErr and StdIn for pending jobs. + `scontrol` - Reset `std`{`err`,`in`,`out`} when set to empty string. + `slurmrestd` - mark environment as a required field for job submission descriptions. + `slurmrestd` - avoid dumping null in OpenAPI schema required fields. + `data_parser/v0.0.39` - avoid rejecting valid `memory_per_node` formatted as dictionary provided with a job description. + `data_parser/v0.0.39` - avoid rejecting valid `memory_per_cpu` formatted as dictionary provided with a job description. + `slurmrestd` - Return HTTP error code 404 when job query fails. + `slurmrestd` - Add return schema to error response to job and license query. + Change the log message warning for rate limited users from debug to verbose. + `cgroup/v2` - Avoid capturing log output for ebpf when constraining devices, as this can lead to inadvertent failure if the log buffer is too small. + Added error message when attempting to use sattach on batch or extern steps. + Reject job `ArrayTaskThrottle` update requests from unprivileged users. + `data_parser/v0.0.39` - populate description fields of property objects in generated OpenAPI specifications where defined. + `slurmstepd` - Avoid segfault caused by `ContainerPath` not being terminated by `/` in `oci.conf`. + `data_parser/v0.0.39` - Change `v0.0.39_job_info` response to tag `exit_code` field as being complex instead of only an unsigned integer. - Updated to 23.02.3 with the following changes: * Bug Fixes: + `slurmctld` - Fix backup slurmctld crash when it takes control multiple times. + Fix regression in 23.02.2 that ignored the partition `DefCpuPerGPU` setting on the first pass of scheduling a job requesting `--gpus --ntasks`. + `srun` - fix issue creating regular and interactive steps because environment variables were incorrectly set on non-HetSteps. + Fix dynamic nodes getting stuck in allocated states when reconfiguring. + Fix regression in 23.02.2 that set the `SLURM_NTASKS` environment variable in sbatch jobs from `--ntasks-per-node` when `--ntasks` was not requested. + Fix regression in 23.02 that caused sbatch jobs to set the wrong number of tasks when requesting `--ntasks-per-node` without `--ntasks`, and also requesting one of the following options: `--sockets-per-node`, `--cores-per-socket`, `--threads-per-core` (or `--hint=nomultithread`), or `-B,--extra-node-info`. + Fix double counting suspended job counts on nodes when reconfiguring, which prevented nodes with suspended jobs from being powered down or rebooted once the jobs completed. + Fix backfill not scheduling jobs submitted with `--prefer` and `--constraint` properly. + mpi/pmix - fix regression introduced in 23.02.2 which caused PMIx shmem backed files permissions to be incorrect. + api/submit - fix memory leaks when submission of batch regular jobs or batch HetJobs fails (response data is a return code). + Fix regression in 23.02 leading to error() messages being sent at `INFO` instead of `ERR` in syslog. + Fix `TresUsageIn[Tot|Ave]` calculation for `gres/gpumem` and `gres/gpuutil`. + Fix issue in the gpu plugins where gpu frequencies would only be set if both gpu memory and gpu frequencies were set, while one or the other suffices. + Fix reservations group ACL's not working with the root group. + Fix updating a job with a ReqNodeList greater than the job's node count. + Fix inadvertent permission denied error for `--task-prolog` and `--task-epilog` with filesystems mounted with `root_squash`. + Fix missing detailed cpu and gres information in json/yaml output from `scontrol`, `squeue` and `sinfo`. + Fix regression in 23.02 that causes a failure to allocate job steps that request `--cpus-per-gpu` and gpus with types. + Fix potentially waiting indefinitely for a defunct process to finish, which affects various scripts including `Prolog` and `Epilog`. This could have various symptoms, such as jobs getting stuck in a completing state. + Fix losing list of reservations on job when updating job with list of reservations and restarting the controller. + Fix nodes resuming after down and drain state update requests from clients older than 23.02. + Fix advanced reservation creation/update when an association that should have access to it is composed with partition(s). + Fix job layout calculations with `--ntasks-per-gpu`, especially when `--nodes` has not been explicitly provided. + Fix X11 forwarding for jobs submitted from the slurmctld host. + When a job requests `--no-kill` and one or more nodes fail during the job, fix subsequent job steps unable to use some of the remaining resources allocated to the job. + Fix shared gres allocation when using `--tres-per-task` with tasks that span multiple sockets. + `auth/jwt` - Fix memory leak. * Other changes: + `openapi/dbv0.0.39/users` - If a default account update failed, resulting in a no-op, the query returned success without any warning. Now a warning is sent back to the client that the default account wasn't modified. + Avoid job write lock when nodes are dynamically added/removed. + `burst_buffer/lua` - allow jobs to get scheduled sooner after `slurm_bb_data_in` completes. + `openapi/v0.0.39` - fix memory leak in `_job_post_het_submit()`. + Avoid possible `slurmctld` segfault caused by race condition with already completed `slurmdbd_conn` connections. + `Slurmdbd.conf` checks included conf files for 0600 permissions + `slurmrestd` - fix regression "oversubscribe" fields were removed from job descriptions and submissions from v0.0.39 end points. + `accounting_storage/mysql` - Query for indiviual QOS correctly when you have more than 10. + Add warning message about ignoring `--tres-per-tasks=license` when used on a step. + `sshare` - Fix command to work when using `priority/basic`. + Avoid loading `cli_filter` plugins outside of `salloc`/`sbatch`/`scron`/ `srun`. This fixes a number of missing symbol problems that can manifest for executables linked against libslurm (and not `libslurmfull`). + Allow cloud_reg_addrs to update dynamically registered node's addrs on subsequent registrations. + Revert a change in 22.05.5 that prevented tasks from sharing a core if `--cpus-per-task` > threads per core, but caused incorrect accounting and cpu binding. Instead, `--ntasks-per-core=1` may be requested to prevent tasks from sharing a core. + Correctly send `assoc_mgr` lock to mcs plugin. + Avoid unnecessary `gres/gpumem` and `gres/gpuutil` `TRES` position lookups. + `sacct` - when printing `PLANNED` time, use end time instead of start time for jobs cancelled before they started. + Hold the job with `(Reservation ... invalid)` state reason if the reservation is not usable by the job. + `sbatch` - Added new `--export=NIL` option. - Removed: * Fix-test-3.13.patch * Fix-test-38.11.patch as both tests changed upstream- Create a macro for upgrade dependency to ensure uniform handling.- updated to 23.02.02 which includes a number of fixes to Slurm stability * Includes a fix for a regression in 23.02 that caused openmpi mpirun to fail to launch tasks. * It also includes two functional changes: Don't update the cron job tasks if the whole crontab file is left untouched after opening it with scrontab -e * Sort dynamic nodes and include them in topology after scontrol reconfigure or a slurmctld restart.- Web-configurator: changed presets to SUSE defaults. - If %_restart_on_update is no longer defined replace by own macro. - Marked slurm-openlava, slurm-seff and slurm-sjstat noarch. - rpmlint: * dropped some rpmlint filters which are no longer relevant. * added/refreshed filters. For Details, see rpmlintrc. - Remove workaround to fix the restart issue in an Slurm package described in bsc#1088693. The Slurm version in this package as 16.05. Any attempt to directly migrate to the current version is bound to fail anyway. - Now require slurm-munge if munge authentication is installed.- updated to 23.02.1 with the following changes: * job_container/tmpfs - cleanup job container even if namespace mount is already unmounted. * openapi/dbv0.0.38 - Fix not displaying an error when updating QOS or associations fails. * Fix nodes remaining as PLANNED after slurmctld save state recovery. * Add cgroup.conf EnableControllers option for cgroup/v2. * Get correct cgroup root to allow slurmd to run in containers like Docker. * slurmctld - add missing PrivateData=jobs check to step ContainerID lookup requests originated from 'scontrol show step container-id=' or certain scrun operations when container state can't be directly queried. * Fix nodes un-draining after being drained due to unkillable step. * Fix remote licenses allowed percentages reset to 0 during upgrade. * sacct - Avoid truncating time strings when using SLURM_TIME_FORMAT with the --parsable option. * Fix regression in 22.05.0rc1 that broke Nodes=ALL in a NodeSet. * openapi/v0.0.39 - fix jobs submitted via slurmrestd being allocated fewer CPUs than tasks when requesting multiple tasks. * Fix job not being scheduled on valid nodes and potentially being rejected when using parentheses at the beginning of square brackets in a feature request, for example: "feat1&[(feat2|feat3)]". * Fix regression in 23.02.0rc1 which made --gres-flags=enforce-binding no longer enforce optimal core-gpu job placement. * mpi/pmix - Fix v5 to load correctly when libpmix.so isn't in the normal lib path. * data_parser/v0.0.39 - fix regression where "memory_per_node" would be rejected for job submission. * data_parser/v0.0.39 - fix regression where "memory_per_cpu" would be rejected for job submission. * slurmctld - add an assert to check for magic number presence before deleting a partition record and clear the magic afterwards to better diagnose potential memory problems. * Clean up OCI containers task directories correctly. * scrun - Run under existing job when SLURM_JOB_ID is present. * Prevent a slurmstepd crash when the I/O subsystem has hung. * common/conmgr - fix memory leak of complete connection list. * job_container/tmpfs - avoid printing extraneous error messages when running a spank plugin that implements slurm_spank_job_prolog() or slurm_spank_job_epilog(). * Fix srun < 23.02 always getting an "exact" core allocation. * Prevent scontrol < 23.02 from setting MaxCPUsPerSocket to 0. * Add ScronParameters=explicit_scancel and corresponding scancel --cron option. - removed right-pmix-path.patch as fixed upstream- use libpmix.so.2 instead of libpmix.so to fix (bsc#1209260) this removes the need of pmix-pluginlib added: right-pmix-path.patch- slurm-plugins need to require pmix-pluginlib (bsc#1209260)- Stop pulling firewall rules from github. There is no benefit to host these separately. - Remove pre-sle12 pieces.- Add missing Provides:, Conflicts: and Obsoletes: to slurm-cray, slurm-hdf5 and slurm-testsuite to avoid package conflicts. - Unify Obsoletes:. - Consolidate spec files between different Slurm releases in Leap/SLE maintenance. - Add dependency for the general plugin package to the AcctGatherProfile HDF5 plugin. - Adjust node RealMemory in slurm.conf of test suite for 8G test nodes.- updated to 23.02.0 * Highlights + slurmctld - Add new RPC rate limiting feature. This is enabled through SlurmctldParameters=rl_enable, otherwise disabled by default. + Make scontrol reconfigure and sending a SIGHUP to the slurmctld behave the same. If you were using SIGHUP as a 'lighter' scontrol reconfigure to rotate logs please update your scripts to use SIGUSR2 instead. + Change cloud nodes to show by default. PrivateData=cloud is no longer needed. + sreport - Count planned (FKA reserved) time for jobs running in IGNORE_JOBS reservations. Previously was lumped into IDLE time. + job_container/tmpfs - Support running with an arbitrary list of private mount points (/tmp and /dev/shm are the default, but not required). + job_container/tmpfs - Set more environment variables in InitScript. + Make all cgroup directories created by Slurm owned by root. This was the behavior in cgroup/v2 but not in cgroup/v1 where by default the step directories ownership were set to the user and group of the job. + accounting_storage/mysql - change purge/archive to calculate record ages based on end time, rather than start or submission times. + job_submit/lua - add support for log_user() from slurm_job_modify(). + Run the following scripts in slurmscriptd instead of slurmctld: ResumeProgram, ResumeFailProgram, SuspendProgram, ResvProlog, ResvEpilog, and RebootProgram (only with SlurmctldParameters=reboot_from_controller). + Only permit changing log levels with 'srun --slurmd-debug' by root or SlurmUser. + slurmctld will fatal() when reconfiguring the job_submit plugin fails. + Add PowerDownOnIdle partition option to power down nodes after nodes become idle. + Add "[jobid.stepid]" prefix from slurmstepd and "slurmscriptd" prefix from slurmcriptd to Syslog logging. Previously was only happening when logging to a file. + Add purge and archive functionality for job environment and job batch script records. + Extend support for Include files to all "configless" client commands. + Make node weight usable for powered down and rebooting nodes. + Removed 'launch' plugin. + Add "Extra" field to job to store extra information other than a comment. + Add usage gathering for AMD (requires ROCM 5.5+) and NVIDIA gpus. + Add job's allocated nodes, features, oversubscribe, partition, and reservation to SLURM_RESUME_FILE output for power saving. + Automatically create directories for stdout/stderr output files. Paths may use %j and related substitution characters as well. + Add --tres-per-task to salloc/sbatch/srun. + Allow nodefeatures plugin features to work with cloud nodes. e.g. - Powered down nodes have no active changeable features. - Nodes can't be changed to other active features until powered down. - Active changeable features are reset/cleared on power down. + Make slurmstepd cgroups constrained by total configured memory from slurm.conf (NodeName=<> RealMemory=#) instead of total physical memory. + node_features/helpers - add support for the OR and parentheses operators in a --constraint expression. + slurmctld will fatal() when [Prolog|Epilog]Slurmctld are defined but are not executable. + Validate node registered active features are a super set of node's currently active changeable features. + On clusters without any PrologFlags options, batch jobs with failed prologs no longer generate an output file. + Add SLURM_JOB_START_TIME and SLURM_JOB_END_TIME environment variables. + Add SuspendExcStates option to slurm.conf to avoid suspending/powering down specific node states. + Add support for DCMI power readings in IPMI plugin. + slurmrestd served /slurm/v0.0.39 and /slurmdb/v0.0.39 endpoints had major changes from prior versions. Almost all schemas have been renamed and modified. Sites using OpenAPI Generator clients are highly suggested to upgrade to to using atleast version 6.x due to limitations with prior versions. + Allow for --nodelist to contain more nodes than required by --nodes. + Rename "nodes" to "nodes_resume" in SLURM_RESUME_FILE job output. + Rename "all_nodes" to "all_nodes_resume" in SLURM_RESUME_FILE output. + Add jobcomp/kafka plugin. + Add new PreemptParameters=reclaim_licenses option which will allow higher priority jobs to preempt jobs to free up used licenses. (This is only enabled for with PreemptModes of CANCEL and REQUEUE, as Slurm cannot guarantee suspended jobs will release licenses correctly.) + hpe/slingshot - add support for the instant-on feature. + Add ability to update SuspendExc* parameters with scontrol. + Add ability to restore SuspendExc* parameters on restart with slurmctld - R option. + Add ability to clear a GRES specification by setting it to "0" via 'scontrol update job'. + Add SLURM_JOB_OVERSUBSCRIBE environment variable for Epilog, Prolog, EpilogSlurmctld, PrologSlurmctld, and mail ouput. + System node down reasons are appended to existing reasons, separated by ':'. + New command scrun has been added. scrun acts as an Open Container Initiative (OCI) runtime proxy to run containers seamlessly via Slurm. + Fixed GpuFreqDef option. When set in slurm.conf, it will be used if - -gpu-freq was not explicitly set by the job step. * Configuration Changes + job_container.conf - Added "Dirs" option to list desired private mount points. + node_features plugins - invalid users specified for AllowUserBoot will now result in fatal() rather than just an error. + Deprecate AllowedKmemSpace, ConstrainKmemSpace, MaxKmemPercent, and MinKmemSpace. + Allow jobs to queue even if the user is not in AllowGroups when EnforcePartLimits=no is set. This ensures consistency for all the Partition access controls, and matches the documented behavior for EnforcePartLimits. + Add InfluxDBTimeout parameter to acct_gather.conf. + job_container/tmpfs - add support for expanding %h and %n in BasePath. + slurm.conf - Removed SlurmctldPlugstack option. + Add new SlurmctldParameters=validate_nodeaddr_threads= option to allow concurrent hostname resolution at slurmctld startup. + Add new AccountingStoreFlags=job_extra option to store a job's extra field in the database. + Add new "defer_batch" option to SchedulerParameters to only defer scheduling for batch jobs. + Add new DebugFlags option 'JobComp' to replace 'Elasticsearch'. + Add configurable job requeue limit parameter - MaxBatchRequeue - in slurm.conf to permit changes from the old hard-coded value of 5. + helpers.conf - Allow specification of node specific features. + helpers.conf - Allow many features to one helper script. + job_container/tmpfs - Add "Shared" option to support shared namespaces. This allows autofs to work with the job_container/tmpfs plugin when enabled. + acct_gather.conf - Added EnergyIPMIPowerSensors=Node=DCMI and Node=DCMI_ENHANCED. + Add new "getnameinfo_cache_timeout=" option to CommunicationParameters to adjust or disable caching the results of getnameinfo(). + Add new PrologFlags=ForceRequeueOnFail option to automatically requeue batch jobs on Prolog failures regardless of the job --requeue setting. + Add HealthCheckNodeState=NONDRAINED_IDLE option. + Add 'explicit' to Flags in gres.conf. This makes it so the gres is not automatically added to a job's allocation when --exclusive is used. Note that this is a per-node flag. + Moved the "preempt_" options from SchedulerParameters to PreemptParameters, and dropped the prefix from the option names. (The old options will still be parsed for backwards compatibility, but are now undocumented.) + Add LaunchParameters=ulimit_pam_adopt, which enables setting RLIMIT_RSS in adopted processes. + Update SwitchParameters=job_vni to enable/disable creating job VNIs for all jobs, or when a user requests them. + Update SwitchParameters=single_node_vni to enable/disable creating single node vnis for all jobs, or when a user requests them. + Add ability to preserve SuspendExc* parameters on reconfig with ReconfigFlags=KeepPowerSaveSettings. + slurmdbd.conf - Add new AllResourcesAbsolute to force all new resources to be created with the Absolute flag. + topology/tree - Add new TopologyParam=SwitchAsNodeRank option to reorder nodes based on switch layout. This can be useful if the naming convention for the nodes does not natually map to the network topology. + Removed the default setting for GpuFreqDef. If unset, no attempt to change the GPU frequency will be made if --gpu-freq is not set for the step. * Command Changes + sacctmgr - no longer force updates to the AdminComment, Comment, or SystemComment to lower-case. + sinfo - Add -F/--future option to sinfo to display future nodes. + sacct - Rename 'Reserved' field to 'Planned' to match sreport and the nomenclature of the 'Planned' node. + scontrol - advanced reservation flag MAINT will no longer replace nodes, similar to STATIC_ALLOC + sbatch - add parsing for #PBS -d and #PBS -w. + scontrol show assoc_mgr will show username(uid) instead of uid in QoS section. + Add strigger --draining and -R/--resume options. + Change --oversubscribe and --exclusive to be mutually exclusive for job submission. Job submission commands will now fatal if both are set. Previously, these options would override each other, with the last one in the job submission command taking effect. + scontrol - Requested TRES and allocated TRES will now always be printed when showing jobs, instead of one TRES output that was either the requested or allocated. + srun --ntasks-per-core now applies to job and step allocations. Now, use of --ntasks-per-core=1 implies --cpu-bind=cores and - -ntasks-per-core>1 implies --cpu-bind=threads. + salloc/sbatch/srun - Check and abort if ntasks-per-core > threads-per-core. + scontrol - Add ResumeAfter= option to "scontrol update nodename=". + Add a new "nodes=" argument to scontrol setdebug to allow the debug level on the slurmd processes to be temporarily altered. + Add a new "nodes=" argument to "scontrol setdebugflags" as well. + Make it so scrontab prints client-side the job_submit() err_msg (which can be set i.e. by using the log_user() function for the lua plugin). + scontrol - Reservations will not be allowed to have STATIC_ALLOC or MAINT flags and REPLACE[_DOWN] flags simultaneously. + scontrol - Reservations will only accept one reoccurring flag when being created or updated. + scontrol - A reservation cannot be updated to be reoccurring if it is already a floating reservation. + squeue - removed unused '%s' and 'SelectJobInfo' formats. + squeue - align print format for exit and derived codes with that of other components (:). + sacct - Add --array option to expand job arrays and display array tasks on separate lines. + Partial support for '--json' and '--yaml' formated outputs have been implemented for sacctmgr, sdiag, sinfo, squeue, and scontrol. The resultant data ouput will be filtered by normal command arguments. Formatting arguments will continue to be ignored. + salloc/sbatch/srun - extended the --nodes syntax to allow for a list of valid node counts to be allocated to the job. This also supports a "step count" value (e.g., --nodes=20-100:20 is equivalent to - -nodes=20,40,60,80,100) which can simplify the syntax when the job needs to scale by a certain "chunk" size. + srun - add user requestible vnis with '--network=job_vni' option. + srun - add user requestible single node vnis with the '--network=single_node_vni' option. * API Changes + job_container plugins - container_p_stepd_create() function signature replaced uint32_t uid with stepd_step_rec_t* step. + gres plugins - gres_g_get_devices() function signature replaced pid_t pid with stepd_step_rec_t* step. + cgroup plugins - task_cgroup_devices_constrain() function signature removed pid_t pid. + task plugins - replace task_p_pre_set_affinity(), task_p_set_affinity(), and task_p_post_set_affinity() with task_p_pre_launch_priv() like it was back in slurm 20.11. + Allow for concurrent processing of job_submit_g_submit() and job_submit_g_modify() calls. If your plugin is not capable of concurrent operation you must add additional locking within your plugin. + Removed return value from slurm_list_append(). + The List and ListIterator types have been removed in favor of list_t and list_itr_t respectively. + burst buffer plugins - add bb_g_build_het_job_script(). bb_g_get_status() - added authenticated UID and GID. bb_g_run_script() - added job_info argument. + burst_buffer.lua - Pass UID and GID to most hooks. Pass job_info (detailed job information) to many hooks. See etc/burst_buffer.lua.example for a complete list of changes. WARNING: Backwards compatibility is broken for slurm_bb_get_status: UID and GID are passed before the variadic arguments. If UID and GID are not explicitly listed as arguments to slurm_bb_get_status(), then they will be included in the variadic arguments. Backwards compatibility is maintained for all other hooks because the new arguments are passed after the existing arguments. + node_features plugins - node_features_p_reboot_weight() function removed. node_features_p_job_valid() - added parameter feature_list. node_features_p_job_xlate() - added parameters feature_list and job_node_bitmap. + New data_parser interface with v0.0.39 plugin. * Added: Fix-test-1.99.patch * Reworked: Fix-test-38.11.patch pam_slurm-Initialize-arrays-and-pass-sizes.patch- testsuite: on later SUSE versions claim ownership of directory /etc/security/limits.d.- Move the ext_sensors/rrd plugin to a separate package: this plugin requires librrd which in turn requires huge parts of the client side X Window System stack. There is probably no use in cluttering up a system for a plugin that probably only used by a few.- Test Suite fixes: * Update README_Testsuite.md. * Clean up left over files when de-installing test suite. * Adjustment to test suite package: for SLE mark the openmpi4 devel package and slurm-hdf5 optional. * Add -ffat-lto-objects to the build flags when LTO is set to make sure the object files we ship with the test suite still work correctly. * Improve setup-testsuite.sh: copy ssh fingerprints from all nodes.- updated to 22.05.5 - NOTE: Slurm validates that libraries are of the same version. Unfortunately, due to an oversight, we failed to notice that the slurmstepd loads the hash_k12 library only after a job has completed. This means that if the hash_k12 library is upgraded before a job finishes, the slurmstepd will load the new library when the job finishes, and will fail due to a mismatch of versions. This results in nodes with slurmstepd processes stuck indefinitely. These processes require manual intervention to clean up. There is no clean way to resolve these hung slurmstepd processes. The only recommended way to upgrade between minor versions of 22.05 with RPM’s or upgrades that replace current binaries and libraries is to drain the nodes of running jobs first. - Fixes a number of moderate severity issues, noteable are: * Load hash plugin at slurmstepd launch time to prevent issues loading the plugin at step completion if the Slurm installation is upgraded. * Update nvml plugin to match the unique id format for MIG devices in new Nvidia drivers. * Fix multi-node step launch failure when nodes in the controller aren't in natural order. This can happen with inconsistent node naming (such as node15 and node052) or with dynamic nodes which can register in any order. * job_container/tmpfs - cleanup containers even when the .ns file isn't mounted anymore. * Wait up to PrologEpilogTimeout before shutting down slurmd to allow prolog and epilog scripts to complete or timeout. Previously, slurmd waited 120 seconds before timing out and killing prolog and epilog scripts.- Do not deduplicate files of testsuite Slurm configuration. This directory is supposed to be mounted over /etc/slurm therefore it must not contain softlinks to the files in this directory. - Improve .a and .o file collection for test suite: find these files even if there are multiple ones in a single line.- Fix build for older product version.- Fix a potential security vulnerability in the test package (bsc#1201674, CVE-2022-31251).- make slurmtest.tar reproducible- Improve check for mpicc in testsuite package: if binary isn't found, don't crash. - Patch NOFILE Limit in the slurmd.service copy for the testsuite.- update to 22.05.2 with following fixes: * Fix regression which allowed the oversubscription of licenses. * Fix a segfault in slurmctld when requesting gres in job arrays.- Package the Slurm testsuite for QA purposes. NOTE: This package is not meant to be used for testing by the user but rather for testing by the maintainers to ensure the package is working properly. DO NOT report test suite failures unless you are able to confirm that the failure is really a bug. * Fixes for test suite: Keep-logs-of-skipped-test-when-running-test-cases-sequentially.patch Fix-test-21.41.patch Fix-test-38.11.patch Fix-test-32.8.patch Fix-test-3.13.patch Fix-test7.2-to-find-libpmix-under-lib64-as-well.patch * Add documentation: README_Testsuite.md - Allow log in as user 'slurm'. This allows admins to run certain priviledged commands more easily without becoming root.- update to 22.05.0 with following changes: - Support for dynamic node addition and removal - Support for native Linux cgroup v2 operation - Newly added plugins to support HPE Slingshot 11 networks (switch/hpe_slingshot), and Intel Xe GPUs (gpu/oneapi) - Added new acct_gather_interconnect/sysfs plugin to collect statistics from arbitrary network interfaces. - Expanded and synced set of environment variables available in the Prolog/Epilog/PrologSlurmctld/EpilogSlurmctld scripts. - New "--prefer" option to job submissions to allow for a "soft constraint" request to influence node selection. - Optional support for license planning in the backfill scheduler with "bf_licenses" option in SchedulerParameters. - removed file slurm-2.4.4-init.patch as sysvinit is now realy deprecated - removed file load-pmix-major-version.patch as fixed upstream - set environment variable SUSE_ZNOW to 0 in %build to avoid module load failures due to unresolved symbols as module take advantage of lazy bindings (bsc#1200030).- Add a comment about the CommunicationParameters=block_null_hash option warning users who migrate - just in case.- Update to 21.08.8 which fixes CVE-2022-29500 (bsc#1199278), CVE-2022-29501 (bsc#1199279), and CVE-2022-29502 (bsc#1199281). - Added 'CommunicationParameters=block_null_hash' to slurm.conf, please add this parameter to existing configurations.- Update to 21.08.7 with following changes: * openapi/v0.0.37 - correct calculation for bf_queue_len_mean in /diag. * Avoid shrinking a reservation when overlapping with downed nodes. * Only check TRES limits against current usage for TRES requested by the job. * Do not allocate shared gres (MPS) in whole-node allocations * Constrain slurmstepd to job/step cgroup like in previous versions of Slurm. * Fix warnings on 32-bit compilers related to printf() formats. * Fix reconfigure issues after disabling/reenabling the GANG PreemptMode. * Fix race condition where a cgroup was being deleted while another step was creating it. * Set the slurmd port correctly if multi-slurmd * Fix FAIL mail not being sent if a job was cancelled due to preemption. * slurmrestd - move debug logs for HTTP handling to be gated by debugflag NETWORK to avoid unnecessary logging of communication contents. * Fix issue with bad memory access when shrinking running steps. * Fix various issues with internal job accounting with GRES when jobs are shrunk. * Fix ipmi polling on slurmd reconfig or restart. * Fix srun crash when reserved ports are being used and het step fails to launch. * openapi/dbv0.0.37 - fix DELETE execution path on /user/{user_name}. * slurmctld - Properly requeue all components of a het job if PrologSlurmctld fails. * rlimits - remove final calls to limit nofiles to 4096 but to instead use the max possible nofiles in slurmd and slurmdbd. * Allow the DBD agent to load large messages (up to MAX_BUF_SIZE) from state. * Fix potential deadlock during slurmctld restart when there is a completing job. * slurmstepd - reduce user requested soft rlimits when they are above max hard rlimits to avoid rlimit request being completely ignored and processes using default limits. * Fix Slurm user commands displaying available features as active features when no features were active. * Don't power down nodes that are rebooting. * Clear pending node reboot on power down request. * Ignore node registrations while node is powering down. * Don't reboot any node that is power down. * Don't allow a node to reboot if it's marked for power down. * Fix issuing reboot and downing when rebooting a powering up node. * Clear DRAIN on node after failing to resume before ResumeTimeout. * Prevent repeating power down if node fails to resume before ResumeTimeout. * Fix federated cloud node communication with srun and cloud_dns. * Fix jobs being scheduled on nodes marked to be powered_down when idle. * Fix problem where a privileged user could not view array tasks specified by _ when PrivateData had the jobs value set. - Changes in Slurm 21.08.6 * Fix plugin_name definitions in a number of plugins to improve logging. * Close sbcast file transfers when job is cancelled. * scrontab - fix handling of --gpus and --ntasks-per-gpu options. * sched/backfill - fix job_queue_rec_t memory leak. * Fix magnetic reservation logic in both main and backfill schedulers. * job_container/tmpfs - fix memory leak when using InitScript. * slurmrestd / openapi - fix memory leaks. * Fix slurmctld segfault due to job array resv_list double free. * Fix multi-reservation job testing logic. * Fix slurmctld segfault due to insufficient job reservation parse validation. * Fix main and backfill schedulers handling for already rejected job array. * sched/backfill - restore resv_ptr after yielding locks. * acct_gather_energy/xcc - appropriately close and destroy the IPMI context. * Protect slurmstepd from making multiple calls to the cleanup logic. * Prevent slurmstepd segfault at cleanup time in mpi_fini(). * Fix slurmctld sometimes hanging if shutdown while PrologSlurmctld or EpilogSlurmctld were running and PrologEpilogTimeout is set in slurm.conf. * Fix affinity of the batch step if batch host is different than the first node in the allocation. * slurmdbd - fix segfault after multiple failover/failback operations. * Fix jobcomp filetxt job selection condition. * Fix -f flag of sacct not being used. * Select cores for job steps according to the socket distribution. Previously, sockets were always filled before selecting cores from the next socket. * Keep node in Future state if epilog completes while in Future state. * Fix erroneous --constraint behavior by preventing multiple sets of brackets. * Make ResetAccrueTime update the job's accrue_time to now. * Fix sattach initialization with configless mode. * Revert packing limit checks affecting pmi2. * sacct - fixed assertion failure when using -c option and a federation display * Fix issue that allowed steps to overallocate the job's memory. * Fix the sanity check mode of AutoDetect so that it actually works. * Fix deallocated nodes that didn't actually launch a job from waiting for Epilogslurmctld to complete before clearing completing node's state. * Job should be in a completing state if EpilogSlurmctld when being requeued. * Fix job not being requeued properly if all node epilog's completed before EpilogSlurmctld finished. * Keep job completing until EpilogSlurmctld is completed even when "downing" a node. * Fix handling reboot with multiple job features. * Fix nodes getting powered down when creating new partitions. * Fix bad bit_realloc which potentially could lead to bad memory access. * slurmctld - remove limit on the number of open files. * Fix bug where job_state file of size above 2GB wasn't saved without any error message. * Fix various issues with no_consume gres. * Fix regression in 21.08.0rc1 where job steps failed to launch on systems that reserved a CPU in a cgroup outside of Slurm (for example, on systems with WekaIO). * Fix OverTimeLimit not being reset on scontrol reconfigure when it is removed from slurm.conf. * serializer/yaml - use dynamic buffer to allow creation of YAML outputs larger than 1MiB. * Fix minor memory leak affecting openapi users at process termination. * Fix batch jobs not resolving the username when nss_slurm is enabled. * slurmrestd - Avoid slurmrestd ignoring invalid HTTP method if the response serialized without error. * openapi/dbv0.0.37 - Correct conditional that caused the diag output to give an internal server error status on success. * Make --mem-bind=sort work with task_affinity * Fix sacctmgr to set MaxJobsAccruePer{User|Account} and MinPrioThres in sacctmgr add qos, modify already worked correctly. * job_container/tmpfs - avoid printing extraneous error messages in Prolog and Epilog, and when the job completes. * Fix step CPU memory allocation with --threads-per-core without --exact. * Remove implicit --exact when --threads-per-core or --hint=nomultithread is used. * Do not allow a step to request more threads per core than the allocation did. * Remove implicit --exact when --cpus-per-task is used.- update to 21.08.5 with following changes: * Fix issue where typeless GRES node updates were not immediately reflected. * Fix setting the default scrontab job working directory so that it's the home of the different user (*u ) and not that of root or SlurmUser editor. * Fix stepd not respecting SlurmdSyslogDebug. * Fix concurrency issue with squeue. * Fix job start time not being reset after launch when job is packed onto already booting node. * Fix updating SLURM_NODE_ALIASES for jobs packed onto powering up nodes. * Cray - Fix issues with starting hetjobs. * auth/jwks - Print fatal() message when jwks is configured but file could not be opened. * If sacctmgr has an association with an unknown qos as the default qos print 'UNKN*###' instead of leaving a blank name. * Correctly determine task count when giving --cpus-per-gpu, --gpus and * -ntasks-per-node without task count. * slurmctld - Fix places where the global last_job_update was not being set to the time of update when a job's reason and description were updated. * slurmctld - Fix case where a job submitted with more than one partition would not have its reason updated while waiting to start. * Fix memory leak in node feature rebooting. * Fix time limit permanetly set to 1 minute by backfill for job array tasks higher than the first with QOS NoReserve flag and PreemptMode configured. * Fix sacct -N to show jobs that started in the current second * Fix issue on running steps where both SLURM_NTASKS_PER_TRES and SLURM_NTASKS_PER_GPU are set. * Handle oversubscription request correctly when also requesting * -ntasks-per-tres. * Correctly detect when a step requests bad gres inside an allocation. * slurmstepd - Correct possible deadlock when UnkillableStepTimeout triggers. * srun - use maximum number of open files while handling job I/O. * Fix writing to Xauthority files on root_squash NFS exports, which was preventing X11 forwarding from completing setup. * Fix regression in 21.08.0rc1 that broke --gres=none. * Fix srun --cpus-per-task and --threads-per-core not implicitly setting * -exact. It was meant to work this way in 21.08. * Fix regression in 21.08.0 that broke dynamic future nodes. * Fix dynamic future nodes remembering active state on restart. * Fix powered down nodes getting stuck in COMPLETING+POWERED_DOWN when job is cancelled before nodes are powering up.- updated to 21.08.4 which fixes (CVE-2021-43337) which is only present in 21.08 tree. * CVE-2021-43337: For sites using the new AccountingStoreFlags=job_script and/or job_env options, an issue was reported with the access control rules in SlurmDBD that will permit users to request job scripts and environment files that they should not have access to. (Scripts/environments are meant to only be accessible by user accounts with administrator privileges, by account coordinators for jobs submitted under their account, and by the user themselves.) - changes from 21.08.3: * This includes a number of fixes since the last release a month ago, including one critical fix to prevent a communication issue between slurmctld and slurmdbd for sites that have started using the new AccountingStoreFlags=job_script functionality.- Utilize sysuser infrastructure to set user/group slurm. For munge authentication slurm should have a fixed UID across all nodes including the management server. Set it to 120 - Limit firewalld service definitions to SUSE versions >= 15.- added service definitions for firewalld (JSC#SLE-22741)- update to 21.08.2 - major change: * removed of support of the TaskAffinity=yes option in cgroup.conf. Please consider using "TaskPlugins=cgroup,affinity" in slurm.conf as an option. - minor changes and bugfixes: * slurmctld - fix how the max number of cores on a node in a partition are calculated when the partition contains multi*socket nodes. This in turn corrects certain jobs node count estimations displayed client*side. * job_submit/cray_aries - fix "craynetwork" GRES specification after changes introduced in 21.08.0rc1 that made TRES always have a type prefix. * Ignore nonsensical check in the slurmd for [Pro|Epi]logSlurmctld. * Fix writing to stderr/syslog when systemd runs slurmctld in the foreground. * Fix issue with updating job started with node range. * Fix issue with nodes not clearing state in the database when the slurmctld is started with clean*start. * Fix hetjob components > 1 timing out due to InactiveLimit. * Fix sprio printing -nan for normalized association priority if PriorityWeightAssoc was not defined. * Disallow FirstJobId=0. * Preserve job start info in the database for a requeued job that hadn't registered the first time in the database yet. * Only send one message on prolog failure from the slurmd. * Remove support for TaskAffinity=yes in cgroup.conf. * accounting_storage/mysql - fix issue where querying jobs via sacct * -whole-hetjob=yes or slurmrestd (which automatically includes this flag) could in some cases return more records than expected. * Fix issue for preemption of job array task that makes afterok dependency fail. Additionally, send emails when requeueing happens due to preemption. * Fix sending requeue mail type. * Properly resize a job's GRES bitmaps and counts when resizing the job. * Fix node being able to transition to CLOUD state from non-cloud state. * Fix regression introduced in 21.08.0rc1 which broke a step's ability to inherit GRES from the job when the step didn't request GRES but the job did. * Fix errors in logic when picking nodes based on bracketed anded constraints. This also enforces the requirement to have a count when using such constraints. * Handle job resize better in the database. * Exclude currently running, resized jobs from the runaway jobs list. * Make it possible to shrink a job more than once.- moved pam module from /lib64 to /usr/lib64 which fixes boo#1191095 via the macro %_pam_moduledir- updated to 21.08.1 with following bug fixes: * Fix potential memory leak if a problem happens while allocating GRES for a job. * If an overallocation of GRES happens terminate the creation of a job. * AutoDetect=nvml: Fatal if no devices found in MIG mode. * Print federation and cluster sacctmgr error messages to stderr. * Fix off by one error in --gpu-bind=mask_gpu. * Add --gpu-bind=none to disable gpu binding when using --gpus-per-task. * Handle the burst buffer state "alloc-revoke" which previously would not display in the job correctly. * Fix issue in the slurmstepd SPANK prolog/epilog handler where configuration values were used before being initialized. * Restore a step's ability to utilize all of an allocations memory if --mem=0. * Fix --cpu-bind=verbose garbage taskid. * Fix cgroup task affinity issues from garbage taskid info. * Make gres_job_state_validate() client logging behavior as before 44466a4641. * Fix steps with --hint overriding an allocation with --threads-per-core. * Require requesting a GPU if --mem-per-gpu is requested. * Return error early if a job is requesting --ntasks-per-gpu and no gpus or task count. * Properly clear out pending step if unavailable to run with available resources. * Kill all processes spawned by burst_buffer.lua including decendents. * openapi/v0.0.{35,36,37} - Avoid setting default values of min_cpus, job name, cwd, mail_type, and contiguous on job update. * openapi/v0.0.{35,36,37} - Clear user hold on job update if hold=false. * Prevent CRON_JOB flag from being cleared when loading job state. * sacctmgr - Fix deleting WCKeys when not specifying a cluster. * Fix getting memory for a step when the first node in the step isn't the first node in the allocation. * Make SelectTypeParameters=CR_Core_Memory default for cons_tres and cons_res. * Correctly handle mutex unlocks in the gres code if failures happen. * Give better error message if -m plane is given with no size. * Fix --distribution=arbitrary for salloc. * Fix jobcomp/script regression introduced in 21.08.0rc1 0c75b9ac9d. * Only send the batch node in the step_hostlist in the job credential. * When setting affinity for the batch step don't assume the batch host is node 0. * In task/affinity better checking for node existence when laying out affinity. * slurmrestd - fix job submission with auth/jwt. - removed Fix-statement-condition-in-netloc-autoconf-macro.patch issue was fixed upstream- Fix-statement-condition-in-netloc-autoconf-macro.patch: Fix netloc check, reestablish netloc disable code. - Make configure arg '--with-pmix' conditional. - Move openapi plugins to package slurm-restd.- updated to 21.08.0, major changes: * A new "AccountingStoreFlags=job_script" option to store the job scripts directly in SlurmDBD. * Added "sacct -o SubmitLine" format option to get the submit line of a job/step. * Changes to the node state management so that nodes are marked as PLANNED instead of IDLE if the scheduler is still accumulating resources while waiting to launch a job on them. * RS256 token support in auth/jwt. * Overhaul of the cgroup subsystems to simplify operation, mitigate a number of inherent race conditions, and prepare for future cgroup v2 support. * Further improvements to cloud node power state management. * A new child process of the Slurm controller called "slurmscriptd" responsible for executing PrologSlurmctld and EpilogSlurmctld scripts, which significantly reduces performance issues associated with enabling those options. * A new burst_buffer/lua plugin allowing for site-specific asynchronous job data management. * Fixes to the job_container/tmpfs plugin to allow the slurmd process to be restarted while the job is running without issue. * Added json/yaml output to sacct, squeue, and sinfo commands. * Added a new node_features/helpers plugin to provide a generic way to change settings on a compute node across a reboot. * Added support for automatically detecting and broadcasting shared libraries for an executable launched with "srun --bcast". * Added initial OCI container execution support with a new --container option to sbatch and srun. * Improved "configless" support by allowing multiple control servers to be specified through the slurmd --conf-server option, and send additional configuration files at startup including cli_filter.lua. - minor changes: * If an overallocation of GRES happens terminate the creation of a job. * AutoDetect=nvml: Fatal if no devices found in MIG mode. * Print federation and cluster sacctmgr error messages to stderr. * Add --gpu-bind=none to disable gpu binding when using --gpus-per-task. * Handle the burst buffer state "alloc-revoke" which previously would not display in the job correctly. * Fix issue in the slurmstepd SPANK prolog/epilog handler where configuration values were used before being initialized. * Restored --gpu-bind=single: to check core affinity like * -gpu-bind=closest does. This removal of this behavior only was in rc2. * slurmd - Fix assert failure on initialization due to bad node name. * Fix error codes in cgroup/v1. * Don't destroy the memory step outside fini, which leads to a double destroy causing an error message. * Add support for lua 5.4. * Force cgroup.clone_children to 0 in slurm cgroup directories. This caused issues in task cpuset plugin in systems with it enabled by default. * Clear GRES HAS_TYPE flag when removing type name. * Environment flags in gres.conf now override flags set by AutoDetect. * Environment flags in gres.conf now apply to subsequent gres.conf lines where Environment flags are not set. * Set missing job_uid and job_gid members when preparing a kill_job_msg_t in abort_job_on_node(), abort_job_on_nodes() and kill_job_on_node(). * Fix swappiness not being set in cgroups. * Fix coordinators for new subaccounts. * Fix coordinators when adding existing users with PrivateData=users. * slurmctld - do not attempt to relinquish control to self. * openapi/v0.0.37 - Honor kill_on_invalid_dependency as job parameter. * Check max_gres when doing step allocation, fix for regression in rc2. * SPANK plugins are now required to match the current Slurm version, and must be recompiled for each new Slurm release. * node_features/helpers - add ExecTime configuration option. * srun - Fix force termination with -X. * On slurmctld restart set node typed GRES counts correctly. * Fix places where a step wasn't allocated in the slurmctld but wasn't ever removed from the job. * Fix step allocation memory when using --threads-per-core. * Fix step allocations to consume all threads on a core when using threads-per-core. * Add check to validate cpu request on a step if --threads-per-core is given and it is less than what the core on the node has in the allocation. * Fix issue where a step could request more gres than the job had and the step would hang forever. This bug was only introduced in 21.08.0rc2. * Only print \r\n for logging messages on stderr when --pty has been explicitly requested. * Relax check on SPANK plugins to only require Slurm major + minor versions to match. * job_container/tmpfs - delegate handling of /dev/shm to the extern step so new step launches will be attached correctly even after the slurmd process has been restarted. * Limit the wait time in proctrack_g_wait() to UnkillableStepTimeout instead of a hardcoded value of 256 seconds, and limit the delay between tests to a maximum of 32 seconds. * fatal() on start if using job_container/tmpfs without PrologFlags=Contian. * Load bf_when_last_cycle from job state only if protocol version >= 21.08. * Docs - remove man3 section entirely. * Set step memory when using MemPerGPU or DefMemPerGPU. Previously a step's memory was not set even when it requested *-mem-per-gpu and at least one GPU. * Add cli_filter.lua support in configless mode. * Check that the step requests at least as many gres as nodes. * Make job's SLURM_JOB_GPUS print global GPU IDs instead of MIG unique_ids. * Fix miscounting of GPU envs in prolog/epilog if MultipleFiles was used. * Support MIGs in prolog/epilog's CUDA_VISIBLE_DEVICES & co. * Add SLURM_JOB_GPUS back into Prolog; add it to Epilog. * Fix issue where the original executable, not the bcast'd version, was executed with 'srun *-bcast'. * sacct - print '-' header correctly for fields over 53-characters wide. * openapi/dbv0.0.37 - replace "REST" with "Slurm OpenAPI" for plugin_name. * openapi/v0.0.37 - replace "REST" with "Slurm OpenAPI" for plugin_name. * configless - fix segfault on 'scontrol reconfigure'. * Use FREE_NULL_LIST instead of list_destroy. * If we made are running an interactive session we need to force track_steps. * Disable OPOST flag when using --pty to avoid issues with Emac. * Fix issue where extra bonus core was allocated in some situations. * Avoid putting gres with count of 0 on a TRES req/alloc. * Fix memory in requested TRES when --mem-per-gpu is used. * Changed ReqMem field in sacct to match memory from ReqTRES. * Changed --gpu-bind=single: to no longer check core affinity like * -gpu-bind=closest does. This consequently affects --ntasks-per-gpu. * slurmrestd - add v0.0.37 OpenAPI plugin. * slurmrestd/v0.0.37 - rename standard_in -> standard_input. * slurmrestd/v0.0.37 - rename standard_out -> standard_output. * Changed the --format handling for negative field widths (left justified) to apply to the column headers as well as the printed fields. * Add LimitFactor to the QOS. A float that is factored into an associations [Grp|Max]TRES limits. For example, if the LimitFactor is 2, then an association with a GrpTRES of 30 CPUs, would be allowed to allocate 60 CPUs when running under this QOS. * slurmrestd - Pass SLURM_NO_CHANGE_IN_DATA to client as 403 (Not Modified). * slurmrestd/v0.0.37 - Add update_time field to Jobs query to allow clients to only get jobs list based on change timestamp. * Reset job eligible time when job is manually held. * Add DEBUG_FLAG_JAG to improve logging related to job account gathering. * Convert logging in account_gather/common to DEBUG_FLAG_JAG. * Add more logging for jag_common_poll_data() when prec_extra() called. * slurmrestd/v0.0.37 - add API to fetch reservation(s) info. * Catch more errors in task/cgroup initalization and cleanup to avoid allowing jobs to start when cgroups failure to configure correctly. * Fix cgroup ns detection when using containers (e.g. LXC or Docker). * Reset job's next_step_id counter to 0 after being requeued. * Make scontrol exit with non-zero status after failing to delete a partition or reservation. * Make NtasksPerTRES optional in slurm_sprint_job_info(). * slurmrestd/v0.0.37 - Add update_time field to nodes query to allow clients to only get nodes list based on change timestamp. * common/parse_config - catch and propagate return codes when handling a match on a key-value pattern. This implies error codes detected in the handlers are now not ignored and users of _handle_keyvalue_match() can fatal(). * common/hostlist - fix hostlist_delete_nth() xassert() upper bound check. * API change: Removed slurm_kill_job_msg and modified the function signature for slurm_kill_job2. slurm_kill_job2 should be used instead of slurm_kill_job_msg. * Fix non-zero exit code for scontrol ping when all controllers are down. * Enforce a valid configuration for AccountingStorageEnforce in slurm.conf. If the configuration is invalid, then an error message will be printed and the command or daemon (including slurmctld) will not run. * slurmrestd/v0.0.37 - Add update_time field to partitions/reservations query to allow clients to only get the entities list when something changed. * slurmdbd.service - add "After" relationship to all common names for MariaDB to reduce startup delays. * slurmrestd/v0.0.37 - Correct displaying node states that are UNKNOWN. * slurmrestd/v0.0.37 - Add flags to node states. * Fix first job on fresh cluster not being assigned JobId=1 (or FirstJobId). * squeue - make it so --nodelist is sensitive to --clusters. * squeue - do --nodelist node validation in the same order as listing. * Removed AccountingStoreJobComment option. Please update your config to use AccountingStoreFlags=job_comment instead. * AccountingStoreFlags=job_script allows you to store the job's batch script. * AccountingStoreFlags=job_env allows you to store the job's env vars. * Add sacct -o SubmitLine to get the submit line of a job/step. * Removed DefaultStorage{Host,Loc,Pass,Port,Type,User} options. * Fix NtasksPerTRES delimiter from : to = in scontrol show job output. * Removed CacheGroups, CheckpointType, JobCheckpointDir, MemLimitEnforce, SchedulerPort, SchedulerRootFilter options. * Make job accounting queries use consistent timeframes with and w/o jobs. * --cpus-per-task and --threads-per-core now imply --exact. This fixes issues where steps would be allocated the wrong number of CPUs. * configure: the --with option handling has been made consistent across the various optional libraries. Specifying *-with-foo=/path/to/foo will only check that directory for the applicable library (rather than, in some cases, falling back to the default directories), and will always error the build if the library is not found (instead of a mix of error messages and non- fatal warning messages). * configure: replace --with-rmsi_dir option with proper handling for * -with-rsmi=dir. * Pass additional job environment variables to MailProg. * Add SLURM_JOB_WORK_DIR to Prolog, Epilog. * Removed sched/hold plugin. * Fix srun overwriting SLURM_SUBMIT_DIR and SLURM_SUBMIT_HOST when within an existing allocation. * step_ctx code has been removed from the api. * cli_filter/lua, jobcomp/lua, job_submit/lua now load their scripts from the same directory as the slurm.conf file (and thus now will respect changes to the SLURM_CONF environment variable). * SPANK - call slurm_spank_init if defined without slurm_spank_slurmd_exit in slurmd context. * job_container/tmpfs - Remove need for .active file to allow salloc without an interactive step to work. * slurmd - Delay background node registration on every failure up to 128s on startup. * slurmctld - Always notify slurmd that node registration was accepted to avoid slurmd needless attempting to re-register if there is configuration issue. * Put node into "INVAL" state upon registering with an invalid node configuration. Node must register with a valid configuration to continue. * Make --cpu-bind=threads default for --threads-per-core -- cli and env can override. * jobcomp/elasticsearch - Use data_t to serialize data. The plugin now has the JSON-C library as a prerequisite. * scrontab - create the temporary file under the TMPDIR environment variable (if set), otherwise continue to use TmpFS as configured in slurm.conf. * Add LastBusyTime to "scontrol show nodes" and slurmrestd nodes output, which represents the time the node last had jobs on it. * slurmd - allow multiple comma-separated controllers to be specified in configless mode with *-conf-server * sacctmgr - changed column headings to "ParentID" and "ParentName" instead of "Par ID" and "Par Name" respectively. * Perl API - make sure man pages are installed under the --prefix given to configure. * Manually powering down of nodes with scontrol now ignores SuspendExc. * SALLOC_THREADS_PER_CORE and SBATCH_THREADS_PER_CORE have been added as input environment variables for salloc and sbatch, respectively. They do the same thing as *-threads-per-core. * Distinguish queued reboot requests (REBOOT) from issued reboots (REBOOT^). * Set the maximum number of open files per process to 4096 to avoid performance issues when closing the entire range with closeall(). * auth/jwt - add support for RS256 tokens. * Relax reservation purge due to any invalid uid after creation time. * Reject srun that requests both --exclusive and --overlap. * service files - change dependency to network-online rather than just network to ensure DNS and other services are available. * RSMI: Fix incorrect PCI BDF bits. * plugins/cli_filter - Convert to using data_t to serialize JSON. * Fix testing array job after regaining locks in backfill. * Don't display node's comment with "scontrol show nodes" unless set. * Add "Extra" field to node to store extra information other than a comment. * scrontab - Use /tmp instead of TmpFS if TMPDIR is not set. * Add ResumeTimeout, SuspendTimeout and SuspendTime to Partitions. * sreport - change to sorting TopUsage by the --tres option. * slurmrestd - do not run allow operation as SlurmUser/root by default. * Allow map_cpu and mask_cpu for non-whole node allocation. * TaskPluginParam=verbose is now treated as a default. Previously it would be applied regardless of the job specifying a *-cpu-bind. * Add "node_reg_mem_percent" SlurmctldParameter to define percentage of memory nodes are allowed to register with. * Show correct number of SocketsPerBoard in slurmd -C with hwloc2. * Alter sreport's cluster utilization report column name from 'Reserved' to 'Planned' to match the nomenclature of the 'Planned' node. * Add StateComplete format option to sinfo to show base_state+flags. * "scontrol show node" now shows State as base_state+flags instead of shortened state with flags appended. eg. IDLE# *> IDLE+POWERING_UP. Also "POWER" state flag string is "POWERED_DOWN". * slurmd/req - add missing job_env_t's het_job_id initialization off the request in _rpc_{abort,terminate}_job(). This caused problems for Native Cray builds when joining a CNCU job_container plugin with Epilog configured. * Fix joining a CNCU job_container on a Native Cray build before executing the UnkillableStepProgram for a HetJob step. * slurmrestd/v0.0.35 - Plugin has been tagged as deprecated. * srun - Job steps requiring more cores than available to be rejected unless '--overlap' is specificed. * Add bf_node_space_size to SchedulerParameters. * Add scontrol update node state=POWER_DOWN_FORCE and POWER_DOWN_ASAP as new ways to power off and reset especially CLOUD nodes. * Define and separate node power state transitions. Previously a powering down node was in both states, POWERING_OFF and POWERED_OFF. These are now separated. * Create a new process called slurmscriptd which runs PrologSlurmctld and EpilogSlurmctld. This avoids fork() calls from slurmctld, and can avoid performance issues if the slurmctld has a large memory footprint. * Added new Script option to DebugFlags for debugging slurmscriptd. * scrontab - add ability to update crontab from a file or standard input. * scrontab - add ability to set and expand variables. * Pass JSON of job to node mappings to ResumeProgram. * If running steps in an allocation with CR_PACK_NODE or -mpack the srun will only attempt to allocate as much as needed from the allocation instead of always trying to allocate every node in the allocation. * Jobs that request the whole node now check to see if any gres are allocated. * Rename SbcastParameters to BcastParameters. * Make srun sensitive to BcastParameters. * RSMI: Add gres_links_create_empty() and preserve RSMI enumeration order. * GPUs: Use index instead of dev_num for CUDA_VISIBLE_DEVICES * Don't run epilog on nodes if job never launched. * QOS accrue limits only apply to the job QOS, not partition QOS. * Add --gpu-bind=per_task: option, --gpus-per-task will now set this option by default. * Treat any return code from SPANK plugin that is not SLURM_SUCCESS to be an error or rejection. * Print the statistics for extern step adopted processes in sstat. * Fix SLURM_NODE_ALIASES to work for ipv6 node addrs. * Add support for automatically detecting and broadcasting executable shared object dependencies for sbcast and srun *-bcast.- Updated to 20.11.8: * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs. * Correct the error given when auth plugin fails to pack a credential. * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path(). * acct_gather_filesystem/lustre - only emit collection error once per step. * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the interactive step, the same as is done for the batch step. * Fix various potential deadlocks when altering objects in the database dealing with every cluster in the database. * slurmrestd: - handle slurmdbd connection failures without segfaulting. - fix segfault for searches in slurmdb/v0.0.36/jobs. - remove (non-functioning) users query parameter for slurmdb/v0.0.36/jobs from openapi.json - fix segfault in slurmrestd db/jobs with numeric queries - add argv handling for job/submit endpoint. - add description for slurmdb/job endpoint. * slurmrestd/dbv0.0.36: - Fix values dumped in job state/current and job step state. - Correct description for previous state property. * srun: - fix broken node step allocation in a heterogeneous allocation. - leave SLURM_DIST_UNKNOWN as default for --interactive. * Fail step creation if -n is not multiple of --ntasks-per-gpu. * job_container/tmpfs - Fix slowdown on teardown. * Fix problem with SlurmctldProlog where requeued jobs would never launch. * job_container/tmpfs - Fix issue when restarting slurmd where the namespace mount points could disappear. * sacct: - avoid truncating JobId at 34 characters. - fix segfault when printing StepId (or when using --long). * scancel - fix segfault when --wckey filtering option is used. * select/cons_tres - Fix memory leak. * Prevent file descriptor leak in job_container/tmpfs on slurmd restart. * perlapi/libslurmdb - expose tres_req_str to job hash. * scrontab - close and reopen temporary crontab file to deal with editors that do not change the original file, but instead write out then rename a new file. * sstat - fix linking so that it will work when --without-shared-libslurm was used to build Slurm. * Clear allocated cpus for running steps in a job before handling requested nodes on new step. * Don't reject a step if not enough nodes are available. Instead, defer the step until enough nodes are available to satisfy the request. * Don't reject a step if it requests at least one specific node that is already allocated to another step. Instead, defer the step until the requested node(s) become available. * Better handling of --mem=0. * Ignore DefCpuPerGpu when --cpus-per-task given.- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024) - New features in 20.11.7: * slurmd - handle configless failures gracefully instead of hanging indefinitely. * select/cons_tres - fix Dragonfly topology not selecting nodes in the same leaf switch when it should as well as requests with *-switches option. * Fix issue where certain step requests wouldn't run if the first node in the job allocation was full and there were idle resources on other nodes in the job allocation. * Fix deadlock issue with Slurmctld. * torque/qstat - fix printf error message in output. * When adding associations or wckeys avoid checking multiple times a user or cluster name. * Fix wrong jobacctgather information on a step on multiple nodes due to timeouts sending its the information gathered on its node. * Fix missing xstrdup which could result in slurmctld segfault on array jobs. * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always prepending SPANK_ to all user-set environment variables. CVE-2021-31215. - New features in 20.11.6: * Fix sacct assert with the --qos option. * Use pkg-config --atleast-version instead of --modversion for systemd. * common/fd - fix getsockopt() call in fd_get_socket_error(). * Properly handle the return from fd_get_socket_error() in _conn_readable(). * cons_res - Fix issue where running jobs were not taken into consideration when creating a reservation. * Avoid a deadlock between job_list for_each and assoc QOS_LOCK. * Fix TRESRunMins usage for partition qos on restart/reconfig. * Fix printing of number of tasks on a completed job that didn't request tasks. * Fix updating GrpTRESRunMins when decrementing job time is bigger than it. * Make it so we handle multithreaded allocations correctly when doing - -exclusive or --core-spec allocations. * Fix incorrect round-up division in _pick_step_cores * Use appropriate math to adjust cpu counts when --ntasks-per-core=1. * cons_tres - Fix consideration of power downed nodes. * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with gpus-per-task * cpus-per-gpu. * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set. * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK. * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t. * Recover state of burst buffers when slurmctld is restarted to avoid skipping burst buffer stages. * Fix race condition in burst buffer plugin which caused a burst buffer in stage-in to not get state saved if slurmctld stopped. * auth/jwt - print an error if jwt_file= has not been set in slurmdbd. * Fix RESV_DEL_HOLD not being a valid state when using squeue --states. * Add missing squeue selectable states in valid states error message. * Fix scheduling last array task multiple times on error, causing segfault. * Fix issue where a step could be allocated more memory than the job when dealing with --mem-per-cpu and --threads-per-core. * Fix removing qos from assoc with -= can lead to assoc with no qos * auth/jwt - fix segfault on invalid credential in slurmdbd due to missing validate_slurm_user() function in context. * Fix single Port= not being applied to range of nodes in slurm.conf * Fix Jobs not requesting a tres are not starting because of that tres limit. * acct_gather_energy/rapl - fix AveWatts calculation. * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on running jobs.- Ship REST API version and auth plugins with slurmrestd. - Add YAML support for REST API to build (bsc#1185603).- Udpate to 20.11.5: - New features: * New job_container/tmpfs plugin developed by NERSC that can be used to create per-job filesystem namespaces. Documentaiion and configuration can be found in the respecting man page. - Bug fixes: * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters. * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times. * scrontab - fix to return the correct index for a bad #SCRON option. * scrontab - fix memory leak when invalid option found in #SCRON line. * Add errno for when a user requests multiple partitions and they are using partition based associations. * Fix issue where a job could run in a wrong partition when using EnforcePartLimits=any and partition based associations. * Remove possible deadlock when adding associations/wckeys in multiple threads. * When using PrologFlags=alloc make sure the correct Slurm version is set in the credential. * When sending a job a warning signal make sure we always send SIGCONT beforehand. * Fix issue where a batch job would continue running if a prolog failed on a node that wasn't the batch host and requeuing was disabled. * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog failure in the job's stdout. * Requeue or kill job on a prolog failure when PrologFlags is not set. * Fix race condition causing node reboots to get requeued before ResumeTimeout expires. * Preserve node boot_req_time on reconfigure. * Preserve node power_save_req_time on reconfigure. * Fix node reboots being queued and issued multiple times and preventing the reboot to time out. * Fix run_command to exit correctly if track_script kills the calling thread. * Only requeue a job when the PrologSlurmctld returns nonzero. * When a job is signaled with SIGKILL make sure we flush all prologs/setup scripts. * Handle burst buffer scripts if the job is canceled while stage_in is happening. * When shutting down the slurmctld make note to ignore error message when we have to kill a prolog/setup script we are tracking. * scrontab - add support for the --open-mode option. * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup has not completed successfully. * Reduce delay in starting salloc allocations when running with prologs. * Alter AllocNodes check to work if the allocating node's domain doesn't match the slurmctld's. This restores the pre*20.11 behavior. * Fix slurmctld segfault if jobs from a prior version had the now-removed INVALID_DEPEND state flag set and were allowed to run in 20.11. * Add job_container/tmpfs plugin to give a method to provide a private /tmp per job. * Set the correct core affinity when using AutoDetect. * slurmrestd - mark "environment" as required for job submissions in schema.- Udpate to 20.11.04 * Fix node selection for advanced reservations with features. * mpi/pmix: Handle pipe failure better when using ucx. * mpi/pmix: include PMIX_NODEID for each process entry. * Fix job getting rejected after being requeued on same node that died. * job_submit/lua - add "network" field. * Fix situations when a reoccuring reservation could erroneously skip a period. * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations. * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY. * Fix scheduling issue with --gpus. * Fix gpu allocations that request --cpus-per-task. * mpi/pmix: fixed print messages for all PMIXP_* macros * Add mapping for XCPU to --signal option. * Fix regression in 20.11 that prevented a full pass of the main scheduler from ever executing. * Work around a glibc bug in which "0" is incorrectly printed as "nan" which will result in corrupted association state on restart. * Fix regression in 20.11 which made slurmd incorrectly attempt to find the parent slurmd address when not applicable and send incorrect reverse*tree info to the slurmstepd. * Fix cgroup ns detection when using containers (e.g. LXC or Docker). * scrontab - change temporary file handling to work with emacs. - Removed check-for-lipmix.so.MAJOR.patch - Added: load-pmix-major-version.patch- Update to 20.11.03 - This release includes a major functional change to how job step launch is handled compared to the previous 20.11 releases. This affects srun as well as MPI stacks - such as Open MPI - which may use srun internally as part of the process launch. One of the changes made in the Slurm 20.11 release was to the semantics for job steps launched through the 'srun' command. This also inadvertently impacts many MPI releases that use srun underneath their own mpiexec/mpirun command. For 20.11.{0,1,2} releases, the default behavior for srun was changed such that each step was allocated exactly what was requested by the options given to srun, and did not have access to all resources assigned to the job on the node by default. This change was equivalent to Slurm setting the --exclusive option by default on all job steps. Job steps desiring all resources on the node needed to explicitly request them through the new '--whole' option. In the 20.11.3 release, we have reverted to the 20.02 and older behavior of assigning all resources on a node to the job step by default. This reversion is a major behavioral change which we would not generally do on a maintenance release, but is being done in the interest of restoring compatibility with the large number of existing Open MPI (and other MPI flavors) and job scripts that exist in production, and to remove what has proven to be a significant hurdle in moving to the new release. Please note that one change to step launch remains - by default, in 20.11 steps are no longer permitted to overlap on the resources they have been assigned. If that behavior is desired, all steps must explicitly opt-in through the newly added '--overlap' option. Further details and a full explanation of the issue can be found at: https://bugs.schedmd.com/show_bug.cgi?id=10383#c63 - Other changes from 20.11.03 * Fix segfault when parsing bad "#SBATCH hetjob" directive. * Allow countless gpu:srun, sbatch->srun sequence. * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag. * Make it so srun --no-allocate works again. * jobacct_gather/linux - Don't count memory on tasks that have already finished. * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld. * jobacct_gather/common - Do not process jobacct's with same taskid when calling prec_extra. * Cleanup all tracked jobacct tasks when extern step child process finishes. * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list. * Fix regression causing task/affinity and task/cgroup to be out of sync when configured ThreadsPerCore is different than the physical threads per core. * Fix situation when --gpus is given but not max nodes (-N1-1) in a job allocation. * Interactive step - ignore cpu bind and mem bind options, and do not set the associated environment variables which lead to unexpected behavior from srun commands launched within the interactive step. * Handle exit code from pipe when using UCX with PMIx.- Fix fallout introduced by: "Replace '%service_del_postun -n' with '%service_del_postun_without_restart'" for older Leap/SLE versions.- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).- Add support for configuration files from external plugins. While built-in plugins have their configuration added in slurm.conf, external SPANK plugins add their configuration to plugstack.conf To allow packaging easily spank plugins, their configuration files should be added independently at /etc/spack/plugstack.conf.d and plugstack.conf should be left with an oneliner including all the files under /etc/spack/plugstack.conf.d- Update to 20.11.02 * Fix older versions of sacct not working with 20.11. * Fix slurmctld crash when using a pre-20.11 srun in a job allocation. * Correct logic problem in _validate_user_access. * Fix libpmi to initialize Slurm configuration correctly. - Update to 20.11.01 * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster utilization report. * Silence debug message about shutting down backup controllers if none are configured. * Don't create interactive srun until PrologSlurmctld is done. * Fix fd symlink path resolution. * Fix slurmctld segfault on subnode reservation restore after node configuration change. * Fix resource allocation response message environment allocation size. * Ensure that details->env_sup is NULL terminated. * select/cray_aries - Correctly remove jobs/steps from blades using NPC. * cons_tres - Avoid max_node_gres when entire node is allocated with - -ntasks-per-gpu. * Allow NULL arg to data_get_type(). * In sreport have usage for a reservation contain all jobs that ran in the reservation instead of just the ones that ran in the time specified. This matches the report for the reservation is not truncated for a time period. * Fix issue with sending wrong batch step id to a < 20.11 slurmd. * Add a job's alloc_node to lua for job modification and completion. * Fix regression getting a slurmdbd connection through the perl API. * Stop the extern step terminate monitor right after proctrack_g_wait(). * Fix removing the normalized priority of assocs. * slurmrestd/v0.0.36 - Use correct name for partition field: "min nodes per job" -"min_nodes_per_job". * slurmrestd/v0.0.36 - Add node comment field. * Fix regression marking cloud nodes as "unexpectedly rebooted" after multiple boots. * Fix slurmctld segfault in _slurm_rpc_job_step_create(). * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid the extended states all being reported as "invalid". * Fix race that can prevent the prolog for a requeued job from running. * cli_filter - add "type" to readily distinguish between the CLI command in use. * smail - reduce sleep before seff to 5 seconds. * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig. * Disable MySQL automatic reconnection. * Fix allowing "b" after memory unit suffixes. * Fix slurmctld segfault with reservations without licenses. * Due to internal restructuring ahead of the 20.11 release, applications calling libslurm MUST call slurm_init(NULL) before any API calls. Otherwise the API call is likely to fail due to libslurm's internal configuration not being available. * slurm.spec - allow custom paths for PMIx and UCX install locations. * Use rpath if enabled when testing for Mellanox's UCX libraries. * slurmrestd/dbv0.0.36 - Change user query for associations to optional. * slurmrestd/dbv0.0.36 - Change account query for associations to optional. * mpi/pmix - change the error handler error message to be more useful. * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}. * Perl API - fix issue when running in configless mode. * nss_slurm - avoid deadlock when stray sockets are found. * Display correct value for ScronParameters in 'scontrol show config'- Update to version 20.11.0 Slurm 20.11 includes a number of new features including: * Overhaul of the job step management and launch code, alongside improved GPU task placement support. * A new "Interactive Step" mode of operation for salloc. * A new "scrontab" command that can be used to submit and manage periodically repeating jobs. * IPv6 support. * Changes to the reservation logic, with new options allowing users to delete reservations, allowing admins to skip the next occurance of a repeated reservation, and allowing for a job to be submitted and eligible to run within multiple reservations. * Dynamic Future Nodes - automatically associate a dynamically provisioned (or "cloud") node against a NodeName definition with matching hardware. * An experimental new RPC queuing mode for slurmctld to reduce thread contention on heavily loaded clusters. * SlurmDBD integration with the Slurm REST API. Also check https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES- Updated to 20.02.6, addresses two security fixes: * PMIx - fix potential buffer overflows from use of unpackmem(). CVE-2020-27745 (bsc#1178890) * X11 forwarding - fix potential leak of the magic cookie when sent as an argument to the xauth command. CVE-2020-27746 (bsc#1178891) - And many other bugfixes, full log and details available at: * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html- Replace '%service_del_postun -n' with '%service_del_postun_without_restart' '-n' is deprecated and will be removed in the future.- Updated to 20.02.5, changes: * Fix leak of TRESRunMins when job time is changed with --time-min * pam_slurm - explicitly initialize slurm config to support configless mode. * scontrol - Fix exit code when creating/updating reservations with wrong Flags. * When a GRES has a no_consume flag, report 0 for allocated. * Fix cgroup cleanup by jobacct_gather/cgroup. * When creating reservations/jobs don't allow counts on a feature unless using an XOR. * Improve number of boards discovery * Fix updating a reservation NodeCnt on a zero-count reservation. * slurmrestd - provide an explicit error messages when PSK auth fails. * cons_tres - fix job requesting single gres per-node getting two or more nodes with less CPUs than requested per-task. * cons_tres - fix calculation of cores when using gres and cpus-per-task. * cons_tres - fix job not getting access to socket without GPU or with less than --gpus-per-socket when not enough cpus available on required socket and not using --gres-flags=enforce binding. * Fix HDF5 type version build error. * Fix creation of CoreCnt only reservations when the first node isn't available. * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none. * Improve job constraints XOR option logic. * Fix preemption of hetjobs when needed nodes not in leader component. * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing bad node deallocations and even allocation of nodes from other partitions. * Fix double-deallocation of preempted non-leader hetjob components. * slurmdbd - prevent truncation of the step nodelists over 4095. * Fix nodes remaining in drain state state after rebooting with ASAP option. - changes from 20.02.4: * srun - suppress job step creation warning message when waiting on PrologSlurmctld. * slurmrestd - fix incorrect return values in data_list_for_each() functions. * mpi/pmix - fix issue where HetJobs could fail to launch. * slurmrestd - set content-type header in responses. * Fix cons_res GRES overallocation for --gres-flags=disable-binding. * Fix cons_res incorrectly filtering cores with respect to GRES locality for - -gres-flags=disable-binding requests. * Fix regression where a dependency on multiple jobs in a single array using underscores would only add the first job. * slurmrestd - fix corrupted output due to incorrect use of memcpy(). * slurmrestd - address a number of minor Coverity warnings. * Handle retry failure when slurmstepd is communicating with srun correctly. * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up. * Fix tasks binding to GRES which are closest to the allocated CPUs. * Fix AMD GPU ROCM 3.5 support. * Fix handling of job arrays in sacct when querying specific steps. * slurmrestd - avoid fallback to local socket authentication if JWT authentication is ill-formed. * slurmrestd - restrict ability of requests to use different authentication plugins. * slurmrestd - unlink named unix sockets before closing. * slurmrestd - fix invalid formatting in openapi.json. * Fix batch jobs stuck in CF state on FrontEnd mode. * Add a separate explicit error message when rejecting changes to active node features. * cons_common/job_test - fix slurmctld SIGABRT due to double-free. * Fix updating reservations to set the duration correctly if updating the start time. * Fix update reservation to promiscuous mode. * Fix override of job tasks count to max when ntasks-per-node present. * Fix min CPUs per node not being at least CPUs per task requested. * Fix CPUs allocated to match CPUs requested when requesting GRES and threads per core equal to one. * Fix NodeName config parsing with Boards and without CPUs. * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog. * Fix error messages for certain invalid salloc/sbatch/srun options. * pmi2 - clean up sockets at step termination. * Fix 'scontrol hold' to work with 'JobName'. * sbatch - handle --uid/--gid in #SBATCH directives properly. * Fix race condition in job termination on slurmd. * Print specific error messages if trying to run use certain priority/multifactor factors that cannot work without SlurmDBD. * Avoid partial GRES allocation when --gpus-per-job is not satisfied. * Cray - Avoid referencing a variable outside of it's correct scope when dealing with creating steps within a het job. * slurmrestd - correctly handle larger addresses from accept(). * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action with another option after that. * Restore MCS label when suspended job is resumed. * Fix insufficient lock levels. * slurmrestd - use errno from job submission. * Fix "user" filter for sacctmgr show transactions. * Fix preemption logic. * Fix no_consume GRES for exclusive (whole node) requests. * Fix regression in 20.02 that caused an infinite loop in slurmctld when requesting --distribution=plane for the job. * Fix parsing of the --distribution option. * Add CONF READ_LOCK to _handle_fed_send_job_sync. * prep/script - always call slurmctld PrEp callback in _run_script(). * Fix node estimation for jobs that use GPUs or --cpus-per-task. * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing slurmctld and/or job submission CLI tools segfaults due to bad return handling when the respective Lua script failed to load. * Fix propagation of gpu options through hetjob components. * Add SLURM_CLUSTERS environment variable to scancel. * Fix packing/unpacking of "unlinked" jobs. * Connect slurmstepd's stderr to srun for steps launched with --pty. * Handle MPS correctly when doing exclusive allocations. * slurmrestd - fix compiling against libhttpparser in a non-default path. * slurmrestd - avoid compilation issues with libhttpparser < 2.6. * Fix compile issues when compiling slurmrestd without --enable-debug. * Reset idle time on a reservation that is getting purged. * Fix reoccurring reservations that have Purge_comp= to keep correct duration if they are purged. * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC" * Early return from epilog_set_env in case of no_consume. * Fix cons_common/job_test start time discovery logic to prevent skewed results between "will run test" executions. * Ensure TRESRunMins limits are maintained during "scontrol reconfigure". * Improve error message when host lookup fails. - Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805). - Do not run %check on SLE-12-SP2: Some incompatibility in tcl makes this fail. - Remove unneeded build dependency to postgresql-devel. - Disable build on s390 (requires 64bit).- Bring QA to the package build: add %%check stage. - Remove cruft that isn't needed any longer. - Add 'ghosted' run-file. - Add rpmlint filter to handle issues with library packages for Leap and enterprise upgrade versions.- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004). - Other changes are: * Factor in ntasks-per-core=1 with cons_tres. * Fix formatting in error message in cons_tres. * Fix calling stat on a NULL variable. * Fix minor memory leak when using reservations with flags=first_cores. * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore > 1 on a node. * Fix --mem-per-gpu for heterogenous --gres requests. * Fix slurmctld load order in load_all_part_state(). * Fix race condition not finding jobacct gather task cgroup entry. * Suppress error message when selecting nodes on disjoint topologies. * Improve performance of _pack_default_job_details() with large number of job * arguments. * Fix archive loading previous to 17.11 jobs per-node req_mem. * Fix regresion validating that --gpus-per-socket requires --sockets-per-node * for steps. Should only validate allocation requests. * error() instead of fatal() when parsing an invalid hostlist. * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems. * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres. * cons_tres - Allocate lowest numbered cores when filtering cores with gres. * Fix getting system counts for named GRES/TRES. * MySQL - Fix for handing typed GRES for association rollups. * Fix step allocations when tasks_per_core > 1. * Fix allocating more GRES than requested when asking for multiple GRES types.- Treat libnss_slurm like any other package: add version string to upgrade package.- Updated to 20.02.1 with following changes" * Improve job state reason for jobs hitting partition_job_depth. * Speed up testing of singleton dependencies. * Fix negative loop bound in cons_tres. * srun - capture the MPI plugin return code from mpi_hook_client_fini() and use as final return code for step failure. * Fix segfault in cli_filter/lua. * Fix --gpu-bind=map_gpu reusability if tasks > elements. * Make sure config_flags on a gres are sent to the slurmctld on node registration. * Prolog/Epilog - Fix missing GPU information. * Fix segfault when using config parser for expanded lines. * Fix bit overlap test function. * Don't accrue time if job begin time is in the future. * Remove accrue time when updating a job start/eligible time to the future. * Fix regression in 20.02.0 that broke --depend=expand. * Reset begin time on job release if it's not in the future. * Fix for recovering burst buffers when using high-availability. * Fix invalid read due to freeing an incorrectly allocated env array. * Update slurmctld -i message to warn about losing data. * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a pending ASAP reboot.- Remove legacy_cray: with 20.02 the special treatment for cray-specific plugins on SLE version prior to 15SP2 is no longer required.- slurm-plugins will now also require pmix not only libpmix (bsc#1164326)- Removed autopatch as it doesn't work for the SLE-11-SP4 build.- Disable %arm builds as this is no longer supported.- pmix searches now also for libpmix.so.2 so that there is no dependency for devel package (bsc#1164386) * added patch file check-for-lipmix.so.MAJOR.patch * reworded patch file Remove-rpath-from-build.patch to use %autopatch- Update to version 20.02.0 (jsc#SLE-8491) * Fix minor memory leak in slurmd on reconfig. * Fix invalid ptr reference when rolling up data in the database. * Change shtml2html.py to require python3 for RHEL8 support, and match man2html.py. * slurm.spec - override "hardening" linker flags to ensure RHEL8 builds in a usable manner. * Fix type mismatches in the perl API. * Prevent use of uninitialized slurmctld_diag_stats. * Fixed various Coverity issues. * Only show warning about root-less topology in daemons. * Fix accounting of jobs in IGNORE_JOBS reservations. * Fix issue with batch steps state not loading correctly when upgrading from 19.05. * Deprecate max_depend_depth in SchedulerParameters and move it to DependencyParameters. * Silence erroneous error on slurmctld upgrade when loading federation state. * Break infinite loop in cons_tres dealing with incorrect tasks per tres request resulting in slurmctld hang. * Improve handling of --gpus-per-task to make sure appropriate number of GPUs is assigned to job. * Fix seg fault on cons_res when requesting --spread-job. - Move to python3 for everything but SLE-11-SP4 * For SLE-11-SP4 add a workaround to handle a python3 script (python2.7 compliant).- Add explicit version dependency to libpmix as well. 'slurm-devel' has a tight version dependency on libpmix - allowing multiple libpmix versions in one package repository is therefore essential.- Update to version 20.02.0-rc1 * sbatch - fix segfault when no newline at the end of a burst buffer file. * Change scancel to only check job's base state when matching -t options. * Save job dependency list in state files. * cons_tres - allow jobs to be run on systems with root-less topologies. * Restore pre-20.02pre1 PrologSlurmctld synchonization behavior to avoid various race conditions, and ensure proper batch job launch. * Add new slurmrestd command/daemon which implements the Slurm REST API.- Update to version 20.02.0-0pre1, highlights are Highlights: * Exclusive behavior of a node includes all GRES on a node as well as the cpus. * Use python3 instead of python for internal build/test scripts. The slurm.spec file has been updated to depend on python3 as well. * Added new NodeSet configuration option to help simplify partition configuration sections for heterogeneous / condo*style clusters. * Added slurm.conf option MaxDBDMsgs to control how many messages will be stored in the slurmctld before throwing them away when the slurmdbd is down. * The checkpoint plugin interface and all associated API calls have been removed. * slurm_init_job_desc_msg() initializes mail_type as uint16_t. This allows mail_type to be set to NONE with scontrol. * Add new slurm_spank_log() function to print messages back to the user from within a SPANK plugin without prepending "error: " from slurm_error(). * Enforce having partition name and nodelist=ALL when creating reservations with flags=PART_NODES. * SPANK - removed never-implemented slurm_spank_slurmd_init() interface. This hook has always been accessible through slurm_spank_init() in the S_CTX_SLURMD context instead. * sbcast - add new BcastAddr option to NodeName lines to allow sbcast traffic to flow over an alternate network path. * Added auth/jwt plugin, and 'scontrol token' subcommand. PMIx - improve * performance of proc map generation. Deprecate kill_invalid_depend in * SchedulerParameters and move it to a new option called DependencyParameters. * Enable job dependencies for any job on any cluster in the same federation. * Allow clusters to be added automatically to db at startup of ctld. Add * AccountingStorageExternalHost slurm.conf parameter. The * "ConditionPathExists" condition in slurmd.service has been disabled by default to permit simpler installation of a "configless" Slurm cluster. * In SchedulerParameters remove deprecated max_job_bf and replace with bf_max_job_test. * Disable sbatch, salloc, srun --reboot for non-admins. SPANK - added support * for S_JOB_GID in the job script context with spank_get_item(). * Prolog/Epilog - add SLURM_JOB_GID environment variable. configuration file changes: * The mpi/openmpi plugin has been removed as it does nothing. MpiDefault=openmpi will be translated to the functionally-equivalent MpiDefault=none. command changes (see man pages for details) * Display StepId=.batch instead of StepId=.4294967294 in output of "scontrol show step". (slurm_sprint_job_step_info()) * MPMD in srun will now defer PATH resolution for the commands to launch to slurmstepd. Previously it would handle resolution client*side, but with a non*standard approach that walked PATH in reverse. * squeue - added "--me" option, equivalent to --user=$USER. * The LicensesUsed line has been removed from 'scontrol show config'. Please see the 'scontrol show licenses' command as an alternative. * sbatch - adjusted backoff times for "--wait" option to reduce load on slurmctld. This results in a steady*state delay of 32s between queries, instead of the prior 10s delay. - Removed following deprecated patches: * removed patch slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch * removed patch split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch * removed patch slurmctld-uses-xdaemon_-for-systemd.patch * removed patch slurmd-uses-xdaemon_-for-systemd.patch * removed patch slurmdbd-uses-xdaemon_-for-systemd.patch * removed patch slurmsmwd-uses-xdaemon_-for-systemd.patch * removed patch removed-deprecated-xdaemon.patch- standard slurm.conf uses now also SlurmctldHost on all build targets (bsc#1162377)- Fix a missed systemd_requires -> systemd_ordering conversion.- Remove special OHPC compatibility macro: these settings should be applied univerally. - Add a Recommends for mariadb to slurm-slurmdbd: it is recommened to run the database on the same machine as the daemon.- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors. - Use systemd_ordering instead of systemd_requires: systemd is never a strict requirement; but in case the system is scheduled for installation together with systemd, we want systemd to be installed prior to slurm.- start slurmdbd after mariadb (bsc#1161716)- Fix base_ver for SLE 15 SP2.- Update to version 19.05.5 (jsc#SLE-8491) * Check %docdir/NEWS for details. * Includes security fixes CVE-2019-19727, CVE-2019-19728, CVE-2019-12838. * Disable i586 builds as this is no longer supported. * Create libnss_slurm package to support user and group resolution thru slurmstepd. * slurm-2.4.4-rpath.patch -> Remove-rpath-from-build.patch Obsoleted: - pam_slurm_adopt-avoid-running-outside-of-the-sshd-PA.patch - pam_slurm_adopt-send_user_msg-don-t-copy-undefined-d.patch - pam_slurm_adopt-use-uid-to-determine-whether-root-is.patch- Deprecate "ControlMachine" only for SLURM version upgrades and products newer than 1501. This ensures that the original setting is retained for the SLURM version shipped origianlly with SLE-15-SP1 or Leap 15.1.- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692). * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block. * Make sview work with glib2 v2.62. * Make Slurm compile on linux after sys/sysctl.h was deprecated. * Install slurmdbd.conf.example with 0600 permissions to encourage secure use. CVE-2019-19727. * srun - do not continue with job launch if --uid fails. CVE-2019-19728.- added pmix support jsc#SLE-10800- Use --with-shared-libslurm to build slurm binaries using libslurm. - Make libslurm depend on slurm-config.- Fix ownership of /var/spool/slurm on new installations and upgrade (boo#1158696).- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727). - Fix %posttrans macro _res_update to cope with added newline (bsc#1153259).- Add package slurm-webdoc which sets up a web server to provide the documentation for the version shipped.- Move srun from 'slurm' to 'slurm-node': srun is required on the nodes as well so sbatch will work. 'slurm-node' is a requirement when 'slurm' is installed (bsc#1153095).- Set %base_ver for SLE-15-SP2 to 18.08 (for now).- Edit sample configuration to deprecate "ControlMachine", "ControlAddr", "BackupController" and "BackupAddr" in favor "SlurmctldHost".- Fix logic of slurm-munge recommends: slurm-munge requires munge already, so if we have munge installed we recommend slurm-munge as the authentication when installing slurm or slurm-node.- Fix build for SLE-11-SP4 and older.- added cray depend libraries to seperate package, as they are now built, since json is enabled- Updated to 18.08.8 for fixing (CVE-2019-12838, bsc#1140709, jsc#SLE-7341, jsc#SLE-7342) * Update "xauth list" to use the same 10000ms timeout as the other xauth commands. * Fix issue in gres code to handle a gres cnt of 0. * Don't purge jobs if backfill is running. * Verify job is pending add/removing accrual time. * Don't abort when the job doesn't have an association that was removed before the job was able to make it to the database. * Set state_reason if select_nodes() fails job for QOS or Account. * Avoid seg_fault on referencing association without a valid_qos bitmap. * If Association/QOS is removed on a pending job set that job as ineligible. * When changing a jobs account/qos always make sure you remove the old limits. * Don't reset a FAIL_QOS or FAIL_ACCOUNT job reason until the qos or account changed. * Restore "sreport -T ALL" functionality. * Correctly typecast signals being sent through the api. * Properly initialize structures throughout Slurm. * Sync "numtask" squeue format option for jobs and steps to "numtasks". * Fix sacct -PD to avoid CA before start jobs. * Fix potential deadlock with backup slurmctld. * Fixed issue with jobs not appearing in sacct after dependency satisfied. * Fix showing non-eligible jobs when asking with -j and not -s. * Fix issue with backfill scheduler scheduling tasks of an array when not the head job. * accounting_storage/mysql - fix SIGABRT in the archive load logic. * accounting_storage/mysql - fix memory leak in the archive load logic. * Limit records per single SQL statement when loading archived data. * Fix unnecessary reloading of job submit plugins. * Allow job submit plugins to be turned on/off with a reconfigure. * Fix segfault when loading/unloading Lua job submit plugin multiple times. * Fix printing duplicate error messages of jobs rejected by job submit plugin. * Fix printing of job submit plugin messages of het jobs without pack id. * Fix memory leak in group_cache.c * Fix jobs stuck from FedJobLock when requeueing in a federation * Fix requeueing job in a federation of clusters with differing associations * sacctmgr - free memory before exiting in 'sacctmgr show runaway'. * Fix seff showing memory overflow when steps tres mem usage is 0. * Upon archive file name collision, create new archive file instead of overwriting the old one to prevent lost records. * Limit archive files to 50000 records per file so that archiving large databases will succeed. * Remove stray newlines in SPANK plugin error messages. * Fix archive loading events. * In select/cons_res: Only allocate 1 CPU per node with the --overcommit and - -nodelist options. * Fix main scheduler from potentially not running through whole queue. * cons_res/job_test - prevent a job from overallocating a node memory. * cons_res/job_test - fix to consider a node's current allocated memory when testing a job's memory request. * Fix issue where multi-node job steps on cloud nodes wouldn't finish cleaning up until the end of the job (rather than the end of the step). * Fix issue with a 17.11 sbcast call to a 18.08 daemon. * Add new job bit_flags of JOB_DEPENDENT. * Make it so dependent jobs reset the AccrueTime and do not count against any AccrueTime limits. * Fix sacctmgr --parsable2 output for reservations and tres. * Prevent slurmctld from potential segfault after job_start_data() called for completing job. * Fix jobs getting on nodes with "scontrol reboot asap". * Record node reboot events to database. * Fix node reboot failure message getting to event table. * Don't write "(null)" to event table when no event reason exists. * Fix minor memory leak when clearing runaway jobs. * Avoid flooding slurmctld and logging when prolog complete RPC errors occur. * Fix GCC 9 compiler warnings. * Fix seff human readable memory string for values below a megabyte. * Fix dump/load of rejected heterogeneous jobs. * For heterogeneous jobs, do not count the each component against the QOS or association job limit multiple times. * slurmdbd - avoid reservation flag column corruption with the use of newer flags, instead preserve the older flag fields that we can still fit in the smallint field, and discard the rest. * Fix security issue in accounting_storage/mysql plugin on archive file loads by always escaping strings within the slurmdbd. CVE-2019-12838.- Fix build dependency issue around libibmad-devel introduced in SLE-12-SP4.- Add BuildRequires to address warnings during build: * for libcurl-devel, libssh2-devel and rrdtool-devel * for libjson-c-devel and liblz4-devel where available, disable these with --without-json and --without-lz4 where not. * disable DataWarp (--without-datawarp).- Update SLURM to 18.08.7: * Set debug statement to debug2 to avoid benign error messages. * Add SchedulerParameters option of bf_hetjob_immediate to attempt to start a heterogeneous job as soon as all of its components are determined able to do so. * Fix underflow causing decay thread to exit. * Fix main scheduler not considering hetjobs when building the job queue. * Fix regression for sacct to display old jobs without a start time. * Fix setting correct number of gres topology bits. * Update hetjobs pending state reason when appropriate. * Fix accounting_storage/filetxt's understanding of TRES. * Set Accrue time when not enforcing limits. * Fix srun segfault when requesting a hetjob with test_exec or bcast options. * Hide multipart priorities log message behind Priority debug flag. * sched/backfill - Make hetjobs sensitive to bf_max_job_start. * Fix slurmctld segfault due to job's partition pointer NULL dereference. * Fix issue with OR'ed job dependencies. * Add new job's bit_flags of INVALID_DEPEND to prevent rebuilding a job's dependency string when it has at least one invalid and purged dependency. * Promote federation unsynced siblings log message from debug to info. * burst_buffer/cray - fix slurmctld SIGABRT due to illegal read/writes. * burst_buffer/cray - fix memory leak due to unfreed job script content. * node_features/knl_cray - fix script_argv use-after-free. * burst_buffer/cray - fix script_argv use-after-free. * Fix invalid reads of size 1 due to non null-terminated string reads. * Add extra debug2 logs to identify why BadConstraints reason is set.- Do not build hdf5 support where not available.- Add support for version updates on SLE: Update packages to a later version than the version supported originally on SLE will receive a version string in their package name.- added the hdf5 job data gathering plugin- Add backward compatibility with SLE-11 SP4- Update to version 18.08.05-2: This version obsoletes: Fix-contrib-perlapi-to-build-with-the-fix-for-CVE-2019-6438-750cc23ed.patch - Fix spec file for older SUSE versions.- Update to version 18.08.05: * Add mitigation for a potential heap overflow on 32-bit systems in xmalloc. (CVE-2019-6438, bsc#1123304). * Other fixes: + Backfill - If a job has a time_limit guess the end time of a job better if OverTimeLimit is Unlimited. + Fix "sacctmgr show events event=cluster" + Fix sacctmgr show runawayjobs from sibling cluster + Avoid bit offset of -1 in call to bit_nclear(). + Insure that "hbm" is a configured GresType on knl systems. + Fix NodeFeaturesPlugins=node_features/knl_generic to allow other gres other than knl. + cons_res: Prevent overflow on multiply. + Better debug for bad values in gres.conf. + Fix double accounting of energy at end of job. + Read gres.conf for cloud nodes on slurmctld. + Don't assume the first node of a job is the batch host when purging jobs from a node. + Better debugging when a job doesn't have a job_resrcs ptr. + Store ave watts in energy plugins. + Add XCC plugin for reading Lenovo Power. + Fix minor memory leak when scheduling rebootable nodes. + Fix debug2 prefix for sched log. + Fix printing correct SLURM_JOB_ACCOUNT_PACK_GROUP_* in env for a Het Job. + sbatch - search current working directory first for job script. + Make it so held jobs reset the AccrueTime and do not count against any AccrueTime limits. + Add SchedulerParameters option of bf_hetjob_prio=[min|avg|max] to alter the job sorting algorithm for scheduling heterogeneous jobs. + Fix initialization of assoc_mgr_locks and slurmctld_locks lock structures. + Fix segfault with job arrays using X11 forwarding. + Revert regression caused by e0ee1c7054 which caused negative values and values starting with a decimal to be invalid for PriorityWeightTRES and TRESBillingWeight. + Fix possibility to update a job's reservation to none. + Suppress connection errors to primary slurmdbd when backup dbd is active. + Suppress connection errors to primary db when backup db kicks in + Add missing fields for sacct --completion when using jobcomp/filetxt. + Fix incorrect values set for UserCPU, SystemCPU, and TotalCPU sacct fields when JobAcctGatherType=jobacct_gather/cgroup. + Fixed srun from double printing invalid option msg twice. + Remove unused -b flag from getopt call in sbatch. + Disable reporting of node TRES in sreport. + Re-enabling features combined by OR within parenthesis for non-knl setups. + Prevent sending duplicate requests to reboot a node before ResumeTimeout. + Down nodes that don't reboot by ResumeTimeout. + Update seff to reflect API change from rss_max to tres_usage_in_max. + Add missing TRES constants from perl API. + Fix issue where sacct would return incorrect array tasks when querying specific tasks. + Add missing variables to slurmdb_stats_t in the perlapi. + Fix nodes not getting reboot RPC when job requires reboot of nodes. + Fix failing update the partition list of a job. + Use slurm.conf gres ids instead of gres.conf names to get a gres type name. * Disable slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch: Believed to be fixed by commit c1a537dbbe6 See: https://bugs.schedmd.com/show_bug.cgi?id=5511 * Add Fix-contrib-perlapi-to-build-with-the-fix-for-CVE-2019-6438-750cc23ed.patch: Fix fallout from 750cc23ed for CVE-2019-6438.- Update to 18.08.04, with following highlights * Fix message sent to user to display preempted instead of time limit when a job is preempted. * Fix memory leak when a failure happens processing a nodes gres config. * Improve error message when failures happen processing a nodes gres config. * Don't skip jobs in scontrol hold. * Allow --cpu-bind=verbose to be used with SLURM_HINT environment variable. * Enhanced handling for runaway jobs * cons_res: Delay exiting cr_job_test until after cores/cpus are calculated and distributed. * Don't check existence of srun --prolog or --epilog executables when set to "none" and SLURM_TEST_EXEC is used. * Add "P" suffix support to job and step tres specifications. * Fix jobacct_gather/cgroup to work correctly when more than one task is started on a node. * salloc - set SLURM_NTASKS_PER_CORE and SLURM_NTASKS_PER_SOCKET in the environment if the corresponding command line options are used. * slurmd - fix handling of the -f flag to specify alternate config file locations. * Add SchedulerParameters option of bf_ignore_newly_avail_nodes to avoid scheduling lower priority jobs on resources that become available during the backfill scheduling cycle when bf_continue is enabled. * job_submit/lua: Add several slurmctld return codes and add user/group info * salloc/sbatch/srun - print warning if mutually exclusive options of --mem and --mem-per-cpu are both set. - Refreshed: * pam_slurm_adopt-avoid-running-outside-of-the-sshd-PA.patch- restarting services on update only when activated - added rotation of logs - Added backported patches which harden the pam module pam_slurm_adopt (BOO#1116758) which will be in slurm 19.05.x * added pam_slurm_adopt-avoid-running-outside-of-the-sshd-PA.patch [PATCH 1/3] pam_slurm_adopt: avoid running outside of the sshd PAM * added pam_slurm_adopt-send_user_msg-don-t-copy-undefined-d.patch [PATCH 2/3] pam_slurm_adopt: send_user_msg: don't copy undefined data * added pam_slurm_adopt-use-uid-to-determine-whether-root-is.patch [PATCH 3/3] pam_slurm_adopt: use uid to determine whether root is logging on - package slurm-pam_slurm now depends on slurm-node and not on slurm- fixed code in %pretrans section to be compatible with lua 5.1- Added missing perl-base dependency.- Moved HTML docs to doc package.- Moved config man pages to a separate package: This way, they won't get installed on compute nodes.- Update to 18.08.3 * Add new burst buffer state of "teardown-fail" to indicate the burst buffer teardown operation is failing on specific buffers. * Multiple backup slurmctld daemons can be configured * Enable jobs with zero node count for creation and/or deletion of persistent burst buffers. * Add "scontrol show dwstat" command to display Cray burst buffer status. * Add "GetSysStatus" option to burst_buffer.conf file. * Add node and partition configuration options of "CpuBind" to control default task binding. * Add "NumaCpuBind" option to knl.conf * Add sbatch "--batch" option to identify features required on batch node. * Add "BatchFeatures" field to output of "scontrol show job". * Add support for "--bb" option to sbatch command. * Add new SystemComment field to job data structure and database. * Expand reservation "flags" field from 32 to 64 bits. * Add job state flag of "SIGNALING" to avoid race condition. * Properly handle srun --will-run option when there are jobs in COMPLETING state. * Properly report who is signaling a step. * Don't combine updated reservation records in sreport's reservation report. * node_features plugin - Add suport for XOR & XAND of job constraints (node feature specifications). * Improvements to how srun searches for the executible when using cwd. * Now programs can be checked before execution if test_exec is set. * Report NodeFeatures plugin configuration with scontrol and sview commands. * Add acct_gather_profile/influxdb plugin. * Add new job state of SO/STAGE_OUT * Correct SLURM_NTASKS and SLURM_NPROCS environment variable for heterogeneous job step. * Expand advanced reservation feature specification to support parenthesis and counts of nodes with specified features. * Defer job signaling until prolog is completed * Have the primary slurmctld wait until the backup has completely shutdown before taking control. * Fix issue where unpacking job state after TRES count changed could lead to invalid reads. * Heterogeneous job steps allocations supported with Open MPI. * Remove redundant function arguments from task plugins. * Add Slurm configuration file check logic using "slurmctld -t" command. * Add the use of a xml file to help performance when using hwloc. * Remove support for "ChosLoc" configuration parameter. * Configuration parameters "ControlMachine", "ControlAddr", "BackupController" and "BackupAddr" replaced by an ordered list of "SlurmctldHost" records. * Remove --immediate option from sbatch. * Add infrastructure for per-job and per-step TRES parameters. * Add DefCpuPerGpu and DefMemPerGpu to global and per-partition configuration parameters. * Add ValidateMode configuration parameter to knl_cray.conf. * Disable local PTY output processing when using 'srun --unbuffered'. * Change the column name for the %U (User ID) field in squeue to 'UID'. * CRAY - Add CheckGhalQuiesce to the CommunicationParameters. * When a process is core dumping, avoid terminating other processes in that task group. * CPU frequency management enhancements: If scaling_available_frequencies file is not available, then derive values from scaling_min_freq and scaling_max_freq values. * Add pending jobs count to sdiag output. * Add configuration paramerers SlurmctldPrimaryOnProg and SlurmctldPrimaryOffProg, which define programs to execute when a slurmctld daemon changes state. * Add configuration paramerers SlurmctldAddr for use with virtual IP to manage backup slurmctld daemons. * Explicitly shutdown the slurmd process when instructed to reboot. * Add ability to create/update partition with TRESBillingWeights through scontrol. * Calcuate TRES billing values at submission. * Add node_features plugin function "node_features_p_reboot_weight()". * Add NodeRebootWeight parameter to knl.conf configuration file. * Completely remove "gres" field from step record. Use "tres_per_node", "tres_per_socket", etc. * Add "Links" parameter to gres.conf configuration file. * Force slurm_mktime() to set tm_isdst to -1. * burst_buffer.conf - Add SetExecHost flag to enable burst buffer access from the login node for interactive jobs. * Append ", with requeued tasks" to job array "end" emails if any tasks in the array were requeued. * Add ResumeFailProgram slurm.conf option to specify a program that is called when a node fails to respond by ResumeTimeout. * Add new job pending reason of "ReqNodeNotAvail, reserved for maintenance". * Remove AdminComment += syntax from 'scontrol update job'. * sched/backfill: Reset job time limit if needed for deadline scheduling. * For heterogeneous job component with required nodes, explicitly exclude those nodes from all other job components. * Add name of partition used to output of srun --test-only output. * sdiag output now reports outgoing slurmctld message queue contents. * Improve escaping special characters on user commands when specifying paths. * Add salloc/sbatch/srun option of --gres-flags=disable-binding to disable filtering of CPUs with respect to generic resource locality. * SlurmDBD - Print warning if MySQL/MariaDB internal tuning is not at least half of the recommended values. * Add ability to specify a node reason when rebooting nodes with "scontrol reboot". * Add nextstate option to "scontrol reboot". * Consider "resuming" (nextstate=resume) nodes as available in backfill future scheduling. * Add TimelimitRaw sacct output field to display timelimit numbers. * Add support for sacct --whole-hetjob=[yes|no] option. * Make salloc handle node requests the same as sbatch. * Add shutdown_on_reboot SlurmdParameter to control whether the Slurmd will shutdown itself down or not when a reboot request is received. * Add cancel_reboot scontrol option to cancel pending reboot of nodes. * Make Users case insensitive in the database based on Parameters=PreserveCaseUser in the slurmdbd.conf. * Improve scheduling when dealing with node_features that could have a boot delay. * Changed the default AuthType for slurmdbd to auth/munge. * Added 'remote-fs.target' to After directive of slurmd.service file. * Remove drain on node when reboot nextstate used. * Speed up pack of job's qos. * Add sacctmgr options to prevent/manage job queue stuffing: - GrpJobsAccrue= - MaxJobsAccrue= * MinPrioThreshold Minimum priority required to reserve resources when scheduling. * Add control_inx value to trigger_info_msg_t to permit future work in the trigger management code to distinguish which of multiple backup controllers has changed state. * NOTES: PreemptType=preempt/job_prio has been removed - use PreemptType=preempt/qos instead. * Bluegene support was deprecated has now been removed * cgroup_allowed_devices_file.conf was removed. It was never used by default, as ConstrainDevices was not set. If needed, refer to the cgroups.conf man page on how to create one. * slurm.epilog.clean: Removed. User should use pam_slurm_adopt instead. - Refreshed: * removed-deprecated-xdaemon.patch * slurmctld-uses-xdaemon_-for-systemd.patch * slurmd-uses-xdaemon_-for-systemd.patch * slurmdbd-uses-xdaemon_-for-systemd.patch * slurmsmwd-uses-xdaemon_-for-systemd.patch * slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch- Move config man-pages to config package.- added correct link flags for perl bindings (bsc#1108671) * added correct linker search path in slurm-2.4.4-rpath.patch * perl:Switch is required by slurm torque wrappers- Fix Requires(pre) and Requires(post) for slurm-config and slurm-node. This fixes issues with failing slurm user creation when installed during initial system installation (bsc#1109373).- Update to 17.11.9 * Fix segfault in slurmctld when a job's node bitmap is NULL during a scheduling cycle. Primarily caused by EnforcePartLimits=ALL. * Remove erroneous unlock in acct_gather_energy/ipmi. * Enable support for hwloc version 2.0.1. * Fix 'srun -q' (--qos) option handling. * Fix socket communication issue that can lead to lost task completition messages, which will cause a permanently stuck srun process. * Handle creation of TMPDIR if environment variable is set or changed in a task prolog script. * Avoid node layout fragmentation if running with a fixed CPU count but without Sockets and CoresPerSocket defined. * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw. * Fix incorrect job priority assignment for multi-partition job with different PriorityTier settings on the partitions. * Fix sinfo to print correct node state.- When using a remote shared StateSaveLocation, slurmctld needs to be started after remote filesystems have become available. Add 'remote-fs.target' to the 'After=' directive in slurmctld.service (boo#1103561).- Update to 17.11.8 * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path. * Do not allocate nodes that were marked down due to the node not responding by ResumeTimeout. * task/cray plugin - search for "mems" cgroup information in the file "cpuset.mems" then fall back to the file "mems". * Fix ipmi profile debug uninitialized variable. * PMIx: fixed the direct connect inline msg sending. * MYSQL: Fix issue not handling all fields when loading an archive dump. * Allow a job_submit plugin to change the admin_comment field during job_submit_plugin_modify(). * job_submit/lua - fix access into reservation table. * MySQL - Prevent deadlock caused by archive logic locking reads. * Don't enforce MaxQueryTimeRange when requesting specific jobs. * Modify --test-only logic to properly support jobs submitted to more than one partition. * Prevent slurmctld from abort when attempting to set non-existing qos as def_qos_id. * Add new job dependency type of "afterburstbuffer". The pending job will be delayed until the first job completes execution and it's burst buffer stage-out is completed. * Reorder proctrack/task plugin load in the slurmstepd to match that of slurmd and avoid race condition calling task before proctrack can introduce. * Prevent reboot of a busy KNL node when requesting inactive features. * Revert to previous behavior when requesting memory per cpu/node introduced in 17.11.7. * Fix to reinitialize previously adjusted job members to their original value when validating the job memory in multi-partition requests. * Fix _step_signal() from always returning SLURM_SUCCESS. * Combine active and available node feature change logs on one line rather than one line per node for performance reasons. * Prevent occasionally leaking freezer cgroups. * Fix potential segfault when closing the mpi/pmi2 plugin. * Fix issues with --exclusive=[user|mcs] to work correctly with preemption or when job requests a specific list of hosts. * Make code compile with hdf5 1.10.2+ * mpi/pmix: Fixed the collectives canceling. * SlurmDBD: improve error message handling on archive load failure. * Fix incorrect locking when deleting reservations. * Fix incorrect locking when setting up the power save module. * Fix setting format output length for squeue when showing array jobs. * Add xstrstr function. * Fix printing out of --hint options in sbatch, salloc --help. * Prevent possible divide by zero in _validate_time_limit(). * Add Delegate=yes to the slurmd.service file to prevent systemd from interfering with the jobs' cgroup hierarchies. * Change the backlog argument to the listen() syscall within srun to 4096 to match elsewhere in the code, and avoid communication problems at scale.- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch: Fix race in the slurmctld backup controller which prevents it to clean up allocations on nodes properly after failing over (bsc#1084917). - Handled %license in a backward compatible manner.- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.- Shield comments between script snippets with a %{!?nil:...} to avoid them being interpreted as scripts - in which case the update level is passed as argument (see chapter 'Shared libraries' in: https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets) (bsc#1100850).- Update from 17.11.5 to 17.11.7 - Fix security issue in handling of username and gid fields CVE-2018-10995 and bsc#1095508 what implied an update from 17.11.5 to 17.11.7 Highlights of 17.11.6: * CRAY - Add slurmsmwd to the contribs/cray dir * PMIX - Added the direct connect authentication. * Prevent the backup slurmctld from losing the active/available node features list on takeover. * Be able to force power_down of cloud node even if in power_save state. * Allow cloud nodes to be recognized in Slurm when booted out of band. * Numerous fixes - check 'NEWS' file. Highlights of 17.11.7: * Notify srun and ctld when unkillable stepd exits. * Numerous fixes - check 'NEWS' file. - Add: slurmsmwd-uses-xdaemon_-for-systemd.patch * Fixes daemoniziation in newly introduced slurmsmwd daemon. - Rename: split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch * remain in sync with commit messages which introduced that file- Avoid running pretrans scripts when running in an instsys: there may be not much installed, yet. pretrans code should be done in lua, this way, it will be executed by the rpm-internal lua interpreter and not be passed to a shell which may not be around at the time this scriptlet is run (bsc#1090292).- Add requires for slurm-sql to the slurmdbd package.- Package READMEs for pam and pam_slurm_adopt. - Use the new %%license directive for COPYING file.- Add: * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch * slurmctld-uses-xdaemon_-for-systemd.patch * slurmd-uses-xdaemon_-for-systemd.patch * slurmdbd-uses-xdaemon_-for-systemd.patch * removed-deprecated-xdaemon.patch Fix interaction with systemd: systemd expects that a daemonizing process doesn't go away until the PID file with it PID of the daemon has bee written (bsc#1084125).- Make sure systemd services get restarted only when all packages are in a consistent state, not in the middle of an 'update' transaction (bsc#1088693). Since the %postun scripts that run on update are from the old package they cannot be changed - thus we work around the restart breakage.- fixed wrong log file location in slurmdbd.conf and fixed pid location for slurmdbd and made slurm-slurmdbd depend on slurm config which provides the dir /var/run/slurm (bsc#1086859).- added comment for (bsc#1085606)- Fix security issue in accounting_storage/mysql plugin by always escaping strings within the slurmdbd. CVE-2018-7033 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033 (bsc#1085240). - Update slurm to v17.11.5 (FATE#325451) Highlights of 17.11: * Support for federated clusters to manage a single work-flow across a set of clusters. * Support for heterogeneous job allocations (various processor types, memory sizes, etc. by job component). Support for heterogeneous job steps within a single MPI_COMM_WORLD is not yet supported for most configurations. * X11 support is now fully integrated with the main Slurm code. Remove any X11 plugin configured in your plugstack.conf file to avoid errors being logged about conflicting options. * Added new advanced reservation flag of "flex", which permits jobs requesting the reservation to begin prior to the reservation's start time and use resources inside or outside of the reservation. A typical use case is to prevent jobs not explicitly requesting the reservation from using those reserved resources rather than forcing jobs requesting the reservation to use those resources in the time frame reserved. * The sprio command has been modified to report a job's priority information for every partition the job has been submitted to. * Group ID lookup performed at job submit time to avoid lookup on all compute nodes. Enable with PrologFlags=SendGIDs configuration parameter. * Slurm commands and daemons dynamically link to libslurmfull.so instead of statically linking. This dramatically reduces the footprint of Slurm. * In switch plugin, added plugin_id symbol to plugins and wrapped switch_jobinfo_t with dynamic_plugin_data_t in interface calls in order to pass switch information between clusters with different switch types. * Changed default ProctrackType to cgroup. * Changed default sched_min_interval from 0 to 2 microseconds. * Added new 'scontrol write batch_script ' command to fetch a job's batch script. Removed the ability to see the script as part of the 'scontrol -dd show job' command. * Add new "billing" TRES which allows jobs to be limited based on the job's billable TRES calculated by the job's partition's TRESBillingWeights. * Regular user use of "scontrol top" command is now disabled. Use the configuration parameter "SchedulerParameters=enable_user_top" to enable that functionality. The configuration parameter "SchedulerParameters=disable_user_top" will be silently ignored. * Change default to let pending jobs run outside of reservation after reservation is gone to put jobs in held state. Added NO_HOLD_JOBS_AFTER_END reservation flag to use old default. Support for PMIx v2.0 as well as UCX support. * Remove plugins for obsolete MPI stacks: - lam - mpich1_p4 - mpich1_shmem - mvapich * Numerous fixes - check 'NEWS' file. - slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch: Removed. Code upstream. - slurmctld-service-var-run-path.patch: Replaced by sed script. - Fix some rpmlint warnings.- moved config files to slurm-config package (FATE#324574).- Moved slurmstepd and man page into slurm-node due to slurmd dependency - Moved config files into slurm-node - Moved slurmd rc scripts into slurm-node - Made slurm-munge require slurm-plugins instead of slurm itself - slurm-node suggested slurm-munge, causing the whole slurm to be installed. The slurm-plugins seems to be a more base class (FATE#324574).- split up light wight slurm-node package for deployment on nodes (FATE#324574).- added /var/spool/ directory and removed duplicated entries from slurm.conf- Package so-versioned libs separately. libslurm is expected to change more frequently and thus is packaged separately from libpmi.- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697). Changes in 17.0.9 * When resuming powered down nodes, mark DOWN nodes right after ResumeTimeout has been reached (previous logic would wait about one minute longer). * Fix sreport not showing full column name for TRES Count. * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned reservation that was modified. * Fix sreport reservation utilization report showing bad data. * Show all TRES' on a reservation in sreport reservation utilization report by default. * Fix sacctmgr show reservation handling "end" parameter. * Work around issue with sysmacros.h and gcc7 / glibc 2.25. * Fix layouts code to only allow setting a boolean. * Fix sbatch --wait to keep waiting even if a message timeout occurs. * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL nodes which include no features the slurmctld will abort without this patch when attemping strtok_r(NULL). * Fix regression in 17.02.7 which would run the spank_task_privileged as part of the slurmstepd instead of it's child process. * Fix security issue in Prolog and Epilog by always prepending SPANK_ to all user-set environment variables. CVE-2017-15566. Changes in 17.0.8: * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd instead of local. * mpi/mvapich - Buffer being only partially cleared. No failures observed. * Fix for job --switch option on dragonfly network. * In salloc with --uid option, drop supplementary groups before changing UID. * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc. * jobcomp/elasticsearch - fix memory leak when transferring generated buffer. * Prevent slurmstepd ABRT when parsing gres.conf CPUs. * Fix sbatch --signal to signal all MPI ranks in a step instead of just those on node 0. * Check multiple partition limits when scheduling a job that were previously only checked on submit. * Cray: Avoid running application/step Node Health Check on the external job step. * Optimization enhancements for partition based job preemption. * Address some build warnings from GCC 7.1, and one possible memory leak if /proc is inaccessible. * If creating/altering a core based reservation with scontrol/sview on a remote cluster correctly determine the select type. * Fix autoconf test for libcurl when clang is used. * Fix default location for cgroup_allowed_devices_file.conf to use correct default path. * Document NewName option to sacctmgr. * Reject a second PMI2_Init call within a single step to prevent slurmstepd from hanging. * Handle old 32bit values stored in the database for requested memory correctly in sacct. * Fix memory leaks in the task/cgroup plugin when constraining devices. * Make extremely verbose info messages debug2 messages in the task/cgroup plugin when constraining devices. * Fix issue that would deny the stepd access to /dev/null where GRES has a 'type' but no file defined. * Fix issue where the slurmstepd would fatal on job launch if you have no gres listed in your slurm.conf but some in gres.conf. * Fix validating time spec to correctly validate various time formats. * Make scontrol work correctly with job update timelimit [+|-]=. * Reduce the visibily of a number of warnings in _part_access_check. * Prevent segfault in sacctmgr if no association name is specified for an update command. * burst_buffer/cray plugin modified to work with changes in Cray UP05 software release. * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits. * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon. * Fix setting TRES limits with case insensitive TRES names. * Add alias for xstrncmp() -- slurm_xstrncmp(). * Fix sorting of case insensitive strings when using xstrcasecmp(). * Gracefully handle race condition when reading /proc as process exits. * Avoid error on Cray duplicate setup of core specialization. * Skip over undefined (hidden in Slurm) nodes in pbsnodes. * Add empty hashes in perl api's slurm_load_node() for hidden nodes. * CRAY - Add rpath logic to work for the alpscomm libs. * Fixes for administrator extended TimeLimit (job reason & time limit reset). * Fix gres selection on systems running select/linear. * sview: Added window decorator for maximize,minimize,close buttons for all systems. * squeue: interpret negative length format specifiers as a request to delimit values with spaces. * Fix the torque pbsnodes wrapper script to parse a gres field with a type set correctly. - Fixed ABI version of libslurm.- Trim redundant wording in descriptions.- Updated to slurm 17-02-7-1 * Added python as BuildRequires * Removed sched-wiki package * Removed slurmdb-direct package * Obsoleted sched-wiki and slurmdb-direct packages * Removing Cray-specific files * Added /etc/slurm/layout.d files (new for this version) * Remove /etc/slurm/cgroup files from package * Added lib/slurm/mcs_account.so * Removed lib/slurm/jobacct_gather_aix.so * Removed lib/slurm/job_submit_cnode.so - Created slurm-sql package - Moved files from slurm-plugins to slurm-torque package - Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec * Removed tmpfiles.d-slurm.conf - Changed /var/run path for slurm daemons to /var/run/slurm * Added slurmctld-service-var-run-path.patch (FATE#324026).- Made tmpfiles_create post-install macro SLE12 SP2 or greater - Directly calling systemd-tmpfiles --create for before SLE12 SP2- Allows OpenSUSE Factory build as well - Removes unused .service files from project - Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation * Patches upstream .service files to allow for /var/run/slurm path * Modifies slurm.conf to allow for /var/run/slurm path- Move wrapper script mpiexec provided by slrum-torque to mpiexec.slurm to avoid conflicts. This file is normally provided by the MPI implementation (boo#1041706).- Replace remaining ${RPM_BUILD_ROOT}s. - Improve description. - Fix up changelog.- Spec file: Replace "Requires : slurm-perlapi" by "Requires: perl-slurm = %{version}" (boo#1031872).- Trim redundant parts of description. Fixup RPM groups. - Replace unnecessary %__ macro indirections; replace historic $RPM_* variables by macros.- slurmd-Fix-for-newer-API-versions.patch: Stale patch removed.- Use %slurm_u and %slurm_g macros defined at the beginning of the spec file when adding the slurm user/group for consistency. - Define these macros to daemon,root for non-systemd. - For anything newer than Leap 42.1 or SLE-12-SP1 build OpenHPC compatible.- Updated to 16.05.8.1 * Remove StoragePass from being printed out in the slurmdbd log at debug2 level. * Defer PATH search for task program until launch in slurmstepd. * Modify regression test1.89 to avoid leaving vestigial job. Also reduce logging to reduce likelyhood of Expect buffer overflow. * Do not PATH search for mult-prog launches if LaunchParamters=test_exec is enabled. * Fix for possible infinite loop in select/cons_res plugin when trying to satisfy a job's ntasks_per_core or socket specification. * If job is held for bad constraints make it so once updated the job doesn't go into JobAdminHeld. * sched/backfill - Fix logic to reserve resources for jobs that require a node reboot (i.e. to change KNL mode) in order to start. * When unpacking a node or front_end record from state and the protocol version is lower than the min version, set it to the min. * Remove redundant lookup for part_ptr when updating a reservation's nodes. * Fix memory and file descriptor leaks in slurmd daemon's sbcast logic. * Do not allocate specialized cores to jobs using the --exclusive option. * Cancel interactive job if Prolog failure with "PrologFlags=contain" or "PrologFlags=alloc" configured. Send new error prolog failure message to the salloc or srun command as needed. * Prevent possible out-of-bounds read in slurmstepd on an invalid #! line. * Fix check for PluginDir within slurmctld to work with multiple directories. * Cancel interactive jobs automatically on communication error to launching srun/salloc process. * Fix security issue caused by insecure file path handling triggered by the failure of a Prolog script. To exploit this a user needs to anticipate or cause the Prolog to fail for their job. CVE-2016-10030 (bsc#1018371). - Replace group/user add macros with function calls. - Fix array initialzation and ensure strings are always NULL terminated in - pam_slurm.c (bsc#1007053). - Disable building with netloc support: the netloc API is part of the devel branch of hwloc. Since this devel branch was included accidentally and has been reversed since, we need to disable this for the time being. - Conditionalized architecture specific pieces to support non-x86 architectures better.- Remove: unneeded 'BuildRequires: python' - Add: BuildRequires: freeipmi-devel BuildRequires: libibmad-devel BuildRequires: libibumad-devel so they are picked up by the slurm build. - Enable modifications from openHPC Project. - Enable lua API package build. - Add a recommends for slurm-munge to the slurm package: This is way, the munge auth method is available and slurm works out of the box. - Create /var/lib/slurm as StateSaveLocation directory. /tmp is dangerous.- Create slurm user/group in preinstall script.- Keep %{_libdir}/libpmi* and %{_libdir}/mpi_pmi2* on SUSE.- Fix build with and without OHCP_BUILD define. - Fix build for systemd and non-systemd.- Updated to 16-05-5 - equvalent to OpenHPC 1.2. * Fix issue with resizing jobs and limits not be kept track of correctly. * BGQ - Remove redeclaration of job_read_lock. * BGQ - Tighter locks around structures when nodes/cables change state. * Make it possible to change CPUsPerTask with scontrol. * Make it so scontrol update part qos= will take away a partition QOS from a partition. * Backfill scheduling properly synchronized with Cray Node Health Check. Prior logic could result in highest priority job getting improperly postponed. * Make it so daemons also support TopologyParam=NoInAddrAny. * If scancel is operating on large number of jobs and RPC responses from slurmctld daemon are slow then introduce a delay in sending the cancel job requests from scancel in order to reduce load on slurmctld. * Remove redundant logic when updating a job's task count. * MySQL - Fix querying jobs with reservations when the id's have rolled. * Perl - Fix use of uninitialized variable in slurm_job_step_get_pids. * Launch batch job requsting --reboot after the boot completes. * Do not attempt to power down a node which has never responded if the slurmctld daemon restarts without state. * Fix for possible slurmstepd segfault on invalid user ID. * MySQL - Fix for possible race condition when archiving multiple clusters at the same time. * Add logic so that slurmstepd can be launched under valgrind. * Increase buffer size to read /proc/*/stat files. * Remove the SchedulerParameters option of "assoc_limit_continue", making it the default value. Add option of "assoc_limit_stop". If "assoc_limit_stop" is set and a job cannot start due to association limits, then do not attempt to initiate any lower priority jobs in that partition. Setting this can decrease system throughput and utlization, but avoid potentially starving larger jobs by preventing them from launching indefinitely. * Update a node's socket and cores per socket counts as needed after a node boot to reflect configuration changes which can occur on KNL processors. Note that the node's total core count must not change, only the distribution of cores across varying socket counts (KNL NUMA nodes treated as sockets by Slurm). * Rename partition configuration from "Shared" to "OverSubscribe". Rename salloc, sbatch, srun option from "--shared" to "--oversubscribe". The old options will continue to function. Output field names also changed in scontrol, sinfo, squeue and sview. * Add SLURM_UMASK environment variable to user job. * knl_conf: Added new configuration parameter of CapmcPollFreq. * Cleanup two minor Coverity warnings. * Make it so the tres units in a job's formatted string are converted like they are in a step. * Correct partition's MaxCPUsPerNode enforcement when nodes are shared by multiple partitions. * node_feature/knl_cray - Prevent slurmctld GRES errors for "hbm" references. * Display thread name instead of thread id and remove process name in stderr logging for "thread_id" LogTimeFormat. * Log IP address of bad incomming message to slurmctld. * If a user requests tasks, nodes and ntasks-per-node and tasks-per-node/nodes != tasks print warning and ignore ntasks-per-node. * Release CPU "owner" file locks. * Update seff to fix warnings with ncpus, and list slurm-perlapi dependency in spec file. * Allow QOS timelimit to override partition timelimit when EnforcePartLimits is set to all/any. * Make it so qsub will do a "basename" on a wrapped command for the output and error files. * Add logic so that slurmstepd can be launched under valgrind. * Increase buffer size to read /proc/*/stat files. * Prevent job stuck in configuring state if slurmctld daemon restarted while PrologSlurmctld is running. Also re-issue burst_buffer/pre-load operation as needed. * Move test for job wait reason value of BurstBufferResources and BurstBufferStageIn later in the scheduling logic. * Document which srun options apply to only job, only step, or job and step allocations. * Use more compatible function to get thread name (>= 2.6.11). * Make it so the extern step uses a reverse tree when cleaning up. * If extern step doesn't get added into the proctrack plugin make sure the sleep is killed. * Add web links to Slurm Diamond Collectors (from Harvard University) and collectd (from EDF). * Add job_submit plugin for the "reboot" field. * Make some more Slurm constants (INFINITE, NO_VAL64, etc.) available to job_submit/lua plugins. * Send in a -1 for a taskid into spank_task_post_fork for the extern_step. * MYSQL - Sightly better logic if a job completion comes in with an end time of 0. * task/cgroup plugin is configured with ConstrainRAMSpace=yes, then set soft memory limit to allocated memory limit (previously no soft limit was set). * Streamline when schedule() is called when running with message aggregation on batch script completes. * Fix incorrect casting when [un]packing derived_ec on slurmdb_job_rec_t. * Document that persistent burst buffers can not be created or destroyed using the salloc or srun --bb options. * Add support for setting the SLURM_JOB_ACCOUNT, SLURM_JOB_QOS and SLURM_JOB_RESERVAION environment variables are set for the salloc command. Document the same environment variables for the salloc, sbatch and srun commands in their man pages. * Fix issue where sacctmgr load cluster.cfg wouldn't load associations that had a partition in them. * Don't return the extern step from sstat by default. * In sstat print 'extern' instead of 4294967295 for the extern step. * Make advanced reservations work properly with core specialization. * slurmstepd modified to pre-load all relevant plugins at startup to avoid the possibility of modified plugins later resulting in inconsistent API or data structures and a failure of slurmstepd. * Export functions from parse_time.c in libslurm.so. * Export unit convert functions from slurm_protocol_api.c in libslurm.so. * Fix scancel to allow multiple steps from a job to be cancelled at once. * Update and expand upgrade guide (in Quick Start Administrator web page). * burst_buffer/cray: Requeue, but do not hold a job which fails the pre_run operation. * Insure reported expected job start time is not in the past for pending jobs. * Add support for PMIx v2. Required for FATE#316379.- Setting 'download_files' service to mode='localonly' and adding source tarball. (Required for Factory).- version 15.08.7.1 * Remove the 1024-character limit on lines in batch scripts. task/affinity: Disable core-level task binding if more CPUs required than available cores. * Preemption/gang scheduling: If a job is suspended at slurmctld restart or reconfiguration time, then leave it suspended rather than resume+suspend. * Don't use lower weight nodes for job allocation when topology/tree used. * Don't allow user specified reservation names to disrupt the normal reservation sequeuece numbering scheme. * Avoid hard-link/copy of script/environment files for job arrays. Use the master job record file for all tasks of the job array. NOTE: Job arrays submitted to Slurm version 15.08.6 or later will fail if the slurmctld daemon is downgraded to an earlier version of Slurm. * In slurmctld log file, log duplicate job ID found by slurmd. Previously was being logged as prolog/epilog failure. * If a job is requeued while in the process of being launch, remove it's job ID from slurmd's record of active jobs in order to avoid generating a duplicate job ID error when launched for the second time (which would drain the node). * Cleanup messages when handling job script and environment variables in older directory structure formats. * Prevent triggering gang scheduling within a partition if configured with PreemptType=partition_prio and PreemptMode=suspend,gang. * Decrease parallelism in job cancel request to prevent denial of service when cancelling huge numbers of jobs. * If all ephemeral ports are in use, try using other port numbers. * Prevent "scontrol update job" from updating jobs that have already finished. * Show requested TRES in "squeue -O tres" when job is pending. * Backfill scheduler: Test association and QOS node limits before reserving resources for pending job. * Many bug fixes. - Use source services to download package. - Fix code for new API of hwloc-2.0. - package netloc_to_topology where avialable. - Package documentation.- version 15.08.3 * Many new features and bug fixes. See NEWS file - update files list accordingly - fix wrong end of line in some files- version 14.11.8 * Many bug fixes. See NEWS file - update files list accordingly- add missing systemd requirements - add missing rclink- version 14.03.9 * Many bug fixes. See NEWS file - add systemd support/sbin/ldconfig/sbin/ldconfigh01-ch3b 170663159823.02.723.02.7-150500.5.15.123.02.7-150500.5.15.1libslurm.so.39libslurm.so.39.0.0/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:32303/SUSE_SLE-15-SP5_Update/4e89a9e4d2a1238dfc61ac33190a551f-slurm.SUSE_SLE-15-SP5_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3c6578904968db91f6414a5f3d784bbc090dc1d3, strippedPRRRRRRRRRR R R RR RR RRRRRRRR8 Z0i7%utf-851fdface7df0b6e0742ed1ec13b7cecf3acac9c4f56cefe4462f2df3e0f12a6f?7zXZ !t/ ]"k%ʽd,ˤd@e `yp: u^!}c?^bjh tcM:y.SC2{;U8#W" \d M1iuto8:e|Gچu S ˸(]! (Ă0|*vk ,{X):ٖci `9i9l`F(t?(@1 \%7T;[ڥ#!?՘MСX ?j @Ŭb{av9տAB9݁3Rg|B(7a^9ۏi.Aos ox?tgz/|,B&$-wN3H3g f]yXT[}1R C3yS S02Z(8r^ˮSJ u  t(qy, ؕ+v:r=tDig c) Nbd Ăpp-Lq u/Gl(7ؐkόۏ~X!^Z/ mJ\|fFshPuPY(5n81r'5JB \h[t y6Q*u /Ƿ ;q }.lOlj&3MXD]$*"RVPj Xw^У;p XC;)ga5RU(ʭɫjN;щx>z lw}9m?XuQlws7Z{d=eMy]~n5RJh2&-{|)F#$X~^o.-XjgO7T䨹-ts)9W~ʉh`>B4^k(GakQW wL5l[U! 1S2ʯik/:~|.O~#}Ҟ ZQGOX\puڞ9']cO &̓۲oUn#x*0ga#iEH=.Ud~i >Eo4>n vURsL4w؆ lAH _sXhr||t jUKTpG 0p] s˳_rTf*uoȫe |of>:6;Nrz;:ҁ0א$BGeC8I6QnmK:hCiΝv{B@(']fG $8'B!Mu.CH /#ʅm(|Fł݇oam]'ݑY⩸$1v-:6>}YwK!/n-%kn`ՊT7ޅx *\Erzm: @/?hj~ۊ6sC K6N!WYD-NО3PW^!>e EM[8pi(™4utéd.s9z{784SS nc_1ݜfZL0y>mn#JH YbNU]X]ɍ,3o-tv3a%G`Ǝ#j9&͹xEיW^~G psM54)K怏$I&:fJt/,?F_Qϝ!RNAQ89i/DZqf{_]Wf}\TW[n -iqv@<8"@j5XfhXf% ,_b蜁b[%@oEMݫS!Zb+u}e,.^JZtIBˮT dt!z%35qLHEa;o~(x=Y r!)\1B}\0Bәhy| ԾbM{n&`8fznE z(ix~Bt,n`eE6e ŅVd ym9dx$3x_dn, ,vlDtiEC"bN k<QvСT2+)8_ p׉@动CWTJ{tCCEЦz>M'QLxxi6ş+%:f(,f]ҏ.Z#woty4zfF?qǹqS#:_`@~x|X³hB<_rO#t|&"GҬ_bJ+gz43 ~oGDHk#00~/·xY N"M h4'RN\ΥHBJ9mwoCWkiu_JgHaz$Ԙrp۵_Hs#\Vb<|gÓ>JXNrSU=86/ Ű'*6a})IHmD7uaxSTvFs;jnpdJIё{A:+ 2("1Tx58AAg=fb,l#svz]QI׳:5D\HRqpI=ieEcan%|f[sCض\":y}pTۍwp41Y \2%(R' T-V%(%nQP@֋nF@H5VdͿ c ΞgC [)C};i̻s+FDʀ3X|!^]zz=c>0]cIݕZAؿhjp]4T*2RX%1JHU<'1l7Ůk'#)h9LxB&Oxա7—Zr1;{E_=_1ܫ`MRw3aWr?b`wa&dž^(듢#7<[xJGR7T0#<Ǭw i1DA\b߫k2G9-SY-y䵅 kah`I ۰(-)z/)'@zA]B,kT c][j iM(ol&K2 ޖ;ZUčg~A͖n,ъ $O6 (Zo>\Nw@}rky`jƓḠ9F8u)J[S<}]e]X9񱸕Ժ>x f_6yjJJx{($ȨH {c\yj_W4pFytуMF!{A^u`W B'( WY&6Gm ]zs~v4:4?@йժe΅2ZjXܳh 0a C#Ɉĺ,L1Rӝ&j0m,I@%3kY(bI_wXݛРLz/;GP_8۽& !@?<9+nmVcpl@0HToH-[! ]}:|Eh;EwE;[Ittem.uW\, {,S5qVSF`ѽ K5Z nT[e>Cn}#؄Bk4EJu2!F4sf#סǡm<`_fHwsyNzMRoxξU5>1{}#|Uu(v\"0^y'dq'V?1@ 9@-; 'B2jNUKU3U4hf ANȤXzBNj\KM~>?u];[JbH\J0a.S`r_TmȃcfƈZ{;<#00e;0堾I{nG.h&l\uq3o )_z,j~~h˕F@{si>L>R|Qyx9?[!xtK詭!Cng5C|"GjעA¥m\O ͛_2D .z]$_^g̀=6.t &1åzGL N1zc˰W,=-"}sw(3g:Y!U0l]lU3#Z'Ť di=%4q]}{Wy4m]SLݿRDOA-:@ [Qh # Z |33NjПc70$k*u%gaCTC6Q0|(N¼sT7{"zHeaFDK됬sFdBGt-jvE!Aw\';Q-D[9nC2ՄXPL@xJ\BTA8̉2eI`;W1k~OVڄT_1 I.7|2)%m9|.s+5cg+7IG!O- eB:o4ZF0pV%AnzQ: d"`wl282R Im!a=Kδ7;*EknC2az 9~bGkP0^@Tf^.#Ōd= zO;7Ӌ&Q;t~{]čmw@ 6+?xdž.ot{[ #am5T ;Wu3;" AeUcwgl،Vtbm)gr0~ 4D,^MOfދe/9Hvڻn՜,^W)}&~ qeU7 $m{ָA.7{8}!$%QJ=,3 1G dBޒnk-s1Њ5ʇn_@y]sRs+Td1bѾB&6_^'P:Xw>j̘yQV@5Kؐ)[xHm(#yp"K |zL8V'ߝ֠4хQ<( ;<ӣg 2 {O,7H ?OU5Lxt8Z PXٙ9^#vҢ$JqRFTtqp:d%N&}Jö>"N$%kCCB%q hg^=زVRkks[I0 {P ga#lʠ*H '&EPV&h䵦5 W($`7߰lm 3QGp6 .*Jb7;%Oӌ݊ê\Hpc=K">]KHr?wNd- -:_7d3q${Fu*K=TXG`t (E`6~t3Q1~)gTk2?t-n D.T%x凹[ڥdݧi{DYjȊ(.Zibg0 &sA)DbYs:`',@|nGERzsy"qfDH9A mnHYi3l)GH,#GՕt7%{r^"E YB϶5*iCHp\.%qi_GM i^b"ͳ T"ˇ8 @I8|WMŘoIi*!8FS8ikX^կ:-BF/uIKC0sF 8O@[>ܶ&S W=\ Fb\ 3Ŝ2% h)FvĒ(B1ݸY%}2l!?l#ݵ^ӑՋmΔL&1?K4rΪg ug~-Yw!C\$?{H6p올# in_%`?hdΪd Y8nN0WOI* :HuP_m̅OT,,|ԟ #Mء_KMc?J@Ugq]m9+D .c#\u$ΒcLIˀa{0nOuJ@PhfA'?nj^3=$@rJ>4-P.4iW**j)Tj_P҈}Z=x#7r'`l𤀪د8K 0ә6zڸE 8lc2dC5wze'`v^5F#c8NeUb^`'0;1Gh:Kt.YC@?wI>9.hZV>Q*Cak6FYBn Ueնe4+*[)N%•~ E\t#m7ky-oڌ"نGi`Ky -sx;' OL  AiȚ2 _;QQ|)WdiG%[Hv0fa+!I,Z?$"VAt N#fe_|Uԭ9uu$꪿bk G2&D|oK-+x%w)4Lm4:E\1Îb^ Yp,%A^FQv$_gwɌY% }m&!DuXZP)@xYUoڭ§@1pNsۡkɛ1?˃)ujUK#Owx.a1W(Y:(>?.SR2|KiNsoz~Jp[~!O$3cpg=~cGK,d4K!GfF?ZWqHJm=ngm9&V?(erᚅvfGz*G<S= nrN,Alj9igD9˅7ԙqݍ@}XlgL{wgfW۠I,ϴKiXfn6_йLa7 oШlHѢN`swzpS,+EeUK'Pˊ"d Ur޸=+t2=*M9&#_tiv.T.m7U07za'9*fT1 gՌ6ɒA(TțVXGЦ$w>؄<Z? Qk#2{"*LY*1pKB.\:*Cs=?i]?kl±j tۏJuLNgi?B/cdŭnA冎7Iz`DDnU^X82 Yl^>#y1(g A"ŒivSWC";h3Z%ŝTrxK$ N媿Ԉ&12"-}(摾:¬ۉC-(Eߙ):S*8gaN>*{#5+\V{lFTR GMv>prGaד7ϙ"2U֮7F?)+b7Ѡp6&MP̹S!ݛ9ϮS$bСvyQ7s9"R%CD -97C5VLGDWԑI|LdlR;ҨD%F#B::&Y Ii*oEe[ M~#%QԠĬdmGWhďe3 eaZbH?;DQ-riGkg0 LgEvP{5F$ oDŵ]R Zf=@Ep0s OIq u ?kyÓ}ۊg.Ye$N@.h,*|xD-G@6Syq(7ܰ y ($> ꗼɅi=#frD:[&o}p!)g}Qմq @vj.>#&wqI,% *E"Ip㾒L3Sf%E \怵!eW+ jkѵA,_ .'!ډ Hy[[ɲcâE|zDsIGjrvq($jՋ™;ގU,d'1i]NJ ~m-xy}':rlqLfi%󌾸P0PnE}=D́I-/]vBbmze0i>s:C V. p+";`:~"JIՃ#û}J#-@F4+4wANKynȸƦ%o%-݅y׹B?R+ 9n=mB|$lZ*+gHޢ5HZaa?uv ^[g]% BI!}j*V>Pb1]ٸ"KB+˪_󏮚7ΎbsC-H}0ӇM~]~1-kʳZmc8h✋A<ƟH@ ܮ~Rr:LՐgUd5yM]ppsYkyS2<%|v(~c9?;E47Xe' XV?КqAe;q%nRJSi ժg=G ]g#vYn">p'p4JumǼx.n2&6: ^l[l_b}/?+C년;V_|eN;(#"? &$H-/٫Ï# aT 7[xY[2ԶZP*=ħ+8"6XHEkiEp쵤-yBה )(XUCOJ[7@БTߟ22;h:jklhUĩLb;1%Kb\.R];-t8G/9 l_iY8775E„`;Zl` 訁4vt=dDOqٶ\x_)WO\CaS Do~H/@a6LSF5Yk UE(?+KNEA Дg|q"H%`pEHLWGnԌw>4 PSXY3[ P\I= ~\E18%C_OqEZcE0?ُ.ԿU^!vۑqmn /ywh[?9%c{{wW1]p=ں93 ;P dvr]ᅯbYjrD[ΐVWoQD es]Jg mCWݳz+} f?VmFe(3Q/(948a>I &M"MϟD@N?Ҡxn_{~yAux+isD_5F0w=&\EwG{wfyk2Ž;|çPkɆimj ^يj;[*StHCO[&Z z!CKfv˃%r܎R\6e\DGC#{t (8AAQU|c\ 0taU> ʭv9Xν\@'o_7ѠH8:vD< 5)`nzPNI] b6Pg-(U[IyB9Sq" ٛPk i[^dmtUB蔽wu"_"ʮ /5WFHKRʱ 39߿Y v%:^"N60gV؊^!)Й6{#ax&\*{=,aG|0|;MM1*:||? ٍmLJ N‘7]fX-or 4WF#|b c[ /{}@xqܳ3͉ݳZM *[Y#ڟdT\Mj+КirSn\q|iӯĴ:Xs^E7 8ۯ*ևVj,ڵitd+K)ҾHOj`ƒ,c_>D8~%Z zX3ɚS'CKe:A1GjMR/'n>NWүH"V%CQ. $.21%XNT4P!"A6*8 0~OCRY9/HW,A29)du=5އL8~ϩh _SVڣoQ& X#;3e$U''[" <؇.ykwٗ ݏ3Q\`W?~͟.yU,rjjWǚLbN|_=pLBd6|-uƅsBސżտ?b.æ1v\q+ڧJtudžyW4CnixU^;f 3Hs͕ J IVu%"+JGoGRљb+C2io^ q}g> ̥f =ףz]-O?VŖAx۵H&?4=oX{P3c0Z Et7{Ywu`'UzC"h b8]nSO@0Rk_z hӶ|U/vR4ؑJU}Idޅ-:k×@)| _n bG̕x4*i< 0܄l|m1;.1<LT,kX-[:\TE l«*iBD}^*`bԋ#tQUyOIxnG!]#.ZRT@*>JޮxI<1kE 01LO>bf@K{^akzW.X?89ڜ Eƚk@gt{{Pҏ|>Mek N0$ApI3vV p2ICLhw&Ҵ/idecWFq8؃Ic{=i|EJ  )#1Dls RO,B10I']2môC?d+O]_$̲ Fԩ]:swM逦boGQ)mCqg9dxf-u6S[Lz oF~h˚g@Nsjܷ 2ؾD"}#|9 _6zqDPQɹvGMD}gHp…P]8QqʲLְVU~x!ѿ)w!3j~5:}`b,Gxj+>hMEO"~ww 5|߸YR_&;dG demoX-ơ?PK9a ,6HHW&* kmԈ1V=J0J' 'H}i6m!Ӕ""pxYb_7P'@b 8 ":q<}Ag,AjޯZJwn|JIm"{s0엙3Zs92vg9 réOqS[2:ٝ⊴hJ!n2vTwf؍]c k5ow:ESQ}N<)OWf`>sC\T<0۬2+ T`{;Xn:izvICG_PUѥ٬8;XQMDvd'y`Ɨ/]T/JtGt.+1GHjhE_X9w: 5KE~x,V4TD4Y<;@9 >&tla4?#q7) h no)CY2i"NEZG {"Ё[You(oQiOF2v 8ͽa'JaN⣬e 扚.ێ|Ϧcе;ҖїZ1IXiP+QȔA߇[Zԏqe=TCa\=@GL4D٩C#hRu?" Y2߃?tUɸZUSj$T2(O..եLLx:hE|]|1=sQP dAQ;#(mp}m YjdĖ 찅ÕVNѐw7'eG#F qՍRΚkLW r3;l¢l[>! >֒{ ״O REdK Z16ϳb6M O>Rda8V` $+unZ %uF̭I0Z{SKށU#@ 5ICG]x!=PIh6J^('`jtbt=spv+ b-Ց_OIyE)HҲ*<@\iD?"Y>VUD(1fz"iDȷhC l܍sq`WN*A5ϙ`t~:!!G+y[ \_ѫJk=ElL%K'V ˫T(&vK;%8N2) MD]ZappwT?Ԉ*pMcXR} {IP <{Ye!K7dڒ~&bbH.&go^Hv.UN!w^!ďg \|QOz!OAG0{/,6MFߣX$j#$tIap$mV.1PX5nd`CdʖHt^JIhf;e?@P@):@8k*>E UI wtvoM7G`=j KtY WonnsR)WuNZ05[oT$.\zxY*- z0b5AIo"7hQ<, CڡoYϰ]׺@F.{7 hf.8K}UO&Lfr1/jhHg}[*=^o 딓[w CƇ Aqr#'dK9tǼl:3:y~qe>Sxn.!K&nNӔdTam|ED%<rL?g.Ҙ}a0?3/Ҝ9z\ }`t4ޞf |r ǷۄжAG4bVKCMSSXCCnob,xG액nCqj.CVχ>D,^@;ѩLqg)@`64b[~}Lꝴ:TRЛ{?.pР×]O.(kɱAɒjVq :`w 8@>'t,PES{A_JTᎠSmqoEqyrrL?w'G(\H {JuDTjeC2NŞߗLFvޡ Kr1n>À4>SVxvoQ* [#l_\S|p(,^4zZ+Po۟ONC)'28.-2{ 'Z5{o6o-ľXI w:!%?e뷎38xvH Q%ª -&qʿpJlGl<~iOaxEY6f_~)n_61s~r3^TE|+kmgV(͢3W?-2؏ylHbkcjPEzM PU0H2qsaN!S(џbRB7wOi۾R.Fr&~o)JȚN"e#<쐋ש̿OVA_(BK}tɽkbK$〹gn5ҵ] ƫ'66tuS +Vc/&S~GLXdl nE 斑&-! ZL˙k57) 9шK3os*&_/׋$OF3:RMa.Q &7lG!T2B~|9$J^ 3$qwɩބ3'C._쎆4z#U9F6At\ՀIqDQ !riυX/yKߋy֣FY&t]ZKVDpM?Yit3nq)/.@cT t7J'PsOr{#9>q q?SeIU_Hpp\Djl=3re6Yhqg! ς_lwjL{ ;;Mq0M68`XQ 6FQ%5f Vc;Mq\;wyL)~08CߑeSbb7|MAo2f$lϱl^?2 Q[+%SטDőpĸBQS~{66;UQ|JrAe8|Â6a '<,N^ײ KY6w%_B^j\zq6V`t[G&lkS|n8][4ś|皝F[uIz{K8g/)_癷.jKL ҭF(|I):-yZ@#7D{99pm(řӴ]uhFڦ,>%ۍH@]|(2IOU 1s4ik=c݈w°JwfX?SK}*>kdT7˟PtFfNY|5kFN"̱]ذqsר8I' Yy9'HJ@Al`\xbp:}ܬ:o縅_diIY+Bk*s5ڂR'& lm 4mK(Oi8Y2c*H!6eYiǐaw}Oax! m+nιp\I.xQ {ka@a  X =0?ɛK1aƶb:L-z<(8}y9R{Y$T䆏%f$Bu(il1>GT +{y؍~6KBpXwШU\C!nG NPa{5apmV:W^H835c!V{@9d%UKRDOOnjy\oq*Z\,;+5zF&4O}i*>.8z@DcQTFDv%ǖgPj0i>4A>2Ne>!\|$?mBB 6/[Q24zT:V:@wQlJq5odZ̊l7㰉t&?G[Ih=QDr,4z+ݾOx3h*𞽿9{7Ys+`#{ 7 wFWQ.m|䚭C ~`ޡow⨿DI] daІ烻?DЬeI߀VwT.3y=]r!Z5uI$`ssjq܃qT3r94tBo?TN0SΕ]^-6D5J ^^[8{-&ƿh (r-H^u?0h\8 | AK~9V)ZI$F\+4I Hk>M$(veK"yÊvz'!Mmw=AGkķOc0$2"D\[T1Dn(4b8dTɀ$}[l߂8 h9 QpHF-xYMtL ~& W;2XW(9/o]\Y 3I1npF ²K$4?Vh詝2G7~'W&uw9trr:FϚa˭z[3bwџ2i0 :'ltDJ} <±r  T6».#2vzCx(Hưeu]+wuc/&WQl/wsgѱ~QGnTǴKN @cҍ &OD ت:Z_9]/ݝTU 7>UH7UҤ/r^!E讼0B g*;3ZP_ A(< @׆4%1=b. ik[x O،=) 0s*(X*7:ZT^2#ox6/;b#tGD.Ey_yO,Jp4-ifߤxM)O* C<3tLLxI k8Bh+@YL0嬨4~š":}, cU=VReQ݉jH6tj0* ߀`>WThj2d9M&\Y6p|Ůz3T EHz!;|Tvwgsmn$9BWea_~z'] w霭Wv.P&R{8ըd2MUBosޗ;n(5#xx^6U19v.Di'֋:'y X{t*H9,T1^Sԅ‹D|=Y1<cu5)_$ƣj=W(Aҡ kTrl'Vh͓M&":߿*NvtZ$wΐCH9EX_BY`:#B|Yxsf,0BR ATj|\1*9]ڐDMΰHGKW%89gRl]N쀂 ć[_TJJEϺú<IE'N tkU+ac:畖ߣU}OTsMTF=EdTVCڮf+ܺ4 Xi) Rk)2p1[utLF(#GF>c\ywA>׮ّqY%vv!,ՠށkCu{-i;n*Ǔ!?hT/wY@}\ E}ďk8.7 Es*tKO;ϩ/)@Qe!:,9)in RNz=^a~ "   |݃/c=m9l$+X8-%fOFi8WA4E>H}e҆n#>Rr6G |zR/b$`xμ֗跰g#yѸG z[dYaCH?%QF9lKO, onb3 ܚ9bh>1uɦ1 i#qdIoDxm1$5Me@z7&04p2O95΋.r|#i &GcDM ٝ3~ cRu$B7`.U{?[v$}u' oɔlh- 4.l-р eS'MKP hq>F`.'+ub&!n ^wzF;ʈG]}tPj LI γ_hV?YAf8he@]AֳOȆVB\^dD Eur!-VSO/XJc7[Nx|vk4k6j*fNܻ\Ӥ, x땘gfg0*Xh7n=%o!UhaɋFJWyZI5iD463&QQV*gd(ωΊmasmSٳ3a%i Qt7iSI{ȂSu2XQ %Imp npBT,hb {ѰkՑXDfnNqBwc΅';:d3Tuu UNۓ93}ٞ8y`! .O 'LYCRlVzX0"aB=1L;K-Y4TbS JPd$8% d% ,wRFUuCƻnУC H"i"1jK^PBԑ =O`jMt1'/Aڨe@f>k݃ޙ\X~ z+5#$RvUaQN*ʯXe#_GcR @UbZƢ<ٰ!&Bƙ1Z)U )wW}1q#AaGשNm<˶~ ~:0W#O"[D0m/U6 Cmm'o/ *'!2J=3,1ghHÐRߺ~T \"c޻ٍʕ>$s``l=@UhΓ% \ATpJnZH#̈6@BV@$Ѻgc1X2jԺ@WH'񹆸<ԫ0Pu Ȉ؁i(+oe&Pl da+᷿x8-@Fm>oHVzMJNfvERـzsf䂔N)PXГ Edh<~'Cͮ׉4h{O!(8ate$C`i\): DQJCZsGx.Ĕ{"^K(emeyZe+z/-NJlr _=gngnz~t'z֊dzw]Co@d*{r6> BVrsecdh! Y K8wSL58p N/- 4QsZ8Z;jA՞0VaPPTpb-׮(}/ͷnY㵭q~4ϚF?͏KVJXa v ``xz0l0&o|D㖔UZ<ϯ(F>2HCOܒ  ARe}OIQ@^eOلdZFf+HWY3z u+n:}hs,Rqbʺ\Wą#Ʃԡ܉?#&߹Uv&ig?w̮Ը?C^BEp ju mWV453ECeN[C uZrS߮L1Գ>1~2w|ὢ8`Ph]7 ЎAQQ7]'F-P=K2l®1 foqpIY7늘y 4Mtu['P05fD!q˞h:1AZܷ`-sMQ[ŽG#Ã`|S0餿$Hog{z/@r:*a7 s;kkILR.I>rw5+U]60>Y CVTwU\ XяTtL3y ]\6y(ȫ7AʤAh禥qF\\< x [8A;r256zH, 1B/'Xe2}: '~=Sm m D%܃hc'j'wup5xԿnvas9/S iyynrV[8?[nG#VS@K0u((_˕(#^E]s)L^ƼVVfInb`am~h8Ka=tX.C{7ceی4o/^H}_gVcf( b>s0@v-$wgO(aj}' !ntdC۩μ"`qv;|@>kƽ-y>9{JЉ`ܐ)ҷuccAqż^> /BB'!TI+_]7У49T8R۫S7󝐮ÔpHiv C;JND4?^E &w}&˭u>h`N^%{ H\!P^uDh&֤2X,uld_#Z܅lp~ۂٔ]j3m DYܼQO+ԬU\]nj? A' tLy:DPcie4 7V$txIWF&:"Bvz>)%I?NϔGVf>nJ9jo`?,/] Ss2Yfw qDLKDUߣA<5r (kIJvNgrlL~ kh0V@Z!  +>h~=_V$a㏬ʳKu*3KUА KZGOj*@0Ľ# Y<ʪH]m8tшS#;r@mXUYz|LO;|U(U~M.d D U `kn]tq)tJ wm {t|@<̣©`;ՋkP7ܗ, M;8| 1AnӚh } bi>OJ;-FP\YMFv5' !.lrF:Qqq 떯>ëuvL]+ҭݽ1ݭkM=峄^7j۲ǀ5z$^׵_['a@<`Aḽ*wj "X{ Ŭ) 6Y a;ݫa_N$[%xP琌EA8;D& Z5ݼ0Xag*G‹j$%!oFH~馇nlS_l.^ rZ3upbz9KH^cC>@'yBoc*# JZTro,$IN.bޚ̝>؁Fm]ò`(H&c,6BEio g\!9;YȊ턌 XQU_Ih'Hv/`E5͔ jCj#5,ej$9\-A:]j*ӯO]9,Q-Z-? O  nZŮWw2oduSn[|{>p]wphN*}:D4?0DyvcCDճ my7}ax[!ƩXA̔\@pL$^ƇC#ԤZȠ%tz8a ԜDɠ~JP%7 nTSw"oVǦ{GUa2,=&3s:BR'#Y"Q^#%-M"{ӥO~țݐ3=C& %47R _Qf*Nc%CFy=qy# V.dM+狞M#VJF'1H;ΩXZɇ/H_K ͳHV\N9˜ag{|r )u⚸X&pSRWKN?Fgr|?Ut.,Q;Գ&a0S)cdːY?YuP+DF &DvI*4M /7 LA:K}h*%kfׇY"+͋p]84 &!vޙoŻy< KkaIw#6rj?'d6ZɺӉęKeEp|D\8 ^PܹJJ !BCw5gn᭓d]`Qk*/f|` i.;0pЀ0_.,@gLbVwkA5𶂡96e"W|pW*x7QwBXXGwd0k֭6bP.BelYqw+#SCČYF(̑jIq1Ifkvb͊UFԢ@ Dګә7^ک4e$p-5)ʸTjc<"K}$R#Jm ES6Qx D^^pI'6bǩbxZ0fa~'nR}Ւ=-h;Fa)[铵nPٻ]]1ٹ(poRyPc1'- [9lq;X@44 ~bx+B'>= KOG䰣!$QEi◂a%${ @,u+ņ5Wo58 ,)rK WkAEhw,Ml ɼ=_"wkƅ- 庂0i "@~DH,\f: _HNaD٧`rzyqOyV |*&qrž`%$8*B VyWZqHS)NQ4\K>I, ^=5PHƤMDz>UNO \qh\};q=[}ck17>Jq\IL$KمY2NYmc< oCN)= UU@5LG["u iu*hn).Ӷ&jƻsqٗ`Y @_LVqa5kMe1B{KĠ?nqULL.7/ U$h:t Tes,X\ ?gduFTхFb8jqcbi#^0z288) !MMm?J6<~KP&0VQ|v'|\ZCMӶP)Di!\äm֬5/L ,u% UeV{ޏ ?s>kM/Ĉe[j-dl- ϑ h*ʟuM$P]\t;":VS@PW`|)T]ha sc&&JwBfhV#&C'ȺxoI0v} زHRc #ԛs 9-F/yrӨL txb㤋>8$Re62l C6&"@eL% "@ф|uJxd%}Smxqz`ϷC~cF-[iS8.gûRķ2Df(%DJCZӈJ7e:0ȳ8_&jxA97B'cώ/XJCP c#*k:L#dS{aNάEz:.-?ELZşO,:ufAiF`@TB#*8ڵ-}g[Z"EvQ}X#/lV֪ +\x$/,'3HTB 0 lF-unpuPR [%DsfpA\?Iyxg7Y (+&>3]"U.B[UbU` ;zz U՝C^7Y+'Ke1K;hG7}λ;MzȌ 2k^bٔ+#*DotbbgPZIJ[qJ%p>9&2V#OB}ڃާ_t_N-Y:\& 7B E eHr4 O~Ɖ^l?!u5w?:HGO$"p @(8[F6J K\!:md*u>o9 IYV5‚8x-LK qp[ n&#+fhr5>aP?lPD,D>pT>hʢ6dKf/zU,㩟4BQM;}-x1kҦ.6snq^μ5UUJkI"c^(NaAD$LaM%(†0%` ~~J2~b/zX7']sUKߙ Og2 HB4| )T"c =i&Q6z})̥DusX@e&I$-8"]v$ Rjbf#+.=C7 UĸЫ\8KAA!D9&KN )D9Y@0e!Λm#m"ჰFB/1\|{.IKj |xpڠ%aimf*`AW亀+;D-i[8g,I#mlk),ɟ"[7c?mP_V_MvEOUo^W" X22?ە&39\EmQY[+z&@Ȍ[f] =bASimqgp}ѩҦ!UuJfsM%РrnfA l6M#+i)b :HGvtU)'\->:8Fx+7.)7¾!g7I F9 CXlLE/&rm` ylІYK^j>AF*kf0bHVv#pAr 4t;I4u…tF}Cc}AJ]|UǩRoe> ڀ8i,c\`gvW5]6X;4Ug{UFA$r9CGF9CPu|ڈz)U 5K͞gnY`s7Rb9D5*[x r_EX5\-DͦPѡBX"?ߠS}=*vR[(.4* 6cմ^[t zRH?l̓]:>f)A<8xh]+-5_9> $HWGFN=ui%JW#dI1 Y&ŀrl׋vv-'|DcɱnUsQ/ҷq(Rۚ 4QOf숖c*嵇݀Ľe'Q̡l#l_u:"_Re}[ %;]Zi >>H~_QBʨx{ sUw=ˮ^`0EN-Q/S&QVhopE4.ɤty< +}?suzjy=lcsu$}Z t,]T/kztIO]V'_d9d'# E__MZus5iƃr/(CQNZ+8VW45Jp@t.Jۅ*GG,FI:GyËKyB${)Stlu`0̝88Vmཔ+5q+\˔xEkVv"F5levpCK"C ,H=,SS.f=^2Fe$UkRɲsXSx!sEIq9gwe[' KэRHMy #":I2^0K-nDYc7u+Dǎqaӧǵ"V +ШݐSh9>>/ET>P͛S01(Oډ% HdUKᐓ’0UN,#1ŭSӃ"ES%nK&'6ǁ:T s}]hpRr(hWmh飧6qw&O3ka9+ݟjkO3YY#n@l 5{*7((='0&MK8S uz~8YYdi+MZ{DŽ@p^؎BtΨ8ڸRd_e-y6<~:Db&8 ]>W}X sjT? 1[63FS0r$>E} K0vr}B&>h%}4ڗ_MNn6=up*r=gکR;(塀Ǣݪ`eMh'uBҶ&ⰒC|zudHh`ٖɝw#浘a ӝ@R&\u:=f@ݵ%OHM?UiMʱd5 87tHsA0D50EIysóS?a_gjq'$E`v jz%2d-ςL%j~J>3l du-YSQj'9Qꉓ6 &4} s9tdѤ?]e{F--5RF{H5;|]c&66iN^!M4zK Yu]Ry4iD`dk}|ͨ&S ~ z+~ <̄ 0*탲I%5T"#򎾏4k r$*4Uu|yaj:mXWjշL$cC}\-G[54/ή*3;Erv`>[s fL!#5|>J| ԙ:U"br`|"!2cGi /]NNє1\-` pCqjx~nVI?LI:[~}qNhMO$T^Y$0_eO*6$>[WJA#}pQUJ]q p?S5f.8;×}81DӠB @x-1 2%P؂^KB5/k@:2s[gFz լۈ{CK(%6jXz+ә% t;bT%] 9p=l6=˚>YҿùFat]U%qn .P1(MxISe[PL9|5hց&sI 4^j\ȓüu]ڴ1_4Z˟iV\tWf7ц+١;2GGI:>^!˟,~s)Dr!:Nuu Э o'萶r1.r(H'raPMQGS|~7B3gU;`Ec+21dFx0p61 %5 캥c5Ynz |3cj󲏍=US?u.=5\L:pX츼@3Ϝ9 p,N筨XɸLVxG{͍PF+m su>h,ED9M3]%h߄&);Fpk CC%%(/z(j98:DRRZA35PuU"竈 Bay͋yF(0iQ_\]Z^0ݤf5=ȁMpϒ SR- (,6%WH  oaL sIda4jw? x+.1`UH  QT 6ttXȓݾPk"3؁TZm<&fk'\VM8ǑҢ̄X6;nn$~^$J)lYm"Q=.fl\A/%K)uT\6*(cv\@8u5%(uoeJ~cJMC$bڈHRlTDy hAq gx ώO3֌| !)mg0%7;'1Z!FR.)`/qqGϑX!rCcG5!eCԼ[FEh@tD$̨6*jf@[f"+ZM`x#cªVG7/d'V"fR;+F:Ԫ~R82SHv[)YE.`3&$jw%W B6EgewkP1p4uED u+ Y 68Z`Ǣ ZXF ϖ^~ kQQ܏ꁦy>|`1YRmo]R8!&C,ژV`]1qd0%;44U5HcS2d\8˚7s;0vȢIqUSO`QHW@97bt>Kn䡗ibӼ?ٖqBy׌/:S$Qk*]GhTt &5ĢfZrOrbʶ dR^,OpX,@9Ȁtm\y0A\ٮE7E Qf 1|f 7>N5Q`L "P͂ a&A 5\D(,Og0򛉦YF0iw$@Y.| wm c<98N5ǸuٚSF@OsL6o=(0n{!ˬ~Cy؈]"cL3/6e9$=(2XdcRŇy9O9Ym$l ~*H8.|f=$n?eV\_jk\@d+deF-LC"w88/oEt19uF==n_B FZm7ѫނtC}eQ Ϻɥ fL3/B[3_zSZk2)3+D~nY*;{]v Vk7qH6rǕ0+8T.aۛ a DQ**.ءڗX\$ro/]W|,X,h"TrBGb>bEϊȒ^ nJzVi{8JiIO`mrUIZ65AxL$I$W m5x[r~+=Ǵe10P<Œ"(=L>Ds553J^wM!eDD-ިh >3D&JlC9V 7 (8R3 Pz]ԑI=.˶ƽl1uG-%<ǎ9TVWBh61}$ ̿~VaNauT]KB"S<2](懢U&ߔ~q2 ( vm48mS&"R˄Enn Ge(i+~5Iѭ0mm9}rJ8TcAv91ϣ]/lN*K|., 1 S~7P`7)7Lv^edN@?yfޛ|&Mi[}ފEF !y:iا H~=`HwdH!X#xӪ O4Pb/]0gsڋv!3bh!^)dѿ/ߺ@dQ|<y jK; N'M6瀡1cN=o?(qN/|उ- !#O ojñ&v=ۀPeC]ηD\83cli<㪔}? ҩ~$ɀR| |qhkTo7'7&o{"0TA>4)%$zJ=> G=q72KP z}-MF,:ea:YEIaӱ&*Yzq&0\-0_<:h{Q=lޥ*MÚvHFWleafΝtq\** 9Gax"II;JQ9_;Ǎif7?|Kذ "[`*^lkJ$tk u;`aWNJEN|%c׍,k A**TlO!|hFnsZ#밶{cm]ܑ5͊'[Ncm灘8mXa][F^O) *V93z09V,%jua'J.Ė) 7A#9,Carc%-vI V^?rz]a%TPoW-fY9۱n!FFױ1ceBO@ V9{;=ZFr7NHZZHƈf!NNTIwĝ U?>D%m6ohmp QxǼH N\EգYlj>ҭˣے=6 gY_I `hLeXEy-߰7)(3l*ΧP*9i&ŀZx96ul4cN{k_// }HpCKI.c*Լ5ys_%I ZU86, ulʓ~ƀjkGiSZnqa $`^E'Em.Y.\E;4c][+>\Rlﵞ|&ڴHXm7L=8g%3$:z'Ų ÆR`%L3xoh~!W 4ub6kC*.$uN"5NN}'֚h.Ò;wu  󜧍vn2!ڿ"0l>-įx^<W/ _᧿BCd{0穉ݷ KP| 2XlHl/ zM F›'^{W"Y%Fjǘ2d#4Q3gvkhq>aһQD;j`aDO5yIzbHlp5%i>fyzڿd# ;{}AfV*>{X MDTDŽپG-4IDRS;u>2ubcYۂyoE뉘ӴY`XoP˧g쌸TStHWB鹪'9Zw,]6WfWDPd ъ x5UWnf* )jUgfmLc,`o{E(@EZeswҢ45XTN2Dfõ6Wz(^aRqCIMM^w歓c,R8nƦ{tQ]!uiVl;8 .fUuw&\z$=:K!ڙ@]`?(|,A0Z[E2-!f i6E9 ;ޣBd\5#vU諌򈺐u0pxs Ck )P UaGToH"E^ VAh{DlҫιM<'QBQKIĚi I\Po9ouџbM)Hr.a߽ &y?jsX8+KOKؿlDAn6w j>r7M8ȃCoghmrm8]a9ZH,p7U[u6x&w ax74:wx;rI!A0J%yRQd] mF>^+(+#D|f)I'W'8Y|LĘ0tlT9骺fj̳.ë4Ģg `Iѹ޳Mtoݿótzu,b@^BYXK̼8 34~sJB &?x \x̵C<ġc .3lPuWo gkI%?10U4>7[U7k+IΚAރW' ݋0BE4qB>>aVƫo>ݺMll3o;<9 V `.فg&W"K8ɣPd_#SKb=f3#iΓ_EU~j\Y s;w ?hzO}{3F$ ^[ÿ)GTX{g_'v4;AC+냶EC4G _Šc)k{MpM5Zpb2N(iNy(}{5@ABxLѐh5mRʹ5\tU&x{qatgh`IQO'*!x)~5q}=3DUF^5xSP3VC8|u:&)S k#3ܿ8ՙ6y˔Z柗Fy&#CEa17J!/ۻvdmԤ|pR]կRʳ*˧oEkϴhO8O[2N*z6Z*(xSFF+3s.->kC .?:)Is)QFO).÷ۥb%0{aЬǎRU7\( snYՑKP>%w%,jwqlC,81HhM4bOx/-?u${|qaY+_FCTU?yfК| oAg:;n _ty fojkӔYuE2H $Xt/s(TG ;K{}fр@o3㏴"J`8lrQ4d8A|F:wX-ʳzBG+|"/W|Dz*,Tk$f{qا{; n4}zZVXIy!GX}-ᨺUmpl%Dg͵n91|$Ml~;10q/;ie ~m^f[\C6~ G#M2ly_ae4@iԅWe_ ݌T.WNE[p<lr08V?/@u};'2S$6J)AM^!\duIG1 Z0 #hoW 4dkǝ֞ufՐIk1.8ml Ћ;e(v5PPasvH3]E%6gmfEQUd-aQmsbv ]jX[%[6lL m'2W~,4#!SZ鎽#Ǹ yDvcѮcgϚ8NQp^QfbټgOd~[6ˆ":4ZuXi(!ȷi91e|/z˪B.j~7Y^^oO'`Oq.ﱽCTf,}Pt gsv! %{ ,ׁVh4++A^Lu_Y#٧{H#NNKp4lIV"~XoI&|ޫtrUc,DQӿU j۔K=jI^KYs[ߵtmy'l֋̴6xq؇N(y0i<$=1` ɫ™ɥsZM  LX9h-G%FwN_:[ܨ/ ġl &9lXpq`\նLX׵)~y>l!ƪt1+*B޼c|cDg@8v:n_|{جϾqJF Aڸ`Oa~& BN`tՒo7Ti0D͆)`b\ƫDA.\9L ؚRo`F:/$TM|9i{WU4 .j7(u PO%8C13ԫ]싖YR{7h|^Lȕ 눶(HNt*r/r %q`6 ƸNz;|#{s{ ÀN; +< ٙ?I>| ߐ30$6e P7F:Zԏ~L3Dk#C^ДR8ᦓgv@'.t\8dVc._e'U1cZR()"f wZ"<WqE&\Hz'v{r(vY5^Mu \°_}W7K1xi]QUjkeWl"޿POh!5`GڪPU.d*he_"BF;>F4 vM׻﬍ھVoP6-!G_w6Y*p R-+3ٺEep4>YZrf]1y b _/Tsoԝѕ{h t9MηXPFЍ]B1oċ1d@)2'9oBqYj*2g6pE)ެA2@kYї&B,KpFUIM-ifmG2oi)\7'_?`QϨ3(^J|y_jEO)ЈhT>NjTo#3%ai\{kCxCHIlݼ8Y [GfEhb@]Qt>pOnxR1IA&ۀبB ZXr>!9whf@.K$"yuC~t5871~ MD$O+$58tJ!}c@H)xd/.T-ó Sٴs򖘐Bgee\T1Y,o`lnWY۝NW=ޘܑ]*V*R`ޖ; ނhǎ-Y9.GE{ $ {|E$Y(-8M݅םʱav R1{m΂YD|A6Oh݆tߩ'49x.*L?$qR]pA4p_!HB IbQ%QÁr9ڐl n6$n 4o| ZHoO2 |"KM.É}bAgZ߃3WTgϔ]#;s9w}[^xS.E6?]IG5[2бs_Ys4|K [ C\"))s'lVtNXZROiHIdL@ZH="~P<-_<<>A<t0WrX0qt:X}x𕖙[HrOj<}䯼5w6|m谇mڐȸ[*I1rE=ؒ:;ijnvW!)cQ 5 S+&HDww_e#iM8M=EoMwyYT`Up~z=u*wwk,2uZJ&f'5KI8aŚZa~oq iycGus*q=oP Qt-Xg2r{A2t e*׮m)1JA+lg3sD kʁln0K#Y `xk0_+`C^H ppNɿ|/S= Fm,"W1XqC  0pK'^@-_t =KVP/etJ p_"eHv7%C!Yc;t{}:~6R8n '^TfO9Ks.~dVgUHJtd wnP߅@`QZDbh1JvDE c- L=׫c ގW) ENIyp5a$#(L6.̞{I(  (>i%j}QvgW \U~ưmVm t#As&<o.gV*Ucl78Uǒ܆c~~ odMVЧfLp%_C%@Oc8N8,UNÅ +p:G$ٜҖfΨ -o)_*{N1hdi|S&[V=jș3#&XKiR>J g8z, FXbq"Z8\ 9ϚR׀^a󒆞[3o*,!N浒h݌Z}W!"J#1í~5+Zs&_[]gػA|\;!f,!Z`{U 3tkkV-S`iߦ~YDu`>X| d&xұ7weIm)*a EfԈaziS4^ "l\2气A²$rs峸QC?WxrܾFqMN=CZ nS՚X<TU(p˸ 9MBzB$)wM q|IoT*G,4ı-^0d>P񦌥+^ ̺i14S8{ ~;W]N`g29Nʂ#At6tIۆRtO#:m”vߪ"Gs0 gI~Ґl>c0a6#'Ms ڃQѭ4˿c)C׿_WjZۂsyCRJQZ}aPuF M|#0vH[j-kծĹwW5׊us\#|C}}pXNQY6 d %KR x!峑,aš31 Z= )B(q11Qi;$!d |'4y:AH^ٷvSfF#kU .ŔVԏeyJk,03k[{I1 ܦ",p/2=VÊB $b^ma-uJ7g)bŎQpIG3<"2FZmzf?&d_6 V}E3;"aOYƭBG1z!W6f('Fh1"F f.E&f7WErSwE<&鬭_ 9US9uuuԫ@%m4YI͒8=$фIƅεYx@lT),sz j^@΄ 6A| [NZOr;PPN$y,P0?pW%3r<[vjVe;GYdȕGx9~<7{/z8"\`6 ٫n-K-O{<["4V,:\8FyǤ=g:n6Hxzw_rv96ɶ eK$_ ٴ`oY9T> Z=c1H9ZPjzP $XRsghHrC鞒|IPKҎkdX\j: W/~.1i^/5M1yI|A}w8ZL+ڨkw6ָ2KDvTo-oymk[k,2iUo=@>y'Յ8xRm 9L) Ħ?J&Ow #CnУ}--G|> !^z}EH`^ vҳ$̢z/jRI8p/p>GklLMQdeVŸONڠej742fV e˶a* d_r"Ք">_q?U'Hެ UwM;yo,KeRT(n+K))jnB4 V4>-\=O{Xr^[ @B?g~$rSRm4\ܣ>. "eD]{SU![uñ_*lY&q8DV>Sg^CM`; rَf^)tL]) *Ybe E+,"5ufxβԸZl?]"!H dd^+bUrGN+ I66G>kA#m: .PMϡ; :yI[kQ7m@ϠQ/&Xo }H)9Z +41-7jV| z`1z,YhBw{ T].yucE$H Syv@TC/kSTQĠ_x>6_=iQde*gq+ƯUй4ޠ2!%v!v¸"a-oɂA73))N"rYTb@gLVoN9_>͡/ f:fYi#L] \Tw+䳗sv@[9(e{Y1qx?~Ц{DK aO@@ vPl"̤@Wڪh~>ӭ-i}M.3GAKz Yc xͶêm?6R9*g4õe@R! "gQÙp -\'NG]eQ:;.bNRN1-L'm"w ԡ ![o*{;݇pJHz,zn)T,sPYa1`C %4KiLpAʸnmh/7ٽy0ÌtZ/aQv[fP^`ʛ3h|uT`6ۧO.bJh sBx0K[~PUɎ\ڑw b3UjGS<+Q֠2[LHYNv4Y d};ÈͰh *>XehX?G>l6`ץMM'! ЀJ}?ayv2bdDXndS1s.,'2Gg uxpcg~pD'@y2ԕ 1v=X$mU2Mh"o[8vo/"zHN})etOo ;w%I6>,:z _.)9制}T0BJL:%ւqĤ~ XxJ͜Az`XaF~l.5#"rC})6v$hXtbsh)MмB0f,eCS(hO.?] #Q{9F:YWeCQgח=/qPI|2o!ONsf揳#>Xϸsw"[WFzEtR9*a Fn) (6;nj( OT0kmAz)R3f ӜgY~ϝ_從mBA)Ҷ|e+C6}P ϬP?^Q#p> Hp`-[~'}7| օQ GU5X.4vͦѐpMea72VX{Q+9[%eyVX; qMQ__Xдw$BdLuX[agHfBr <Ό>uQo2M"\oJ=2o5Aru*o̱ ,M1P|3<ذ:qA@KU9_WJ *Ud jFb?KauDln4ٕ#?#DnU*DtKKl G!/W >UF,WkPt4qBPp0/?%$<ܚ VL-QUԣï[ m?GD\MCH1h#@~JYJ.{-?nBYk7sy@= &1E2f&l<=-e<=^]p<ꛉ* =#݋ HtXi]'`/87]`y 6≮ӕ㣓͞iݬmI yHy& H;oiٔowbVp,z3\P-T %7 Yzm+WR9j9չ CܫzeqL9 Dny@%'iQR48A낳=F~*}%$PdK<"/.Is]!#Ud-n.igUP3W$7:x}#.N[ Ֆ=ro)7(CM\Z0ko9P(Ѽ4.{{?"]׵<9lh\|p(Jb. -KȌ3ggk7snXNZu< CF_櫎j<&=lD@)Oma_]u)qȆ3YRPl9ueK@$bO)VKPeR͵izZu1Y e&q`‹xT{tbV(fCr/N%aBR= P}kE"~H&;lDJ~&?ey!0;UqzM)^zM=[ /S(Ij w*?@]V,!}|NiE=zZuvAobeC&՛eԌDN$z׀li&?,20vx[E_+7ah̄ZX.h'210< y ,Ik&i2 tl4*rI%3X޸k/Ճ 5|[NqzJ$ahٽadM9ƿH5#,8G ǑH5XH9o uYi+lwaֲ$5daVY5ÇčNm[l H-e\Wu;f. pQ"sJ<*y92:JYYy):0}ޜz^3jyPu$}\ēgVʶDXe$.ϐv}G7A,fGQ݅&:Nu'qsL [iu8#!w*|=p# ,O;VFV h]y: |aӋ'G$n=3} ޘE& b Pt8 tUL ug\%p[G_ юkDۘJլB>Ӧ'G48ʨ?ِUk 3A%eܢKK+s}]J4}["BU" .S]w|Cԝ .˪C6F, ԕGMU%|1#$E "e :frX$懻XOӓeyBOMm 1?i)>>3fśC^̕JVR#AyaeF'@ LCih%Er8)aZ㛏/̤c 61㍿(Ѝ ]`ǐe6%`?0 F#Wsk斉jU/YѾF&ݓ * f4qO/Dz{VZfpBJCп|Hj /8Y? Bw%B>.0UJ)r,Cg~GpEylj-'<{o#%v.#s vIH P'p;HJ2ߎZ6w{zӔ i;ό˹H!.]x "xotNRo:$5Kp\-Yxnb@xIKKqZ"p10i'*]Vj"517 x6B K1LmgcEԻ,+-7$ 061Χ(5t)6$?fŕP.k–Dp\╧dYvik&e4R?1((6Ѳyuxy@3sq}$Fkm[*˾:pٞrL[T9EF, +=C7}H _[[x_l6} yP#S%)c?Ų9u]8~b褓X/yK:6ݝzX*t:5#LpP4*+YYsBM=o袕ъ\yϧS)GL>,0jYUExf A**é{}*s2 Z^S')Y'_'?N  J?dv]$">duճw5qf!0e %"5s_fnQ(^ #Zms0+8Bn "%5ߗm# Ք'˻^^ʖx u`v"8lzPCz/^PMMfb2ܿ*BXRq/u +GNɋ>WVгM>ň?oq* E hҘ˷+[V~|f̬?qZ̩/ }?v|O0q@L>#$d@w :Fm~?9+ݬ '[WEU ߰z{R, %ڸwQpkoTDrl^aѩKﯠ&X@j>WӷHLUZk6yxftӠUJߙ|6 j/e҆^Cga[#wFg=tp7/en ?(zE TUGZ7x3ДiW ~˰)C3R|,_J'j];a]"U~z_,Zu "]Nݳ>QCWSlzNfRP.$]hŝlvw[[f8Js:(([n`(*@?B5N<jxԡ"û/ Arlf/`-KG =Jӗ6DH9hX*|+ÉȷGxը/ο ](Q%L%WeqSkoPxW|r_<^՞MhL8K!!ܵYQ+Y1ʏPɳbmXݿV9܆͇aɵ5(1? jr~ϴ6UI1lQ,sjd y,CKd7F3jO]Ko:Б]oyr&>Lv1!LQU:*AeƖnt[N)Z.:ڿ[;9{6*8W@Ms*3̴adE2?D b14xC4zDa@k͟k7n9nQ8T 8oQxXZ>#_콾{֤+w*ֻo~n[0]CbRM#h12;닐F19TtIx%E1* t"yցBs"iuw#Ԓ1z^sQP?nDoX~'i_l)g8 v K_-CH+D]M)<2] MS& ̴ QƷI2(&~8`nݹ Z$:W;XS 4 zЋ-mJ?5~IN)fO[蔑]@@VhTSrkG[`MW<ص |VAvFsЮA`1Ah\>7GƆi[y!i[A >4Ž"zɻGڨj j!!I9#a/8K)Nu<LJ[nf N{NVH6=<xXm>_^$Z/W@o O 38Ήs{ Cam\@pj”o6WlM Gfi[;Jy.'Y`R+\\ H=-a-7cezP029 AB‰ ?r2&,q J V ,$‰2 /@7vT`4\dӫ f8 i|o? *m}*-d5f~* }% zϪ)`gǏMA湹q_-?>R>Sm&F#sFZ!/Co{z 7G}&-)'氃|zunlE;'܇m+bnzj)NP$QVx41SsM1r,"#v~6Zh>AW4Q3fv.Ǿ;ՠD>~e:e x٥Hv_ C]oZ\ 9t̖kJ/JՐB ܓL 6ڄ.ZƢn$LUTzQAi"q@;/U(CʈD;N D'.dldiGT`&z4(]o|Z=]u]uZCjuWx` iWѱga(w-aİTmęr˝xR)۪>Kğ/.kOyԀ4+,ᏮT\['AYΚ9pb|s$g#Wge eIсFF}?M1wOqkba^Za >/ߣ?Y@z6?Us9gC-,pQ`ƛJjC<0KD/8zľ2lח.j>(/m1 %ZYaa3}"~^wy][El ޜw bE3g<.>fd>:{_]G<SE$sG^)~o"at9䎂SdNTJu}$}{(a⒨L/3m=_]z_Y 5i} 6}^2c`r3mpYaǁ|]̋_~':xwUPb HE@Eu>ч\%v<b "ŋ>b" F,A`f  GTV1T*'TDb /f! _÷h6uMn='a4=QjkNٱF쬄<hc0N{D,`d1:x=.JstvaguXP.tb^tiH%FIAx)HJP DA"&[1Ju6Q *X D^&42 y]˂/q=?A<0b[L^)C30aC}Ƙ d0+۹1iNHa:]´CV94|K;/XEԏBe*SJ;jw0(9(dPQ% メoՏu ^EĮsgfzǁ)o\m{Xnt&| ÇX&VvvC]vKݦcĸF-\pͽ`;p̚J z`edm*V|t|{~Ab0vKVhb^%/s3iVv_zx>Wv9 7M?#EqڬźtZV=4~1d}S]5 }<_=WDVhA?wwV-AwtUD J* QN *Z" T618"*_`@B_)4i :=8qMLAP;@ 5wV\4ոAH='*ƿ|>f3k ;EoQ- U{h "wR&I ( ^$Hƹ+SQ?rG@%(Ň]%IU }phAyP}UQ|w7.SyD&rf+BhErbG@w3ƹN*,E"Ȳ/AU][y~Yy**P<@!=ڐdۜa`Jp0ffHMRVJl"E7hxX}WkP>zb1ncT]&-_n乪\U}FANYPf2?棉Ö ZTNeY5jL'b2ν"Pژ"AF5Ḽ}v@-,,.S}ßOV>LJrVX-@QLM=ހΤCvO\ ESC VMgk3 &("* 1K"q5R z&** EڕmY QBjQH,bVT@U)R,0UafY3l4YKM(UVԞot5(:B$E-һI ^"+ћ@8͈!{ne؛@6%sek_gy}blmm:}ŋz{''W=]O2Z?ryz^y>+b,q‹-_O}?fmo+]svNW~h|Sp{6_Yk2@ʡa/q=DDuusm[k/蠦/Y+Ҁ鈢<4VȪ_ |RP`lMb 5@$E8|PIA$R@TE ["@Y@AEBPGqsr 7wmw5pEs?q^쾖`R  +<>c^ p[#﹞]:s. Ӯ סzy/|_҇qq|3C q{m?&ii6ȺE({??>m{9?/is#I$iWlٳfϡիVOߓk5蚴j6Ϣ;L`ӣ׷0oltxD0AE<΃pAL=بl_7ճ$U~K.?qױ0A ~Tۓdo<}e禪?4MƟ鞪:kT$qYX9ωf:9ᒮ\Y6%,vEe 0AP9|њi>Oy2/n~f͋YNd"$4hѣG7->p^Hي2 Ha"/YKja;XXXXXhhh#k~w{_<(~B~+ùŖ V[bGPE ,R 814>1k1[#-]M{_ g?Y! gi,:T=|_7 4ڟ %~Y&l^VKL,DZK/'.pN ߢi_:،Щqp"p(P/ 馣baT5;I : [\ׅHlqma at]#3 07RֈS[?CrטObhpEͱ$jUI-XbГj68 _4o_^7"h3s0ag9X iZ0;TJ@ZO5rPZeD?ҀBb {D4Ω}x2|q6`ʻE۩YK hӓ\8Oe4 5Mlj,0y1o[uEŅ6sٜT s(у遞?2K8_xWWZQS ţReGGFaR((-H%fV)LR*16qJVa!p.U*a2̦XvR(TXnjL[*Rm# ["饆+r\,Vp(X,ZOm=Sړ"~1ts7`#]b 1॔ryǒIꄝsI'i6㚸tT@L9\"j M.[b;q^O;.G -vR:G{ÈV8M{WwF׊)|L%DwI߻{S񽍽nEo]-?O|uv}5+T4Ǽt'EI^sE{O:tSʜRtARY~O8(bQ,QCO(N'G~歪S-Y0k:~t4˟k6l6m]KOrNz7ՏT*d k82aUk-E}?$Wc`we5 b]3ǔ{|xs9%HӤi` ߲{+WX "U||r:T)SLƪ=Vn*i):oޛp5/RO8 4Cg}F0(:6a.mgb8>3) ö2Uo^7QQhP;ZC>v:u+,U|b!&n]u.d)K)~}+{Ici^1~Nw^O<ݎ")R6rҪ [XI5DJꮮ4hQ(Yœg9Fr$]SM4P(P#wrP70& *iih&aJ ;痌Q@P6ZEgH%yFȮtX,c5:qJ%K(7HM%(?cc㉍ifW WL "y6Ư&j FQW8Ͷ'mBz}lG{6݈b>JBekaDyeDJ{Vv1a!#l劄1aUDV6YXsºI =)$!tbCL\3f‡^_'k;ـӎ<^xT&q=47 u(.俹 t'mkm܁6 .zS @1{~F)jlk3u \*ecv{{pJsEt[NZK]Zm $B+[m`PEY1#y@ƨ Q[(h-%DCt +HJ'-С8OCfJfwGP2imIVIq%zgXDD =^v?C.[spog>'ժ~ܟuvq]Eq(7:KgL·jAs{·w]w3k^F (1e h##ܤ#GN\SsǠ?oR<\v1C9IT4@f@t5VI/vXPSZ̊.|A֑@6B"p70EeԈ"0D$%AdPDj5 Q[@d|w E"]5H>i8T] ' v &eEgGt܌o >=>)X)*E 1D*KAt\3 ̟!dauH|ܙgA;zTXĵ礳d ߄R|fX?eH8]CL[0#a}UDF}\SaݳMxlWqa,u2A%gTVEN6pCzhby 5@8WFFj @;IɈ/FAU#zs[[1,_Ȉx↢FJsyʕiQeuT U0P>;m@/(qa`YZJ7kB$ ®ޜWmT>x. m',dHPiބK DQu%B`2E!@^\DA('kGۯF>N+3d{-dY h@ \BoDU~i(齐G3\@= fqx2*ui/8̪Pa7 Juΐ&?3Dx9]+[(l:0`bd8,lCWsA=hܡ@@`Jn$,g(G;t;}zI)= HmqxHY20I qSAIn"ѷq$r]X~ʐQ!2t#֣KX\p2?S Ƙdi-6Z7r2N/{V%6 p!/Äi,pt2:nBeIuB@| xH},j!awX\P|f’)I,={)p:Mw4GPN&ǪǞQ0U'f9w8HNR *Cݜ?AOkk ed4qy/i)n %/EAFAe[;1r"F!Äy0y{O[|`fEV!Pk!'J(2 yCr/$E1j(>/-F($>sa 8`!yz~ϖ.z_fك"">|؟T4W 7zb7؝qz/ѝ^Cy}o]?8ACA>+b0IHB?R)"0TXA$>ŊZ Ơk"!|K"dE\dU@;QR"2! HnA0AT$EB.Q=<.1gWc"pmcjN$Q dCn6/s6JE/zJG& oڤ@-`x-V%w\rr>򮽟c~# "+oQ g~wBդ(,.)1\7ݳe0#2ɍV?dhШxqʠ` 4E28IjuDt^ۜez?YcH 'N^S0;:^Ӟqw0Kka[BBa:.-l*DV,X/@""QP@!"H,!R@DDY H0 $F@(AEEX(?iJ$!H"ȱA@$BDd$K-OkQ scևŧOhi|V'h~-Uʌ#-4E(dv8}eO] Xaa[N|fۘX SA;@}zr ؿ3 B$ȄXH{Ei\uK @^A*|dEABH~K #" oK Uu|Q 35(m9'EE1DV$OȜr:g=|_13XNMl{.8w~g0|*'s S|nzN%D:f'r$G^zn1>WY=H!t|t?΅l}c G%Nzc늦qזp9r O?7ގVE^I6fFM&=ftLDKzIwҎ~{)x~2ȕֵ6g*͏d"z9^@r CuF4tXAwgc]"Wf-axQ8ep4*b~gRq ?`ܡL]9j.պ&Duv74Ām2zv ?MxxZ=A(G+o^G+T/&j툪 lb&|7?|Krd7@.|,RNB~O1"b"zgܯ7аzfOdsC Obң]aGC>LųN**bvSܻ^ >ͯ/@&Q~\/_3NFN| ~y>lp٤ )C7\ɢHouB_#2O#vU<˱r.+uWob\/+mu}a3}~fzh0Dt_? mF#!itMՆtU"㿘Ɨq^QRԐpM"ʙJϟ}N;Jv 9xyYT{]Sw\łe)-y-} T?-g Zjk2;RjI־ o[O<I QyxF8ҏ˪;_^n j851tʲjcR3QVLXRȾdk]sk C\&= XlrW+0bLg#u,'XG_;j$h5/xLK⺓~:7sZ&<$m!ca[ #hnk-i*jm GZc,ο˾M*12˭Y;J[*[kFU WVՄ5 }4 )VE!XwS\(֠_g3J[OYs`*tWV@AmۄXBGb&We4K6 3r=Se6ҶvReQ.N&_CqjvW41rP  ,hd-u81-8߰m~3v y!ĵ[18A/rgKxhqKe|Tr[x¢?cy/q3@< ,Yd =&e^z31l&_ڌ@* IJeT4Oy#'&Hyl r2(RQZչ{|dFbT+0!By3|8{`*C̳)&T,)7y+|ѪAPfQ=%J\K "rۜRH2aznQ:*#'X9mV¯?Nv5[v0[W6"SY"FJJ30_ڨ7bU$5M4dhv&xu,ג],Fw2^*b#ol$D׿HͪҊ\`wp.\Bi4L♭ 5w2B 5D@]Uu(Z !_뤤L &瑉`2/12"|⧁GTEIݮ࿳Yt3 xȁQF0VQJ,%m鰄Tb} セ[:Ou{Y@Vd\+I PHal$Y (P`AjEZ Tsu]f xtTg==oBs7dWz,;|3s#00`$,Hk=%[Y%E;&>Ȯ(D$Ϫ}_uÅ߹%,Sn1³ >R`V-$EF2R Ke ($s\hF(:! $I5'TzFͱX:&M |F28{,֦t ep{\1iQ'a1*9RZD(:Q@86ן;D AӤn=5vDݒ)ԁL$j$'c}N &T//0J!~ωSkwg>u"ZױgszÐ" I)"H!DEYYEV2H,0UBE*V@ (HjgAp~mzĸn!7%́قj[r=TPyGR;bxzaHH'BI65D4aL߰|W6FAH2"0a"iol>Ju<Ɨ- /򵅎:MzKbl V 5,.*\8:>n.9B/{ M3u82gN8)xD&@$`js9 SsYGBR= &IuNe,//uW۪,6OIƓn u%ө$NJb;ɢ,&cam;Ix?'&Ʃ29iTcP+RE/ƍuMK?i?b:k n\]$t54@<xsgqYܘ@\t́GnXX _*0z+dAʄ6< e/A$#iIïM ֲzz {0]_E 5SMem^dB`nEZtw:J4d~NV)h"|E^c&]Df֗Cj X/`Cv1{L+j5>WR1#gxU*^L jt%\t{aaoUveaբҐ5HA<0}/zxJF R ʟ=%ZhyZ6P.AcHZVR☬9ءuW])oOP #dmɓ"f T3)K'wVS7Kԁӝ9~mG%Psz󹼛%.6/WaȋldA#eZ<@@]+ɮ=Gu|\y "BDHF1T$XE (*[E@**6 6g}q$oz5KZp/?jՐ%mF0AE QXMY8ROYЗmYs I!0 fD^@8ȎW$)%w}Z"m$h @{vE d*B{h^ Oŗn\jN\.ITj/]] \m=0]8+rL\`*VږamMiJ0y. xF?+ݴh\^eJ9{vP5̜ۭ==p7^?/U2}絟绿4hC}DG(Yu쿧}N#ə#dY*** HTH`T}NMS V(|ȲE#"("R@m` ؛^ 1q=y~O,T@UdYVA`E=}}i E*#|?ue.ʕ% 5ʃP?Όsl&57_ |]lV~f,uM=+fbSh>h=m$QɜG8 Vji{q KeIxNIUhhQcQx>:"l,׏:$wxR3:d+:((A|{!x`u@hmG`CL5Nb+<X~~g>Ud! _+-"* hP$HȋPE (P_2D1D $d oM SMJ߯I' O8^|/Eqћwɗ+/,:|e|b?"6$}Db}v\+ =N:zXr] GQbϗj.$/cL(ˢ0t~oBV}0xs[xmZf0xo)(T+VhJ1k5١q7M ⇓"4i-Ok7 kuFojb{""&D_^'K?g|IAKh)" "Wx2 9c  M6o2?[O`W1Gq\Rً 'Ÿ`lb@?Y]Y8̌\ᒒ7d1˩h)9l(LhL!#29ND΢}.Q <$$&E !)7 2[e!Yz2"8."rWsC a ]u97M?NڑG07$k_REtVOoY?m69 tFSm g``F.k99 YQv.s3n\8̨`#sPQ5Nm Ys{- f9ȸqy1 g̏CHl/,"DN&%,Bg*[xþ`壳s1vW66u^e"1j7k}>e}}V=$Hz~TYK"wˁY!߯}s홑r}N;L0`oEg= $+64?՟,(y>dgYb@X)X@QJ## + EUo-]m >0ڙ菷HCY׌E #WrBӢh =r梬\J1, M7g=lNL唰0~}uL!@ 씮*Ȏi*) B(i/!@BAdpOkE !7յYU%/z鄕 b B5A U}E蔱afD6Ǖ0((9Z>d3]/LxzK'/ǻԎSЗ~484Åee @Iih𽫡GW|,^ؔ _ְW0ڃOA{@{(6"0[*sC_xGk6 1c1nu= ^DZbc`6'u -9=Ӕ#FBmE$R)$ @*Ad>3VL=µjJZwS-?ѧmH7}ڔk- ,_D׸ W XͲ*=w Uѹ)VFofr'{-طx9X#~|7nT#9 prӑQ6_[WFW)`rBYm{0ߩ.R{h7\q"6i Jv4uղ*Z&Ņۺq)3b3c|b7|?˕M(;ؤ;/%z=4DxU&W0ݖhq2ʔak`E; [@8~?^eo98Mb߁S\bԝE_ c;/.3W ! ]%@^brg*"y'~Q T!ИUCԄ#7`{0;FD4KNgo̦ΣN3=ޜ>;v]Iu,AZG\s_!e LKX"E"PF"I &ėFFtEM~d!\ŗsļdgaoYS>\;6ȉ2xF;;ww&OhSTd*ʨJte#~S8&1d3Ӎ*p84~ڬ/;k'mjB= u?I$°H*bm+YAd`Ky?ep1Hn<&ڊI6Y\K/'e/zC SÝp4q8D{=?SX8mPwpħƔ Ny9ĂlڍxXUN ?YoC/}ԃp'q|r3=<ʲ'mPo{ _c_6mYz(MGõH\8%fTӻf~?ېS~Dקs~ ϳ|$|ko,ϫFlOt{O#`>{8r=x5VY{}ѭb[y'tQ0b丧ܿ&>s/O;fHwڞNb,'.-ܜbyQVOoMC,sǯիŵ˒o?/f7v5\-i; 4vvLo 8uqcu1)]ǯѿF'Z2( /eP\WCogihUm2X?Uד䳿tyuKk4IvF8X%M\2(ef-Q@D*٥LN}s}sMzgim}~"`h:4/zzab^>i\~E|wwlǫX:C0WCBS:ӷ.ێȷWyM*45Ju_uf7knǦ=~cޑ\Xv`Cƹ\X&Wc"=ᵔLRUD.8ksd©#xZx-k ƃ8B\KTtq0ǬTf2ip-qRJUDgH(A??S4^*Tp{Z>G~WI':Ԡ^s4hcxtg`U f;Іa>FkC8@񉇳}X0oc o+07z&y_٘SB E?gi?[_(v"$RhI ( "`U1QTAETc4=U]ͪkMA41$Q"a*E*V("z[QE`V (`,_eE c;+z8za~i}ZKFIJ~~7_0w4K'PET{t-'(B{JtZ|rvV6_3qz㒐8KlɳWtD[@j)VɣfE ̃gṊBSIх!^I\Z@@+i=)ƗynzϧGSgKx<^@qAt3 \pZE p.OG-clt}|5/͸|&ƿH[{f0pȗ\i/a۷?cV z.v3Veּn{o786׏:)$kuSkM#K]LJ29xenmHVFMos~|3>!1K._&ͩdq,z{0fI9g&aЕMzj t}:ϵ4iW H@H; ĀoMʡYmckZƎ[ 4hw.>.,>v>电  &`oZYc`|dv("]M,:Er3F1$z5 JeEhX,@0o}f|xGi)9s6hpJsl;wz=RhGqtQ=?3fc|ߕ|V;J&\p M7)!Yךf:^[ժu R'Pŭ~G}iױ[Y\yAkőcW #3 .qKOq_nueTz2&(@Yu~;m6yADX|!')R D*2+qPT (" sW2C\CH%-v?<2Ϋ6_MqǏϯ]u]uYmmmmm뮺뮺뮺뮺뮺뮺m,,,,,,,,,,,,,,,,,6X.뮺뮺뮺뮺,,,,,eYeYeYeYeYeX+뮺뮺뮺뮺뮱eYeYeYeYeYeX?m뮺뮺뮺뮺뮺뮺뮺뮺뮺뮺ne]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u}}}}}}u]u]u]u]u]u]ueYeYeYeYeYe[u]u]u]u]u]u]u]u]u]u]u]u]uM}}}}}}mmmmmmu]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]u]}}}}}}}u]u]u]u]u]u]w~kُu-Trׄf,4;T%}սk$21[~{9兞&Hh@@>m/:yHȺH%eR8|]>]ŸWaskUu2(K,A _YgU ;~ vO@hj 'Kքk<$Xd (I0^+Ww۞MWzWzy%9=>ӡww;Z[O1 H)<~,noBBN~ z{=DOO'<zv7 Z)'8 i &e///.Žbb꾊t\%ŧ^ ~{f nvC,xKYOlR8# f-c?9NCex7WbZ6G"A*Ht$D{%d Z%c >6( iR@ )?wr;KkuV)]_m=uyoV7z+Z?Q~-z7VbΣƟsͧ%}ᜥ)cG p $E0hSUm"$Kd`e)'rV%=0TaEMci?]W_*GTҁfm6т"DO5HR( YOjI@ #Ѕ@A=GH.1}6i}\Yʾb*EJ#_}Us?U/ PP:H7i*dРNlHjg8?vlWtÑp0Th։#Wb1{G= ŊN3G;{z+E *(*R H+`"ۧ?8b$QbȫQA24KNʶ} ص_gڦ3T%ա†x.dլC7tׇ:9)(wӭ~e '1 ?d^CC2 CA$ާ;i^| ;]\B#.M^$4ΩY<}#V})Gt+3 ӫ$7YC`x-o*N`OC!sF "ʼnDFM@F@ RoWDLy ڵz}H r0vҐ{YIN*'-esm{ֽ{-aIMK"TiTA{R)5O*% 3\v89v3wbyUcl2}vQїnp0*O9o^eeEnQZ!IQ{o s"L9 |Ť7FӇsoO_^MqP06l b;Y%*ֿIS}m݆f5E3U a dRF5"Oӿ1k!{wBX#` F45g+$qɠ06A0 q*=& b`^mwg`?#hr5pv9HA`0#@0Ծ:a$P_1}QiMYb(,Bj`?IoGg4.0Fޞ׻0jKJUzOrƦd 2u&!51qJiA܄4+AIn>ܑnPL@Fab8:ԅt&JQ`׊qrڌ3Il*![YyyqD& L ǭ^k\.{N|Nj|g~ 3X)P+"(07#&B4J-w:tS]n&*_EX`C˴B|ΌO1M. $ěF._(]9lSoX\P<&jW'DGzC*lYGbˆ:Ce"L/00fj("M+DgbGrC*8Rׁ a<Ɨ0餄b~Vjv<\!}}MQyOUKO/P"%4u]|X/lMe Acll QQQH("'HTF~d>ٿ0E'CdD0`jZgIPA2 C~(=VCcCGAp/]U^nSMfL}i x|Ĺg6jL]TnuE!sU@XN&ʂ}=~(RIH21`̤Ί70U;Ysk1Y(,'҈A:5Z*N}}>^c玶pY|kPD:V**NjQDHb*F(EDR("dR(T,)Y7:>OmaEf]k{}^~/ns\~FzV ZEm=y:oR})$u|m/Kkhyfdn(,~I^ ե w⁔o3U€̧A"z~N:r 1ɩؤ4 "sPq #<5+يG7'QjGO:H h I$v4ǒ(vmL7|Ǻ=I.ʘk RkJU=db&|E `;J -Qzb?ߙW rXSQ,~eR~ّR>M3fStx3iaъ`=߽x?ßlJ?"؄܉fP>XTˈq1LO*ROĪ) aD}_MxHTPca 0‰/O=T=$IBl@ߓ>tƵa],tJC L[zެcq){6f3Cc4nE*Xʽ.ZA:K$-x/6Ÿn_rQ^߿rϢX궞-D3W\S wFмo{N"Iy7"BR:-TUA:˛dWqkaNJTVl43++_(ۊ}gPtAâ)Rhoal2"w:M{& AƩJȔ/C=d8]GBeEiB":O@]q|׮<QaIZsgYkȓkHsHmtU=uOޟ ~QOS숾C H!d5 w G|I?x~Y{iBv،( $t~rTE$!H Y:_a{gqzCu¿abXV/ BXlj@@w7sk"beF.֖$eK࢟u^sٺZ @^O|Cݝ adز,5o ]8Pژ1w& spka]*,/~px8cMfݻrP,I*ȤZ AdP=w>{cԓ]u5u=u}mMuu卍D6"0T 1Jet褴aP 嗯 ؓ՚)u꙲1.as,- +0 z!Id|(hA $H 牘,$dv{ā- #"ҧS K O+I e}oc&'Xkphmň"VOEް<__0&ĭw<."κ*vʾҞ  % 8B>΍hɥ7?ڪl?4'4ٌ]׃Vp; ֦'qNt,Q~41b&X(Us6UHOme_*_|/pr%QQ,EEW:ߛ\rUg>{wzY=]mu%eeMmmEetTmm}t|$!{OɅ 2AmP(GE\dYjKZi>:';*ڢ P>{5!cDDkݰ]?m?} k?+շο3Cjj@vg#&!F37/ňiB|+t.G|/`~L-6Jj2,P3L[ ONsc٫c(2b!Iĭ_xQmJyq|K̃@x''kTzDQ0dy w8/XXKfC bOcd |<!ôf@B"GǏdH^0EF[ZlFХZ עrDxPURI;Ǧ6gb>✴H+/WKqVICҏyv r2,-[d-=I6)|,"qA@X!hMziqq omzwxn3RHcyi"!`"ҦFDf0LO}M[w2NonS\tv6*w\}0V>oz/R%/' w4;y㫥b_@cb6:_1?PU[M0 o17CF2z_U\L(% U7De/( n[ W>/d Ut#6'a+Zl:>> 7MBa*Yh\j&_ϱS?KQէrnUb;=scwnYØnsw}$>V,`V*xY:`y7iTkj dH_I_ &S)OPYLW'+e\à2 C\UT*+%f¸MR'C> CnOc?߸jȀ/%Żp 7OaBe>4:Hf;?|?홛=|mbTd4ZDU ȸP:0a 2<]u2Kº㱓T n:a%_\|q5%?'A?f`0;+s>7w]]x=K(MmGvدs"(hZh⥇}j f ~ZFmļBlOc28&~}(D-WTo yK>2z~=/XibmⰂ{g Y{֎Cfa 0m*Ȱtyo'gd$(稩((,aa@0HJ* cnM tZ [&lLS}+S7[Lq7.JqgY8Cex߇@Xڷbd<-^bΟa}vt }:uohi@R}UbWG :LDFXAp/o=rv9fE $%'ԚBN&yJά@( |ҭ5EBZ#.A?>Ud\$&08ʏIZ_㜘no$<`u>pf7I!*@+dawqV : ,q Ɉ1Qd:Ljrϓ{27:# tc?Ցmt ' ?GK(渚^؃Phhi1"*`,Q*XED۳v,^DmQQA *bNHF5c{`_bGqVUxf&&; Gǹ:mC3]K+i*pChmj廏ͅ3Yr^!UA$Cp~$0;A\Uj:ǻjw?"n/",&Hy1k./"+BTG?mu3#0 f~mv/",a9LLF7vjTG,eƩ`̃~* PT|E"M Qa XsJh &VTzܓUt0m!gRi\CXzݯط(6U{4jN'[?F nvQ/a6kz^%LmZ*0d9CJ+(hy~GE569)LmK/K|x =2*0`y*w@p>J X!p$PKM8g30kph{92w'^42cn:P(dDQ<2 W>~J A7!TxHek7K`JVXfHH }No%C|\gEJ#㓕)9v#$ſ/4qain`qP7ݡدF-`AuU.cٜdC`y`D <8OzfqClɓllAK>YMΧJ^حqnw:HI]\zv))Wa娥iO;J)׹oR-*V)=v3^旘"=1gHiuYMG՞!koYeT=5N3uM7j&Zg~ZvW=,J>; R27ehz /qmiwoî%C2l󽮂_Xf{ɫx'09$~?(1z(AĥX$f :\be~nComCOI5qw|R,b2&Fgif$`a  : Ç9wb8 c18\>;.%g i64 GS<."M,)؏ffKdRpVk$-V}Ly)% ˪~~l49| )ja6gvfm1ΡJڝ(VSQ$L6T>xLf 1Q S,PX._60nt` $m,+|͌38ܓ;YP/y˽g35hXq_gh[bG޼qN')D1],W3ia@?;6<'' aƇu}Dž,ַ6\`a!RĤfi5O YaL*&d33eMgylE:lnjGbViMNVVѱyt(jt4*FҢ* sʽxtE{ZZsz;ZNov:[&ZJnTBa# ZfI g99YIy驺: :**80!a) z}xo4sR.^. I8W uJTdL j,!vs>Cɘ֪ҨDEpT~2ᯊ̺4R6XQZmAm8xHVXUTfg!y Hy}bpvc/VǞS``OIbɀ 4:{*KJ Yz [+*[ [98X24(^'RԩqɰB/XII!=(׷6T|H,t(:|ؙwc,6\Öd~aDDDBC>,jPE*QR ^VΥxHA?V)&FfFMXPSUVKIRSTTVVWIXIYYA2 '*R:ѱAi\1ӔGIAq[l '9u+m'Aaܺ(_fwv_]3M|e1otwG7)N`Y2(Po?RC" eP Q$0 41#yE b nZ}{M(hj0D&qUf0c#~{kCAEF1F~̦ENU<UEQTUb#u~>~'Q~&f ZIa_ϧ#7ZZۯ7;F{JpҽR Ddx_1t"gg3)!0a5HW09$/)j6A60Qk{4Ѡ패1p\Jn Ɵa +PM##&G_2] `uEj>`A`{E|cPj{RfqzDa~s]Y'kI见&AGѠ$i|އq^᣾oÙNG$vEP/9Z2L8A fƎ&h٨Le產9~-Rd21C gd7 r"DF;DLQzJ1Ƣg:I8*p91PHjB;$fd`Ȗ0B*Nݰoi{5s_mgsuouim{ow{wsGfX։djmmD`*4CDZNjmA5\d7·2rDsn^l:-dun1`V@=ѺMGKzA::RK gA';}̅O1H.^?lf~hrN`Vv@n  jؼ;{oQNm3z㵴dNKOըYxB)Xb%faUIX '3 5%G?)%G;;A;3GA?E 1IECIIGIIK AEP"S'1bqTZ%ĜEmt)UO[]WS251.9U:Ÿ_|oE_L䇽mPJ"XSx7kx~j&woJ ͦV:=]zXԉ֔m4wuΰlAC0Y5,t0'g@0g%(,r>N=->ygJq tD.󸻘Ш1f:A({/i%+Yg4`3"30` Qp\IC?y]v|DKPV77 05ŸjJ60* |gϳm߯0 ?&HtW:3P5NJuD~kT-WbJGKm6_C)8!S .YE黥 V.2]+d噴 צ3!.`0+w+*h(c"QFLU2U̢De@q(lS "HYAa:bT""**XVzKgu]L|Asw8\K2‡Vd1*l v7]˻1{<%Wx/q|7ڷX8>G e=cIPHIJ& Cp^B2&ZȠDWc=~g|/+@ t@ǥ4D-OE@PQuUk']BB;0|OWL W 퍄֖ހn9z` ve,<>vYb'MN?+C`/kuW qá9e[aӅg~<{g^n qDZ!5WmxF$%W? :KXۭs᱘2#}\Z 7ulo*+yx!u(V&<ۏ1k&{~W_ vl&Je]r 2cPALơ[O&9\2l%Jqc͚giv`^NN5Kd[‰''kL;s*6Y52뵹W,ܗel}OrG/q[7z<]nwʇ2md7sm$)[OXk!AҐ㆗l>p;ikzlTR(z8y@f@rzqXm# Xa~3U돋-;fa˜Qd[\-s[[oNxhw`Fvo³6n^W fjȕ׹_M:t'WͦbH?&7|fS iY2f9$,:!ϔ X7WS\5"3-Ty~s=*~:2K4ks%m3wqM 0/ˆ(M;`?oB/Z=YܥJNb+M׋$ok1fV-v^ٟ=ٞ,=Z;K5`l{q,8OM`f׬Sͪ$\F+j]ض(CNmv>N$Qӕ^:2w\3{U3y"+4~C$2ohM;E(qI#S@I#p28^f:6ɭn̜櫣zN7?K|=V f_S*965uS"~+\(67mA{S ,_~ 1TGml6+~m‹GuH>IA:|`yz`$/juZ]]v s+_.{o@ܾL?jkIQ\y}G]!x+ݧδBY^ZMm6wMg;wo}{4w2ronՓg8 l m6(E `]fnUFYkZuRBxY{.Gqv iofˁGɥR,ɩkDjk~FB^-ʜd:2ՙz?|C4I _  dEJ|Ds7~ xWKfT񔊟}5OuX LA/<򾟗g@mzl1T5ѵQ+$ aeURڮ[Yӑ[+&6T4SԎ).-2S}tbPJqZsH=_AXtr W=n-Ջ(p[DT HO/݆z.{^3\bU2N1 B9k%NKPPBC }J5|a1?K]{ZkhUW >k =U[81WP;ځal'(j[O]yܒءh`{ nx{WE~G}~wk]c3DX1bJ_7{\NUE='І"K0&K8zϋU' oU42V`hyߚj6cvdװGt@EhȦT"#ٵb*v[7g{Q/7muu'aGA Bg-m8spZ)u웰nR4+O*s(fbK@>JPD0sk3\v؇f3KƇj|(rCtaؚ]览gF\j0&]m}Cs*q'" jˀ0Ar`D(n/K\|HԵ:/Nj|RH8M Ci+*;Iۙ8j[KJ[;9K?Lc;V.σR\WU"A<Ωe]%(#;[K!˿)gE,78A@hڅw;>sii))))))RRC(ڤdbr <Yݪo, Y _Sy=19?YPhDKB,A!H$ec@U5MrBPա@]D.;eWbu)>`Pya^ Ę!,: 3>mN6^J(o6GV#w׿s00=4UjD(i 0Z&*Ǘ鯣[vZDm_ ~L ̞Xl݂^L٣qi33d^)2!-[nfNuLJL_ 5nٸk qhC`iA,҃2|  `cw;I>t^>C3D6Rq}~CiB`30Fdf`jer^^rяVu%zf A 76,ŭ {Qc];׼k0=s6a>5<5M>-S9JJ0REQdc=Zn/_x KU E(8{Ms ;H`ۂ( HIe[K__ !@rI 2g]Ju2bW0gTm}#{Z`M5{=;UBi6"ÔJmTFS¥ʙ#(=RUU8] =s;*)}+F@(23`RbZ=C=7='}C= om>+ #=P*밳(jM5 Je n5"9q|Öޔp* |=d1<%c?*!ew=ָU^aY1hTYXE:,Db"&f Ff(]Phkiiff)' DGBH@`eo]/SYgŞYxGε:tB$Zi҃'>+8s' sF<<| hGЉ H!R4 C`hэp饋*ZB2H߫Ԣ~-:$O[w*ٙ $^eOig5 GWC-G~G5~~q3hK] 4[~q;[G)I#RFawL0ټabsBbXlV*J;_EJ=R7vwP0H`Ex Jn8Uebĭ-+/ (i&D/UafkܹQBۇ~+!kgGoLc E 5fpq $rV9}+/d¼2G<DAM?p CeUVm^IbCRNNYh(~h^7'JmGA 0m?J?p_ {YNgT3؎>Tktk? <>{u/kb9ZOgtB~Eq9|E|My,?G~^I0fyo|[Y^ [feHGFRt6]'?T*fzVA B1u~E#h4 m3eXBTIXRKƪ1pJ@}~=]3*,T{mMb O8' UQFId`Ht2Lf8SgÀb.((K/68ErFO=\B2-HTkwÿ0_n#?>+:|OnwiYkc$&f SlP[ a9/y"XemOWV%Hɞhxs0dXE=@BY~rOHck1~,;Zмu-sޑ=‚TOw睜HVo/s;+s+p|rI -PvCBѱ~^ʔUP>Ȇ X]N;%03/`u<^H)lc]ok >lvxø37\zJ&{%0U;޿?!Ndڝ1+`Qڙox] C6!laI(yFh}`1Q*\[UR zz@3!&$R 9t(~e-[a~t}];Xɶm6, -fg2SZY@h^[C˳eZ4L:&uf&#_k:uW%gW[i/gui9F"43JFԎ)ie) R)Wj>0/]⣙/: 6 7 [}|GP5EJ@sa{3]}F&f feY~#UELKUNy_{d;n>si>O!9C@"$ڷx_%,e)$P(2KS_ߺacNw $^jpsZ̮)iŭz뇶DFPoɄ]5r0zڿ.Q{\{kפE4RS#IT4ъE*Q{ F}kv66626046661V62thakVuESShĹWK0ҸzrAqtND(81 ړa[uG/z_֟y*Uo_WppOdyP61aEUm[ uuruuquq/o(k'k+++*a&4jxmr;,- @&PtHJľ)累 w !,VW cQMo͈Tc C[W*e ٿ'ypgd>? >Nbe,GSKyZ[rlk\x`ȌZddlм^ mUxLKmSK.>ߦ6 R$>wˈB "fh+ Hd6 pSWnz^oN/-Eel[-GC!A{>`ފC@G$IP̀\&Ti8,9?~KW2!p  *DAw߃1CE_/IUOZ_oqPd=$$]uMh_h:o0_#pŸip[ ˑ.&*q-ˁsM@pQúށfhuƬAi2i=DLE6nǁ7(]~=RTrH%d}l3t_;w7|R=';NB ,">= *AȪ YM(bE9o]T>}We4wڱ%]amO^xT+}7롻{0UUEQc?=/Ӄzob+|o&z\>B_]X 4B 5:22^o.cw(['fa O~C~1F yKaÎ!PcnOl23z>nY{?p[}pdyb$t/1 vH$вI\ ok49]KY.uDƛwUPDow2~s I}X: /踵AFp厽TuS||cɗlӭ1ܲ[$rhg|5B԰Ů#hTq= O(\nrrH鿅|N{S$g=WPׄD΁UST?АA?ǚ8i[n,Q܂ `~_^\UW!E~N5>d6TB'|3ǎ\V+ U}TgW1X2DIG7TAQFGe&?n9Bھ1S9Vlt "9 )Tz5t߮یï75 ZeN̓H YՐX868t}XYȴiwMqP% =vH7 F[8\v (mhnW%0S1I$2lVsMkr[[B&_ʔ.|G6W٥fb&M^߲^ΗX1+[dÙ8 ufqbfPf7ܣJK=u4Osi] %;,+rקY5a3?ߩ?B4TDn%ƕ*'Ȱ}r=h w7 nm$00d&B*"Mž  doaOL#M~.̱/ ̦5^ +@]Ƣ=NA7.4AYvo_ VGdm]GCIS x>mg3jZj-ϭD 2E$dAV"! ܾ+ t*)븻FɘC\S/LpU4O-Xf7p(x?Rj9'*I+#wylMRR=Cw rQObpp"_֦cwdV)xA'ڿ [:8@"j% _;ΒC^r, o-Q=0<8εO/P | ub p̮4}99anqOV⃐}bA!4x8lphڔjw.v7獂?X?x\θG{J)уcA-X5q{?OėݰAC8:ga>g`:Խ Ha *J` dHI* A`=*TPX+'ｖޑcV;sl5UGi6g>S3WzN.Tw~E!jێg$\@04S^WWV=R4Fax=BD\]f] Dc)y!6" : )P$J?֪YU>\]0-/ hodG=f|xc<}68Je wkg`rs.i#xK Ճ iBpa=<}V5$UX((B/RV4*P|QXkLF@A0  [t3k=,N"nڕWFxԬd}Qo_G5v@ PO лΠKVG ˠ-s hC&9.JF00M>m^-Áu[c.pF0^ 1o`e>Ves 5> b¡Yxynq/w01e?QR}'N vi8 PrxKG$9d}f48a1V#yA r"yH&P! L?T7x(^]wr L.{>ᬼt"+̤u~[/H?M%XmnXS?aOkF2|ly Qx?C֖/齇4EIڢ|+BxJ8R+y (?0.,7Pel:~c%gSuX&ϣ&M>6dvޤ.t]ѧ& <-a40 gJIVcV_`F'٦kVqwq2EF*3Op@  i$xݙKY#ٸݧtFDQqD:Z8‡ԭ`4ȵT.B7_+`.E8C oO\{{\zŭ\ {6?!nO]-}ߖcs(J-ʹwJP+jnK׵ by~}_jb>VLn4Ө}XRǍqP'n>՛"v|dK`k5;q@s෢atf{Cآv^-SAu^'3Nv/+@}U})r&t,yM/cv9%C 7c b G&`4 TxgZWbjkOl'J+#%SuY^/ĚަRU8%~&) 1I']6y]E4aɕ,wbV-s6&}΋lmi؇R=|eu aK{~ ц^]Wj9P%  cS~/m ' X)o㧵uƨM3B rOiϥ^]RҨ41MRztLn+m\{zPŏ 4PLw¼3Oqu!H @j^AsCi)ܤBTmSaRC?.vam" (ԦHWA`4vuVB5-TL=vh2MȲUDUEQUT^ 1ʆ?c~gN7’ABDuוN!Lć+*L>N &6MdΓ04ױL;İͅ1'E}^MCOøbߴ=/w m7^ט 1E j^h5Uj䭡|No~W񩓧?ɝ hH:iU#j%`Tڪ:ơ%u % )BcW9rָ #Gމ@\YI6J{10x.^:DR1G9;+*(A(BD%.4y_+$AIqq84׾|;:d38}Tar.G׬+-oW$cO5tPûKrS 2}cS=(:kIX #$A%׉IdS'7|MjWzXb(ԛ8+YdD?I).mn7h&m:ƥ/J dYdBpquƻofwY߱/qya\ϹEfQQ(iASG*~ *~Oz7y!u=&]Z 01wqQ!$NF.dg{#~~gc-״M&'I ys#bt"ejpo邿=A>Rsp~l)$ϩoow$ Ǜ$CT^3@Ϟ=dQG*m 1s &e9讼bPy@DoK/ Fv}DM½PϛsaFujQxiw}n5qwAIdF0FAP@RqEw& LYmu"k3z:5X) j=ҍk T8"[v a?Cww񻻜Ķ.eV2I"#_HGœyCd!UF7dgv^P>nͶ7U}n5215GTw")$@ A 8?|9L҃Ca'VEIQi_P{Z,l уqA4C1bm)Ǿ琷qEh^ЫX~V( O†LJ2 \?.Oݝl6z[tLdD0j $`, CeyOޭ 7瘻U*?6#ZG1wVcV;)a.X A~P1:)n[r2`ga*uefCu|)Y b[$||BPyyHA goke.YF_T!,P>Ehr!!fxE.e|^:AK=P°ao"  Lq"M"1Csz{GHolЗ; ް UEQTUϗg]<Ƹc"n??8xDN nyeFE.KhJwt ;1*F?h;|#h SŅF~Gs.:+;HC8 DBIGTӑUy(kj8 >8awbᷬ:0Ff:&2j{fnǵu,U-]{ݍe[ PfA%DV住ve~ d'QtbIջ֢&QG>Ia(PiTkÇNA:Ùɻ]KlPpB{^9Y l _':=|dtàb!Z@RC*0@gV"*+|SzArG+սSTz<J1 P!uG1ˊNFsI<{}|{gMp\Pwn6B˧wU Ԩu>LmFQ5 . (cAH61&-Fhdae P !c" pnmQ@<X;ɘ+ODcNsq_cOZgT rœI@ ʘ`ľS1$WwwGLaCkb" М:h=T }ge[b&~oiMOi?~Xi,1b!Wv4:<6 K"+o2VP>C6x4WvWsHIn$eK%}*]xdf^Xvj ;Z8aM7 ]k$z\tt, DәHſq.o#^p1- D:ueu]NC8Es 'd;+*2qB^t`a.\~Ovmbs6yjkdT?Nw3(EI3 )cǪ=!GńC jBNEQ[T`丝B~lM z*3  H%zzCev+\OnرzM:ۖvneWj=Yl"moFxqZNA"ji=܌\ {/q%]?˖|raXljeP>bӳ&8]_'ƪ+ƇUeQz`0fUh,Oֺi|p,[]gr2]ɿ䤞,"{ 4Siht8Z5{I=̽(s؊}_T@擬sHkcW]=Z;on8:9y;HFϙNZd ↪'|NqK|eʧZcoZAILJ)-@);M`8OC|޿R/>jKsps>~O}G??6Bm][_3v̧7:Gz %w4BAYA[ČC6׮7Gx ޓҳ >sAE kQ_?z|{03"#]k̞uwHm[i6(%åȔ[.$vDhgTh|-{L&tVD2V'?Snx\xd T E]MK]m(0`=t4pc.쪄 !Wľ?!"ߋoVCbAK1S9kɡr%(eFhbP{jE 'x\g*~}.oW5 rdA$L~y\ {e+nj:XߙPX$V'IDKJXBqR0ff f l ; 7Tg~Xz2;ϱGخA g!1TBKh!Qs y=O\OLT!~3'đBP/\`>xтn^g5 Xo.n]ůs%!';#:um]K*eYRe^a$a,fH 'OS^0xPw16k_a ÅAJDaa$}ۼ\3$V=cyn9kuPd1>7Zd,mw?^{TQ-a8Uğ@qDp扭~7=/3=^LbV[KZjRgƣɆqdc}{*;q~|GIъԾfE(Vt<)C!b` 4 rxlSQ80'zǬ,(3 sDc1_uGo@,(K[QHʥM]m g-? fs R7gVa8heZv^?H鸝Kd"Ϳ󛛞4ډ"л 0*7?h3sq}f s82pe*Modzd!Js1G}3?ГڴEևV֧DXIMw׍+18]bD=Fp? \s$L2@P k,W5WWY$40Ko:$IfL9"!P?o3 *4Nȡ} zl;EMf1L!vh"L"?3"" j` fkĭxYL{FGGpfwkb[6-+[,9"pϒk=A& ,3>K41!vZ9Cz^-t&R._!IKȱ? yr], 9 -J۠8 #hDBKvMcr%mM6큆 73PgZmjE"HژteBf`2B20K{}꾛pw|-㮰^ތi0pq" USTYƸugH`(eb N}*0bY]i? [(y֣HƘY 0 ؛K C9z|s}V zF΢L~ Dޮ NUb f+rz}K3⧵}t(~{4$i3 # hGK}m-"2OcQ1yx\u[_1u'9蹙yu5^|I [ dSVN\ <~!'`h*EDH(fjM6={C+c|~ 급]Z~muh:*@`F%PV[E\.aAlc#&JfsOl &>O3Qr|7Q#7g}et:^J];&4(r:A1lhqk\cWMqԝQT1wkᶬkTw46vsWD.ItM4LV|7m-&iqlukEj)Uei37Κr18vM~h\ ?nwbcD((6]2 ouMvi5s)[9: pm-ūr910mX,+"T(K>H A) Y:T-30cʿp] NzNj=kQʩSiЊzrE  :8fnևfD-MȢ>X/z8V_ i 9HCN7i~P!TUEP)ikA6ﯝʡ9ʪ$ob?q宩0l} N8M+il ڦHx4(!eR )Q%?w;\x~gyvU\‰zT gxX&, ur2 _`01 $_Aph(,m _-*;Quf$=AO)ȿx:FPҤv7Q2eb$;Nk l!:O}7G]:\/Kq4M;S4kiZcܥu/u&uRuʝ,v5~MA'"k. rbY[Xq^fmA6YoSI@d-voMZeVVm媍2hBFiJDHaT>Փ3i*=0rE}V2g6J7oۻJ]30zI!nL !$qO1b` "tM' )~Ec ݬSZV|vy}~ip 4bEswLVMp0:]"˃g7ilGF2)5bJ(,֤Ax WTҏlȔT26R]BTF` nGuW4$V*0Ŧ5R\G"3{#Q<{iߞq4ӟM7NʽՆ\ML8|D`(3Tʽ2P,t7;=-!C<"ݾ;!)vЧ}.lHc @}0bJ#?JR kLrӺ_2-Z]C<-U&W}^5K۠Rs]ƽ $#ҝ;*R@9LZ_rul%۰ | k&BR!] ƋZpűxLkrܲ /gA耆#P审4,Y7濻ĭ4]#MbhcBpGG&g\Ku|JV%j48]^IBy݃)L +2.Rb%3p-tR}dsgxrEF6p2H2G:o1l Jc0gmw!"ͭE0 SLacX*T.BA1BpU28Eׁ[bgC?Ki/m.ܲ"QRA&yuZL]vw]']s_{ia@X!f@HHZ'm{H+ȞV ߹st3 Teҹ$.Maf k cQD:<ޫ!}$g|u8z2W 4x_s?x6wgj{ekb=:s=Ȣn#fR4Л2!6`Zf ֓IQTEѶl ӭkWx绅yO^G=xfBf2(hAFhGӬGEޞ*x>lΙ{f7 ܗ/±ҠjFaGb; ф4xt+{z]q Xs$J e ^$Y!% u\rѱ hP^\fNhw0"{iZJ9ٞTw)!-**UU f0 khab_I6D\:߆,yW!A|mRZ什Vu~ck}~i cZ-:;y2)A Ih)iW}A$ /AEQTUE\nq<DNGC|x}}Qq(ri=$_20n.JtIL7qBo0f]V?^J /6hPY#rT,fCׇPcǮL Yv>+In( S,@K I4 T}hmVIx@/ڒcCom0MF&/]6@!qgH ]HX`]>L3b PB)c3L[Q>سefTIPwFp ԫ.ᛎɦIJYt`T3xiݯ?|cc'TqRTJ:Kyjr:L(U]ȗpsҲf(U)ZRݹx2lxǚ4#hA\tK+Oªo>$?zP,}yRbozÛ-<\oc]|Ok# @jR 3T4tJ#+ow렫^K;o;`ԇ~5HȀAPQ=FX!=Kv., }.0i<{][?*kc; oBF 𴖚DMOFsOC-UR |o"8KMj1PQML* X( &W!GT:FJ5zH~gtqA ߪ˸;g#.h_+@T Ԋ"%zHEiyI6q' " BGɆ>j'5A= UDնEZԣ`XZڢ{.~~|M[+B%-t;B b m+YU5AUMRQ-B۔0Ⱳ7)EU %2_zmz9ϛ]SzX-}\+y) n85't .\|cPI'woi.^((JǙta~ 깥th];vΠi2h4I1?1]gW}]y^CRѓ-s}*#|MY`^YQe uF6l>#|Cq|U;qz"Q/4 &D[h@WPia  9@~:z7_`O(:+ 5l(c+a:؍LtM6bΠwUQwΛMITP-Hm vJtqhQPNR(M+x4SSˉ=FYj:;:4# 0cDhQ_81c%My;|((t wg_뵐T~aqr7l͔yX8d8d(Tȇv:AoڿIl #GCQPȇPk ^#~(&M>6O¢a2ox~q簇'^Vkb{>Gۛ JSbH_Dhʤek{jʓgl&JH  z# @h[Ч= " #|;a#JI 2:tb#g Zoo~t.>][,ăwoU)+>5}¿/ZChl,QH N4?mP[8$! -O^D`~[ LgaDTU6tAAp: UwwpŹ4,d ]+[ /zyKbS51uUީAs x)jsjaU\Y TPF^BD@>mOl~n{͛]%DS|hFfjD%b! 6 e~J/k~_: c2՚-, q0H ޑS\a԰CعCC>ޚ1R!Puwf͜ 66sjQ'bch<-`A#F#(#QG3&Pڲ|釻D2EE;=JQr%A)$Մ@ Donӕ .*>xE#90;ƃeG_e3NtWwޏ2\? 5ı #y1ӫ0sIe ѿ4b ٬}u3gǗyw>XI ~AjF赫YDқ 2D24fU6 S:^ 9dnǏza6 z.됀*zwKwx ny^JװSKF5A^׬*(BY/dTBM$ !4i `ϯ^TCy$*Toaaakf_fDڥU*D L %NV< ;Nӝ<irq!w)m8휪{L?o5N3&E#G Xkt=U) 9f?czn[8*JA 7fMb|t=ƣw;Οr4RA>m -/9p}Y%c+.R C· _s]Dg_s]=DEzBEEQTUES#e,/U骪aYG9'B7y=u˻I)1?If|8 I uҫ0m6 I .X,Ν^0f:^,Dw 7S \Vڦ#A6|OWsbVoNi2BR, bgg@cLER?O9CuvSBB ujP~̥/߾U3N(fM4q8GX2h'~}%_Yo /[t(лa/}fO1Pg_=b6A8t83D<*a@hD;l}_q9k7S_oXfsV-RD HD(DXBw~)젙~)kzBmP̜̾d^jcEQĕٖ"(nW8 Ry{X:H16Hgi s-p3//'!Pnl%]|TfNE[iI  76cJ%,i4ja +Py%x^!6cDɑOX,9̠0g+X!XRehDȚH>:0ITjaҶ#?ֳƦ1F{10>0=p<5-h&PM&Z>ȆRo] K}F.m dֲ" Ralso`TQ{>d{:L^} @P A)%&B`>D7SmMޣSZfu~?6o` 7_b8=A?t)Ж|I0g‡T1AѲcP$pjnDK0`Wy[5/b{CC,]0Xg+*jj5k)v2 |I^7+ ߾?:J)ըJDdIr@ddiŸ򈴈+V%:(;T7狾zq\'ԥ#g=L7˝i_G7cG^Q?d5\'d> !΋D5:S՞+2/)\ $K %Z INJp0ELf.u8M<홱Iyàaia\eOR_$$ӛh EW].89"쥺LP-ԍVǻp8sKm޲vn9x  穤Z#G!_e^8#AKVMc|xc8wTq1fk$]LaH6vn$:wT'y^LO@m|0P"Ƚwɂl=Bq8:|ze1C]7f@ CwջirW i vߩVH= nN." SE#<~k @.2;e3.Efr^_`#oY΢}P~Gð*&NI◌N2ڂ"HUOm'rl!ናO;8%0m?r)mOe?eC2[$t ;s]bf:dˊ(*STRݡLR57>Bo;h}x8H (-a70VkUeюͰ)mG!-:h*v[tXSC|3B0QH{%t =̪9&wF\I-SkD},]w"7q{T AOy Wϥ*J,!GbDDeKWLz@].#x$Ǟwѵ-,.|׊s\xk4U aw =z7۞g (gG6EO&<`^1!j.R58kM/^[N;]#2ҡ^OlErXM m{'k Q?>>sR?x7"6NK2eRAH,Bu38m Jb>gHx7{!SUcĘ-ǿa:V;[6]~Ӧci7.}F9Xt$HKzKy i3T,̍Ji87 [i[,.G;~>cYZȻ톀5}A2h.XMۇjX(-Օ7iw^l.V "I@0RM? R(}钣?XZw=!UrpQamJKZJiN?W uءĄ󝙾zL\a%:fT۸dq_zhu)_za9b/"Կw IBRy =2d )6RN)!F$S$rsn 6C;r`UHjhDK'<wtJIIٕ7lOn51ēFeaiԶ>N?ɯ><۞V|}.7}S]e=uN8'H_Y|qn,^N]!wl• oV~Rq3T7w]=whbxw Oh% =j= |Ydt,33utfh%;V=唈 ʗ%) hKX<,σ݈m`OjPk5E"@PMٲE<0BMIk8Fr eɻ-Y[@Spԑ-TR:#Aa K5=X,UѬf;p.lϱ)Ō8thpǑO uBV 9!:+ݻbqFgWǔ;۔W]C4տAmISPZ6`4:;iFS7V936]ΓwSТ9t[;5OwqLY\Z2 wep} 1or{3 q{=Ni[ sWQJ w 3G (61/(CQk5= ˒0Nj 1y6ffV?h°>ؑ"+:4];3ȾDTU'qY0H62@nqQ"Y3?v@/4{>#B7[q[ 1 ڜcӂ`>[,e+xӑ\6 ^?$Ayl1V:+5Mg#O4膭a&4S&懿0䌔\hc`!O\:P&duk"BӉwC#w%q&!w2tN [{]+=Q-:nԑ< X0 ;Wmgގ#x1N1;mBxkW>#6E6=z%x"S=}ct?Nޛ50?LҋrTJHO&>gF{05vN eg׈ !M|/qP(q vMםѧOT,181 L6_jLh=S\şVWFêUA`sfg^j+.r6,H_>L:R>:':UigP /(pSG^Kl)`h+]9fEc໎EEVob#H<r9fy$˳щ Nj>?RB)+_+cH+;>dxL1c"lW3(*&WB1KiT۶LÞ[ <8ymbNS9 QLG?>%67-,r\P!)s%TZQx}ڒ2&.(eXHۛmdnh9QrY6> 5Wۄԯ.R1M^#D=}4߯Vf*?kT눅M%ynnYf- q.W7]n NB;bz9はvh=C 22۫|6z#!-X?3$춱Sl\*t`7^Glݢ6>nkI)p?\8s0J{o?*UNꥪR,/ ʓapˆL*`ONV$8@%J$0%e%Z5 _54]8\èujCq."=Mr&6O2{^uY{9t*|]#9akl|uQ [<昊@C܍$5b˟aG(io}vgT'Lg'/3v4S&X/LE.r%5fs!w1b!J!Cv:W`0U%g3"FQ갴ַ amOuyBmx=M|3U|(Βdd>yq$g- $JL }Bun z>`_CĂ'Z]ʯlK = d7} ڏ} ƕթ!˶Ԅ:5)wم:1*-:g@Kfx@ VrqOGA1Δsa+v*AR /f-vgdDB,v)XlM[V AK̓,"-d0eNN[`t" "gMz!w>Yc<<\WO! E$xn$;@d}sek61d}iv>tnBqBnE)~ϻ;Od݁jB oWu:x٬0NЉң7`t_NkV'ҫ3mpQNҷ/4( ˾bDW]ptX^/`Q\Ud` ;_kӤk-#FuQn)M`m%)**/1f nj윰PW )OWj6`:'|/&E:bLT!+,I[#ٵ7sצ &Wg1)@X@8OXΒC~?4='^rQkO3 "R̡Pt $zgImF:^(.]2?lWYt0Ѣ>؁OfiŸQzFFp$wC wP0-Z*M* fGY346&ş}<6F @ҨHWء>(yޒ@v_aޮHw|w-nwmN -@Zz;SM6mUOUY7=eNX{cNL_En/ Ʈ\I-6.hͅ8 "Csפ6]`'k+XO@)@̌?ԧS(iUJETc5 ]4QgM7%y'1b1 0Ñ!*@_ʈJOs ;DY2ȈU<ϸiT6S(FzĞHttoQD$~օ}G. w&(E${=:@&B `E+<24F^+̣v}疆Aۇ?ꕴ> -K=FO3X[i `%Nf,XvVrZ~{EAh6r Kh`d5`$RȠp6t? Tx'* ҝBBM5Le/gG%I>? ,זt슎46nY{L \B QyoK-ȥkS 97c +>6n̔] /lpB7h:V NHoD65[) TS h3B`Ta vw}b0ɲnd#n}V?-c/4v~ nk:S9PdA7ݱCwJ%L L7 ЀKQIZɜL EX|D%} uGevh+T.$O1OV >ߓZq{$Ϩ}衠 CZ2銀Cf F6EGL'`=v3n*EYNgVt.z Ha[_ ǪP(}0Mu6/+]+z~-".)vIֵlyO=K Qowv,^+N[`Y7^Fs~8?rDݩp|Hj.fNDMI $nWHcbW{[~T ޶8%QI%C ϣ,=+}wyz&YP (Ѓ0ey#KI`hwg̲N{ߓmW)F4VBPv4p i; [j% R]7vҕc|/eb8ꢽ)×Wn#q?\z|9aD%J}ZPCze,fDm5/$ MsfO 9,K|EϑrH.r#~c" )6Vr}`/ySYq]}OyLŖ'kD'34p:, Gu׊tH.n:a0 #om~ڨm@hB-68|J|埿`D^v RiN; P[ <츖|) %f]L6`#_l 9D[Nc,Dy Уmn3{#| X:؇ f5wX3GHA[ jIۚibj _67xPoV3$Vu5D=WOS$<,P2%&"O ^T ^򕄼0g{6g3޶'4Ǩruqt0ÎهDp͜-gX*l#pk DFZ!D6 :RMgY %)%"dR|jLd`tkr2ȿ_BgM?<O 5@Š6f#%MtwKM} 3s$ׯf'<*Єn^`8{9>  RM"&CrOe׏ߺxcL r6d.UݿNSIuQl;QK[/IL';NKQɥi6#[ Z^W%3}LXZ-~ 9]ӴlVᥠ4 ґKtƈr@ZHWYWC.(C k5$W7Lh߾b=oS% /-ļz%i3HlSU!W(- G>4$ 'o-viħƂъ)wO*4]˹$~-$尟V\<,t:ce~- s$ )й\uJ@/K2R* X0w|ڰl \*>u@(ƒQ{`<6" 6XX,ۙ'xCF_A zec# ӉNONY ,d&[ q0L:NS(Y엌3 ;= J ]y$McWᖶGF;2S;0*3WDz@b"m3H, ZA-"]2,`™g3stpEZHE&9hkͭΛIktypUD–R d] NQB٬Z.W᭬Z0M'|Jڵiϛ_{k& 70XF`zOnq݄FxS?᫴p_ T ئi}6vlvd2˪LYɻջZ>= VDz\?ӇX9qȞo5[E{'4_6H|{U W}l~ [##BD/j}ΦD/㩨PsLp(h ; cmA>Fdd#у#9lWTwo(;! Z,Ss#+=9I2PW, }AYIbܫoש0E>lyWܣ0EҨoB/)iX:Piq\DnS5p W YIĖ#fb^ mN\)b,* BS: 5?t!&>]a15큧D3gqrG_H,eUTgjFmVhT0]AV /+#l̲ɱߢ C(#qB'q24P+v^gC*G!Rߊ;Fx뎨&R>c x1dHH 14Mo")Z뀒ͽ?WqM>:Ek*Z*_[r s½crq<ĪHX7țyx"akFyG{}HP4#^tՆ;Z~Sd̛tHϥ{`a3NLSoBVF\&|ZJjVU}1MG`qH[ k9Cxr!] ߂&1dfeKC?py*[6Jxg-Ķ!$i{sFf)sG+9΋^"v!5lG%btX˻_DL료׀?>_1#&N&.(ĉǓehOC\bﷻ{5lg 5{ |s•juGn*v0[cX 6d 1pFm$M4F]US"k>K'N-&kO [`ͯ~ߦ>,z00S;#}rsG䯜,1:]a<ccBXՙ{ѷ <%U67"z '+ ԎgsD.qyxHsC.iz璢~#޵܎~>PR`jVTvQ3)) ;OUo]Ҳ?Tevظ: ;o[.**2#L/tǃ!.h&~9R9YrvԡA iJE]lj㞔 O:(OH'0q)^lE4(5{3,M(pm (?JF!h^7Ck}aD0O@k6ck)7(@u?Ak`J"aaG7O]rf-%BaRD+UQƗQsry/s?m1>6k2@43]z[ S  wO wDR;י'H˩'aD!Bc)iJq?0~R+o4nv̑v$ČFo`D԰ ^>$*vQpLF$D\: ɲyPd*F̻x:"z Q3gv%wj\ג>|&bpFB@6+Zsܢ!'Nn)n$X煙UNH7 =>¸EPK_!4ТbfYh5A&KP~Am==Gi#gayD3kc@H݊] %zV<$+ [ X\g䘪;JMp}fOp"g"דS X*nGt񺋁y6-4䏏~uԽeikUݵk?Ĺp(.mwA4[^ rSg[G}I|H̄lŗ#PJ \ʹKm8?hzU\)j u;FIDmӲq g^ѢA8^8~+ᆃL Z#'yAqNmkh:<[aez8 FyS;!eTLf Ɛ P[w̉:6A,S׈Ta/hOL0 Ijd`r5n5@/CEa P [Ϻ */n\g!5i'x+j> P)BB\s:Lq0I a:L$y* d־< tnT`H"n&CB)މ@ ⚑NΛoW5 3d/EOLXtq4-ZyQ؃KZ#צ`$1C[ $Q1M/p&..lRQmq'',ӄqG>JH#R*];熂~U-VM\Ћ2<˧*l/}esIDzҒ\LN/b"n et%VCQX*Ƒ7Le&OQx8j8%efnOɧPEYrgQM7.9PQ&~wԺO@"*"lgm; 7Z'u (`BKdJ"uI7Ph5y;=H%߷Gfڤ1:1ժV Ot'gF)no - i0.f4'`g^x -jxF8^pHˁrrPGFH͓UQ7&pOb5R_vٜ O?)+D=ȑ|KLĦ؈kԂ8lV ;@}φ:{2`9PE{ *Ni?@kd*Zʶ/ _- IC46Qo_qҲ>}G/Uw>zC;Sͼ:mJֳnϸ{HhSR| K;xq0btz#dI-="$n>([9u۩ZU 7vx~_vߚb\OCq!KFt> R\u2lAw@g,"tu}*h&_}D<6Ls?Kufy펲 eIˣe|몱ZEfE}eA?1TsR?+H B >p6v^2u+?l?9\kN;w?ՂI1,Q?N;B߳pHk?K] vjqh'y2F5HΎ1 g5~yPaisb0/P/p B@GUyvn~cNVG-Oh}>Fݕ)!:}{!6}f洛ܚg*Z* Y\W } &dhGQl[lV:]N}! 6Wt2BeBorY 9H܋Դ*J֪7Z \iE?[Z o`oKY Gtu-}h۔۞%(-/-#(zoBYGz>nI v\-j]_f~L=n4 0NYȴu841~%F!&ـE9?̇q ʕ%! 43;B:ʡV fDۢ8\z߸-Yį].BßcB{=Ïʺ-=&*nptƳ~NHT`](D95f#gz(l !4C mpq *|뗑?&$2p<2;- PYNEkVceU&;gX/A3!̎`ՇyՈԦUBU[zCS3 ZJ ^=Qƿ0Z0U>Aza!> zKww|,ؿBb9tZ}.J.ٞK>8H\W88e+ȩ<_9 R^R''r%pצf^E@fz\փ'E=10/*_۩ѭܯ-fA‡E?wg%OK-% YGgκߐ-}9f~cYlB@& 1ӐC< L_,3u.1ZL^U,_l ++ m)leIsB"^^VtSfߋC}D*#rp.tY-0ֳniOK Ȋ{ɟwMXĜ2\6i 7L4faX_rE7*>lb(}u>e31D,?AHnw4_V9=4UѯK$n|$E|GH(,D= "5Hx!RŅhU~'DOY^bsB)_86dp1^:}A#8{K!'Տq29j|RrXWx."֌Ar;۔jg*&?lPq7rWF?+_M"Q&ZڊaG@ k<;钅u#nc8;v늯=M +GgkZ~B%^۶bg‡S5c3LBObJ25.U{Y7([ G'4vk&CԄjyM-?<'zN=ч}Q4PFΥ_b՛y`M'^R덉g̾ܯłտ+i+4N$@9c : 15#B!I!b c†úd]7i[Tj`CSF FU?SXqPNh}O39p0YPœ /7ﺨNM4 VjO{yZK: r^oZH#p!J(9|YZ"9ic>B.1:f_[p'^z=X.XU 1˼!i |-r r>(8t ]ߙg6=ӑX=ʃR1LDh{Ģ]RNEVKLG†n2d!qkC쫁y x lt Axȸ`"(WSųuTGb+fFq(ℴq*~GL !/&/{ FZ-xNU!|u=@]4NC/Al'pO^uQAր ZR;ox$;.־1K#YÕԩvN71{VDe,6[S/0Z4탢\m!SK'ׇ|Q2?GT۵0'~gxDZ ȨJD5{<[beH\g΄L?H:7*M0Y[Ygg?Alo<5f ,g%>A-FCD+GI:+[eTrw b&3$J.^=!&.LPBI4jMl.@'şNr:=*h7 Z )]$3Wa;٪D)msR&%p}m;Qcq,\ԟCיW-f^^{}f3wO! -9j*J'zp)Y !Kdív0RNk:pj*YQĊEEspfD7:(lQ+?RxHF SHjf&ZGم0n5ͨȥIE~f< |4 zKSu!ϗ建{]@^=E8\pB=6.w"mSyR{K?LEK™tRG.2];V n$!)W5>թ 2CHã? v\goՁ #X# ֠`"|ɦ{u"Vʥ6Q\ )Dٮ@sWIk(e [=^9>!Ӷ2e? UO7d̝ s8( 1t`pf:~ hlBl nL-f-L MFv.):3 9?X}v[{S2]d/uo&w!tTg–(+V70]&h%r [6 QGvg׶f0Lk$2qAN*C.zνkOR7z Khizr%Z{(csb>D3w JMk e,॑>]z%pQRyHz3ҶᣲGZʟռ,TyKOVP9mc'pQB(@:Ej fB ȼAfCREH rf+VH y+nEt3yb;;cU&0S{ryfb~H8L1Tw"rjL~Drk lPmiUp?8OsO(W+> W9gltu'$&/?߃-릴.lS: eZg.6G2/t&BRgޏԅS R{q iPn-< Os1y3; dE1 o!&:mB׼2?.][m2`!qmHH'{\cmϣpxLqkx˔7U- C@{{\H88NI 0 ױYLfjp-3=O_ŐUBZCNqE(ݡ'x -kRo8o5J8R >҄ƽ%~Cc ܋P3=0]0aM:șE5R^,oVGT nmMYEP!gjXD0?V4l6Y|l0!^6 $"Y $>~QRe[_W`p۹]e=ɰB_F9d9̂-imĭ.L='0-IЀ)Ę3}kEݨ<[gvܻ( пnH0 +yQNӧ>9U3i /.l1UMЛ'?uU6RE͟=ǜ3.~C̍av9(׭1pO{(&$_^J?t>< # Rz"fuq C_G8h;qMBzkAhzgf(괠8[EU@~ Ŀ~#f}Sx P/'6wr0w oٜn8jJ~'G*ߵ5S'cSJ{?ba:(W-"Mb(B´R]W']w+F1l19v#aBVb OeX%y>z=~4=7MOYlUAX}I@(m)3i!e!WU@;UStK}JB$?GE,) *B5KPdo|?D D=/}x'x_3eYo]V@:&26nQp8A1dcGA1 sdXR1j&!kiUCX@őj=0 [Yf=]A&!W¸p.1i1S^1iqlm Emwղ zw#tP.9PSP@h_w_}5v~ecm~!sל74~J%[+"|gd02T#nZB"¡v/%j<+Z)a[}z|͍QxU1 4M`0䙉bzx|N67` zaT @@cj;qO״}Z2o5: R?I/l,}nUVH:ɛ},쏢C?7 id"oN.k}m{|6[J2ĩ6˚ZH-պxB%ױ]-kjyξ졤`bWvECYM#%I!9bgu@؅7΀{2|?s$hmNQaL UJ[ PgRnݏ _&p 4Dɬ5d*p|RW42uEZL XG7 amYjV'9dosrrv»&*WzQ9Y+b:zA* W <FADJ(RJBDU_Md _?5t3,37G*]Vz>jOx5U5! z GZ߻̦Oީt^,HzpY Yˁi/;;M-j˙1#t1~ 6~xųev^.eÖC@ tMw ?@{2^*w99py2d.$莤$ݺ0ߝT'[0J*N+J3{LBu|D%) @%FPC9C|9?XN_CoY>@~vT㧉enYш"›z:?\!RLg}'QA{+7R^k/&P*,?6s\ٲM-"p['z#_G i鸮P>ț>FvWU Sh`]6h @oN<}hkY}Oxg!!}p,'#_k+"_)re R-xF͐d02mH[bg׋_+u mԥy:7+p4T5@/0#Qi繉`Mw咝=7H0vQT:;9"7M-WAKVWOGYپgyHZ~@Ljڏ gzug2y:2I.L 좙uvyX`oW &~-l C^VfeX y&:OF׬7:=BZo5LoP3t䬧Kuᛷ*\3秦lIlnM7FUMy(^u6Ӱ-gXM2aEJԧ:bΆ 2l$PANasJdQB"nk&-:߀Kg=䛒II"y/^ʄ֊Vg 2DgI@>[Tf& aͻw xL2%)Trj|m,3Cm۠,/ďMNfftjO!|z8#vC] X$%Xa$ať"c1@X'7p'o~BhXr%yj4H-I4BZyQYոgHfXlO%W~ppUfFT>'|Ō"=@+ tsӉmd, C4!泩1&0c=f!z?l g泊&:IQ#Zww.cb Tݹ6_킾 Jd..njʢy 5f: ܱt1;q:(bv H^ftN5qAMG;GQᝄ~q;걮(0JzZ CWMq=l$ҕUh9f0$3E@b%<@LT`2-֧bMǞtL_)N"[HU%  銿wcYr;rC1IrV&|fD7p}lR c*)\Ay^sB:rSlmLEUٞ#Vm,_r/ٞ9 gOD̍ "S$A~ :6uj<Y3kܞR(#'`[+{&mPpvj=kΓ3xtH`ӯ70vzq"CSa --ʣ_[E_۠,ȼ"UMk/]̕.wm #AVTmC6"pj[lӚ$ԲЛ!p0/kN|Ѿɝ =NR_I^P9AbdlI 4O;ij0Ֆ.8tNDtD C,j\A6u]-URXr?a&C#jƏ(@Hiƃ}hKz'8;*wSoW KdFNzz ]Bbp.3yFvb1E2"naP 4ؐ<{M+^cݨXA6RN2G깆QH bю-.Q pZuRe~dܽp\9>G% |cL,Zk&jPI!Za4 Fr_B8'B]/rPZq5m VF+ƕeIk^}}ckg?3 T#ݘ|*9+.^("ZE+*JZIx:R)%c7HOq{rh57j)dI]{hH9a:, TJ7F׊%`UbMtidWd,l7` *.ÎɻRgIŮ2H/yXLk wP\x 5qH:AaRL>!(c,WJ( bǃx#r(ͷs8MzNѧTWw^_, A|NmD6b¼yad2tl;N9m)[my7xNElO- }e2N]s%fd% /إ\,6II캎ّ>j'jylΚ/8%WWPt/+B4WF%ȸګ,Z%9|9Tr\Zy(22ʺmeOP~qWVK=hk"ߓD[{DpG A:4wfˠŒF{k")w;2if鹞K:p6 \@lb$Ղ-36]"$*t(TR8 1v"lWlH^ ςXOuʵSc^ڭ!EƜ54͋cJN ZE2)qH&LƂDt vyzHWq/_](;j]Sb]i7wH^fdE|y 2^-u} HJhNeI{ACEmYEQz) 屉Sip&*c_MDbTp*f+61hU }~_X(fяbL 㵂؄wzUڄkvb5nKG!,721.1ZEh0,5>]OS*y:NO=Kot*vDb8O& =Gq?nfZ5:ĿZF4&޽t8wi!guK ~k'k*e o؟ { pA5IcK6\7,ԇtʼX)[ĴBz|7i{-[}ECw%gLam όuAy)Q{]-#^ ctIBQ=kvzĶқH0ntŐaո<[I3xFb;뜹\s/JMyM_[W]0RbG| rM/ JtK8|<`MwpL$P8h] ic+Dqpj z?1 A@Mj?*[Eri:w&qj.=MA5Ns_'X K[hS*(CVAR^R\f^  L q]դ7?L?/)l/?T] P PP 墳'raJ~ZDZ-*d~xͥIT?y@I;G3=`=N`ԥwEivaFԞX9K͙2 䆆 Ea9} lyRoqi: dk+N'ӀfI56^6'B;,wqxDZxaNeS&]7UMOE ŮӅ/ԗO-;?|ڴp~[~nUj;W~ W7ÿ+|;GY*q;$wcp>5ba8x! _3 =@o r%X{<6&%la.4}}_X A=: k?ڮ\9`>c\g2E~dO|/]vZ =NE)hD 쿅P@Fsozn-s3.@j&SDMXLvzOrAgY(CEWyW!D9R a#G/k)q{,k9O5r|/6^{t8σŒVF"Ƌа1_Hz+.DOJv%ƭ;^`4P8qD]Yj3O^u\u/hF}zJmp9 lnGՁ2&OJ%w0Ym%κIvT;`[t:o>v݋Bzp=sJWJYԻX^@ ?>Xvɚ\U׎Z IB7eqa)'PsK?jio%,DB+gx 93spmM(G&GO.yh2=0L5ג%@ 0MgFyxACS4qBbJ =1$/˨QŬNw gvo8xB+rAφACR&^o|ziqmi]m®<*(TǺv=%mzgz3ݣOൌ3b˸r3ǔ;Xwƙi?0 sA(;4w5ʰW'>[WQu?;MNqx qYbtػܿpfˎ9Rnk g _mTɐ"5ڗb,_1i*sWa~`BSwBx:Í&¦|œ3VĜKM^̷bxl?V$˲$a@P{tӚKB4C۟tor 5z*G[zi驹Q'CmOsCeqC} sܫ[4%'l݋+ =;a*jlzV5g󉔢 sȏxqؒSG`u.t*tBU2?1_.#:$eF'ˡ5N ZEF2H},2=S$Z".4m dF;) BTR$f!~$RyE@’;\!m%#0Vyw)=3t-7C +2R ,YXG~-0^qh5nk?&a(o˩M+Գ[^M"OAꀁ\ )^wh RdG +ob;xuhZQ\%O|( Vw!4b{3p/KnbW2bo:fg}^R֟{fPDm:J)1OYE=ĸz7f./|!2#)䙼WJC ^e~a:͢6GC_*ƨ;]\7M6^P?\fMSw46Vh"ML"4FUE%.ĺ[%$ń?CNanܟeeWx1H`lW7kֶ ZVRNM|SE`v$u;5 e{.Sm5^ 󉞜UNpgT=YoźlC393O>ūa.u6}1,7xt`ucH%&mUTK;)f_ikю|2UAp-Д|s%xSɟ݊XtjL]QM% qӇ[q`9MF~~ZM'Owlv= Y,*\6imT t%#oVDkvl^3q1{D6GR>r -:HE!UJUGq lT5Z\6d8xl?ٻ Q}r3Ϻ/W#)A֘eƇ H%Ilꛚhp3=L Rm:xGv@ubYfC<[`ae{ʦ <W-()Q@*gf jg&Ѿ*p&WU0}Nv~e ^:ŎYNׄ\rInЉaxjur9]~PT݌ޞ@k,vA]VDƬg!^s1N{#E8@$b |s溻r)jR"_2+RWé(f8-%}=z&5 d)^^BoEiddw;>VRా?+f=@y:y~e`pWXU:.]dr)-;OKikFaO\稿jeԚjQ`t<`]oϯgo %h5]3E\S`} @+ d)\&n 6:Y& 5Ȭ57.IJ\O)q1Wxxz0zbvj03'~ WhOgB*k?{ XkfA C`nRXxȹ,p1PbOctbZ%xy$1M5̻ӤVgr?UM|GfN2$$bGbA3wx }#R3l(%\Ce7x( %G]0yeU9@L8}gc"0}NS\fE` ӵT*3ٲ77 O*;*C`xN_rRmBwA[sفBH٤=RVrIy$Hx=_zk (gGYkLhKH嘻,xuNbT#]QSOct] ^z73NzӉw#8}רQ%*!?$푕՚շ"UJϧ)Jn?*8D9~,Ez^{/4GeT- V5dަNs1Ud}z?@q$p _2IC˪}urCm&]S҉ތ%moSgEj{G؋ԑ\lv`ה3%aJ}l睌rp<w%4X_c`;4Πv7t#ߙ,3)rJ^x$A3q/>?MW\K1~ ԖTĀ/\N+ӎQ7B^Z(]As%L[0NYd,?pGx q֟۵~m4'ׇ)sUh CwQYl'?mm|8BؑdqPECDOE!nDd5sl'p^،04)fUIm1EZ> ZM *4/2<O7OFJwa1^xfC"/8O$7<Hnlю1M+~GTln #Br 9M*ECm.hPJn6׳84` _rRP;;G|hҍ o);9XJwC7&,?\V薀AvRB؟f"%):7ÕIR6Cʂ7f֌iI +7/zcO4W.'vXK1 oѺP"bhp}@SS03yt K/8|x[b2dhAP<LWS8d'dlLBwZ E,S=.h\*{-n$`/sDG14|ԾӔFڇMV|jKhp_E;GlXҎ"RٜyX[㎬>fBHA/bhCe2%U(GT̶ncxi0FbE.zJTm beC"0šv})hkC|l-Dk:?nB31wbm!܍ Tmf VlteW.XЏއkX+hL ÒvO3eOYَWӈz2+hEI.) OWsPiE9q>3vhpf$\'̜+x 覼oK3҄ }?x } ș)Kn Ik{,LjՄ儈#.D>QL ;y"2{Aj5[h_Pe:¦lM8.k*_/{YOg6gNE|I3(.w-䬹#)7-T4!Ө.EN"4ӗNq5m+blTy–̱UMW? Y5bhGw#W"%U+BLLP!~[ 2B hxRQKL|V!rvٜ8}%c5=], -/*Ey)4f?ad_}Ca]V~}x6~["VIлW.xUn?8(|sDb)xY!; ݐ,+D?jL=:~JW-pS.MiH;*Q& n ^n6dVnvE(ZF66ŷ\v UYoVqZc#<0z| \њ:Z4S(הr=1Ҩ|sc06%4{I߾RyA) GY.EќK(K U*UUV!j xM H\iv2>jִj(c6l Rʬ!0 %ɽR,:drDv][ͤOtz @V }e & 3-*Uyܐȑ]^ǟw 1W^@][~!dXPzWI)I0&N[^hِćp;Y80 ӥ<6*u<&v)hSݽ)jlI9(ƎyT/J9l5f4^EcΝ=W.5Mhg6ytxF6x̵(csg Ɯi"g-rZw5?Fpx YCUgF2P`%@.PoKahdP+._HDv6p^.r9׾BŚ/9 !Pd [3d!ƶ*05 p7M:WuNϮ3ޟ|kŝ߅|z yFqz1 ,7R3j튼}ƒ@e+ݪetIܝV,?,rN1MJۀ= 6G!^kȓLJW b>d=i80g~۠[N6} XYGy05 ǟxp! q 1#3U %|0 H꠸_ a[2UiZ" .CP:}il` 1[D7->_)RġVm(<m84y Uc@}V;_hp}9vNoM3'E[IN3D$>7Z*Hhv!W eh/GTȣdUI 6z)d{hPVYW4^|H=К ~'twV^$:s,yLPDBHy0%ۍGTm|AfJ+'g:␥]JzG]jpn;rjXTF.6$Ee4L:$ɑE?&je7lnv%)t$S_z%h5Q;ېDdCeC:O') QO6>Jp)dlMr"1c#BpvlbwbBNGfwUè,ZUK% \aX(,sCλh`2&go|G* G^&Ewiq?+6 GY&r/՛;iJ'nLF'K=͌GUPdLUR$ 2`r7:1ޖ3:pk>/T[0"q5 P8갊[I6+Jf 5_ =#+z/nyv}=.M k%7JK[\H*ʊE^_S1-cf|ewJKgd3""Asq7}F}`2gpd23_SL.n9xx;-- EdJ(юӌV ߕԮ #1Cuc{H=dgnX# F]/bbEAq޻hء!F(3H%J_i%/kq(NM DFM +yߪ { FzvA hpl,$7PB$&TkSռXĸ,}C?QrK?]3dqW5]a/XזDlL{N5!01k=P*"ݪ gdLQHlCeu顳_"[rkک^0C5xZ`9K8To}q81Y} (H^mxp^\HkZ ]7kjLvR_0F^IVߙ5&XNGA(5A~m uF(e{ T,>ռ9)X^VNX#tV0n58UPEd zdzuUu#t-aAjQMrafd+1}%bЖ%C+<4kD974H7X@J~oM.MdO;$IӒw!=$Hs,,1f2y%^kDXK*ܚS4yacB9 %{2X4֧d_=vtBeHvy phz7.”>I $P\H6+~,~e(z?ݩ $aJzhUhƳbvܬnQ` bl̰Iz ʚ6M Ez.9 6IΓ/JSCE :;P,r$,v;"T9j-hp,T?ymeVԃ M?n{<:Jrd2VZiSoEl~|p P$22¥(:YQ/P?u;=ػJd-YqdNnr+gL/BJsO㰫ᅏ-f~' S"°7%MBƿ|^2Pr"uG`?`SiPת/sYD{mfNdݑlWLViXhg&Zg*T{"xSz~y'N V J&4avS> {ق\l+t!-3@j磊#ۋW @V(`@ok F+=f WiC'UVifG~㭅O泀lN{nL$cߗ D[ö-{^i9'd-+$+R m%PsЪEclܽsdHFKu =(!F!s_a^5x*,HkF$֍ّ]EPEsuŮ/OwlPZIbuQ0u"\b3Ymwݑ9t-ua? &nmM]ϔgU|F;*S5'uS&--}ZAVYbl.(ArAC[::乗MR,H|fD[=VzZmA5Y*U`Af@kGADR aENcb)2  W4t ݿ(׌u/O֯48=ܚ# ( x` _ǰwg ^ffDJsatˡ>3{|Ę\*H OݜUXE,YߦjZYUGeަ#[oLT IGJXߦl!!S9'*wja Fs/LH}/pS'G`H*IMA${e#If:h.ݜ0h RY`ţ;? t٭ol 06XdS~@Yem0)4N%a<^dč'<㯦,M$KKY)̈́-l !$9G^G04k"`J|dyoD&E.&_O6K#^ڪ s@q_:|ɧy~)TBFFFBf%C]ܗnp|mΊTew;tm-H &AdᓑV9zjlTj܅9-l~ǩF~A<>1K)ά?-nlfWߜA1PqsE?y-0orLw6y[:'#CJE]OOCoS82[?"<,Z@l"&L)>@)ŭJ"H@ky0@@A'*ʠE45E Vv]tlșn kL7k{gGu;lՆScL.c@[w^ xLas~Ĩ9?a=#ϞsyZa 6)L;Б;MQL7hxƽٺ71-߉A㱮\f+4ZR1v鴘"<=ga2Bɕ3zLvxe,r3Īi!'.xf9s<Uj\5[1ΈHr,OS/f4&%}KcY6 ̓!ĪUF$Qxo~жأxܠ}9WIUJl" j=QQEJb~Cg.lo+mY$m6նB[y|u dcdI[\W.vt_fE/O$ l=Ac*;]>אLr eu-+źB4"L0%YK-8.w>?1؝$'I5-Mތ aK`IځZ.?&IOT1\DZ5t*-x;zaEdU{CҢ_#k]e ]?6≟P*p16mONI?e .L^nv=qNލ~B8*E[Yu1ΥLuz9\ΧQ'&XSǣݻ|9h>K4sL݈5WdlSR.r0tњs&h˚8t믙'~_PQ^0O݃tKjn {h/z2lZw\Tь  5"{ul|F;co3T`") ( a 3@Ux7w?nV:jnԄY!hY绢[oW ^6Q@O'4GZxXf,D5v{P-d)<@5ڤQ/47~z`O1g~웷9 G:jLwbsނ ЌLIp {X;sC1/^2> .>3L6T*(*!O +[hfL2z5.xs蟘b#-.{}Ȧƶ+/seb,&Hy.RJwqlٶj  g@PIc|GbK뫎&@,b`ґYC|Qġr~ YW*N.%6Go$()52HCx,_^f.p #ChP7 u1Z MlB<Q JLXcF7|l3Z!xf ]#ޮ?iS~45q|)W. ,7WJӉZ &-۸G4dPf?@?* <j G m}+,7u'RLCU@IxAI9r?>ER8u |*b#IfoBݕHñ q{I( 'L{4%䕞IQ }*jͩ⡰7B:9 0b&CN4qK/>*r0\prH9ᾯdw(S|: !oJ/VC*pX,LegwM'R: #EjׅKh6R[#KOyj 8}`¨bwT:5(G֛?=S~+"(Qo#e±$(簣L"JAYwmE4 *oX R YwI*̶gp_atzM:t]  M:ƃ8]G(.<"ps2'IX]ci0D ~@71ͮ(T V #qJےzߨ0Q_d9Eq1׎0/^K !kqbH RX{=ӶUF-m,mUWee"EJ`< |#5)91p0xMCsHP_UrxV3YK 6M\e7д?ظZ񇺣 ds󔸕RθzJp0jPbHD{vеLUЁfNڧf‚s/jF.-Cj9A#]_t^/~#d<dUϞcg8ZhYͼѕFA,uק>E C Ϥjn-Rj@Tϼ9Q~U5xM93~@!H$F F3J TuNVJE'fP2]i@JKp />7RD;8ԟzg.j|y!xx mv &@D\1\D6/7,+@Z _S~E,0Y5W[a^oJG<٫~K@{C$m5.Vr_S$gGge3A'}>,ɲ_p$/v.SmFgҥ讒$ї s7E;ҕVji+qlrՎ2 6\ ~ @|{@Y, j&[#ye#k-ȔvҼU=Z ` OU9/^4Ǡ=QaޞiM)Z/Zk\HR>YF茶ӑA$]NKǖ XR.U!1欕4Иc^.i_m}7L/mu$O/b:SN޹'(&u8]uq8EQu@*]ՐIƦMVA2[V-F7شP:kXr[i2Glw-ٻ _(?zo.qK#mAcb<[$1jELqTLIC3xA}1Rߪv`,J,6QGרQh8ϡNK;a KWgzWKڧuNB- CYs4_hr]5N=1E>6ڄ"zj1HmKX;s- N<4EWnyc"4ZfB` I,,+ ;A93'$>ųKPJvjJOJvOGcbjnO>ÎECd4s Ӳ=PFaJ]Uf?[5k#R_iwOVӕ ]&ZO" UCQd;յϠ5BxO*d=n*҆3#yzȶ{*T7U|~E9rUI]e5'A"a;~MVp)9Ă#_ȅ~/c'ѻkV9p_mk%>+(N;`fHmɳ[0F&mDoqd{T$ !Amq(2PxW Ye'Qg2ǚ@YΈ_<DKo3~wR壿afF!LmUV$#P8]{pendh<TICUP"I*[JuQcr'Au@;)sT>4ʶ;Nqg!.ndhlTѿ ]t؂`L_[L:mn-prh]z)5QB?:6T92c>E#j]% d9s_XnVtI!˺ o2(Y_Fn‡{~ׁdrǗq"^pR2 \ `:˂?(]t0#SQi3{@*5?בAzk:p˕7/֡}hAX7=^b-݇+頁^Y~ov KY[xZ뮒amx$&iKl00MwPZ|ɧZI^EQl˿?$HeKp^۹t&fUG1*c.oP@48" G~sT%+)0Jm^L! ^+MQCyV5 Sc9>kG/ ؟ﭶݕܩ-{BV?fo2k*r*iyU7&&C9vbwwy0? 6s}(wu `g%d#N.HRHϒv֠F(-!=^8H>39 S"g9 ^[3bfyqrk (I0ѾWjF|h5*69u.m#S'x8{!oB &;BY$V0e6gd i?'$$yUmQ*f.7z._hfנO/YF#Hގ#.MD)TgP7 u"ߨ{92_[a (w36\mvl= qFy%⤡$qd\p9*q^$ש KKc-N?wTkOK{5ny"-q\(X7sVpxC}iH!}Uy`, n{) "P h#o?gm ^Mn<׀ll4D]zƘCkϪMvh\WąFXsonf:B5&QÕ L M]n-ŷh2AZ7yBJ%Hl?B-EZ>Z8jM|R)]=nR&=r/]˹#'H͵$Ē!V{yt+e0(~vGj-xk]XjOH5:#V^L2Y #~ל=*q 7:!m=os;| ik_>;n@=ñ:{ g:dԦQ&9)6j)>ͪ.2LL|@1ӶJ.FF@ڍ] knL^\3' PDYgXǤZMq!u"0C\욦תڶ?̲YOa3'Aqۻ/=a<ߏT4T*a~ {B/H7ղuQ}ԍbb^6$K@G(Bg;U ZK(s`@y*n\E~7=áa3q7g-*hnSƬ!\:.XnRtgm0b 8كp*gpe9 +Hѥ(dӉ漮+{ ^j}%)4VP#PTVLX0:HAӱ|!dc}Z>ԨF wSzT='{~+KG[~-`hwfkԼpD$ۯk(/ x†AT֪ݯ;V 4aoDmZv/?4=nv`/fsiL0z JI%(>-{4&0)A 7v]75.aifa!Տu$_w-o˲W:`:,YU$3vCn>Nzc HK[K (DZZگlāvv=WDecx'!ZjĈɳ OT2/dsM3'ESdB勈};qt~Fत5CUEHxȝHc 9gwb+t%9ޞ-IXPdUdͬ2q,a97-D>OtAA VɦS8mهpfu#٬Hh>ammza3'5?f9F RDvEۚ{zsE`.?G+A]kc5߇ny0$lV+y=n5ߍV-E#!ҟNZYSK~pgaD&GdD܍fRy/^͏Z{:[Bz!#mq^ ?(I)FGz_*p9N"֪LFYjp:QdyM@=IFڵ|NYJћ>B$5:&Ղٗ]Q6DDD ~iZZ?"Tw0oˁWa竩dS&s? YԯSB,,SQ!6±r3fuJk>1kEr=n\㖈J%0eةh(e9[P.y ggƣ⽅oWZY $GMZƀ\qj=x-ߜ!6xG2]4 IY)Z]JU%v`$JVq)C'$ߔUӥ`snzIi*$,Yߖ<NGOa{ϷnP>ˁU WDӓGV8dڬR/8E_ $|TlԍX)`} hzr E>٦΄A/.}@{^}Wi}7M/o6 Wf逦)7k{ۃШt7^-w>-W5R |4G8)t)SQ@C5p۫IBrxڶF"03krD7ڬV:<|߶A7u!r2lmo!=B(XܮO{uJXx=+3퉢ӃR9([,zE]gj\{~ э}"oՖؽ'y5PWiO֓4Ӱ.WRvβ\=!l>nְ~H72I0= Cmϟp$lṙ%ۣCw gE-b \Vͦfw'1 Xt{1JV$Oj/?}[ ]Hp6 Ł KQV'Vv{zT;%t]atjN`:fX͙=-19;q=َͭw(};i@bnkDoG%f S/D\~vR5(gF'yZr G|悐o{*R5ABR,^}*”q0 a }WՋ˦LhQ̞.Ó?-LpNf/'`r]Z3lH8 + ?S.^Tr7=lv @y`)1eBo vn@2[ >ZІpGyg !Aq{Nqhl,7xjl<'Upat]\Ju=[s __ݟzE4(FT(܌طݩL*aɺR3lk <ZqEJ 2(\ki<] s簬n6q~xluJܕ_zOhhnn'ml289#W{1>ggF9FMDŽNHD A1l%>"j W /\|(2Gr|/PZ'x*R HKy=fr&Aja i"l!#f_!~*f*mY !֬r=RJ_{:gHf̥ ZݳXϔB!%4#I?5~?ofLeX {_b8C TdYiΡ aէO .8ť|F%x!IeB{ke [ybS1]y^ے'ux>t|CKڦU=PL^$0֑]$@Z}@U谫^2{t)M;^_xI-Y YϬ IUh Z`u'rzH |X0EF+FDB#vܣȤ'B~|SE^tyCu;G̈Np%ߖRWvQi^=ԟAOhXt̔ gnFi\o;輭/[_ VIS*ǯyBèF@>QӢ$XixtT :gVI~!׸ʅdFi?ެF#BdIZ࿖$|s֕[Z: - Ul̽57f("s7WkUm&sM}ȃZ^= ?)I=x"Xc*_ĕ49kkڿ" 㴘7S|`,J }R! /x0vnxK-HIi/5Z0ya;j_׫Qs-Q"dJv9%a˪Sҡ@l1g@c8SE.U?vF;_jc KUo%M:!\( W52^SGPލGN[yQZRSnm0B3QJ1 E’e(E1Zü,$ ڝu.7iK$4x"]lOXB~7Ug) #G^4$5f^KUpZZՃgA뎳3hWHu"{c{QXj3#Ī0|~UoP1Ce<`' ex 1&X[&a'iKw*X@6S|O;t"r35ݍ@S ],NêGt(a%ܢS҂f܏R>/wZY/e3G[e cSDk 4or` Ty+x%N|X!ݡ;0O~9~Z~¼ D荰y!j/Þͷdp[AXSYu(JMy`HRoi锬t1|n1_ﳗ?b*S\|l( d!6t]bM@dIN+Zz"ɪ0'[S_KΒOjQZdm~9wSRnM|+'dQM<O}UNi ub!_F)`PCb42Vԉ {ژ%vD% @ȘIU\;=flCSXi޶Y!g3$IHWzR$+DZL' <ίe2d6e ޹S 8Rh@Gf7\x9߁ AOy u kr8n>&aN[*~JQ`swhS$`mfk:opb` 0@,&8,Hclٔ~喁CƙnMm{xC ,Br\Ns:  G^?l)1As u+t^7Pp%Ï2ԃ|!@}ڰ$> U%<-x*``*W:9Њwxf-U\e aqLy xg";DwZoN5(҈>RߕȧlPz/aZY.pwwNk!ʹzOM9j)AZ]1VuNK|Hx Θ`¯!y&hM$SsoՐpxrȲܖ_YmktmWwMTQQ8a>-pgvml(Z KFϓ'mPV/^'|8ey<^jk ?{! ɳv)MzYs9~& tv`Duy0 s9;Ry04]ԧżF, ;׎tDfIp̂d:w¥" hSHB{;@qO/gwUXڭPbBv0ی"ii->W4j9cOelE#* ~ [z_?a'?L6-qѴ:ʵw MڡC=spX,ղ']BUUki4Ýї4"S¬YP+}u*WJvF2K@.CId4(l+y!S8*5&D]&-%4& oz4]`{GvH+>vLV3]~L>ݒ444Y<:=x13o04ᚐ(09AL?Zԍ^τ-:`uafxxS9|ϞPp{ Ruٌ_ o8"Yweӛ#h&;5f[;CS;yʪ?(jbyU&r#tRy 8#g vu>M|ۋ^|&(bBP3 T*ewAM كOrM(<+X8H&]mWN7ykGȞ#:5˘hR@q$b%'1R_VA \VgBN RPvX^FV ܠ"l@Tt91#!iAQ:mo_*oy'L.(7,` ^ F'~ޯ-N&l`$u7v.;(9u߉(8+Z.y#Fve r~ZJIa6ckD:Ԏf]AX '6mQ&JY 'O'Ϣcg'.*mMj.#?D8^D0Kl6~+ tEEU~0` xkN.;E%a 5D?Rӹ=<'AŽ *Mq”?9olň'$F~s I8&TjH@9dɡHHcb]$[kdn(,ְ:6H"9$<9`4qg[}ְYwGrTm'h>ވue3Y8{j;rStaCl^4av;`$'O,bR{@%h&_pMO)eH(֧F%d5%=x$Y dc"`42qp-->ق9zzTڹLj |@e,N*ơzOGI$6i?jPFl7&H͗1␐@fu]Ǭ%4O> 4`HFeDT8]Qwwa~-m" zNtZ AZ|^ϖbQRS;tHIht0D1,0[Ewξv"]Ȣ_6qt,?*Ĭh6ai^?{H?x=^B}N}\ Kc\TñgDz\/ A׾lL7% 9 sIP',SsdYhkNrG "& 2AkYXȿkV폜`v.&>̈LZXx,9)1Ṱv$^6{*y aw9 cl[\>@גy4}'紊gQ8_ \\P@: ~fYrT>ċ*D$kV7by1@PJ{+uvu\C.eO"-yXG߄X? QphG؝{&W-_w?F1aHZrqZ8Qz650wRv^5yF<"{@IcVrw"wwrOX^ok,5"M?e dD n" <؊L$/)vOha [Ų`x8Xz;\X3;7WFzԽRK8&jCOȗ*6No̴wN&޼jo[$\lt6l0S94X1t>f; ߢ@VWLy'fPA}unBt!>Kۜ!chYN.=M@ f7"ewCGnvZ^Yv[khDΤjSIJRR;p),m#G嘏 3+8٘NBͭHС@)0DNT:㖳4Ph f̠wu(9SC;:'>? u_`YL=WO+bZ{p޺~S&;uO~3pR-|K(%;_'8$ı,%%Y?dnO"I9v$C Fgۘb*\Ygd:vd,w螻yYm(~-R"5E%P2č$F4fA|>o&7y8;`QM0Kk1>Q!4Ʊ\X+dq9?^<*} rE=%ɒTFos@\B ;>-0u:YS|[@P;߰yBAj/-`ֳFhJᷰsTQxY}pӢ{wƨg\vl7ee)^X3X-c4\HmUO!g?Q{lys;.I;!Dx:Д7pXBrQ>HSP HeزP_+-)HpEYţOGo=sLiy 5P / E"Wo9EATBcoV߹+AXAy(<xUf &#'ADK"5ɋ3x>jLkv+AQ@F.|2 (߫]w]X7".W G/SE Wqܷ4Iqx+e;髾 uY4`AoP6NG%vՄ'-?(f,T,a9$Έe 'jg-|{vԖ?-SdX9EY$b'^c (%J-{J2~,桛!>;F6$Mk )!F[>230c%4M 9dzOnta$voB|F_nį+Ղ/ڦ/xU4 *|>=늋ʫ=e@*c9 %j}t_ &I!h3D谯ڇBp:$v?Mգo̘AD9{pTrS>ةhȫ6C.y}ɓ}NѶcXK"܌YA"$DiQOw51$QJk+z;k +|ʰjCEɁSgֽps+J.gҫ|J{")?8}]C^54pҾ>䤭tbZFk_X E6htO7N4[1XՀiDz'&<ۜ$y2nF &lU=q i 0adUY~s鼀[96${ddG fߗJM9]R>'fO@׾:B-X*ѣUf7 \moPX%ޱUGwٚ-L W2L7ze{2QlN{;^ #B2vmr`9a&q'T)ۛmNSlٚyNEdVkjҦUPƳ Xl$CC_xLd–0oʄV[! cWUT1e,MЇ!yʑ,{f f0֪U0'ޕ0iX!3 vYۄ==0B9LcE: !պLne hU*SE-uNn?4[f[X=>{qQ?H\Wr㬣$ʗY+HXF?@gRV1*t)􂭂H  ff Na]gIGXcpA;iG?4DHYimgʠr@rH(g=+4o9o"R e1T{XtR(%48L?t}Iad-8^x__k8#d0ke+7+7{X!AzZNo 6ҐU$ɯdWƛHV,, &\ȝ=2cIrc^3rvEAgL"W$c/5axo*ou %Q ]|qqFf˘͝묤,l>_m-8ϲ~ X-R[uZ?)^A{sհ/SgqM9MMý* 3DLV7v͓ qg.k$Sld kms®`ٚKgT/$)J)Rdpnp갵k<əlM%=3u8*@[0s㚥lX=Tf״SPu@9IZ܀%.#B5|_U+MWl^`K(Sd,Hno_z;?C1VZckR'KMz8wv?7D*__߶!s4`f47{ ztFVi<#oїgAͩ+.d@PK&U2uvuGGa~ < ;p{ *1H> b|+175F,^ Q:)5)| : TG> E6ANnGMmvxW&+aQŔK+o9a o.A xmb0[=;8gkpǨ8~ǻn>?|(NWS"cg9MmW.e 88rNMy+Z@YggDj # nIB ɧ~܆UM& kqQ"״ )y$\MHhv9v` hI qA~h0\Y@{ Ah:e $)5Gz |bNLsZ$VTc63UtG=5-n/kG&A,x5aJ/ZCV*\E;fvYD#lH/MA;Fe~݉F 9f9\(+\ (f~ʩGBx~;ϵFIz0lAvqG&\ű5ݥSo谇wq«/;t0IhoW0աb/ J5%QT@fV3}k@=+c' )?Iނ'ҾEXr['(EPSL|`]c4:Am7/zLȊv6s@^^4-^9-ٰ7r^ja<]*__*g'zOhԦ@!sLff#7:ls5H{pVКle k/׺CVoӬ6)}.E۾lSYLhy[̕/j!Ǐt$*;2 ]JrcoyƘ `?[Q-߼mJfb]mА&01#uڮ3 hŇ~c!JGA\|Fx=]D V}E)^U=j1XjS ͱkTw++V0`Xw*Il\n`觹U3*v-vf>fgyy,׳Bq"0h CM?sBΑwN eXa8#Lg&P7_,Qە2#⬕/V>/Os}-pde_ OدYB='9Њ{]_,.?X)zQWR\~(˩Cs!K,࡬J6#f+%/+XuM(Bꘇ,*LbGGg$H&f2Q'+Z[=f'jQY/\ɞj͈.fE|W!-mWϮ0K$s*eM9梐G%m,RfGu0 ǎ{tȪF& T*zk s8[PRY J-.* ]RS{b{ڎ L}KV={t6wqj@Q$$;ΌN{l(^FFp?<-G9,TQ6Ϩi,pWStk8+"Q2Q<*]K:֤arՈ`-[aMґp7hƎyx؍t)Pgs8WKVDnCC뙚NV_jגvQ$lcӏLz3M4Dkʘ?/H= SRyDDc׻ņl&{uz-Qs4y[Y ֟ٺ̄1@ q?d5d=ʝ+nJm偿O0{ 2**m˷C90i>4&`8WA R{GŵUZR9j^M3QGwn N^ec7ݠPt@yNSLVZ[L̊0mp4:z,̉զ?nB#fFl ԎlE1m4LWY_MܚmUכpjL d(jCg*T,Z"{hͿ%cm)2`_>o1 q45kT~s8TcpS?4?W-#+ﭕ_`k~ȞPDqט`MHN[J[>,,j YB35T<fN46{T}+/~FP!=NKڑ ,jm -݃N~yp! pTʚ*̕mt@Qvd;4L]^j1ܿ_c L?TV^ki&.3qLEnΤzX`Iq1pm _$E] G  S՘XhGn?%R|$4r`JD{R'u.TZ0(:]_m4X+B\ ᐕ_c'GX<F\_~nvk ζjhČ^q>(`1Jguҿ8|]U<+DL0SLd5:?#ohU'>;:;ԯa${ʗ|є}ud2קJŢ  Rgԭ`kHru1)Adܜ6t&Qyu/Pc=TS[c|C/`^j gw'_Wy+Aŧcq{ӋlPOW!re3i| ^L'hT WGǘ1Lt* >܊"ٕ =v]>oI+)$Tȼ-L0ǂbDNجqk 8y|+#S7o9Cw'ٻ70'&q4mE\V! B مDRW5ȡVU(*h@Ȗ=U0lʤ<$PklS7Gj憣ZmMf 4/wxy;Ʋ*eq4Ϸ  wHR!Nʬ4 P,`\{+t@}5T /ιzC ]Z1cƀlG4쁪ļs](Eh.g낡F}YS^} GϢMFz fJ7Ql23-(r 0b"/]H -`)2szQ =D|:xw|dX!)q-͂pA.ExwZ|7>@ 11[Yl Nв07YGW%1:z0Z^k)iw>;tuFFϹ9ლA3'M}sj7|v2;kMNjz5<kݞYԱR+@k#-U`̵.ͺ=o@Ozti0>> :L*f6N`< [B>_KPky^B\YwF eT'zwoppX^1;A)|:07HzƋk_,H܅Et !P!vh#h%T0]Fs l?fMYֆDɄa/rڒ ΀M@ؓd98wXҙRU݇?3n;C_ڎd>Ǒ=e|؀9VԘ!%Qƾ L1)Dy L6HSdKa;v+FnYDbo ."^yŅphw 9m% )Ü@vONEs܅f4d9"_{i<ǽ>;Z;hT4Z?ì &nj832!ASP{1'@ܾ=T 1S4z)% /o@ ^t 9t Zo`V&CSj/*L ;'Y\/u3f)$&L}[m@~'F qT琙;-DKD- ֦ה$GSgMjXN5yUtWp1LeM2BAc%[~z@ģZ\|`V ]v'Sئ g !KV i7ۅL$4:3c"_R !C Wbhjmzj0cTSvU>`7MlohU+- 9Mwmj,9'-9ZNO<Ɲ}_stH%)}/H1Ĥ h"eG뢦eolݮdb2(ʆʱ3 :\@653e $`m劧5< 7{3ucPn'h<++ n g- @R}_PeVĂ1&PXOY>z$ANՒ{6ђl}WY;m M2(vW+) ,tRS/ET9`V]KAX_wu.rX)ʢkdY'mY-ԝIcY-lON$P =.|:Èi 9hoorvFHP F`mVj6`ZܱrQkUŒΊD.v ; mCBݛNcǬ~nwC]fE(`䨜\R26]}V3P~QEGG{3/ଜ-gA!.U@hZyFOΑſ[O SPx=gWB5{@JpD;ܾroˠp|6 Hz_3S-wyy"5#_r ;՝q)O`Ѭ-H>Y9QK&2\o س A  YZ