liblxc1-6.0.2-bp156.2.3.1<>,Hg]I%z KWv`"JCzPZ83oBQ.!@i?ٿ@:bkp77 #9ha9[ 5Q̵2Uw:ESct3r(h`s/'rjY4/b^'ҍ欝&i(-ڎC`x&/̎6 ]Y?&u˜Qm AՍ[6L<=M:wcZaɡ7PozЍ ]Sr|U'M2~p(|h9Y˲k;siWwC16Pn~;l|\b֫RDD#fɷRv$vKOsjG ]Vw%vҶEq_{PjD3lV#hP GJ;8%n=Ԇ"mZ;=C ?d   :tx  4 l  x  + L  # # #(7 8XQ9Q:AQ>ֲ@ֺCFGH\IXY\0]ؠ^b/cdxe}f܀l܂uܘv wx0y?zCliblxc16.0.2bp156.2.3.1LXC container runtime libraryThis package provides the LXC container runtime library.g]obs-power9-15"uSUSE Linux Enterprise 15openSUSELGPL-2.1-onlyhttp://bugs.opensuse.orgSystem/Librarieshttp://linuxcontainers.org/linuxppc64le/sbin/ldconfig if [ -x /usr/bin/chkstat ]; then /usr/bin/chkstat -n --set --system /usr/lib/lxc/lxc-user-nic fi!U <Pj >H!^x[pw:A큤A큤AAAA큤A큤A큤AgYg4g4gYg4g4g4g4g4g[g[gCg4g4gDg4gYgZgWgZgZg@g\fTYfTYg\fTYgY33e07d996756068658e100de74d14ecb9d2d69f325ade2d6fc81a8a1f0b5ac4f2fea60c7679aea893fed2ed35cb332ea468e0bee8a2aa5661b3184d3175a75e34fbf9fe62b4d10c9ff9be5162518dbeff3d7f3ece7268f6477508172e87481add8658316e15dd975f1da49733919565a740fea390f6787a631e6123c4e2c8b4c0947191eadc4ec006fb20ab682c54287592b87e94a41f45b30af3f09204a64a7372c88fad59776e2d3626cef68ed2e4b6b82219b7c6e01425ca52235ac82013a856fe7728b22470b592f16c00e7a1e67471c974647c3f0223c4d18bea6c9b42208e0c009d17ad90853d5e54309d6300780a01c7629b6f6f859ad15a4cc1df5cf5098bf2cd20d961d9db4abe01e39b5b05e91e7c1e539b06f801450a211e85c44b246efee5e17eafe91b08ac2dff9ef6bb30ad45d860c435c96ee96410995a2aa94509df2b193e06eca69c3dac9d8ce09301a895394e428c0b66543fbd00aa72bc8923a8df9389179b2a1d95c3ab9f8a452aeb009d8f974f6b364e81460a53da227fd273613e75fa067921384b65c16a43f9761ad24a6a096362bb31f411cd0cc5528a9671196f74c16ed947c9a4335e2c75b2b3e6aeb026953006f3dc00e5fb94baff9900a79009626e4c500e40c85954be0483cb6214bd80700e6719ee1f1cbbe2140628dcdc2e45d0d48d3c72124c0217737bb01d05cb43645521f40b71aac2762f09085e7c0284df47a4c3f6d63e50ed916b19e89b31d9bd3fadf4648d63d24d7aeeff034531a981e7a4f12a048319c7359d432b64cd3e90497a40644a6d4liblxc.so.1.8.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootkvmrootrootrootrootrootrootrootrootrootrootrootlxc-6.0.2-bp156.2.3.1.src.rpmconfig(liblxc1)liblxc.so.1()(64bit)liblxc1liblxc1(ppc-64)!@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/bin/sh/bin/sh/sbin/ldconfigconfig(liblxc1)findutilsld64.so.2()(64bit)ld64.so.2(GLIBC_2.22)(64bit)libapparmor.so.1()(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.22)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.32)(64bit)libc.so.6(GLIBC_2.33)(64bit)libc.so.6(GLIBC_2.34)(64bit)libc.so.6(GLIBC_2.36)(64bit)libc.so.6(GLIBC_2.38)(64bit)libcap.so.2()(64bit)libdbus-1.so.3()(64bit)libdbus-1.so.3(LIBDBUS_1_3)(64bit)libgcc_s.so.1()(64bit)libgcc_s.so.1(GCC_3.0)(64bit)libgcc_s.so.1(GCC_3.3.1)(64bit)liblxc.so.1()(64bit)libseccomp.so.2()(64bit)libselinux.so.1()(64bit)libselinux.so.1(LIBSELINUX_1.0)(64bit)permissionspermissionsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)6.0.2-bp156.2.3.13.0.4-14.6.0-14.0-15.2-14.14.3 /usr/bin/chkstat -n --warn --system -e /usr/lib/lxc/lxc-user-nic 1>&2f@fl@f@f@dǢ@dP@ch@c[@cOcOc0Bbb@b@aex``@`@_@_@^^^k@^^@^8 @^6]M@]z3@\ \\@\@\\@\@\X)@[@[[[dC[P}@[!@YeY@YKYYYY[@YX@X@XۡX6@XAXF@W@WW\@W@W@W~D@WZVKV @V @V @UU@U4@T@Tp@Tp@TTA@TTy@TuTl@TN3Johannes Kastl Johannes Kastl Johannes Kastl Johannes Kastl Dirk Müller Dominique Leuenberger Guillaume GARDET Aleksa Sarai Johannes Kastl Aleksa Sarai Johannes Kastl munix9@googlemail.comJohannes Kastl Johannes Kastl Johannes Kastl Johannes Kastl Johannes Kastl Johannes Kastl Dirk Mueller Johannes Kastl Pavol Cupka Paolo Stivanin Aleksa Sarai Aleksa Sarai Aleksa Sarai Dominique Leuenberger Aleksa Sarai Pavol Cupka Aleksa Sarai Aleksa Sarai Dirk Mueller Aleksa Sarai Aleksa Sarai Jan Engelhardt Aleksa Sarai Aleksa Sarai Bjoern Voigt Johannes Kastl Johannes Kastl bernd-obs@wachter.fimatthias.gerstner@suse.commchandras@suse.dedcassany@suse.comopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.demchandras@suse.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.dejengelh@inai.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.decbosdonnat@suse.comschwab@suse.decbrauner@suse.dejengelh@inai.decbrauner@suse.decbrauner@suse.decbrauner@suse.detiwai@suse.det1loc@opensuse.orgt1loc@opensuse.orgt1loc@opensuse.orgcbosdonnat@suse.comjslaby@suse.comjslaby@suse.comjslaby@suse.comLed opensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.deopensuse_buildservice@ojkastl.de- update to 6.0.2: The LXC team is pleased to announce the release of LXC 6.0.2! This is the second bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. * Some of the highlights for this release are: - Reduced log level on some common messages - Fix compilation error on aarch64 * Detailed changelog - Remove unused function - idmap: Lower logging level of newXidmap tools to INFO - Exit 0 when there's no error - doc: Fix definitions of get_config_path and set_config_path - README: Update security contact - fix possible clang compile error in AARCH- update to 6.0.1: The LXC team is pleased to announce the release of LXC 6.0.1! This is the first bugfix release for LXC 6.0 which is supported until June 2029. As usual this bugfix releases focus on stability and hardening. * Highlights - Fixed some build tooling issues - Fixed startup failures on system without IPv6 support - Updated AppArmor rules to avoid potential warnings * Detailed changelog - meson: fix build on NixOS - github: test the lxc multicall binary builds too - lxc/network: handle non-existing sysctl /disable_ipv6 - network: netdev_configure_server_veth: reduce scope of disable_ipv6_fd/path vars - Update lxc-attach.sgml.in - Update lxc-execute.sgml.in - Update lxc-{attach,execute}.sgml.in - Update lxc-execute.sgml.in - lxc-local: fix use of LXC_PATH before init - lxc-local: fix incorrect path to templates file - lxc-local: remove check for template existence before extraction - apparmor: fix rule path pattern specification syntax - apparmor: regenerate rules - apparmor: use /{,} instead of / - apparmor: regenerate rules - github: start using ubuntu-24.04 - github: properly check apparmor profile changes - lxc/storage/zfs: ignore false-positive use-after-free warning - github: exclude clang & ubuntu-24.04 combination - meson: fix build with -Dtools-multicall=true on NixOS- fix builds on 15.5 or 5.5- update to 6.0.0: The LXC team is pleased to announce the release of LXC 6.0 LTS! This is the result of two years of work since the LXC 5.0 release and is the sixth LTS release for the LXC project. This release will be supported until June 2029. * New multi-call binary¶ A new tools-multicall=true configuration option can be used to produce a single lxc binary which can then have all other lxc-XYZ commands be symlinked to. This allows for a massive disk space reduction, particularly useful for embedded platforms. * Add a set_timeout function to the library A new set_timeout function is available on the main lxc_container struct and allow for setting a global timeout for interactions with the LXC monitor. Prior to this, there was no timeout, leading to potential deadlocks as there's also no way to cancel an monitor request. As a result of adding this new symbol to the library, we have bumped the liblxc symbol version to 1.8.0. * LXC bridge now has IPV6 enabled The default lxcbr0 bridge now comes with IPv6 enabled by default, using an IPv6 ULA subnet. Support for uid/gid selection in lxc-usernsexec The lxc-usernsexec tool now has both -u and -g options to control what resulting UID and GID (respectively) the user wishes to use (defaulting to 0/0). * Improvements to lxc-checkconfig lxc-checkconfig now only shows the version if lxc-start is present (rather than failing). Additionally, it's seen a number of other cosmetic improvements as well as now listing the maximum number of allowed namespaces for every namespace type. * Support for squashfs OCI images The built-in oci container template can now handle squashfs compressed OCI images through the use of atomfs. * Switched from systemd's dbus to dbus-1 LXC now uses libdbus-1 for DBus interactions with systemd rather than using libsystemd. The reason for this change is that libdbus-1 is readily available for static builds. * Removed Upstart support Support for the Upstart init system has finally been removed from LXC. This shouldn't really affect anyone at this stage and allowed for cleaning up some logic and config files from our repository.- update to 5.0.3: * Fix nftables syntax for IPv6 NAT * Added support for squashfs OCI images * Fixes when running LXC with io_uring + detailed changelog at https://discuss.linuxcontainers.org/t/lxc-5-0-3-lts-has-been-released/17708- Update to version 5.0.2: + Fix a variety of build issues resulting from the switch to meson. + lxc-attach: Fix missing return codes. + core: Setup peer group for container's root. + checkconfig: Make output more useful on modern kernels. + lxc-user-nic: Fix issue resulting in leaking file existence to unprivileged users (CVE-2022-47952, boo#1206779). - Drop upstream fixed patches: + OPENSUSE-0001-meson.build-allow-explicit-distrosysconfdir.patch + OPENSUSE-0002-build-detect-where-struct-mount_attr-is-declared.patch + OPENSUSE-0003-build-detect-sys-pidfd.h-availability.patch + OPENSUSE-0004-cgroups-fix-Waddress-warning.patch + OPENSUSE-0005-build-fix-handling-of-dependancies-to-fix-build-on-o.patch + OPENSUSE-0006-build-only-build-init.lxc.static-if-libcap-is-static.patch + OPENSUSE-0007-build-drop-build-time-systemd-dependency.patch + UPSTREAM-4187.patch- Add patch to fix build on Arm: * UPSTREAM-4187.patch - Refresh OPENSUSE-0005-build-fix-handling-of-dependancies-to-fix-build-on-o.patch due to the new patch- Update to LXC 5.0.1. boo#1204842 Bugfixes: * Fixed a mount issue resulting in container startup failure when host bind-mounts were used * Various meson packaging fixes especially around libcap detection Major changes from LXC 5.0: * Switch to meson build tooling. * New cgroup configuration options. * Time namespace support. * VLAN support on veth devices. * Configurable tx/rx queues on veth devices. - Remove all of the missing_setuid warning logic -- all modern openSUSE versions have the necessary permissions configuration and thus we don't need to handle this case anymore. - Backport in order to fix the build on openSUSE: + OPENSUSE-0001-meson.build-allow-explicit-distrosysconfdir.patch + OPENSUSE-0002-build-detect-where-struct-mount_attr-is-declared.patch + OPENSUSE-0003-build-detect-sys-pidfd.h-availability.patch + OPENSUSE-0004-cgroups-fix-Waddress-warning.patch + OPENSUSE-0005-build-fix-handling-of-dependancies-to-fix-build-on-o.patch + OPENSUSE-0006-build-only-build-init.lxc.static-if-libcap-is-static.patch + OPENSUSE-0007-build-drop-build-time-systemd-dependency.patch - Remove no longer needed backports: - 0001-Backport-Commit-build-detect-where-struct-mount_attr.patch- re-enable FORTIFY_SOURCE=3 - add patch 0001-Backport-Commit-build-detect-where-struct-mount_attr.patch This patch backports the fix from https://github.com/lxc/lxc/pull/4179/commits/c1115e1503bf955c97f4cf3b925a6a9f619764c3 The patch fixes the code so builds are no longer failing due to gcc errors -Werror=implicit-function-declaration and - Werror=incompatible-pointer-types- Always build with seccomp support on every architecture. boo#1199963- fix build by using FORTIFY_SOURCE=2- Fix Tumbleweed build.- update to 4.0.12: Bugfixes¶ * Fixed CRIU restoration of containers with pre-created veth interfaces * Fixed issue with kernels lacking SMT support * Extended cgroup2 config options in lxc.mount.auto (cgroup2) * lxc-download now relies on HTTPS for validation (avoids GPG issues) - drop patch 0003-templates-lxc-download.in-use-GPG-option-receive-key.patch as upstream remove the GPG functionality- update to 4.0.11: Bugfixes * Core scheduling support (lxc.sched.core) * riscv64 support in lxc.arch * Significantly improved bash completion profile * Greater use of the new VFS mount API (when supported by the kernel) * Fix containers with empty network namespaces * Handle kernels that lack TIOCGPTPEER * Improve CPU bitmask/id handling (handle skipped CPU numbers) * Reworked the tests to run offline- use --withpamdir and use pam macros to fix UsrMerge problems - update to 4.0.10 Bugfixes * Fix issues with less common architectures * Support for additional idmap mounts * nft support in lxc-net * Cleaner mount entries for sys:mixed * Switched GPG server to keyserver.ubuntu.com- fix wrong Source URLs in spec-update to 4.0.9: * You may have noticed the sudden jump from 4.0.6 to 4.0.9, that's because 4.0.7 and 4.0.8 both included regressions that were reported by early users and were considered bad enough to require a new release. * Testing improvements including fixes from oss-fuzz * Rework of the attach codepath * Cgroup handling rework * for full list of changes see https://discuss.linuxcontainers.org/t/lxc-4-0-9-lts-has-been-released/10999- update to 4.0.6: * Improve handling for compatibility architectures for seccomp * Harden seccomp notifier implementation * Rework parsing of /proc//mountinfo to handle kernel regression https://bugzilla.kernel.org/show_bug.cgi?id=209971 * Improve network device restoration * Significantly cleanup and harden config file parsing * Support new capabilities CAP_PERFORM, CAP_BPF, and CAP_CHECKPOINT_RESTORE * Harden containers started without CAP_NET_ADMIN * for full list of changes see https://discuss.linuxcontainers.org/t/lxc-4-0-6-lts-has-been-released/9926- update to 4.0.5: * Support allocating PTS devices from within the container * Harden more path/mount handling logics * Rework LSM logic to limit initializer use * for full list of changes see https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269 - remove 0001-templates-lxc-download.in-fix-wrong-if-condition-use.patch, 0002-templates-lxc-download.in-make-shellcheck-happy.patch (upstream)- add patches from upstream: * 0001-templates-lxc-download.in-fix-wrong-if-condition-use.patch * 0002-templates-lxc-download.in-make-shellcheck-happy.patch * 0003-templates-lxc-download.in-use-GPG-option-receive-key.patch- Update to LXC 4.0.2 - https://discuss.linuxcontainers.org/t/lxc-4-0-2-lts-has-been-released/7449- Update to LXC 4.0.1: + Tweak systemd ordering (start after remote-fs.target) + Fix various issues around attach and cgroups + Fix shutdown timeout not working on pidfd systems + Fix cgroup issue on 4.9 kernel + Fix write issues in /dev/stdout - Remove 0001-autotools-don-t-install-run-coccinelle.sh.patch - Remove 0002-cgroups-fix-uninitialized-transient_len-warning.patch - Remove 0003-cgroups-fix-build-warning-on-GCC-7.patch- Fix mis-use of %suse_version when we actually want to check against %sle_version when determining whether lxc-user-nic should be setuid.- Add backport of https://github.com/lxc/lxc/pull/3347 and https://github.com/lxc/lxc/pull/3349 to fix builds on Leap. + 0002-cgroups-fix-uninitialized-transient_len-warning.patch + 0003-cgroups-fix-build-warning-on-GCC-7.patch- Update to LXC 4.0.0. The full upstream changelog is available from: https://discuss.linuxcontainers.org/t/lxc-4-0-lts-has-been-released/7182 Related to the LXD 4.0.0 update (boo#1168338). + cgroups: Full cgroup2 support + cgroups: Freezer support in CGroup2 + cgroups: eBPF device controller support in CGroup2 + AppArmor: Deny access to /proc/acpi/** + config: Add lxc.autodev.tmpfs.size configuration key + config: Add lxc.selinux.context.keyring key + config: Add lxc.keyring.session + seccomp: Add s390 support * network: Improved network device creation and removal + network: Allow moving wireless devices - Add backport of patch to fix build: + 0001-autotools-don-t-install-run-coccinelle.sh.patch - Remove upstreamed patches: - lxc-3.2.1-cgroups-init-cpuset-properly.patch - 0001-tree-wide-initialize-all-auto-cleanup-variables.patch- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to shortcut through the -mini flavors.- Fix bash-completion paths to match the binary names (and to avoid conflicts with LXD). boo#1162426- adding a patch to fix "Containers fail to start regression lxc 3.2" - patch name: lxc-3.2.1-cgroups-init-cpuset-properly.patch - upstream issue - https://github.com/lxc/lxc/issues/3108- Add backport of https://github.com/lxc/lxc/pull/3102 to fix build failures on openSUSE Leap. + 0001-tree-wide-initialize-all-auto-cleanup-variables.patch - Update to lxc 3.2.1. The changelog can be found at https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322 + seccomp: support syscall forwarding to userspace + add lxc.seccomp.allow_nesting + pidfd: Add initial support for the new pidfd api * Many hardening improvements. * Use /sys/kernel/cgroup/delegate file for cgroup v2. * Fix CVE-2019-5736 equivalent bug.- Rework /var/adm/update-messages handling to be far less complicated, and more packaging-friendly (by update-messages be owned by the rpm) as well as storing the update message in a autoconf-templated source file.- fix apparmor dropin to be compatible with LXC 3.1.0 (bsc#1131762)- Avoid wrong permissions warning by conditionally setting the setuid bit based on what version of permissions is available in that distribution (makes no difference but results in less confusion to users).- Fix builds on SLE12, by depending on apparmor-profiles instead of apparmor-abstractions. In addition, remove the Requires on abstractions.- Trim project history from package description.- Update to LXC 3.1.0. The changelog is far too long to include here, please look at the changelogs posted on https://linuxcontainers.org/. boo#1131762 * Includes fixes for CVE-2019-5736 bsc#1122185. + pam_cgfs is now provided by this package, since upstream has moved the sources to LXC (it used to be part of lxcfs). * All of the patches have been upstreamed or are no longer relevant: - 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch - 0001-utils-add-LXC_PROC_PID_FD_LEN.patch - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch - 0001-Backport-autodev-fix-from-lxc-master.patch - 0001-PyOS_AfterFork-python3.7.patch - Add a warning if lxc-user-nic is not setuid after set_permissions, to ensure users actually read the warning (which means we get to remove README.SUSE). It also supports people using paranoid mode, which is why it's done in post-install and isn't packaged. boo#988348 - Quite a lot of the runtime helpers and configuration have been moved to liblxc, in order to allow LXD to make use of them (because, in truth, they were always a requirement of liblxc and not just the lxc-* tools). - Add workaround for pre-15 distros, where _sharedstatedir was inexplicably /usr/com, to use the correct directory of /var/lib.- Rework packaging to be a more modern openSUSE-style.- compilation fixed for Python 3.7 (PyOS_AfterFork() replaced with PyOS_AfterFork_Child()) added patch 0001-PyOS_AfterFork-python3.7.patch- fix for bsc#988348 (lxc: enable setuid bit on lxc-user-nic) - do not remove setuid bit for lxc-user-nic on releases with suse_version >=1550 - remove setuid stuff from README.SUSE on releases with suse_version >=1550- move bash completion file from /etc/bash_completion.d/lxc to /usr/share/bash-completion/completions/ to avoid warning- 0001-Backport-autodev-fix-from-lxc-master.patch: fix unprivileged lxc containers on kernel >= 4.18- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the next patch - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information leak and possible open() side effects accessible to regular users via lxc-user-nic (bsc#988348, CVE-2018-6556)- Add upstream patch to fix container start up problems when AppArmor is enabled (boo#1099239) * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch- Make use of %license macro- update to version 2.0.9 Bugfixes: * apparmor: Allow containers to start in AppArmor namespaces * apparmor: Drop useless apparmor denies * caps: Move ifndef/define to the top * cgfsng: Fail when limits fail to apply * cgfsng: Log when we defer to cgfsng * cgfsng: Only output debug info when we set cgroup data * cgroups: Handle hybrid cgroup layouts * cgroups: Use tight scoping * cgroups: Workaround gcc-7 bug * commands: Abstract cmd socket handling + logging * commands: Add missing translation * commands: Delete meaningless comments * commands: Handle EINTR * commands: Make state server interface flexible * commands: Move lxc_make_abstract_socket_name() * commands: Rename to lxc_cmd_add_state_client() * commonds: Fix typo * conf: Adapt to lxc-user-nic usage * conf: Add lxc_get_idmaps() * conf: Add userns_exec_full() * conf: Allow to clear all config items * conf: Allow to get lxc.autodev * conf: Allow to get lxc.haltsignal * conf: Allow to get lxc.kmsg * conf: Allow to get lxc.rebootsignal * conf: Allow to get lxc.stopsignal * conf: Allow writing uid mappings with euid != 0 * conf: Avoid double-frees in userns_exec_1() * conf: Clear lxc.include * conf: Do not check for empty value twice * conf: Do not check union on wrong net type * conf: Do not deref null pointer * conf: Do not free static memory * conf: Do not log uninitialized memory * conf: Do not write out trailing spaces * conf: Don't send ttys when none are configured * conf: Dump lxc_get_config_item() * conf: Error out on too many mappings * conf: Fix bionic builds * conf: Fix build without libcap * conf: Fix tty creation * conf: Fix userns_exec_1() * conf: Free netdev->downscript * conf: Implement config item clear callback * conf: Improve lxc_map_ids() * conf: Improve tty shifting function * conf: Improve write_id_mapping() * conf: Increase lxc-user-nic buffer * conf: Log lxc-user-nic output * conf: lxc_listconfigs -> lxc_list_config_items * conf: Move clearing config items into one place * conf: Non-functional changes * conf: NOTICE() on mounts on container's /dev * conf: Performance tweaks * conf: Preserve newlines * conf: Properly parse lxc.idmap entries * conf: Record idmap that gets written * conf: Refactoring of most config parsing code * conf: Refactor network deletion * conf: Remove dead assignments in parse_idmaps() * conf: Remove dead mount code * conf: Rework lxc_map_ids() * conf: Rework userns_exec_1() * conf: Send ttys in batches of 2 * conf: Switch API to new callback system * conf: Use a minimal {g,u}id map * conf: Use correct check on char array * conf: Use run_command for lxc-usernsexec * console: Clean tty state + return 0 on peer exit * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty * console: Fix memory leak of 'lxc_tty_state' * console: Remove dead assignments * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY * core: Fix a format string build failure on x32 * core: Fix includes for Android * core: Fix memory and resource leak * core: Fix some cppcheck warnings * core: Fix the bug of 'ts->stdoutfd' did not fill with parameters 'stdoutfd' * core: Include custom mntent for Android * core: Log function called in userns_exec_1() * core: Remove the __func__ macro * core: Remove the unused macro * core: Replace "priority" with "level" * core: Revert "Add a prefix to the lxc.pc" * core: root -> am_root * core: struct bdev -> struct lxc_storage * core: Update .gitignore * core: Use strerror(errno) instead of %m * criu: Add cmp_version() * criu: Use correct check initialization check * doc: Add CII Best Practices badge to README * doc: Add console behavior to Japanese lxc.container.conf(5) * doc: Document missing env variables * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1) * doc: Fix regex-typo in lxc-monitor.sgml.in * doc: Reword id mapping restrictions when unpriv * doc: Rework README * doc: Tweak Japanese lxc.container.conf(5) * doc: Tweak lxc.container.conf a little * doc: Untabify Japanese lxc.container.conf(5) * doc: Update API documentation for get_config_item * execute: Enable console & standard /dev symlinks * init: Add comment for exclude 32 and 33 signals * init: Adjust include statements * init: Become session leader * init: Move initialization of act to outside of the loop * init: Report exec*() failure * init: Use lxc-stop to stop systemd service * liblxc: Make sure memory is free()ed * liblxc: Only spawn monitord on demand * liblxc: Remove 5s timeout on error * liblxc: Use snprintf() * liblxc: Use userns_exec_full() * lock: Non-functional changes * lock: Return the right error when open lock file failed * log: Prevent stack smashing * log: Switch to a new lxc_log_init function * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix * monitor: Add lxc_cmd_state_server() * monitor: Add TRACE()ers * monitor: Delete unneccessory include file * monitor: Remove dead assignments * monitor: Remove the workaround-code for lxc_abstract_unix_connect * monitor: Remove unlink operation for af_unix * network: Add arg to config clear method * network: Add data arg to set callback * network: Add ifindex field for host veth device * network: Add lxc_log_configured_netdevs() * network: Add missing checks for empty links * network: Add network counter * network: Add warning when ignoring MTU * network: Clear ifindeces * network: Delete ovs for unprivileged networks * network: Document all fields in struct lxc_netdev * network: Don't delete net devs we didn't create * network: Fix grammar * network: Implement lxc_get_netdev_by_idx() * network: Log cleanup thread pid for openswitch * network: Log ifindex * network: Log ifindex for host side veth device * network: Log veth_attr.pair and veth_attr.veth1 * network: Move config_value_empty() to confile_utils * network: Perform network validation at creation time * network: Remove allocation from lxc_mkifname() * network: Remove dead assignments * network: Remove netpipe * network: Retrieve correct names and ifindices * network: Retrieve the host's veth device ifindex * network: Rework network creation * network: Send ifindex for unpriv networks * network: Stop recording saved physical net devices * network: Use correct network device name * network: Use send()/recv() * network: Use single helper to delete networks * network: Use static memory for net device names * openvswitch: Delete ports intelligently * seccomp: Export the seccomp filter after load it into kernel successful * seccomp: Print action name in log * seccomp: s/n-new-privs/no-new-privs/g * seccomp: Update comment for function parse_config * start: Add lxc_free_handler() * start: Add lxc_init_handler() * start: Document all handler fields * start: Don't call lxc_map_ids() without id map * start: Don't close inherited namespace fds * start: Don't let data_sock users close the fd * start: Dup std{in,out,err} to pty slave * start: Ensure cgroups are cleaned up * start: Generalize lxc_check_inherited() * start: Log sending and receiving of tty fds * start: lxc_setup() after unshare(CLONE_NEWCGROUP) * start: Move env setup before container setup * start: Pass LXC_LOG_LEVEL to hooks * start: Pin rootfs when privileged * start: Remove dead variable * start: Send state to legacy lxc-monitord state server even if no state clients registered * start: Set environment variables correctly * start: Switch from SOCK_DGRAM to SOCK_STREAM * start: Switch ids at last possible instance * start: Use separate socket on daemonized start * start: Use userns_exec_full() * state: Remove lxc_rmstate declaration * storage: Add storage_utils.{c.h} * storage: Avoid segfault * storage: Default to orig type on identical paths * storage: Record output from mkfs.* * storage: Rename files "bdev" -> "storage" * storage: Use userns_exec_full() * storage/dir: Using 'add-required_remount_flags' function to add required flags * storage/loop: Detect loop file * storage/overlayfs: Fix wrong path * storage/overlay: Handle overlay for stable 2.0 * template: Remove obsolete bind-mounts from userns.conf * template: Use "rsync -SHaAX" to copy the cached rootfs into place * template/alpine: Add support for ppc64le * template/alpine: Change file check to also check file size (-f => -s) * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8" * template/centos: Add cronie to the pkg list * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64 * template/debian: Add aarch64 -> arm64 mapping * template/debian: Add buster as a valid release * template/debian: Don't force getty@ configuration * template/debian: Use deb.debian.org as the default Debian mirror * template/download: Fix syntax error * template/download: Sanitize script with shellcheck * template/opensuse: Add Tumbleweed as supported release * template/opensuse: Fix tumbleweed software selection * template/opensuse: getty.target.wants does not always exists * template/opensuse: Support leap 42.3 * template/opensuse: Tumbleweed has no update repo * template/plamo: Delete unnecessary process during container shutdown * template/ubuntu: Check that there is netplan binary, rather than just just a config directory * template/ubuntu: Conditionally move upstart ssh job, as it is now optional * template/ubuntu: Support netplan in newer releases by default * tests: Adapt lxc-user-nic tests to new syntax * tests: Add corner-case tests for lxc_safe_{u}int() * tests: Add item clear and config file tests * tests: Add test script to test the ro option of lxc.rootfs.options * tests: Add unit tests for idmap parser * tests: Avoid NULL pointer dereference * tests: Compare return value to expected value whenever we can * tests: Define a network before checks * tests: Don't fail when no processes for the user exist * tests: Enforce all methods for config items * tests: Remove dead assignments * tests: Remove the temp container directory * tests: Shortlived daemonized containers * tests: Support systemd hybrid cgroups * tools: Add additional cgroup checks * tools: Print "-devel" when LXC_DEVEL is true * tools: Use "which" * tools/lxc-attach: Allow for situations without /dev/tty * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT * tools/lxc-checkconfig: Add probe status checking * tools/lxc-execute: Print error message when failed * tools/lxc-ls: Return all containers by default * tools/lxc-monitord: Exit when receiving a quit command * tools/lxc-unshare: Do not pass NULL pointer * tools/lxc-user-nic: Add new {create,delete} subcommands * tools/lxc-user-nic: Check db before trying to delete * tools/lxc-user-nic: Fix adding database entries * tools/lxc-user-nic: Fix memleak * tools/lxc-user-nic: Free memory and check for error * tools/lxc-user-nic: Initialize vars to silence gcc-7 * tools/lxc-user-nic: Keep lines from other {users,links} * tools/lxc-user-nic: Remove delta between master + stable * tools/lxc-user-nic: Remove double initialization * tools/lxc-user-nic: Rework renaming net devices * tools/lxc-user-nic: Simplify logic * tools/lxc-user-nic: Test privilege over netns on delete * tools/lxc-usernsexec: Remove dead assignments * travis: Fix builds * utils: Add has_fs_type() + is_fs_type() * utils: Add lxc_nic_exists() * utils: Add lxc_safe_ulong() * utils: Add run_command * utils: Close parent end in child process after fork * utils: Do not write to 0 sized buffer * utils: Duplicate stderr as well in lxc_popen() * utils: Fix lxc_mount_proc_if_needed() * utils: Fix lxc_popen()/lxc_pclose() * utils: Fix mem leak with realpath * utils: Fix num parsing functions * utils: Fix ppc64le builds * utils: Fix the way to detect blocking signal * utils: lxc_popen() remove dead assignments * utils: Move helpers from cgfsng.c to utils.{c,h} * utils: Rework lxc_deslashify() * utils: Switch to has_fs_type() * utils: Use 1LU otherwise we overflow * utils: Use access instead of stat- removed ldconfig from lxc %post section- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin instead of /usr/sbin but it's best to depend on the actual package instead since the location might change in the future.- removed apparmor-rpm-macros again, as it is not needed for the current %post solution- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360- added correct reload of apparmor to %post- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...- Update to version 2.0.8 * Security fix for CVE-2017-5985 * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users. * This may affect some automated environments that were relying on our default (very much insecure) users. Bugfixes: Make lxc-start-ephemeral Python 3.2-compatible Fix typo Allow build without sys/capability.h lxc-opensuse: fix default value for release code util: always malloc for setproctitle util: update setproctitle comments confile: clear lxc.network..ipv{4,6} when empty lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals Make lxc-net return non-zero on failure seccomp: allow x32 guests on amd64 hosts. Add HAVE_LIBCAP c/r: only supply --ext-mount-map for bind mounts Added 'mkdir -p' functionality in create_or_remove_cgroup Use LXC_ROOTFS_MOUNT in clonehostname hook squeeze is not a supported release anymore, drop the key start: dumb down SIGCHLD from WARN() to NOTICE() log: fix lxc_unix_epoch_to_utc() cgfsng: make trim() safer seccomp: set SCMP_FLTATR_ATL_TSKIP if available lxc-user-nic: re-order #includes lxc-user-nic: improve + bugfix lxc-user-nic: delete link on failure conf: only try to delete veth when privileged Fix lxc-containers to support multiple bridges Fix mixed tab/spaces in previous patch lxc-alpine: use dl-cdn.a.o as default mirror instead of random one lxc-checkconfig: verify new[ug]idmap are setuid-root [templates] archlinux: resolve conflicting files [templates] archlinux: noneed default_timezone variable python3: Deal with potential NULL char* lxc-download.in / allow setting keyserver from env lxc-download.in / Document keyserver change in help Change variable check to match existing style tree-wide: include directly conf/ile: make sure buffer is large enough tree-wide: include directly tests: Support running on IPv6 networks tests: Kill containers (don't wait for shutdown) Fix opening wrong file in suggest_default_idmap do not set the root password in the debian template do not set insecure passwords don't set a default password for altlinux, gentoo, openmandriva and pld tools: exit with return code of lxc_execute() Keep veth.pair.name on network shutdown Makefile: fix static clang init.lxc build Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE Increased buffer length in print_stats() avoid assigning to a variable which is not POSIX shell proof (bug #1498) remove obsolete note about api stability conf: less error prone pointer access conf: lxc_map_ids() non-functional changes caps: add lxc_{proc,file}_cap_is_set() conf: check for {filecaps,setuid} on new{g,u}idmap conf: improve log when mounting rootfs ls: simplify the judgment condition when list active containers fix typo introduced in #1509 attach|unshare: fix the wrong comment caps: skip file capability checks on android autotools: check for cap_get_file caps: return false if caps are not supported conf: non-functional changes to setup_pts() conf: use bind-mount for /dev/ptmx conf: non-functional changes utils: use loop device helpers from LXD create ISSUE_TEMPLATE.md cgroups: improve cgfsng debugging issue template: fix typo conf: close fd in lxc_setup_devpts() conf: non-functional changes utils: tweak lxc_mount_proc_if_needed() Change sshd template to work with Ubuntu 17.04 conf: order mount options conf: add MS_LAZYTIME to mount options monitor: report errno on exec() error af unix: allow for maximum socket name commands: avoid NULL pointer dereference commands: non-functional changes lxccontainer: avoid NULL pointer dereference monitor: simplify abstract socket logic precise is not the latest LTS, let's use xenial instead fix the wrong exit status conf: non-functional changes lxc_fill_autodev() conf: remove /dev/console from lxc_fill_autodev() conf: non-functional changes lxc_setup() conf: non-functional changes to console functions conf: improve lxc_setup_dev_console() conf: lxc_setup_ttydir_console() config: remove /dev/console bind mount doc: document console behavior utils: add lxc_unstack_mountpoint() conf: unstack all mounts atop /dev/console console: fail when we cannot allocate peer tty start: remove umount2() conf: non-functional changes utils: handle > 2^31 in lxc_unstack_mountpoint() Install systemd units for CentOS Merge ubuntu and debiancase start: add crucial details about lxc_spawn() - Deleted patches that have been backported before: - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch - 0001-tree-wide-include-sys-sysmacros.h-directly.patch - 0002-tree-wide-include-sys-sysmacros.h-directly.patch - added signature verification- Replace %__cp by cp- fix for boo#1028264 added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch- backported two patches to get the package to build again for Tumbleweed (applied only on tumbleweed aka suse_version >1315) 0001-tree-wide-include-sys-sysmacros.h-directly.patch 0002-tree-wide-include-sys-sysmacros.h-directly.patch- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/ 0001-bdev-use-correct-overlay-module-name.patch 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch 0005-tools-move-rcfile-to-the-common-options-list.patch 0006-tools-set-configfile-after-load_config.patch 0007-doc-add-rcfile-to-common-opts.patch 0008-doc-Update-Korean-lxc-attach-1.patch 0009-doc-Add-rcfile-to-Korean-common-opts.patch 0010-doc-Add-rcfile-to-Japanese-common-opts.patch 0011-tools-use-exit-EXIT_-everywhere.patch 0012-tools-unify-exit-calls-outside-of-main.patch 0013-utils-Add-mips-signalfd-syscall-numbers.patch 0014-seccomp-Implement-MIPS-seccomp-handling.patch 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch 0016-seccomp-fix-strerror.patch 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch 0018-seccomp-add-support-for-s390x.patch 0019-seccomp-remove-double-include-and-order-includes.patch 0020-seccomp-non-functional-changes.patch 0021-templates-use-fd-9-instead-of-200.patch 0022-templates-fedora-requires-openssl-binary.patch 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch 0025-c-r-Fix-pid_t-on-some-arches.patch 0026-templates-Add-mips-hostarch-detection-to-debian.patch 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch lxc-aa_allow_incomplete-default.patch 0001-attach-do-not-send-procfd-to-attached-process.patch- update to version 2.0.7 This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are: - attach: Close lsm label file descriptor - attach: Non-functional changes - attach: Simplify lsm_openat() - caps: Add lxc_cap_is_set() - conf: attach: Save errno across call to close - conf: Clearly report to either use drop or keep - conf: criu: Add make_anonymous_mount_file() - conf: Fix suggest_default_idmap() - configure: Add --enable-gnutls option - configure: Check for memfd_create() - configure: Check whether gettid() is declared - configure: Do not allow variable length arrays - configure: Remove -Werror=vla - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev() - conf: Non-functional changes - conf: Remove thread-unsafe strsignal + improve log - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers - log: Add lxc_unix_epoch_to_utc() - log: Annotate lxc_unix_epoch_to_utc() - log: Drop all timezone conversion functions - log: Make sure that date is correctly formatted - log: Use lxc_unix_epoch_to_utc() - log: Use N/A if getpid() != gettid() when threaded - log: Use thread-safe localtime_r() - lvm: Supress warnings about leaked files - lxccontainer: Log failure to send sig to init pid - monitor: Add more logging - monitor: Close mainloop on exit if we opened it - monitor: Improve log + set log level to DEBUG - monitor: Log which pipe fd is currently used - monitor: Make lxc-monitord async signal safe - monitor: Non-functional changes - python3-lxc: Fix api_test.py on s390x - start: Check for CAP_SETGID before setgroups() - start: Fix execute and improve setgroups() calls - state: Use async signal safe fun in lxc_wait() - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host - templates: lxc-debian: Fix getty service startup - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option - templates: lxc-debian: Handle ppc hostarch -> powerpc - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2 - templates: lxc-opensuse: Remove libgcc_s1 - templates: lxc-opensuse: Remove poweroff.target -> sigpwr.target copy - templates: lxc-opensuse: Set to be unconfined by AppArmor - templates: lxc-opensuse: Update for Leap 42.2 - tests; Don't cause test failures on cleanup errors - tests: Skip unpriv tests on broken overlay module - tools: Improve logging - tools: lxc-start: Remove c->is_defined(c) check - tools: lxc-start: Set configfile after load_config - tools: Only check for O_RDONLY - tree-wide: Random macro cleanups - tree-wide: Remove any variable length arrays - tree-wide: Sic semper assertis! - utils: Add macro __LXC_NUMSTRLEN - utils: Add uid, gid, group convenience wrappers - commented out the patches, as they no longer apply cleanly- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933). 0001-attach-do-not-send-procfd-to-attached-process.patch- setcap has been moved to /usr/sbin (boo#998326).- update lxc to 2.0.4 - add 0001-bdev-use-correct-overlay-module-name.patch - add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch - add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch - add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch - add 0005-tools-move-rcfile-to-the-common-options-list.patch - add 0006-tools-set-configfile-after-load_config.patch - add 0007-doc-add-rcfile-to-common-opts.patch - add 0008-doc-Update-Korean-lxc-attach-1.patch - add 0009-doc-Add-rcfile-to-Korean-common-opts.patch - add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch - add 0011-tools-use-exit-EXIT_-everywhere.patch - add 0012-tools-unify-exit-calls-outside-of-main.patch - add 0013-utils-Add-mips-signalfd-syscall-numbers.patch - add 0014-seccomp-Implement-MIPS-seccomp-handling.patch - add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch - add 0016-seccomp-fix-strerror.patch - add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch - add 0018-seccomp-add-support-for-s390x.patch - add 0019-seccomp-remove-double-include-and-order-includes.patch - add 0020-seccomp-non-functional-changes.patch - add 0021-templates-use-fd-9-instead-of-200.patch - add 0022-templates-fedora-requires-openssl-binary.patch - add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch - add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch - add 0025-c-r-Fix-pid_t-on-some-arches.patch - add 0026-templates-Add-mips-hostarch-detection-to-debian.patch - add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch- Abolish old macro use. Remove ancient %clean section. Avoid sh invocation for simple ldconfig calls.- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide container aware /proc files. The /sys/fs/cgroup part is slowly phased out because we now have cgroup namespaces.- Split into packages to follow best practice. * lxc * liblxc1 * liblxc-devel Also, we need liblxc1 to be separately installable from LXC for LXD. - Tweak descriptions.- Update to 2.0.3 (changes since 2.0.1): * apparmor: Refresh generated file * apparmor: add make-rslave to usr.bin.lxc-start * apparmor: Allow bind-mounts and {r}shared/{r}private * apparmor: allow mount move * apparmor: Update mount states handling * core: Drop lxc-devsetup as unneeded by current autodev * core: Fix redefinition of struct in6_addr * core: Include all lxcmntent.h function declarations on Bionic * c/r: c/r: use criu's "full" mode for cgroups * systemd: start containers in foreground when using the lxc@.service * templates: debian: Make sure init is installed * templates: oracle: Fix console login * templates: plamo: Fix various issues * templates: ubuntu: Install apt-transport-https by default * travis: ensure 'make install' doesn't fail * travis: test VPATH builds * upstart: Force lxc-instance to behave like a good Upstart client- Update to 2.0.1: Lots of fixes and enhancements. https://linuxcontainers.org/lxc/news/#lxc-201-release-announcement-16th-of-may-2016 - Add criu to recommends for C/R support - Add a workaround for lxc-start failure without apparmor: lxc-aa_allow_incomplete-default.patch - Drop obsoleted patch: lxc-1.0.7-fix-bashisms.patch- Update to 1.1.5- Remove attach-mount-a-sane-prox-for-LSM-setup.patch- Update to 1.1.4 * Remove CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch * Remove CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch * Remove CVE-2015-1335-Protecti-container-mounts-against-symlinks.patch * Remove templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch Now integrated into the current version- Added CVE-2015-1335-Protecti-container-mounts-against-symlinks.patch (bsc#946744)- Added templates-lxc-opensuse-use-rpm-to-determine-build-ve.patch- Added CVE-2015-1331-lxclock-use-run-lxc-lock-rather-than-r.patch (bnc#938522) - Added attach-mount-a-sane-prox-for-LSM-setup.patch (bnc#938523) - Added CVE-2015-1334-Don-t-use-the-container-s-proc-during-.patch (bnc#938523)- update to 1.1.2 - Removed 0001-added-upstream-action-fallback-create-directory-loca.patch - Removed 0003-lxc-opensuse-template-now-understands-release-argume.patch - Removed 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch - Removed 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch - Removed 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch - Removed 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch- fix bashisms in lxc-autostart-helper script - add patches: + lxc-1.0.7-fix-bashisms.patch- Improved error message- Disabling builds on 13.2/Tumbleweed only, if build version before 20141120 Patch 0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch- lxc-opensuse default release changed to 13.1, as 12.3 reaches end-of-life soon Patch 0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch- patch 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch has been sent upstream and is included in version 1.0.7- update to version 1.0.7 Core: Include network prefix when ipv4/ipv6 keys are queried apparmor: silence 'silent' mount denials add file/func/line to debug info apparmor: restrict signal and ptrace for processes cgmanager: several fixes lxc: don't call pivot_root if / is on a ramfs fix lxc.mount.auto clearing conf.c: Define MS_PRIVATE for Android network: convert param ifname to const. network: check result of if_nametoindex(). network: allow lxc_network_move_by_index() rename netdev in moving. network: introduce a interface named lxc_netdev_isup(). lxccontainer.c: rename enter_to_ns to enter_net_ns lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root do_rootfs_setup: fix return bugs lxc-start: don't re-try to mount rootfs if we already did so attach: don't use confstr(_CS_PATH) lxc_global_config_value: simplify the theme Fixed mismatch on ipvX gateway attach: don't ignore sigint/sigkill if stdin is redirected cgmanager: fix 'attach' with "all" controller support lxc/utils: bugfix freed pointer return value conf.c: change 'instanciate' to 'instantiate' fix wrong nlmsg_len Remounts bind mounts if read-only flag is provided Allow lxc_clear_config_item to clear idmaps. overlay and aufs clone_paths: be more robust overlayfs: overlayfs.v22 or higher needs workdir option Fix clone issues Improve veth error cases logging fixed typo in comment audit: added capacity and reserve() to nlmsg rmdir and lxc_unpriv returns non-negative error codes typofixes - https://github.com/vlajos/misspell_fixer Bindings: add src/python-lxc/setup.py into .gitignore Tests: tests: Fix unpriv test lxc-test-unpriv: don't clear out /etc/lxc/lxc-usernet lxc-test-unpriv: test for different cgroups per subsystem tests: try again when waitpid() sets errno as EINTR Commands: lxc_start: ERROR if container is already running. lxc-start: return 0 rather than error if container is already running Make legacy lxc-ls more robust lxc_info: flush stdout before calling routines which may fork Templates: Fix typo in lxc-gentoo template busybox template: support for unprivileged containers busybox template: mount fstab when available Fix another gentoo template typo Create the apt proxy in the cache instead of the 1st container lxc-plamo: mount tmpfs on /dev/shm lxc-cirros: support creating+running unprivileged Fix lxc-openmandriva.in typo. Fix lxc-centos.in typo. lxc-opensuse: Disable on 13.2 lxc-alpine: make sure /dev/shm is world writeable lxc-alpine: create a default tty for console lxc-debian: added support for package installation lxc-debian: Fix default mirrors lxc-debian: support systemd as PID 1 lxc-debian: adjust init system configurations lxc-debian: mask both Wheezy and Jessie udev services lxc-opensuse: Disabling builds on openSUSE Tumbleweed, detection improved. Documentation: Fix the lxc manpage a bit lxc-create -t option is not optional doc: Update kernel and cgroup info in Japanese lxc(7) tabs/spaces consistency- changed patch 0002 to work on newer Tumbleweed snapshots, where os-release does not contain 'Harlequin' anymore- backported the patches from upstream, so that the opensuse template now accepts releases as arguments, and it is possible to install 12.3, 13.1 or 13.2 * 0003-lxc-opensuse-template-now-understands-release-argume.patch * 0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch * 0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch- Added 0002-Disable-building-opensuse-containers-on-openSUSE13.2.patch Disable building opensuse containers on openSUSE 13.2 due to changed build behaviour (bsc#905638)- added 0001-added-upstream-action-fallback-create-directory-loca.patch * adds action fallback available upstream * creates directory /run/lock/subsys/ if not available - deleted 0001-systemd-Ensure-action-is-defined.patch/bin/sh/sbin/ldconfig/bin/shobs-power9-15 1730025053 6.0.2-bp156.2.3.16.0.2-bp156.2.3.16.0.2-bp156.2.3.1 lxccontainer-basestart-containerlxclxc-containerslxc-defaultlxc-default-cgnslxc-default-with-mountinglxc-default-with-nestinglxchooksunmount-namespacelxc-apparmor-loadlxc-containerslxc-monitordlxc-netlxc-user-nicliblxc.so.1liblxc.so.1.8.0lxcrootfsREADMEliblxc1AUTHORSMAINTAINERSliblxc1COPYINGlxc/etc/apparmor.d/abstractions//etc/apparmor.d/abstractions/lxc//etc/apparmor.d//etc/apparmor.d//etc/apparmor.d/lxc//usr/lib//usr/lib/lxc//usr/lib/lxc/hooks//usr/lib64//usr/lib64/lxc//usr/lib64/lxc/rootfs//usr/share/doc/packages//usr/share/doc/packages/liblxc1//usr/share/licenses//usr/share/licenses/liblxc1//var/lib/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Maintenance:18629/openSUSE_Backports_SLE-15-SP6_Update/7463e8d029559ab7ccd28045ed16f027-lxc.openSUSE_Backports_SLE-15-SP6_Updatedrpmxz5ppc64le-suse-linux directoryASCII textC source, ASCII textELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=8f83f2b0681b11a281b6c457b3c1b38e88642f17, for GNU/Linux 3.10.0, not strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=9b110a82ddcccd14fdc15ebde6a530241eece69e, for GNU/Linux 3.10.0, not strippedsetuid ELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, interpreter /lib64/ld64.so.2, BuildID[sha1]=0754a5ecdfd7c4d6c9eef27108e42ea987381b00, for GNU/Linux 3.10.0, with debug_info, not strippedELF 64-bit LSB shared object, 64-bit PowerPC or cisco 7500, version 1 (SYSV), dynamically linked, BuildID[sha1]=0d243a81b30de664e7d9771102ebb81130e54766, not strippedUTF-8 Unicode text(R RR RRRRRRRR R RRR RRRRRRR RRRRRR R RRR RRRRRRRR PRRRRRR R RRRR RR RRRRRRRR R-C}jrnQa/6utf-8e6c4aaf99d8c76de9c89f8873248a43c40c45fb03fd74e73b996ec07d931e2a0?7zXZ !t/]"k%jjd꜈'txf)@S!u48}ti!Dr/G- ]ڜ J 8GI4(#ch ч$9.ߐVyA$,)08t2̈1TR٩?Wt DLdpȲ vck8NbM#Umyi[bv%;t+or'#na/bM^[.;waCjo쐝u5+5#8:?ÏJ ]:gگJ󓾺'dʒ2,D~!<܆':ϭS9u/)zIBB!j~?J$^&zhZDHލ*P`nOch}%mz[ QHc=׍ q]V/Uw[}"/}*yy(i}Ř[\E@ĭ HBa\bI7@Ƴ̝\3Z rZ7]Ze$  M,>93gJO(()Qv34t ^±0qGu.3fT+/P5` ͈⾪7g@6ufL",QMԁ"{K%JۅivN<U)3p/y ~XNf.{IV<%8*XeY_Uڪ@ӢDpEkUahC5mo1Paw Ὧ ')Hmw9zm}T]ٸWif神O3Fi hNyktOw"߁=8̃OY_zEE^~mqR$v©>2MnltC~/P!Tgd;VuxI nԭ^Q(q` ՜9WlNtZQ7m;rJ'qHQQYH,#vN֊dU#Cd6jx#=ѕLA(UVb&r v"ڀZ>[4w.@PҘg]'} n-L7CI%rӚQpʦ88._L{tx%Ϊq9ӻ!D9j&>X*lJ@6}Ā\'>51:v1;wlzxiY%Fid/̋4tq*Du;!o2 U3 8TKɸ5k~֥_g(*a brL5UuC{󅭙.\E5$RO{R`L!qT!JbƄI#)KUk#$־% ,u vWљLb.5 0X$VHT7ֳh4;Anv+wGwU d*P <-Pa@CPYu .?JK;VCE?UkyRጋYf+et?[E+[XLCҥ{DϹA;@vclxȘפZ ذJqo:.tw(EcG0ꃖQ Fk2܇t*F"406*o{9DҧÈ0OU=/[`-p $idsj$s3O Uez#?p[lNF쯠q Z9O'xqy|f#;[bWop9j7ʊ+9:+ 90X YS.KKTPڄ)ptLSHy mOiPYI%ZUe?e9 7&/bX\"2#~|se5H z+=p6OHIQK?8Lyrys "(j"0{i5}|@Dպp3p0wG*Hs Tk".c#wk'+K%"hЀ}#chKb.8|\}(o|o<3cxDn59˚1z==/B$"=Ҟ!t'hSCD̋ ̸ֲܪ*֙ZaVZiZ{@  a'_ ٪m B?5J7 ދd_lpY]3O[Gվ$ S38I*O y ֠u)>A LjZy\g :cxD_zRy0H-l-ʲ7=Ѽrk2hE-MJP:`3$3 nTsx= Wj'(~%"%L2k_, sY3r2g7Rb3(`1"zI'soEC/7\e Ï 9.'Q}/t :Nں NR=6=.Z#$|q0l@N\5e';a?|t%nM6< ^~AI^ZaIZ 8{j;+F#pѻY^ X̱S ZQjh+<0G{AՀURA}R_H46@h51=$ 5_XwT[lhQT_)ON!D-ɹtn;[--G;6UZ^c Cz|cF궁:Y Ư i$IZ-|kSs1́-ρ6C\S/ )Clh 'wFx>S /IPQ*.R&EQ_+ :\,7^cP'.Z eߎ9XG= ng\\)@4 ~hu~^?/?14:eĈ# ;߬)] GO pVTzi+DP&l9юx&GF(SU=hf:y~7%;Ӫ9:eȅNg70VD ݁#/d"NR Mŕl,鼎 2N4,cpo'cL)累5.!t׸zK١/C|$]ѳC[r31QC?Xi^>}iϩ9Y4y1TE(`aoBG8y`1{++UQѡnky ]r /v8{AYn֩6XF:I~t ǫh)o)껧Jς OTƲRQICc4yXuRڭk1n53* R=ٸ;R2"OL_,HM!/j8VׅMӻFdiE֊;NOM# HJ+LiFVfb7e:&A'hs%wg+;JvfFt18 Qs*Ⱦ`%Mk :M}ŮN*(x^VyiM7i]54-UZJI8MLCS>؛'v11dl>!gU4OY0I-A[qVS+j@[%~_#7u-{}6 8RulֹzjM !iէ'ڔD jWלO$N8BFO+YQ"@A0 d2S.b@ЦI%vT$|1U>%;O8A4^ /X3oB5\dR9]mZY-42 0 F{p\~|ZP CoCi؇>u!}AWC^H LL'N3Ԧj';yq:#sjZ X@[eE#~-#=[Unzޡw(U\u/&.`^s܁I; B|0bQӺݍN/bꍪop,s?g*-T`z 2߸ω5tLl0߮ glk{d'TIP/<#䜅;AA <j`?}:;GpkY^"UZsxx\_Pf?P`p*X8|gG񴲰RnvN/9J{PП~"YgpD7Xx_Rdr:VX_y Ke/%آh 5>-A۠jI2Vm2Ddlǽ1Kwpv%HB}?'}TqdoͰ>S?m92)C۞&vqq!=,ҎЂd(e>>Cx"FƲը4 DT'SJ.`qq5ayPdADPO)0{<[R"NJr }V(:d /}7-C, PO*M@G`S[^jQAyaLoҋ2ӺRj( IkV2⭫?m\fID'QkQ3CnqMIeqMۢu8>$->l-֢V-^ib=wy`Xѡ*JY27c3= 9?uChazb0OHS[%cwBNоPQy8omrZ;RUқ>54Uj^e_zp}Ǥ2`O]1Ig]|=|gRZ@>4,˚@q̵0)A ^R#6ٱg³TS8&zLgMȔv 3pDr;$2 =GU0[,0\jy7445O8K4NAJ%}Vw1\N=o` ʤ46tr2Ç66j y٫q$wo1 |Hyը)H(5dp3py^sVsOi]+x9!vNP2bKsl9Jw*CtbSShp-.ϴF~|2kZ܈aw0/}o!wU@nk8XQdk-;7̈.'ԔO'ZLWe4틷LȅϢ?!܀|FH-o, jW`j.ꙫ xXaZDY jV5 R[ & 7иL-nOAo *Mo :)qitK,o4as!/U}GSB#o*C+,淐vP]GHNh)Mv:" DeQ2rTE1EJH:|5P:'rզ7{K@2Ŭn!EgPy*Wa6X6).?elD'sQQD)rs[*m~?;FS`asl %+y)lFO`kJkOHB? Cqo:%ZԺ4m~Χ'Rs*r_r_;?搄wqb>.I!tJ]R_iMc}[>8p \a9f f]a!!<#Z7|,|E1V$jUɈ]tlK\H|asI—h7Ɣ6x98EF)G_گtw<<̥r밯AFH5{Y"74זpj[.ݏ[:} jpoL/ʯT594c?Ѩpjn\*̈́j'i1u; KI4|pMv|߇bҟE&ո x&B)c%&6$f^61ŗ77Q5P opʹAw+3p ԛZ\l}3]SeMBsŖ. J=iʜbv+VYCQ `&\JgKo9W+ >`yٜpm7pQ^1+ݛF 0LpVi0nkגIW[˶ZX3/KUf񹒶>oDWw@|GXIt^2;v7@T/d0^b9~;LDOCleD HMAJź9R`զoa ŷdnDzn:]OȌP*ݱ%7O{XijpP3RuelGVMQ C$U",pȽS #v^ ;DJiH $8@rnkQ®օoxL$u G2bpmMBƥ*SsDjtқigb>yr<Q b#+Xg8Nmoy3i#g^m ^&jꞽxеO F|cme a>׵晢w?!"2^y&ڸ!T 7-aT #rˬ~INJT#rWn! + EyDl2#M\r2ҞC#]}b{\ oujTvWRX~Gſb?lw@ȷAaGt<MbřU^n}׀= }[f)7@#TnftG(M65QK[pHdݳ*?ufbCY$4>NX;r\ Xma{9\Rq5I]E#JX∵=U`vz7u4x>$w?B FX'f ތ9yz4[p(USW$y~6Ǣcvz)qT44rXj>^$42x+\!ӌ#AمM*?~wZ$eԷ3YP3HHu\nZ6|1̹f1Ѽ(nK,zcl(ނlf]u 5Jeޙ7>;[$d&0_>Ӣ,BB|6qݶ֖g~fwi%F\Drؗ?lĕaDCpt+ŮKL֑qY,zlnֺjV$ ncGpCKjjϹa'rGu2ZbcgJ2 Z dU1;u% Ȍ<" jH DW+J!c%^y YY-qzbn?P)Dp磯?v8GsC0@>oۍ6GKm0PROQKQ8Qy][CtL<&:2U,=XtǛ=C\8#sY\摄۟|;}+AW4l #J_Y1 KpYYi -N(SU JS2 >bunvUݶg8p~$7JaarTmgŦM{-n?RAl?nD_pQ} ;ŕSRn)`CJ7+M1ɨNK`LnFN ;~2 K[M9F!uoW1ߪhA^ D1&TK҉m I~ޱjh6s=Ƌ*mg4<d Gf"0"*H`ښb)^C#p߸pi= ckoS| Cpű .SF; L0bY9-N=2ٴezic)Z*p ϒ \ )y?|Z hikcz>2A0N0 D8WyMy#:[tnD6Fl9ky7g0QD4dB14m՚[x5cg8( ;c)V'"zZ]%[!(!5h77n07e+]- !nh}wng ZZy=5hlM4W uZ<0,{Wg5,)TT40We˼L=pixɓ :ypt[wwJ .1<ՐtdȦ(oz&e'',$r#ճ`d"/yt|'d%N#prONτ^( h:^طaw:bA&SF.$dtG~ ,ېkX!O?1zXr{/j;¾gs"eYnZ~ćyx?l{0Lm\z.~y"S(t¯6^cΉB_(RWTo؃J٘S0tuRֿ'x}i!'`^8BN.e;E`ڪJϟ+B6X"甧E?F~vNYˠD Iy]WfX9Zިx:%m -}{~4/ҦV?|!Hy1&,s=c5s3v?FA&ǓcS7nK&q|,,e͋z'+>ըs35U c5/X)[Ql \V1Do4LAbhBNxXoM@{} LAގ+pu2z5eD(ZS" !LJEgjr"eZ}ῊVfhi!`+#ة;*y7w}a-.R* 3df$q܊+D{'o;wE s+z#@PJ2ߨ9'կ%2kc4ˡƍHDk*T"& iҊq=on&m>arrHxhw ʜf,nDғ%0OI=;cc˲y[E\xME;mOFwq8HxW5.ڳh%{k\H6(e tB=*67b9&PU[jN|@)F>?O4}iCZ.^pn$1 K.v#DO#l4ߨ :G+V}}nᢐ7Jec=򂍛׾Fc`u{yX$ئ~ǣ[yR6[c aa8 b c=& ïmhDs68C(WJJNХu^<%2db$+u6ОZG /ܡ]a5sZ DOǵq.IE_ |= "x3w!JCm!kEJ9[(N6j)4wdInAF$ukdVG6E-a_9rC@FC/Kf|hGޫkg d md71JQf(o*_P,L< zQ'ukz=|F"?c;ʙ?"l~M1|\AvܟS $j;,q6rގ""_yό"`K pK}C\%I>K潼C0\VX߀ |4g(9>Ks#|^@805٘<'C8,NPRTts7u|uSF#oY.a!F9i\U8^;@Ǵvf201ŸJ #>~: tNZKi`HtJ2\vr*xD" 8b$k/Ⱥ2:yݽ=J _fn֪K!91E"v〙/\\`ZQ/̽"D `cg_L Y~vˡU|}#&! Q"xnL{pIS-E#-jb|ҚC76~Lw'#Ӭ٘lYhOpM>>:Sɣ7'Hó.J7~|W4nfd?QL8aǏ:-KQAFTv]&4sI:SY&jJEs%VVdGvCǾ3uX$Zڥⵊ_ݰ{ϝFrd9-?(8&<3 6.s@Y%~V.!g؇DUP=Z'J;/{q?lměJ: &jFd|FࠉX»"tהP ˎjNnFX ~’E->eUEh29|Ogo{UwGuDHRUo-}f/qj ǩcP$_'"G۠xvi.qʮ ^8J%mR9Hi5aȂEҫeBSU' ΈєzZΦOnlN/|[AλG_!CT|&f0o\ T>ޜ/yaHdf6q,0A*7O6 qc)/_n+75= h9WtX0 tc=OwcjCҌܘ1h 'f6SFڐ2BiY[(s?#\'g֍VRWH݊L{s,Rwli)Q: yufv[t C抢חw1/ ^hk0}y”Vŵ*?ej.elSld{a[롼?32(^*IC'V<<6VӅFQ'8agm;_& O&q%LGNFp~WSM.ezց)*Tpyg^YR 6.i`*u]tR|H ^; $^ m֞rψ[b͋'>An%2ߘ\AUqmIckZH =&+. _w6͆wcwTύT*)Sj1X"c ܣf=ۿ&[ֻhBD?~4#hw1|hEX&$jU5@to,!9~cTW["$x1`\Yw66ߡ `%2\ f:yPH}A"8jb@Gd\]ռ@t`$v MXόH7'"ed*O]]\ x o{8JNs,F *B!ٴGsR`XeZZ _b"I4)ri^s\bIHxCbe!תc;ŵx*VF$Jёl3PPh &}fc:HUc-?bF,9.Tc{]ǦJ"G;PЧqƜo (Gq2cvKe㳤H,*JDVcf>Utzi"|[ۤ+NYŚoώak4JWQu ".nL &;9aĘR6~ x2_;ԇCOӪƚ fLːvvoV>8X2O:C$h>UAu/t!hyTg!XdK`p\)o0tG{A^z@IʑR*3[1gOެU?=) XA&z%5^3kǀ}|w)Ŵ\8Hq}$ ڬ%>nh6(w~EfS' ©܇pgd<ר{ER{ʙ+W}Iub(d˝^vAXۍ=;7>|h-DA ww R1EC;HWLNU=@y-(tDp|1W.>CHz򞣹.U X^?IɶEnJmreF\hm{,c6szTKTBQ(ynJyYVF뫿eQKuzmРY &/@ ;^ ?k4)>c|e`[U/D㿓)TY.k^)6{mcq έGW8$[ZȫgȷhQV9UmcW&,26Ȳv8D?ż'"b$.nhϢ4/!f`'B+rsY`u3.38`ph9qT09UƧdDŽ'@o6NжXC#{8 s8S*m穰2ܠA֭Â,I EAj߈tM>a ˎc>/ 6Uΰh6] N:L3zP!c/HL}S##;V /j4qD X4Tm P?]Fj i^zwCoY nM\˸ӡ1T}=`[DlR'pЄJ1Z̓jS:Z xO\yĠJ Ox%ᏐPD3-cZ"F6>Z@~ Sa eVoT6]״-y" $S@L$r>b-R|`AG\;a ~?J T gⓞ j6EJ'm:c^1A}?$Vž^ELr@ޠÊ QZ(svxn d>eI_7NK KAttg"~J.F ;piIK׮+KFݮiZ=qͫEN!/c6 >E%a9V;he1`Z+a25plKK!l(EրoY07$㭵| ض]hzvg}h^obSY)mfrI0ѐFDoW]L>j:2d L?Ì$hnOn5aj+k_ 8ڍ$/+°[I*WjLQ+4d7EC7%@CtVMKaO* z2ĉ])T|>7P:wΛ‘qڈbFDcoxr@TҀBA\@FJBWLb"{kmƁWfmui:[|\b=SWU?ٓMPl 0lHڬ#T#6СWD\x3y5x,0?5ivS/ٰ.iDLO2M53zt1쇻n]"]aXoF.i{Led蕝gk۳n뎂^F"98}dN>_G*ݳ_#"fȥo2`[ȫkA9uYk-%x[s)ynG.MM`\E*99gΰ%k#$NU>tĩBINzzeƆ`2V~%j Dc\ÍM:ɑG "␅2((CS+* !A_)*dӿgKFȕ߉2REa"v=F£y.%!:"bQHx_!;= ;&&.>XPoꍭK!,a=%ٳ<?ȱl)]uTq,^y `Sa1 2]e>8*Zcǩe7Edt<,"0ZͿ{c _ V%-V:捳Fi̎sͭ(h%Z|=p/6ʷؒE & Z-#$ahJf=!(\W C֤nW(a-lYFdʰk*[uZ'LfH'49q#6ehi1ki2'"5T,Vv ;NqAdYF\|'U8׳GX Bc6ʈO eڨЌuH0+?!Prȓ ~DJ9n3 *Rp\2sݵR^(ƭѠCbvk K0MY1_$>%##syά֗Ix.^;6=~(I5'ZlPmCH#j!"wU/CXw Y cO! $R1[aQr n}~g\l$ίqe7X-ԧٺޣ+TlC&]`Y‡,#=\?DS=x -c1^Re/#̷ #X9HArkAWiJ\Ez&洸WӅAvoAg@F`D.ӼQC?*_Ay}c_h.ƼoPUBv f.bJlcZ9*rw6qE%hnu[c?Q&!g*}1f5Oăù]˚Q Є[LDO[eCNcw&( -tSLgs2AiĠ4*6Np5FwJ.s,(Jg]_O.o];uP3VxB @@55vzHV5Lfǚz 'FMr}-)%Iyy'8g8byGnaEZIљ UDź)nfqaHU䴏;'Z3qi+Dǒ^$r}p Sy^|pQ{ˢg|q:~E(YҦ &'~p'*9}z޷oyCtݚ K=SC>C2P*jb bh\A͗^p?kOLxyniYNK P8{{=oCQvʧ㩑3?euֳ*p;Lbz. 2?i4?tH%b;i,WƸX/M'\(]!68boL".F 9A H#L)q< Ĩ#/vu.^0Y S@z0,8 !@@l*vvYx7: +'lby ƣuIDC|iPhZs-#qVrRoK_뵌ހxh{m6FE=q=ז Y*}·pPiD)9W0bSgv́XϺx:omL&fV˨jkYy}(eMiĭ|uFJE!ٽ+%Ks&̽"룹35I%ૌ9m!?dW){_Rd'9=WS@4X6SW"{´ xy~V44.r@F9 Uz̡@SN7V=;&f2K*vFK/,L řSX8"4Ei(~Q#z勂 3fӤǗZ<Lմ1'3͆3 f`|s;sB(8ޠZs^$/(]gG ֓ɵOE<˶/M8MB8flH*C/{J.k܇{3BXo)Xg޺CΥzqfAWioƗH5n_a=c}*1H9&b!\+PmGJoIXy^^4rC׻O|{m'LH]Kt+{R#.,8 1 ^zsdё*B7"4r^D5IyǨ.ckSMUW|䫅"k" '1 Z}c_ ^؆8e$>zm PsPz撡5rƤRɯ/ b ٢}R8%O.$HA5^n-0)#8)Or[ܹ/@>3WpY lJ Ն[[R<Z_Ecoz'1y%.ыQlüLa +gV̊plg!nJG V=PwxJW摭|@SN' ƀݍcܼƍ.^RdNOzHnW\/ g;$,ć1m~ =QMp IZn&Z,o$aԲ eks|{*A}U})8U㼃&ʷddtw`rLVh' [A=&V|[)c&\1\{ _f5>BLM aHU.%+[[XSW#O?LqR Yqbftգʴ'_Fp,6>)LI@ڵK~ W,{2P.Vɟ)3*e"aCK}vip`Xk]i](ٲwW.8y~_Q|20B#_<]C쨚5%$ܠ Cg6*"arܩ\9#i ȸt;ȮK ze! NUWq.J ;ME'7]17qY9BS|jnD {I#;-z͇D;eYYQytqQԜڡU"f`hZ\"oKϖ9Q!voba~lg<'*Ut#x6O "ߊm\ӇLDáC 2zؙHؼ[ToΘ#jA!'#N4K'oؑhXOa:ޙv#u 釰1ēYݎgy1{1UR 5!=a5B^GONJ\\r\ ,\s? GL+ 5\+$z +Kq6OAXiu 7Q3`(_JIZrO#1c"R{LiW1D0[$_YAyrRqGH1 4&asC!19mV9"4MWU0:Tx%@A8MM`㝢Iχ `C{;CNXHY1 aZ~QTpWֶlWr%?$;$\7LGcf MXw$sg7@'/P ,_snI{8X|/@OB7aFqJZ3RY>'OdhD\+HP1X؄ )ӻOk'Vb;D eIc޲A'uH*M#rI8^Fv#G/?7L>ƈaz"B2Hu$< 3>c>f7  k{򞼭އ AyR# [gmxl}p|ȢboHP)xHѯc CT)uV&EV0ƺ݀Z=B,4ʲhӵ!?:RmiH 5ǃi lD{NH6O6pWNtwE--XKBMn@2gN,rGH?)dOD#֡`ёMNr4/u{k 6bנIteíq/[6 yN.J{~Wx{BaBCV*^H9zζ&E|=%8{9eles^>\j=G)𩪘Ϸ(9 7z~p?#(Af %&Ǐl,]a~;Aj~LuPHe gܘ#9{*Bv(!߭~Yp"ziT=PrAs$"\F^@Fb[-|~EɐYY*"(U1_gfD/HZ#+,}y{>V) .9ibpuH<37YMl]=1ܴשo|K"Ӟ PBZ+B[rsO~gUJP)g5C<(<S {6HAX'V J[.#6]]> 9BGȖ$784z=a6qph#"Zȑ]\BMSOZM#X~^ZerA'|HvT7E)j2L_+ n/zKc9Ҍj,3JrҢߎ/&E9n|7ѥBR`ʅ}L(#0|=銗U0PЀE1B )4[z1ͅy~gw`o跲cz|g e+vyn,}Xb<]#^[6hYh>- |4QZāPdaeǿ&{Z/?IDzS.*7EwM¥2YO:{w-X>l傝ux9 !>d9a{#5}h,b &ORBZ5Z[Q~ } yta7I) f#FfZWo[{knl7@6FV@(vcażF{^GDʴ4܁Q۫fSc, 9C1ߞ$SόeQǰBQBv&;n#3ѲC➄ӡS)c7Vaj@ g \}Yv~x-j\*Ķ i#,~DXd;̴DLaqW۷v*8a#`/\i$E>?*#b>):{*h5FQQpexjRL8؃zLF@#QVN@Z_0`X0̲}~ kܨ )כ99>BĻg ̠vvPDB۶@ [x"4]]@k HK_aqēR0^dpHM=Mʢ mf/eh~]郯FĠ'dqt*%߅{U2H0`޸o+,]9$f!:v<+$tkGMI*OVB١ZC!tQIjӥM_G.I.3ly 8쨿ZJ;S5) YKU>am)(O20g#o5@̨U!FyCU †4uzX?Eɷ-^e&1KHN_ %1=1 <6|2˨]ł?_{I iJ댴;q2|طA(?_HiM!A,o;S'YJk|B- 5ƿDFz>|+X⴬QW-2$Gmcx)ůI{{ Ff^ҧ8#rIpː͟I^f-c׎fd~x3w%sf"T{ g!\_I ?|2JueTni-Bva?UZgJElaX{ƃL u5H4 !ɛtJ-&1ٲ+뫉*6M~g 5$q|6tܻԁ!)c?!mxabӋoE3āoxF\d2'\7{euJ@РZ=٠qBRmji}ICɪl~&f!¦I32H!c̸6E̤LV&Ẏ`X }GGR%]imL[s&jPToާ}zMY5~LھskdooGmJA&W¯b}@n h-EPF_~BU5-5NOhd YXL\`YIeC"H3'N~׺oISWx->%g~v"JTt>S/ Qل^ctS UC]p~!G>o*f?kyt.i.)rĠ,MlJiZ%.:'ZΪ'!gЕTWTI A{+Q+#s "*AjM!fEGn hum>IẔd-z=*AtBAU(1K_,ԙ|Aڢ.>LJ2"_+o5`.١lf-5!f OO2P}cGkZi ҍsfB˹4l/;^in ĭL MKc쿛ljϽC<\*%Fw4ż? <q3ZNT3p$ZZ۟z``[$0C d޺|_9O b_jzgA2Ta=W7z? %_Ӂj;S?NW42yXpp4zاUc4\4-x" ]o΋#I?!vi:Y+^W?v[Xm,/ 7v f0E:gfO!J%f1ݕfZ:{4OA `\}ԁSy:K8Z"NyZ\2iOlmzD7eH^A5U r횚"Y_F8f<2 3q?o" F K)'\X!&cKqʒ;#m3~$/钌݉HsG"Γ 2H+56@kVn!T ]9uy6]~bf-Ku4#۶^V&>u - o{_fZ͛&q}VĞpEˆn m٪d m2ujDyl"4L*gQ:+B)AՂ}tD~é-jL! fv^b(< Le[Tz=* RHQ#:7!qCxW|ꡖ7S]C`b=FgdvgOF32Zeo\}Q!#4Nrۨed@:2uf)"Ԑe]VZ{{T&]v'G%u~!>- =Q EeFt|zYgJa vp?:OD.t!~MWܔ; / ՛m {R¿Dah8.O4G_ M^Ǭf ia˲Q IΕ`c5Y^n0:VeKkg3D 񝟊|+BczB!2q}iz_&<;86$[*&ŶY$<`bHi@mit!zvں][Zq=+7`E՜X:t^F. sS@douhh . FZfKdUWU3g2wD,zjsgqx=(S"ч+NpyáqsQWI%ţ(@7UB-#g\͝D9GP[q(qw!Or`o)]s:0tr$*6'^y2~spaiHkQYƳ|fJ=ֹܕ9&uԥ$x]:Ҳ~ ذ]Nhƕgqr }z7XjLF>:Rz5wb%buCݱ}R6+ 얷B07ß[=A#b="JvfeMQ+oV.eq˽A>L"dTk$N蘸kZnh`Ҙ fyJb f9iPe7 XM}>S89Iݐ.nqL(A%[嗝{4PmY gJ=:!)tw$ҶNs)Sl-,)a"5fXi4﫫$S# w e#>.r@J!xyKl ;մpXJ)h)7Ta7㟰'<Oc 5]E%v'm+7|&G]2 @\_+*EpfSRvG> -R#tvrT38FYGgƘ6!B$8peP!,YV\HJ,h'z%? EQ̪Bo\;r0^(/(#-KR,Vy}T%TQgWeP._oX"zށ}OֆQPwADca4PȺ_#kIzρ{gejT_BMV?3 jO^5q>ڐ G9kڊӉMfi,ފ8YZ [*&a`Qa@q4ͨб\$Yf o i.upZ@"Q 0EJ2|W"8 فKR #ǜ.%cܾ=4NEeqxj m%mBʉ]:6S[jH@ķqaH) ԩ`Qݛi$Ԥfvռ?6u8zUkH0}lX MI }j%ڸmi|$f|9_MJ|?c5x 㳣~ s|4ћK%`I*ۻ qRj<Ll.oZy&YSnrKDe溱ew|)t߹y@]NjU9k9 ̈d~vV+[ӓ5&^q; ELM{Kͼ["hODF[WudvneAM2 ncnM Q}2 @$&1@bs^7k5)O6uQ5cҠ>E4c6Tilb a>.HgTr>]v80gk||}`{Æ,Zow5Scrum_C,ѣ>7r1!pѸq8HFOwb߰g6m?} /RRӳ nr%av7RihM1V^&  D|^d8a1j6;K$/!]dyo"N)l֨8i:v A,/㽦R.v;lyaswᣟ֥:+8/:3\pSMqn }mLaif#苌ުGo дiN,ϐfJQxkTLlI-ah05R2ٌ-IdBOm-` 6,{<%FŖ.uѪ{(}Cy} Qԡڲn<};bHl@$cieKh-HoՉoGw,FsqgQuRn[n$3i6ChۄIЙP<6KPәCX.ɠxM>Ȯs Q]p_݄hn9eIA'\;}GzIa,F:IAԣnr8$/p%$dBT qPcF>̎ŪXFsw _gMͭ5 g4OıTX6C Di}x(nƮ{R"M(ysYJwƑJD-b>7jʹffM*.Mu*+ |sqD }Fܬe  +JvǶ<bu(hۦr")!@yW7j$HrF*i#:, Qs'`M jZWU%ͤeyr<uF6'ekqcTZ5G&A"ֽW?nYfS{ f1"Ԛ[Ԕ+^ʱij1мF9ac 'E6n:K?d)?C؞bfE{)cX.\EFO,ʖ[UnY8;[6I^$D.#ba40?}FTːMڴ[Uҍp@ا9~\$Ѥ"Lb=_*u!ټ@dt6k9N4@f?s9qE%-h8 5 P]DknˡzEP4"$a>֊P7T\t*5 \a%cQ1dzk3 9 i0cffS`a"O 7@ߛ 4L$[ěV0 }qMw (x ؏EJtŻF)x$Cؾ`CS5p|\=[hœ?WrE=tTb$0xZcv)iN%j{BNJv+s@@K?fYk)D pDZu8a+Tkl PkBck1)B?CЧԐӺ\jL1s?ԾAE?KzȦoeu}άDuح0uHRFv`= ZVb9Nی^.h$pV ^1/ĬUYZ%Ӧs\n.pg6p}l2r& z2׻BSu!b][j9`PQjC[ED>Md p^.Oc#0d~݋ĮO(VFM$ k&M/b!U7 A3QԔ~Lr@MSHdAiIRX,o ,y߀hRZVՁ=fF"FlDŽ<ÿZP31]"댉<6J6rH҆(wS+ *Ⱥuw;=?;TSdQ_NFOn6xuP/I#Cf۫U(Ll:1D#4ǂ`?ݓTCdwzۙϾxp*u!3,e^yPFt_u$v8$CnW_]*I1k^ hllϜj~ՄMR<#6$ȭhsn0Dw@52#UwK#$ClwyR/.FRig%Fi%+7-{aޱ-^(r!.BV?yЮKRʖE{riHU$o J ]aGė'ӛ'7_bgs5˫3L_foJ Vu&fPi!Y;v)וˆc.aO{Z;z1&q_3N: Aǒ}aǺi\Mݷ뵓|Bpcǃ;DZ G->eY-(`OlӘ]`*XǎT^%[bOGrc9ޞw/p=a% _9-*t(N-bch$>0o7Zug*DQT,^pV{_7w=WǓSS2 \]]K8{ 曙|y[I=b(%\19g5Ttڟrqe33ftgC7}%wK0|f7ڊpnX;F>˕ap+>B)xȗdEOtv&]:y yRP7}-ݫ9Rk% jv;ⅿb +.r2S,͎vV L ;Vt1w:/hVMk; Q3^9V;@[g=N Ygv)"2}wg&RPǡ*__`t0cz1m.nd`^))DIZcCN![τ**L0?/`x?)el?U~1WER߂YoߪGB]ơHYVvN!Ta7ݛUdY̗!;)&97K x ]N6`r"}JtQ ԉ<#msѕ2EB68t𠨖H0?i'Y(q'Hݏ4ᙦ*=?NG`m4RϰOe"JEr zS䬐>ScH@O[QMTŘEs5)ZB ą۷_7G*jŵH-}DӞ 騱 L27.rМ&Ri-z J I"sj"G:'iY͸Y&eMQ{c@ɺA&6IBEYx?\$BJK %ڵFQ& K!&j!RX5: $&1p Z3٦Lu pV KÓNYpj(:8} F;5r%PX( 2먕udeE$7RۦL\K`[w5qgN*fЪ ̷\$JޞjMj&^?k^:(Aa#Y{)PGpzʫ foRGKL Tཹ~kqdU-zEɷ5*03 W/!BlK"&?Y^N4݀{&iה@Dq-T*!̡wnCJW+Rz;\~QN@/ ӣtCqqGp!?;~-xc M`Z)R!ϕ[Rqwlçu#_-s | C:nRo!ZK*;_L/xPkGCeOِmFB;np՝APAmfwN5fs_ЁSĿcTusfzܘ˥o|p<^=Gvj2[G1,gUd4^?xPE"NÂN%!<'O^ܫG%ߡr"5˔?RSUhͧ PG"d7\ IAwb1 IaFW!CoX{|=})h-R|Ԓ qC+ONU?Xu#Ӗ >C.I>$-5k_\ZxjNZ97S.GY>+҈[;~ӎYeX?+MxY\u[_x~NuHb<|LV g=oqWfe%lbZXկ@93im`BJk+w}nU )^[ HLp8sMW@Jҳ2q3ho4*O:8e@p۾F(&hJ h8i*9 Q=ʔAOm] a,J#= ̗IKdC6NXCkWAЖr7obĽ4l9yUF߬c.Cj)fAJ$ywuoٲ"R)ˎ!͐+->n#^gLJGtu$(BbTE#V$hLJS`z,>‡KcюtI|7Zr9TN^s] lf?B5B@Eb:H-Zi3}4x:,SOc%zEoސXnmbx6_X\EN3SyI/rߟ? cVk#?!ƇnňC|a]!! *7_RBcBac#K #xsP5@&&t#f55?#⢆!e$l ]!.1Gq(xGѫ}ܾsel-;H=ט4I- hkYByʻ CM>q 4tSLkO {'wt`ٰd^+ 匟 tBx4ldJ5VyN*ܜ4~N?Uh(!|f7!8r ltb#:jQElֿ0?a !@g_%֖LmړAvcD]>(sru /Whxl2˞pT#htD*F/ B nɒ"Z)!z;\텭Pk m$z&^hAVV'OdkVIH0DS*_]A f) Zz+Ӹ|_73~;̹K> Bxpʇ aWJ{8;\o"*7<;(tqN=Ōo4'jk@N0yf&OX-KGP'//в'$(P@AF$DF>]H\ Q@}Gu?4̔$TS9yfOVfݏ_on[MQ58&d?mXi2E>%1S{\߀8ƛhWsվ>$%C `|'^ޮG,s'SHtZhⴴ:H^M*O>|$hGOgU7=XNܔ*ϡ|p${B&xHO 0e ~QbsawRYL3Fk0h݃|yײ_PW~يZOa w٣bIgA[-Nv'&mor¡%AdiXE6֍ ocwNPre#/ּ.e, ۛE蓣*D2pso̺7Xx0MX&!c% CBl"ob;UhĞ!ohsސ c?Nxs7JaVܬQNǵn:;+[gnH߾ SDp1 l4|1ڔu,TVs =`g(v!{Bt x>CYꃼ]T Y9}~{[}6%F\9n" "l7ȝ-G~ ;HII_yD?m-''aW5:@ns07 h3WArnxJYmgGtmxЬJS+#p26R*ۃCv>/MG:vEt6Ht=FV+ S+-~H}z/ʮWFDj 2. 0'P4*BfUuNŻ`d/\ڗ<H;U潹OnOgN_E59|LhE64~kGNP^1]Hc:^KsՁ p*HC%朗i Qd5)%B{u|ِv %9!,YG0ܾMDa*^@4P88NܡHh׃MF|/͛7nT0.fZZ$ ̉JBwjEGOwnhȼ|ڔ6 7ôb;mӒs]c%f^8s z-C޳,9!` V,m- xOi_S\}ț?"-Uu]f0Ch[zg|?@?0גix?~ _eMOSNRFaRѷ!aϱFO^\&qJGK#Nl!3Mڈ!PwD tA䈸Xb{nk9(-Z9SE:}'q\K%^k9sK_ZԺfD9xy)gQfjvB{8$0H?cV8)"; o(/[k=Yhh:5PzЊ6>u8xw(l!Q9Ӱ/7@:D95}%fa F WW9>+ƉK#M8z `j)Jd,47o;ʯͤ" @IIJ<N qv?~ieR T|D1<#}s\%IJ5VRxl&d>W|y9f좍n"1[? ;6cCd・0u"BXaʲmX4ߩҡPRM&z~)j`g%p^"7oht3M)☴al-NV槢owPGaBK8k{?gFhUHea5@S|g.4ۙTe`J,q&7Դk`_C' #ޛ\BxwJ>WT4!><=k5/ձ("5ڻRN9&!7XO" gʺSMz%m켭Z蠮盺uv4a4 HVd"l`cJ$1`kK`LdҶUEM2wi*{ehGZK07h/CsSˇ y&!SsOe+ .%砈G OJop11s*[NAw3d镍1dBYq sȲ`XKL\{Ж7@6[@wEaYu53&T#&fX" ;l C?Lkٳ8V8sG]"Z[a$rÛ6eWW|wV kUV OUo{y=lU'UfМMX_[MLcsUH[{&|`-+քf?,򢿅T{ai;nz=iSGʐ*dNC`Zȃ} UYt\oyD_WueFjpRy*Y~yRB 4cW ,xJI/֧rD߷qa" ; ~wQXᎊvq0NȲC*z@A.z>A$Y $VA{_r% U)g!0+/.n#*CkHQTfd HeV n39o~JÇ8wi1 :EjZN]D zKUqP}M81 6 E)<¡k}NMzu^<8=U><~wȎkQEߵR35,Aď<{Rc dQ59 }y~ =Zo|F?l Avx&B=dʚKjM[OqLr16 dqݾL6u\m/`Ʊ2rjUm/6jăhݭD0f}?qo?SבǶ"ȯG }F xp Nf̮J y U|8 L"ǻ*#|5zCn~:*t1Foi zK85N=ᇠ^ \  aٵ68̌c7+R/~袩~Mɴ[BSe =.kC$%;3~90'JpȾ [y7!3We'x򥃺%X'K rf 4S}*r+I8O >H![ْ=;oK1j9/M%m̯*HyШ[8 r?nyCIйy_P\?=ps Z>P=|Qy"(p,Ρ3Obo(0)LFN:2:0{9 /0Йɽג%J ڮʤD0y1R +alfQ~T:ا"Bȟ\#b [ )@ Bfg6ZG0$_03A3Y:$ltYk~;tŗ_&Cm4HҬklTN9*F,Ŝ2GR<Nfޘ$W\z|8~|".@f_YTLEMQ}7N_\L_IB=ּFAUx3'rA72,98䝪]'kUAE~?g*wx?8ӵTZ{H$x%l?A̕|( ֿ}~s2uspc`Bhs-u4uhj3 #!q˾(bTFXTi4δ>(ٍF!mf{)Ѥy@v)[qb#3ONˮ'p2Ҵc :_@BMsUxѥVwڏ#:T`s[Kc¤0y=lF[}Clrn"L[-c5,EDb$G/"_Y#.XpL&gˊpMSkHrs.Zj&=gqQ6RFxURckB6`q=Xá_Y$҄ۏIeaVYvigd^rV0bU`xSv|% 2E"Jd $XP_ǡTA:Cb[t^u1mFYGv8?io]N68eT-,lw ,pWA+Dl\- e˜+` CN˰ &T f8'Ul1X03o~8S:]Fat(+:EJyLtEb{z|-nynδ;&+;2sNQ2wLH` w>ڄBaD1q,=|{,Ը!%Oy4F ƽ4raˣ`%q8痄<lEjtr9lv>焗2h h|{Rmtd`&Q!O bvD(4 O2z ]!"/y <1t 9b@TƔ F#JC=M`k ;2S ǰ~Dr/z|YY&ľ֨0I`b%c Y@4t91,2$rVmIzeDdIZ;}'~rRu ?7_2%\oK-ގ3 io4T"sf[D+,^j#g#VwȚIRoݼE)vV !\K%tH1_P4ǕWf㒺ɕ? 妚?NR_Kte3'+y (qA= jdEAk`gҼhhᢤJj+Py-J#,ET_V * 1[]g- B&#DO#dF=iduO_(H-2YdA-fDԬ`3,Œ<xG,\LrQfvMz9T]A =ڳCB;o$0juH"cwVm0—݈ AKuK(eD]L!K;LGW9}$Uʻ-Hl NZч }!*B9'z ) eM7K$;Eu 5ṈЍ+YWkyXիk 7;XڲϦ7sVY#*TVfRgs6r*m* it/&c7J CC,1<wCNwRKTZyu  t$McBWnpCN G*Sn"71Il=1۪= G6 c铬g.v dІ寖l:gԽbg@ʡl.K9&-YC_e9}eP!+2½mJMni<[fw"X!Š W 01it ~6|av.<-E:ù"}@G@ r f5Et_FMv=I<Ŏx6p{ {Çz ̓G&2߷-#L|Q>[bIhvVקqTL \)֤jWOSF.hw*MG-{j -d2d2nMJH[s'@o)|2p -3RDL;#i鉈Jf`DkzzoK/lB^ X@Z[ԟhpv M  #*),i}5-Yyܿ{Ц-։]OҶ0YeM#-;m_cvBLXuK֕s+KyF~m6܆M;t-opI587ZG/JbooT?Ɛwti}9ٖ#oa șB5VYz\xtuj$o(X~tA*a*besP /g"$/`v`;~dmP~(iK`Fy@S pI¹(v{͘6mcQD=䒼s2Du_.csA8r ~d1id JEHڤ*!kZka#"X "nP]`lգe }EL@(^4<3D<| ~. c [)TQps8X͘$3Nњ*VGѵ%2S;fکH.ATXIg[Ɏ(Tz&9cڀgI p /ĉQC+qм%؏2roBb%yQ&!ЋyJo(tR&<-͏|ɲ!>:*IQAH &Q`sBFClI؈>ώ:zg;PFxDc^-әkש*cGvB S.F`yPL3%iƮI6vLu,nZa#Cnۤ< IJh6HZ{C;"Jrk5;/دn@Kz.~ C$zY_E<+#Qsȋ0mٳͩzX6Us;BGn;!Q-w@+|z3tH㻅sOҩ,yJ?fyx`CɗpE|Eʄ w.e+[;P"$_^҉N^D(oҪAYχ/FLH؃*FMwGZcpb>s'B n MΖ F/?xTռރG׮DΜl =N[yI`⦩VYiA{YGƧ`˵-Dd!JZiNȡQSu_9'}u;x|)ǓxWt -ނËGk e#]!4CЎ-y~P/EnR\'GhQr+G&m_*4N*$)Ӛ4(Ypd\4L58nH{J'Lo{T=ڎ ݄En &{:hsDx@W9u_eE l4Wisd;D\̇7*Ս{^dh3lSf&T"S_oIuo&ށ˚= F'FN{1VҘGsdoCجXB'h2BK&#H~¤‚l.|c $-H2?z%ɇPc,OьOsb{2m-h (zI~w^GGӨapցb2fKT9r͏=0ttkaxZ8vXei$L(x!yP{YrnSDea`10m(sz3U]yo! V^iPg8/ d.2Y.qELR-|g'a1DE/j\rAX̵"{d\jgԐ/N36r ^ H`SŴ"P= T!?{{T*.jb3c> UJ Քf;9dGjRҼ>j1T>n|_>HVINݍ‘:rp%qIp{QTwt _$6]('gA+kṔk9kePYZ#O ǭur|%3M"w6ၪί-H `XѐƮd_{*Nb 4hԎ˷oEH#2{յ< e/j7ƅӢiiBi!sק_8Hg݀f0M*ܘsۈ.Ӵ@ 9[@(촓ꕯ n~oBtP}o@#WJ t$_dgs6y:B T >fǣszYw:֭,G0*^yY<2-P`džDFXu/F{ Hɳe0/ 圢0,ȀE/e6-3"k=/a$&l|PfczgDŽMTSn"g}rRW2}Dn2B:#ͨ^l1,bw}e,aٯ9ceD}7Z#e,vD !ְR/D*b?6<,#`^s_;)蟪ŋW:VMοgv~\c m:G.D= mbŰ [l}Pսzr t-f^Ab`#uD*cNK=82 JS]Hd9`$V+V`iC~; 昳XfbtrRi7O`E#!twFA!I~$$4n}_QI! `sJ@Wv0}N~5K#"-B7j~N~&@w >CYvaE銣R!sJ"W(R]yj[n47{C( *yNvF ܝI=V)(]L{ula.k*Nc-8Z$JIQUzZl%ڦ1GbO!rrxU.]C [18!"I[>aSO.ZnV)a(3<ۓʪm6yT3H:I?bS,f,+:+$ zr}y-ҿ10i$c }95e6c_2f&h{<o@7n|,0'V{ e j=F1 Wz3ןe\2sPT4yI,VZHU{ӓϊ3_N#*Xʔ]T90LR'!]9UuE&Qh+ݷ0\ˆkъiu}Y`u'6lX҃vn냛)խ;F!}>=V]% 56U5'hUn)ms۪g)x2';|LKC-KG{UsI-'" u, 9Im .cuSeb`Y&g od*{Stj"*EQ'ǻ5QZzjE|-(7Jp8Ke: ylP>Zc&ƤS s?;ҡ%! ?h4QpKIF_ʗAʮ1b U齽R{Sf PaՅ<>%kǗ%FB~C_3~vYn)!xiQ5Am ǖ'Uk kA31,uqrX8,& rrH73 p:"4XUGxy騯. jBaoS_ @cf_WA~DۣkKkCMSQokP 6z/>r*m0tc(@{}ÿ( @*D8tO4.+UsܡNF'wkJC3Tc^|#އbo`q2A^e|mjSL5a]$ϗec#a5z, N!dTtQr2s߄V^R|z+`ȍqYh+5а3x"Ed]("WkqYJ!]t$+3M/`-HoL9vKs xgFxQD )b ,uuCER 6)RjwJ# *lV%|=7g ښ&46+_ٷ;, GHGnΗr-eB`k7ګNR$,6{{l&KI}b[wi} j8o{#E8E|U&5p@Gywxj΄8!"һ;ߴz4(1T=̃KOԱLn)B$';<橾-k%t)}/. Y,352=})}bJ0o,-:"'=Y@;Sr GEi)n%6 +V:!<փM6^ U5^-~hRR,MdG X7 oQo'(077rƚ!*iߙ}E%`Ip(Q*кpTR=C"[++Iu_4[Ў ꆗn#͐qb+ A)L !OVPyM&jb|o\*-odCjU.X#jiN?cl>eÈS)f>n607JTg"0+@ %#bWͧH!gx}(91tWJټZР ufJ/2yv;AD3S6}$ku4 Bϓnz&slS_8¿cR=o!x8DU,h7-: Mj^3aR?HܒTk@Ȃl~z'wr^( g*c?Ӌ=j!]iZw?mv .o3 3xhhj?39u='׺W_J&3Ւ3U X&Aω`jnFϳk,o ZE␯ 1 49"I%mz#']: ƌ&%cpS[C 3<\|ڇCΓ9} kekz]/C7e僈Lxzڵ(_RG'65H(_pd:5m;k=nu6vR9}n#+&*?3.5e(&^ AtAzݕ xmd ׀lY2f#`/tH4OG wfutiaҿe$R[`Ҏ^z;ƼW;nu&܍"0U;JBj\G}2_dޱ=@avZfDDŷAN,-eok׿DRIa}(*zH;k'5%FD '㞺</l,sL#K.}].1ok7՛$3iƅ|w/iy7?݉\ xڬN/+x~_ddjZV?|$cgEV!B91c/ѪORpDAhɧ| ĤZ\ +/MZ(V' d^EeoKk} xsx¶*`+ъhntOCѐ~.hLT953K9^_[RۄSh(p>hX~$^>jJטS~Tq0MML7,du;IL^&at. а(M+hsM zlS`STx/DE rc銌aD01Lq^#,Sn` lEqGՁH&ǖR7E9pZ?EDrdyԺzZ3_khO(LXgU9|͖3pZuDyrD.>yE5srj-(9(-%Fos~y`wtA"*7EU/:B4Į2zS^>:b/\ؿ@V/J'p!u&řXL`w/t~ߘk_ z]K9T $ĔC&9 ~UgȜl2$4Cڦ4$rRz2O)kz)Pr08<>ݥ|KV/7~Ca!GoBis|;-@2dr?u)!M>fdPnaLY¹a&0#xoL8L0$R4,y>SM(c83"uCuKnPo7NB)9~Hڃ!>1, }MdP=dJ1FsP}dƃa}6~&rw^z^(i~rh !zq:uۢ7SH!!qKHmyz[7E{?}p%6T+J ϴմ~)n fv^vb 'R.`k"Q1A6jaBv`D갳5IT\"14ZĂI?_Eob>AQUP[U\E}̀EOȽRQ+]&6%G8_ Ro۳ K>Y3S7b[6昔C,PKŽKd;7@Ŵa^2ͧ6ߖ߸dDߧFWyMC4;dJ0}oGLv}yh?'< "g|JD+m&4P+~6>,)V>0K ]o]&jR@ hҶO="? lu&$.EbhӃ|+aͫ]%d@g/+n9'ӫ>#?Fq+@?KH+<md،j+#!OܲZ^ҩ]2BԈ$"=rt"ys̏P_ Zn˿3r<Vui=i)bҝ`D[ޒ$6E@LS4C" Lz򃘄3tLLF[~In0 @b;<@'R՟ .0ч8&.|ˈrc!0Ʊ {~)pCxɇ b\*u<ڣ\51d+A GqTx޿4ΩVa ZoT~3/PmcXaր H>9AM| o@c=f=߹4W6gI&#zF>7c̸<e5ȔU/}~HuN_MB˺!i⭀qB 𹖨TOt3J +!&APvYJdh6ؾ] q 9dVNvIfg:7^uzsNl}Rfni۹޶lǮ"|eN&2O) ~@,@&O740.{ׁE<@,mptɏ硐EE2HFq,;p7f0"X@HwYI0)Q/@T$ה؅+CJv¿%.w̦0kdkP~n9{sGbLvDXU{, M#c]as\rWй~ ң %;%#.Y?FM /̻HDjwhWtd2ap}53Il}`P!>jm MzYR<1g…NZZeHH3MԀܿ( {G)MCvV&镳KƮX,!U#SVD1C,X)/`t=MEƒhQYtfNA#u/9<ůStg#50gĆhY0*^dPHpy9;NVe1.e1L"<>4v_:8bm2^3Ϭ= vAvA1'Ȇ.Fæ{m kgDJ#Ezy>-V)1J_ ~ 5,5y1\y2T9  5u@c p◫,$ʞr>j`~7݀evy8(v6Һ)x~o+a >P1' nY,[&`i1_5{w< hT;e>b><$kfF&Y!sqȜ N cyQ)TЁN`vפ#jA!?gV4\+6Dlag+mN`h@!VDiᅾ]A.mb4_Ќ͏zc_dy D돨ȋtz\.c {u^ "DwD"6El|.-c3Nz3ǦO\ /V1޳eD*_MTgd0ygyeNͤc_|.za2.6EL.d!7.?dTMr:d_x@<ɔ?Mlk4La,NOMNj^ICL uތhPÞkt.fL>w'ҡL{XKyP!O HWg)ƥ)FB-7b;:[\w>?!!EnG\ڶ@͋^ "]j2M (^aj!7JMNbа}[:? >;6Jʗmj-wYm`J 8~kN8-$@(fnP@Fe/~l\!i/BA>:Z+#I]GъONCА &.pb=UvP_)ذ{rh.Pn3^( [ 4"'Yx?b$D xMo2͂qB z{E pńa |Sx NLRȨ9f\72v8oJsߜz^ h=e1 Ҡd 5AF)oz,<9+vt',ȟR8džA|QL0Y3TAKsLGQ 7` !4SgA?J6wk׀RhiՖBdMfE •%W-85Bn37(,j ,w8z0J -kc /tnaIw*zQ@Ol&Fu9K:\u'OBǓ:}V")٣a>2fH؛>_ 6s$Uq 2&GpuQ@CQ!p)4n(sf5wVbE<N(#W9VV:et0XfI`ÆM"ҪxвQ8F}}nxجN2;fm $h&p< -|IIMf R{y(U=1MO (3XM~W0HBػn3B jRܰ¸+W&t9Cބhq73ĭa|PONQxkIV\ h&V8v @lL.++aW"|8M%@@E(fO VAVhH/?/^VF+s&;uXn#ѯ{.Cmc"6pː>ojE2\0yQ  K# Ҋ\얍Ҫ2> r @u T?Grg- !iESDXGѤN{ַLʈDo>aNbawj=J)cnFNy64X/b3$K5\Da:W3#U(.|枌@giJ+o-.ZOKa4߀;nz8l^3w1&6_YaCcV~nRI~X?.7%e^/U^j'eT˥a nP9¾]7D,WFS/8D3 Ê >1tϽPA*[/7UWZUn! hj5`wW\( _8Pm9,4/tk+jM~gvFd>]Ud+jAqMEI|jJ.a=*?  :Ɨ%^cy.3~ٲrvRJ>NL쳻5guњM+_f~~ᴥaT Xz? \m/q6~oʠr9ԟip:>gԅT4UI4DK؋r/Wg͊ rAY55XapN]#lDrړDprj #-`}w+lpPzuX3 y~9EO H- \|jE"֨f!pdHE9uސ[3C!N=p{%=칍6V\nW? T>Aڜc0QSg쁏._y0kUTPP ?pgKz()i跚ʀԛ%0lZN &G; xME,ry @Va/IwnV620R4ߗtP\YބA%1~F3xE*_ᬿ}Fa} z׋CnUlceqxM7|,QMnM8Dfy6FS*{.lG Ll~wUar}V +)Iͺ.@U9„OJӁȨSZH;PW8f)L8jWL M|M)\lfXTIԼbe{3LJ@(b/-jX{)Xzx|Q9ׄ:[x&w3O|d0%~ l 8!hus2q*T|6̑5D= zg0=gڿ;b#?H:7)߫j|tCa~Wmha'LЇ[ҳ`żt+ƪZ+jNPYķk '>jR9~f 5 QH׸vveH=›un66'HMf/!2 N!g}u It>[ȍLͻg(i9A&#,gRoFL,!C}[S~:7V ʴS=NFHPCIt,aCz<\ U++. }OڸڳMrrlyÃ˰~ y?ft#Agf?枉=09-x f)18 $~)j!i b>^a _8;eyP QQr !rg$ny6H2[ퟅr` tNyoĵv9`i;gxytHkv]@NsAtb'P֜~W{ ]NPQC[*EI wC>EA?MN4Z72-[9d#̗Vcظfrih#>%l1ۺ#²[$n!V.oL#uuM?Zgu_a2lNh "]/n˷懳O^Z#4hys]S˧}j֗ c[ʓ~$^c =~0Ru OINWDtr /}Ki-Tt14kaXg`|pOQR#KΥ_j*e6X@Nl--E :K`ȓKIUe-Z:G5QV>xu}$.0fS7Wr $-~.t$ 3UQl a }4w*;KΈKWwUk_hx||]xBfY>luDFH OnC2UUz';|lwXjHQ~/񾪞+W@P~У2f3;KPqO1hs}o\x/xy *{ƕڝ.ҚPnWjc<6! ,> CƔ [TyyB ]|&wD:k\ȯPmӧ\tq(!I"tiGn26*B\{wM J1&4煸kEE:g/JFT0-եs[j M7\V݊M/Dr@7*5H&O8! 05XGܷ`8%f2ْBclǛUtW0qq }9HuΧy1,F<v4_ry|}^(4?Uּ͌xI+]0 Sa4̐WEB;y贮#94*RN8d%q/DEDPhcA_i¾1ң迲Ib)@͛)W1Dum?Q)3GoYA4tfeVpOz*]bǒD(a(xZE5,ScW2 lW{qi/rLB&ڊ*5{"2oUYYX8#];-v&%Ƕ0bA 5&2RK/I+T|.J19ؕxg=XlΤ\}1%S[ב:bePks{oX7[v*%1 M^f1Tcw#d:)ֶē5pŭs|w/Ne\8[_TJ:[Ν\,kHi#$D*śh(ׄZ O8? qzϔ-z5"2ƩDg -\Co$>G(9d@%'͚8My2jq)"/|%~.'i^`Rm[DbE z : Q&BTUjl&&ː =%~=B^OkԐщB$C83k>~ն=R ^%!q_"A?Ʊ$5V[+LՌE+FibFO/`.Iv*ⶶ/3h XmO rgl}9ଂƒTYԹݨ =bӛI%١a[n3vW2p⚖Qc׺ ;SC:xֳib*9#@}^' O??r!rFc6LR ~`|}bR*_O²yZH"*P1u6{P09GR S$4Kq~]#R#i([󄆓 ~,E'ə F -KA~@1A EdikHȦuIZ47v\<2!O4Nlp͇xBo?z*4'^`JCÚ *\$V uG<0Pz^?.3%K83˒09Ap- dyTx3Tݜ]q~8ۆ`՜/,=`8 pZ }8竡Pl#q'Mk4p| 9)l:1,7N;x`/5"-Rh"aǚ6 )ֳ88 6l |5h`rL>v=?dA[Kkn4~H8' Uq'y@Xzh8xUa,Lk</FK1ȹ!x6+|Ҟ:cTb3zMW)St 5.lڢ pPUŹk^aȺ j)54>܏in'XXpTH_gMM/xNFeK0-Y{ۋ`R/ol˯P NzvGZ\# s#ӳV>~"06LL}A}Xea}NMN6ji V`0g3n2$zA$Y2^ancmxWpp/P"U0 `-bR%8{Jz2@i9x*5MElcG nnIdh&qFpވL%' ro$x{XU u MLwo]>&ȾS ^PF(@hHtl Ru Qܘ AOlre+, ؅B7bAO"ƓTiϛu% 8%YOoEtӣk-NhIBy ~m15{KQNUD[F0nIbE][&PM?a؛]oHFGN9%y_jHGVMw'!7k""ƹٌV&AIh !g<ّxyNho)/<%ծcȋY myCk(/gɕWYi{'<{RCf)1%O<|9J: dg k9~׃[٫UQ#"] Os5}@GZ[$ TU#s3M+l9R%-{nԻDM7 m>tMC@Dnox3~?\ȗYJNxXyzf{9{3l);kQ/; 樴~[>l@a#=H)5sJ$ON`v86Lj@>)Ķ:^C> dA摊ējś=Ji \]x1 ى\gz eCtH 2>Ƈ9b֖?ŧ=Jo!d8Bm1-|@l- pjD/wR1n|hQ䤇n@/=>er1G;RM_ uBz)N>]r8s:Sߖ##-ı& 8.,b2ɺy\Y^sPݣqrH6kODsG<_<:dHNyzs$Ƚ ;gLdֻ@=|-7 gd +-B"$ٴ%)#&82H$4G_?d-y6BbA^NiI>-%8ˎ%Xt/?ӈ޲`,jS)2u6v+pyS<$Dy=pe,V\ҝggk5gٰ"#CfY3ܹ^Ҙa4,w$o/So(S79X.<$G۩T *hC3Gy N+\E8w14F 6?黋t/}ȝJXng m8H6ĭ<\\v-f1rFՇYS-^+NoYu,8Zخ+R=՘W.ݼd_b ׻sxM!tʫkp׆3*/'μ~ s=zhʌ3 Q04a`:{5z#<4:j~s҇%wawq nv@QCE'pI|d}QK-ٶ}jOVnKByV|S,i Ʃ֍%BG-x9Efmw tuQ E>Ñ7B9d^J9mMȢ٥zu)1rk} E'xT/uzpz(Rڪ@ ZnB0h,{hL 69/drZ,\B"(bz(Ɂ}kH@D@o{^ #DŽo t-1ti'|bspoZhe% a!Zʗ2V:ߜs3^/Y;랳SƳ^ H^+y1ՎHCLίB@K9ֿvUw>QLUnd,Sg0/NC/h+([9H@8l.v]*3A5qԄߊlj +|Qɧ?64 scqɘ>*} ئeJ\'A>i6o? "[)2z-˯A܍(S }89I}L;U/ȵxCnF"Ba\G;KVHeh%oj=X0H88SU!(8yHdx95Ұ@D 4\l Zʢ|4/fIhgظcAuxeJ%q+ڳSX0"Q fXIA,-۫okZf>'kk}8^Vorq븵Μ`7qKL<nj zJQqh1a%e~Uil tSkEU[-Trj :[VJp0DTfр:nÝ妙'4u43FFh ܌OtY! P=3pK,4i:p}H`DD\݌$xH0~0x鱍,KLf;#[8K }g~rCOs6Y.?ޝi K-g&dMQiͮnlB>Z$Ԉ)?s8o\64^vrSro{ǘ<)2acg[XV1[r◞=*Pd<СhEW!ݬ^-89/6 ^hQvQ+A q"P&@GvefKSಒTbh~Cͻ]V^N.A/Ki=~XveXm(~Z$?WW 59$^1Vs1`O.)p8sr[)Hn"j+eg׬*e!M+)AY6ENCPĕ7Bp*5lp!+HqpHt-zȳUQ"ߝ.> nڏވ妏C‚-8U>^O蛬!qw-ͲDFwq’qw`O< ߐєRV^1I_|1*~6xt5UU.{ǝgR|78%0ˆۢa ft@{Gɰ4y~Rt[DftϾ; H 918ZYMhqh!l)RA|"V+43 &/%' xv=<+|UrKNV9chMyƇDAg4ҘS}PbtTQFV1l_I+˓? ~ 0]G6r‡HU$2Je s*ͤ]6L'&5]f!6sˠj˱6!fPҴ{9y^əxB XמgN;+ *f7mPŽDz醊1WxנelvƙSHnWo+v-\"p$%b|J|6p0-3$2,k@\Ș1D Q%'B͹z7\@C0Rro]xMظvd4wLYfttQ!H؂d:1A<#4׉dend*2T֊xBC^o˴1zeUo~+qU*ё@]0d%K`!+:q5/:C#M$>MPK]z726yPWfrܰ ~Cuhnm6$gU;l0j3|iRoizh:h{>kmZAM^+:v @ޜkLRdT F fsz>ru ">gn&[) %wsNj},h+9VOapsMh EovpAII;wJ;shEl P#ͨQ1!/,) i 2^{T<'H@Psl6O 3t֨57\Re'+Yps::l~ag%Dc'{JtoM*C![Y*TVcV<8bYak@!RUj&0\_qǐ +֮S;rkj Y7hM(͜3<a\ˊ q $_] 3`Įz 0,)Ƴ%ZؿG,}AE}bW X.GGrT؃.$А}^RN=gSHu&"4*ͳ Kc-rȼXO31VH?$yCw9&&2ݓqY !ꔬ@dy^\ש[eQ66KSG쌨mG jws냮M#~4Hlx)NpK)vRvH|0*0}D.jN6a' +Nj:jHPoum;Hiea0vEj\$T m;ģ5cWV/_~*`;C-T I(53Q岱FMLA%U ]Tc/ @Umʌq6oӲxy NDXYgkFtV]{ճZC"Z$/|zC4?@l}F:bBa+ʧvPƪr|j]8XC!9,LD%;BBZ1=s`vW7i8o2ze6VPp#*x2u\ὯUSpAZZpFl_2m'KXm}2Y9^h:Pk6.[e' y:T "bYUb>>h.p6Z)Xtk |jQ6 s"/6| .C+=t0Ցmv`-uA9+jFn\pZ6=5b%YpNL_%Qþ$}|J`rP'5v/`Vl4("!ks2 MTb^ $MR^øO:gXR|yB:|bu!ҏ<nqzpJ3Á: Aq(kRW#aR-"QS't@&@_ڽ6`W\,a~g8{q gXLÖAYWzUJ-1 t:>|3E E}E0_>֍öߙ P\)>Ž<ɤ߇5[jwsUr#)R #+HwusjƺiuY`לAR#35 6^z&̌iFO7 dPڻϐ8r0a>U-fDm}qpAW2(|Y'7Ig8}7ԋK]Om]QIGW7vqtGC0&ˢ"5- /d-z0!);ZUe+xa:2@ަH0?e4zGvσ/SQ'ci#>s0@m7Ѩ\*$S }TJYZ4R'UٔsJIIS}09&zB.-vAML25=Ych\&.wco7_y+ 0C\B#sOj Qe8QCStzklX<1)({;&&?P!v<0"c 'J:,"po4?&W.f;T5%-](ZT6T)rO9dJw\PE% -z~# T^۶ 6AasKʄ@+v=wgK9R({+Kfɽ @j:OUAAH C3dTÔFHS%{ȩʖ.z*pܜc$%T=U8-,wM71&Ͼ%QcŦu\,.&@,UHp#^#Au;#RkmD40wsYˌ6 v Q vG:rw3뙻dTcyA4a|$ LLsc - M B mjGmy)pH IÙ_$>;Z~amBk/+zǀd`JH*W4BO۰sԢ|QF<w.aOJbԎ= L:{[!i8ځ8/ ZD [Sn<;ag_#2= Z6CF-(,*`vFFK٭/)j0JTKV=6ķcܿu=;Q7-F\f=8[5.X dbarU>Ό$̹mQ&dԧ$עw¨W߸LL ~\D}McWc Q]1H.W#TUUz-y sD;pgؔt:F<nҕؑڼәq pyz̗ԍ4hmmƝXa6-`PDh4C eGP/KMiJ" =\Ԭ/5g 40vIDw2KNܚhql/cҦTM<4 ' ξ*ٚlFrd -ј~#jV~`m}lV"E^powqG5O*jȾo ӛ,@ } WDiJ\Q4PJ^t-B8#~HAԊivɨȤg<I y%$GGUVDhP HB%䅜)?+ @[Q"v02EVbo@@kk=Aطڎ,5x^kX,fְ "t9aLΪ]HEz÷2^Jgye_D䪗oZ rz0jVu>JC@l`}J3pͦ0cqL!\`-mGȧa~sJ[`5A[i krKiWvmKs' BŅ$/`F1ո@^\&.b%>2sT|~1nj:iv|)Ll֧ X"3ºIY+@94?e+9{ibd/K-دS{le=)%,%(7,Q%[RS3f[Rԏb׿W9޸84>ȇxh6?ue0ڇ_y{tew'YHiLEF5r~z1Hg$g|95 |PzDX%]Uҹ4A+9yWY~3NO ^d_ye+:i#sF?*LHdR:o׌߾L(;wjbZvj@p f| x@9'>mQ\ϠI?n̴v:+jV )lOc[cډX´u_xq5T09%C~0 -74 IA^>uqzo;({ Zjr 6{ Qځ:UBnCBAHļKO L;{Rpg|jYa, !UykLlK-FOzOqKLv0U^BREAw*m\Y4>[0R:we܏{G`!֮" ER!iskH.mjB Թm^dv٤7Ó-d֔sgYv< h;9?{#Zg?)_E/Jy=1:[4y4MZ"})\jGL;%#: z\N$7nכfHs#4 @jH#r4.Z_IGkNEH=%6ŁSay)p/plS3 A710}使f# FO{G/~v,^ *]}gϴYAvn5UO`LC֒y^a 7'?DM<`8f;},)$Uxws0+\#\WXs-c YAժ"R;P\v%) hlbȬyn]e*q9*Mo{L~:CPYݻ[ګed q._e|ݪMLğUZeKAi'#e _f`!={s;bqJdg0;]b gNQEcp#$;?2=AUEgELf+wXOPiEg#rۍС$!41MB r_ȳc [&<K$ÚPQMc|P `_bQ2uX\ga_ tBe`Q( 6 b 'E,F"5((_h|OuLV%JlSv3RF.LuW8Hi`Ҹ 0!L6D(( qm\]+zOr 皅i{~dǑZ5xbՁR ,@mHI[Q)BX,1/a42 T^Ii0H@CԠcMMJNE64CXRXOdP=jff뤆/r\_CH(v^2#i 5Kg$i4>H? *\ZE8.4Xx~`74: G><ŒPft6o+fɲbTMt5;].??r . 7"JfW\v |1uf Gݕ TRu50A|Fٱh+jB Kdc1<=͌ӡT* &XU֤?hsj'rRj$8'HO L1RIC3.ZH']rC,!3t2D!՘ºi'Q" :Eoݨⵣ Q17¬r'>'9V$O<)d`*g:[E]9?EHnkt_?*+1"lN-'c.N~Ԙ<c2Y?X5~9C%*ݦ#jE{!ƙ*A ;aN,3 FWZf%u a˺}itVDB0I* rڎ q lavtab\^6>UW`i s%x0&fޑyۆx Fܿ6y$i:6(~Egb,cA)Wdm2SHYj8,)\pUڶ7d;jANdHЃ=uʳ$#%Uy RZ4/*p_%zzLI7M19@$.3WV2zp!Km|rd\z |sTb6l`,#$hʋ߃-1!\u0).i{1mݚ4::+&~XMuȖNl 2nFJ=tth^iJ5W0N_uX~ FgJ͟Ҹp!wYPZW͝˸ߩ2g*s3mPC3Ҩe&뫥2c$tdOf \B,ʗUxӒN$ MFP$1y%QЌK Ѡs`!NG <2V ֗o*.pTGUkJTӚ HKҼ Z^Bbi03?!:r/}>Gq\ѭZ xkvOI/u@M{h JC9mGI M7z=w+tl%dsg|n*¿mU6s{ڲoS tYɝK6;I7PuVom:*CDK&H--۬1<~34iL *T ϭ:,X4R< o- =$J̱%Q/5.ê7cOu.`_E`N#Vs9ߋkU4e;bgbm '4?JӠŅ00:$|`9%Y-/о2W#xdiO6A_#ÀcpK(3.}b*8Ʃzl l.Fݮ5g\MuUn/6!IapPۚ'۬BXBX ,njjOkZB(.hiӯ'MSy5kth'8i?5{$`&-;(ZҀ F;>ׅ5T!enX2pԠd̝ITu*_- # ψ2rFR@wO{co}hK;k`_̒(V@2CQ[ XD̨؄<ĉ[F^Yl3?{Zu5tOZi:{~諕bCoeh2}.Pqu{^aHI}2@8/Bu5PnBV 2oKiI/R#57^r7<>Z񶹙2?!X38 %ՇdJ^71de36%ӂ v@g).4*#g/ e<#-2Q-u2%0>EPS2w.2eᑓ' H窄mK `#w Je`2TWajg&s"SوM`Q7[JU&3*n*ȃ̽*A*/eh# JnwrZfQ IyȐ!#+.0z\\gH` *e_U[q?,\w;ƋҕCۉ#̗Ūc8w))Qc9d?42nݍ=aE J &cTșV&Z:KTrC[UXh2ii2(7Wl qI._bC 7p[etK1 0AέN=u7Dw,4OूCWպE7r EM$(DefQi/d9Oun=#^Pc^? 9s,=T I1Kg~7O.[n *L+q2%deMH$PIk.DWW 0" L ^d(ﳉ )LT Lmjmm{B\^:ܻ-#ݳRm\b Sm^/At%n@a Fi/23Q*->D2Bwّ?UwH*Nmj'-mWdm .>%DžYv.u*`q.(V'eٹ^^{)&?5}h~lnˤ I&dѰֆ\I[I.֪DghL2XGf$ܛ_>5ouTO9Z_:Z& e{%JΔ!ӎҤ8^#LyG>gc)OZ|Ml>.9B,o*qFFX qMcс_AD Tm@.F0n] Kaw,8k䄮Z.CI{ȋڰ!I2fu :\ic I?>LI:=Q=7 SLhi$5(8CLL0]w@_OCFأ5E-euakW擘'+9!YtC5J๹UK} ܚXDY$G/V&7_M=b` ffB+0 7%Ao18FuwK3pMFMGWuٍ@H kbjPxψ Ssɿ;-kuF2<$<7Ψ5d`̯#S7 g^At6oy= (жxw2%.eGv_ڑ-IP3X؃ ,ֺup˚wL) gv- K6jDNMqHrݣso{)N֦$#O47N1q†jJrV}5̱|@*hs95:30\wcӪe?N.㊋Z$g(3lAb;0Os3fF 8l=*l!zmcRDOl/¯&l;qYN3yc5sZq9:ߟ,Yc6V}(Vp yCUܖ+P A#Tˉ^}`5HDQPQ6ѥN{\w;:[;C]>;T~v٘1L]BⲵdӦ|NV[_D%(6Z;]2Tv6g'䖘諏Qg0iwp{tآ y,H-*}4]6dgQS6aM Uxnﵺ}>9g/8iYl /]3Q5>FqWwΌk1F__rfZ)5;V{cg'oiv\D q`@*F; kuWNLjȈӜ{&Opﾉl5ylO\u)ufx*{Q&"(,/r7XBbMk,r/A/kD p(Y[ eKߴϴF׼%&o;&Bkjsoe<OhmF2:(SЃa~<ȣ`U}{]IڕIE2%>n6kӭOep%}89W0N|e߲ғEk wB(0i|).AlQؑ2!fl!&%&a:>knh|hQ@ FU0 |-le& B&.N@WhO2RES C? t $SJwwsQ" 'CJ:+?Dg6j%Jk?ki'˜^ғ3#fg<̐[F!ySoti(<w\ :ЋWW[6ehoU{<)d|oM7-9Lpށ`gonFNȵ=+L| 6Rb#r)ΫkzVEHFHgUfCu߆x+$iQJP*ƕ E]9bON WX5 qHVFg)&ude8{i0bu%ZM**~G֌TzB> ā<ɪ SNc$A޵\hJ0>\kl=+ :ޓBMû KJdc-MrQSDfh{3(G*m.Ej0` GuPFzߤن7˖*]~2h:Uw2Ap 6@ՆۑbG{qڍ{N9l`]:C8?CC7^-1 P R2~ROc7T ,5)!wVK'虛J*c"]g[,fpי)(']ŏ1Oc?Y`h^AD̡r]i_9ӬCFg}a Us].S{óG\Ε̨d$CH_qQLAD~q}=ihzy?Lü-Bᛶ| }9sw/"]t5/̥T/sec&ma2&T{cwY#=5rRI60aasm ;!nJe28NIbFE/U2҅P0Z/W0%okQo@_ /rCvLhbJ\.R݋"@ȉwvRH~t}އB&zCaVU2f7G!T=$o}Ҁ`5jVMz⿍O3Ufom\SH"O'v;zZo$(DHUǛJ E4UȈk8!)f@-⟤~CJ?ewy&A*} {v$ZM|Cw?mⵛȀk$I8`QRtERUڀG1xH*W1 ;*z`(=Z% q&YEr:3y;zW@ G3Ob9q_bY7i-/bX6,z;nK761-̷{Pؿ@|ϼ ޘ<쵍.-<R:j>AR^G5B"nٳQZE WuBi .aKZ<?9w))Dnw <,YtNx%Q^ic~>4=7Jz#:;}' t /i7Q^N3V%B\3bI6 9!:&s3gݗ  ĜX0\y뷹)ͽK`f `A;8X`W|TOEn"3Tu䝅r9SFY2_ߥ39E_gE;oWnerIxg<%{Ĭj*N [OԌK^)XBu$Q נ ߌOPG`^="E%ֽ|To]='ؘ`ÿ=1Ck 2i5$vP;Mu(Fgm<~{kF92W],Z=(_:uf%n[bASНS.Q% dvDkyV"EĊ^ˋ4 %*9.sť!Ʀy ޫw>a^+Dw9 qɞew+0 }:ߢA4%DIiꙙހjY JBb}3|Sk7Yj/gEȫ1ٲW~"Iz vb 8IM5Sv$Oz6m=9$MEZMf/X:M:1J;]և< iULHt!Ur@3H^ĥlA |+S[U''RvcY-fzhX 2Ӕ2٩3*0+CTJ(iRwƢ& QLg]1Sj&}=Nn] gK\T eՌYN "M -'بsX/`« ('E$ԞYC5UC4[qL[R. rg~Zdd= )03KbحojQ֮mIk]Gy^-zz 1ʦh&5-k&WfG0O)[]'o  X0`5GY?NOQAQ)Rl5+J[<&|쒻Qlid8OD;3J5L 1"NX,>޳ʜl$w ^PX*#*"n06x:O:+!1 ]溁rgQ ӣF/bx%W TIeZꟳNctMNI3:0#?5ii^ 16r@¹ U?iZ+)J&<)UȌa:X\9qx,u5~ey{OYф·ə'Z PE; :PKG%̃G Θn =\ulXEri<'̖oeo⵪hbM}^{Zw.Vɧ#oߴ_{*=@ϑ Sxe(É,W 3ztpGZ]f9ܬp\CXcd ~Uغr!,)5r#, =;:y7e VsbK2ѱ 9ǠNubծ@WW>龵d(@,3ޒ2Uӧ#n<>'D"BnnTUH$90eL~"3ivgN`tw|CL+č p Vѕ-ȖE NS< pIntV䟬f[eAaF_?v`0K`_v>׻:C_U !5[J3mɦW%aTȫByHȗ^$Cx=颺 *<8JĬR4}aȚyh]{n75= ;dZ#m YscBGr_\5,\~(ciZ,EE+mmEDdH1fQO1ÈfjǹQ[5Kʼn /(hLΜ }sM*CTaゃ)T=6G,}l8nv1J٠[ћF\ H0\%]q:,wI=||3TZԓU$5>lhGEy}j}3OJʼnJ+au`K윎K kjމZUDzQBqI/=n lj5As7j r ˊM<5M0Hh[Qi9jKa1=-5=[`\Ĺ\ MS\leki#}SJ DG+Yn~mbq"D76#3jbXZXdUW 7 ȇ'mYBcV͂.c -ǝAc?/>+$<3n~$πqM~Ɛ|w])6ҭ灲f>tbȻ7sXE?%(C-j N=O<7JpL> ƱS9o{ CoPGzO۩Yձo5r^&ro'a'!ڨ[/|FijQ^yue'ΘJ`t3_P 8:}36Dn=y$ D sEH6iaIL=ܷ"cQ(3vߴ+{ucH'9Wa4dKq.k@T [YCi 6-灴V(ok {7@[`M۳Y=Zh'hM;L}o$<6'Fpz-VnޓF7mH~WH 2uc^D štx%#8'p$/c+C3e7ݖD#~0|+ qم~}MZlV%(13L7籛4 }*Iu?>'Tp5Et+P}qZ٪~{ YM1Mfʹ=sGt"P>E#&&)s3l~8 *? 2 P5y+5Ȩ )l7=^|+#iC/>Ril2܅ 4zko+BD""b;=2;#)KE$d[}XjUmgs-{ApF2cWWk\y Ҍɺ!쓇ʲ!MܛC MUvQ6%0bg 3O[ ].F,zSwSgS4a` HXHd%kxbxO/h'.;.XCG ݥăcgAc2A0'S:;f ]ȩqL:є s_hޭ8@:v)sWߌ9$Q$X어TlvQC2ݥ=퐤9 \jf\BejI F m #E أ!b WRCa:/j֪

z(+A}9*|[Ǥz}!Ȭ~DU&Co}Z?$;KS}?R}J_0$-g+哏AC= AWy q]fLHҳ b!onК!n:l*@MUA4rIEW{XٟKe2mlEq('Kf쵋[pQI-Hjt3RwF,00 40!$qf+oHI)<+Lﭺ, |J0\V/޹F ͠$h&Ow!vq2ݕPi|#3oF%JL||!{CYHjjoS<rJon_U㬿GĀh.m ~H=ҧNj1}Ld֎=9BjId9Sߌ+<}dl,;Ml}yK@el^c.} %N>grqxg1 .b/xPQ$dOŰnZ"Q@.|<pàcF,+" : #QOn_( (bo~JAuwߧر0qLj%R9b <ջIk բ.p Y3#{^s ̡Cr2{r.L <+y UW= f״x/5Ae! -'__FUwu _ Fm,~LB LaKmMizD#VNi8Uf) j;i,4҆M\Orq3/q?j,1T @V->Z} R=J @à ف,V5pev@p}UǏTuX0҇ daCi[F Wj؋bKLAcU|H@~r-QJCj\M9L8`1`sgQ|F-yS]7z*{z%RnR7NgX4s@zK=K۱A-p̸ րpL *\jwf6{nUpPI] *1EzKF&n{bpfQ' 4'#'\jC`PVvV}u^<'RG^tZ3ġh/P |s:UzdxzZȴ z)y@+-/y"և*Ne_l)p{C[>F>URgگ|bya  ;u0e$uU[M:qCI6UAʽk=p5Ji_&#?a\E23B?=X q]p)('JŇJŖ3Ԗv*T^Gß+P`"IOx(BCa8Jc}7 O< h6oۄa:qδZ/d=^VgmbEѓX09%k;V{H ?'ۍ7 7I( ?ާaJNXhSنdl4[ƮDKi˸ӕIG@W$~J P\9dmހFanIQ15>nS%_eo Qe#,v -Of2>\M ܟ}pe mo}J3Bckac[LˆF4\w|XQI L@:Fndb [ZRC~="J[_'CA 5M|\D6=|'4zxp(R֫~GzYiHOv7vjQQ"u`vﲮ4 \Zy{K6%$DmdILPOSI8k)5I~ԕ4$zܪFjh©Ч*Հ nw \ݐO>q;(4%if'wx/rpZ@@lߧK uǂ^" ^ ƢcBc´K<*5ΆЃw?3On=/^{by O"__Utg:0_Дv(sjI>HX"k,i̹CQ#*z8A& 3lšzgOvqY[Ej܃ƴ XsbLOY wSsOV*6[kryé<QX3\69Fsz ,.5Mߧm|n?L}{mcXF6de HD,m.ѥa(jC*mub3<~t4%>+)Mp>Z>['nmc{D,uƿbԷ37Q~"XI䖮KMLe1d?~6ʹtͪAZz*O}^9VK2`ީ0 |܎N5?)t]\4`xй nU_=*¤56S{\[9M5d}^q}*Qλ` {a2H7/-Mģ$Q L U>2hʜQ+@9\_9K},_5ѹ%:*2*ilSfH'hKAF&H(R>dմ˶Y&7Um|boue횛nlZƖpz[0k ˂Cwoޱb:Ag/`5W̆\a,1'siw5ʅ!nB{O%| ݾ훈@uNw:YyŔs;B>\M- iS rQ2 Kq>owL(qB ,\oEĶS}ۃ#'$}yPDti"!g_ܓ{PN0 rԍ*aBiv Z +Ppbˢ;,>7g>Dp?:ZHg]@Yw0H(ˎ++35Dr_'QY| ^çrKAi>@ $o"YI,l=&1-m  {{&wAsqoh0^ȈEʔMao)ᦺ(P!ĒBoo}{Vg9 k>Lh i3՜p[=K'f7f]4:́C4<]ks5kqիu[1PAA h^Zb9wzz?7`Diլ֍fjm/YKڄ\(CN̓k /"‡Zw_AA{ aAљ(9 _ڗėW{?H? o,v4Y#,_NX\B``?b]%N_4I:3ؚ\U>6Ụ vYn%NxFWPj;$&?x-it3.SA4<8,>Cef6 :WngMOaDFE~".:O~PZ6g/a/m&fZGfQ "Ap-ߪ JE?o/=J.q*ڎkx3ʠDui~x%l|G˵&Қ׭ 9 pWڷ88|3{2 e D+x" ц >2?;Ņv7gpK>20v:rоRmUopUOɢN-(R*(ZSڶ%sDo]> "2Z34`ETgq;#*J,@xںh{_h#fm)^zG̣]9w'V-\*ϒA=l1̀/9&K׼}`˳eN!%p*T60FmD\}^%M"V8IV߱}Kw*cF[4vXqe{,K^**7lk0^,Aaf‘ b3;2 o\ ~c>]8uZ$U*/;X~+KQMA+c"t{c_)HޟbAߦyWβSB3I*n}S$;ӮdP(ʊAۆd^Dk*XAD]ݼbRɼֆhe@IhV,em,tF3ߠ͉`AVf[W1R-<jx'i}:ŭ?Jvu<7SJi,@wwo.Iib6Niw)ϓ gN"\DCkPn I[W"¡Ac+xxL5z]u5ڡ61M,`g4}}3u>1Fs (DVg?Ô#P6Ob{4NN6Q`L]0 rl*R7O8;bO:y9>5_}(AEi|%aWU4Br%f e'fA_b]-DC{t>SFzb~'s_W;<*XOf ^&L:Tl"3,OUr@e 1L bvr0(‹{(_q z󓌞ԷW8%$Mq^Ҳ2J`.,4=hEjR%p uKEnt6pz2ؘ)[!z!Y5&y6X&D3qk|% !*"mD}jO[9rXBD1+$o+~>=>*) !LVR.gb5yGg"tSk'QJ q}dz)%bPsta~+Pp`@:c[y-ƴ&W`Y.o_vkQ,ûJ6VE3(>Z|_qfsT4?-(c2fkߊ>M$82xR!!wcy^_>hn%Q[2&e~"ʩ1xah ithW"hv9dZS(ʢMO!Ż@;Qz$Z ac cU+=t\7q&ftF-J5A7_K9f4OHsЛeYlKYf2qWGֺIҢ,xsz< :`Mx+!єA~4J]H) J EH^݁(56h],}lٝ#{xb{9"5acŴJ$7v`gY f1{"vXJ6}%IQLOn yE…T3[#Rbߢko[e;d5=QߣsCf󺖝zɽB)x=‹L/$oM.'.(1̼]RQ}"E:?Vu4à1WQeLj)~UXyP +}O1]5u#Gn{8:rD)T+Ak.V'`%bӜ0s@N7I4L ] *|E~8.g,?[QwT5xW/ׄbYA.c-!Q:n]֘ ;X}`;iT3:a xGϜw R%"yo(e!.'`f ~nʸSԜxP[O:UQ:(p%# +7-5 yXR;eUKv.>֥Ωy"'gڭo/^Jt"wsL&5Jkilk1zEH$j7Gbo?Rt('h'޸nQexL *wb0(YG*DF'F)ZU^L&J We1I8ҲWФ aJ{CLْN5 RH6F IUȉ.v2ѮQ7թI.6ݟGܲJDih?EBXSÀKGQ(r)`DEBMjVj!߸+m4CF2RX9gCqR]e&̧!m{Ǥy$Lbh[,O^< DX+-F\t쇡m"Zi&فJd7>跻kUSj| ﮪEtO|sE1,O5T)#-nd%y)j 4O$NI -xOQfVhWjk?4!;v܎"I&ޚ6yM}pQDÇwyJYIg]u$";?ڑ j?N ;qdzʝw2'5]wEúpK@ .xT/ Ω5*3wӵ;VJP!c!E>'wUdžZ;zP'n1/Y/$LFN{kY=`DIdX\QBjhPCc*C!&fCoQ_sҒ2p@dhb,;+4ȩ9i_~A6p~APh]}_VJأJΖlqr\0M7 +ϴ(w>"'T 3zǡ](5iZ֦,Y|,(cA=$LΠҌ^Lߕ磹[lPl9$WRZx=L(ի[3ϡ6,Fdd 2<֫;)=҇q~S4GAC^с;twi YQ)y 5}i4H=der,oQ`)DU+24nK*# KXOS v^5WJƀZ pzضOji]*<j凋+#@GWÝPJġ/O߁1Q1i/cby15p QF&FbsYWbaVkz5ŘB#]Hu\A:f% %*K ʕ3,"W"`^`c+#SAEj?u|.H EͲBoTW80#r]z) pʧf[oP (6Q ^*jucMdܛ=YmR7 NߟVč"N` 4gI}YjM+^޿ts?P)?1F1u1lid44;jM bl8jN.^%۵ oE|x 9B7BAُBK %Ivߠ sCRpT }tO+Z"de+ J۝՞k y,[]琹ztbe>`t4d;ڗrq*'#7'(%ҕ>wHSzo8ݥK,6.ʥ|3MɇmϸW3;:v7cnN|\_=.O~9 ]" wۥf)ZJeBCW<.:>R/鍿z B8k 䊎n.A03k^`^̪;;U+XX{|<7^a,#T˙s %'&/"DzV2Z:5d3)SSk'§-՛CX,8 *&h= 34 5%Rj:)/N:GdAdL'/q >oYm =;KnXmm0 O^ iX[ݙJ ^o rva0ZSy (d5I۸S%#*D'\j_lߘ<΢_|&ͼtjh;HX~ -VS_v8eZvh_`^Oiwkp*{&y?RxŠXk;?qpz5qz壣5=$ߨb4; (g]P1A1aLJ=k0;TkNدh!gݪ%s Y8W]9L5L5< p ݩ(N}B$=0bn/=yϒ )rLuAmʎkGJUCs_"\MۡS/1 E wzקhrzmk1E=;+ ƵgCQv /ŭIw989ᔖ3‰(q;:49")6Jui>O mP.ZoF{,HLƛ9D&LsAK")3'B>jeDL`ťg$y ~r6pmQO+Iہ>AR>j%m嶛VHjNIOƹ>p`:g !Ez_ l3 JBA H{%J_(R|nl>zimw;2I,"_@Zǹi-E:Əqtp?#C3~{J7}έOagUZ>8 ;4u QRkog~Pdğdju/5?v>2}ɴPD* EZ.i+o=>mѷ|Sus +z T@YGJ9ESAb_sIHJ )M'Ѹp1m˖%+wT`.X#10o] ;h{fo2a/$yO2>=|(jvHt|SC.W[^~znOST4eڧ$˭o 9 !݉ҰxwX,[Tli*5xpr5 ķf݅R6b%& 0gܧPW!1ooƽI@lZ:^XPemdA7~CaW 3gszU΍e-%T` mAgGV.93q͈@\c/=,etݏg"Ƽ@u:uԪr+}1-opLYbNdvшDB͉pr (@Z8D/JyYvm-Zߋ(y5K)2;[ǩBG\NWf!^gD^A=p0b@)/O|UA.'MD.dRJ< ;dLձIXzڎA:`x(_ `߀UN^ZP7 >ple^D'5SYm۹9yZ\BQw詂Ng VmKO?Ya̖{<ϱUUi 4ĪꟲND70tV\5UuTXO+ިgE [y[! #\{"&23/[ɏکw3~M5QV6ߴu Hi,9: KʷE|oC p9308翭mfەE(#Jgh8[ Bx>y2tұd(ۨt{󟜳H:׃a8LMfԞ4 >T)C45VVc3К(m{VJ]1ӣ9!A @$RZCs-k>ZZtnnH<t,#DIgyqk'5wZ550N.qrTHx?Ek}eXtqR^HQp?ؠ- \ [yc>Sf uꙂj$BL4u.#ٰ{_՘DN+[T6PIG 3"!dxo~1HCihNX]Z ȝUƕRLRw/UR$Β+!;8C_vh\>0/LG5¿-_>:v?3G[:E;kŋ89ν~1Bf+[c0YX5洟7 AVOIcK韶žJT5fiH2;Tg}_؂buAb6=p`?a&ۍq iJ+|"g|x1M|+V2)rxMI( ;ly"ڙ"8)uay2)0\Ÿ(FypMz ~!*k3]FZ5ow',d+h$L+ hqHCQ8O%t!my|b; AҢ*I'S/OGHFg"nIH*T`ʎ"m'RtmIW6͈}m%!i I~h6̶uVɇ\q_ǵ1GCrh m[ m$Nȫ/3|ref7F{q}rG3.=E Y~Y5@N'{E}r3< l|wWuOY+TuBK"C S'Cju,ΰ秀:Yw , 10EaM :KWw,To9]IumQl-){JJAkSUO|t/$Q7Vp;BPqK/y4@TY؃(e @b7XZ(lNFTnϒqv7w;jP M3Ƶ%$ ~5@UnFXWKrf:-k#H1L*7wZp)-s|NDF.A9'^-!os4$ԟ'KO:zq )5U qk`}ڧL죺MaXjqlq#zO+ 1;zƢ0 W.T:Z0zo*-7@7'+T.{Eas=6L͘Ut ԷnvO TW BBt,h@PʶJj~Н@j77q>ƯG_ky%'s 0_ v{Fn~rnhП#z3% m咥RjxpPѕnϓSۛ<8ߛF{M*~#(..Î`Q뾳mಠOR}'z+M?–F}%q\s2Tnރ%`-JUb.i6QA 1b Mlֺg\eN2ޔ$xd3pEr_ yЇ-\# uD ӤBE⋍(vo?),]|rL9,؍}IVȢVQ &WgGL6O?GEd{h/dȩin6胍(_'W~-Hbeq',xdN LmC{|V!*d"BRZa+Q-ںkD|Rs0kN*n~=!=!,g禸eaS(m[>hs +Dqv!A*4XRl-O ё=u2j)*Lb[)UO,Aכ?KNiۓEp0-VSNj ]߻1|[fF%SD9󢥨TMUZhqL4Z1\m/SJYX>5]3=8pMwŕ Kf`>sl3~:DrN-2# %K0ٰoEmF-w΄ $JCd̏kA-T FW)d$70z`7lc<.6y# _]=rzepO66ʶ!N T96!3N),=|h+z@#l*>s(';BG,t gg3;VoS >hЭcK۔LIQɠ+׍Ĩ[ZbiS5+śveo'y"S^_ɳf@N|H)kQ{Ǩ'/Rԧ29Q+X ,T;`S;i/Y`یB}'54[N@EygKz+''i:`%WdQzo},}4']oUX ܐ{u\`|jMxJ )E6!͗~eB8ҠP;M݈UF(|ԝ wC!sJ!zqvC$A"(ř ~^ܯ#2vd1-y}Ffu~ZǔBEWw8rMH*!6a'Upht[[G rrIp_lWe;<>+`Iiewt ,_sTxUxBaJ޻K…bZ1PqS10ur2a5A hMт= -O7bWo|5?-2va5Lq cB}lmp^%i.vYL(JA?gz |AОe3 T{Wf ba7SK<c7RÓK=vD $ZtݦL:CDh Ӳ FNs6.x#z7h  ڰSp'tAYe0< eaz{[+ani ߋF'.^EfY7Eu uBf8Je \4*WreXTt]~H@ \gl/!ۉVN%0%˺ ة*wzarkP _z]./:=Y39cLm^c 8j`˃ArcKvug:Yf~k" ?7X(nKl-Bb! V 3?ښFJ#; U{rv>tt=, ʌ=Ʀ@ &D1fKBO  NM MZ #Twv1m?R lGߟ^~k94 VXe7h8'ߠ@No5 8w"FI*¾6]I&rC> %*zz) aPOlN^n g6Kx`| w19d{8|(/*s1k^Ai5Tq1C'=a:V>\et1%kZ[Lj )+2:͚9tC\C+RΗC7$Eg!Eg|FAp(6]]?t&"hssvϝF-"- NT){Y2A OK]< C]?;̄ I|*\۴n4=&ϒR\4LYhj#} 㮀??4"NIr3 ,WW6~[ҾS{^%z E0>c$Q\Y&~A1g7F_#B G-J3I0W2+0N_5ӰG0T]9wcNwX_5qId*[hiTHw֒O rQƽ Kli궨"Q7u}x*'9ø2"(UkaTinĤZ_ qZd?"\Ǹ^l5>~)خHM5-'֞G]HZЫSsԘ&%+ee۠20kR8~k{أ(TA Kw9+ZKZd ,'|#'j*fOH)\arj24~;17F†`#83ifJ{ϠU 2Bu \+Y t."Fh%#UdT!!BEK)z!m 5z/,q`)9Ryx?\fK rX|+2ւ~Fg5IlU{^pM/*KPqgk6~qi$T,#MG*[E L7@f'β^ nGIfsFG4@I}6ljn96&H"bV薇vo8.K{-py뫊2q\~3,ofG%HMΏ ʢo*!}Їz9Y583|Swy;;XwZEb3G-hO`LwnvȌ̸U2-h}pPcd>pY/S ~{NӓZL.9M*Og%lbߤq:cz)6,~A: 1Фܾb7f2#"ϓLځ ,F%IO`}ey=hd0+/|]"k`ə\M~aIo.`!a+޻# z>S-V]f nl 'Pߕ|?FJik,+Z) ny4wjU@TAaG>qf]:e!#em )ū')5)@F \†@6 g=-{aEc^教 $遶[i>,T<ۍbGڍ$tEySf͋)"A}lِISJXo P֫@E\81`0B .J(wD "lWn3@?!aa5:L l֥cbd27Pmd$c!(v+0:B{Tp-6!ah%M *#hN8&FxQ[<&q`mѺS*rǬ4˃7]ڋr\ 7[o:R( w;{te )8SJ2΋*gO0s]/f^͉:+ZJ׳{@&`c&Gy"€FV׀lqd%l@nfޛ~a3Lj\|n:P\O~H_PƟTKsλ/.qdDо+!o]8zLE egc98XqDȏ1"vy@gKwg 3`f苖] 恴xzl}'eZ=KȈF0nѭt RD+ j *9F Z5 `lNЄKH@Wf?֏oh)TqixXZsX"m>hPq:7iNcѢ^FXNb;f@xd7ۄG'Wvbq|A(K4U` NYUZRf]RJߍ''9!j\͑)e]a6_s R̦20CJ!B7娑+A!CYP0.<#*] mygþXؗ6JOoz4'暯##$޹MQ@a  JffpȒY$;ƪ6 3!9/F%K7-&uCc<W Q.Ϊ//Ue/"T;[:6"qQgmYWw *ZG e%ַ#oP+-}]Zn~< to݅ ZCLȬV݁x$4Iz[cP^3~<ҙy&%܈VQX5XgL"xjA\9O!6Y[" !גS5?]8ivf$-ueuvA A I+orT==2kicrap։?|8˒f+T0uUHLN>pN q|,|Hgf5i?g#F$@GCB|cIVÌ0䝜A\j%Xn<׋g"Q_m@ "ims84bvG tU[xk?MeӁ֚Ѽc޾FNvȗ(Μ먽r Ca-!pul]{r " <h7ys fPKj/NX 5)HʰJj똟/PY:/tUEEwiRܡmQ8ֈV68™:.|jBbXA}pdkqJZO kV< MH8IIH2Bп~D?jX-D lFhO'`s*ϼ>e䃂*fRAi̙-R]8pw'㉕aJqcLXƈg+>~bm5@q8MjSGEm*YYCB*~ ĥ9=;,o]~\[5@aA`'yPj|/wRUP9vQoro>w6-c"WGmbhOTyd@`FǠ1hLǘvjc3,+Y8է (? YZ