From 88bd4cb0ea26da05bc9507d785b08b4e3162980c Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Wed, 17 Aug 2016 10:39:45 +0200 Subject: [PATCH 01/13] Merge pull request #25704 from thaJeztah/cleanup-api-markdown Cleanup API docs Markdown formatting and wording (cherry picked from commit 45cb33e65ca5bb247e2e9f425b4441ad6a08aa51) Signed-off-by: Charles Smith --- docs/reference/api/docker_remote_api_v1.18.md | 494 +- docs/reference/api/docker_remote_api_v1.19.md | 89 +- docs/reference/api/docker_remote_api_v1.20.md | 88 +- docs/reference/api/docker_remote_api_v1.21.md | 108 +- docs/reference/api/docker_remote_api_v1.22.md | 83 +- docs/reference/api/docker_remote_api_v1.23.md | 96 +- docs/reference/api/docker_remote_api_v1.24.md | 110 +- docs/reference/api/docker_remote_api_v1.25.md | 5280 +++++++++++++++++ 8 files changed, 5808 insertions(+), 540 deletions(-) create mode 100644 docs/reference/api/docker_remote_api_v1.25.md diff --git a/docs/reference/api/docker_remote_api_v1.18.md b/docs/reference/api/docker_remote_api_v1.18.md index f07008cd10..3daf78850e 100644 --- a/docs/reference/api/docker_remote_api_v1.18.md +++ b/docs/reference/api/docker_remote_api_v1.18.md @@ -127,129 +127,128 @@ Create a container **Example request**: - POST /containers/create HTTP/1.1 - Content-Type: application/json + POST /containers/create HTTP/1.1 + Content-Type: application/json - { - "Hostname": "", - "Domainname": "", - "User": "", - "AttachStdin": false, - "AttachStdout": true, - "AttachStderr": true, - "Tty": false, - "OpenStdin": false, - "StdinOnce": false, - "Env": [ - "FOO=bar", - "BAZ=quux" - ], - "Cmd": [ - "date" - ], - "Entrypoint": null, - "Image": "ubuntu", - "Labels": { - "com.example.vendor": "Acme", - "com.example.license": "GPL", - "com.example.version": "1.0" - }, - "Volumes": { - "/tmp": {} - }, - "WorkingDir": "", - "NetworkDisabled": false, - "MacAddress": "12:34:56:78:9a:bc", - "ExposedPorts": { - "22/tcp": {} - }, - "HostConfig": { - "Binds": ["/tmp:/tmp"], - "Links": ["redis3:redis"], - "LxcConf": {"lxc.utsname":"docker"}, - "Memory": 0, - "MemorySwap": 0, - "CpuShares": 512, - "CpusetCpus": "0,1", - "PidMode": "", - "PortBindings": { "22/tcp": [{ "HostPort": "11022" }] }, - "PublishAllPorts": false, - "Privileged": false, - "ReadonlyRootfs": false, - "Dns": ["8.8.8.8"], - "DnsSearch": [""], - "ExtraHosts": null, - "VolumesFrom": ["parent", "other:ro"], - "CapAdd": ["NET_ADMIN"], - "CapDrop": ["MKNOD"], - "RestartPolicy": { "Name": "", "MaximumRetryCount": 0 }, - "NetworkMode": "bridge", - "Devices": [], - "Ulimits": [{}], - "LogConfig": { "Type": "json-file", Config: {} }, - "SecurityOpt": [], - "CgroupParent": "" - } - } + { + "Hostname": "", + "Domainname": "", + "User": "", + "AttachStdin": false, + "AttachStdout": true, + "AttachStderr": true, + "Tty": false, + "OpenStdin": false, + "StdinOnce": false, + "Env": [ + "FOO=bar", + "BAZ=quux" + ], + "Cmd": [ + "date" + ], + "Entrypoint": null, + "Image": "ubuntu", + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "Volumes": { + "/volumes/data": {} + }, + "WorkingDir": "", + "NetworkDisabled": false, + "MacAddress": "12:34:56:78:9a:bc", + "ExposedPorts": { + "22/tcp": {} + }, + "HostConfig": { + "Binds": ["/tmp:/tmp"], + "Links": ["redis3:redis"], + "LxcConf": {"lxc.utsname":"docker"}, + "Memory": 0, + "MemorySwap": 0, + "CpuShares": 512, + "CpusetCpus": "0,1", + "PidMode": "", + "PortBindings": { "22/tcp": [{ "HostPort": "11022" }] }, + "PublishAllPorts": false, + "Privileged": false, + "ReadonlyRootfs": false, + "Dns": ["8.8.8.8"], + "DnsSearch": [""], + "ExtraHosts": null, + "VolumesFrom": ["parent", "other:ro"], + "CapAdd": ["NET_ADMIN"], + "CapDrop": ["MKNOD"], + "RestartPolicy": { "Name": "", "MaximumRetryCount": 0 }, + "NetworkMode": "bridge", + "Devices": [], + "Ulimits": [{}], + "LogConfig": { "Type": "json-file", "Config": {} }, + "SecurityOpt": [], + "CgroupParent": "" + } + } **Example response**: - HTTP/1.1 201 Created - Content-Type: application/json + HTTP/1.1 201 Created + Content-Type: application/json - { - "Id":"e90e34656806", - "Warnings":[] - } + { + "Id":"e90e34656806", + "Warnings":[] + } **JSON parameters**: -- **Hostname** - A string value containing the desired hostname to use for the +- **Hostname** - A string value containing the hostname to use for the container. -- **Domainname** - A string value containing the desired domain name to use +- **Domainname** - A string value containing the domain name to use for the container. -- **User** - A string value containing the user to use inside the container. -- **AttachStdin** - Boolean value, attaches to stdin. -- **AttachStdout** - Boolean value, attaches to stdout. -- **AttachStderr** - Boolean value, attaches to stderr. -- **Tty** - Boolean value, Attach standard streams to a tty, including stdin if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, -- **StdinOnce** - Boolean value, close stdin after the 1 attached client disconnects. +- **User** - A string value specifying the user inside the container. +- **AttachStdin** - Boolean value, attaches to `stdin`. +- **AttachStdout** - Boolean value, attaches to `stdout`. +- **AttachStderr** - Boolean value, attaches to `stderr`. +- **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. +- **OpenStdin** - Boolean value, opens `stdin`, +- **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` -- **Labels** - Adds a map of labels that to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` +- **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` - **Cmd** - Command to run specified as a string or an array of strings. -- **Entrypoint** - Set the entrypoint for the container a string or an array - of strings -- **Image** - String value containing the image name to use for the container -- **Volumes** – An object mapping mountpoint paths (strings) inside the +- **Entrypoint** - Set the entry point for the container as a string or an array + of strings. +- **Image** - A string specifying the image name to use for the container. +- **Volumes** - An object mapping mount point paths (strings) inside the container to empty objects. -- **WorkingDir** - A string value containing the working dir for commands to +- **WorkingDir** - A string specifying the working directory for commands to run in. - **NetworkDisabled** - Boolean value, when true disables networking for the container - **ExposedPorts** - An object mapping ports to an empty object in the form of: `"ExposedPorts": { "/: {}" }` - **HostConfig** - - **Binds** – A list of volume bindings for this container. Each volume - binding is a string of the form `container_path` (to create a new - volume for the container), `host_path:container_path` (to bind-mount - a host path into the container), or `host_path:container_path:ro` - (to make the bind-mount read-only inside the container). + - **Binds** – A list of volume bindings for this container. Each volume binding is a string in one of these forms: + + `container_path` to create a new volume for the container + + `host_path:container_path` to bind-mount a host path into the container + + `host_path:container_path:ro` to make the bind-mount read-only inside the container. - **Links** - A list of links for the container. Each link entry should be in the form of `container_name:alias`. - - **LxcConf** - LXC specific configurations. These configurations will only + - **LxcConf** - LXC specific configurations. These configurations only work when using the `lxc` execution driver. - **Memory** - Memory limit in bytes. - **MemorySwap** - Total memory limit (memory + swap); set `-1` to enable unlimited swap. You must use this with `memory` and make the swap value larger than `memory`. - - **CpuShares** - An integer value containing the CPU Shares for container + - **CpuShares** - An integer value containing the container's CPU Shares (ie. the relative weight vs other containers). - - **CpusetCpus** - String value containing the cgroups CpusetCpus to use. + - **CpusetCpus** - String value containing the `cgroups CpusetCpus` to use. - **PidMode** - Set the PID (Process) Namespace mode for the container; `"container:"`: joins another container's PID namespace `"host"`: use the host's PID namespace inside the container - **PortBindings** - A map of exposed container ports and the host port they - should map to. It should be specified in the form + should map to. A JSON object in the form `{ /: [{ "HostPort": "" }] }` Take note that `port` is specified as a string and not an integer value. - **PublishAllPorts** - Allocates a random host port for all of a container's @@ -258,9 +257,9 @@ Create a container a boolean value. - **ReadonlyRootfs** - Mount the container's root filesystem as read only. Specified as a boolean value. - - **Dns** - A list of dns servers for the container to use. + - **Dns** - A list of DNS servers for the container to use. - **DnsSearch** - A list of DNS search domains - - **ExtraHosts** - A list of hostnames/IP mappings to be added to the + - **ExtraHosts** - A list of hostnames/IP mappings to add to the container's `/etc/hosts` file. Specified in the form `["hostname:IP"]`. - **VolumesFrom** - A list of volumes to inherit from another container. Specified in the form `[:]` @@ -276,19 +275,19 @@ Create a container is added before each restart to prevent flooding the server. - **NetworkMode** - Sets the networking mode for the container. Supported values are: `bridge`, `host`, `none`, and `container:` - - **Devices** - A list of devices to add to the container specified in the - form + - **Devices** - A list of devices to add to the container specified as a JSON object in the + form `{ "PathOnHost": "/dev/deviceName", "PathInContainer": "/dev/deviceName", "CgroupPermissions": "mrw"}` - - **Ulimits** - A list of ulimits to be set in the container, specified as + - **Ulimits** - A list of ulimits to set in the container, specified as `{ "Name": , "Soft": , "Hard": }`, for example: `Ulimits: { "Name": "nofile", "Soft": 1024, "Hard": 2048 }` - **SecurityOpt**: A list of string values to customize labels for MLS systems, such as SELinux. - - **LogConfig** - Log configuration for the container, specified as + - **LogConfig** - Log configuration for the container, specified as a JSON object in the form `{ "Type": "", "Config": {"key1": "val1"}}`. Available types: `json-file`, `syslog`, `journald`, `none`. `json-file` logging driver. - - **CgroupParent** - Path to cgroups under which the cgroup for the container will be created. If the path is not absolute, the path is considered to be relative to the cgroups path of the init process. Cgroups will be created if they do not already exist. + - **CgroupParent** - Path to `cgroups` under which the container's `cgroup` is created. If the path is not absolute, the path is considered to be relative to the `cgroups` path of the init process. Cgroups are created if they do not already exist. **Query parameters**: @@ -424,7 +423,7 @@ Return low-level information on the container `id` "Paused": false, "Pid": 0, "Restarting": false, - "Running": false, + "Running": true, "StartedAt": "2015-01-06T15:47:32.072697474Z" }, "Volumes": {}, @@ -525,12 +524,12 @@ Get `stdout` and `stderr` logs from the container ``id`` **Query parameters**: -- **follow** – 1/True/true or 0/False/false, return stream. Default false -- **stdout** – 1/True/true or 0/False/false, show stdout log. Default false -- **stderr** – 1/True/true or 0/False/false, show stderr log. Default false +- **follow** – 1/True/true or 0/False/false, return stream. Default `false`. +- **stdout** – 1/True/true or 0/False/false, show `stdout` log. Default `false`. +- **stderr** – 1/True/true or 0/False/false, show `stderr` log. Default `false`. - **timestamps** – 1/True/true or 0/False/false, print timestamps for - every log line. Default false -- **tail** – Output specified number of lines at the end of logs: `all` or ``. Default all + every log line. Default `false`. +- **tail** – Output specified number of lines at the end of logs: `all` or ``. Default all. **Status codes**: @@ -612,79 +611,79 @@ This endpoint returns a live stream of a container's resource usage statistics. **Example request**: - GET /containers/redis1/stats HTTP/1.1 + GET /containers/redis1/stats HTTP/1.1 **Example response**: - HTTP/1.1 200 OK - Content-Type: application/json + HTTP/1.1 200 OK + Content-Type: application/json - { - "read" : "2015-01-08T22:57:31.547920715Z", - "network" : { - "rx_dropped" : 0, - "rx_bytes" : 648, - "rx_errors" : 0, - "tx_packets" : 8, - "tx_dropped" : 0, - "rx_packets" : 8, - "tx_errors" : 0, - "tx_bytes" : 648 - }, - "memory_stats" : { - "stats" : { - "total_pgmajfault" : 0, - "cache" : 0, - "mapped_file" : 0, - "total_inactive_file" : 0, - "pgpgout" : 414, - "rss" : 6537216, - "total_mapped_file" : 0, - "writeback" : 0, - "unevictable" : 0, - "pgpgin" : 477, - "total_unevictable" : 0, - "pgmajfault" : 0, - "total_rss" : 6537216, - "total_rss_huge" : 6291456, - "total_writeback" : 0, - "total_inactive_anon" : 0, - "rss_huge" : 6291456, - "hierarchical_memory_limit" : 67108864, - "total_pgfault" : 964, - "total_active_file" : 0, - "active_anon" : 6537216, - "total_active_anon" : 6537216, - "total_pgpgout" : 414, - "total_cache" : 0, - "inactive_anon" : 0, - "active_file" : 0, - "pgfault" : 964, - "inactive_file" : 0, - "total_pgpgin" : 477 - }, - "max_usage" : 6651904, - "usage" : 6537216, - "failcnt" : 0, - "limit" : 67108864 - }, - "blkio_stats" : {}, - "cpu_stats" : { - "cpu_usage" : { - "percpu_usage" : [ - 16970827, - 1839451, - 7107380, - 10571290 - ], - "usage_in_usermode" : 10000000, - "total_usage" : 36488948, - "usage_in_kernelmode" : 20000000 - }, - "system_cpu_usage" : 20091722000000000, - "throttling_data" : {} - } - } + { + "read" : "2015-01-08T22:57:31.547920715Z", + "network" : { + "rx_dropped" : 0, + "rx_bytes" : 648, + "rx_errors" : 0, + "tx_packets" : 8, + "tx_dropped" : 0, + "rx_packets" : 8, + "tx_errors" : 0, + "tx_bytes" : 648 + }, + "memory_stats" : { + "stats" : { + "total_pgmajfault" : 0, + "cache" : 0, + "mapped_file" : 0, + "total_inactive_file" : 0, + "pgpgout" : 414, + "rss" : 6537216, + "total_mapped_file" : 0, + "writeback" : 0, + "unevictable" : 0, + "pgpgin" : 477, + "total_unevictable" : 0, + "pgmajfault" : 0, + "total_rss" : 6537216, + "total_rss_huge" : 6291456, + "total_writeback" : 0, + "total_inactive_anon" : 0, + "rss_huge" : 6291456, + "hierarchical_memory_limit" : 67108864, + "total_pgfault" : 964, + "total_active_file" : 0, + "active_anon" : 6537216, + "total_active_anon" : 6537216, + "total_pgpgout" : 414, + "total_cache" : 0, + "inactive_anon" : 0, + "active_file" : 0, + "pgfault" : 964, + "inactive_file" : 0, + "total_pgpgin" : 477 + }, + "max_usage" : 6651904, + "usage" : 6537216, + "failcnt" : 0, + "limit" : 67108864 + }, + "blkio_stats" : {}, + "cpu_stats" : { + "cpu_usage" : { + "percpu_usage" : [ + 16970827, + 1839451, + 7107380, + 10571290 + ], + "usage_in_usermode" : 10000000, + "total_usage" : 36488948, + "usage_in_kernelmode" : 20000000 + }, + "system_cpu_usage" : 20091722000000000, + "throttling_data" : {} + } + } **Status codes**: @@ -1209,22 +1208,22 @@ or being killed. - **dockerfile** - Path within the build context to the Dockerfile. This is ignored if `remote` is specified and points to an individual filename. -- **t** – repository name (and optionally a tag) to be applied to - the resulting image in case of success -- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the - URI specifies a filename, the file's contents are placed into a file - called `Dockerfile`. -- **q** – suppress verbose build output -- **nocache** – do not use the cache when building the image -- **pull** - attempt to pull the image even if an older image exists locally -- **rm** - remove intermediate containers after a successful build (default behavior) -- **forcerm** - always remove intermediate containers (includes rm) -- **memory** - set memory limit for build +- **t** – A name and optional tag to apply to the image in the `name:tag` format. + If you omit the `tag` the default `latest` value is assumed. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. +- **q** – Suppress verbose build output. +- **nocache** – Do not use the cache when building the image. +- **pull** - Attempt to pull the image even if an older image exists locally. +- **rm** - Remove intermediate containers after a successful build (default behavior). +- **forcerm** - Always remove intermediate containers (includes `rm`). +- **memory** - Set memory limit for build. - **memswap** - Total memory (memory + swap), `-1` to enable unlimited swap. -- **cpushares** - CPU shares (relative weight) -- **cpusetcpus** - CPUs in which to allow execution, e.g., `0-3`, `0,1` +- **cpushares** - CPU shares (relative weight). +- **cpusetcpus** - CPUs in which to allow execution (e.g., `0-3`, `0,1`). - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – base64-encoded ConfigFile object @@ -1238,7 +1237,7 @@ or being killed. `POST /images/create` -Create an image, either by pulling it from the registry or by importing it +Create an image either by pulling it from the registry or by importing it **Example request**: @@ -1266,7 +1265,7 @@ a base64-encoded AuthConfig object. - **repo** – Repository name. - **tag** – Tag. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object @@ -1293,35 +1292,33 @@ Return low-level information on the image `name` Content-Type: application/json { - "Created": "2013-03-23T22:24:18.818426-07:00", - "Container": "3d67245a8d72ecf13f33dffac9f79dcdf70f75acb84d308770391510e0c23ad0", - "ContainerConfig": - { - "Hostname": "", - "User": "", - "AttachStdin": false, - "AttachStdout": false, - "AttachStderr": false, - "PortSpecs": null, - "Tty": true, - "OpenStdin": true, - "StdinOnce": false, - "Env": null, - "Cmd": ["/bin/bash"], - "Dns": null, - "Image": "ubuntu", - "Labels": { - "com.example.vendor": "Acme", - "com.example.license": "GPL", - "com.example.version": "1.0" - }, - "Volumes": null, - "VolumesFrom": "", - "WorkingDir": "" - }, - "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", - "Parent": "27cf784147099545", - "Size": 6824592 + "Created": "2013-03-23T22:24:18.818426-07:00", + "Container": "3d67245a8d72ecf13f33dffac9f79dcdf70f75acb84d308770391510e0c23ad0", + "ContainerConfig": { + "Hostname": "", + "User": "", + "AttachStdin": false, + "AttachStdout": false, + "AttachStderr": false, + "Tty": true, + "OpenStdin": true, + "StdinOnce": false, + "Env": null, + "Cmd": ["/bin/bash"], + "Dns": null, + "Image": "ubuntu", + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "Volumes": null, + "VolumesFrom": "", + "WorkingDir": "" + }, + "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", + "Parent": "27cf784147099545", + "Size": 6824592 } **Status codes**: @@ -1346,16 +1343,16 @@ Return the history of the image `name` Content-Type: application/json [ - { - "Id": "b750fe79269d", - "Created": 1364102658, - "CreatedBy": "/bin/bash" - }, - { - "Id": "27cf78414709", - "Created": 1364068391, - "CreatedBy": "" - } + { + "Id": "b750fe79269d", + "Created": 1364102658, + "CreatedBy": "/bin/bash" + }, + { + "Id": "27cf78414709", + "Created": 1364068391, + "CreatedBy": "" + } ] **Status codes**: @@ -1384,9 +1381,9 @@ Push the image `name` on the registry {"error": "Invalid..."} ... -If you wish to push an image on to a private registry, that image must already have been tagged -into a repository which references that registry host name and port. This repository name should -then be used in the URL. This mirrors the flow of the CLI. +If you wish to push an image on to a private registry, that image must already have a tag +into a repository which references that registry `hostname` and `port`. This repository name should +then be used in the URL. This duplicates the command line's flow. **Example request**: @@ -1397,10 +1394,9 @@ then be used in the URL. This mirrors the flow of the CLI. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: -- **X-Registry-Auth** – Include a base64-encoded AuthConfig. - object. +- **X-Registry-Auth** – base64-encoded AuthConfig object. **Status codes**: @@ -1490,25 +1486,25 @@ Search for an image on [Docker Hub](https://hub.docker.com). [ { - "description": "", + "star_count": 12, "is_official": false, - "is_automated": false, "name": "wma55/u1210sshd", - "star_count": 0 + "is_automated": false, + "description": "" }, { - "description": "", + "star_count": 10, "is_official": false, - "is_automated": false, "name": "jdswinbank/sshd", - "star_count": 0 + "is_automated": false, + "description": "" }, { - "description": "", + "star_count": 18, "is_official": false, - "is_automated": false, "name": "vgauthier/sshd", - "star_count": 0 + "is_automated": false, + "description": "" } ... ] @@ -1536,8 +1532,8 @@ Get the default username and email Content-Type: application/json { - "username":" hannibal", - "password: "xxxx", + "username": "hannibal", + "password": "xxxx", "email": "hannibal@a-team.com", "serveraddress": "https://index.docker.io/v1/" } @@ -1741,7 +1737,7 @@ Docker containers report the following events: create, destroy, die, exec_create, exec_start, export, kill, oom, pause, restart, start, stop, unpause -and Docker images report: +Docker images report the following events: untag, delete @@ -1803,7 +1799,7 @@ See the [image tarball format](#image-tarball-format) for more details. - **200** – no error - **500** – server error -### Get a tarball containing all images. +### Get a tarball containing all images `GET /images/get` diff --git a/docs/reference/api/docker_remote_api_v1.19.md b/docs/reference/api/docker_remote_api_v1.19.md index 5a750a3765..1bf512bead 100644 --- a/docs/reference/api/docker_remote_api_v1.19.md +++ b/docs/reference/api/docker_remote_api_v1.19.md @@ -218,7 +218,7 @@ Create a container - **AttachStdout** - Boolean value, attaches to `stdout`. - **AttachStderr** - Boolean value, attaches to `stderr`. - **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, +- **OpenStdin** - Boolean value, opens `stdin`, - **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` - **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` @@ -328,7 +328,7 @@ Return low-level information on the container `id` HTTP/1.1 200 OK Content-Type: application/json - { + { "AppArmorProfile": "", "Args": [ "-c", @@ -437,7 +437,7 @@ Return low-level information on the container `id` "Paused": false, "Pid": 0, "Restarting": false, - "Running": false, + "Running": true, "StartedAt": "2015-01-06T15:47:32.072697474Z" }, "Volumes": {}, @@ -1250,8 +1250,8 @@ or being killed. - **dockerfile** - Path within the build context to the Dockerfile. This is ignored if `remote` is specified and points to an individual filename. -- **t** – Repository name (and optionally a tag) to be applied to - the resulting image in case of success. +- **t** – A name and optional tag to apply to the image in the `name:tag` format. + If you omit the `tag` the default `latest` value is assumed. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into a file called `Dockerfile` and the image is built from that file. If @@ -1271,7 +1271,7 @@ or being killed. - **cpuperiod** - The length of a CPU period in microseconds. - **cpuquota** - Microseconds of CPU time that the container can get in a CPU period. - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – base64-encoded ConfigFile object @@ -1313,7 +1313,7 @@ a base64-encoded AuthConfig object. - **repo** – Repository name. - **tag** – Tag. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object @@ -1340,35 +1340,33 @@ Return low-level information on the image `name` Content-Type: application/json { - "Created": "2013-03-23T22:24:18.818426-07:00", - "Container": "3d67245a8d72ecf13f33dffac9f79dcdf70f75acb84d308770391510e0c23ad0", - "ContainerConfig": - { - "Hostname": "", - "User": "", - "AttachStdin": false, - "AttachStdout": false, - "AttachStderr": false, - "PortSpecs": null, - "Tty": true, - "OpenStdin": true, - "StdinOnce": false, - "Env": null, - "Cmd": ["/bin/bash"], - "Dns": null, - "Image": "ubuntu", - "Labels": { - "com.example.vendor": "Acme", - "com.example.license": "GPL", - "com.example.version": "1.0" - }, - "Volumes": null, - "VolumesFrom": "", - "WorkingDir": "" - }, - "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", - "Parent": "27cf784147099545", - "Size": 6824592 + "Created": "2013-03-23T22:24:18.818426-07:00", + "Container": "3d67245a8d72ecf13f33dffac9f79dcdf70f75acb84d308770391510e0c23ad0", + "ContainerConfig": { + "Hostname": "", + "User": "", + "AttachStdin": false, + "AttachStdout": false, + "AttachStderr": false, + "Tty": true, + "OpenStdin": true, + "StdinOnce": false, + "Env": null, + "Cmd": ["/bin/bash"], + "Dns": null, + "Image": "ubuntu", + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "Volumes": null, + "VolumesFrom": "", + "WorkingDir": "" + }, + "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", + "Parent": "27cf784147099545", + "Size": 6824592 } **Status codes**: @@ -1464,10 +1462,9 @@ then be used in the URL. This duplicates the command line's flow. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: -- **X-Registry-Auth** – Include a base64-encoded AuthConfig. - object. +- **X-Registry-Auth** – base64-encoded AuthConfig object. **Status codes**: @@ -1565,7 +1562,7 @@ be deprecated and replaced by the `is_automated` property. "name": "wma55/u1210sshd", "is_trusted": false, "is_automated": false, - "description": "", + "description": "" }, { "star_count": 10, @@ -1573,7 +1570,7 @@ be deprecated and replaced by the `is_automated` property. "name": "jdswinbank/sshd", "is_trusted": false, "is_automated": false, - "description": "", + "description": "" }, { "star_count": 18, @@ -1581,7 +1578,7 @@ be deprecated and replaced by the `is_automated` property. "name": "vgauthier/sshd", "is_trusted": false, "is_automated": false, - "description": "", + "description": "" } ... ] @@ -1609,8 +1606,8 @@ Get the default username and email Content-Type: application/json { - "username":" hannibal", - "password: "xxxx", + "username": "hannibal", + "password": "xxxx", "email": "hannibal@a-team.com", "serveraddress": "https://index.docker.io/v1/" } @@ -1822,7 +1819,7 @@ Docker containers report the following events: attach, commit, copy, create, destroy, die, exec_create, exec_start, export, kill, oom, pause, rename, resize, restart, start, stop, top, unpause -and Docker images report: +Docker images report the following events: untag, delete @@ -1884,7 +1881,7 @@ See the [image tarball format](#image-tarball-format) for more details. - **200** – no error - **500** – server error -### Get a tarball containing all images. +### Get a tarball containing all images `GET /images/get` diff --git a/docs/reference/api/docker_remote_api_v1.20.md b/docs/reference/api/docker_remote_api_v1.20.md index 5fb92f7616..06bd98283a 100644 --- a/docs/reference/api/docker_remote_api_v1.20.md +++ b/docs/reference/api/docker_remote_api_v1.20.md @@ -220,7 +220,7 @@ Create a container - **AttachStdout** - Boolean value, attaches to `stdout`. - **AttachStderr** - Boolean value, attaches to `stderr`. - **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, +- **OpenStdin** - Boolean value, opens `stdin`, - **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` - **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` @@ -332,7 +332,7 @@ Return low-level information on the container `id` HTTP/1.1 200 OK Content-Type: application/json - { + { "AppArmorProfile": "", "Args": [ "-c", @@ -440,7 +440,7 @@ Return low-level information on the container `id` "Paused": false, "Pid": 0, "Restarting": false, - "Running": false, + "Running": true, "StartedAt": "2015-01-06T15:47:32.072697474Z" }, "Mounts": [ @@ -1377,11 +1377,11 @@ or being killed. - **dockerfile** - Path within the build context to the Dockerfile. This is ignored if `remote` is specified and points to an individual filename. -- **t** – A repository name (and optionally a tag) to apply to - the resulting image in case of success. -- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the - URI specifies a filename, the file's contents are placed into a file - called `Dockerfile`. +- **t** – A name and optional tag to apply to the image in the `name:tag` format. + If you omit the `tag` the default `latest` value is assumed. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. @@ -1394,7 +1394,7 @@ or being killed. - **cpuperiod** - The length of a CPU period in microseconds. - **cpuquota** - Microseconds of CPU time that the container can get in a CPU period. - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – A base64-url-safe-encoded Registry Auth Config JSON @@ -1457,7 +1457,7 @@ a base64-encoded AuthConfig object. - **repo** – Repository name. - **tag** – Tag. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object @@ -1484,34 +1484,33 @@ Return low-level information on the image `name` Content-Type: application/json { - "Created": "2013-03-23T22:24:18.818426-07:00", - "Container": "3d67245a8d72ecf13f33dffac9f79dcdf70f75acb84d308770391510e0c23ad0", - "ContainerConfig": - { - "Hostname": "", - "User": "", - "AttachStdin": false, - "AttachStdout": false, - "AttachStderr": false, - "Tty": true, - "OpenStdin": true, - "StdinOnce": false, - "Env": null, - "Cmd": ["/bin/bash"], - "Dns": null, - "Image": "ubuntu", - "Labels": { - "com.example.vendor": "Acme", - "com.example.license": "GPL", - "com.example.version": "1.0" - }, - "Volumes": null, - "VolumesFrom": "", - "WorkingDir": "" - }, - "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", - "Parent": "27cf784147099545", - "Size": 6824592 + "Created": "2013-03-23T22:24:18.818426-07:00", + "Container": "3d67245a8d72ecf13f33dffac9f79dcdf70f75acb84d308770391510e0c23ad0", + "ContainerConfig": { + "Hostname": "", + "User": "", + "AttachStdin": false, + "AttachStdout": false, + "AttachStderr": false, + "Tty": true, + "OpenStdin": true, + "StdinOnce": false, + "Env": null, + "Cmd": ["/bin/bash"], + "Dns": null, + "Image": "ubuntu", + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "Volumes": null, + "VolumesFrom": "", + "WorkingDir": "" + }, + "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", + "Parent": "27cf784147099545", + "Size": 6824592 } **Status codes**: @@ -1607,10 +1606,9 @@ then be used in the URL. This duplicates the command line's flow. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: -- **X-Registry-Auth** – Include a base64-encoded AuthConfig. - object. +- **X-Registry-Auth** – base64-encoded AuthConfig object. **Status codes**: @@ -1746,8 +1744,8 @@ Get the default username and email Content-Type: application/json { - "username":" hannibal", - "password: "xxxx", + "username": "hannibal", + "password": "xxxx", "email": "hannibal@a-team.com", "serveraddress": "https://index.docker.io/v1/" } @@ -1966,7 +1964,7 @@ Docker containers report the following events: attach, commit, copy, create, destroy, die, exec_create, exec_start, export, kill, oom, pause, rename, resize, restart, start, stop, top, unpause -and Docker images report: +Docker images report the following events: delete, import, pull, push, tag, untag @@ -2028,7 +2026,7 @@ See the [image tarball format](#image-tarball-format) for more details. - **200** – no error - **500** – server error -### Get a tarball containing all images. +### Get a tarball containing all images `GET /images/get` diff --git a/docs/reference/api/docker_remote_api_v1.21.md b/docs/reference/api/docker_remote_api_v1.21.md index 52ede0a4ec..10da4c3314 100644 --- a/docs/reference/api/docker_remote_api_v1.21.md +++ b/docs/reference/api/docker_remote_api_v1.21.md @@ -229,7 +229,7 @@ Create a container - **AttachStdout** - Boolean value, attaches to `stdout`. - **AttachStderr** - Boolean value, attaches to `stderr`. - **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, +- **OpenStdin** - Boolean value, opens `stdin`, - **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` - **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` @@ -350,7 +350,7 @@ Return low-level information on the container `id` HTTP/1.1 200 OK Content-Type: application/json - { + { "AppArmorProfile": "", "Args": [ "-c", @@ -462,14 +462,14 @@ Return low-level information on the container `id` "MacAddress": "", "Networks": { "bridge": { - "EndpointID": "", - "Gateway": "", - "IPAddress": "", - "IPPrefixLen": 0, + "EndpointID": "7587b82f0dada3656fda26588aee72630c6fab1536d36e394b2bfbcf898c971d", + "Gateway": "172.17.0.1", + "IPAddress": "172.17.0.2", + "IPPrefixLen": 16, "IPv6Gateway": "", "GlobalIPv6Address": "", "GlobalIPv6PrefixLen": 0, - "MacAddress": "" + "MacAddress": "02:42:ac:12:00:02" } } }, @@ -1458,9 +1458,9 @@ or being killed. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. -- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the - URI specifies a filename, the file's contents are placed into a file - called `Dockerfile`. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. @@ -1478,7 +1478,7 @@ or being killed. variable expansion in other Dockerfile instructions. This is not meant for passing secret values. [Read more about the buildargs instruction](../../reference/builder.md#arg) - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – A base64-url-safe-encoded Registry Auth Config JSON @@ -1545,7 +1545,7 @@ a base64-encoded AuthConfig object. an image. - **tag** – Tag or digest. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object @@ -1754,10 +1754,9 @@ then be used in the URL. This duplicates the command line's flow. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: -- **X-Registry-Auth** – Include a base64-encoded AuthConfig. - object. +- **X-Registry-Auth** – base64-encoded AuthConfig object. **Status codes**: @@ -1893,8 +1892,8 @@ Get the default username and email Content-Type: application/json { - "username":" hannibal", - "password: "xxxx", + "username": "hannibal", + "password": "xxxx", "email": "hannibal@a-team.com", "serveraddress": "https://index.docker.io/v1/" } @@ -2115,7 +2114,7 @@ Docker containers report the following events: attach, commit, copy, create, destroy, die, exec_create, exec_start, export, kill, oom, pause, rename, resize, restart, start, stop, top, unpause -and Docker images report: +Docker images report the following events: delete, import, pull, push, tag, untag @@ -2178,7 +2177,7 @@ See the [image tarball format](#image-tarball-format) for more details. - **200** – no error - **500** – server error -### Get a tarball containing all images. +### Get a tarball containing all images `GET /images/get` @@ -2438,36 +2437,36 @@ Return low-level information about the `exec` command `id`. "SecurityOpt" : null }, "Image" : "5506de2b643be1e6febbf3b8a240760c6843244c41e12aa2f60ccbb7153d17f5", - "NetworkSettings": { - "Bridge": "", - "SandboxID": "", - "HairpinMode": false, - "LinkLocalIPv6Address": "", - "LinkLocalIPv6PrefixLen": 0, - "Ports": null, - "SandboxKey": "", - "SecondaryIPAddresses": null, - "SecondaryIPv6Addresses": null, - "EndpointID": "", - "Gateway": "", - "GlobalIPv6Address": "", - "GlobalIPv6PrefixLen": 0, - "IPAddress": "", - "IPPrefixLen": 0, - "IPv6Gateway": "", - "MacAddress": "", - "Networks": { - "bridge": { - "EndpointID": "", - "Gateway": "", - "IPAddress": "", - "IPPrefixLen": 0, - "IPv6Gateway": "", - "GlobalIPv6Address": "", - "GlobalIPv6PrefixLen": 0, - "MacAddress": "" - } + "NetworkSettings" : { + "Bridge": "", + "SandboxID": "", + "HairpinMode": false, + "LinkLocalIPv6Address": "", + "LinkLocalIPv6PrefixLen": 0, + "Ports": null, + "SandboxKey": "", + "SecondaryIPAddresses": null, + "SecondaryIPv6Addresses": null, + "EndpointID": "", + "Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "IPAddress": "", + "IPPrefixLen": 0, + "IPv6Gateway": "", + "MacAddress": "", + "Networks": { + "bridge": { + "EndpointID": "", + "Gateway": "", + "IPAddress": "", + "IPPrefixLen": 0, + "IPv6Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "MacAddress": "" } + } }, "ResolvConfPath" : "/var/lib/docker/containers/8f177a186b977fb451136e0fdf182abff5599a08b3c7f6ef0d36a55aaf89634c/resolv.conf", "HostnamePath" : "/var/lib/docker/containers/8f177a186b977fb451136e0fdf182abff5599a08b3c7f6ef0d36a55aaf89634c/hostname", @@ -2760,11 +2759,14 @@ Content-Type: application/json "Name":"isolated_nw", "Driver":"bridge", "IPAM":{ - "Config":[{ - "Subnet":"172.20.0.0/16", - "IPRange":"172.20.10.0/24", - "Gateway":"172.20.10.11" - }] + "Config":[ + { + "Subnet":"172.20.0.0/16", + "IPRange":"172.20.10.0/24", + "Gateway":"172.20.10.11" + } + ] + } } ``` diff --git a/docs/reference/api/docker_remote_api_v1.22.md b/docs/reference/api/docker_remote_api_v1.22.md index 0a4dbd7ae3..2f7b7804dd 100644 --- a/docs/reference/api/docker_remote_api_v1.22.md +++ b/docs/reference/api/docker_remote_api_v1.22.md @@ -113,7 +113,6 @@ List containers } } } - }, { "Id": "3176a2479c92", @@ -148,7 +147,6 @@ List containers } } } - }, { "Id": "4cb07b47f9fb", @@ -183,7 +181,6 @@ List containers } } } - } ] @@ -335,7 +332,7 @@ Create a container - **AttachStdout** - Boolean value, attaches to `stdout`. - **AttachStderr** - Boolean value, attaches to `stderr`. - **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, +- **OpenStdin** - Boolean value, opens `stdin`, - **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` - **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` @@ -464,7 +461,7 @@ Return low-level information on the container `id` HTTP/1.1 200 OK Content-Type: application/json - { + { "AppArmorProfile": "", "Args": [ "-c", @@ -1638,9 +1635,9 @@ or being killed. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. -- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the - URI specifies a filename, the file's contents are placed into a file - called `Dockerfile`. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. @@ -1659,7 +1656,7 @@ or being killed. passing secret values. [Read more about the buildargs instruction](../../reference/builder.md#arg) - **shmsize** - Size of `/dev/shm` in bytes. The size must be greater than 0. If omitted the system uses 64MB. - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – A base64-url-safe-encoded Registry Auth Config JSON @@ -1727,7 +1724,7 @@ a base64-encoded AuthConfig object. an image. - **tag** – Tag or digest. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token - Credential based login: @@ -1955,7 +1952,7 @@ The push is cancelled if the HTTP connection is closed. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token - Credential based login: @@ -2110,8 +2107,8 @@ Get the default username and email Content-Type: application/json { - "username":" hannibal", - "password: "xxxx", + "username": "hannibal", + "password": "xxxx", "email": "hannibal@a-team.com", "serveraddress": "https://index.docker.io/v1/" } @@ -2229,7 +2226,7 @@ Show the docker version information Content-Type: application/json { - "Version": "1.10.0-dev", + "Version": "1.10.0", "Os": "linux", "KernelVersion": "3.19.0-23-generic", "GoVersion": "go1.4.2", @@ -2775,25 +2772,25 @@ Return low-level information about the `exec` command `id`. Content-Type: application/json { - "CanRemove": false, - "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", - "DetachKeys": "", - "ExitCode": 2, - "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", - "OpenStderr": true, - "OpenStdin": true, - "OpenStdout": true, - "ProcessConfig": { - "arguments": [ - "-c", - "exit 2" - ], - "entrypoint": "sh", - "privileged": false, - "tty": true, - "user": "1000" - }, - "Running": false + "CanRemove": false, + "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", + "DetachKeys": "", + "ExitCode": 2, + "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", + "OpenStderr": true, + "OpenStdin": true, + "OpenStdout": true, + "ProcessConfig": { + "arguments": [ + "-c", + "exit 2" + ], + "entrypoint": "sh", + "privileged": false, + "tty": true, + "user": "1000" + }, + "Running": false } **Status codes**: @@ -3082,18 +3079,18 @@ Content-Type: application/json "Driver":"bridge", "IPAM":{ "Config":[ - { - "Subnet":"172.20.0.0/16", - "IPRange":"172.20.10.0/24", - "Gateway":"172.20.10.11" - }, - { - "Subnet":"2001:db8:abcd::/64", - "Gateway":"2001:db8:abcd::1011" - } + { + "Subnet":"172.20.0.0/16", + "IPRange":"172.20.10.0/24", + "Gateway":"172.20.10.11" + }, + { + "Subnet":"2001:db8:abcd::/64", + "Gateway":"2001:db8:abcd::1011" + } ], "Options": { - "foo": "bar" + "foo": "bar" } }, "Internal":true diff --git a/docs/reference/api/docker_remote_api_v1.23.md b/docs/reference/api/docker_remote_api_v1.23.md index 13d173371c..2d5eec5248 100644 --- a/docs/reference/api/docker_remote_api_v1.23.md +++ b/docs/reference/api/docker_remote_api_v1.23.md @@ -355,7 +355,7 @@ Create a container - **AttachStdout** - Boolean value, attaches to `stdout`. - **AttachStderr** - Boolean value, attaches to `stderr`. - **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, +- **OpenStdin** - Boolean value, opens `stdin`, - **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` - **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` @@ -487,7 +487,7 @@ Return low-level information on the container `id` HTTP/1.1 200 OK Content-Type: application/json - { + { "AppArmorProfile": "", "Args": [ "-c", @@ -1668,9 +1668,9 @@ or being killed. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. -- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the - URI specifies a filename, the file's contents are placed into a file - called `Dockerfile`. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. @@ -1690,7 +1690,7 @@ or being killed. - **shmsize** - Size of `/dev/shm` in bytes. The size must be greater than 0. If omitted the system uses 64MB. - **labels** – JSON map of string pairs for labels to set on the image. - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – A base64-url-safe-encoded Registry Auth Config JSON @@ -1758,7 +1758,7 @@ a base64-encoded AuthConfig object. an image. - **tag** – Tag or digest. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token - Credential based login: @@ -1993,7 +1993,7 @@ The push is cancelled if the HTTP connection is closed. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token - Credential based login: @@ -2274,7 +2274,7 @@ Show the docker version information Content-Type: application/json { - "Version": "1.10.0-dev", + "Version": "1.10.0", "Os": "linux", "KernelVersion": "3.19.0-23-generic", "GoVersion": "go1.4.2", @@ -2846,25 +2846,25 @@ Return low-level information about the `exec` command `id`. Content-Type: application/json { - "CanRemove": false, - "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", - "DetachKeys": "", - "ExitCode": 2, - "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", - "OpenStderr": true, - "OpenStdin": true, - "OpenStdout": true, - "ProcessConfig": { - "arguments": [ - "-c", - "exit 2" - ], - "entrypoint": "sh", - "privileged": false, - "tty": true, - "user": "1000" - }, - "Running": false + "CanRemove": false, + "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", + "DetachKeys": "", + "ExitCode": 2, + "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", + "OpenStderr": true, + "OpenStdin": true, + "OpenStdout": true, + "ProcessConfig": { + "arguments": [ + "-c", + "exit 2" + ], + "entrypoint": "sh", + "privileged": false, + "tty": true, + "user": "1000" + }, + "Running": false } **Status codes**: @@ -2924,7 +2924,7 @@ Create a volume "Labels": { "com.example.some-label": "some-value", "com.example.some-other-label": "some-other-value" - }, + } } **Example response**: @@ -2939,7 +2939,7 @@ Create a volume "Labels": { "com.example.some-label": "some-value", "com.example.some-other-label": "some-other-value" - }, + } } **Status codes**: @@ -2953,7 +2953,7 @@ Create a volume - **Driver** - Name of the volume driver to use. Defaults to `local` for the name. - **DriverOpts** - A mapping of driver options and values. These options are passed directly to the driver and are driver specific. -- **Labels** - Labels to set on the volume, specified as a map: `{"key":"value" [,"key2":"value2"]}` +- **Labels** - Labels to set on the volume, specified as a map: `{"key":"value","key2":"value2"}` ### Inspect a volume @@ -2971,13 +2971,13 @@ Return low-level information on the volume `name` Content-Type: application/json { - "Name": "tardis", - "Driver": "local", - "Mountpoint": "/var/lib/docker/volumes/tardis/_data", - "Labels": { - "com.example.some-label": "some-value", - "com.example.some-other-label": "some-other-value" - } + "Name": "tardis", + "Driver": "local", + "Mountpoint": "/var/lib/docker/volumes/tardis/_data", + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + } } **Status codes**: @@ -3180,18 +3180,18 @@ Content-Type: application/json "EnableIPv6": true, "IPAM":{ "Config":[ - { - "Subnet":"172.20.0.0/16", - "IPRange":"172.20.10.0/24", - "Gateway":"172.20.10.11" - }, - { - "Subnet":"2001:db8:abcd::/64", - "Gateway":"2001:db8:abcd::1011" - } + { + "Subnet":"172.20.0.0/16", + "IPRange":"172.20.10.0/24", + "Gateway":"172.20.10.11" + }, + { + "Subnet":"2001:db8:abcd::/64", + "Gateway":"2001:db8:abcd::1011" + } ], "Options": { - "foo": "bar" + "foo": "bar" } }, "Internal":true, diff --git a/docs/reference/api/docker_remote_api_v1.24.md b/docs/reference/api/docker_remote_api_v1.24.md index 3b7ee1af38..c7cc5c732d 100644 --- a/docs/reference/api/docker_remote_api_v1.24.md +++ b/docs/reference/api/docker_remote_api_v1.24.md @@ -372,7 +372,7 @@ Create a container - **AttachStdout** - Boolean value, attaches to `stdout`. - **AttachStderr** - Boolean value, attaches to `stderr`. - **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. -- **OpenStdin** - Boolean value, opens stdin, +- **OpenStdin** - Boolean value, opens `stdin`, - **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. - **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` - **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` @@ -512,7 +512,7 @@ Return low-level information on the container `id` HTTP/1.1 200 OK Content-Type: application/json - { + { "AppArmorProfile": "", "Args": [ "-c", @@ -1669,9 +1669,9 @@ or being killed. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. -- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the - URI specifies a filename, the file's contents are placed into a file - called `Dockerfile`. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. @@ -1691,7 +1691,7 @@ or being killed. - **shmsize** - Size of `/dev/shm` in bytes. The size must be greater than 0. If omitted the system uses 64MB. - **labels** – JSON map of string pairs for labels to set on the image. - Request Headers: +**Request Headers**: - **Content-type** – Set to `"application/tar"`. - **X-Registry-Config** – A base64-url-safe-encoded Registry Auth Config JSON @@ -1759,7 +1759,7 @@ a base64-encoded AuthConfig object. an image. - **tag** – Tag or digest. - Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token - Credential based login: @@ -1994,7 +1994,7 @@ The push is cancelled if the HTTP connection is closed. - **tag** – The tag to associate with the image on the registry. This is optional. -Request Headers: +**Request Headers**: - **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token - Credential based login: @@ -2427,7 +2427,7 @@ Docker daemon report the following event: HTTP/1.1 200 OK Content-Type: application/json - Server: Docker/1.10.0 (linux) + Server: Docker/1.11.0 (linux) Date: Fri, 29 Apr 2016 15:18:06 GMT Transfer-Encoding: chunked @@ -2860,25 +2860,25 @@ Return low-level information about the `exec` command `id`. Content-Type: application/json { - "CanRemove": false, - "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", - "DetachKeys": "", - "ExitCode": 2, - "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", - "OpenStderr": true, - "OpenStdin": true, - "OpenStdout": true, - "ProcessConfig": { - "arguments": [ - "-c", - "exit 2" - ], - "entrypoint": "sh", - "privileged": false, - "tty": true, - "user": "1000" - }, - "Running": false + "CanRemove": false, + "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", + "DetachKeys": "", + "ExitCode": 2, + "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", + "OpenStderr": true, + "OpenStdin": true, + "OpenStdout": true, + "ProcessConfig": { + "arguments": [ + "-c", + "exit 2" + ], + "entrypoint": "sh", + "privileged": false, + "tty": true, + "user": "1000" + }, + "Running": false } **Status codes**: @@ -2983,7 +2983,7 @@ Create a volume Refer to the [inspect a volume](#inspect-a-volume) section or details about the JSON fields returned in the response. - + ### Inspect a volume `GET /volumes/(name)` @@ -3000,17 +3000,17 @@ Return low-level information on the volume `name` Content-Type: application/json { - "Name": "tardis", - "Driver": "custom", - "Mountpoint": "/var/lib/docker/volumes/tardis/_data", - "Status": { - "hello": "world" - }, - "Labels": { - "com.example.some-label": "some-value", - "com.example.some-other-label": "some-other-value" - }, - "Scope": "local" + "Name": "tardis", + "Driver": "custom", + "Mountpoint": "/var/lib/docker/volumes/tardis/_data", + "Status": { + "hello": "world" + }, + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + }, + "Scope": "local" } **Status codes**: @@ -3232,18 +3232,18 @@ Content-Type: application/json "EnableIPv6": true, "IPAM":{ "Config":[ - { - "Subnet":"172.20.0.0/16", - "IPRange":"172.20.10.0/24", - "Gateway":"172.20.10.11" - }, - { - "Subnet":"2001:db8:abcd::/64", - "Gateway":"2001:db8:abcd::1011" - } + { + "Subnet":"172.20.0.0/16", + "IPRange":"172.20.10.0/24", + "Gateway":"172.20.10.11" + }, + { + "Subnet":"2001:db8:abcd::/64", + "Gateway":"2001:db8:abcd::1011" + } ], "Options": { - "foo": "bar" + "foo": "bar" } }, "Internal":true, @@ -4449,7 +4449,6 @@ List services ### Create a service - `POST /services/create` Create a service. When using this endpoint to create a service using a private @@ -4544,7 +4543,7 @@ image](#create-an-image) section for more details. - **406** – server error or node is not part of a swarm - **409** – name conflicts with an existing object -JSON Parameters: +**JSON Parameters**: - **Name** – User-defined name for the service. - **Labels** – A map of labels to associate with the service (e.g., `{"key":"value"[,"key2":"value2"]}`). @@ -4722,7 +4721,6 @@ Return information on the service `id`. ### Update a service - `POST /services/(id or name)/update` Update a service. When using this endpoint to create a service using a @@ -4770,9 +4768,9 @@ image](#create-an-image) section for more details. **Example response**: - HTTP/1.1 200 OK - Content-Length: 0 - Content-Type: text/plain; charset=utf-8 + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 **JSON Parameters**: diff --git a/docs/reference/api/docker_remote_api_v1.25.md b/docs/reference/api/docker_remote_api_v1.25.md new file mode 100644 index 0000000000..72839ba9d4 --- /dev/null +++ b/docs/reference/api/docker_remote_api_v1.25.md @@ -0,0 +1,5280 @@ + + +# Docker Remote API v1.25 + +# 1. Brief introduction + + - The Remote API has replaced `rcli`. + - The daemon listens on `unix:///var/run/docker.sock` but you can + [Bind Docker to another host/port or a Unix socket](../commandline/dockerd.md#bind-docker-to-another-host-port-or-a-unix-socket). + - The API tends to be REST. However, for some complex commands, like `attach` + or `pull`, the HTTP connection is hijacked to transport `stdout`, + `stdin` and `stderr`. + - When the client API version is newer than the daemon's, these calls return an HTTP + `400 Bad Request` error message. + +# 2. Errors + +The Remote API uses standard HTTP status codes to indicate the success or failure of the API call. The body of the response will be JSON in the following format: + + { + "message": "page not found" + } + +The status codes that are returned for each endpoint are specified in the endpoint documentation below. + +# 3. Endpoints + +## 3.1 Containers + +### List containers + +`GET /containers/json` + +List containers + +**Example request**: + + GET /containers/json?all=1&before=8dfafdbc3a40&size=1 HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "Id": "8dfafdbc3a40", + "Names":["/boring_feynman"], + "Image": "ubuntu:latest", + "ImageID": "d74508fb6632491cea586a1fd7d748dfc5274cd6fdfedee309ecdcbc2bf5cb82", + "Command": "echo 1", + "Created": 1367854155, + "State": "Exited", + "Status": "Exit 0", + "Ports": [{"PrivatePort": 2222, "PublicPort": 3333, "Type": "tcp"}], + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "SizeRw": 12288, + "SizeRootFs": 0, + "HostConfig": { + "NetworkMode": "default" + }, + "NetworkSettings": { + "Networks": { + "bridge": { + "IPAMConfig": null, + "Links": null, + "Aliases": null, + "NetworkID": "7ea29fc1412292a2d7bba362f9253545fecdfa8ce9a6e37dd10ba8bee7129812", + "EndpointID": "2cdc4edb1ded3631c81f57966563e5c8525b81121bb3706a9a9a3ae102711f3f", + "Gateway": "172.17.0.1", + "IPAddress": "172.17.0.2", + "IPPrefixLen": 16, + "IPv6Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "MacAddress": "02:42:ac:11:00:02" + } + } + }, + "Mounts": [ + { + "Name": "fac362...80535", + "Source": "/data", + "Destination": "/data", + "Driver": "local", + "Mode": "ro,Z", + "RW": false, + "Propagation": "" + } + ] + }, + { + "Id": "9cd87474be90", + "Names":["/coolName"], + "Image": "ubuntu:latest", + "ImageID": "d74508fb6632491cea586a1fd7d748dfc5274cd6fdfedee309ecdcbc2bf5cb82", + "Command": "echo 222222", + "Created": 1367854155, + "State": "Exited", + "Status": "Exit 0", + "Ports": [], + "Labels": {}, + "SizeRw": 12288, + "SizeRootFs": 0, + "HostConfig": { + "NetworkMode": "default" + }, + "NetworkSettings": { + "Networks": { + "bridge": { + "IPAMConfig": null, + "Links": null, + "Aliases": null, + "NetworkID": "7ea29fc1412292a2d7bba362f9253545fecdfa8ce9a6e37dd10ba8bee7129812", + "EndpointID": "88eaed7b37b38c2a3f0c4bc796494fdf51b270c2d22656412a2ca5d559a64d7a", + "Gateway": "172.17.0.1", + "IPAddress": "172.17.0.8", + "IPPrefixLen": 16, + "IPv6Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "MacAddress": "02:42:ac:11:00:08" + } + } + }, + "Mounts": [] + }, + { + "Id": "3176a2479c92", + "Names":["/sleepy_dog"], + "Image": "ubuntu:latest", + "ImageID": "d74508fb6632491cea586a1fd7d748dfc5274cd6fdfedee309ecdcbc2bf5cb82", + "Command": "echo 3333333333333333", + "Created": 1367854154, + "State": "Exited", + "Status": "Exit 0", + "Ports":[], + "Labels": {}, + "SizeRw":12288, + "SizeRootFs":0, + "HostConfig": { + "NetworkMode": "default" + }, + "NetworkSettings": { + "Networks": { + "bridge": { + "IPAMConfig": null, + "Links": null, + "Aliases": null, + "NetworkID": "7ea29fc1412292a2d7bba362f9253545fecdfa8ce9a6e37dd10ba8bee7129812", + "EndpointID": "8b27c041c30326d59cd6e6f510d4f8d1d570a228466f956edf7815508f78e30d", + "Gateway": "172.17.0.1", + "IPAddress": "172.17.0.6", + "IPPrefixLen": 16, + "IPv6Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "MacAddress": "02:42:ac:11:00:06" + } + } + }, + "Mounts": [] + }, + { + "Id": "4cb07b47f9fb", + "Names":["/running_cat"], + "Image": "ubuntu:latest", + "ImageID": "d74508fb6632491cea586a1fd7d748dfc5274cd6fdfedee309ecdcbc2bf5cb82", + "Command": "echo 444444444444444444444444444444444", + "Created": 1367854152, + "State": "Exited", + "Status": "Exit 0", + "Ports": [], + "Labels": {}, + "SizeRw": 12288, + "SizeRootFs": 0, + "HostConfig": { + "NetworkMode": "default" + }, + "NetworkSettings": { + "Networks": { + "bridge": { + "IPAMConfig": null, + "Links": null, + "Aliases": null, + "NetworkID": "7ea29fc1412292a2d7bba362f9253545fecdfa8ce9a6e37dd10ba8bee7129812", + "EndpointID": "d91c7b2f0644403d7ef3095985ea0e2370325cd2332ff3a3225c4247328e66e9", + "Gateway": "172.17.0.1", + "IPAddress": "172.17.0.5", + "IPPrefixLen": 16, + "IPv6Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "MacAddress": "02:42:ac:11:00:05" + } + } + }, + "Mounts": [] + } + ] + +**Query parameters**: + +- **all** – 1/True/true or 0/False/false, Show all containers. + Only running containers are shown by default (i.e., this defaults to false) +- **limit** – Show `limit` last created + containers, include non-running ones. +- **since** – Show only containers created since Id, include + non-running ones. +- **before** – Show only containers created before Id, include + non-running ones. +- **size** – 1/True/true or 0/False/false, Show the containers + sizes +- **filters** - a JSON encoded value of the filters (a `map[string][]string`) to process on the containers list. Available filters: + - `exited=`; -- containers with exit code of `` ; + - `status=`(`created`|`restarting`|`running`|`paused`|`exited`|`dead`) + - `label=key` or `label="key=value"` of a container label + - `isolation=`(`default`|`process`|`hyperv`) (Windows daemon only) + - `ancestor`=(`[:]`, `` or ``) + - `before`=(`` or ``) + - `since`=(`` or ``) + - `volume`=(`` or ``) + - `network`=(`` or ``) + +**Status codes**: + +- **200** – no error +- **400** – bad parameter +- **500** – server error + +### Create a container + +`POST /containers/create` + +Create a container + +**Example request**: + + POST /containers/create HTTP/1.1 + Content-Type: application/json + + { + "Hostname": "", + "Domainname": "", + "User": "", + "AttachStdin": false, + "AttachStdout": true, + "AttachStderr": true, + "Tty": false, + "OpenStdin": false, + "StdinOnce": false, + "Env": [ + "FOO=bar", + "BAZ=quux" + ], + "Cmd": [ + "date" + ], + "Entrypoint": "", + "Image": "ubuntu", + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "Volumes": { + "/volumes/data": {} + }, + "WorkingDir": "", + "NetworkDisabled": false, + "MacAddress": "12:34:56:78:9a:bc", + "ExposedPorts": { + "22/tcp": {} + }, + "StopSignal": "SIGTERM", + "HostConfig": { + "Binds": ["/tmp:/tmp"], + "Links": ["redis3:redis"], + "Memory": 0, + "MemorySwap": 0, + "MemoryReservation": 0, + "KernelMemory": 0, + "CpuPercent": 80, + "CpuShares": 512, + "CpuPeriod": 100000, + "CpuQuota": 50000, + "CpusetCpus": "0,1", + "CpusetMems": "0,1", + "MaximumIOps": 0, + "MaximumIOBps": 0, + "BlkioWeight": 300, + "BlkioWeightDevice": [{}], + "BlkioDeviceReadBps": [{}], + "BlkioDeviceReadIOps": [{}], + "BlkioDeviceWriteBps": [{}], + "BlkioDeviceWriteIOps": [{}], + "MemorySwappiness": 60, + "OomKillDisable": false, + "OomScoreAdj": 500, + "PidMode": "", + "PidsLimit": -1, + "PortBindings": { "22/tcp": [{ "HostPort": "11022" }] }, + "PublishAllPorts": false, + "Privileged": false, + "ReadonlyRootfs": false, + "Dns": ["8.8.8.8"], + "DnsOptions": [""], + "DnsSearch": [""], + "ExtraHosts": null, + "VolumesFrom": ["parent", "other:ro"], + "CapAdd": ["NET_ADMIN"], + "CapDrop": ["MKNOD"], + "GroupAdd": ["newgroup"], + "RestartPolicy": { "Name": "", "MaximumRetryCount": 0 }, + "AutoRemove": true, + "NetworkMode": "bridge", + "Devices": [], + "Ulimits": [{}], + "LogConfig": { "Type": "json-file", "Config": {} }, + "SecurityOpt": [], + "StorageOpt": {}, + "CgroupParent": "", + "VolumeDriver": "", + "ShmSize": 67108864 + }, + "NetworkingConfig": { + "EndpointsConfig": { + "isolated_nw" : { + "IPAMConfig": { + "IPv4Address":"172.20.30.33", + "IPv6Address":"2001:db8:abcd::3033", + "LinkLocalIPs":["169.254.34.68", "fe80::3468"] + }, + "Links":["container_1", "container_2"], + "Aliases":["server_x", "server_y"] + } + } + } + } + +**Example response**: + + HTTP/1.1 201 Created + Content-Type: application/json + + { + "Id":"e90e34656806", + "Warnings":[] + } + +**JSON parameters**: + +- **Hostname** - A string value containing the hostname to use for the + container. This must be a valid RFC 1123 hostname. +- **Domainname** - A string value containing the domain name to use + for the container. +- **User** - A string value specifying the user inside the container. +- **AttachStdin** - Boolean value, attaches to `stdin`. +- **AttachStdout** - Boolean value, attaches to `stdout`. +- **AttachStderr** - Boolean value, attaches to `stderr`. +- **Tty** - Boolean value, Attach standard streams to a `tty`, including `stdin` if it is not closed. +- **OpenStdin** - Boolean value, opens `stdin`, +- **StdinOnce** - Boolean value, close `stdin` after the 1 attached client disconnects. +- **Env** - A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]` +- **Labels** - Adds a map of labels to a container. To specify a map: `{"key":"value"[,"key2":"value2"]}` +- **Cmd** - Command to run specified as a string or an array of strings. +- **Entrypoint** - Set the entry point for the container as a string or an array + of strings. If the array consists of exactly one empty string (`[""]`) then the entry point + is reset to system default (i.e., the entry point used by docker when there is no `ENTRYPOINT` + instruction in the Dockerfile). +- **Image** - A string specifying the image name to use for the container. +- **Volumes** - An object mapping mount point paths (strings) inside the + container to empty objects. +- **WorkingDir** - A string specifying the working directory for commands to + run in. +- **NetworkDisabled** - Boolean value, when true disables networking for the + container +- **ExposedPorts** - An object mapping ports to an empty object in the form of: + `"ExposedPorts": { "/: {}" }` +- **StopSignal** - Signal to stop a container as a string or unsigned integer. `SIGTERM` by default. +- **HostConfig** + - **Binds** – A list of volume bindings for this container. Each volume binding is a string in one of these forms: + + `host_path:container_path` to bind-mount a host path into the container + + `host_path:container_path:ro` to make the bind-mount read-only inside the container. + + `volume_name:container_path` to bind-mount a volume managed by a volume plugin into the container. + + `volume_name:container_path:ro` to make the bind mount read-only inside the container. + - **Links** - A list of links for the container. Each link entry should be + in the form of `container_name:alias`. + - **Memory** - Memory limit in bytes. + - **MemorySwap** - Total memory limit (memory + swap); set `-1` to enable unlimited swap. + You must use this with `memory` and make the swap value larger than `memory`. + - **MemoryReservation** - Memory soft limit in bytes. + - **KernelMemory** - Kernel memory limit in bytes. + - **CpuPercent** - An integer value containing the usable percentage of the available CPUs. (Windows daemon only) + - **CpuShares** - An integer value containing the container's CPU Shares + (ie. the relative weight vs other containers). + - **CpuPeriod** - The length of a CPU period in microseconds. + - **CpuQuota** - Microseconds of CPU time that the container can get in a CPU period. + - **CpusetCpus** - String value containing the `cgroups CpusetCpus` to use. + - **CpusetMems** - Memory nodes (MEMs) in which to allow execution (0-3, 0,1). Only effective on NUMA systems. + - **MaximumIOps** - Maximum IO absolute rate in terms of IOps. + - **MaximumIOBps** - Maximum IO absolute rate in terms of bytes per second. + - **BlkioWeight** - Block IO weight (relative weight) accepts a weight value between 10 and 1000. + - **BlkioWeightDevice** - Block IO weight (relative device weight) in the form of: `"BlkioWeightDevice": [{"Path": "device_path", "Weight": weight}]` + - **BlkioDeviceReadBps** - Limit read rate (bytes per second) from a device in the form of: `"BlkioDeviceReadBps": [{"Path": "device_path", "Rate": rate}]`, for example: + `"BlkioDeviceReadBps": [{"Path": "/dev/sda", "Rate": "1024"}]"` + - **BlkioDeviceWriteBps** - Limit write rate (bytes per second) to a device in the form of: `"BlkioDeviceWriteBps": [{"Path": "device_path", "Rate": rate}]`, for example: + `"BlkioDeviceWriteBps": [{"Path": "/dev/sda", "Rate": "1024"}]"` + - **BlkioDeviceReadIOps** - Limit read rate (IO per second) from a device in the form of: `"BlkioDeviceReadIOps": [{"Path": "device_path", "Rate": rate}]`, for example: + `"BlkioDeviceReadIOps": [{"Path": "/dev/sda", "Rate": "1000"}]` + - **BlkioDeviceWiiteIOps** - Limit write rate (IO per second) to a device in the form of: `"BlkioDeviceWriteIOps": [{"Path": "device_path", "Rate": rate}]`, for example: + `"BlkioDeviceWriteIOps": [{"Path": "/dev/sda", "Rate": "1000"}]` + - **MemorySwappiness** - Tune a container's memory swappiness behavior. Accepts an integer between 0 and 100. + - **OomKillDisable** - Boolean value, whether to disable OOM Killer for the container or not. + - **OomScoreAdj** - An integer value containing the score given to the container in order to tune OOM killer preferences. + - **PidMode** - Set the PID (Process) Namespace mode for the container; + `"container:"`: joins another container's PID namespace + `"host"`: use the host's PID namespace inside the container + - **PidsLimit** - Tune a container's pids limit. Set -1 for unlimited. + - **PortBindings** - A map of exposed container ports and the host port they + should map to. A JSON object in the form + `{ /: [{ "HostPort": "" }] }` + Take note that `port` is specified as a string and not an integer value. + - **PublishAllPorts** - Allocates a random host port for all of a container's + exposed ports. Specified as a boolean value. + - **Privileged** - Gives the container full access to the host. Specified as + a boolean value. + - **ReadonlyRootfs** - Mount the container's root filesystem as read only. + Specified as a boolean value. + - **Dns** - A list of DNS servers for the container to use. + - **DnsOptions** - A list of DNS options + - **DnsSearch** - A list of DNS search domains + - **ExtraHosts** - A list of hostnames/IP mappings to add to the + container's `/etc/hosts` file. Specified in the form `["hostname:IP"]`. + - **VolumesFrom** - A list of volumes to inherit from another container. + Specified in the form `[:]` + - **CapAdd** - A list of kernel capabilities to add to the container. + - **Capdrop** - A list of kernel capabilities to drop from the container. + - **GroupAdd** - A list of additional groups that the container process will run as + - **RestartPolicy** – The behavior to apply when the container exits. The + value is an object with a `Name` property of either `"always"` to + always restart, `"unless-stopped"` to restart always except when + user has manually stopped the container or `"on-failure"` to restart only when the container + exit code is non-zero. If `on-failure` is used, `MaximumRetryCount` + controls the number of times to retry before giving up. + The default is not to restart. (optional) + An ever increasing delay (double the previous delay, starting at 100mS) + is added before each restart to prevent flooding the server. + - **AutoRemove** - Boolean value, set to `true` to automatically remove the container on daemon side + when the container's process exits. Note that `RestartPolicy` other than `none` is exclusive to `AutoRemove`. + - **UsernsMode** - Sets the usernamespace mode for the container when usernamespace remapping option is enabled. + supported values are: `host`. + - **NetworkMode** - Sets the networking mode for the container. Supported + standard values are: `bridge`, `host`, `none`, and `container:`. Any other value is taken + as a custom network's name to which this container should connect to. + - **Devices** - A list of devices to add to the container specified as a JSON object in the + form + `{ "PathOnHost": "/dev/deviceName", "PathInContainer": "/dev/deviceName", "CgroupPermissions": "mrw"}` + - **Ulimits** - A list of ulimits to set in the container, specified as + `{ "Name": , "Soft": , "Hard": }`, for example: + `Ulimits: { "Name": "nofile", "Soft": 1024, "Hard": 2048 }` + - **Sysctls** - A list of kernel parameters (sysctls) to set in the container, specified as + `{ : }`, for example: + `{ "net.ipv4.ip_forward": "1" }` + - **SecurityOpt**: A list of string values to customize labels for MLS + systems, such as SELinux. + - **StorageOpt**: Storage driver options per container. Options can be passed in the form + `{"size":"120G"}` + - **LogConfig** - Log configuration for the container, specified as a JSON object in the form + `{ "Type": "", "Config": {"key1": "val1"}}`. + Available types: `json-file`, `syslog`, `journald`, `gelf`, `fluentd`, `awslogs`, `splunk`, `etwlogs`, `none`. + `json-file` logging driver. + - **CgroupParent** - Path to `cgroups` under which the container's `cgroup` is created. If the path is not absolute, the path is considered to be relative to the `cgroups` path of the init process. Cgroups are created if they do not already exist. + - **VolumeDriver** - Driver that this container users to mount volumes. + - **ShmSize** - Size of `/dev/shm` in bytes. The size must be greater than 0. If omitted the system uses 64MB. + +**Query parameters**: + +- **name** – Assign the specified name to the container. Must + match `/?[a-zA-Z0-9_-]+`. + +**Status codes**: + +- **201** – no error +- **400** – bad parameter +- **404** – no such container +- **406** – impossible to attach (container not running) +- **409** – conflict +- **500** – server error + +### Inspect a container + +`GET /containers/(id or name)/json` + +Return low-level information on the container `id` + +**Example request**: + + GET /containers/4fa6e0f0c678/json HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "AppArmorProfile": "", + "Args": [ + "-c", + "exit 9" + ], + "Config": { + "AttachStderr": true, + "AttachStdin": false, + "AttachStdout": true, + "Cmd": [ + "/bin/sh", + "-c", + "exit 9" + ], + "Domainname": "", + "Entrypoint": null, + "Env": [ + "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + ], + "ExposedPorts": null, + "Hostname": "ba033ac44011", + "Image": "ubuntu", + "Labels": { + "com.example.vendor": "Acme", + "com.example.license": "GPL", + "com.example.version": "1.0" + }, + "MacAddress": "", + "NetworkDisabled": false, + "OnBuild": null, + "OpenStdin": false, + "StdinOnce": false, + "Tty": false, + "User": "", + "Volumes": { + "/volumes/data": {} + }, + "WorkingDir": "", + "StopSignal": "SIGTERM" + }, + "Created": "2015-01-06T15:47:31.485331387Z", + "Driver": "devicemapper", + "ExecIDs": null, + "HostConfig": { + "Binds": null, + "MaximumIOps": 0, + "MaximumIOBps": 0, + "BlkioWeight": 0, + "BlkioWeightDevice": [{}], + "BlkioDeviceReadBps": [{}], + "BlkioDeviceWriteBps": [{}], + "BlkioDeviceReadIOps": [{}], + "BlkioDeviceWriteIOps": [{}], + "CapAdd": null, + "CapDrop": null, + "ContainerIDFile": "", + "CpusetCpus": "", + "CpusetMems": "", + "CpuPercent": 80, + "CpuShares": 0, + "CpuPeriod": 100000, + "Devices": [], + "Dns": null, + "DnsOptions": null, + "DnsSearch": null, + "ExtraHosts": null, + "IpcMode": "", + "Links": null, + "LxcConf": [], + "Memory": 0, + "MemorySwap": 0, + "MemoryReservation": 0, + "KernelMemory": 0, + "OomKillDisable": false, + "OomScoreAdj": 500, + "NetworkMode": "bridge", + "PidMode": "", + "PortBindings": {}, + "Privileged": false, + "ReadonlyRootfs": false, + "PublishAllPorts": false, + "RestartPolicy": { + "MaximumRetryCount": 2, + "Name": "on-failure" + }, + "AutoRemove": true, + "LogConfig": { + "Config": null, + "Type": "json-file" + }, + "SecurityOpt": null, + "Sysctls": { + "net.ipv4.ip_forward": "1" + }, + "StorageOpt": null, + "VolumesFrom": null, + "Ulimits": [{}], + "VolumeDriver": "", + "ShmSize": 67108864 + }, + "HostnamePath": "/var/lib/docker/containers/ba033ac4401106a3b513bc9d639eee123ad78ca3616b921167cd74b20e25ed39/hostname", + "HostsPath": "/var/lib/docker/containers/ba033ac4401106a3b513bc9d639eee123ad78ca3616b921167cd74b20e25ed39/hosts", + "LogPath": "/var/lib/docker/containers/1eb5fabf5a03807136561b3c00adcd2992b535d624d5e18b6cdc6a6844d9767b/1eb5fabf5a03807136561b3c00adcd2992b535d624d5e18b6cdc6a6844d9767b-json.log", + "Id": "ba033ac4401106a3b513bc9d639eee123ad78ca3616b921167cd74b20e25ed39", + "Image": "04c5d3b7b0656168630d3ba35d8889bd0e9caafcaeb3004d2bfbc47e7c5d35d2", + "MountLabel": "", + "Name": "/boring_euclid", + "NetworkSettings": { + "Bridge": "", + "SandboxID": "", + "HairpinMode": false, + "LinkLocalIPv6Address": "", + "LinkLocalIPv6PrefixLen": 0, + "Ports": null, + "SandboxKey": "", + "SecondaryIPAddresses": null, + "SecondaryIPv6Addresses": null, + "EndpointID": "", + "Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "IPAddress": "", + "IPPrefixLen": 0, + "IPv6Gateway": "", + "MacAddress": "", + "Networks": { + "bridge": { + "NetworkID": "7ea29fc1412292a2d7bba362f9253545fecdfa8ce9a6e37dd10ba8bee7129812", + "EndpointID": "7587b82f0dada3656fda26588aee72630c6fab1536d36e394b2bfbcf898c971d", + "Gateway": "172.17.0.1", + "IPAddress": "172.17.0.2", + "IPPrefixLen": 16, + "IPv6Gateway": "", + "GlobalIPv6Address": "", + "GlobalIPv6PrefixLen": 0, + "MacAddress": "02:42:ac:12:00:02" + } + } + }, + "Path": "/bin/sh", + "ProcessLabel": "", + "ResolvConfPath": "/var/lib/docker/containers/ba033ac4401106a3b513bc9d639eee123ad78ca3616b921167cd74b20e25ed39/resolv.conf", + "RestartCount": 1, + "State": { + "Error": "", + "ExitCode": 9, + "FinishedAt": "2015-01-06T15:47:32.080254511Z", + "OOMKilled": false, + "Dead": false, + "Paused": false, + "Pid": 0, + "Restarting": false, + "Running": true, + "StartedAt": "2015-01-06T15:47:32.072697474Z", + "Status": "running" + }, + "Mounts": [ + { + "Name": "fac362...80535", + "Source": "/data", + "Destination": "/data", + "Driver": "local", + "Mode": "ro,Z", + "RW": false, + "Propagation": "" + } + ] + } + +**Example request, with size information**: + + GET /containers/4fa6e0f0c678/json?size=1 HTTP/1.1 + +**Example response, with size information**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + .... + "SizeRw": 0, + "SizeRootFs": 972, + .... + } + +**Query parameters**: + +- **size** – 1/True/true or 0/False/false, return container size information. Default is `false`. + +**Status codes**: + +- **200** – no error +- **404** – no such container +- **500** – server error + +### List processes running inside a container + +`GET /containers/(id or name)/top` + +List processes running inside the container `id`. On Unix systems this +is done by running the `ps` command. This endpoint is not +supported on Windows. + +**Example request**: + + GET /containers/4fa6e0f0c678/top HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Titles" : [ + "UID", "PID", "PPID", "C", "STIME", "TTY", "TIME", "CMD" + ], + "Processes" : [ + [ + "root", "13642", "882", "0", "17:03", "pts/0", "00:00:00", "/bin/bash" + ], + [ + "root", "13735", "13642", "0", "17:06", "pts/0", "00:00:00", "sleep 10" + ] + ] + } + +**Example request**: + + GET /containers/4fa6e0f0c678/top?ps_args=aux HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Titles" : [ + "USER","PID","%CPU","%MEM","VSZ","RSS","TTY","STAT","START","TIME","COMMAND" + ] + "Processes" : [ + [ + "root","13642","0.0","0.1","18172","3184","pts/0","Ss","17:03","0:00","/bin/bash" + ], + [ + "root","13895","0.0","0.0","4348","692","pts/0","S+","17:15","0:00","sleep 10" + ] + ], + } + +**Query parameters**: + +- **ps_args** – `ps` arguments to use (e.g., `aux`), defaults to `-ef` + +**Status codes**: + +- **200** – no error +- **404** – no such container +- **500** – server error + +### Get container logs + +`GET /containers/(id or name)/logs` + +Get `stdout` and `stderr` logs from the container ``id`` + +> **Note**: +> This endpoint works only for containers with the `json-file` or `journald` logging drivers. + +**Example request**: + + GET /containers/4fa6e0f0c678/logs?stderr=1&stdout=1×tamps=1&follow=1&tail=10&since=1428990821 HTTP/1.1 + +**Example response**: + + HTTP/1.1 101 UPGRADED + Content-Type: application/vnd.docker.raw-stream + Connection: Upgrade + Upgrade: tcp + + {{ STREAM }} + +**Query parameters**: + +- **details** - 1/True/true or 0/False/flase, Show extra details provided to logs. Default `false`. +- **follow** – 1/True/true or 0/False/false, return stream. Default `false`. +- **stdout** – 1/True/true or 0/False/false, show `stdout` log. Default `false`. +- **stderr** – 1/True/true or 0/False/false, show `stderr` log. Default `false`. +- **since** – UNIX timestamp (integer) to filter logs. Specifying a timestamp + will only output log-entries since that timestamp. Default: 0 (unfiltered) +- **timestamps** – 1/True/true or 0/False/false, print timestamps for + every log line. Default `false`. +- **tail** – Output specified number of lines at the end of logs: `all` or ``. Default all. + +**Status codes**: + +- **101** – no error, hints proxy about hijacking +- **200** – no error, no upgrade header found +- **404** – no such container +- **500** – server error + +### Inspect changes on a container's filesystem + +`GET /containers/(id or name)/changes` + +Inspect changes on container `id`'s filesystem + +**Example request**: + + GET /containers/4fa6e0f0c678/changes HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "Path": "/dev", + "Kind": 0 + }, + { + "Path": "/dev/kmsg", + "Kind": 1 + }, + { + "Path": "/test", + "Kind": 1 + } + ] + +Values for `Kind`: + +- `0`: Modify +- `1`: Add +- `2`: Delete + +**Status codes**: + +- **200** – no error +- **404** – no such container +- **500** – server error + +### Export a container + +`GET /containers/(id or name)/export` + +Export the contents of container `id` + +**Example request**: + + GET /containers/4fa6e0f0c678/export HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/octet-stream + + {{ TAR STREAM }} + +**Status codes**: + +- **200** – no error +- **404** – no such container +- **500** – server error + +### Get container stats based on resource usage + +`GET /containers/(id or name)/stats` + +This endpoint returns a live stream of a container's resource usage statistics. + +**Example request**: + + GET /containers/redis1/stats HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "read" : "2015-01-08T22:57:31.547920715Z", + "pids_stats": { + "current": 3 + }, + "networks": { + "eth0": { + "rx_bytes": 5338, + "rx_dropped": 0, + "rx_errors": 0, + "rx_packets": 36, + "tx_bytes": 648, + "tx_dropped": 0, + "tx_errors": 0, + "tx_packets": 8 + }, + "eth5": { + "rx_bytes": 4641, + "rx_dropped": 0, + "rx_errors": 0, + "rx_packets": 26, + "tx_bytes": 690, + "tx_dropped": 0, + "tx_errors": 0, + "tx_packets": 9 + } + }, + "memory_stats" : { + "stats" : { + "total_pgmajfault" : 0, + "cache" : 0, + "mapped_file" : 0, + "total_inactive_file" : 0, + "pgpgout" : 414, + "rss" : 6537216, + "total_mapped_file" : 0, + "writeback" : 0, + "unevictable" : 0, + "pgpgin" : 477, + "total_unevictable" : 0, + "pgmajfault" : 0, + "total_rss" : 6537216, + "total_rss_huge" : 6291456, + "total_writeback" : 0, + "total_inactive_anon" : 0, + "rss_huge" : 6291456, + "hierarchical_memory_limit" : 67108864, + "total_pgfault" : 964, + "total_active_file" : 0, + "active_anon" : 6537216, + "total_active_anon" : 6537216, + "total_pgpgout" : 414, + "total_cache" : 0, + "inactive_anon" : 0, + "active_file" : 0, + "pgfault" : 964, + "inactive_file" : 0, + "total_pgpgin" : 477 + }, + "max_usage" : 6651904, + "usage" : 6537216, + "failcnt" : 0, + "limit" : 67108864 + }, + "blkio_stats" : {}, + "cpu_stats" : { + "cpu_usage" : { + "percpu_usage" : [ + 8646879, + 24472255, + 36438778, + 30657443 + ], + "usage_in_usermode" : 50000000, + "total_usage" : 100215355, + "usage_in_kernelmode" : 30000000 + }, + "system_cpu_usage" : 739306590000000, + "throttling_data" : {"periods":0,"throttled_periods":0,"throttled_time":0} + }, + "precpu_stats" : { + "cpu_usage" : { + "percpu_usage" : [ + 8646879, + 24350896, + 36438778, + 30657443 + ], + "usage_in_usermode" : 50000000, + "total_usage" : 100093996, + "usage_in_kernelmode" : 30000000 + }, + "system_cpu_usage" : 9492140000000, + "throttling_data" : {"periods":0,"throttled_periods":0,"throttled_time":0} + } + } + +The precpu_stats is the cpu statistic of last read, which is used for calculating the cpu usage percent. It is not the exact copy of the “cpu_stats” field. + +**Query parameters**: + +- **stream** – 1/True/true or 0/False/false, pull stats once then disconnect. Default `true`. + +**Status codes**: + +- **200** – no error +- **404** – no such container +- **500** – server error + +### Resize a container TTY + +`POST /containers/(id or name)/resize` + +Resize the TTY for container with `id`. The unit is number of characters. You must restart the container for the resize to take effect. + +**Example request**: + + POST /containers/4fa6e0f0c678/resize?h=40&w=80 HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Query parameters**: + +- **h** – height of `tty` session +- **w** – width + +**Status codes**: + +- **200** – no error +- **404** – No such container +- **500** – Cannot resize container + +### Start a container + +`POST /containers/(id or name)/start` + +Start the container `id` + +**Example request**: + + POST /containers/e90e34656806/start HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Query parameters**: + +- **detachKeys** – Override the key sequence for detaching a + container. Format is a single character `[a-Z]` or `ctrl-` + where `` is one of: `a-z`, `@`, `^`, `[`, `,` or `_`. + +**Status codes**: + +- **204** – no error +- **304** – container already started +- **404** – no such container +- **500** – server error + +### Stop a container + +`POST /containers/(id or name)/stop` + +Stop the container `id` + +**Example request**: + + POST /containers/e90e34656806/stop?t=5 HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Query parameters**: + +- **t** – number of seconds to wait before killing the container + +**Status codes**: + +- **204** – no error +- **304** – container already stopped +- **404** – no such container +- **500** – server error + +### Restart a container + +`POST /containers/(id or name)/restart` + +Restart the container `id` + +**Example request**: + + POST /containers/e90e34656806/restart?t=5 HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Query parameters**: + +- **t** – number of seconds to wait before killing the container + +**Status codes**: + +- **204** – no error +- **404** – no such container +- **500** – server error + +### Kill a container + +`POST /containers/(id or name)/kill` + +Kill the container `id` + +**Example request**: + + POST /containers/e90e34656806/kill HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Query parameters**: + +- **signal** - Signal to send to the container: integer or string like `SIGINT`. + When not set, `SIGKILL` is assumed and the call waits for the container to exit. + +**Status codes**: + +- **204** – no error +- **404** – no such container +- **500** – server error + +### Update a container + +`POST /containers/(id or name)/update` + +Update configuration of one or more containers. + +**Example request**: + + POST /containers/e90e34656806/update HTTP/1.1 + Content-Type: application/json + + { + "BlkioWeight": 300, + "CpuShares": 512, + "CpuPeriod": 100000, + "CpuQuota": 50000, + "CpusetCpus": "0,1", + "CpusetMems": "0", + "Memory": 314572800, + "MemorySwap": 514288000, + "MemoryReservation": 209715200, + "KernelMemory": 52428800, + "RestartPolicy": { + "MaximumRetryCount": 4, + "Name": "on-failure" + }, + } + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Warnings": [] + } + +**Status codes**: + +- **200** – no error +- **400** – bad parameter +- **404** – no such container +- **500** – server error + +### Rename a container + +`POST /containers/(id or name)/rename` + +Rename the container `id` to a `new_name` + +**Example request**: + + POST /containers/e90e34656806/rename?name=new_name HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Query parameters**: + +- **name** – new name for the container + +**Status codes**: + +- **204** – no error +- **404** – no such container +- **409** - conflict name already assigned +- **500** – server error + +### Pause a container + +`POST /containers/(id or name)/pause` + +Pause the container `id` + +**Example request**: + + POST /containers/e90e34656806/pause HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Status codes**: + +- **204** – no error +- **404** – no such container +- **500** – server error + +### Unpause a container + +`POST /containers/(id or name)/unpause` + +Unpause the container `id` + +**Example request**: + + POST /containers/e90e34656806/unpause HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Status codes**: + +- **204** – no error +- **404** – no such container +- **500** – server error + +### Attach to a container + +`POST /containers/(id or name)/attach` + +Attach to the container `id` + +**Example request**: + + POST /containers/16253994b7c4/attach?logs=1&stream=0&stdout=1 HTTP/1.1 + +**Example response**: + + HTTP/1.1 101 UPGRADED + Content-Type: application/vnd.docker.raw-stream + Connection: Upgrade + Upgrade: tcp + + {{ STREAM }} + +**Query parameters**: + +- **detachKeys** – Override the key sequence for detaching a + container. Format is a single character `[a-Z]` or `ctrl-` + where `` is one of: `a-z`, `@`, `^`, `[`, `,` or `_`. +- **logs** – 1/True/true or 0/False/false, return logs. Default `false`. +- **stream** – 1/True/true or 0/False/false, return stream. + Default `false`. +- **stdin** – 1/True/true or 0/False/false, if `stream=true`, attach + to `stdin`. Default `false`. +- **stdout** – 1/True/true or 0/False/false, if `logs=true`, return + `stdout` log, if `stream=true`, attach to `stdout`. Default `false`. +- **stderr** – 1/True/true or 0/False/false, if `logs=true`, return + `stderr` log, if `stream=true`, attach to `stderr`. Default `false`. + +**Status codes**: + +- **101** – no error, hints proxy about hijacking +- **200** – no error, no upgrade header found +- **400** – bad parameter +- **404** – no such container +- **409** - container is paused +- **500** – server error + + **Stream details**: + + When using the TTY setting is enabled in + [`POST /containers/create` + ](#create-a-container), + the stream is the raw data from the process PTY and client's `stdin`. + When the TTY is disabled, then the stream is multiplexed to separate + `stdout` and `stderr`. + + The format is a **Header** and a **Payload** (frame). + + **HEADER** + + The header contains the information which the stream writes (`stdout` or + `stderr`). It also contains the size of the associated frame encoded in the + last four bytes (`uint32`). + + It is encoded on the first eight bytes like this: + + header := [8]byte{STREAM_TYPE, 0, 0, 0, SIZE1, SIZE2, SIZE3, SIZE4} + + `STREAM_TYPE` can be: + +- 0: `stdin` (is written on `stdout`) +- 1: `stdout` +- 2: `stderr` + + `SIZE1, SIZE2, SIZE3, SIZE4` are the four bytes of + the `uint32` size encoded as big endian. + + **PAYLOAD** + + The payload is the raw stream. + + **IMPLEMENTATION** + + The simplest way to implement the Attach protocol is the following: + + 1. Read eight bytes. + 2. Choose `stdout` or `stderr` depending on the first byte. + 3. Extract the frame size from the last four bytes. + 4. Read the extracted size and output it on the correct output. + 5. Goto 1. + +### Attach to a container (websocket) + +`GET /containers/(id or name)/attach/ws` + +Attach to the container `id` via websocket + +Implements websocket protocol handshake according to [RFC 6455](http://tools.ietf.org/html/rfc6455) + +**Example request** + + GET /containers/e90e34656806/attach/ws?logs=0&stream=1&stdin=1&stdout=1&stderr=1 HTTP/1.1 + +**Example response** + + {{ STREAM }} + +**Query parameters**: + +- **detachKeys** – Override the key sequence for detaching a + container. Format is a single character `[a-Z]` or `ctrl-` + where `` is one of: `a-z`, `@`, `^`, `[`, `,` or `_`. +- **logs** – 1/True/true or 0/False/false, return logs. Default `false`. +- **stream** – 1/True/true or 0/False/false, return stream. + Default `false`. +- **stdin** – 1/True/true or 0/False/false, if `stream=true`, attach + to `stdin`. Default `false`. +- **stdout** – 1/True/true or 0/False/false, if `logs=true`, return + `stdout` log, if `stream=true`, attach to `stdout`. Default `false`. +- **stderr** – 1/True/true or 0/False/false, if `logs=true`, return + `stderr` log, if `stream=true`, attach to `stderr`. Default `false`. + +**Status codes**: + +- **200** – no error +- **400** – bad parameter +- **404** – no such container +- **500** – server error + +### Wait a container + +`POST /containers/(id or name)/wait` + +Block until container `id` stops, then returns the exit code + +**Example request**: + + POST /containers/16253994b7c4/wait HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + {"StatusCode": 0} + +**Status codes**: + +- **200** – no error +- **404** – no such container +- **500** – server error + +### Remove a container + +`DELETE /containers/(id or name)` + +Remove the container `id` from the filesystem + +**Example request**: + + DELETE /containers/16253994b7c4?v=1 HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Query parameters**: + +- **v** – 1/True/true or 0/False/false, Remove the volumes + associated to the container. Default `false`. +- **force** - 1/True/true or 0/False/false, Kill then remove the container. + Default `false`. + +**Status codes**: + +- **204** – no error +- **400** – bad parameter +- **404** – no such container +- **409** – conflict +- **500** – server error + +### Retrieving information about files and folders in a container + +`HEAD /containers/(id or name)/archive` + +See the description of the `X-Docker-Container-Path-Stat` header in the +following section. + +### Get an archive of a filesystem resource in a container + +`GET /containers/(id or name)/archive` + +Get a tar archive of a resource in the filesystem of container `id`. + +**Query parameters**: + +- **path** - resource in the container's filesystem to archive. Required. + + If not an absolute path, it is relative to the container's root directory. + The resource specified by **path** must exist. To assert that the resource + is expected to be a directory, **path** should end in `/` or `/.` + (assuming a path separator of `/`). If **path** ends in `/.` then this + indicates that only the contents of the **path** directory should be + copied. A symlink is always resolved to its target. + + > **Note**: It is not possible to copy certain system files such as resources + > under `/proc`, `/sys`, `/dev`, and mounts created by the user in the + > container. + +**Example request**: + + GET /containers/8cce319429b2/archive?path=/root HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/x-tar + X-Docker-Container-Path-Stat: eyJuYW1lIjoicm9vdCIsInNpemUiOjQwOTYsIm1vZGUiOjIxNDc0ODQwOTYsIm10aW1lIjoiMjAxNC0wMi0yN1QyMDo1MToyM1oiLCJsaW5rVGFyZ2V0IjoiIn0= + + {{ TAR STREAM }} + +On success, a response header `X-Docker-Container-Path-Stat` will be set to a +base64-encoded JSON object containing some filesystem header information about +the archived resource. The above example value would decode to the following +JSON object (whitespace added for readability): + +```json +{ + "name": "root", + "size": 4096, + "mode": 2147484096, + "mtime": "2014-02-27T20:51:23Z", + "linkTarget": "" +} +``` + +A `HEAD` request can also be made to this endpoint if only this information is +desired. + +**Status codes**: + +- **200** - success, returns archive of copied resource +- **400** - client error, bad parameter, details in JSON response body, one of: + - must specify path parameter (**path** cannot be empty) + - not a directory (**path** was asserted to be a directory but exists as a + file) +- **404** - client error, resource not found, one of: + – no such container (container `id` does not exist) + - no such file or directory (**path** does not exist) +- **500** - server error + +### Extract an archive of files or folders to a directory in a container + +`PUT /containers/(id or name)/archive` + +Upload a tar archive to be extracted to a path in the filesystem of container +`id`. + +**Query parameters**: + +- **path** - path to a directory in the container + to extract the archive's contents into. Required. + + If not an absolute path, it is relative to the container's root directory. + The **path** resource must exist. +- **noOverwriteDirNonDir** - If "1", "true", or "True" then it will be an error + if unpacking the given content would cause an existing directory to be + replaced with a non-directory and vice versa. + +**Example request**: + + PUT /containers/8cce319429b2/archive?path=/vol1 HTTP/1.1 + Content-Type: application/x-tar + + {{ TAR STREAM }} + +**Example response**: + + HTTP/1.1 200 OK + +**Status codes**: + +- **200** – the content was extracted successfully +- **400** - client error, bad parameter, details in JSON response body, one of: + - must specify path parameter (**path** cannot be empty) + - not a directory (**path** should be a directory but exists as a file) + - unable to overwrite existing directory with non-directory + (if **noOverwriteDirNonDir**) + - unable to overwrite existing non-directory with directory + (if **noOverwriteDirNonDir**) +- **403** - client error, permission denied, the volume + or container rootfs is marked as read-only. +- **404** - client error, resource not found, one of: + – no such container (container `id` does not exist) + - no such file or directory (**path** resource does not exist) +- **500** – server error + +## 3.2 Images + +### List Images + +`GET /images/json` + +**Example request**: + + GET /images/json?all=0 HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "RepoTags": [ + "ubuntu:12.04", + "ubuntu:precise", + "ubuntu:latest" + ], + "Id": "8dbd9e392a964056420e5d58ca5cc376ef18e2de93b5cc90e868a1bbc8318c1c", + "Created": 1365714795, + "Size": 131506275, + "VirtualSize": 131506275, + "Labels": {} + }, + { + "RepoTags": [ + "ubuntu:12.10", + "ubuntu:quantal" + ], + "ParentId": "27cf784147099545", + "Id": "b750fe79269d2ec9a3c593ef05b4332b1d1a02a62b4accb2c21d589ff2f5f2dc", + "Created": 1364102658, + "Size": 24653, + "VirtualSize": 180116135, + "Labels": { + "com.example.version": "v1" + } + } + ] + +**Example request, with digest information**: + + GET /images/json?digests=1 HTTP/1.1 + +**Example response, with digest information**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "Created": 1420064636, + "Id": "4986bf8c15363d1c5d15512d5266f8777bfba4974ac56e3270e7760f6f0a8125", + "ParentId": "ea13149945cb6b1e746bf28032f02e9b5a793523481a0a18645fc77ad53c4ea2", + "RepoDigests": [ + "localhost:5000/test/busybox@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf" + ], + "RepoTags": [ + "localhost:5000/test/busybox:latest", + "playdate:latest" + ], + "Size": 0, + "VirtualSize": 2429728, + "Labels": {} + } + ] + +The response shows a single image `Id` associated with two repositories +(`RepoTags`): `localhost:5000/test/busybox`: and `playdate`. A caller can use +either of the `RepoTags` values `localhost:5000/test/busybox:latest` or +`playdate:latest` to reference the image. + +You can also use `RepoDigests` values to reference an image. In this response, +the array has only one reference and that is to the +`localhost:5000/test/busybox` repository; the `playdate` repository has no +digest. You can reference this digest using the value: +`localhost:5000/test/busybox@sha256:cbbf2f9a99b47fc460d...` + +See the `docker run` and `docker build` commands for examples of digest and tag +references on the command line. + +**Query parameters**: + +- **all** – 1/True/true or 0/False/false, default false +- **filters** – a JSON encoded value of the filters (a map[string][]string) to process on the images list. Available filters: + - `dangling=true` + - `label=key` or `label="key=value"` of an image label + - `before`=(`[:]`, `` or ``) + - `since`=(`[:]`, `` or ``) +- **filter** - only return images with the specified name + +### Build image from a Dockerfile + +`POST /build` + +Build an image from a Dockerfile + +**Example request**: + + POST /build HTTP/1.1 + + {{ TAR STREAM }} + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + {"stream": "Step 1..."} + {"stream": "..."} + {"error": "Error...", "errorDetail": {"code": 123, "message": "Error..."}} + +The input stream must be a `tar` archive compressed with one of the +following algorithms: `identity` (no compression), `gzip`, `bzip2`, `xz`. + +The archive must include a build instructions file, typically called +`Dockerfile` at the archive's root. The `dockerfile` parameter may be +used to specify a different build instructions file. To do this, its value must be +the path to the alternate build instructions file to use. + +The archive may include any number of other files, +which are accessible in the build context (See the [*ADD build +command*](../../reference/builder.md#add)). + +The build is canceled if the client drops the connection by quitting +or being killed. + +**Query parameters**: + +- **dockerfile** - Path within the build context to the Dockerfile. This is + ignored if `remote` is specified and points to an individual filename. +- **t** – A name and optional tag to apply to the image in the `name:tag` format. + If you omit the `tag` the default `latest` value is assumed. + You can provide one or more `t` parameters. +- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the + URI points to a single text file, the file's contents are placed into + a file called `Dockerfile` and the image is built from that file. +- **q** – Suppress verbose build output. +- **nocache** – Do not use the cache when building the image. +- **pull** - Attempt to pull the image even if an older image exists locally. +- **rm** - Remove intermediate containers after a successful build (default behavior). +- **forcerm** - Always remove intermediate containers (includes `rm`). +- **memory** - Set memory limit for build. +- **memswap** - Total memory (memory + swap), `-1` to enable unlimited swap. +- **cpushares** - CPU shares (relative weight). +- **cpusetcpus** - CPUs in which to allow execution (e.g., `0-3`, `0,1`). +- **cpuperiod** - The length of a CPU period in microseconds. +- **cpuquota** - Microseconds of CPU time that the container can get in a CPU period. +- **buildargs** – JSON map of string pairs for build-time variables. Users pass + these values at build-time. Docker uses the `buildargs` as the environment + context for command(s) run via the Dockerfile's `RUN` instruction or for + variable expansion in other Dockerfile instructions. This is not meant for + passing secret values. [Read more about the buildargs instruction](../../reference/builder.md#arg) +- **shmsize** - Size of `/dev/shm` in bytes. The size must be greater than 0. If omitted the system uses 64MB. +- **labels** – JSON map of string pairs for labels to set on the image. + +**Request Headers**: + +- **Content-type** – Set to `"application/tar"`. +- **X-Registry-Config** – A base64-url-safe-encoded Registry Auth Config JSON + object with the following structure: + + { + "docker.example.com": { + "username": "janedoe", + "password": "hunter2" + }, + "https://index.docker.io/v1/": { + "username": "mobydock", + "password": "conta1n3rize14" + } + } + + This object maps the hostname of a registry to an object containing the + "username" and "password" for that registry. Multiple registries may + be specified as the build may be based on an image requiring + authentication to pull from any arbitrary registry. Only the registry + domain name (and port if not the default "443") are required. However + (for legacy reasons) the "official" Docker, Inc. hosted registry must + be specified with both a "https://" prefix and a "/v1/" suffix even + though Docker will prefer to use the v2 registry API. + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Create an image + +`POST /images/create` + +Create an image either by pulling it from the registry or by importing it + +**Example request**: + + POST /images/create?fromImage=ubuntu HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + {"status": "Pulling..."} + {"status": "Pulling", "progress": "1 B/ 100 B", "progressDetail": {"current": 1, "total": 100}} + {"error": "Invalid..."} + ... + +When using this endpoint to pull an image from the registry, the +`X-Registry-Auth` header can be used to include +a base64-encoded AuthConfig object. + +**Query parameters**: + +- **fromImage** – Name of the image to pull. The name may include a tag or + digest. This parameter may only be used when pulling an image. + The pull is cancelled if the HTTP connection is closed. +- **fromSrc** – Source to import. The value may be a URL from which the image + can be retrieved or `-` to read the image from the request body. + This parameter may only be used when importing an image. +- **repo** – Repository name given to an image when it is imported. + The repo may include a tag. This parameter may only be used when importing + an image. +- **tag** – Tag or digest. + +**Request Headers**: + +- **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token + - Credential based login: + + ``` + { + "username": "jdoe", + "password": "secret", + "email": "jdoe@acme.com" + } + ``` + + - Token based login: + + ``` + { + "registrytoken": "9cbaf023786cd7..." + } + ``` + +**Status codes**: + +- **200** – no error +- **500** – server error + + + +### Inspect an image + +`GET /images/(name)/json` + +Return low-level information on the image `name` + +**Example request**: + + GET /images/example/json HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Id" : "sha256:85f05633ddc1c50679be2b16a0479ab6f7637f8884e0cfe0f4d20e1ebb3d6e7c", + "Container" : "cb91e48a60d01f1e27028b4fc6819f4f290b3cf12496c8176ec714d0d390984a", + "Comment" : "", + "Os" : "linux", + "Architecture" : "amd64", + "Parent" : "sha256:91e54dfb11794fad694460162bf0cb0a4fa710cfa3f60979c177d920813e267c", + "ContainerConfig" : { + "Tty" : false, + "Hostname" : "e611e15f9c9d", + "Volumes" : null, + "Domainname" : "", + "AttachStdout" : false, + "PublishService" : "", + "AttachStdin" : false, + "OpenStdin" : false, + "StdinOnce" : false, + "NetworkDisabled" : false, + "OnBuild" : [], + "Image" : "91e54dfb11794fad694460162bf0cb0a4fa710cfa3f60979c177d920813e267c", + "User" : "", + "WorkingDir" : "", + "Entrypoint" : null, + "MacAddress" : "", + "AttachStderr" : false, + "Labels" : { + "com.example.license" : "GPL", + "com.example.version" : "1.0", + "com.example.vendor" : "Acme" + }, + "Env" : [ + "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + ], + "ExposedPorts" : null, + "Cmd" : [ + "/bin/sh", + "-c", + "#(nop) LABEL com.example.vendor=Acme com.example.license=GPL com.example.version=1.0" + ] + }, + "DockerVersion" : "1.9.0-dev", + "VirtualSize" : 188359297, + "Size" : 0, + "Author" : "", + "Created" : "2015-09-10T08:30:53.26995814Z", + "GraphDriver" : { + "Name" : "aufs", + "Data" : null + }, + "RepoDigests" : [ + "localhost:5000/test/busybox/example@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf" + ], + "RepoTags" : [ + "example:1.0", + "example:latest", + "example:stable" + ], + "Config" : { + "Image" : "91e54dfb11794fad694460162bf0cb0a4fa710cfa3f60979c177d920813e267c", + "NetworkDisabled" : false, + "OnBuild" : [], + "StdinOnce" : false, + "PublishService" : "", + "AttachStdin" : false, + "OpenStdin" : false, + "Domainname" : "", + "AttachStdout" : false, + "Tty" : false, + "Hostname" : "e611e15f9c9d", + "Volumes" : null, + "Cmd" : [ + "/bin/bash" + ], + "ExposedPorts" : null, + "Env" : [ + "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" + ], + "Labels" : { + "com.example.vendor" : "Acme", + "com.example.version" : "1.0", + "com.example.license" : "GPL" + }, + "Entrypoint" : null, + "MacAddress" : "", + "AttachStderr" : false, + "WorkingDir" : "", + "User" : "" + }, + "RootFS": { + "Type": "layers", + "Layers": [ + "sha256:1834950e52ce4d5a88a1bbd131c537f4d0e56d10ff0dd69e66be3b7dfa9df7e6", + "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" + ] + } + } + +**Status codes**: + +- **200** – no error +- **404** – no such image +- **500** – server error + +### Get the history of an image + +`GET /images/(name)/history` + +Return the history of the image `name` + +**Example request**: + + GET /images/ubuntu/history HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "Id": "3db9c44f45209632d6050b35958829c3a2aa256d81b9a7be45b362ff85c54710", + "Created": 1398108230, + "CreatedBy": "/bin/sh -c #(nop) ADD file:eb15dbd63394e063b805a3c32ca7bf0266ef64676d5a6fab4801f2e81e2a5148 in /", + "Tags": [ + "ubuntu:lucid", + "ubuntu:10.04" + ], + "Size": 182964289, + "Comment": "" + }, + { + "Id": "6cfa4d1f33fb861d4d114f43b25abd0ac737509268065cdfd69d544a59c85ab8", + "Created": 1398108222, + "CreatedBy": "/bin/sh -c #(nop) MAINTAINER Tianon Gravi - mkimage-debootstrap.sh -i iproute,iputils-ping,ubuntu-minimal -t lucid.tar.xz lucid http://archive.ubuntu.com/ubuntu/", + "Tags": null, + "Size": 0, + "Comment": "" + }, + { + "Id": "511136ea3c5a64f264b78b5433614aec563103b4d4702f3ba7d4d2698e22c158", + "Created": 1371157430, + "CreatedBy": "", + "Tags": [ + "scratch12:latest", + "scratch:latest" + ], + "Size": 0, + "Comment": "Imported from -" + } + ] + +**Status codes**: + +- **200** – no error +- **404** – no such image +- **500** – server error + +### Push an image on the registry + +`POST /images/(name)/push` + +Push the image `name` on the registry + +**Example request**: + + POST /images/test/push HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + {"status": "Pushing..."} + {"status": "Pushing", "progress": "1/? (n/a)", "progressDetail": {"current": 1}}} + {"error": "Invalid..."} + ... + +If you wish to push an image on to a private registry, that image must already have a tag +into a repository which references that registry `hostname` and `port`. This repository name should +then be used in the URL. This duplicates the command line's flow. + +The push is cancelled if the HTTP connection is closed. + +**Example request**: + + POST /images/registry.acme.com:5000/test/push HTTP/1.1 + + +**Query parameters**: + +- **tag** – The tag to associate with the image on the registry. This is optional. + +**Request Headers**: + +- **X-Registry-Auth** – base64-encoded AuthConfig object, containing either login information, or a token + - Credential based login: + + ``` + { + "username": "jdoe", + "password": "secret", + "email": "jdoe@acme.com", + } + ``` + + - Identity token based login: + + ``` + { + "identitytoken": "9cbaf023786cd7..." + } + ``` + +**Status codes**: + +- **200** – no error +- **404** – no such image +- **500** – server error + +### Tag an image into a repository + +`POST /images/(name)/tag` + +Tag the image `name` into a repository + +**Example request**: + + POST /images/test/tag?repo=myrepo&tag=v42 HTTP/1.1 + +**Example response**: + + HTTP/1.1 201 Created + +**Query parameters**: + +- **repo** – The repository to tag in +- **tag** - The new tag name + +**Status codes**: + +- **201** – no error +- **400** – bad parameter +- **404** – no such image +- **409** – conflict +- **500** – server error + +### Remove an image + +`DELETE /images/(name)` + +Remove the image `name` from the filesystem + +**Example request**: + + DELETE /images/test HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-type: application/json + + [ + {"Untagged": "3e2f21a89f"}, + {"Deleted": "3e2f21a89f"}, + {"Deleted": "53b4f83ac9"} + ] + +**Query parameters**: + +- **force** – 1/True/true or 0/False/false, default false +- **noprune** – 1/True/true or 0/False/false, default false + +**Status codes**: + +- **200** – no error +- **404** – no such image +- **409** – conflict +- **500** – server error + +### Search images + +`GET /images/search` + +Search for an image on [Docker Hub](https://hub.docker.com). + +> **Note**: +> The response keys have changed from API v1.6 to reflect the JSON +> sent by the registry server to the docker daemon's request. + +**Example request**: + + GET /images/search?term=sshd HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "description": "", + "is_official": false, + "is_automated": false, + "name": "wma55/u1210sshd", + "star_count": 0 + }, + { + "description": "", + "is_official": false, + "is_automated": false, + "name": "jdswinbank/sshd", + "star_count": 0 + }, + { + "description": "", + "is_official": false, + "is_automated": false, + "name": "vgauthier/sshd", + "star_count": 0 + } + ... + ] + +**Query parameters**: + +- **term** – term to search +- **limit** – maximum returned search results +- **filters** – a JSON encoded value of the filters (a map[string][]string) to process on the images list. Available filters: + - `stars=` + - `is-automated=(true|false)` + - `is-official=(true|false)` + +**Status codes**: + +- **200** – no error +- **500** – server error + +## 3.3 Misc + +### Check auth configuration + +`POST /auth` + +Validate credentials for a registry and get identity token, +if available, for accessing the registry without password. + +**Example request**: + + POST /auth HTTP/1.1 + Content-Type: application/json + + { + "username": "hannibal", + "password": "xxxx", + "serveraddress": "https://index.docker.io/v1/" + } + +**Example response**: + + HTTP/1.1 200 OK + + { + "Status": "Login Succeeded", + "IdentityToken": "9cbaf023786cd7..." + } + +**Status codes**: + +- **200** – no error +- **204** – no error +- **500** – server error + +### Display system-wide information + +`GET /info` + +Display system-wide information + +**Example request**: + + GET /info HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Architecture": "x86_64", + "ClusterStore": "etcd://localhost:2379", + "CgroupDriver": "cgroupfs", + "Containers": 11, + "ContainersRunning": 7, + "ContainersStopped": 3, + "ContainersPaused": 1, + "CpuCfsPeriod": true, + "CpuCfsQuota": true, + "Debug": false, + "DockerRootDir": "/var/lib/docker", + "Driver": "btrfs", + "DriverStatus": [[""]], + "ExperimentalBuild": false, + "HttpProxy": "http://test:test@localhost:8080", + "HttpsProxy": "https://test:test@localhost:8080", + "ID": "7TRN:IPZB:QYBB:VPBQ:UMPP:KARE:6ZNR:XE6T:7EWV:PKF4:ZOJD:TPYS", + "IPv4Forwarding": true, + "Images": 16, + "IndexServerAddress": "https://index.docker.io/v1/", + "InitPath": "/usr/bin/docker", + "InitSha1": "", + "KernelMemory": true, + "KernelVersion": "3.12.0-1-amd64", + "Labels": [ + "storage=ssd" + ], + "MemTotal": 2099236864, + "MemoryLimit": true, + "NCPU": 1, + "NEventsListener": 0, + "NFd": 11, + "NGoroutines": 21, + "Name": "prod-server-42", + "NoProxy": "9.81.1.160", + "OomKillDisable": true, + "OSType": "linux", + "OperatingSystem": "Boot2Docker", + "Plugins": { + "Volume": [ + "local" + ], + "Network": [ + "null", + "host", + "bridge" + ] + }, + "RegistryConfig": { + "IndexConfigs": { + "docker.io": { + "Mirrors": null, + "Name": "docker.io", + "Official": true, + "Secure": true + } + }, + "InsecureRegistryCIDRs": [ + "127.0.0.0/8" + ] + }, + "SecurityOptions": [ + "apparmor", + "seccomp", + "selinux" + ], + "ServerVersion": "1.9.0", + "SwapLimit": false, + "SystemStatus": [["State", "Healthy"]], + "SystemTime": "2015-03-10T11:11:23.730591467-07:00" + } + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Show the docker version information + +`GET /version` + +Show the docker version information + +**Example request**: + + GET /version HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Version": "1.13.0", + "Os": "linux", + "KernelVersion": "3.19.0-23-generic", + "GoVersion": "go1.6.3", + "GitCommit": "deadbee", + "Arch": "amd64", + "ApiVersion": "1.25", + "BuildTime": "2016-06-14T07:09:13.444803460+00:00", + "Experimental": true + } + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Ping the docker server + +`GET /_ping` + +Ping the docker server + +**Example request**: + + GET /_ping HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: text/plain + + OK + +**Status codes**: + +- **200** - no error +- **500** - server error + +### Create a new image from a container's changes + +`POST /commit` + +Create a new image from a container's changes + +**Example request**: + + POST /commit?container=44c004db4b17&comment=message&repo=myrepo HTTP/1.1 + Content-Type: application/json + + { + "Hostname": "", + "Domainname": "", + "User": "", + "AttachStdin": false, + "AttachStdout": true, + "AttachStderr": true, + "Tty": false, + "OpenStdin": false, + "StdinOnce": false, + "Env": null, + "Cmd": [ + "date" + ], + "Mounts": [ + { + "Source": "/data", + "Destination": "/data", + "Mode": "ro,Z", + "RW": false + } + ], + "Labels": { + "key1": "value1", + "key2": "value2" + }, + "WorkingDir": "", + "NetworkDisabled": false, + "ExposedPorts": { + "22/tcp": {} + } + } + +**Example response**: + + HTTP/1.1 201 Created + Content-Type: application/json + + {"Id": "596069db4bf5"} + +**JSON parameters**: + +- **config** - the container's configuration + +**Query parameters**: + +- **container** – source container +- **repo** – repository +- **tag** – tag +- **comment** – commit message +- **author** – author (e.g., "John Hannibal Smith + <[hannibal@a-team.com](mailto:hannibal%40a-team.com)>") +- **pause** – 1/True/true or 0/False/false, whether to pause the container before committing +- **changes** – Dockerfile instructions to apply while committing + +**Status codes**: + +- **201** – no error +- **404** – no such container +- **500** – server error + +### Monitor Docker's events + +`GET /events` + +Get container events from docker, in real time via streaming. + +Docker containers report the following events: + + attach, commit, copy, create, destroy, detach, die, exec_create, exec_detach, exec_start, export, kill, oom, pause, rename, resize, restart, start, stop, top, unpause, update + +Docker images report the following events: + + delete, import, load, pull, push, save, tag, untag + +Docker volumes report the following events: + + create, mount, unmount, destroy + +Docker networks report the following events: + + create, connect, disconnect, destroy + +Docker daemon report the following event: + + reload + +**Example request**: + + GET /events?since=1374067924 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + Server: Docker/1.11.0 (linux) + Date: Fri, 29 Apr 2016 15:18:06 GMT + Transfer-Encoding: chunked + + { + "status": "pull", + "id": "alpine:latest", + "Type": "image", + "Action": "pull", + "Actor": { + "ID": "alpine:latest", + "Attributes": { + "name": "alpine" + } + }, + "time": 1461943101, + "timeNano": 1461943101301854122 + } + { + "status": "create", + "id": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "from": "alpine", + "Type": "container", + "Action": "create", + "Actor": { + "ID": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "Attributes": { + "com.example.some-label": "some-label-value", + "image": "alpine", + "name": "my-container" + } + }, + "time": 1461943101, + "timeNano": 1461943101381709551 + } + { + "status": "attach", + "id": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "from": "alpine", + "Type": "container", + "Action": "attach", + "Actor": { + "ID": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "Attributes": { + "com.example.some-label": "some-label-value", + "image": "alpine", + "name": "my-container" + } + }, + "time": 1461943101, + "timeNano": 1461943101383858412 + } + { + "Type": "network", + "Action": "connect", + "Actor": { + "ID": "7dc8ac97d5d29ef6c31b6052f3938c1e8f2749abbd17d1bd1febf2608db1b474", + "Attributes": { + "container": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "name": "bridge", + "type": "bridge" + } + }, + "time": 1461943101, + "timeNano": 1461943101394865557 + } + { + "status": "start", + "id": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "from": "alpine", + "Type": "container", + "Action": "start", + "Actor": { + "ID": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "Attributes": { + "com.example.some-label": "some-label-value", + "image": "alpine", + "name": "my-container" + } + }, + "time": 1461943101, + "timeNano": 1461943101607533796 + } + { + "status": "resize", + "id": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "from": "alpine", + "Type": "container", + "Action": "resize", + "Actor": { + "ID": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "Attributes": { + "com.example.some-label": "some-label-value", + "height": "46", + "image": "alpine", + "name": "my-container", + "width": "204" + } + }, + "time": 1461943101, + "timeNano": 1461943101610269268 + } + { + "status": "die", + "id": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "from": "alpine", + "Type": "container", + "Action": "die", + "Actor": { + "ID": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "Attributes": { + "com.example.some-label": "some-label-value", + "exitCode": "0", + "image": "alpine", + "name": "my-container" + } + }, + "time": 1461943105, + "timeNano": 1461943105079144137 + } + { + "Type": "network", + "Action": "disconnect", + "Actor": { + "ID": "7dc8ac97d5d29ef6c31b6052f3938c1e8f2749abbd17d1bd1febf2608db1b474", + "Attributes": { + "container": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "name": "bridge", + "type": "bridge" + } + }, + "time": 1461943105, + "timeNano": 1461943105230860245 + } + { + "status": "destroy", + "id": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "from": "alpine", + "Type": "container", + "Action": "destroy", + "Actor": { + "ID": "ede54ee1afda366ab42f824e8a5ffd195155d853ceaec74a927f249ea270c743", + "Attributes": { + "com.example.some-label": "some-label-value", + "image": "alpine", + "name": "my-container" + } + }, + "time": 1461943105, + "timeNano": 1461943105338056026 + } + +**Query parameters**: + +- **since** – Timestamp. Show all events created since timestamp and then stream +- **until** – Timestamp. Show events created until given timestamp and stop streaming +- **filters** – A json encoded value of the filters (a map[string][]string) to process on the event list. Available filters: + - `container=`; -- container to filter + - `event=`; -- event to filter + - `image=`; -- image to filter + - `label=`; -- image and container label to filter + - `type=`; -- either `container` or `image` or `volume` or `network` or `daemon` + - `volume=`; -- volume to filter + - `network=`; -- network to filter + - `daemon=`; -- daemon name or id to filter + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Get a tarball containing all images in a repository + +`GET /images/(name)/get` + +Get a tarball containing all images and metadata for the repository specified +by `name`. + +If `name` is a specific name and tag (e.g. ubuntu:latest), then only that image +(and its parents) are returned. If `name` is an image ID, similarly only that +image (and its parents) are returned, but with the exclusion of the +'repositories' file in the tarball, as there were no image names referenced. + +See the [image tarball format](#image-tarball-format) for more details. + +**Example request** + + GET /images/ubuntu/get + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/x-tar + + Binary data stream + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Get a tarball containing all images + +`GET /images/get` + +Get a tarball containing all images and metadata for one or more repositories. + +For each value of the `names` parameter: if it is a specific name and tag (e.g. +`ubuntu:latest`), then only that image (and its parents) are returned; if it is +an image ID, similarly only that image (and its parents) are returned and there +would be no names referenced in the 'repositories' file for this image ID. + +See the [image tarball format](#image-tarball-format) for more details. + +**Example request** + + GET /images/get?names=myname%2Fmyapp%3Alatest&names=busybox + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/x-tar + + Binary data stream + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Load a tarball with a set of images and tags into docker + +`POST /images/load` + +Load a set of images and tags into a Docker repository. +See the [image tarball format](#image-tarball-format) for more details. + +**Example request** + + POST /images/load + Content-Type: application/x-tar + + Tarball in body + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + Transfer-Encoding: chunked + + {"status":"Loading layer","progressDetail":{"current":32768,"total":1292800},"progress":"[= ] 32.77 kB/1.293 MB","id":"8ac8bfaff55a"} + {"status":"Loading layer","progressDetail":{"current":65536,"total":1292800},"progress":"[== ] 65.54 kB/1.293 MB","id":"8ac8bfaff55a"} + {"status":"Loading layer","progressDetail":{"current":98304,"total":1292800},"progress":"[=== ] 98.3 kB/1.293 MB","id":"8ac8bfaff55a"} + {"status":"Loading layer","progressDetail":{"current":131072,"total":1292800},"progress":"[===== ] 131.1 kB/1.293 MB","id":"8ac8bfaff55a"} + ... + {"stream":"Loaded image: busybox:latest\n"} + +**Example response**: + +If the "quiet" query parameter is set to `true` / `1` (`?quiet=1`), progress +details are suppressed, and only a confirmation message is returned once the +action completes. + + HTTP/1.1 200 OK + Content-Type: application/json + Transfer-Encoding: chunked + + {"stream":"Loaded image: busybox:latest\n"} + +**Query parameters**: + +- **quiet** – Boolean value, suppress progress details during load. Defaults + to `0` / `false` if omitted. + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Image tarball format + +An image tarball contains one directory per image layer (named using its long ID), +each containing these files: + +- `VERSION`: currently `1.0` - the file format version +- `json`: detailed layer information, similar to `docker inspect layer_id` +- `layer.tar`: A tarfile containing the filesystem changes in this layer + +The `layer.tar` file contains `aufs` style `.wh..wh.aufs` files and directories +for storing attribute changes and deletions. + +If the tarball defines a repository, the tarball should also include a `repositories` file at +the root that contains a list of repository and tag names mapped to layer IDs. + +``` +{"hello-world": + {"latest": "565a9d68a73f6706862bfe8409a7f659776d4d60a8d096eb4a3cbce6999cc2a1"} +} +``` + +### Exec Create + +`POST /containers/(id or name)/exec` + +Sets up an exec instance in a running container `id` + +**Example request**: + + POST /containers/e90e34656806/exec HTTP/1.1 + Content-Type: application/json + + { + "AttachStdin": false, + "AttachStdout": true, + "AttachStderr": true, + "DetachKeys": "ctrl-p,ctrl-q", + "Tty": false, + "Cmd": [ + "date" + ] + } + +**Example response**: + + HTTP/1.1 201 Created + Content-Type: application/json + + { + "Id": "f90e34656806", + "Warnings":[] + } + +**JSON parameters**: + +- **AttachStdin** - Boolean value, attaches to `stdin` of the `exec` command. +- **AttachStdout** - Boolean value, attaches to `stdout` of the `exec` command. +- **AttachStderr** - Boolean value, attaches to `stderr` of the `exec` command. +- **DetachKeys** – Override the key sequence for detaching a + container. Format is a single character `[a-Z]` or `ctrl-` + where `` is one of: `a-z`, `@`, `^`, `[`, `,` or `_`. +- **Tty** - Boolean value to allocate a pseudo-TTY. +- **Cmd** - Command to run specified as a string or an array of strings. + + +**Status codes**: + +- **201** – no error +- **404** – no such container +- **409** - container is paused +- **500** - server error + +### Exec Start + +`POST /exec/(id)/start` + +Starts a previously set up `exec` instance `id`. If `detach` is true, this API +returns after starting the `exec` command. Otherwise, this API sets up an +interactive session with the `exec` command. + +**Example request**: + + POST /exec/e90e34656806/start HTTP/1.1 + Content-Type: application/json + + { + "Detach": false, + "Tty": false + } + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/vnd.docker.raw-stream + + {{ STREAM }} + +**JSON parameters**: + +- **Detach** - Detach from the `exec` command. +- **Tty** - Boolean value to allocate a pseudo-TTY. + +**Status codes**: + +- **200** – no error +- **404** – no such exec instance +- **409** - container is paused + + **Stream details**: + Similar to the stream behavior of `POST /containers/(id or name)/attach` API + +### Exec Resize + +`POST /exec/(id)/resize` + +Resizes the `tty` session used by the `exec` command `id`. The unit is number of characters. +This API is valid only if `tty` was specified as part of creating and starting the `exec` command. + +**Example request**: + + POST /exec/e90e34656806/resize?h=40&w=80 HTTP/1.1 + Content-Type: text/plain + +**Example response**: + + HTTP/1.1 201 Created + Content-Type: text/plain + +**Query parameters**: + +- **h** – height of `tty` session +- **w** – width + +**Status codes**: + +- **201** – no error +- **404** – no such exec instance + +### Exec Inspect + +`GET /exec/(id)/json` + +Return low-level information about the `exec` command `id`. + +**Example request**: + + GET /exec/11fb006128e8ceb3942e7c58d77750f24210e35f879dd204ac975c184b820b39/json HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "CanRemove": false, + "ContainerID": "b53ee82b53a40c7dca428523e34f741f3abc51d9f297a14ff874bf761b995126", + "DetachKeys": "", + "ExitCode": 2, + "ID": "f33bbfb39f5b142420f4759b2348913bd4a8d1a6d7fd56499cb41a1bb91d7b3b", + "OpenStderr": true, + "OpenStdin": true, + "OpenStdout": true, + "ProcessConfig": { + "arguments": [ + "-c", + "exit 2" + ], + "entrypoint": "sh", + "privileged": false, + "tty": true, + "user": "1000" + }, + "Running": false + } + +**Status codes**: + +- **200** – no error +- **404** – no such exec instance +- **500** - server error + +## 3.4 Volumes + +### List volumes + +`GET /volumes` + +**Example request**: + + GET /volumes HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Volumes": [ + { + "Name": "tardis", + "Driver": "local", + "Mountpoint": "/var/lib/docker/volumes/tardis", + "Labels":{ + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + }, + "Scope": "local" + } + ], + "Warnings": [] + } + +**Query parameters**: + +- **filters** - JSON encoded value of the filters (a `map[string][]string`) to process on the volumes list. Available filters: + - `name=` Matches all or part of a volume name. + - `dangling=` When set to `true` (or `1`), returns all volumes that are "dangling" (not in use by a container). When set to `false` (or `0`), only volumes that are in use by one or more containers are returned. + - `driver=` Matches all or part of a volume driver name. + +**Status codes**: + +- **200** - no error +- **500** - server error + +### Create a volume + +`POST /volumes/create` + +Create a volume + +**Example request**: + + POST /volumes/create HTTP/1.1 + Content-Type: application/json + + { + "Name": "tardis", + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + }, + "Driver": "custom" + } + +**Example response**: + + HTTP/1.1 201 Created + Content-Type: application/json + + { + "Name": "tardis", + "Driver": "custom", + "Mountpoint": "/var/lib/docker/volumes/tardis", + "Status": { + "hello": "world" + }, + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + }, + "Scope": "local" + } + +**Status codes**: + +- **201** - no error +- **500** - server error + +**JSON parameters**: + +- **Name** - The new volume's name. If not specified, Docker generates a name. +- **Driver** - Name of the volume driver to use. Defaults to `local` for the name. +- **DriverOpts** - A mapping of driver options and values. These options are + passed directly to the driver and are driver specific. +- **Labels** - Labels to set on the volume, specified as a map: `{"key":"value","key2":"value2"}` + +**JSON fields in response**: + +Refer to the [inspect a volume](#inspect-a-volume) section or details about the +JSON fields returned in the response. + +### Inspect a volume + +`GET /volumes/(name)` + +Return low-level information on the volume `name` + +**Example request**: + + GET /volumes/tardis + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "Name": "tardis", + "Driver": "custom", + "Mountpoint": "/var/lib/docker/volumes/tardis/_data", + "Status": { + "hello": "world" + }, + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + }, + "Scope": "local" + } + +**Status codes**: + +- **200** - no error +- **404** - no such volume +- **500** - server error + +**JSON fields in response**: + +The following fields can be returned in the API response. Empty fields, or +fields that are not supported by the volume's driver may be omitted in the +response. + +- **Name** - Name of the volume. +- **Driver** - Name of the volume driver used by the volume. +- **Mountpoint** - Mount path of the volume on the host. +- **Status** - Low-level details about the volume, provided by the volume driver. + Details are returned as a map with key/value pairs: `{"key":"value","key2":"value2"}`. + The `Status` field is optional, and is omitted if the volume driver does not + support this feature. +- **Labels** - Labels set on the volume, specified as a map: `{"key":"value","key2":"value2"}`. +- **Scope** - Scope describes the level at which the volume exists, can be one of + `global` for cluster-wide or `local` for machine level. The default is `local`. + +### Remove a volume + +`DELETE /volumes/(name)` + +Instruct the driver to remove the volume (`name`). + +**Example request**: + + DELETE /volumes/tardis HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Status codes**: + +- **204** - no error +- **404** - no such volume or volume driver +- **409** - volume is in use and cannot be removed +- **500** - server error + +## 3.5 Networks + +### List networks + +`GET /networks` + +**Example request**: + + GET /networks?filters={"type":{"custom":true}} HTTP/1.1 + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Type: application/json + +[ + { + "Name": "bridge", + "Id": "f2de39df4171b0dc801e8002d1d999b77256983dfc63041c0f34030aa3977566", + "Scope": "local", + "Driver": "bridge", + "EnableIPv6": false, + "Internal": false, + "IPAM": { + "Driver": "default", + "Config": [ + { + "Subnet": "172.17.0.0/16" + } + ] + }, + "Containers": { + "39b69226f9d79f5634485fb236a23b2fe4e96a0a94128390a7fbbcc167065867": { + "EndpointID": "ed2419a97c1d9954d05b46e462e7002ea552f216e9b136b80a7db8d98b442eda", + "MacAddress": "02:42:ac:11:00:02", + "IPv4Address": "172.17.0.2/16", + "IPv6Address": "" + } + }, + "Options": { + "com.docker.network.bridge.default_bridge": "true", + "com.docker.network.bridge.enable_icc": "true", + "com.docker.network.bridge.enable_ip_masquerade": "true", + "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0", + "com.docker.network.bridge.name": "docker0", + "com.docker.network.driver.mtu": "1500" + } + }, + { + "Name": "none", + "Id": "e086a3893b05ab69242d3c44e49483a3bbbd3a26b46baa8f61ab797c1088d794", + "Scope": "local", + "Driver": "null", + "EnableIPv6": false, + "Internal": false, + "IPAM": { + "Driver": "default", + "Config": [] + }, + "Containers": {}, + "Options": {} + }, + { + "Name": "host", + "Id": "13e871235c677f196c4e1ecebb9dc733b9b2d2ab589e30c539efeda84a24215e", + "Scope": "local", + "Driver": "host", + "EnableIPv6": false, + "Internal": false, + "IPAM": { + "Driver": "default", + "Config": [] + }, + "Containers": {}, + "Options": {} + } +] +``` + +**Query parameters**: + +- **filters** - JSON encoded network list filter. The filter value is one of: + - `driver=` Matches a network's driver. + - `id=` Matches all or part of a network id. + - `label=` or `label==` of a network label. + - `name=` Matches all or part of a network name. + - `type=["custom"|"builtin"]` Filters networks by type. The `custom` keyword returns all user-defined networks. + +**Status codes**: + +- **200** - no error +- **500** - server error + +### Inspect network + +`GET /networks/` + +**Example request**: + + GET /networks/7d86d31b1478e7cca9ebed7e73aa0fdeec46c5ca29497431d3007d2d9e15ed99 HTTP/1.1 + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Type: application/json + +{ + "Name": "net01", + "Id": "7d86d31b1478e7cca9ebed7e73aa0fdeec46c5ca29497431d3007d2d9e15ed99", + "Scope": "local", + "Driver": "bridge", + "EnableIPv6": false, + "IPAM": { + "Driver": "default", + "Config": [ + { + "Subnet": "172.19.0.0/16", + "Gateway": "172.19.0.1" + } + ], + "Options": { + "foo": "bar" + } + }, + "Internal": false, + "Containers": { + "19a4d5d687db25203351ed79d478946f861258f018fe384f229f2efa4b23513c": { + "Name": "test", + "EndpointID": "628cadb8bcb92de107b2a1e516cbffe463e321f548feb37697cce00ad694f21a", + "MacAddress": "02:42:ac:13:00:02", + "IPv4Address": "172.19.0.2/16", + "IPv6Address": "" + } + }, + "Options": { + "com.docker.network.bridge.default_bridge": "true", + "com.docker.network.bridge.enable_icc": "true", + "com.docker.network.bridge.enable_ip_masquerade": "true", + "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0", + "com.docker.network.bridge.name": "docker0", + "com.docker.network.driver.mtu": "1500" + }, + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + } +} +``` + +**Status codes**: + +- **200** - no error +- **404** - network not found + +### Create a network + +`POST /networks/create` + +Create a network + +**Example request**: + +``` +POST /networks/create HTTP/1.1 +Content-Type: application/json + +{ + "Name":"isolated_nw", + "CheckDuplicate":false, + "Driver":"bridge", + "EnableIPv6": true, + "IPAM":{ + "Config":[ + { + "Subnet":"172.20.0.0/16", + "IPRange":"172.20.10.0/24", + "Gateway":"172.20.10.11" + }, + { + "Subnet":"2001:db8:abcd::/64", + "Gateway":"2001:db8:abcd::1011" + } + ], + "Options": { + "foo": "bar" + } + }, + "Internal":true, + "Options": { + "com.docker.network.bridge.default_bridge": "true", + "com.docker.network.bridge.enable_icc": "true", + "com.docker.network.bridge.enable_ip_masquerade": "true", + "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0", + "com.docker.network.bridge.name": "docker0", + "com.docker.network.driver.mtu": "1500" + }, + "Labels": { + "com.example.some-label": "some-value", + "com.example.some-other-label": "some-other-value" + } +} +``` + +**Example response**: + +``` +HTTP/1.1 201 Created +Content-Type: application/json + +{ + "Id": "22be93d5babb089c5aab8dbc369042fad48ff791584ca2da2100db837a1c7c30", + "Warning": "" +} +``` + +**Status codes**: + +- **201** - no error +- **404** - plugin not found +- **500** - server error + +**JSON parameters**: + +- **Name** - The new network's name. this is a mandatory field +- **CheckDuplicate** - Requests daemon to check for networks with same name +- **Driver** - Name of the network driver plugin to use. Defaults to `bridge` driver +- **Internal** - Restrict external access to the network +- **IPAM** - Optional custom IP scheme for the network +- **EnableIPv6** - Enable IPv6 on the network +- **Options** - Network specific options to be used by the drivers +- **Labels** - Labels to set on the network, specified as a map: `{"key":"value" [,"key2":"value2"]}` + +### Connect a container to a network + +`POST /networks/(id)/connect` + +Connect a container to a network + +**Example request**: + +``` +POST /networks/22be93d5babb089c5aab8dbc369042fad48ff791584ca2da2100db837a1c7c30/connect HTTP/1.1 +Content-Type: application/json + +{ + "Container":"3613f73ba0e4", + "EndpointConfig": { + "IPAMConfig": { + "IPv4Address":"172.24.56.89", + "IPv6Address":"2001:db8::5689" + } + } +} +``` + +**Example response**: + + HTTP/1.1 200 OK + +**Status codes**: + +- **200** - no error +- **403** - operation not supported for swarm scoped networks +- **404** - network or container is not found +- **500** - Internal Server Error + +**JSON parameters**: + +- **container** - container-id/name to be connected to the network + +### Disconnect a container from a network + +`POST /networks/(id)/disconnect` + +Disconnect a container from a network + +**Example request**: + +``` +POST /networks/22be93d5babb089c5aab8dbc369042fad48ff791584ca2da2100db837a1c7c30/disconnect HTTP/1.1 +Content-Type: application/json + +{ + "Container":"3613f73ba0e4", + "Force":false +} +``` + +**Example response**: + + HTTP/1.1 200 OK + +**Status codes**: + +- **200** - no error +- **403** - operation not supported for swarm scoped networks +- **404** - network or container not found +- **500** - Internal Server Error + +**JSON parameters**: + +- **Container** - container-id/name to be disconnected from a network +- **Force** - Force the container to disconnect from a network + +### Remove a network + +`DELETE /networks/(id)` + +Instruct the driver to remove the network (`id`). + +**Example request**: + + DELETE /networks/22be93d5babb089c5aab8dbc369042fad48ff791584ca2da2100db837a1c7c30 HTTP/1.1 + +**Example response**: + + HTTP/1.1 204 No Content + +**Status codes**: + +- **204** - no error +- **404** - no such network +- **500** - server error + +## 3.6 Plugins + +### List plugins + +`GET /plugins` + +Returns information about installed plugins. + +**Example request**: + + GET /plugins HTTP/1.1 + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Type: application/json + +[ + { + "Id": "5724e2c8652da337ab2eedd19fc6fc0ec908e4bd907c7421bf6a8dfc70c4c078", + "Name": "tiborvass/no-remove", + "Tag": "latest", + "Active": true, + "Config": { + "Mounts": [ + { + "Name": "", + "Description": "", + "Settable": null, + "Source": "/data", + "Destination": "/data", + "Type": "bind", + "Options": [ + "shared", + "rbind" + ] + }, + { + "Name": "", + "Description": "", + "Settable": null, + "Source": null, + "Destination": "/foobar", + "Type": "tmpfs", + "Options": null + } + ], + "Env": [ + "DEBUG=1" + ], + "Args": null, + "Devices": null + }, + "Manifest": { + "ManifestVersion": "v0", + "Description": "A test plugin for Docker", + "Documentation": "https://docs.docker.com/engine/extend/plugins/", + "Interface": { + "Types": [ + "docker.volumedriver/1.0" + ], + "Socket": "plugins.sock" + }, + "Entrypoint": [ + "plugin-no-remove", + "/data" + ], + "Workdir": "", + "User": { + }, + "Network": { + "Type": "host" + }, + "Capabilities": null, + "Mounts": [ + { + "Name": "", + "Description": "", + "Settable": null, + "Source": "/data", + "Destination": "/data", + "Type": "bind", + "Options": [ + "shared", + "rbind" + ] + }, + { + "Name": "", + "Description": "", + "Settable": null, + "Source": null, + "Destination": "/foobar", + "Type": "tmpfs", + "Options": null + } + ], + "Devices": [ + { + "Name": "device", + "Description": "a host device to mount", + "Settable": null, + "Path": "/dev/cpu_dma_latency" + } + ], + "Env": [ + { + "Name": "DEBUG", + "Description": "If set, prints debug messages", + "Settable": null, + "Value": "1" + } + ], + "Args": { + "Name": "args", + "Description": "command line arguments", + "Settable": null, + "Value": [ + + ] + } + } + } +] +``` + +**Status codes**: + +- **200** - no error +- **500** - server error + +### Install a plugin + +`POST /plugins/pull?name=` + +Pulls and installs a plugin. After the plugin is installed, it can be enabled +using the [`POST /plugins/(plugin name)/enable` endpoint](#enable-a-plugin). + +**Example request**: + +``` +POST /plugins/pull?name=tiborvass/no-remove:latest HTTP/1.1 +``` + +The `:latest` tag is optional, and is used as default if omitted. When using +this endpoint to pull a plugin from the registry, the `X-Registry-Auth` header +can be used to include a base64-encoded AuthConfig object. Refer to the [create +an image](#create-an-image) section for more details. + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Type: application/json +Content-Length: 175 + +[ + { + "Name": "network", + "Description": "", + "Value": [ + "host" + ] + }, + { + "Name": "mount", + "Description": "", + "Value": [ + "/data" + ] + }, + { + "Name": "device", + "Description": "", + "Value": [ + "/dev/cpu_dma_latency" + ] + } +] +``` + +**Query parameters**: + +- **name** - Name of the plugin to pull. The name may include a tag or digest. + This parameter is required. + +**Status codes**: + +- **200** - no error +- **500** - error parsing reference / not a valid repository/tag: repository + name must have at least one component +- **500** - plugin already exists + +### Inspect a plugin + +`GET /plugins/(plugin name)` + +Returns detailed information about an installed plugin. + +**Example request**: + +``` +GET /plugins/tiborvass/no-remove:latest HTTP/1.1 +``` + +The `:latest` tag is optional, and is used as default if omitted. + + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Type: application/json + +{ + "Id": "5724e2c8652da337ab2eedd19fc6fc0ec908e4bd907c7421bf6a8dfc70c4c078", + "Name": "tiborvass/no-remove", + "Tag": "latest", + "Active": false, + "Config": { + "Mounts": [ + { + "Name": "", + "Description": "", + "Settable": null, + "Source": "/data", + "Destination": "/data", + "Type": "bind", + "Options": [ + "shared", + "rbind" + ] + }, + { + "Name": "", + "Description": "", + "Settable": null, + "Source": null, + "Destination": "/foobar", + "Type": "tmpfs", + "Options": null + } + ], + "Env": [ + "DEBUG=1" + ], + "Args": null, + "Devices": null + }, + "Manifest": { + "ManifestVersion": "v0", + "Description": "A test plugin for Docker", + "Documentation": "https://docs.docker.com/engine/extend/plugins/", + "Interface": { + "Types": [ + "docker.volumedriver/1.0" + ], + "Socket": "plugins.sock" + }, + "Entrypoint": [ + "plugin-no-remove", + "/data" + ], + "Workdir": "", + "User": { + }, + "Network": { + "Type": "host" + }, + "Capabilities": null, + "Mounts": [ + { + "Name": "", + "Description": "", + "Settable": null, + "Source": "/data", + "Destination": "/data", + "Type": "bind", + "Options": [ + "shared", + "rbind" + ] + }, + { + "Name": "", + "Description": "", + "Settable": null, + "Source": null, + "Destination": "/foobar", + "Type": "tmpfs", + "Options": null + } + ], + "Devices": [ + { + "Name": "device", + "Description": "a host device to mount", + "Settable": null, + "Path": "/dev/cpu_dma_latency" + } + ], + "Env": [ + { + "Name": "DEBUG", + "Description": "If set, prints debug messages", + "Settable": null, + "Value": "1" + } + ], + "Args": { + "Name": "args", + "Description": "command line arguments", + "Settable": null, + "Value": [ + + ] + } + } +} +``` + +**Status codes**: + +- **200** - no error +- **404** - plugin not installed + + + +### Enable a plugin + +`POST /plugins/(plugin name)/enable` + +Enables a plugin + +**Example request**: + +``` +POST /plugins/tiborvass/no-remove:latest/enable HTTP/1.1 +``` + +The `:latest` tag is optional, and is used as default if omitted. + + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Length: 0 +Content-Type: text/plain; charset=utf-8 +``` + +**Status codes**: + +- **200** - no error +- **500** - plugin is already enabled + +### Disable a plugin + +`POST /plugins/(plugin name)/disable` + +Disables a plugin + +**Example request**: + +``` +POST /plugins/tiborvass/no-remove:latest/disable HTTP/1.1 +``` + +The `:latest` tag is optional, and is used as default if omitted. + + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Length: 0 +Content-Type: text/plain; charset=utf-8 +``` + +**Status codes**: + +- **200** - no error +- **500** - plugin is already disabled + +### Remove a plugin + +`DELETE /plugins/(plugin name)` + +Removes a plugin + +**Example request**: + +``` +DELETE /plugins/tiborvass/no-remove:latest HTTP/1.1 +``` + +The `:latest` tag is optional, and is used as default if omitted. + +**Example response**: + +``` +HTTP/1.1 200 OK +Content-Length: 0 +Content-Type: text/plain; charset=utf-8 +``` + +**Query parameters**: + +- **force** - Boolean value, set to `1` / `True` / `true` to force removing the + plugin. Forcing removal disables the plugin before removing, but may result + in issues if the plugin is in use by a container. + +**Status codes**: + +- **200** - no error +- **404** - plugin not installed +- **500** - plugin is active + + + +## 3.7 Nodes + +**Note**: Node operations require the engine to be part of a swarm. + +### List nodes + + +`GET /nodes` + +List nodes + +**Example request**: + + GET /nodes HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "ID": "24ifsmvkjbyhk", + "Version": { + "Index": 8 + }, + "CreatedAt": "2016-06-07T20:31:11.853781916Z", + "UpdatedAt": "2016-06-07T20:31:11.999868824Z", + "Spec": { + "Name": "my-node", + "Role": "manager", + "Availability": "active" + "Labels": { + "foo": "bar" + } + }, + "Description": { + "Hostname": "bf3067039e47", + "Platform": { + "Architecture": "x86_64", + "OS": "linux" + }, + "Resources": { + "NanoCPUs": 4000000000, + "MemoryBytes": 8272408576 + }, + "Engine": { + "EngineVersion": "1.12.0-dev", + "Labels": { + "foo": "bar", + } + "Plugins": [ + { + "Type": "Volume", + "Name": "local" + }, + { + "Type": "Network", + "Name": "bridge" + } + { + "Type": "Network", + "Name": "null" + } + { + "Type": "Network", + "Name": "overlay" + } + ] + } + }, + "Status": { + "State": "ready" + }, + "ManagerStatus": { + "Leader": true, + "Reachability": "reachable", + "Addr": "172.17.0.2:2377"" + } + } + ] + +**Query parameters**: + +- **filters** – a JSON encoded value of the filters (a `map[string][]string`) to process on the + nodes list. Available filters: + - `id=` + - `name=` + - `membership=`(`pending`|`accepted`|`rejected`)` + - `role=`(`worker`|`manager`)` + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Inspect a node + + +`GET /nodes/` + +Return low-level information on the node `id` + +**Example request**: + + GET /nodes/24ifsmvkjbyhk HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "ID": "24ifsmvkjbyhk", + "Version": { + "Index": 8 + }, + "CreatedAt": "2016-06-07T20:31:11.853781916Z", + "UpdatedAt": "2016-06-07T20:31:11.999868824Z", + "Spec": { + "Name": "my-node", + "Role": "manager", + "Availability": "active" + "Labels": { + "foo": "bar" + } + }, + "Description": { + "Hostname": "bf3067039e47", + "Platform": { + "Architecture": "x86_64", + "OS": "linux" + }, + "Resources": { + "NanoCPUs": 4000000000, + "MemoryBytes": 8272408576 + }, + "Engine": { + "EngineVersion": "1.12.0-dev", + "Labels": { + "foo": "bar", + } + "Plugins": [ + { + "Type": "Volume", + "Name": "local" + }, + { + "Type": "Network", + "Name": "bridge" + } + { + "Type": "Network", + "Name": "null" + } + { + "Type": "Network", + "Name": "overlay" + } + ] + } + }, + "Status": { + "State": "ready" + }, + "ManagerStatus": { + "Leader": true, + "Reachability": "reachable", + "Addr": "172.17.0.2:2377"" + } + } + +**Status codes**: + +- **200** – no error +- **404** – no such node +- **500** – server error + +### Remove a node + + +`DELETE /nodes/` + +Remove a node [`id`] from the Swarm. + +**Example request**: + + DELETE /nodes/24ifsmvkjbyhk HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Query parameters**: + +- **force** - 1/True/true or 0/False/false, Force remove an active node. + Default `false`. + +**Status codes**: + +- **200** – no error +- **404** – no such node +- **500** – server error + +### Update a node + + +`POST /nodes//update` + +Update the node `id`. + +The payload of the `POST` request is the new `NodeSpec` and +overrides the current `NodeSpec` for the specified node. + +If `Availability` or `Role` are omitted, this returns an +error. Any other field omitted resets the current value to either +an empty value or the default cluster-wide value. + +**Example Request** + + POST /nodes/24ifsmvkjbyhk/update?version=8 HTTP/1.1 + Content-Type: application/json + + { + "Availability": "active", + "Name": "node-name", + "Role": "manager", + "Labels": { + "foo": "bar" + } + } + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Query parameters**: + +- **version** – The version number of the node object being updated. This is + required to avoid conflicting writes. + +JSON Parameters: + +- **Annotations** – Optional medata to associate with the service. + - **Name** – User-defined name for the service. + - **Labels** – A map of labels to associate with the service (e.g., + `{"key":"value"[,"key2":"value2"]}`). +- **Role** - Role of the node (worker/manager). +- **Availability** - Availability of the node (active/pause/drain). + + +**Status codes**: + +- **200** – no error +- **404** – no such node +- **500** – server error + +## 3.8 Swarm + +### Inspect swarm + + +`GET /swarm` + +Inspect swarm + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + { + "CreatedAt" : "2016-08-15T16:00:20.349727406Z", + "Spec" : { + "Dispatcher" : { + "HeartbeatPeriod" : 5000000000 + }, + "Orchestration" : { + "TaskHistoryRetentionLimit" : 10 + }, + "CAConfig" : { + "NodeCertExpiry" : 7776000000000000 + }, + "Raft" : { + "LogEntriesForSlowFollowers" : 500, + "HeartbeatTick" : 1, + "SnapshotInterval" : 10000, + "ElectionTick" : 3 + }, + "TaskDefaults" : {}, + "Name" : "default" + }, + "JoinTokens" : { + "Worker" : "SWMTKN-1-1h8aps2yszaiqmz2l3oc5392pgk8e49qhx2aj3nyv0ui0hez2a-6qmn92w6bu3jdvnglku58u11a", + "Manager" : "SWMTKN-1-1h8aps2yszaiqmz2l3oc5392pgk8e49qhx2aj3nyv0ui0hez2a-8llk83c4wm9lwioey2s316r9l" + }, + "ID" : "70ilmkj2f6sp2137c753w2nmt", + "UpdatedAt" : "2016-08-15T16:32:09.623207604Z", + "Version" : { + "Index" : 51 + } + } + +**Status codes**: + +- **200** - no error + +### Initialize a new swarm + + +`POST /swarm/init` + +Initialize a new swarm + +**Example request**: + + POST /swarm/init HTTP/1.1 + Content-Type: application/json + + { + "ListenAddr": "0.0.0.0:2377", + "AdvertiseAddr": "192.168.1.1:2377", + "ForceNewCluster": false, + "Spec": { + "Orchestration": {}, + "Raft": {}, + "Dispatcher": {}, + "CAConfig": {} + } + } + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Status codes**: + +- **200** – no error +- **400** – bad parameter +- **406** – node is already part of a swarm + +JSON Parameters: + +- **ListenAddr** – Listen address used for inter-manager communication, as well as determining + the networking interface used for the VXLAN Tunnel Endpoint (VTEP). This can either be an + address/port combination in the form `192.168.1.1:4567`, or an interface followed by a port + number, like `eth0:4567`. If the port number is omitted, the default swarm listening port is + used. +- **AdvertiseAddr** – Externally reachable address advertised to other nodes. This can either be + an address/port combination in the form `192.168.1.1:4567`, or an interface followed by a port + number, like `eth0:4567`. If the port number is omitted, the port number from the listen + address is used. If `AdvertiseAddr` is not specified, it will be automatically detected when + possible. +- **ForceNewCluster** – Force creation of a new swarm. +- **Spec** – Configuration settings for the new swarm. + - **Orchestration** – Configuration settings for the orchestration aspects of the swarm. + - **TaskHistoryRetentionLimit** – Maximum number of tasks history stored. + - **Raft** – Raft related configuration. + - **SnapshotInterval** – Number of logs entries between snapshot. + - **KeepOldSnapshots** – Number of snapshots to keep beyond the current snapshot. + - **LogEntriesForSlowFollowers** – Number of log entries to keep around to sync up slow + followers after a snapshot is created. + - **HeartbeatTick** – Amount of ticks (in seconds) between each heartbeat. + - **ElectionTick** – Amount of ticks (in seconds) needed without a leader to trigger a new + election. + - **Dispatcher** – Configuration settings for the task dispatcher. + - **HeartbeatPeriod** – The delay for an agent to send a heartbeat to the dispatcher. + - **CAConfig** – Certificate authority configuration. + - **NodeCertExpiry** – Automatic expiry for nodes certificates. + - **ExternalCA** - Configuration for forwarding signing requests to an external + certificate authority. + - **Protocol** - Protocol for communication with the external CA + (currently only "cfssl" is supported). + - **URL** - URL where certificate signing requests should be sent. + - **Options** - An object with key/value pairs that are interpreted + as protocol-specific options for the external CA driver. + +### Join an existing swarm + +`POST /swarm/join` + +Join an existing swarm + +**Example request**: + + POST /swarm/join HTTP/1.1 + Content-Type: application/json + + { + "ListenAddr": "0.0.0.0:2377", + "AdvertiseAddr": "192.168.1.1:2377", + "RemoteAddrs": ["node1:2377"], + "JoinToken": "SWMTKN-1-3pu6hszjas19xyp7ghgosyx9k8atbfcr8p2is99znpy26u2lkl-7p73s1dx5in4tatdymyhg9hu2" + } + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Status codes**: + +- **200** – no error +- **400** – bad parameter +- **406** – node is already part of a swarm + +JSON Parameters: + +- **ListenAddr** – Listen address used for inter-manager communication if the node gets promoted to + manager, as well as determining the networking interface used for the VXLAN Tunnel Endpoint (VTEP). +- **AdvertiseAddr** – Externally reachable address advertised to other nodes. This can either be + an address/port combination in the form `192.168.1.1:4567`, or an interface followed by a port + number, like `eth0:4567`. If the port number is omitted, the port number from the listen + address is used. If `AdvertiseAddr` is not specified, it will be automatically detected when + possible. +- **RemoteAddr** – Address of any manager node already participating in the swarm. +- **JoinToken** – Secret token for joining this Swarm. + +### Leave a swarm + + +`POST /swarm/leave` + +Leave a swarm + +**Example request**: + + POST /swarm/leave HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Status codes**: + +- **200** – no error +- **406** – node is not part of a swarm + +### Update a swarm + + +`POST /swarm/update` + +Update a swarm + +**Example request**: + + POST /swarm/update HTTP/1.1 + + { + "Name": "default", + "Orchestration": { + "TaskHistoryRetentionLimit": 10 + }, + "Raft": { + "SnapshotInterval": 10000, + "LogEntriesForSlowFollowers": 500, + "HeartbeatTick": 1, + "ElectionTick": 3 + }, + "Dispatcher": { + "HeartbeatPeriod": 5000000000 + }, + "CAConfig": { + "NodeCertExpiry": 7776000000000000 + }, + "JoinTokens": { + "Worker": "SWMTKN-1-3pu6hszjas19xyp7ghgosyx9k8atbfcr8p2is99znpy26u2lkl-1awxwuwd3z9j1z3puu7rcgdbx", + "Manager": "SWMTKN-1-3pu6hszjas19xyp7ghgosyx9k8atbfcr8p2is99znpy26u2lkl-7p73s1dx5in4tatdymyhg9hu2" + } + } + + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**Query parameters**: + +- **version** – The version number of the swarm object being updated. This is + required to avoid conflicting writes. +- **rotateWorkerToken** - Set to `true` (or `1`) to rotate the worker join token. +- **rotateManagerToken** - Set to `true` (or `1`) to rotate the manager join token. + +**Status codes**: + +- **200** – no error +- **400** – bad parameter +- **406** – node is not part of a swarm + +JSON Parameters: + +- **Orchestration** – Configuration settings for the orchestration aspects of the swarm. + - **TaskHistoryRetentionLimit** – Maximum number of tasks history stored. +- **Raft** – Raft related configuration. + - **SnapshotInterval** – Number of logs entries between snapshot. + - **KeepOldSnapshots** – Number of snapshots to keep beyond the current snapshot. + - **LogEntriesForSlowFollowers** – Number of log entries to keep around to sync up slow + followers after a snapshot is created. + - **HeartbeatTick** – Amount of ticks (in seconds) between each heartbeat. + - **ElectionTick** – Amount of ticks (in seconds) needed without a leader to trigger a new + election. +- **Dispatcher** – Configuration settings for the task dispatcher. + - **HeartbeatPeriod** – The delay for an agent to send a heartbeat to the dispatcher. +- **CAConfig** – CA configuration. + - **NodeCertExpiry** – Automatic expiry for nodes certificates. + - **ExternalCA** - Configuration for forwarding signing requests to an external + certificate authority. + - **Protocol** - Protocol for communication with the external CA + (currently only "cfssl" is supported). + - **URL** - URL where certificate signing requests should be sent. + - **Options** - An object with key/value pairs that are interpreted + as protocol-specific options for the external CA driver. +- **JoinTokens** - Tokens that can be used by other nodes to join the swarm. + - **Worker** - Token to use for joining as a worker. + - **Manager** - Token to use for joining as a manager. + +## 3.9 Services + +**Note**: Service operations require to first be part of a swarm. + +### List services + + +`GET /services` + +List services + +**Example request**: + + GET /services HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 OK + Content-Type: application/json + + [ + { + "ID": "9mnpnzenvg8p8tdbtq4wvbkcz", + "Version": { + "Index": 19 + }, + "CreatedAt": "2016-06-07T21:05:51.880065305Z", + "UpdatedAt": "2016-06-07T21:07:29.962229872Z", + "Spec": { + "Name": "hopeful_cori", + "TaskTemplate": { + "ContainerSpec": { + "Image": "redis" + }, + "Resources": { + "Limits": {}, + "Reservations": {} + }, + "RestartPolicy": { + "Condition": "ANY" + }, + "Placement": {} + }, + "Mode": { + "Replicated": { + "Replicas": 1 + } + }, + "UpdateConfig": { + "Parallelism": 1 + }, + "EndpointSpec": { + "Mode": "VIP", + "Ingress": "PUBLICPORT", + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379 + } + ] + } + }, + "Endpoint": { + "Spec": {}, + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379, + "PublicPort": 30000 + } + ], + "VirtualIPs": [ + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.2/16" + }, + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.3/16" + } + ] + } + } + ] + +**Query parameters**: + +- **filters** – a JSON encoded value of the filters (a `map[string][]string`) to process on the + services list. Available filters: + - `id=` + - `name=` + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Create a service + +`POST /services/create` + +Create a service. When using this endpoint to create a service using a private +repository from the registry, the `X-Registry-Auth` header must be used to +include a base64-encoded AuthConfig object. Refer to the [create an +image](#create-an-image) section for more details. + +**Example request**: + + POST /services/create HTTP/1.1 + Content-Type: application/json + + { + "Name": "web", + "TaskTemplate": { + "ContainerSpec": { + "Image": "nginx:alpine", + "Mounts": [ + { + "ReadOnly": true, + "Source": "web-data", + "Target": "/usr/share/nginx/html", + "Type": "volume", + "VolumeOptions": { + "DriverConfig": { + }, + "Labels": { + "com.example.something": "something-value" + } + } + } + ], + "User": "33" + }, + "LogDriver": { + "Name": "json-file", + "Options": { + "max-file": "3", + "max-size": "10M" + } + }, + "Placement": {}, + "Resources": { + "Limits": { + "MemoryBytes": 104857600.0 + }, + "Reservations": { + } + }, + "RestartPolicy": { + "Condition": "on-failure", + "Delay": 10000000000.0, + "MaxAttempts": 10 + } + }, + "Mode": { + "Replicated": { + "Replicas": 4 + } + }, + "UpdateConfig": { + "Delay": 30000000000.0, + "Parallelism": 2, + "FailureAction": "pause" + }, + "EndpointSpec": { + "Ports": [ + { + "Protocol": "tcp", + "PublishedPort": 8080, + "TargetPort": 80 + } + ] + }, + "Labels": { + "foo": "bar" + } + } + +**Example response**: + + HTTP/1.1 201 Created + Content-Type: application/json + + { + "ID":"ak7w3gjqoa3kuz8xcpnyy0pvl" + } + +**Status codes**: + +- **201** – no error +- **406** – server error or node is not part of a swarm +- **409** – name conflicts with an existing object + +**JSON Parameters**: + +- **Name** – User-defined name for the service. +- **Labels** – A map of labels to associate with the service (e.g., `{"key":"value"[,"key2":"value2"]}`). +- **TaskTemplate** – Specification of the tasks to start as part of the new service. + - **ContainerSpec** - Container settings for containers started as part of this task. + - **Image** – A string specifying the image name to use for the container. + - **Command** – The command to be run in the image. + - **Args** – Arguments to the command. + - **Env** – A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]`. + - **Dir** – A string specifying the working directory for commands to run in. + - **User** – A string value specifying the user inside the container. + - **Labels** – A map of labels to associate with the service (e.g., + `{"key":"value"[,"key2":"value2"]}`). + - **Mounts** – Specification for mounts to be added to containers + created as part of the service. + - **Target** – Container path. + - **Source** – Mount source (e.g. a volume name, a host path). + - **Type** – The mount type (`bind`, or `volume`). + - **ReadOnly** – A boolean indicating whether the mount should be read-only. + - **BindOptions** - Optional configuration for the `bind` type. + - **Propagation** – A propagation mode with the value `[r]private`, `[r]shared`, or `[r]slave`. + - **VolumeOptions** – Optional configuration for the `volume` type. + - **NoCopy** – A boolean indicating if volume should be + populated with the data from the target. (Default false) + - **Labels** – User-defined name and labels for the volume. + - **DriverConfig** – Map of driver-specific options. + - **Name** - Name of the driver to use to create the volume. + - **Options** - key/value map of driver specific options. + - **StopGracePeriod** – Amount of time to wait for the container to terminate before + forcefully killing it. + - **LogDriver** - Log configuration for containers created as part of the + service. + - **Name** - Name of the logging driver to use (`json-file`, `syslog`, + `journald`, `gelf`, `fluentd`, `awslogs`, `splunk`, `etwlogs`, `none`). + - **Options** - Driver-specific options. + - **Resources** – Resource requirements which apply to each individual container created as part + of the service. + - **Limits** – Define resources limits. + - **NanoCPUs** – CPU limit in units of 10-9 CPU shares. + - **MemoryBytes** – Memory limit in Bytes. + - **Reservation** – Define resources reservation. + - **NanoCPUs** – CPU reservation in units of 10-9 CPU shares. + - **MemoryBytes** – Memory reservation in Bytes. + - **RestartPolicy** – Specification for the restart policy which applies to containers created + as part of this service. + - **Condition** – Condition for restart (`none`, `on-failure`, or `any`). + - **Delay** – Delay between restart attempts. + - **Attempts** – Maximum attempts to restart a given container before giving up (default value + is 0, which is ignored). + - **Window** – Windows is the time window used to evaluate the restart policy (default value is + 0, which is unbounded). + - **Placement** – An array of constraints. +- **Mode** – Scheduling mode for the service (`replicated` or `global`, defaults to `replicated`). +- **UpdateConfig** – Specification for the update strategy of the service. + - **Parallelism** – Maximum number of tasks to be updated in one iteration (0 means unlimited + parallelism). + - **Delay** – Amount of time between updates. + - **FailureAction** - Action to take if an updated task fails to run, or stops running during the + update. Values are `continue` and `pause`. +- **Networks** – Array of network names or IDs to attach the service to. +- **Endpoint** – Properties that can be configured to access and load balance a service. + - **Spec** – + - **Mode** – The mode of resolution to use for internal load balancing + between tasks (`vip` or `dnsrr`). + - **Ports** – Exposed ports that this service is accessible on from the outside, in the form + of: `"Ports": { "/: {}" }` + - **VirtualIPs** + +**Request Headers**: + +- **Content-type** – Set to `"application/json"`. +- **X-Registry-Auth** – base64-encoded AuthConfig object, containing either + login information, or a token. Refer to the [create an image](#create-an-image) + section for more details. + + +### Remove a service + + +`DELETE /services/(id or name)` + +Stop and remove the service `id` + +**Example request**: + + DELETE /services/16253994b7c4 HTTP/1.1 + +**Example response**: + + HTTP/1.1 200 No Content + +**Status codes**: + +- **200** – no error +- **404** – no such service +- **500** – server error + +### Inspect one or more services + + +`GET /services/(id or name)` + +Return information on the service `id`. + +**Example request**: + + GET /services/1cb4dnqcyx6m66g2t538x3rxha HTTP/1.1 + +**Example response**: + + { + "ID": "ak7w3gjqoa3kuz8xcpnyy0pvl", + "Version": { + "Index": 95 + }, + "CreatedAt": "2016-06-07T21:10:20.269723157Z", + "UpdatedAt": "2016-06-07T21:10:20.276301259Z", + "Spec": { + "Name": "redis", + "Task": { + "ContainerSpec": { + "Image": "redis" + }, + "Resources": { + "Limits": {}, + "Reservations": {} + }, + "RestartPolicy": { + "Condition": "ANY" + }, + "Placement": {} + }, + "Mode": { + "Replicated": { + "Replicas": 1 + } + }, + "UpdateConfig": { + "Parallelism": 1 + }, + "EndpointSpec": { + "Mode": "VIP", + "Ingress": "PUBLICPORT", + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379 + } + ] + } + }, + "Endpoint": { + "Spec": {}, + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379, + "PublicPort": 30001 + } + ], + "VirtualIPs": [ + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.4/16" + } + ] + } + } + +**Status codes**: + +- **200** – no error +- **404** – no such service +- **500** – server error + +### Update a service + +`POST /services/(id or name)/update` + +Update a service. When using this endpoint to create a service using a +private repository from the registry, the `X-Registry-Auth` header can be used +to update the authentication information for that is stored for the service. +The header contains a base64-encoded AuthConfig object. Refer to the [create an +image](#create-an-image) section for more details. + +**Example request**: + + POST /services/1cb4dnqcyx6m66g2t538x3rxha/update?version=23 HTTP/1.1 + Content-Type: application/json + + { + "Name": "top", + "TaskTemplate": { + "ContainerSpec": { + "Image": "busybox", + "Args": [ + "top" + ] + }, + "Resources": { + "Limits": {}, + "Reservations": {} + }, + "RestartPolicy": { + "Condition": "any", + "MaxAttempts": 0 + }, + "Placement": {} + }, + "Mode": { + "Replicated": { + "Replicas": 1 + } + }, + "UpdateConfig": { + "Parallelism": 1 + }, + "EndpointSpec": { + "Mode": "vip" + } + } + +**Example response**: + + HTTP/1.1 200 OK + Content-Length: 0 + Content-Type: text/plain; charset=utf-8 + +**JSON Parameters**: + +- **Name** – User-defined name for the service. +- **Labels** – A map of labels to associate with the service (e.g., `{"key":"value"[,"key2":"value2"]}`). +- **TaskTemplate** – Specification of the tasks to start as part of the new service. + - **ContainerSpec** - Container settings for containers started as part of this task. + - **Image** – A string specifying the image name to use for the container. + - **Command** – The command to be run in the image. + - **Args** – Arguments to the command. + - **Env** – A list of environment variables in the form of `["VAR=value"[,"VAR2=value2"]]`. + - **Dir** – A string specifying the working directory for commands to run in. + - **User** – A string value specifying the user inside the container. + - **Labels** – A map of labels to associate with the service (e.g., + `{"key":"value"[,"key2":"value2"]}`). + - **Mounts** – Specification for mounts to be added to containers created as part of the new + service. + - **Target** – Container path. + - **Source** – Mount source (e.g. a volume name, a host path). + - **Type** – The mount type (`bind`, or `volume`). + - **ReadOnly** – A boolean indicating whether the mount should be read-only. + - **BindOptions** - Optional configuration for the `bind` type + - **Propagation** – A propagation mode with the value `[r]private`, `[r]shared`, or `[r]slave`. + - **VolumeOptions** – Optional configuration for the `volume` type. + - **NoCopy** – A boolean indicating if volume should be + populated with the data from the target. (Default false) + - **Labels** – User-defined name and labels for the volume. + - **DriverConfig** – Map of driver-specific options. + - **Name** - Name of the driver to use to create the volume + - **Options** - key/value map of driver specific options + - **StopGracePeriod** – Amount of time to wait for the container to terminate before + forcefully killing it. + - **Resources** – Resource requirements which apply to each individual container created as part + of the service. + - **Limits** – Define resources limits. + - **CPU** – CPU limit + - **Memory** – Memory limit + - **Reservation** – Define resources reservation. + - **CPU** – CPU reservation + - **Memory** – Memory reservation + - **RestartPolicy** – Specification for the restart policy which applies to containers created + as part of this service. + - **Condition** – Condition for restart (`none`, `on-failure`, or `any`). + - **Delay** – Delay between restart attempts. + - **Attempts** – Maximum attempts to restart a given container before giving up (default value + is 0, which is ignored). + - **Window** – Windows is the time window used to evaluate the restart policy (default value is + 0, which is unbounded). + - **Placement** – An array of constraints. +- **Mode** – Scheduling mode for the service (`replicated` or `global`, defaults to `replicated`). +- **UpdateConfig** – Specification for the update strategy of the service. + - **Parallelism** – Maximum number of tasks to be updated in one iteration (0 means unlimited + parallelism). + - **Delay** – Amount of time between updates. +- **Networks** – Array of network names or IDs to attach the service to. +- **Endpoint** – Properties that can be configured to access and load balance a service. + - **Spec** – + - **Mode** – The mode of resolution to use for internal load balancing + between tasks (`vip` or `dnsrr`). + - **Ports** – Exposed ports that this service is accessible on from the outside, in the form + of: `"Ports": { "/: {}" }` + - **VirtualIPs** + +**Query parameters**: + +- **version** – The version number of the service object being updated. This is + required to avoid conflicting writes. + +**Request Headers**: + +- **Content-type** – Set to `"application/json"`. +- **X-Registry-Auth** – base64-encoded AuthConfig object, containing either + login information, or a token. Refer to the [create an image](#create-an-image) + section for more details. + +**Status codes**: + +- **200** – no error +- **404** – no such service +- **500** – server error + +## 3.10 Tasks + +**Note**: Task operations require the engine to be part of a swarm. + +### List tasks + + +`GET /tasks` + +List tasks + +**Example request**: + + GET /tasks HTTP/1.1 + +**Example response**: + + [ + { + "ID": "0kzzo1i0y4jz6027t0k7aezc7", + "Version": { + "Index": 71 + }, + "CreatedAt": "2016-06-07T21:07:31.171892745Z", + "UpdatedAt": "2016-06-07T21:07:31.376370513Z", + "Name": "hopeful_cori", + "Spec": { + "ContainerSpec": { + "Image": "redis" + }, + "Resources": { + "Limits": {}, + "Reservations": {} + }, + "RestartPolicy": { + "Condition": "ANY" + }, + "Placement": {} + }, + "ServiceID": "9mnpnzenvg8p8tdbtq4wvbkcz", + "Instance": 1, + "NodeID": "24ifsmvkjbyhk", + "ServiceAnnotations": {}, + "Status": { + "Timestamp": "2016-06-07T21:07:31.290032978Z", + "State": "FAILED", + "Message": "execution failed", + "ContainerStatus": {} + }, + "DesiredState": "SHUTDOWN", + "NetworksAttachments": [ + { + "Network": { + "ID": "4qvuz4ko70xaltuqbt8956gd1", + "Version": { + "Index": 18 + }, + "CreatedAt": "2016-06-07T20:31:11.912919752Z", + "UpdatedAt": "2016-06-07T21:07:29.955277358Z", + "Spec": { + "Name": "ingress", + "Labels": { + "com.docker.swarm.internal": "true" + }, + "DriverConfiguration": {}, + "IPAM": { + "Driver": {}, + "Configs": [ + { + "Family": "UNKNOWN", + "Subnet": "10.255.0.0/16" + } + ] + } + }, + "DriverState": { + "Name": "overlay", + "Options": { + "com.docker.network.driver.overlay.vxlanid_list": "256" + } + }, + "IPAM": { + "Driver": { + "Name": "default" + }, + "Configs": [ + { + "Family": "UNKNOWN", + "Subnet": "10.255.0.0/16" + } + ] + } + }, + "Addresses": [ + "10.255.0.10/16" + ] + } + ], + "Endpoint": { + "Spec": {}, + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379, + "PublicPort": 30000 + } + ], + "VirtualIPs": [ + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.2/16" + }, + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.3/16" + } + ] + } + }, + { + "ID": "1yljwbmlr8er2waf8orvqpwms", + "Version": { + "Index": 30 + }, + "CreatedAt": "2016-06-07T21:07:30.019104782Z", + "UpdatedAt": "2016-06-07T21:07:30.231958098Z", + "Name": "hopeful_cori", + "Spec": { + "ContainerSpec": { + "Image": "redis" + }, + "Resources": { + "Limits": {}, + "Reservations": {} + }, + "RestartPolicy": { + "Condition": "ANY" + }, + "Placement": {} + }, + "ServiceID": "9mnpnzenvg8p8tdbtq4wvbkcz", + "Instance": 1, + "NodeID": "24ifsmvkjbyhk", + "ServiceAnnotations": {}, + "Status": { + "Timestamp": "2016-06-07T21:07:30.202183143Z", + "State": "FAILED", + "Message": "execution failed", + "ContainerStatus": {} + }, + "DesiredState": "SHUTDOWN", + "NetworksAttachments": [ + { + "Network": { + "ID": "4qvuz4ko70xaltuqbt8956gd1", + "Version": { + "Index": 18 + }, + "CreatedAt": "2016-06-07T20:31:11.912919752Z", + "UpdatedAt": "2016-06-07T21:07:29.955277358Z", + "Spec": { + "Name": "ingress", + "Labels": { + "com.docker.swarm.internal": "true" + }, + "DriverConfiguration": {}, + "IPAM": { + "Driver": {}, + "Configs": [ + { + "Family": "UNKNOWN", + "Subnet": "10.255.0.0/16" + } + ] + } + }, + "DriverState": { + "Name": "overlay", + "Options": { + "com.docker.network.driver.overlay.vxlanid_list": "256" + } + }, + "IPAM": { + "Driver": { + "Name": "default" + }, + "Configs": [ + { + "Family": "UNKNOWN", + "Subnet": "10.255.0.0/16" + } + ] + } + }, + "Addresses": [ + "10.255.0.5/16" + ] + } + ], + "Endpoint": { + "Spec": {}, + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379, + "PublicPort": 30000 + } + ], + "VirtualIPs": [ + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.2/16" + }, + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.3/16" + } + ] + } + } + ] + +**Query parameters**: + +- **filters** – a JSON encoded value of the filters (a `map[string][]string`) to process on the + services list. Available filters: + - `id=` + - `name=` + - `service=` + - `node=` + - `label=key` or `label="key=value"` + - `desired-state=(running | shutdown | accepted)` + +**Status codes**: + +- **200** – no error +- **500** – server error + +### Inspect a task + + +`GET /tasks/(task id)` + +Get details on a task + +**Example request**: + + GET /tasks/0kzzo1i0y4jz6027t0k7aezc7 HTTP/1.1 + +**Example response**: + + { + "ID": "0kzzo1i0y4jz6027t0k7aezc7", + "Version": { + "Index": 71 + }, + "CreatedAt": "2016-06-07T21:07:31.171892745Z", + "UpdatedAt": "2016-06-07T21:07:31.376370513Z", + "Name": "hopeful_cori", + "Spec": { + "ContainerSpec": { + "Image": "redis" + }, + "Resources": { + "Limits": {}, + "Reservations": {} + }, + "RestartPolicy": { + "Condition": "ANY" + }, + "Placement": {} + }, + "ServiceID": "9mnpnzenvg8p8tdbtq4wvbkcz", + "Instance": 1, + "NodeID": "24ifsmvkjbyhk", + "ServiceAnnotations": {}, + "Status": { + "Timestamp": "2016-06-07T21:07:31.290032978Z", + "State": "FAILED", + "Message": "execution failed", + "ContainerStatus": {} + }, + "DesiredState": "SHUTDOWN", + "NetworksAttachments": [ + { + "Network": { + "ID": "4qvuz4ko70xaltuqbt8956gd1", + "Version": { + "Index": 18 + }, + "CreatedAt": "2016-06-07T20:31:11.912919752Z", + "UpdatedAt": "2016-06-07T21:07:29.955277358Z", + "Spec": { + "Name": "ingress", + "Labels": { + "com.docker.swarm.internal": "true" + }, + "DriverConfiguration": {}, + "IPAM": { + "Driver": {}, + "Configs": [ + { + "Family": "UNKNOWN", + "Subnet": "10.255.0.0/16" + } + ] + } + }, + "DriverState": { + "Name": "overlay", + "Options": { + "com.docker.network.driver.overlay.vxlanid_list": "256" + } + }, + "IPAM": { + "Driver": { + "Name": "default" + }, + "Configs": [ + { + "Family": "UNKNOWN", + "Subnet": "10.255.0.0/16" + } + ] + } + }, + "Addresses": [ + "10.255.0.10/16" + ] + } + ], + "Endpoint": { + "Spec": {}, + "ExposedPorts": [ + { + "Protocol": "tcp", + "Port": 6379, + "PublicPort": 30000 + } + ], + "VirtualIPs": [ + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.2/16" + }, + { + "NetworkID": "4qvuz4ko70xaltuqbt8956gd1", + "Addr": "10.255.0.3/16" + } + ] + } + } + +**Status codes**: + +- **200** – no error +- **404** – unknown task +- **500** – server error + +# 4. Going further + +## 4.1 Inside `docker run` + +As an example, the `docker run` command line makes the following API calls: + +- Create the container + +- If the status code is 404, it means the image doesn't exist: + - Try to pull it. + - Then, retry to create the container. + +- Start the container. + +- If you are not in detached mode: +- Attach to the container, using `logs=1` (to have `stdout` and + `stderr` from the container's start) and `stream=1` + +- If in detached mode or only `stdin` is attached, display the container's id. + +## 4.2 Hijacking + +In this version of the API, `/attach`, uses hijacking to transport `stdin`, +`stdout`, and `stderr` on the same socket. + +To hint potential proxies about connection hijacking, Docker client sends +connection upgrade headers similarly to websocket. + + Upgrade: tcp + Connection: Upgrade + +When Docker daemon detects the `Upgrade` header, it switches its status code +from **200 OK** to **101 UPGRADED** and resends the same headers. + + +## 4.3 CORS Requests + +To set cross origin requests to the remote api please give values to +`--api-cors-header` when running Docker in daemon mode. Set * (asterisk) allows all, +default or blank means CORS disabled + + $ dockerd -H="192.168.1.9:2375" --api-cors-header="http://foo.bar" From 21e168053feba7c8b88aaee8bdc7df5c2748a8cf Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Wed, 17 Aug 2016 16:43:35 +0200 Subject: [PATCH 02/13] Merge pull request #25709 from thaJeztah/fix-missing-docs-for-binary-remote-context Add missing docs about binary remote contexts (cherry picked from commit b4abe38d43f1158b3c085ef006e88740296a3020) Signed-off-by: Charles Smith --- docs/reference/api/docker_remote_api_v1.19.md | 10 +-- docs/reference/api/docker_remote_api_v1.20.md | 10 ++- docs/reference/api/docker_remote_api_v1.21.md | 10 ++- docs/reference/api/docker_remote_api_v1.22.md | 10 ++- docs/reference/api/docker_remote_api_v1.23.md | 10 ++- docs/reference/api/docker_remote_api_v1.24.md | 10 ++- docs/reference/api/docker_remote_api_v1.25.md | 10 ++- docs/reference/commandline/build.md | 78 +++++++++++++++---- 8 files changed, 108 insertions(+), 40 deletions(-) diff --git a/docs/reference/api/docker_remote_api_v1.19.md b/docs/reference/api/docker_remote_api_v1.19.md index 1bf512bead..94eea6eb97 100644 --- a/docs/reference/api/docker_remote_api_v1.19.md +++ b/docs/reference/api/docker_remote_api_v1.19.md @@ -1252,13 +1252,9 @@ or being killed. ignored if `remote` is specified and points to an individual filename. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. -- **remote** – A Git repository URI or HTTP/HTTPS context URI. If the - URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. If - the URI points to a tarball, the file is downloaded by the daemon and - the contents therein used as the context for the build. If the URI - points to a tarball and the `dockerfile` parameter is also specified, - there must be a file with the corresponding path inside the tarball. +- **remote** – A Git repository URI or HTTP/HTTPS URI build source. If the + URI specifies a filename, the file's contents are placed into a file + called `Dockerfile`. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/api/docker_remote_api_v1.20.md b/docs/reference/api/docker_remote_api_v1.20.md index 06bd98283a..43f1174c3b 100644 --- a/docs/reference/api/docker_remote_api_v1.20.md +++ b/docs/reference/api/docker_remote_api_v1.20.md @@ -1375,13 +1375,17 @@ or being killed. **Query parameters**: -- **dockerfile** - Path within the build context to the Dockerfile. This is - ignored if `remote` is specified and points to an individual filename. +- **dockerfile** - Path within the build context to the `Dockerfile`. This is + ignored if `remote` is specified and points to an external `Dockerfile`. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. + a file called `Dockerfile` and the image is built from that file. If + the URI points to a tarball, the file is downloaded by the daemon and + the contents therein used as the context for the build. If the URI + points to a tarball and the `dockerfile` parameter is also specified, + there must be a file with the corresponding path inside the tarball. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/api/docker_remote_api_v1.21.md b/docs/reference/api/docker_remote_api_v1.21.md index 10da4c3314..4eb8ca90a4 100644 --- a/docs/reference/api/docker_remote_api_v1.21.md +++ b/docs/reference/api/docker_remote_api_v1.21.md @@ -1453,14 +1453,18 @@ or being killed. **Query parameters**: -- **dockerfile** - Path within the build context to the Dockerfile. This is - ignored if `remote` is specified and points to an individual filename. +- **dockerfile** - Path within the build context to the `Dockerfile`. This is + ignored if `remote` is specified and points to an external `Dockerfile`. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. + a file called `Dockerfile` and the image is built from that file. If + the URI points to a tarball, the file is downloaded by the daemon and + the contents therein used as the context for the build. If the URI + points to a tarball and the `dockerfile` parameter is also specified, + there must be a file with the corresponding path inside the tarball. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/api/docker_remote_api_v1.22.md b/docs/reference/api/docker_remote_api_v1.22.md index 2f7b7804dd..610df35fca 100644 --- a/docs/reference/api/docker_remote_api_v1.22.md +++ b/docs/reference/api/docker_remote_api_v1.22.md @@ -1630,14 +1630,18 @@ or being killed. **Query parameters**: -- **dockerfile** - Path within the build context to the Dockerfile. This is - ignored if `remote` is specified and points to an individual filename. +- **dockerfile** - Path within the build context to the `Dockerfile`. This is + ignored if `remote` is specified and points to an external `Dockerfile`. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. + a file called `Dockerfile` and the image is built from that file. If + the URI points to a tarball, the file is downloaded by the daemon and + the contents therein used as the context for the build. If the URI + points to a tarball and the `dockerfile` parameter is also specified, + there must be a file with the corresponding path inside the tarball. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/api/docker_remote_api_v1.23.md b/docs/reference/api/docker_remote_api_v1.23.md index 2d5eec5248..1c9e2732eb 100644 --- a/docs/reference/api/docker_remote_api_v1.23.md +++ b/docs/reference/api/docker_remote_api_v1.23.md @@ -1663,14 +1663,18 @@ or being killed. **Query parameters**: -- **dockerfile** - Path within the build context to the Dockerfile. This is - ignored if `remote` is specified and points to an individual filename. +- **dockerfile** - Path within the build context to the `Dockerfile`. This is + ignored if `remote` is specified and points to an external `Dockerfile`. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. + a file called `Dockerfile` and the image is built from that file. If + the URI points to a tarball, the file is downloaded by the daemon and + the contents therein used as the context for the build. If the URI + points to a tarball and the `dockerfile` parameter is also specified, + there must be a file with the corresponding path inside the tarball. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/api/docker_remote_api_v1.24.md b/docs/reference/api/docker_remote_api_v1.24.md index c7cc5c732d..02e371a06a 100644 --- a/docs/reference/api/docker_remote_api_v1.24.md +++ b/docs/reference/api/docker_remote_api_v1.24.md @@ -1664,14 +1664,18 @@ or being killed. **Query parameters**: -- **dockerfile** - Path within the build context to the Dockerfile. This is - ignored if `remote` is specified and points to an individual filename. +- **dockerfile** - Path within the build context to the `Dockerfile`. This is + ignored if `remote` is specified and points to an external `Dockerfile`. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. + a file called `Dockerfile` and the image is built from that file. If + the URI points to a tarball, the file is downloaded by the daemon and + the contents therein used as the context for the build. If the URI + points to a tarball and the `dockerfile` parameter is also specified, + there must be a file with the corresponding path inside the tarball. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/api/docker_remote_api_v1.25.md b/docs/reference/api/docker_remote_api_v1.25.md index 72839ba9d4..dbdbaf1a9e 100644 --- a/docs/reference/api/docker_remote_api_v1.25.md +++ b/docs/reference/api/docker_remote_api_v1.25.md @@ -1669,14 +1669,18 @@ or being killed. **Query parameters**: -- **dockerfile** - Path within the build context to the Dockerfile. This is - ignored if `remote` is specified and points to an individual filename. +- **dockerfile** - Path within the build context to the `Dockerfile`. This is + ignored if `remote` is specified and points to an external `Dockerfile`. - **t** – A name and optional tag to apply to the image in the `name:tag` format. If you omit the `tag` the default `latest` value is assumed. You can provide one or more `t` parameters. - **remote** – A Git repository URI or HTTP/HTTPS context URI. If the URI points to a single text file, the file's contents are placed into - a file called `Dockerfile` and the image is built from that file. + a file called `Dockerfile` and the image is built from that file. If + the URI points to a tarball, the file is downloaded by the daemon and + the contents therein used as the context for the build. If the URI + points to a tarball and the `dockerfile` parameter is also specified, + there must be a file with the corresponding path inside the tarball. - **q** – Suppress verbose build output. - **nocache** – Do not use the cache when building the image. - **pull** - Attempt to pull the image even if an older image exists locally. diff --git a/docs/reference/commandline/build.md b/docs/reference/commandline/build.md index e1e007dcf1..d7e1291b9e 100644 --- a/docs/reference/commandline/build.md +++ b/docs/reference/commandline/build.md @@ -49,13 +49,18 @@ to any of the files in the context. For example, your build can use an [*ADD*](../builder.md#add) instruction to reference a file in the context. -The `URL` parameter can specify the location of a Git repository; the repository -acts as the build context. The system recursively clones the repository and its -submodules using a `git clone --depth 1 --recursive` command. This command runs -in a temporary directory on your local host. After the command succeeds, the -directory is sent to the Docker daemon as the context. Local clones give you the -ability to access private repositories using local user credentials, VPNs, and -so forth. +The `URL` parameter can refer to three kinds of resources: Git repositories, +pre-packaged tarball contexts and plain text files. + +### Git repositories + +When the `URL` parameter points to the location of a Git repository, the +repository acts as the build context. The system recursively clones the +repository and its submodules using a `git clone --depth 1 --recursive` +command. This command runs in a temporary directory on your local host. After +the command succeeds, the directory is sent to the Docker daemon as the +context. Local clones give you the ability to access private repositories using +local user credentials, VPN's, and so forth. Git URLs accept context configuration in their fragment section, separated by a colon `:`. The first part represents the reference that Git will check out, @@ -84,9 +89,29 @@ Build Syntax Suffix | Commit Used | Build Context Used `myrepo.git#mybranch:myfolder` | `refs/heads/mybranch` | `/myfolder` `myrepo.git#abcdef:myfolder` | `sha1 = abcdef` | `/myfolder` + +### Tarball contexts + +If you pass an URL to a remote tarball, the URL itself is sent to the daemon: + Instead of specifying a context, you can pass a single Dockerfile in the `URL` or pipe the file in via `STDIN`. To pipe a Dockerfile from `STDIN`: +```bash +$ docker build http://server/context.tar.gz + +The download operation will be performed on the host the Docker daemon is +running on, which is not necessarily the same host from which the build command +is being issued. The Docker daemon will fetch `context.tar.gz` and use it as the +build context. Tarball contexts must be tar archives conforming to the standard +`tar` UNIX format and can be compressed with any one of the 'xz', 'bzip2', +'gzip' or 'identity' (no compression) formats. + +### Text files + +Instead of specifying a context, you can pass a single `Dockerfile` in the +`URL` or pipe the file in via `STDIN`. To pipe a `Dockerfile` from `STDIN`: + ```bash $ docker build - < Dockerfile ``` @@ -97,16 +122,16 @@ With Powershell on Windows, you can run: Get-Content Dockerfile | docker build - ``` -If you use STDIN or specify a `URL`, the system places the contents into a file -called `Dockerfile`, and any `-f`, `--file` option is ignored. In this -scenario, there is no context. +If you use `STDIN` or specify a `URL` pointing to a plain text file, the system +places the contents into a file called `Dockerfile`, and any `-f`, `--file` +option is ignored. In this scenario, there is no context. By default the `docker build` command will look for a `Dockerfile` at the root of the build context. The `-f`, `--file`, option lets you specify the path to an alternative file to use instead. This is useful in cases where the same set of files are used for multiple builds. The path must be to a file within the -build context. If a relative path is specified then it must to be relative to -the current directory. +build context. If a relative path is specified then it is interpreted as +relative to the root of the context. In most cases, it's best to put each Dockerfile in an empty directory. Then, add to that directory only the files needed for building the Dockerfile. To @@ -199,9 +224,32 @@ $ docker build github.com/creack/docker-firefox ``` This will clone the GitHub repository and use the cloned repository as context. -The Dockerfile at the root of the repository is used as Dockerfile. Note that -you can specify an arbitrary Git repository by using the `git://` or `git@` -scheme. +The Dockerfile at the root of the repository is used as Dockerfile. You can +specify an arbitrary Git repository by using the `git://` or `git@` scheme. + +```bash +$ docker build -f ctx/Dockerfile http://server/ctx.tar.gz + +Downloading context: http://server/ctx.tar.gz [===================>] 240 B/240 B +Step 0 : FROM busybox + ---> 8c2e06607696 +Step 1 : ADD ctx/container.cfg / + ---> e7829950cee3 +Removing intermediate container b35224abf821 +Step 2 : CMD /bin/ls + ---> Running in fbc63d321d73 + ---> 3286931702ad +Removing intermediate container fbc63d321d73 +Successfully built 377c409b35e4 +``` + +This sends the URL `http://server/ctx.tar.gz` to the Docker daemon, which +downloads and extracts the referenced tarball. The `-f ctx/Dockerfile` +parameter specifies a path inside `ctx.tar.gz` to the `Dockerfile` that is used +to build the image. Any `ADD` commands in that `Dockerfile` that refer to local +paths must be relative to the root of the contents inside `ctx.tar.gz`. In the +example above, the tarball contains a directory `ctx/`, so the `ADD +ctx/container.cfg /` operation works as expected. ### Build with - From dc49ed96cb42ed12fb8417b09555b04946b6c48a Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Thu, 18 Aug 2016 19:25:08 +0200 Subject: [PATCH 03/13] Merge pull request #25743 from lixiaobing10051267/masterInspect Check the return message of docker service inspect (cherry picked from commit 6fa69d2d0610320cce61517eca6e4471f5381561) Signed-off-by: Charles Smith --- docs/swarm/swarm-tutorial/delete-service.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/swarm/swarm-tutorial/delete-service.md b/docs/swarm/swarm-tutorial/delete-service.md index 6475ae738f..ba9b19848b 100644 --- a/docs/swarm/swarm-tutorial/delete-service.md +++ b/docs/swarm/swarm-tutorial/delete-service.md @@ -33,7 +33,7 @@ removed the service. The CLI returns a message that the service is not found: ``` $ docker service inspect helloworld [] - Error: no such service or task: helloworld + Error: no such service: helloworld ``` ## What's next? From 330486c45f12431995751536e32ad0807a164ec0 Mon Sep 17 00:00:00 2001 From: Arnaud Porterie Date: Thu, 25 Aug 2016 17:23:51 +0000 Subject: [PATCH 04/13] Merge pull request #25750 from talex5/spec Document Healthcheck in image spec (cherry picked from commit 46cb1f2601afc2eb99cc31ced362d874c8c3c192) Signed-off-by: Charles Smith --- image/spec/v1.2.md | 696 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 696 insertions(+) create mode 100644 image/spec/v1.2.md diff --git a/image/spec/v1.2.md b/image/spec/v1.2.md new file mode 100644 index 0000000000..c014bf9a09 --- /dev/null +++ b/image/spec/v1.2.md @@ -0,0 +1,696 @@ +# Docker Image Specification v1.2.0 + +An *Image* is an ordered collection of root filesystem changes and the +corresponding execution parameters for use within a container runtime. This +specification outlines the format of these filesystem changes and corresponding +parameters and describes how to create and use them for use with a container +runtime and execution tool. + +This version of the image specification was adopted starting in Docker 1.12. + +## Terminology + +This specification uses the following terms: + +
+
+ Layer +
+
+ Images are composed of layers. Each layer is a set of filesystem + changes. Layers do not have configuration metadata such as environment + variables or default arguments - these are properties of the image as a + whole rather than any particular layer. +
+
+ Image JSON +
+
+ Each image has an associated JSON structure which describes some + basic information about the image such as date created, author, and the + ID of its parent image as well as execution/runtime configuration like + its entry point, default arguments, CPU/memory shares, networking, and + volumes. The JSON structure also references a cryptographic hash of + each layer used by the image, and provides history information for + those layers. This JSON is considered to be immutable, because changing + it would change the computed ImageID. Changing it means creating a new + derived image, instead of changing the existing image. +
+
+ Image Filesystem Changeset +
+
+ Each layer has an archive of the files which have been added, changed, + or deleted relative to its parent layer. Using a layer-based or union + filesystem such as AUFS, or by computing the diff from filesystem + snapshots, the filesystem changeset can be used to present a series of + image layers as if they were one cohesive filesystem. +
+
+ Layer DiffID +
+
+ Layers are referenced by cryptographic hashes of their serialized + representation. This is a SHA256 digest over the tar archive used to + transport the layer, represented as a hexadecimal encoding of 256 bits, e.g., + sha256:a9561eb1b190625c9adb5a9513e72c4dedafc1cb2d4c5236c9a6957ec7dfd5a9. + Layers must be packed and unpacked reproducibly to avoid changing the + layer ID, for example by using tar-split to save the tar headers. Note + that the digest used as the layer ID is taken over an uncompressed + version of the tar. +
+
+ Layer ChainID +
+
+ For convenience, it is sometimes useful to refer to a stack of layers + with a single identifier. This is called a ChainID. For a + single layer (or the layer at the bottom of a stack), the + ChainID is equal to the layer's DiffID. + Otherwise the ChainID is given by the formula: + ChainID(layerN) = SHA256hex(ChainID(layerN-1) + " " + DiffID(layerN)). +
+
+ ImageID +
+
+ Each image's ID is given by the SHA256 hash of its configuration JSON. It is + represented as a hexadecimal encoding of 256 bits, e.g., + sha256:a9561eb1b190625c9adb5a9513e72c4dedafc1cb2d4c5236c9a6957ec7dfd5a9. + Since the configuration JSON that gets hashed references hashes of each + layer in the image, this formulation of the ImageID makes images + content-addresable. +
+
+ Tag +
+
+ A tag serves to map a descriptive, user-given name to any single image + ID. Tag values are limited to the set of characters + [a-zA-Z0-9_.-], except they may not start with a . + or - character. Tags are limited to 127 characters. +
+
+ Repository +
+
+ A collection of tags grouped under a common prefix (the name component + before :). For example, in an image tagged with the name + my-app:3.1.4, my-app is the Repository + component of the name. A repository name is made up of slash-separated + name components, optionally prefixed by a DNS hostname. The hostname + must follow comply with standard DNS rules, but may not contain + _ characters. If a hostname is present, it may optionally + be followed by a port number in the format :8080. + Name components may contain lowercase characters, digits, and + separators. A separator is defined as a period, one or two underscores, + or one or more dashes. A name component may not start or end with + a separator. +
+
+ +## Image JSON Description + +Here is an example image JSON file: + +``` +{ + "created": "2015-10-31T22:22:56.015925234Z", + "author": "Alyssa P. Hacker <alyspdev@example.com>", + "architecture": "amd64", + "os": "linux", + "config": { + "User": "alice", + "Memory": 2048, + "MemorySwap": 4096, + "CpuShares": 8, + "ExposedPorts": { + "8080/tcp": {} + }, + "Env": [ + "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", + "FOO=docker_is_a_really", + "BAR=great_tool_you_know" + ], + "Entrypoint": [ + "/bin/my-app-binary" + ], + "Cmd": [ + "--foreground", + "--config", + "/etc/my-app.d/default.cfg" + ], + "Volumes": { + "/var/job-result-data": {}, + "/var/log/my-app-logs": {}, + }, + "WorkingDir": "/home/alice", + }, + "rootfs": { + "diff_ids": [ + "sha256:c6f988f4874bb0add23a778f753c65efe992244e148a1d2ec2a8b664fb66bbd1", + "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" + ], + "type": "layers" + }, + "history": [ + { + "created": "2015-10-31T22:22:54.690851953Z", + "created_by": "/bin/sh -c #(nop) ADD file:a3bc1e842b69636f9df5256c49c5374fb4eef1e281fe3f282c65fb853ee171c5 in /" + }, + { + "created": "2015-10-31T22:22:55.613815829Z", + "created_by": "/bin/sh -c #(nop) CMD [\"sh\"]", + "empty_layer": true + } + ] +} +``` + +Note that image JSON files produced by Docker don't contain formatting +whitespace. It has been added to this example for clarity. + +### Image JSON Field Descriptions + +
+
+ created string +
+
+ ISO-8601 formatted combined date and time at which the image was + created. +
+
+ author string +
+
+ Gives the name and/or email address of the person or entity which + created and is responsible for maintaining the image. +
+
+ architecture string +
+
+ The CPU architecture which the binaries in this image are built to run + on. Possible values include: +
    +
  • 386
    • +
  • amd64
    • +
  • arm
    • +
+ More values may be supported in the future and any of these may or may + not be supported by a given container runtime implementation. +
+
+ os string +
+
+ The name of the operating system which the image is built to run on. + Possible values include: +
    +
  • darwin
    • +
  • freebsd
    • +
  • linux
    • +
+ More values may be supported in the future and any of these may or may + not be supported by a given container runtime implementation. +
+
+ config struct +
+
+ The execution parameters which should be used as a base when running a + container using the image. This field can be null, in + which case any execution parameters should be specified at creation of + the container. + +

Container RunConfig Field Descriptions

+ +
+
+ User string +
+
+

The username or UID which the process in the container should + run as. This acts as a default value to use when the value is + not specified when creating a container.

+ +

All of the following are valid:

+ +
    +
  • user
    • +
  • uid
    • +
  • user:group
    • +
  • uid:gid
    • +
  • uid:group
    • +
  • user:gid
    • +
+ +

If group/gid is not specified, the + default group and supplementary groups of the given + user/uid in /etc/passwd + from the container are applied.

+
+
+ Memory integer +
+
+ Memory limit (in bytes). This acts as a default value to use + when the value is not specified when creating a container. +
+
+ MemorySwap integer +
+
+ Total memory usage (memory + swap); set to -1 to + disable swap. This acts as a default value to use when the + value is not specified when creating a container. +
+
+ CpuShares integer +
+
+ CPU shares (relative weight vs. other containers). This acts as + a default value to use when the value is not specified when + creating a container. +
+
+ ExposedPorts struct +
+
+ A set of ports to expose from a container running this image. + This JSON structure value is unusual because it is a direct + JSON serialization of the Go type + map[string]struct{} and is represented in JSON as + an object mapping its keys to an empty object. Here is an + example: + +
{
+    "8080": {},
+    "53/udp": {},
+    "2356/tcp": {}
+}
+ + Its keys can be in the format of: +
    +
  • + "port/tcp" +
    • +
  • + "port/udp" +
    • +
  • + "port" +
    • +
+ with the default protocol being "tcp" if not + specified. + + These values act as defaults and are merged with any specified + when creating a container. +
+
+ Env array of strings +
+
+ Entries are in the format of VARNAME="var value". + These values act as defaults and are merged with any specified + when creating a container. +
+
+ Entrypoint array of strings +
+
+ A list of arguments to use as the command to execute when the + container starts. This value acts as a default and is replaced + by an entrypoint specified when creating a container. +
+
+ Cmd array of strings +
+
+ Default arguments to the entry point of the container. These + values act as defaults and are replaced with any specified when + creating a container. If an Entrypoint value is + not specified, then the first entry of the Cmd + array should be interpreted as the executable to run. +
+
+ Healthcheck struct +
+
+ A test to perform to determine whether the container is healthy. + Here is an example: +
{
+  "Test": [
+      "CMD-SHELL",
+      "/usr/bin/check-health localhost"
+  ],
+  "Interval": 30000000000,
+  "Timeout": 10000000000,
+  "Retries": 3
+}
+ The object has the following fields. +
+
+ Test array of strings +
+
+ The test to perform to check that the container is healthy. + The options are: +
    +
  • [] : inherit healthcheck from base image
    • +
  • ["NONE"] : disable healthcheck
    • +
  • ["CMD", arg1, arg2, ...] : exec arguments directly
    • +
  • ["CMD-SHELL", command] : run command with system's default shell
    • +
+ + The test command should exit with a status of 0 if the container is healthy, + or with 1 if it is unhealthy. +
+
+ Interval integer +
+
+ Number of nanoseconds to wait between probe attempts. +
+
+ Timeout integer +
+
+ Number of nanoseconds to wait before considering the check to have hung. +
+
+ Retries integer +
+
+ The number of consecutive failures needed to consider a container as unhealthy. +
+
+ + In each case, the field can be omitted to indicate that the + value should be inherited from the base layer. + + These values act as defaults and are merged with any specified + when creating a container. +
+
+ Volumes struct +
+
+ A set of directories which should be created as data volumes in + a container running this image. This JSON structure value is + unusual because it is a direct JSON serialization of the Go + type map[string]struct{} and is represented in + JSON as an object mapping its keys to an empty object. Here is + an example: +
{
+    "/var/my-app-data/": {},
+    "/etc/some-config.d/": {},
+}
+
+
+ WorkingDir string +
+
+ Sets the current working directory of the entry point process + in the container. This value acts as a default and is replaced + by a working directory specified when creating a container. +
+
+
+
+ rootfs struct +
+
+ The rootfs key references the layer content addresses used by the + image. This makes the image config hash depend on the filesystem hash. + rootfs has two subkeys: + +
    +
  • + type is usually set to layers. +
    • +
  • + diff_ids is an array of layer content hashes (DiffIDs), in order from bottom-most to top-most. +
    • +
+ + + Here is an example rootfs section: + +
"rootfs": {
+  "diff_ids": [
+    "sha256:c6f988f4874bb0add23a778f753c65efe992244e148a1d2ec2a8b664fb66bbd1",
+    "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef",
+    "sha256:13f53e08df5a220ab6d13c58b2bf83a59cbdc2e04d0a3f041ddf4b0ba4112d49"
+  ],
+  "type": "layers"
+}
+
+
+ history struct +
+
+ history is an array of objects describing the history of + each layer. The array is ordered from bottom-most layer to top-most + layer. The object has the following fields. + +
    +
  • + created: Creation time, expressed as a ISO-8601 formatted + combined date and time +
    • +
  • + author: The author of the build point +
    • +
  • + created_by: The command which created the layer +
    • +
  • + comment: A custom message set when creating the layer +
    • +
  • + empty_layer: This field is used to mark if the history + item created a filesystem diff. It is set to true if this history + item doesn't correspond to an actual layer in the rootfs section + (for example, a command like ENV which results in no change to the + filesystem). +
    • +
+ +Here is an example history section: + +
"history": [
+  {
+    "created": "2015-10-31T22:22:54.690851953Z",
+    "created_by": "/bin/sh -c #(nop) ADD file:a3bc1e842b69636f9df5256c49c5374fb4eef1e281fe3f282c65fb853ee171c5 in /"
+  },
+  {
+    "created": "2015-10-31T22:22:55.613815829Z",
+    "created_by": "/bin/sh -c #(nop) CMD [\"sh\"]",
+    "empty_layer": true
+  }
+]
+
+
+ +Any extra fields in the Image JSON struct are considered implementation +specific and should be ignored by any implementations which are unable to +interpret them. + +## Creating an Image Filesystem Changeset + +An example of creating an Image Filesystem Changeset follows. + +An image root filesystem is first created as an empty directory. Here is the +initial empty directory structure for the a changeset using the +randomly-generated directory name `c3167915dc9d` ([actual layer DiffIDs are +generated based on the content](#id_desc)). + +``` +c3167915dc9d/ +``` + +Files and directories are then created: + +``` +c3167915dc9d/ + etc/ + my-app-config + bin/ + my-app-binary + my-app-tools +``` + +The `c3167915dc9d` directory is then committed as a plain Tar archive with +entries for the following files: + +``` +etc/my-app-config +bin/my-app-binary +bin/my-app-tools +``` + +To make changes to the filesystem of this container image, create a new +directory, such as `f60c56784b83`, and initialize it with a snapshot of the +parent image's root filesystem, so that the directory is identical to that +of `c3167915dc9d`. NOTE: a copy-on-write or union filesystem can make this very +efficient: + +``` +f60c56784b83/ + etc/ + my-app-config + bin/ + my-app-binary + my-app-tools +``` + +This example change is going add a configuration directory at `/etc/my-app.d` +which contains a default config file. There's also a change to the +`my-app-tools` binary to handle the config layout change. The `f60c56784b83` +directory then looks like this: + +``` +f60c56784b83/ + etc/ + my-app.d/ + default.cfg + bin/ + my-app-binary + my-app-tools +``` + +This reflects the removal of `/etc/my-app-config` and creation of a file and +directory at `/etc/my-app.d/default.cfg`. `/bin/my-app-tools` has also been +replaced with an updated version. Before committing this directory to a +changeset, because it has a parent image, it is first compared with the +directory tree of the parent snapshot, `f60c56784b83`, looking for files and +directories that have been added, modified, or removed. The following changeset +is found: + +``` +Added: /etc/my-app.d/default.cfg +Modified: /bin/my-app-tools +Deleted: /etc/my-app-config +``` + +A Tar Archive is then created which contains *only* this changeset: The added +and modified files and directories in their entirety, and for each deleted item +an entry for an empty file at the same location but with the basename of the +deleted file or directory prefixed with `.wh.`. The filenames prefixed with +`.wh.` are known as "whiteout" files. NOTE: For this reason, it is not possible +to create an image root filesystem which contains a file or directory with a +name beginning with `.wh.`. The resulting Tar archive for `f60c56784b83` has +the following entries: + +``` +/etc/my-app.d/default.cfg +/bin/my-app-tools +/etc/.wh.my-app-config +``` + +Any given image is likely to be composed of several of these Image Filesystem +Changeset tar archives. + +## Combined Image JSON + Filesystem Changeset Format + +There is also a format for a single archive which contains complete information +about an image, including: + + - repository names/tags + - image configuration JSON file + - all tar archives of each layer filesystem changesets + +For example, here's what the full archive of `library/busybox` is (displayed in +`tree` format): + +``` +. +├── 47bcc53f74dc94b1920f0b34f6036096526296767650f223433fe65c35f149eb.json +├── 5f29f704785248ddb9d06b90a11b5ea36c534865e9035e4022bb2e71d4ecbb9a +│   ├── VERSION +│   ├── json +│   └── layer.tar +├── a65da33792c5187473faa80fa3e1b975acba06712852d1dea860692ccddf3198 +│   ├── VERSION +│   ├── json +│   └── layer.tar +├── manifest.json +└── repositories +``` + +There is a directory for each layer in the image. Each directory is named with +a 64 character hex name that is deterministically generated from the layer +information. These names are not necessarily layer DiffIDs or ChainIDs. Each of +these directories contains 3 files: + + * `VERSION` - The schema version of the `json` file + * `json` - The legacy JSON metadata for an image layer. In this version of + the image specification, layers don't have JSON metadata, but in + [version 1](v1.md), they did. A file is created for each layer in the + v1 format for backward compatibility. + * `layer.tar` - The Tar archive of the filesystem changeset for an image + layer. + +Note that this directory layout is only important for backward compatibility. +Current implementations use the paths specified in `manifest.json`. + +The content of the `VERSION` files is simply the semantic version of the JSON +metadata schema: + +``` +1.0 +``` + +The `repositories` file is another JSON file which describes names/tags: + +``` +{ + "busybox":{ + "latest":"5f29f704785248ddb9d06b90a11b5ea36c534865e9035e4022bb2e71d4ecbb9a" + } +} +``` + +Every key in this object is the name of a repository, and maps to a collection +of tag suffixes. Each tag maps to the ID of the image represented by that tag. +This file is only used for backwards compatibility. Current implementations use +the `manifest.json` file instead. + +The `manifest.json` file provides the image JSON for the top-level image, and +optionally for parent images that this image was derived from. It consists of +an array of metadata entries: + +``` +[ + { + "Config": "47bcc53f74dc94b1920f0b34f6036096526296767650f223433fe65c35f149eb.json", + "RepoTags": ["busybox:latest"], + "Layers": [ + "a65da33792c5187473faa80fa3e1b975acba06712852d1dea860692ccddf3198/layer.tar", + "5f29f704785248ddb9d06b90a11b5ea36c534865e9035e4022bb2e71d4ecbb9a/layer.tar" + ] + } +] +``` + +There is an entry in the array for each image. + +The `Config` field references another file in the tar which includes the image +JSON for this image. + +The `RepoTags` field lists references pointing to this image. + +The `Layers` field points to the filesystem changeset tars. + +An optional `Parent` field references the imageID of the parent image. This +parent must be part of the same `manifest.json` file. + +This file shouldn't be confused with the distribution manifest, used to push +and pull images. + +Generally, implementations that support this version of the spec will use +the `manifest.json` file if available, and older implementations will use the +legacy `*/json` files and `repositories`. From 3d4813ffd222f20625c1f22db5b4102b12657b62 Mon Sep 17 00:00:00 2001 From: Vincent Demeester Date: Wed, 17 Aug 2016 09:59:36 +0200 Subject: [PATCH 05/13] Merge pull request #25751 from yuexiao-wang/clean-docs Remove mess words in installation doc (cherry picked from commit bbd5396955a8c36b9f208d64fe580b769c1686f5) Signed-off-by: Charles Smith --- docs/installation/linux/ubuntulinux.md | 63 +++++++++++++++++--------- 1 file changed, 42 insertions(+), 21 deletions(-) diff --git a/docs/installation/linux/ubuntulinux.md b/docs/installation/linux/ubuntulinux.md index 91478489da..ca38e8c958 100644 --- a/docs/installation/linux/ubuntulinux.md +++ b/docs/installation/linux/ubuntulinux.md @@ -142,27 +142,48 @@ For Ubuntu Precise, Docker requires the 3.13 kernel version. If your kernel version is older than 3.13, you must upgrade it. Refer to this table to see which packages are required for your environment: - - -
linux-image-generic-lts-trusty Generic -Linux kernel image. This kernel has AUFS built in. This is required to run -Docker.
linux-headers-generic-lts-trustyAllows packages such as ZFS and VirtualBox guest additions -which depend on them. If you didn't install the headers for your existing -kernel, then you can skip these headers for the"trusty" kernel. If you're -unsure, you should include this package for safety.
xserver-xorg-lts-trusty Optional in non-graphical environments without Unity/Xorg. -Required when running Docker on machine with a graphical environment. -
-
To learn more about the reasons for these packages, read the installation -instructions for backported kernels, specifically the LTS -Enablement Stack — refer to note 5 under each version. -
libgl1-mesa-glx-lts-trusty
  + + + + + + + + + + + + + + + + + + + + + + + + +
PackageDescription
linux-image-generic-lts-trusty + Generic Linux kernel image. This kernel has AUFS built in. This is + required to run Docker. +
linux-headers-generic-lts-trusty + Allows packages such as ZFS and VirtualBox guest additions which depend + on them. If you didn't install the headers for your existing kernel, then + you can skip these headers for the"trusty" kernel. If you're unsure, you + should include this package for safety. +
xserver-xorg-lts-trusty + Optional in non-graphical environments without Unity/Xorg. + Required when running Docker on machine with a graphical + environment.

+ To learn more about the reasons for these packages, read the installation + instructions for backported kernels, specifically the LTS Enablement Stack — refer to note 5 under each + version. +
libgl1-mesa-glx-lts-trusty
To upgrade your kernel and install the additional packages, do the following: From 63fb3077cc3ae8cb48ec3fcb47f4c9e890fb0f3c Mon Sep 17 00:00:00 2001 From: Vincent Demeester Date: Mon, 22 Aug 2016 09:13:54 +0200 Subject: [PATCH 06/13] Merge pull request #25775 from ddgenome/entrypoint-env Remove erroneous ENTRYPOINT note (cherry picked from commit c1bdda0be8616f987245cb61a4aedc09c8b5c806) Signed-off-by: Charles Smith --- docs/reference/builder.md | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/docs/reference/builder.md b/docs/reference/builder.md index 5975110fe4..15bfd9a295 100644 --- a/docs/reference/builder.md +++ b/docs/reference/builder.md @@ -541,6 +541,9 @@ RUN /bin/bash -c 'source $HOME/.bashrc ; echo $HOME' > `RUN [ "echo", "$HOME" ]` will not do variable substitution on `$HOME`. > If you want shell processing then either use the *shell* form or execute > a shell directly, for example: `RUN [ "sh", "-c", "echo $HOME" ]`. +> When using the exec form and executing a shell directly, as in the case for +> the shell form, it is the shell that is doing the environment variable +> expansion, not docker. > > **Note**: > In the *JSON* form, it is necessary to escape backslashes. This is @@ -607,6 +610,9 @@ instruction as well. > `CMD [ "echo", "$HOME" ]` will not do variable substitution on `$HOME`. > If you want shell processing then either use the *shell* form or execute > a shell directly, for example: `CMD [ "sh", "-c", "echo $HOME" ]`. +> When using the exec form and executing a shell directly, as in the case for +> the shell form, it is the shell that is doing the environment variable +> expansion, not docker. When used in the shell or exec formats, the `CMD` instruction sets the command to be executed when running the image. @@ -1075,8 +1081,9 @@ sys 0m 0.03s > `ENTRYPOINT [ "echo", "$HOME" ]` will not do variable substitution on `$HOME`. > If you want shell processing then either use the *shell* form or execute > a shell directly, for example: `ENTRYPOINT [ "sh", "-c", "echo $HOME" ]`. -> Variables that are defined in the `Dockerfile`using `ENV`, will be substituted by -> the `Dockerfile` parser. +> When using the exec form and executing a shell directly, as in the case for +> the shell form, it is the shell that is doing the environment variable +> expansion, not docker. ### Shell form ENTRYPOINT example From fdb514089347567d80a669e60c66a02a995338b8 Mon Sep 17 00:00:00 2001 From: Charles Smith Date: Thu, 25 Aug 2016 10:06:11 -0700 Subject: [PATCH 07/13] Merge pull request #25781 from sfsmithcha/add_ingress_guide author merge: add ingress / publish port guide (cherry picked from commit dee30443368b9ed8046733242410b8c32550ce0d) Signed-off-by: Charles Smith --- docs/swarm/images/ingress-lb.png | Bin 0 -> 140300 bytes docs/swarm/images/ingress-routing-mesh.png | Bin 0 -> 118815 bytes docs/swarm/images/src/ingress-lb.svg | 1 + .../swarm/images/src/ingress-routing-mesh.svg | 1 + docs/swarm/ingress.md | 132 ++++++++++++++++++ 5 files changed, 134 insertions(+) create mode 100644 docs/swarm/images/ingress-lb.png create mode 100644 docs/swarm/images/ingress-routing-mesh.png create mode 100644 docs/swarm/images/src/ingress-lb.svg create mode 100644 docs/swarm/images/src/ingress-routing-mesh.svg create mode 100644 docs/swarm/ingress.md diff --git a/docs/swarm/images/ingress-lb.png b/docs/swarm/images/ingress-lb.png new file mode 100644 index 0000000000000000000000000000000000000000..d486dfbc650d3bd9e37248a8ccb67daa3149b68e GIT binary patch literal 140300 zcmeFZ_g7Q>vo=fCZ;s`#k5|=MQ+_wazcF$Xe_@pV>3lTyxFr1S&&hNUl>|$HBoNk&}I{f`da~ zhl7JxeT@+KWaQ~s0`LnLrXuqUr?7`+2?s|KNACGkHCNnK)K$;B>e!|&GVNz1%(%}; zQVH+mI+Ck#JWR2ahOWKQ5nc8v$Sck(ggQCtc{G3cM9aR2_qLzl-8+aZ!;Uf@!L^K| zjp~hVWBu#sU&I8MT5tWS2vHZ41~Ms!srrQvbMg1d32sT^;QrSieh%!)Ig|R7_dej@ zU1RY5uRmU2xi+&I{NFx2`!fQDizhU9glq5iumADI!KG=q`aj)>OA;qLL4tvc^uL(^ z{K??^eeb{C`tMDZdjJC>wy*w}WBj)f1a^Pu{&gH&f{tn&+ysXc-zu^HdeF0*`r_Q2 z#{aj)lEU{Gd{uksZ$$_E+lX6DzdZiC(|~I|T)-o+>)6NtjrsRc0pEC%{&!yj2bk0K z#eoR>Nb1u4+trdd0UQ7Ji)2ay@vSD-1=5e5QvWt07dX)Ql~Tz@AHh5qsnVGVLU{dR zo;(Oai2imyw@k$qK>X|XGEwdjZbg}a2l z0{-*I6qEh6#_v0sP_gOZFWUB(*JuLp3=Jctug%Z|C`IY~y_!(?*|jqS7S6A&jCb29 zUOw`p_TA;AYAu2~yy~l11l5R8kh zP)j;;PG8N_kg@q^Oln-Mle@wh+d9WHzrB0sCD_saR^aJYDDOghUJxR~ zW~hUCF!z4nOMYf9ffolYGW0uC3TD3Dm#HdQO%4Du7d`R4_kZ(I(v57C1(B5>B^(>c zWNR8V>GiQw!64zjM7F7d_lb8kM-jSX+gnaxH{p09)6!k1x>!q&_T3)RR-&k6WQOMD z>LCxpsg(`3E=vhJWT5;J!^o7l?8g95Z0z z7hGkqE+xJM3?Tu6>)y2@0)^3e&(BfZZ}$0XRm}C+2Y$_wv_VnGBbZTUJj*TB$+dZz zmJUQEv%KqLQG`HYcpo=MM2m^Rt5FI!C?xABT`BR6MJdsLF6>OO=m%RBV=p8>N9$SH z*NuwFHOMI?Z*MZUoo^=2!WZ(2Pu5cp0Y$GfT<`TV{4xG^(*=aMb@La)lN?`xcUlr|P&T#7TGNbNb%VKO^LdM&>tZr*FP+-i#x;+Y!4BvNK~Tpm>%KrhFFR>68?C%7&YC^}@kP)nGXlO;Wu)U33_Opy zYgcmBBbNir3Okz9*yl&l)p?UMNPc{(PiPtBKFUkZ`CI7#)Ir|f>&;DjmEQGyu#WZS z3qhw(1slY^~jNYxmf zZEjgz{9;|I87JAGjOf^o|GnFPCb9BP7vJ1ROStJV25I4CySM%l2D3|QuXX$)*W?WO$|;+ zcpv?N`)Yooppw4Lgscsi5AWAw%*-4o^iLH(wu)%h6v?`#6#1@rm&YUld%BfqImnOC z^mO~c(UP6B@vxgP+B>F1dwn(bpGQM(<7woAn~pE1v)0RtFAsSwVyBjr=RcrPf;UbE z{axqOvd-S!+NGX{W+$ubyCcB>i97HpekT|jN&H>2qixJkg%$d~tH+A{_`X;D%j=cY z6%#vZvEeM`M{Nh#h4v5S)W+XJaWz+0acWT5_QT(R!`i4zVlwd}kTwD;AE)uS=S zJrP6m^`%7M=k0foyEa)_WWx+(dPEBvJjLv5X$yC-t2dTh;>e!&84=5mHYmEmFwJmU z%R`r7D&^Hj8GmqTiLIx(<%0M()0^Q34g-NyaYQ$g-c^2%J`K__!3?Mg%%<}guQfah z#PmiDZ6D$CtX3vly|%FKmvt{-hyJDr2`O&JF6+~A`qxN1%vKXwmF&!-pQ zew`KQbe=tNwxK#lWeJAYS({HLwZ8UK6xao@F5Oj3u9wfcsw@BWHFFm_Y~NyEzdBW~ z&q{P0F_-6Y2W*#-A~fKynX_8$p?rZ zmbDN#9$9~|9%HiHYrEGGmTuY^232rcww+!unCcPIG7mxv45Vk-X^DD7)y3O6KfPn* z^PcS`C;GsQckNGjoa8u9 zJsG9fzdoz&q3^}&gP6TPsj9+zO6p2qby{*|=VI$_CsMN8M+iuQ=k0|Qu z?)F@DP8qXaQc}spdT#vaxFE{)sdUt3UB+bx+DBW03qJGE!w)|m{oSpBi%X<)V5z{X zIXoPa@H4NV*0OsCTFO&thw}qPTlyYyd?zEbvAkL}yHjsE3)$*b9bWI#n6Ldv>BT|z ztr50+Hv_j9rjc;u2Dq~Ry`#tWdOg&b7rtJlW$IQ}D{&2q_iV(ws^eW6o&vmQEz@WQ zRQ*+R;F-=V>GM3mCGZ3qoj;I^`sBxRZ!{v|KCG)wRl6)&E+E__0AnB**;?Y@l)!&tfILJMF`kGCmF))F~=n+;9$w;vI`Q!wzv&s2$8-kE8@EHnfsw)oe{w43`=RUc+^ zqkeNuyiX})+*Hoj<(?$gv*Wzi%8s8d7)>QR_B!D^G9>^rkm*zp=ssk znykm34orX4PIrT$Z%9ddXJ}tZm17 z4i{}N4Wl0kZ`%a#nszi3Kh+QUxsTd1i(LtzK|HP4S|%ggLi397=W3+Ugkis!7uJNk z;Mv^?_oJ02ZB!^U!>+E=Xz*!m8&>G(-|Q4GR>E58vkqCjkaI<~-Wf1`?pDoLh<^@I zMv#;rM}BRSiFVEZsi)VjSiBgHiVI`3Dz;N~n?R$ADwaHF!|8`K4(=tH=h=A;-#&k| zDbIkOJLhL;a=gq10zP0bHtK`Iha8{oN1Fnb*kO#aFx8UDMvytKnuztd1sb~Fw5^p66YH~YgqQ!2l24G^{w1$Bk`cF? zH~BfvRrX5~m@nBZBiXWU^5DXr|5wFn>Z4%rg_R}aEL0P)|uw*&s6C{BAQ17Nv;Qr3h45e~V859wIvNavo05Rbh zXE4udh#DuM?no)*WUh$f9Kn2P=np zOCFn4s#E4%zFeN6SvlNaVDI|aDQKEJLZ+~~LO2gPb-)2@=ul}i#9#6eqIgj|q>T)N25BIR@?6@vcttg=w`m}YRP023>ZA^Y z&X-RtjN)3S;GAr7#P<0oc6HaSVuYur#tWU~RMMa3tA%{Md!R!y!D@R73$F{)l8f7= zXV@SKCY2qkUv>GfIlSctY z)n3InK4Tr5o_t|c5`PSC7}w;J6&#&h@z1OqxzDm~+y3vYky9VLo1`i%u$;q>|j>vbssVnS7^_1NMr5}xIjE2ZCIEXZj^ zdw)Tp*s5rFiXHqzJ6oMh!l3KW6a?5bw!acmvYK}E#6i3HRyR812?{!C-~seV$B!ip^;;R&vm!=JwY47Yy2$Zv zj6Xnc)%J$3T>T+GouoI{IPXdIgNRqkz2Q|=w@U+U{G80dfNbafy<{#Q`hE@fmdeOl zTi&*Pe>MZK7PD5vxO5}oQpxg&v`tY8J2&qF_0-b?=8CY!Ndd)^qWYrfj(B>I+gk={ zr5v5N7A)_UEAlJ(zrDb-xu-J>jkr+(owHOIh$VTYw4b7# zc{ZxL`F*%r>2MKT7(|dZSM;Dp)<~&k(lEQWka-BK5IVA6@@)uvWoW6FM}P*O8BHS**sdP^?vQOM5(Fd&bN7m zqO`(f^mXX^#?Q2hg89QcjPE2ikQnRlyi%d8go>wfMmfgF1dGy0~IVx`Zz_$(b>~%xEVx5&Ucg z(;O>DeqyLE<<1D|(LD9;y%mEYRgYa)g5bLRn zYC9u)ErRcMOPG-0!e!>ETz@BM#(Y|x3TNUQc+}w?yS8HXa>vYvL0a*PVQA|=o<6;` zySXwJMd4ORL7yKJ4MIZ}vMW*ZP|H6bx`iSU1DYN2OAQiO(OCV*R~5*0$5%SX7Dzpx zzfbqME9H#)sV8mbQS(_7(c}5%0&_GP@H+)=oK+0Xa3K{CvVBV-WhA6uiK*4RC$zX;{VVfi5gyv-Ax|8 zlEh>gT(=r}^v-$=WVz>2lRz*`J{HAR*;w}6G2;vNMs>Q9+Ak{HmCX7l3n|5`)|ff~ zg6VG?7HRFN^E7{W843=ITrZby-%lqL3PA3RDWHq!xp(NKMq2Y; zuMr;#Dn5?>l+ZJF3plraIxHkEtUU9j*Y+ols;DyI0qEe3(}RX(t^~!l3WJ<;yAH*aPdDhtl;*{- zd0?2iu`w6yJW_ML@k+Y6!7nAFXHtQKRYhCAr zW_HdRSd~ya5teRMI!0!ln0i*b6>7#U)Non_O>TFK>|^R4jx}(O3>GjYYLmmb4|$*s zKG>pXriOPfqB|rUN8B#tj#&12vz5|CVA0YZBhwr47@u0ct=-PtT%R^xy0bo-G%A$K z)=-JMLZYa>3!G;HiT-sm6O0Yn?;Mg+Z2BQern*@8YJxs)F?PRQKu^vcyQ`Pn-A7iT zM8UEj&Lsod;kY(shB~6+@qBI|iU=pvjbraWf_z6@#dV*F2*_^YKd0fhp7|vlA2P#ip~6dLC-Zkl zH_Kdx$4Q)Y2JcQ2{AxJv%sPFT-Y{XV$+yrw>p~LYeZnZ<$9Ysz&ekx9bOvQR)hd#H zX>aNccW@}v{KyK5-NYRbWtvQW=cW_oQ)^qaVL3$DFDPO#ALA(`XAWYtttFhQUw5#h za|)I(mQXwdtf z$E=@%qDBQwRQ8d1ih_9s;SGYiceLZ*jV_Iq3c2MOCsJ7B30z@jfyF15%bOCf3@Sem zm-eu{J7{vL?}xmToUsMV{QjJ9-lYMS`G%aLdx9JuC{B zmMZ4ayCN&?%{=NlWRL~xES-3{;#)!Yip_cO+>Ylof0wR`kPA4eD+$q~uhsw|Sr4Qf zEOJgUQ@(Fm@A)e^kS(>Gm%P(OX?=u2yx#-@N6?+>e-PiQHLec+LqTz5^_E^6LoFZw zJIicut=z!>j0)`}fL=fLXmb|b0plxrU@6?OS@Yp;OAQAgMrU65z{A{F?#E7}QT*X` zqK^!>bD0cMdKLM&`ETCMyIyr&h?jb8 z8kFpL5F{q-U7?6_T{L_yeT{7>8sTvmzS@&0qNlH2jFKQyNn%n;28G5S32H-@DU7lR zi$Gq7`|d-=Tslml5bX^@bq8nLa83RAS<+X}We*8Ye$>A&;+73GhAagc_!NgC?$ffPG3S=lx~2v{!8bxL?Fq<@_V87|v5G7Ecr%(`$5A<$ zI|jDYZqwhIJn1}?&m^kWS{<(01`g9qyxZ&H?W(hnZ6@GFgQQQyZQ&@gp}f2sd{3iZ zD~vFDK}Yk=G3u{kJRcc;a=TLT<=)VX^(ECd8>{}jXkGC+9k=gHgNaX^q7wLrbVl}s z2Ypk$z<5T}_0YR8uV&YGg0>H$-xo#fm3~LVi6oHk~Q znH2W7WT`Tp7v1oV#h`d%&2%v_AJ@k#+O2*FhZ-Y12 zZKdMloX8?_#$|0NwGFtEtMu5Q8SQsNvw%9vDACw3X^46F*ptoo{oV7b5E6F=mQ>;_ z=Y85tDDhyv{!TK6aO>E3vZX-r3Aw@672B@lU%z(ert*}csl@^V^VGI>U4;iD(IeQs zZ(nuop7!>vT*bm3w+RujZc!y7D$L@tiCc(!Jq95=6b} zp|m>V1E;IyM7KkCcXb~uTjg!{EGoNY(3t*q zB6lJ`w$8OzuD@Be@-?@@g^&Rx(KifOn2KdS;etJf;!&G~R92Q->V*%Q-C~b?P?z&I zbcc4Keb`znJdqj{nfG4d0WY<>8~fNHwtZMHuBfHUU9C3j`HMg9{p22rhkMAZE-U0v z((}mgnTE%9f}u(!yFperdLDRGRtv-{wCd^@TL+4Dy?$Z0M&J@GZPSNf$8Ggdtjw^C}5x@rEkqXm_T;8gL4^mL?7v1{^HG?NC1sv%Y{g{q%Ka4`PJV7=6hE_KaYk|`W#nDw5``hQq6VFYwVvS*5M7mD^p!Tt+&9nXNl4KN1) z{aar8-<$ovt_S@8zi#}mA^HFN07;S8;**cRc*+c=K6@HD2?+X64>-Qq_EdTw(v3A7 z`l<=gtE(4jNXH3&HH`WmvKeVtQ-|;I^s>>tMFcE&-Dc`O=Yz_x7+5@_7lRzo1W%5v z<2_4X*RGBwv-Fkc${Rmt)`|_|9AXPV#?r2Ie8qja-h!T=SAZfCFXe@6G{k4iYwxpv z@c&I>8W>)AJctH1;+d~&w>+y9F)z z!NcZ=f36BP$BFDx%dch8t~GcLfK5jw8lt|6-0tVfDohwk&vdj_zcpDB`R6}(jd*aj zI=N_Q$9mxjWrpJB8~)lBZ}~b$Hol~azsWTBk8@sVrS(AjCr8)b)wCLA4dh&z*u{dE zYbKl+4Ic2H^n*bCS`khYrN$#u$JlcB0m#yn$T+IfY2?ZN-jDbF!(~Giav4k&W(@q_ z_9Ky3-r!!g4WDotgK6$ML;g+x0r3`qTl=~x?bxZ2nqZv_`N)p`haLAmY9YMgpIv7( z_7Vc?Az@?(305OYR>`b9>-SuyTXRbs+>;Tj?#9txJUrWphu>Sduh_UQ%Ed;PDLSuCGLPtahD>^)GO@n% zk4Z8i1#zV?mnc1hGSBh^pDb=)GIeehZ2@Zzr*}=-)wBDCnl{&az=XyEN!Zfp2_J~Yind?Dy&d|6ZJ}eSi$7yB~e>nqX8=3*JS|IWhzS&?n{#;eW(N0h=)k|3@nVHc{+75);y~ zo5$q)4wznN6y-Pc>L48-adcr>9+Le!o>0xNbxUr3#B=p<=Mv7({JLOdhoxu8nqOvloS42K{=upJ3Ovfj35=Z5K8PD4LQhBtS6K(Y*Da86s zrb~1PZoPZm?yC#=9G5`;OhOL7F>yIqdhQ3NoM6iJ)^n-)X-V(Jdg?hRuG1L4L<#$) zmHi28+}B^Nmq6Xr$Iv@W8{3~!$ep^`q_4-!&8>82qHXM#a-8ERQ4dpvt#zn`w!zMU zjzBPx(D4GdI9I1;5&yoE%A}`=HX{p*rbb3qt&^zR2d5=*FG1@p<5)(GWN&VVeK%7i zzM$T(VXqZc6Pap85K1tO7wKo!^`I*o>TygVRz!R@64B4G& zk>O!mQ%si-b1wl0MZ6df3sdU^I8hNthK$@&DUJZ)IU^aOst#G2_}(x{!l>Q$o9d zdM5%{U#o{_K0E``F!o*BtOeDjS z-5*o^p~@TU722-lxjfKevAr+Ga6~K743n#Sr&;j}(?|zAAwAIw_!WbCYuH%T)#$Bn z%R9T6TFQ=$%>LW5Z24~P9};<*8m>=|dy^HbNRe1rPt}Ms{DH3~vvvw+l`jR(M(mq_ z3OYCFjNtq$Kl2{D=(2PhQ3=<&U9z(4AYg&wt+<`dy>r--VKDN@A{xw)?WVeIQ!KrQ zI#_H}?4QA}&|aAbqi{k9Ngd}i6KfM~1{&Krt2n(Pl&0+5s(TnNqE58k&BxZv+^8$EOLHP3R+Za@QZ`Cf9^pHz5 zJgUec+Ucq3hkm2q+I;+Ome(C778_)28a1XnysEKjzvfP;5{dKG(`$BCX>1L81iTtg z!eNSEIHs5sA(0~QP0IU!y@CV^`cc`so#x5$xb)qrm7DO|h;6K{-L1+BPGc^0erikS z!t$RryTUU}UupZ^axp)&^Fx`Kq+bb&j$f+PR4Cn_Ju=usEkmjkOHJw(Nn4?x|(a5{Ziv zRREJk=#;Vz?R@wI%Ue|DK+Q+E_FBEFSzGovWt`w~`2>1F$N#2ESLEnMHrvK!G5&9F z9L!u>ERJDJZy^MXl=ThB*&bRNtDD;*eI*F(1v6~|Pn0%0T@^DLVeRfYY z(&<_4aGJPK-FK^m3Y5RrLl-<3J&(Y85Xq=nxN)|z)wE%9CgDmMdD51=zo7Q8ZI4~H z<%rYql*o3j=-S>}h@bZqC4Q#*Himacu_)|3=p?1j-caak#IN!>OJY9<))b$ZfPHws z&1k7QSM98Ac!NEne%J@)lb7J-;8UBg>gW+fHq&QKl@Q1)_puyeO4emgH}JC{*C&C# z*C$2dXw{O(dL7TBaa?L{KVZXg?s+Ah|<-4!G^eLaUxg>|J=kz)re+ciLM zNx*i4rn@KfVPu8(fLL;LvlC<%puO}%JSoexCbh<0dT0V;uy-=pLf$>ck z#e(O#YavEl=NvW?(;4%I6hH`JLvL{#Zbd%X=+0tWod^c^{W378tYl@)D270+7 zz+il~lK(fBZu?bn*abOXF^%1QdodIQ52l9uTBe$}$3)zg-7=vMTjY)n7!_%Lw4 zD*a}oV~jz$cGfCMFoD4gGVot2w;sx+yx6_Ager%7-7Op_vCh|Z9L@n%!Pz{p>%=iz zY;Mpv9X-=Jhqrg|^}J}sEwP=PA@ zjK`lO7X65rMR(9Ylq@LGa)eaF(+K(aBLLJ>Z)FS;xI#63R~jOVxf}?X~_(bt53JHyW(A+st#3 zS_pZ_BFzS*uRxsmHS@I9*D0N1yK@k((z$Eu^J)*psG|f8G5ryI)rWznqq%Y9`@wA+ zFnlShNmj9yr~%Lg7^)Efw`$D^eZCs+ z&bfO)#T(8VQQY0M>oY22iq*d+rL<%l9WM|P1%rsnjhC6dIkj7xObtdA8t_HSp3)_v zoG3b8%wS7;k*D6r-2zjYMmm&xXn!c|zBZ?Zq^V>rP<&d}J0By1`OVVzlga|(1bq>s zUB&a{B%@_!{i6WGiE};WEt0hy;FSq=`xBM7da7h|;5voGb;YoD^t|cPmqRyP0tqs-a|;XfM4Ld zK^t8KS&LgQ>FlzT%09z%GSEtw z#=+@q4Oj;q=waiS+o6-}$+=BYRD4Qr(KIO6zN+#1yc_eIl>`vde)CrKUuNbfMV!ym z92>h0w^E`!Ha<1jJABLMZaiKCUSCxbA@9)PTLK_*>Gp7k?AaB+Ag0MCt zxzbI3q|@%fx^7ci0!2MjUWa&CVP5^E)<44~&O(u@hT{p-(1Xe8x!RmYd6wbR4wJo9JysM&r(#pNsJ&}$2I5z=89kdjxJT_nUNa?cq^n(7Vc+a9p#+SKjn#x_>Lk$DJhkxK4=qQ36(DMhN* zNtHTI4A^=y0G&xmE%!eTpN?h=R}yngObWpL99gMCi27>Li|zLm8sNP$)&SD?3V%DU zhl##7;e9y4WFPmpqJ=ThGAGagEi>Z!T4#sTTZ2k-iD}K$Bp9YLOKZVh*~QoJVhhYK z0-s8e={a&0+j_jhnY*+&+8u?@iansO|7smsTMM%tM#034ij{y z(|a^SOsD$Ll~nE+oW37j7ep~63!t&-Ila|?n-_UJv+9zQxJ7-3L}3iFo!=Xq3`8F60APxn}4&<=6Jj^^_ygUu{V-APi1X|Om&HA zV7rZIhT~P~vw1FEjx7@qhj{DQx^)orykYq-qN!xg6$gi|e4Z?p?xgxd^t&IfdsRAg zZZG-;Z7Npc;6R_UNdMcqi+oCiKwjZjZ0dULl0%;^f1)CH{I_bQYg4aEuW!wTG)l0* zO}k3=#tT$E_BX3#*nfDz;L=wdKStb4-MN`QsLiss#8|G_#9}U;n~y4%JLAfv!#Jg? zd=JryJx6Vnu(`Rd22btr3c`Sw*B-*xanWU5=qrlX)$e-mQShT(Tghn@NCfMe1 zA#bBIV+mnhlmKWk;Uz914!IZa4K&dM`-|HFMCN~G?3veijq$$-lfegLio^-`ExSK+ zH!8Zeko+FZy=~|(=w65Y)+ZU_omP;EAe!-%u+ADRP}PZR<177cn4naB>i#|1nzrFg zhl4WOoy4*PHIxDL)^;qhyp7Ni1C|^YU6o&1yrHGdr#Uj^HRe3F@6c?pUP&~v8#8c_ z%-~hSEL7`y-tVQT0pv@*za5!Y~&5G!B zQ09}EPuE-tt}iGZEbf<-b`se0$v}(?;%vGB%Hw1~y|O+)Srp#g`{Gz@A0Q{@%9SC2 zrl1QZmDsBxA}lX+bNa2*7LGth8vOaf$_aAl>d8u}@{aU3m9T_Qdf?)}GIrJ??cx z!$QzZB5$9a?$Dmx#Fv)sO%2XoZ9RIWj_Pr1ORCw0$> z!Bv7f7A?1CCY|)mv`(>zWGjWP+@!ASBMDMeqRM`!na5@ge*Hp%byz722E!!i2~2nQ z&YrFmB7B>|ZncjlnLB)0MPy$WMBqKf9}81npkXF5!#O;m=B}*ecY(Zm6{F*nO!RT3 z%k4m1$F-Gx4LKX}*;=$~&%Rkvi`!@OeckrHi^-^ZzTD!}3!BE}`l_ z(K`|WdmZ*VI6{Blp0bOjto^6H&P# zEQX~?&9PhZ(ZszUcIQGRg64<&c&dDq+_u8{oV6MkSG^yTq-W^mQ7|butN$(9AtV63 zY-@%6W;;W;lq>Vx`dmtlPp0N|N9#?C6c1;l&1q0g6$2$sPw~KOP=x!MyScT)keQs- zv^?L}be~&hc)zW9-xmVWs+D?H8Ud~7p$9HlH-8}bp5WY{uR#F{;goMO{SpdkiSZWW z(iMHOM5X;PkiI%$7jf*{RS7#uHqBfn7Xz0ZU9Vq{YIXdN4{YDx^w0b|U5HQu%$wV; zwo?a=ESW>Fb8q+b_#hssiO{Bq`=wl|XP=tzO(ibHEujwtFM@?+P8`SOu%8}ue>Nv42oc1kbyn9MORDZ9 za2y{q@8Op;078;v%B+v_N;yl2>Tv!vQ?`LyZ6b*>8SAve{*{X85Jd8Mfl22EcIOu* z@C*MQJkobQNlxHt%!{mh!H~v+xh6lF>e-D`iet1|rzfvdDOuCfYxgm;hIa`Gy0zR$ z0=F{udJ6E@eRRE`f($&P%Bj-?x0%X>zvQ{6aO;(t)=Kf#4c|_gnN5PYn3S%oy-(hp z>dER<_TBVw((YgCs&5gU9lA3BmpSF^^Re7<+HT)Q<%&=buaJS{S;$8Fd;|%x%j?)K zNA`0`TzMYA_>P1aKo-ZrYbIXp7$^G~eB70{9uZN#VkNbZ>{bduZo)OrIKDf_%zB+^ zck|Y2y#YR!dqWiJn>fVOcjLVXV~KxlQFtuw9F5Ngfy;w)NvSQ^7o-qkt?}hh(bnqE z3|XdTbcl)BnuS)WNH-|a#m053gU__@BJEDv!3$EqV8%0lPnLH;4)r1Ab=BygW@HjTW7}VOJ;i}MwfL#rW3;(UMBf0-mDC} zYrbOKYD>I!5FVKmZdy~i!jh=%*vfLeqZ;IFJ!1H>hkL}QcGtq~pvdR;hbLNe4GgcZ zBzdlRW!+xz!1ZGw5Q$BFdB9d!Cg2zAxXsx7sjOVuq^>_z6B20I_d}~}Lr~(Vth*(> z-mORUn5laCZ7S}e*57Qr1_7qscKU;7^1eK0O0t+mPh5iuVOU(&Ro^H%iQcGyB#&-u zqvQD-eV$je?@Zi1`d#N@P?680+9Xm>2%-PkIcWLX^u5JIX*GcVv&+Ld1-2LDwd46r zkL8Px4L8x~_VxVwbzw(64_^^!7+Of$v`)LhJ$Ui3G=i^>^ie`uweyMNtU)GppcQ0B z&JGmhrJi?-gTH9cq~(;eFS|$sS)G~tmg47_Sc3iOLC|vK-Vy2;x?AA$gyFb`Wn6%4 zyzNR^0WO`O??6K^$xlatdTWu`*AU0!8XG;ZY(DqJ!kUc2S-Dc-E}fCW*GoQZi4Tu! z&<_XeC%O(Ow6U^x2iyXxcMUk;Py{ftf2ntOcWuysIagl~=xjM**>#8eds*3`+=ivw zwiz&vvo2gx8lY^dVaZSSfW@Bxz=aP_7Enso4RK7oUX?w=_G7}Pqu4mUPZY;j23c#S ziDt@pg)I_NmDajTL9vdXK=DVbEo}+vz_#QJ>9x-d*gMtOZ-y1`wfVioXHFzxG{6*) z`P!ngLAO^rx2^ejRchUzb~8Ecu=@&%`iTT^#c9?lL(Q53qxiRUUx6u5#J#E58MVmJ zBzpFqdQ(N??qLq|O%0%8#Q4o-Opj~iDl#X%ITdSv1-Z|! zg)!o;e{hDwzfW9}+`kYY-`i`+;P}mI`!>>rth9A@Gx|zC!UM)52Vk8HSb)H~VP&XS z4vq#qQ0k#Vzz}kp)DRToy_P*p|JCFP141XO(|o1t;Wu1(^cqaL zb*(viY!N6wW)cw-hfrn3abGz7?!SY->mPa5uU;vhDX}y(~_*a;tQQV zmMZ=BJ#Q>kTVx>WL^0(IwcFBwTrt|pu?N1U;Z~XCL2EZ=D3o{A?je}wsHIb>3L$6? zp*n^tbz-~pD(-~#zOJe@N890&jRJ^qZNBxiL zvyI1>-(Dj*cHOLy#*2jB^G#D==^p(p+M0Z+d`FW!ppOu4rWTjY=5*naWSztvMLOuM5}5YGg7dEb~T>2gj{7V(YFk{4(e+0dG*&mT3s zI-97A^4HuPsreNSLrn`#%Kz0QWnKZ~@;2du<28oOwkszGg9<#BPfL%XR_JQe4q$@b zAwUH+DgXHk44EQclba<^BuS5qbyhQ78?F;ro4sD6xniZPGzo*NMgnX_=q3SO^%_;R z%b=_WiwMoxn=f}|nkFo>blRLT1GT;JOKk|_rChZM|F*D)K+at4-5{izMDlzuoafSh zV^FEqKR_iQxB&*R=0}u2>k)v0!A8wnF|mY9yncq`h2L}Q14FaB_w}9} z%**Jg2k3Vnq16{2#U6WZc^imHw;ZI$ zMeF@xqDKa38|b~o#|l>-fo%JjO!)ru{H!IXSOK-KLoIoj+mm`X%q234TJl0LcwtZ?iv3Xe1AT-~vIvVBTLbVnn3Hu`al z_=jT#QDuf}a@)T~8dO(Ds}+Ez~LcsAWWtWa@6+dz-GaDfrhayn%%it`$X$ z183jva!sHdd*L+~pma4~17-*Ti+NT34|5x=MiUryy1OFY14VF33}U{RT;8uGvCU@i zNG3opSm;nq*jkd?^xoh4mvgpe_bE{R8iQRG9+j)xK`?1ozA|fgg-!ZrAMEWuRo9~ad=kl!ij=tpVPbT|6O`B0*rIXXg{*+2aMwh| zW+p|tpNOEd#(mxNOb@UFOcc6P_rSNwka$roemgvBoT2+Z95J8oS3fuCEpF`*C+7HD ziFdMs|7^z9X9)Q}Y`kSa9L?4>`h*Y&5Fofif;+*T0fM``1a}4}I0To0;O_3h-Q5}7 z-Q9J7J2~e)?|1HZ@6Vp8?yj!dyK3*XS1stosufncngtzAHs_DNK#-g9TO9twDG+o+ zpM-)zIW@Xtk0;K&@sEbA`EKVGAGlpxdn#^l&nM|l>sUQD4WFmHfPhEeo704%@M@PH z%H+#sVP1Ck7Bz-|ypx1LrjIHbf8qN(u;cbe!i-KR26KlK`wb!X452-P?P+oP78Rll zb%_L?I?Kj)gy~z_K3!n>VkmU~Pn0s7_!wD(9vMRlNBy*`N9>Dgg-YlK=zZV+fSDf& zFT5^r&h%@|sqRrIx`14KXz?-_$ zoGb&+ty^7*s;Jpg9(4Hopgy6@oWbfE+G&6Qr64pvTGsk4_w&)M%cs&TZ5Qa@i?|(U zqAs}9;efnj@{~QSz?({I4pN!KcZm@JF6CjP|1cXaSge)&YjysL_H(aYdu(zO-1bZi`xJ;BAQA@*d{%6(bG{ZfK3bzMeUKX|7s|l!aH(_laFvD9lUf%> z5oe`%lHJ$v&|7ugSO2$w2lcLp?=U z#C3i#DDfwJuiDM}2H61$VlKy;U-W6mKsgcbxt*!t-cvU2_8B8CUCcBj1BtE(KZ?w z8|CY9P&l?(sPNtehHFV%%%6=wHc=;?f))z%w*q$w{s42X$a6g%dWYWGTGR9DRpmZ^Fs};=QsOmdY$H}`qT8f&SX5P zU}+1m9>>~MX2+^Y;l1rbR)#C<2-NnWz4=$@80ss>ddAQrhxf${`G~6ckU+#^|EG`Z z4YZ=mR9*k_XM)=$`Y=6r;6U2PmE3oG@FKD^8YMp|9*F&;9m-#b9lksZd*_4 z*tf@6cNb<>P(fILMMC&iprC@b51rloAAx&&*rAcgHGrht}Woy;mhz zuV;^Z(|AN_tDzn|tny`4MhFL2k70Tm%msa2WG7HkdN*d7q&|3#eLGtJdEiZQAI0XR zd9M;Iuk>%M?Y~Cxe|bj((Y}-^sT>}DM2PvJhyQmwEa|`MK<;ZR4F4Ye|MP^8g#IuQ zEnILU_=*44y!fB_`Bw|*ZRGt}$8L@d|GFFq5R4psyper0x3Fn?9Y>p@%t;C#ANq~A zE*Gy!$0=DKAgwau;&4Utk|(=5+^2%QSZ$aAVRO#NJ6QtW&)X(bn-S-ESAn<)SiNJ- z^wP=eJaj4Np%C_>){fUm*y2@RUQ;!NHaVcR-bvzw!YqA3FRUef^)P(r_}uidl1V4U z<>YIR+$rttFNmz@#N+BrV2teFeh+whgVmTb(4QNH55OrN;o za3zyM=Hlrua!(l!F-}0W9-I7!z^PhYNOUv1#TRZLszo*3&}zhhAa0T{742iFAk8ZY(v?}o$;j_TWwXJX zzV+^WzvsZV}D;sX4Qx4a0{v&@d)wvUM5??^ZE2=csX zc;59pm(s2y zx5gKXGCl7ym&w8Wh4tvxFEJBk9w@h?#_LjU4>8X>{<@->i+0ze8Hhhk{q}i`m;Gk> zt-6*O-!^IRo+h|6I6T82-S~H=E6<`u&hNM8G#!pbVF_Lz2W)(EbtN7;eNp!-{lf zX8Z9i{nOPxDfAbQW^3Lg!QGBzhd+oX-?L_5o(?-5x5+Jhqz}<>G*1kkB=-w5z3A3u z(rFxH)Q83)Jm|~hN>cbEh0zzGnO+R~$xqW}TJxn{W$Mth`%S~mi*EFiBPeF7CA*ihG@NZ556U?`}qcAdqUu8 z`0WH|_$WO-Pt@9|Snnhk^{ln4jsZPQXp`4~$ZrEy$=h92&U=UIO-Rw5NkspPrcj5-RI86jeeruYlD=TBbFp7QU9bd)6w^?k`P6;^5w+j@F+w z5l;@K{AT{dW`nVusPP!xbHg*UE#%g3aBiHrO)K_>tSvqRtqmrF%B-gjdbz|`y$8__ zY9l(2Yc~fUk(O!JJ*&SnHeSIN+gQaxOu8Du4yOU2dSUN!5j@r>bi6seooBa#^s>6E zt~l!^2xMGobzS7ot+YVR;MdILN6v%es@$F8c!7p#F&zrjjCIlKeTLuh&ppP;Zl=z1 zxU{;t;R62O8+5PYKUk%6X#gm&nCEgY~;l$6BV)3pA5kF6SQ72Nym^J+F2 zo_m()TH^_bJLLy)30dZi$CF=sHCi0X44Lyt$blS51%iPJS47qDegH}Xsk@4*NR9T+71*RuGV?9?h6dCf#{t*?4A~+{hJY924hpp|W!S1G{LSD3=tL4@FA-!Bh*KmvV zeu%>x8yhF08(A>inuk}19houk-t-4`Is6I&kSm(QGYGP^mWIG9G2W9_ip_BXGt(f0 zSNcE0wvP}X=P>{Dy|msKtML+!x^(PHyu_|V5&1a@IUcQ5vF4UBMmgxL9i(k1S=LUHT4F=f znYqjIe5x}uX?%U#VnXU)rNaS9-`-Y0dT%N|9bg^IOu2gRxwEJ3P6^axd9MYWtV=q^ z3%%&Mox7>0B(~Hnenj8$xatz*pTiW|G=I=?$6q3?yX>+uS)jqM)f`1z7#! zucCl;HV+xWy&Nn32A`yZ-+{-#r|?#Xd+sUOt5XC0*1J5<{pTO^WvK^GHu6on{kO^k zoCA7viM_jv%}9XfLTPXKni#yB=q5&7S9d$)>^QcMw=U2Er5<+Cwhx~IY4?livi3) zL#6w$Fn!{T=Slk+DJ|bDJbcacZ^HWcS>N!c;cXlxygL-M+PS^;9n*Gzy|2LAd`v?& zy#U_228bG;IqX~f{@!NwnSYbr*dub1QI>cZgUpu?u%wq`(mmyIoRR#Yy=S2PIPshw zfP(s3h_>HP_d)5fw40EXupWcU5LDjck&>#HPs0S8eAJjd&vBR>X{+8-QgC#f$Zt7v z^r9ot(q(a+K?7=Y;VrKUJh!0;$d`}O*t;M*mHp(kpUqMhe5=*i4z$C5AJZ17@_lq3 zOPZ%d8<9&?kYq9PKZRa~U^Jwq6gfU)L2vnHp@K^1<2k|yidq`d%r31b%C$wKIgxF4 zCHzzB2A8JMqIW4w{~bSv2G~n7cM1#iwATie^t{SiVdApr(;z4;PcU|p3O>Gq{6pQYChG?=$!`_F5 zG=l?$4iqid1Alfv#3aEDk~hwF%Q$Fqis|h^wU(%(tBLG(D8t0jB-mf9r9+DYsnQjy z+-c)(xQI%IMG+Z1z)!#Gq}SYTk8WjNtAfjX^zayN11@^q#=V~RLc*s=`y{ATBvM>eQGsl^_Uh!OEZVqh7 zr#IBX$jn|a>)S?xJ~gE*L6p3hvzWc8A4Y&B^6ux_`(m=+*I~w=a^y&+<5{?Cs1yfq zN$E}R;^+@LPi>k4PM*L>-&~SMn>k_gHFTk}ZPskFAu?-f$cj2uny(*Ji?Zif&HlWU ziGoi{)`b^qPRj2uhaV=GAGV2tZt^3_HLfmyA}g{I$bQ3bh;__GvE|R20lv#GJ@ls) zN5O+Z0dia{ANQ=HwT zaB-|A%3;lH!giO5TLOAVXH2p1Qa4kvwWLa_^dX(jG963{qhza5gZdU>Uo5T)1w&30 zghn2oA1-;U6e)JkADb)k;TboANq}^EPM(gq#H=n3<^fNjHTKCy7c4efdV&p8aiY_0 z%CjUQFqAQ8UsSP&CliU7M50^p;$Lsub$(pGAR7uGm zt*@ALz=-C!hdRnd3k;g0w$RivvCmodMB?bGUaYBdF=SHtc-5!Nj?(;o6+N7Q(*z=% zgYsien<*EY=9u>rk^lI6@hrV(+lPb1>1Hbfn&rkihf};dgz}8n&(fS{okxMnijIS* z!(Q2=HhLV%$|*DBD5n~M9^hdswKvFhsdNIwYlmK@=B(Uvno(!0MuKqRuHi~)v)ipU zk)gwTF2&P!HbC$(aX;10q3X2AmlI^Te zS$3LsgIlIsD(T@_zz|Fx&w5KlaHyR9y91*HT<>_ zDO|Rbd`EKMUpcFb^Nd+_6Nyi#GI)&!zSofS5DaOfd zENjWSh3my|BT;BPBc1wfAvw zSBbdR@3#a#jkXg7GalWa(i<#KdTekGBhUzQM4f7kkB43cx!U2)&|4`AkTcuLz^6#p zc=xf$EYq2(B_LFt=wBm`eZ;@X<;jgsgHwGbQM>ys?YdzPdk)HsoX0+!^3Qy_9dW5q zy9q9#$WqWW;V9HF<+iyLI3B2_n%KcokMqdbAK&1k`3c>H?-W`b*eBTT^D^y=5^KO^ zG~;6rL?LUA0zG@8tbcBg<$mi2e_}PU&b>8}Pe_WD9np9({p>F5rr)8}VTcA7k?K#e zZ#>OXKc&z*tu&X~Ojg}E-uZyNoGfUGVOJNCA2XWIJ;-YcQn;hWps~0y1e&0JGb=Vs zJ`Rb1`lZ`__6}&;eX3~`>r~^~A=;#ZVqjqp@txX6qj2ad7x~83f$w7UIHq~`DcM0u zLWUFm{cQFKp%7Q26XR0dX|URhcs45t7XWSmNZr4|h?9Q$nlxEKuvT4_@-O$KzCXJVG||kAg1irFStmmzhhbQM7-E3Pb!Bh|Vqv+Zx zzI@3a$#jGKt*w$38BUarV}qgzO*AjVkNj#I7o5KhVJad~^2Q~oM5l`>R}|5evht(& zexdGFBzkP_43xOOKB7u8D^9QNtl~# zLvUxqi$)gkC==6@FQCd(l#BhV@xv6%WTheRSJ(5&227HUEbIBhO^*oXQ6Ddq%hF$I z^$6GqM_#k|WALTlHF?jmSu2@_ntb-(p{YWm{7vr{9No0F5uVwPBDPLZawV1)BTiMb zc*YWMO|E0t$)fImV|TS@a3sn4*NGDJAyx^{XlxYS=zb3&uUo>*A;s=G+5r-z!FUbF zE;3P;7HH!`-)nfQp^G{}hWm2*^)aScQG8%Cq{UR+X|&mu*x^ck6omLQl|=Ur>341) zn_-%^EkmC8@GY9rH5onBd6qw?5P{~DJFzK$-@#fskpvU5!ex8JcT;1;B)*1i6w6I) zN0FEwq!tgX)MOmFxX)tF5H*Xe{#hkCmr1wb`o(vUgY1!-^K0zrOJ(;hv%=~E z;i7rLvS`zJ*zdMXpB3rV1&w}+qN(YJY9EAMQqS{Ha`_=8!VjuFpOpUbk}I5>RY`)T zL$r0@47LgvSc=PUZuH7Tzgo?;-Fy{&^NL;S9#~$khL;QTbcMud)~_wne8S9`>cjm8BjRKeY|U?%*2q-`qmuIu3GPWwrcSDb0kCYSY>pDN75F9beVzqmmi z5iot7oWJ>ET$*hX=M6W6y)bc>#tjvX;zc!~i3f2tM#=5k?lzCRX^=&Ig0Vh{{Ks@H z%OeM`84M%ZZ?g2|X3ru*v(ku&se>Z61V!93$@EjgO6mA`b`! z=bNYwdvUqLUPD0y_Qjx_ROj>vC|bnfzuH7CGo}K?^-C98YsJomGtSx zHw5F8#hQ`z!8927h@(yaOq5dDXRM9bv`0he3?j^>`0hJ^O8 z@mbG&?A}fe&@}-n<~uN7fwqCiRbg+ajw<~nkSraw5P=iN0=)UC&$`sRF#I!Dv2gAx z(!o8H`?NV;9fff;@*v6i{EI}QEp&FWWz+r)ViT7Ec7QgUs1Lj6O`%R8>G+x z1xrGMh%9OCF9hl_fnFLYbMW_qH^B2u2duwx&X!8;P~O^gFX^%cKg7uh zyZJXF{VZI)HlOkOhw{8`u``f^Iip_oX|-Cz7~(?6c2+Fr zDsQ`7;(h|}V`Za0{63FUw&s>0;OVOp&Gl-*^qj#!TK{mlLmJ@QWYNMq;c9W(FrHEz zTavu7h~0Y}EoEEdG_+4;TfI0kUjkuAhjlj4DQ}(x@oF)J?%X_B_6nn~f=nv5W!UL} zN-Y^ql8n`(&S`F*oSHCYos!sSyb{PThI!ZS0fczE_2$?%=G;glg&>jrNnx(5@Rz}& zkILrV%kt~xuuS3+9U_^Q3CapeWP07G=OT-W_gQEgKETCu7xY4+{Zbi%dwYu+#fQ=e z9>j2EGBGFHqTB;zEXoeXlwb024Wd;^{wQMLv1V6%yJ}R=*=UU_`9R#zI*xj>s&@{? z@q{$FBXf}krcRoXxYINglA!+BHwU&goyI)~WquqD97pJ$H0AFgSVVRD(uXs=I>c#C zb1K=s&70Q8+QTT{ zFc3KOt{lzewGD^TAe9*P_$IDcS23dk)9c;3_Y+MYkYg^LliIV@A5BX&h}Gi=Jxvu$ z+#b!0+2F#sm^|lOrWIv8!nea$gJjrw^BhK+<`4lOW4ER%6Jfm%GY|L^nL)|zS*R9` z%0`;wZ?l5Msi{JjQ)yaz?hXe&O5lrn6&d3v{U}fQbP5&hb3WzBGx(fERwYGO$7jCQ z*D(RzWLzA3n9TNK7WvU|+Q7UZKsnyv;FS;M?$uh{~?kN_9sF-UEIQ051N7)k2tls zGiuVGe}FR_5o_G|c=?mo?3>4?_urG*p0vD1X7f>cQKcXpr(FI5CUkgH1i?0?Z+TWg z^2tNuprqs6NVQWN_}oaiiLx?7k;2oP9*K_!zW#vw>J+7ObIjE;kJ8Rjy`o$gcyl9J zX7uGkCFgL|B?)?>whB=1aCBs8?Pd+G?pZ*;5ca;QSmLQzgnympw<*9f_~ECC%5t4u zF4I!P4b?WMd3-Z2$R*y7qR$$d`bc-Gm7i!Ae1O|~Ag-~X9D!y_evjAJIi4z9<16ta zGTYY;T?dg49Gi#wi8Mq&2C-Q2cF@pL;3j8R2NKHbRQ!$tx%Zm`UP6!?seq5br<3(w zQ-rup3bQ$#+i#8d{pB!n zh%^}>a3ZTEMZYd93)lY}st}`;>T83?O6G{>gRSrFtY`iw-rP-B!w==9&gOlY5s&dO z%%@`F36^;|vBJuKfmRB8N_Q#oP}r(`1XjOE%-3wAu|HIo|I@ozvh;7I2(BEY$Chcu z(a$o8I$_5|>ybS>p#8&6af2;8yFQVKtQTN_TaK#p(I9LRv2#G|Lozhg*j4BgnS#)CoX7Kle4Q6b zEkW09&_)9@QT!rcD??@Nw*&bfT1uJpP)_`v=``97)0I>Mm|!=!xT6b{zH@|@X|rE+ zfFP5Rbum>2kXlu3liil9oHGD_nUA$k4R%)@4r5-XyR@$SFpQ$#D=4ySg^>ao4Y5B< z)bYaYJ}k&%Dg{>qHuq4_SCa^IrX1?0YwqcfkVpD1*ksf>naDC*1P>ZewX$ybPu%q1T2whnty(KPo*$?aFyC>pkgx~86>#CPI5P&} z^1v;5C{kf(@BLP-tuj-je==b?T0G1DB9~yvi6}jThH=V&sxITVDm@@D{QgG|b7>-> z^GwF_Ydt=X5U^2<8>G)AaLT5DCyH}UHCaqkpL?L)QRCFxs~A@S4Vw#?3ncgPLWU#^ ztEUiRgWgm9@XKcQv7HqkjvzJqn4%lOSoz>wyCx(_>%GZ~ll2wU&&z7a<{h8?-HcMF z#yizygMQo-iXCA2nQH~PF({P{WXDGQI+b^pF16FW=Y*TLVBLP6k-xk|5^3Mik+j`% zql3_%iH*p~-mQH2&D2@-i~8`QyoX-GfYN5PS$?U(II~}LQ%WPi0Y4#1|1;v$$@tAT z(?u~Qy%m+KZUVQ1UO}p69=zLwkKWfYvCjl~l+&p+Q6f!G}A5c)mXKYxZ z=8P!NVoOhKh#>ZFh7ro=)tg?BXL1ulw!K3o-U&YNB|IGU|GMq1ct`pzGD6PN=N}&R znuv&$xd19=QY##FDlK>BBQD$3Pb#m*Fk-+)!&@yQ{CBT*A|9%4WWD*7)yd6ZS_Nk_s?Uzlca}Rzi+xAgE@iNuTii1tQP_FPIPt!I( z1?KWiiy4MTd7)0u*7*}K)9)&=Hu33hcVx)cUALJcETq8 zgYg4K#uwq+yT2E{;eTNBKuHfY4r(Ta6Ef!wQ%Bfg!B6J&3BxLcy@(R zCrl%SAoU!H(p@~SSJ6o6FSP4l&dS5RP4Tpqyty1o6xzwcV-Wds0f86PxfTwP?p&$P zJQ-OjE81d^>5j^!uKJxg+yKBjq4GHEJT z%%PCr$NS=%_P%;))G0EqX@jJ&%pz)>@jf%UJ5ntqNhdCB#@hBme(5vyOQyhc%6(Us z2~mo(@y8rdfEIlD>ZU&B#Q}N%$JvsNwF4( zI7|%Wj+c()r2#7tspuYf74EXfbO;doL0^tmC|g@*ypDzOK|hjHA@Dmcj8LO-(dp(ZKl`T8PlVb)iN$>XwHgzkF6l6%%Kn$}m=kRg<>u13m|OZwN0 zT*)?0b9%IWbvZHve(AAg8~png8?MP4_B zk@;eU_Oa-RF!Jq=u+<`2-jv1R^*6!50w<0X73Ee$FuZ4*^{k04AutjjYU~y=Up{+b z(+iQrG$l(P6)-0R-)5Mc^`MXbzHj#0MghK&7q&}lOeowNksl+ z_WiCF;g{Fg4s6aiNms#ibddrRrr+CZAPMKmfU1_meqtrpQoT*MmMFv`6U`*?&tB$K;ne3C^qzpoRdRQEZx12bSSDk%cXi?2pH`fyi&u>L2D_D#+snt@g(d z?=rm>4Dkwn-%KFsRbm+kg(xMf(SMN|q3c};R3a)}+FNaEFO?47a?UnlPIj0~A>21s zAF09eg0Be=V8avm(SabY@>5EK4Na59dB37g!$}{*n-Yh`7kI=Df0WF8K5sDB)x5XP zb(INrXs&j{kLxw0xB+H~n~~7r_>x@B?Ir31U-|J9y%4S%qHy)|gmsaMAH&b4=6G78 zzfmnoMe#Wye#p-gQ`KzxSG>3&?Rt?^OJTT0{OEOpKYL7uV(VHJo>-SNtj@o`r#~7U zFWoI+dYtYa*jej$;Auy`meQvxZ_U?I9oKr<&Af9E^Tyl8QpNUaCJnd@y+`8RMwLp$DiTfgfKD@BwR?>(E5WezR9;uiwt} zsJcKX4jeeiK-z~^OQC0*M|8gMoWQyewgehxgA|0us3up;?teF7c3jkGJRfIrU99U4 zzoivjE^M2pjLh#X+j}OHCQIvuK0PG{u@S|@9MM}V`HnuQL31er% zm`f4Cnn1?$#en44$Oqx~6KXee3*vJ7Y_Xljlt;Yc4mWtVq+>E7i$*(eI@w z*>^d~kr~z}3$9#uQAECA@iu1TBb`sh3E!`m_U6ewPHk{_2}y~TOGqg?~^B;AxRO3YT!1pIE%RI?omVg06q>PK?n*Sg9c=b2IQq zop*DiR&*i9MTcFC8Kl=;Y|pT9y>6*;a$WAwau2Wn!^wXo1!MPqWBvu~j6j2ifp2)- zZ(ui*Ezm%4t4_7@F5cyEIisR_QUD6IA6CvDx<01k1 z8~$;d!@beBU!(Q3|GE;9!G+~zInrps(legzPWJWBS2ZT0AVfJTO$}%*J}MF#LOLYI z3~v{aT`M|10RQHp{DAvk(Z6%e_O{HTJ5mV4c!V~Qs}Pu;==*PQ11VhdVY+e8dwW}x zSX}XW5-_E{h5Lwcig{#UfB$2nVx$|2;dm(j>5O&ci~#L?2l+HIlgi~6W7Rg}58-uA z=7}Lrsx|P`*OR+`LXS)Dht2cL8!N!?81P!J>RE)WG89IC(zSRrIA&pH{!C1Khoso? z>V}uXrQp5TJ~1yNNR|~Zf4X$X$x+Kni4E`tb5zR=RzZnmp^>81n}zBvKVa+l(YKd> zJQsK;Tv70~G@zdH$aUjYzn-5?Tqurs)(a`bLct$JVgR%%;h8X^&ZH|7&(#Ld?+OLlc4vy_o5<-Oi$`Cj_*Mkm>_uV9UQX^-aeAM!LM}T zs$O>G>aC7dzd;eV304F&7{KWzJGM02R{lo|AfAUJ`@v}YBc{5pXu4+L{=i#-4m+U+ zCejRCtHM8Jug0x80Yfi4A5ScWUDMdy6U#Mi)(=!)-pmgKJ&mz)(;pl*J)MYn-jTS( zrGF?LI1-%+jX&U!>mNCL3|eP)7o%2VB=#$@{I1e?E_(PIONZtdWgt{l?(dSiPIt)~ z1f?xt)@HUZQ#O;fg)3YQeSLVW>sLZ3XujZnWw5M^e=O+`c@%iLc6*4x=eH>WlYwd? z*W_d}Stm+z3maV*HnV=xr^`ph;wYOghJQ9oJYW z*JX7ww;4xmOgq4N=J9Uzm0~Up7{N$EU}RkUAxQ#puL*G4Pk_9HJDksTdRTw;y6w-) zqqY{}>otFaHCu8>r|AQYg2yUm!T!(;~W1?%889NJgjRack&wqZXDKC z;Qh!|f5NY{rt`V|YrFAx8INo%#1&pYn(f5xfAY6`qARmIx0=ieNX7qP1s`=xfq0CZ z5*;3ZJ)F30dx(5wu34u^h+Mo?plNj5K87mlHKJvbTZfnMiGk5BU>^CS$(^>j!m;+& zcL%CslMG3IX?qAc*)}m?AYnowj#F6k+VhRkT($Tg(nw(cvtz?X$^dff6ZqVmzoG5x zx$#EIb5Ik|0GziQ7PCj`47bNm6!tFOT#v*V7Brk{%Y-6m7Q;L+N8byrUTycc=NIt{ zki1d^Mtw^)i-aa9v)WDrrKjN=kd$-G2A1BPw^TzPqf{ubhiGFT{=NsJukB*KBrvJ| z6uUL5T=04x#?CM(#f2SEtFc3;04JnAL0aJqe?#{`V#-Lack@TFMb2Ei^_x@+hi|#t zK!=R)$HA-O?4q?I{-*}S{yX5l!4S9n!-=*Z_&I=&(ccxmKJdH`R0}?_7bQkbZ$gld z(Q$_a%5`3-UR-DeBky};2j_Uk3k01mWGeJk89A6QJSr<2d{!`hV(}PyIfcOqopan8P_%;c#sL&Cz2rT@R8#DuAI(CUCFF2Vl=VV7uZ!EBt_IV6sJM#R%rsX( z^}3d&$G-;51f=EFd-iKTTteRa(`lE=`upLJ)9pnJ6t2?IqKLwG^fZEM*IO)Oj#S8R zBlLWd9uBcAM-5tey%N!rr^q3No)6dwUR<~@C4*ltuRF$jt68fZCUeSO5>RaXX^et4 zS6%Ysw6{`mxm-Z)p_L~GLyGQTaO%~jhX$KeHKwho_<6%O>5L^8u046L?-NuEqj^5E z)eVPsH$*px39^Ji>I5V99*dhA>>?J$de1rapdgrCrQlHAgT;ch{HOFd` zktGL`G6mdWMT~sFTQold6A0?gU+@!LQNdrG2zl_XgI&drvE>c+_Ini6yc`}YlCX&a z=5&wfTs`k92EO+AYR`lMssfCwek1T}^QeDA5;bpAb5;eoY?RT4kjfF)TmGov^^`>B zCgk<*$XVb8;30Mt^*r3rX%+-J+|T@r<;8MT{}XORElNC!FjQ*a?4-4Wo<;7qSgR0C zgSUbJU$r!}qNmWn?Hqj=BePBVGFS+uX#CV$#Q&kxBo>@%s+v%F$7M>77bSPJv&kv2 znwO~Df}`7d`R6jWOT=)$ek6>&;;IIBwvFOQt@PL2D*SdZnri&B-ag7!gtLjnqZ)R& zcUpcUaBUB7RQIx3Z{HjYxSQq-Qxe~~9R0Aq`TnYfvg+jau26$tX0P}>sPZzrh)S}) zttJT5-MGY=An;t=ne@yVvtdNPEX(cis*>)6bNVnyc$0LC%9JVMXa$!2JAvWk0@ELj z5i6zFN+$&$jvOvqeF)kdr0O%EGHEQNw%60SsPMfNsKX$_A{}lKQg`nDiVN1Rv)g-YiF^WR~*H9 zp4#bH)Q8;`1(-x@*rViq@N9%jv)qCOG_HF-vZ?lXdQ@ajWW)8a%%`}Twi$kqGaYMk z3Ud{6;c7)x|K35U#9S+Ma-Nm+@#I0dMmcfkKuAY{pck$1Rf&f*6d~JOWeUCkzYQ)! z>F0PiosDI#Ee4G*yTQXy%&JQ|Mo($8s)}6BrcS=GMXiTDy&5WMAbPU(b4TyJTpVfG zdz{yNF^I@F#X<(62ET2+f^iMmnX+|EpzO26IpOJ2sq-E^8b-IzX|MOeWZu^df>&m2 zr-XC`)S_XA8lpCpGrPv_HKoOrW4n;?If%)1mFJQ*;iCzDGvE@IXPzmmGZeKV;?4Oi z1SR`P7!HZ8p7|ZALYuhR3@iNy8tuxUZqc~IjPh_T+}#piml7qN7R_3FtNiWFO?$Kv zSE;@*u2;ta`D08f`}j;1(;@RSq8GS%OX`;kzF)d*(_%^6ysjGDv+-M;kz2eeAIN!j zPpxqBaux0mM_k=qiar2&zEY>${Y3Mz_cobqcjoBJJQjbeQ7Q^yVLb{|DE(&1x2$h5 zgJ^OFmL6)bB)BE^9r%T;r|^@hO-r|F6VF?Bv7`H9CXStbi|YL+k>nUQ?VyPJs-~Zg zbF?P{-gwb@)JPWm_`&K-{mGzQMb)E$UAmhN_xp?@oIL$0Q}$X^aT?9@bO8c6R0-zV zqqHr-9s68TJ)V2>lILM?JG1cC$Aq_)*5D#592FBO#nwe-mMPE5%Z`2ebc9n=mX4vC zsLn;N22A}DS071Dcf*@%xd}gauWH+o58Gr<^H_pLCB|SLt9G?xLT#VrS4Qp?YP56`KHKDt_~7KA9-%0Pg5NM71Qx+jm1hl#F4tcdX&Su{t%{Vh z@le5NP1L-k!E<0w4Hma0PEkCdBS>!yaA`%wC;3klKK+M_+gzNuXuMnx?Uvl(Vx0lA zTQTbg8-KPsuf@RQU{EHuh+sD9Q_5MWKb65@zyAX#Ul=h?SFiK>6awAIx6l+p$^(IL&E@-igX#9X|C<&~eXT3Z`@p&GDyYEI==-dA+@t=UVRSXaa{J1;c7kE& z6v{g-ok_>rdwX3AKEICKX~Mb?bj^4`%<#Sr$&KA^Ah})-GKOoS1Wb*=YXLZTDqt zm{qVtMuzz3OC}MRBX0*+4?ZAKrnO?L7h5nSB1@`OS|#W$(Nc>htq!z(vaH z&BUM=@;q7&U|ycC6YaRdGSk+Mt%;2pjaJ5uo^IqG~*{_cZJE69^eFpKT)< z7I@+5_h~?&>Ly~qxvtUFWZe6wsDB&ZmfA~Fnrtxs-^OQ1;>g`c6#2`~AwXA}1&V^O z!lukZiJrsHul2kfTvxLM$Ssl|{PrK$zuYlIEYt`wmS^W{PRvA)yfL2YSGIb-obj9c z7`lyIN@V{)5a~%^kKfm>C+;aH@G-j8wS*&25U(+nRZK0=9r3cWHC&H;32UJwI--4c zeB2$Xr1Ol2mwQw62Vaa{4>ORn59~#Dm9rif(?z>PZSfHfQSq7$BcF?K^A3WiXF@Xf zfC{sE3;Z6`8I=t1#I?`x_phN1VjZBc9yQ?-^;#;yo+G(-gm8>R8(|@b?X)!ZL$|X} z>7e@yO3k~BSL!l23{wX?(rgt?g1+6Jfkdw#Fk&zWA1t%d%1NgWzTmZ}`vv{fTSfVC zd1SN$HB;RoJo|DFK*69$Let%65{hK$X<~c9)yCI5{^xgEtj_UYlFLRZIJy0=pfVUk zZbnH7*xXQJR#yVWD>up05c<%z2p_$l%AuXL_J_sIgP>i*f-bxoZ@Lg@y($w z9DckL8MQ={=De_}Z1SA1Ska$E@&V^o^-jB2kSsT?LN{$oDr{kH}7J3)7T zS&=f=4%~wvFMoYEa2H@%QE2gF-B}SqVD@{aGF!I{BxU^Z@yJ2ve8qH?-TOb6H6k1z z+X}`+!TI6LR*R->Fjpb10Uv5DY92g{j;ucwnQ{v#Q%jVYA!>MHa40I86Y+yBWR?aa zGi-u;@EY=7V&ruV&rOy$|BN5!bxV$ot0`?>)X+6DrLBP=NTp?DpcGIDw?*(Ri8NTJ-T&^i{62kEy-!r zN7G_C3a6+Yx;zJz3q^jfcALzWWTuEXNS()QFvMOX)!No)q8@Kt`mnac$HPOs=G{JA z(3|I@E+gC}$eUlO@VwSk7^#tvh^#o<)RT$+XkB>mPt|>XiiEYW*35#?b;JGEQa4sXZi0s9ce>!pe_$IF)aHbW$gZ_=IX1AY+ZZOJcCAS^1BN%|#3lE_UV}95+!+qP}nw)x)k;GFaP-v6gu>ASnSYVWmoRjpc8J@G{b zf-HNk(HVPi_(g85ap?%~2v*6M`!8hHWTwLziVd@kZPJKfn+K7&NGD!6{dYO}F^79< zKN5{+{ry1jCx>^OCVT!c9rqlyeNTw%tU&UIuGdX2)ecQ(RP3n^O62*5js;n#{Amlt zr@e`XxJM(JVMY1az8?LN@5O7I1HXsQt%uEtD5Do591m*Y-|q{c4_BXMiCmPna^!Q(I~PUp*#d&K8x) zA_9gnokZ4atCjdc^|1B4d*w7|ks>3vLJD`hnbAyeeKrF<6#>3@5D$oH-||HFsSVPE zdU`sO&pt*cGRuywJ*9?NpS53p^Xh2mC3a5^%|QfM*BDV4Z1tj3m1xmzf>x&Iq>k4| zd)#d6Yg>|yEhwF?>+KGsM4l@atakT;HozP$eAICjiVDxC4`a-X7pw}@PB-u{o?1EV zj}upd8aH;f_b8ggVA6QmRI_8}T1N{;AvK?=OAxQQ;`EuExeMEa0$ieMhDG7lm~)R8 zQ`#~YEN%~MQ8bydTVHBBKd@+6s@RAhJFQ+Iy~j0W7lO&sSIEvf1{{e|<-8|AF%fLD z$9ImHcH5%@%gq#))|YmgLDmD$WU+(ai_k$OR45&AtdcpJ3C6vZR1*#jHu^v-S)#YDlJN@&SX(7*kt(cCUIEEx0hgSS)tO6DhSA}eIgTOo4rts z9w0_we~Shj*?uDt3Zr%Z{VM^5$$U0MTHDP0eldd?exkBLuC&p#tgY6opMES?p#TvH zJ;xnlom^Ip4X=yf2BM%cT0tFr>gG$inZ^7O(cy-Ep8P9P_(sEIHv0MQ)d0E*>!@r={DZa!Td>Y*M8=Wf@mla_ zM)M`92dkp1JG=CZrGkx;8wm&IW4Rae^0sZbSJs)WtSEp?FvG%6hqkWhMJTn-PC2qE z_piH8s07H|;fvM|AWQQl`G@fz^laBbbDd7*TO91p9BR>@<4>c+30>|wCtJe7i^rYTYrQ&<*d)6o z9^erkA^!D~?{RtsUz)}9ba1ysGom{qKbBU%GVV_1(OMk3m(pJFER*^Ju`*Cyx}hlopuHLDq$=M_+Xuo_NCw`;k%ubUiIWEcq+k3(aI0G1VSNxx zH^?}PAj^&kZE^}DQi~OlMGj+nCqUhf7(BU3uBhdp14>mSua(0*VFV&)o*%%A9KP`= zV(D*rhteI=xSAW4l%C7t-X1s3A(Xqw3L*kE2`_npA6RWrWw1Sn=B0=dkIjWnkq+h_ zmG|R$#DtXX5qS=(07;slW~g0tXC5AlViY#CplOO7Q|B%_*Inqh!8xiJV1yr> znHCvm_&u5+Q;`s|e>hGD-N13seuTK_=VZ5!Ae^7@n3-a?1KZgV8CC=iZDc}MFsw*?bMBR@7?kRzZPF}5YmfG^?NprU@-}H0+b;}?SI;2W zL5Tcbya=NOc1&k-Y>Fzk&=4YGm2Dw{&q3;S!hL;gx0H~0iVj`iV!R@1;H!;X)Nvy6P|w$VPQNqV?J zQn|JJMGC`qgX0Owa-ZN&6e$qL8RWeV2bOIMxe8whJes(xTL&}M8g8V0Sl$3O(3a~M z&xYkLp9H)hspN17H&PX8J|~!ohd`5wID2wH&Ue&1mug0<+8N3dc<&TF7P_dWt1q49;^q^@=f-9BvQ7#DLg8tJ5Y z;@?&%9wyGkwuIPxE7JuG;y&M~sKkwgLLiIWm3VU-SA;!M%*^XzBi~OJz zK5*KUtJFyEGIq1Jfab6M(oAUazPMZcVX>9Id^=rO7CTn!l@17fboioAMR48T$dF0> z;*N&Hq*A`>v3lb8dPC}T#-}BC&!!3z;n}X92cyiK1^UxFaus4hReO3BOlEpdbrH%R z9U&*Xp{`!KK5f=WhWuRyN&F1Vu`HAhu_k-o)bh%ytvc+i!WWXf=eDMDjO*JFq>&F! zlnP543lx=;HN|Ur6$ey1(0?P!tmW0aDI){!*t$ z@yGYbxfR+u~!k9V9PXs`} zx&Tind-3N^oGY#eEmTxjPy zEqX^mv{>vOs5KMMk}t5TyS!so#m*nUgQQb~C+tXVgv>x!?lE%4R@a%pKHqav{4SL1 zTs|!rUiolm$8KbCh?@SrzqAeYCktw405U-eqZteKMBsI@BH`Fy(T;)i2 zakdhzzGF%&(lWBf5|)z)n9-LXs-vo_&m=Y!pHv<+;5*0F4%M!*NM3<)iW@^VTlv|S z+lSqCZ&FP7na-20Kvq^sN;b>tor#J~DLgxiOb>jndMm(V$5z3=4n%;dmOXrSBmq0E z$XDuKM=Jf&_qos6ZboL^+56u)9;xm-`>|G&e4#-xy$x=-3XQtDIXdD+`6NfI^ujzM z#4=+(0W!#*qiiE;xBUI|)*(%V+zO~8V#Q1$dlAWxwQo!@XZFaE8}Df=#lqIF2vy`A4ayoV+mZu(64t&!mgW1 z?29GQSWfx~=CEo3Pl)MurWJPSg|{w(YrT!*f&%Et-?1Vp6UOC5ptNL^mI{VV#Tkgt zHae@J&s(IFn1jw<1{ghyA_mkw3y%FM4s@T&%3r?WUQ0gR-c)s?tyR~gIq@T5*E71D zZosM}lqpNQOuw1U9TQ1nt@TW)O=YNhGco5l&{wGecgQ9>L81oxDbZcO^Bq|(!K8;+14OIQOAyHMR2_0G1e5-3hyB(fxZwdl@IcnuFsp-5XD8d>M zBy?-MQG3w$rH0|~NNc?MK~hn1)cYB}UXdsz$&K;6{kZN-YV4pIZF>6E)RkrqDtd(J zT&(YU^Lm5B!3iv+iH02$%%xJ{V%a-%#bZY$@)zWT{=)o00K=5eHeRj@JXQppjtAuW zyqZ8y`hyi~n1Ci)hqnP}IQMAr$MrLZ0nIr^-Z)t8O&U!SFF8Cbs|#8SHH^TY1#^92 z52e8TpM%70L19fHsnPn?#Vj?4u>9Ok3PL8@f`PHGN32h-vxoyxnk|SM$sVQlEM5p- z6(73pt1y~m_zobbeb*jd(NDF7gx9*(MOO&dSK$KqZ(86{0*u+c-ECnh?dl4bU<4^r zVP5e>WVJzw5p=+@Sv!Sl87uuoc+cXG1&&9hjwMD;HR38-`>-~eg$W;v_?_bbW{m=Hcf$_$1Ci8>X)wy@LHcEKKA7N^4FSDr|buHpeEWjczUuN~du6v?hI3Al>J5BG?s) zUfnI`qAKaaDi7b8$6e4=wCV_j=Hyz`o~9LS1BI~;3rx3qBr5iMS8u6M`8NSOx%hH! z@9Lro8_WO@R7XE3b_(xYz~=OQegTZqnxsc^kWmze_k{_Qz}OCT?P}ASi6$)lYnVYMn}BqON($R-f3-6K za8B`DbZtpL`GCzI) z1);_e7B~bRk?AYgp@5%vi73RhMZU##`zX1mWMQJ>OT9GvZdPFhI=mwtsJS?nCcqOA zX&Q82txVGAa6(~xJ&e`%!!sls{-qV959EDQ`)0)j)miM}94zXHv4R&$ZbSc-?)M02 z67L8^6)=g>+7lHj1ZNFkbuB;RBi2G|C`zOovexIj{d2UWf#w+%*ZR(0QLxT^!>Wvs zOOy~L-Q(WZCOWtp(Vz5k^hsXCBa{*5EAT-czNPY@WFLoSb8t4TO>p`vf~4nO`}Ua+ zVd()~XX(+~uMvRP4I&_SB$5NpDuoqE5LYVaWjLsDzsCwP;Ykgh@LwUBsvnP-EBCxhJ%6h;{TK#@9D`^(Q;M+ z?k(M~eY#MB<2{AyAJWSqOHkLZ(#E575jF{g@OFpP37;)|G8(G|FtTN`K>vF$KrPyZ z1^L!tg-Wg2k|Rh($V$WBV7?PEy~j%DN680}ZK~m8upuO;ca5*Q(7Ih9a{bsBM==14 zkpA`0SLy;^i0kfOYE92}6@ zR=P>9otI^80{z!dU7+*?03oR1faWf%i5Rf<-11ZyI42_ofRy}WGF~VMS6A08?{RW6 z*H|6Be+yk1Km{?BEe74)Raa__-*g)RhG-J@WubEpM{3poTMPTQlJrkOfq(XI{Rqqe z0cZmMqn4cs;nmm2Z@6G9^3Z8fMfeUoT&PnU@DE=mhku#u8n$E`xHkIhp%|jB!61^* zAgup-Sr<4t?9Xk6KL)19Q$Vc+*9HDUSvAQn zEy%ZOgUorl9Y9uGOxtla0t4)u8ir~fGW%N(Tn6Fl=B78kHvH1=>Gso+L*pM>+o&Iq zfR`~GpbxT*B3#|v@po`G-#Z%JUQeG}{@c)gaR{UuIi@4pdyW5ouFD9Rj}7GB+43Td zP0KqH3*aN&j4w9&mKi@fyZ=J#--h{PXg^1yKX^uF0smW)oCgkM7xpA`+IYmLM5UAR zh%)=n#tnr5;wtusL-_94Uu6=C;o{)|5s-|}thX^#u~67LqW`Coe_-+t2(bY#TCer= z(V!k5yH{&~D^hClcN+f_Zh)59iU98r&Jz?)kjYUf)!}~Sc?{zaj@|78tpWW5#bC=l zK|^QY=*J7a`2j0;diFZYJ}Aueum3b&7wB4iSA_scSp>o#+#djNPw@x$%0oiZAb){d zSBMvrpyPIs?S;#Shi84_pFl7a{^PE&<^j72d(gh>?ExYMzmMfwO>{QCf0^x$IEn-n z$0T)QjExh}L~Jf#A?Sm})oLOrRL{FFwjs&9?1)HnBM4jzDcvh0D& zzpqy&sa#XKtfGE)J*dGnX@9tB$W5z^rtWVVi#k!CIOxtMJ?0OTIO>Lf_ke>M33$vcL2z{%!cC*GG_2?>FLmfPYi@hG_0y{Gk1o?l(J_gez) zOe|zJ`+`s9Mx3gAnC~joczqgnmYg($f|M&l4{rn#$)E2`LSeQ0>q(mvYV|w5aLQ3f zew>YRB_iD8YB$4D#es~Ae?6WQY!iI*HJD3QQx@Ow#q>V{NdQ&oRQFLnHI8LPyo5@#BmNvl+cu^Kjzg*P%tg z(WEywLPV#{hDrtW;hj)p$@9I51e{Lqek;_W)^TRj{SVsYjWdJZZ3=A`BFZr-qF6?`qBH&I$UZUoo1@ZnYcsk z7crjRup4s#<`vtFpiU~=jIvqsWXyCc*xXi>B;)O|c#QFx(BU-BslbL40`^Rnm}414 zpOd`7#1D^&>xR|o4A+_7oXyoU>IBuTLzU_A*&0fPihpNP$wXeV+NjwS-u^jkL&Fh2 z?-y9}f)PItI52Je^zs)s6V>L%h`}~14qj)wzM^s_UEF;C_s>#uwQ_h&Uy@M`S1+OC z2*pwJ@}F!|ZE^W!P})CJX~T=l7L-QK8L!iY(wJ^tlR1mjdA&VYip!{J6Xrt{m2Zb^ zE<0E0RGsH;&hN{Vzu>VMs&PpfIn`&Eb%+`<6{;)4$*ZlKl9mb-m${c3ISqEYRNdyh zJ=DmldG*UGe?GmU0EX!`=zE9Z-q{H@mx)L$whskw4^W3$HR|K?%87E%Pcl@cMz>G7 z0zwjM=_32&KSvU2=Znf3=;P)mi#WNn?8zj($V*}7YtTh{+y-S&FJ84N&+#KCV)bPx5JQ0`7OEpB zaEi*G05c6|ogFDI%PR-0q1mr97%_EHmTupL(=f)(Pbex&6dB#?keBkHjhr}q|MZN5)sxoj{9Rv2Wpqy@ z-l&{-(TW*7en@rSXG>nXGC`+NTy`-%LVk@U3UJVCaw@C4)IzBnna&H^NpNPw@7*;j zHRVuwwfD^IGH;h7@*aGnc6IJ0obwTlj&?SWimeNf=kxiznwO;PGU>t^^vZ;J;r^ep zl|_5V0!H@^fci-pF%j~TEnZHl2j$+CLnzenBY(5hK+V4qU3Pw!{+57U9XF4y$PFdW zhH!8PLtaWkb$sjCe2=Pio0(^864e>vorIPd26lu#@~~Nn{~OAY;|l3a`<9 zl)7?&PLIrZ8M_;ZiSq}HjcLH_Kz*GQ0s9>N3s7t{Qt}c}~9Q#v#r0Ia?mJ}Wv+>HSjtxfhO9dPPMo#hBWg+aca{)b=1fz0Ve970&+W76ic z=d!DgITgrG6~@f+Tz0bMB!XB}C+6d21vT#KRHa~KlkR9Mj-$n8+VZ33X5^(ZKSoYG z&1cu;{}irN$0V34kmNpBV6m4cwV1ZzSU<;{ZaN#(5N@17i5dp=Y}oD|eq$M(UG@<< z!YfxUC1T_h0H_Lcf~f_hL)ePr={GC(X=WrVM!hgAb~&CPcYX$q35C>)8p~O`PYG|2 zwa*xx-_>O;7M~PJ9iJP49f48nIhTdQTIU=tg*wmi%?e?deL{+kzeOQ3iSqqq;~3>I zy3|2tyD29s9()g3ZTaWW#7`vEw>(Ffw0AOkBAbp{|0?#|(B8ww`1Yk96eHd}=+-Q0(g*6H(7%iJ-A z+QKB;+RA5*J&i~Eh9sVB_M8%vOzjZ7(K3Z*aHZ2Q^8&Bi!5M$%wi}F|Hb|{l%dXfH zcaM&W+(3~W2=jndq7_kEy|sx?dMZt@z_j%RCDMK1e>(A4W&YT37@(lvAy)RR{-RS< zOBdLA$9X}#xA0!KPo!D`qNBW-F{H+YZOG!SBNyljk-$Pap^o0yXzY2(&ULG#230X& zvV#%w7}w_iIbiZLv6FqrqTjz~wg*v91Z@Lp+1k_iEwE-ePDGBo{>pll6KU~p%qs!veIonRY zbd+p|hk<6;G4lf6js_Dq!%YsP|H5RDjB^<^vZ1~)RcNCQKm zA^ylTyN!pjJ?=dTiPagj^ayqcn;Gmya0cz@0{neR%;73+Dcsi;v^m_((wmCD1EUYC z1PvMLYV~f!d)kgU2F<9#0Pa7{Mh<9xXGaQTao~;l=0|5=)#U>ImZA5yW2fZTBNfa$F_fi& zHq6B}?t{Vw7^jdL#4a&pr6-_}6xu(dql2RpZEfDidPXaxL}H65jpkptrUxYERvZHz zL#u?;!tLdiD}!rFP?QbQC5Gp2rJnTO9@?x%OZ>!Q>?Z?jtILGZI`9xOo+5VUL*`W@ z`UO=9Dlr1t_Zp;DwUv1Q$MJ-@kMxzv?XP zPh-94;Ct+B6(`zFcXD{dx(7gFkDR2n64r_D!^k;IdwJ9MW3y^}HvghJyp*lgTKL*- zj_lvb{_cz+b=iT06#50nW)J!ZFB%e)M3U)tNgG#TS@=dL(Z ze?+mWQ>fA@TsA_2I*dK-Ig!c2UT%;@(^l%Z`9n|k3$ z!ff&cbh83mX*MAh&CLR3n>^F!7z7+kKBwg0O%Xv6i;2I3i}S(Ku118jZi`3F`aBkk zm0h#=t9OOWkQ5pN5N5M~eQN_nx{t1TqbMAaXzH-kB`Zh=H;$zY(9sjtW~5?mjoc$b zhtyY#GX5EySee4bA55IkWh(3my^{)09O7ywA=2lBw?mZaTX0XZ6)_^eMP<0($?1jhKu2NPe!-t|E?_kpC2}m>8 zM3jjMtT)|H=Re#aI~F!G;JiHOo%r1fsCW>g;b+a>=WJw1>Ff6Kb^s^cFDq(4l4>=Q zdZi$2M!f{NHa(o@E2~M}tmZC6H{A6!l!aVMc*pZfzjW9aZ6>M~+bzo~_s5-mxmOb( zJpqg_S87H`o}~q(V|8UR zo?jr8PA2a0^Put(-0LP$+KrB01q>gHA9e!mP$eo<_x{z|Qf_KeSvBNFIZ*)<9+`x8pjsfyvMHAVAC5BKKeaY`q;7NfR;R(ow_>W#-? zZI-K!+r@Iq3fWSL>PAdVD~ZavBewfFftRIqX3cK3>&Ly;jrzK_qHjngw@A4zOs= zyOk-CIBl_Y+9Jd6H(MnQ^Z#Nq+upaoTdvlt1gFUP?MB$`1DMP_2#A0avXxK;Nnh6z zd2S<~ku=5){IAy!Qyo_NlNwf4>|{POH_1k#lvDzA+l>ushhQs@1=_)DAzyXEa3Atu zPU@zWkT$9nh@;3LK%Zs@3L}}OchS=pYY_6iWB->Qkn9?Vm@85K0rX*yw4W0|mCD_! z#>mDliK_;ze^6%kP?i*p?Mwr7D)W2R_*6e%?B~25^00f-SJ*WGLEyGRYf6-EOIV;4 zqVyyFNH9S7B(UEs%K0JYuffaTT*kk6I9SNCdY$`<#Z8NH}8 zPX!v|UCp8%azXiWkGq_v&x-g|$u(yhQ3IGu9)Ho0xX=iqS<_jO-09_oMNYQ^fFoQ| z{+FgC6v<-8%DUS;M_XZFiGJw4SA1ZUx=63{yikTpD_~qDCM?8R$ZQYDadcEkZnG!X zRtMJYO#Uz9>Q^T6hh=&#D0lA}Nu(bBKkS(bL=ema#`np5%&1$mbHCV49WK0{_{7<+ za1AosJ~B2w#}}zY0DG{0I*U7gMucR`0gOuXdpkbb;NCUd`yF|%SWf8wMe5;5y#lvB zVkzb*S8M)|bbW+z2_qg1{&UlL#!!<~4KR8`5R0s^BXiS{HLytsg zdjH^{B1^yZ{bleMu`HkLTUbbfGM1J!(oy5`7x~teE53!pPNsng_>hMqDv^VU$Y6-u zELH%ZQ0mQaJg^CnwDx;nXV-}C*!@`?!Is#=FUh`syb+jwM;pcM-i5NF-2Y2F0=U4f z3eXhBqF?v{{BcLflu?^nxx?4`z;IH4u$*qPjg`*3dFb+S(T^iiI&M!Q?~O!=%&(o} z*>w9+4av($m0hAmNMeqBU^W5w?om4UsKkr}{5`9s^`&LSqMchbGJjnP=VAB>5ewKy})7NinnfI&tY8jLIkwa~dvI5L z(U{yr2j|I-TV_{`y~wO=?`_i^{Mu{YQAJ~2V!s&G-P{iOzA0-q8#+bO{D%&w^ONbD zxFMq@!MCn1lLBJ#CPIdsYSegm6I$;b?Pjx!N7t}S@@++MrJ$Z$&*{7V&-w*8sQrt3 zwpM`d(-fJao9C>@bzGQiAcZX>^$vs`v*eZ>QPjILVaVHEVaD54f|Fe-L?zyW-#_So zTk))<%*Id@#?=>!v# z!i30**IjM^;klbuLfxNN7}(uid_v+e06K;kbbHqg(<@y@MeIrtL{Iv}Fx6?APz3=%FWK$~GTBl?ap z9^sL}pJvc&l#OokOkU_Z)f^NjQakhtEP&anB>A>(@@d<+ee$svfs{(JjL*&gOx<|h z5mdcCI0vvXa=Q4BMUf<5HDD!vU^^aW z?B?2OF~#NCPsdR}O%$o%zg)Wz5Chpk8edm?5JxdV1Vsq%t&?)meE=95_hrT1!Re*jak1GPw-noY`q#1?J(!=z;{^eA0y87g?)f>`=a)}O1e*xLKL>Qw zxYhRlN|4=u98DS~Srd>HtGMQ{7Q)4d$MvD1ah;~D@CUyR%IASF!X*>hIcD+u2u|-= zUw%VH3Czx=BIvh)!wOrOFEKQY17q-`iw2DYKd+$nHaMo47zN3w(}{OsmJxC_G9_fQ z{i`?ov&i&~h}L68^K6|6j+a!%V>>MU$~kc0H;4(aS~B3Ini~5HJ@wLGX_1 z;3fwWbeEh90&PUPdW&`1=R0N!NV{JG+>N&t(pzC(@DI$WP|fv-nqhNELoxe~e}uS-@#% zMg6TA;r0Hyrb|z0#k48@u9l(A7 zLHCP^<82eiX5%DL#S<`nbG!vhB8=5A4UMyWK#*s%a*|N=Al7AMT0__JuqLb091t^F);*Se%vOAs!%yp#8E0kWRERfBG{`lDCCcc)ng7Fi5_5$&8jMj z{BVdV((rOjsqYYTf(tC$df7$P^|?Wy_7-u;+Qh*;3&KbF>Udi;z?hSCF*|H2MVDY| z$%`=oZeUWf3o%4)<(=sBKW__!T);Z-XXuj@ogz8Zq*jkE!sBtm_{-i{GV*uYq z!^ee`$X$u?-2_Y96J_}7XkWs(lTBYcm+;6=dU^ocKoZPi95c~)NuxykN{Lo=`dwpT ziBc~p@6O87j-a0fG^swo`{)VTh@sd+j*l8S-w@fT0Rut$+EyG^2`@qZESXY2csI2b z-vj};P}M0vHa*94%#vDw}gm7>7sLU zU1$;SYTk;@67%7nx&blEVaZe~tmDUuFu}AED30L0xMEpKtksJ^(Q*DR5zrp7Ix&0; z5ykoKscrJOsmBaxC$NeRU(0Jz)2Uam3zEDvPM`+;z3YOP_Z&d3PZXp5wH`b|&q01v zJz0-r!b*pb|vMyLBVR%!ejhAg&CB-_-*j8R3oYMbV!v)b2ST2;__j@TjhcYme~D~M52~@krFJ~^z-(8VFMjPELZMq<%bw8M5v~N z)erJW4CniXWyFtNDk=LSAQ0{K#V~1dOqNzk+y#kL4acSnScJ)K$bgbt%*g1LH%UNU zi@JEMG4r0_lW!ab)s>A@uuK^t!SFYp_L%FQ2&Wl2GzabIO{?@EnaH-wTXLkqHZARp z?Ej=qE9oxbUw(?UKYoXn%4$jjIUK)^?!cIV2N6+-L{Jg;e}Y;vCh0aRVe4L9=EPsf zKr|QCw3=%k+CEF&eNx4sK=>iyM~NcEzInF3@{)OFo|7|vd2GgZ5Cd zC@P~!aWr~gw7S%yHA3#eDR_ZNSbx6|{fc2f+5D;52o4m{uUp_JWR3T{8>O!;o=zq- zE=cH9kiEma&qrQ`qNW-O%aU7FhVD%N%p$)KCr&T0e?}$`=qey6f!`=ogm=QzDXn2K zi{%+&TlS?i{guF`V9HQj&K5`|21TL47%Jp0N|fzQO6}QYeN1SLDjIu@I8^%=ytn_*SuXWyV>4px9yL%fo&hOly3r;am4Z2ZM zlo3l{mR@2In|u=mmT*RSW(t3rM$C((t6o+QA2Aj9K}|Xu^&PJZ6j8KmdpQVk@eCA> zb}22+geVV`8E7J<=bD~%DP8z}y6Bv>a$&x6W^HMZmguLIb z?8yT|k1p61Da+?8XG3WA9vo$Y%Iue3$w(i^$`Mg6(t0lH=oZZ@2V&y93!AmcI3NOQwMn;iCu&S(nNevV81`fme&{8 z3Sh?UIX&SiO0ZVRV%!Kr>WP4HaU*^Fs*Cw*^|S|Ul!p8fXFTiV0qj=?9tll}8$9)$l4Zj^z^RTiy3wxViRuz%81 z=66XpQHVMqAe3RLyHt;?GU54&j!(@TK~fb=;CCL3b&?JfC(CqkGRe~8M|%7WV5_h0 zz4>1JSs;j8AIyQ;&jIn|x#nPCgeDXY4ayDjvi4+tV!oLM%Qu}NJ3Ia{suy{CnDIn= zHR4|7aS>9wmge71(9z*-3JgKKMG3bawR1(%kl$h$cd%YVx7_a2nA4z5(q{Spu z!4+i0{W{0sh{e0ImqT7!zNXY?eeohZ69rhS>l4(KwmUyevWLyp04BKH(u;t<`SWr- zxX#xH&MGcAWPRh?9``<@e^$g#@)Xjl>VF|1lov4oOxGfnKLm1UvK~_*U>!Gi$VyyX z7b%D^RIx$2ewHF^2eq0)$+b-FrzH4;mBsA>k({MW1IM)ry4??{`e&*Hq`ElYai%KW zQH%-h{{9_sr`r7Ug!gvHCaIstdI1t#>oR13lnVOQPxQp()O4#7TT)Edh~e5cbo0;= z7(_a%?x&DFHfWCasloYt3bIlZqfQDLC_5<719cEFP+?n%G}o-Mf-^yTXS}3>-zP~H zIE!-g#yMfatPN2i3IL36VqKTOusqIJPZ1q(C#~BuX!aLfxVi`6@+#9{X|jn$xjxjF zelosV1Oh`TBgZ$W6(lTTf2#D9`GqIS{z{)2`cPh@GPo2axOeL_b@nI9l^5geULbZ? zQv`V6zj6gBaP-{bje?b0eu7m935nYYw`Pnz=$se3wt=N_Lj!HoE_;ZoH>Wz5!75&j z_J#~3=tGRsI)cg&oQ`($X5nhWB{koIpS^9ELg;W1#c#sbo0ok}Ab^%i2v)x=(S31i zleD`7MDswF%Zi}ERF$lm*;FM&N zD%;n^_SgmIZ@})FgHSb51};jiy?o01**iax1RFDb=$G4@Qi!=&D{{4@yhX*Yaa#h) zH|CI=iLf}rT}zSTp?;_Vtv0x+X7U}ZZ%=-n?kxD{!0S~&QrG)GrH~*@sPz1r+?R?vNr$p!64`kj%9W#?phPfeK=eE>2FEzy4`0kK!p-@KmJ5+`7QXow?*{w_JfDb z{s^G2xgr8;XED;#qzRXJA-Tc+2AUT0frn-tTUY%H@ha?i2qI0q>o|*crQ4{M4tbDn zr^i}Ro}JpyG&H(T6?b|EXBX)+t$ugIrrG|lX^u#jz!+rPfLLgR81Ka@-Sp5`ye%7G zsdENSAqSsEsRC@-noDsBZeV(aj|M+7C~4rIp=l4isCe7ox#Uw&l+`L(O2LjN*e(EhP8lXX=}n$18%Ws zGcfVS8MheYQ_coFJj_MwIcMv5%gJm*uy9^1)Hp`X`t;87L{|wI>b~mE{4jvmX#i34 zAdhA?#Vvcbs5Vq$4k@BmutW{RVuAFEvE;qy_N=vqWX8-13`m|b>0*`qF|VM1#InJr zhWP($8z?0ZV8-o*WF;Cxo1GUC4%JUdrTZz*uG;%R{R;Q-(H%&v(hdua;vKR_r?NX- zDx9m4NwGLTujqWb zFnWEpLUsChxL0QOINM&ZHeR2s-YyaX5rkDk(prCN!$uT`Nv7J^8eV3_fwNp9d4UqM+*Xpa( z@FG0E_Rpznv_%>yHjBmFp*4`+nQ+xsORxnpyG{QJ5aI1GxnzjKlt-JVuR4_*{8WXt z{*MEF#U}C?YbIGT{~!mtC3Ve>fx+sWb7K3y7zAD3Lj$~#F50%8n1=v&z_aVT;QWfx zc7|vpKO?-|Q!EheZ(sIij*W8B5PLtW@wDlW$LcaF*zGt>2nVHC4{uwa+U)9MofMr=Lx-9hSdxcG_}@F*7|K{gN?D z1$rNRLo_i#zdrvdQ{6J;TXpt$wf+&Ew8m6c4g7Ds)iD9RVz=E)l2kXXymlX^#&7C9 ztf9R5-Z z2E4U7ef34I#7(R3ZtiK^EMPi8EL(32V;d_QGv`l+~fe{{|o-iPf`k40>O z_0STr-*VyhMEp&$b}=_f(FNy1+fmR8%VU_wZuEFfSl4k=_3b`_C0bQ~e; zp+8+`2VT`_DVunk9lL?;#Iph&ITylyt9REKSgD*bX}3cqRqv6K_%M6gSPfxO!A~{7%7eSO8p)X>cf{jt-+PX8~8NtxP{rc;N zx7CE1r_VUXHiaK+Ggyn7tdIpi&_K>r?ErG+x+Lv}Q?=0NHZ-l@N(!)VHU*o4w%Lldj z$DfgCNpr#F_2sV;Q8W6(4ZUp~#~&iF5`$<&an;g=h;J2Ix->hGD7e*pu@tG^zB>rx-|UXTys z=}BXgmgcQs)8ln$bX82}&P)HWag#$lp%J(>JXoRdlZzH=Sn0D* zfMOKEz9=rODa%`Bj_)S(Pbb->0_tgWF1kpd2juCbu+RBH9HpQde&Pq3(NJCh-%Yk;lNzdyTo*y#z3sQb5wm4 zKhy&m#T@n(I}`=qa8ib`De33l`e~e!#Lbk>wq>t@+q z+(*IC_q)0PgIPF<>zhxj!Hsv3D1|&QN#%H)-A>okeKd`f=Ow1xvoNf%3H4Ylj%0+5 zA_OLfEKkCJ;fVrx`)DQk|6}Vd!{X?IZc!K@xWhnjcMTrgT|#hog1ZDK!QFzp2X}WE z+})i7CllQ7koSD&+~?l&zk7Oj?dsaAR;{Y}nEUh*-$l5mdyBPqKOSa=lIuNq?E?(+(q6(Mp*m5h7#F;C2kZy{PC<7{Pa3 zNXuy6?;|edF+fwg3kK>xae*BrIS}>&kE4bDdNl&8pEaZGdgqw(GhUROl?YnvP;ri5 zh1Ee{e_W?H#6rdBHj(I#?w$!Gl^tuO8*q7K`GDSU8noXsuZ ziCFlWH4(=2{lk^xNEt!(Ysl5nX=7Ejqu_^tX{+IO$U-68&u&Z+*QnKsU#ay%e+MeE z9F%$5jgrNe4h&bnwNxDP#F}@JQJGrpG4X_5tYV-frv@(R@exJ-X6f_8n!aR*i_fS_ zIw<6Dr+SEsq>p4B`Pqq~^!_Q?{|^KA#l%qHcer7fp?+{ocL71}OJvA3FR?{dfs^vN zwj2CBd0LhL581%(E#HUgo8h-$M;sjxTS1I?azmQJ(1HcbEqIO|xqkQ_AfSKuy)Bai z0U^kAc;1FB)8K&mvBu*O=+kcdKKYb}k$~Z%tCh%7*qNj+dV|fq1#!z_!T1b)Yd36_ zwK32_gVDX=p?CkV!f(Mh$kW#96{8($`wv_;um=uD8SXXmw;8|C8XE0zyL-=$ zPM($bRO8M01@qYF$T@rQzKf-@N!`$mf1YzsQjS^zVDZxv&WC*(_Wo_N??jZ@VIpBx zpHYShLzDT-S<~65A0B--&s>Ly?F=RT%N!r|JNRLwlGfR{%n%&bNYG$sX65oMdDViJiwk2+<7RSNE55AiNhH6M#1&LoNLAGMK=UL?@Pz0WWDs8i>=6sjIJTE(aaR-CDZjw|2va4D!pVY$&{CV znYfjR+3&)}_vq}Sqs4xXq*&Uj)BZJxk@Umh*e#|&yHJ`iW&Bxn%-Y|6M?eRHgwX9` zCCV}BJdR3gf`LJrLJDl6fmE1&eh!-V zi}Xl7SJlp)hhKQC;WFe12fNBf917yVs3X`{nq&6Ei*Xbx_d3>1&L9t|AVtzr-E`~--iTmzN7x|-0@xSxqEKo#fv-458<%yNY^yUG{>u;>s z(iJqX&FTgCbZ)7o!t(B;{)ew(G?P&-v;A1DMJ!s?PzprL@}0NDtJ0kgI`^m=i8eUM z7vB>ar8B&w3lR6VUc3Zp&_*Sk0g*he!|`qm256+VNP;olNoAej?!9pSXz!7KoP#P-rMd3R4_52Fr9pf{Z zPOf0MmP=NT-IrEFqmd9I4+Uv7fF*@N3mN5!x4>$2; z*3N#*OAEK=6Y|AC6k0hq^@n&*G`Bw6D5uq&a>L+LQ^(YeGgNN9&;ODJlMlt0=-tJev^oqhS;E( zVHYMVjH*xf9SNPE#zjXrw&0z<7oo-cGdyeMdi4O|=D@C^++bQN_{7!c=B`{z@%Q8; zb8*9tSL*nl4d2ki4JXe@9?yZ+(BayDhM8`I&1XAGp=9%L2Z}}b4+wg^giX@RvLz9@ z!sA=Wry~k(MDVnsQS*FG3HTn;dzfb#^$w!+{{4M(^}dP^nwQ+s{KYI<_cmO*$jpLk&TD8dZ=Bgk5bu5c{sclAVa~l^ta`WUe7!hd5^c~oE3upQ=g#xVr=PvCsT6K{DloeqTAzO-c7^6Pb{pAs(22jjcWl|ANG0$kRBJ5Ym*|hSFzt0$`%aqcLAMinR;J|M&sZ zP$k!-#2g`{gezhr_vJRQTY0EE`ytHM6-ADWCszvb49~zD_Z`qb@DcBHAn=r#uFV!h zmS2Z2d)v3eZV0PC)+6d9=`YPc90UUps&hB#E4@E z7SY96_A4A^jP?x0c3cIN&C|o`LMPgdHDyr!6I|?Y{yq}X{AesD(}Q*?L8Wf< z{a?_e^%M%nCb+OKi@hMxp_h>NJ^R!0kZ0y+;D3-=s)uJWhD=%m5qa8z=Mw`EAdUIQ z8)L6Phl=!nSR)7o2nxWAXAhT=ktt4L>~SnNY{jfaM3hmIlgfu=!Pkj0!T%V90Lol# zex(rL4Kc*e1X9N6b@_!}?}|u((QS$bBGA}pD`gsDwzk?=oUzU z!!g3UpB0}_WebC@S#p*9ZQuTfqJqQ`NOFV@%V{&zgo-56&j+y$$&1!L0U$G=MFs8- zHQ^WHo3H(UZ+V0A7eHP(Tz4Feg@VGWKxc^{GC`#&7;+xz|KIBV*XZ65%wAg*Yu0b->bWZqq|g}O&-Z{)xNMBba7`wWMn3wwXq zjPlsc^~Ic1$Xs1Lk0D|3%VI>6(2sf6|I7RNQIG**a(c$B)-a*H;r{aB@Qou}_M0y( zSqmSk`iRSBF*3Ndf5Ndq#gaS^6(7m+L()u`0}+g=eDSR{>(fbQ`P zq_qJ;_TP1W6KAu9XeQeoMgrhk~(oD6hK}@+K`&ekHWeOgOg| zrB3d;VY4v*LA;TVzBza$EEqKQFjQ(6Ls`y#navZwSNmHUS@>2fQS!|bMINazLhzn4R*H&B5|5rLeUSW+ zYpCkUF_9D-B*KPC*B=@yEWN9UkU5F}^lP3!?Y+;7Kw*8k!Dy3EF#v|n0U}bDb0qH3qaV@ z)~(%s3dN55%T9D7)jA+!#|bJr#X)15XL^O5Q06O)--bU0w_kfix{<`gJfTyT{g1?? zsI`y$P9uV(<-fo+16?*h%O|PU?+5Jg^B=<1#(f0dd2E8yQ`D7o^%5Zw8)9h$PQV)Q z6`n(Qb$g>i(r~YJncVY~bSW?8@v9un>`Ek(=ZEIp19h~I>Vpgc}#PBkp{P(um*Wg z9pmIas~bes<%{9qoc0f%F4*G}t#y=%jVWh;xJh9F4>s~SBd`z=h7V~bx8J6~{qqZN zT9w+b*}5IF?>&JQnfy2*-?%)#PEzdSz6SXVJg^)1n|;hj2-5o4bld%|RS0s+YBt1G zZM_Gb-;q0-z)JM+u`AW3VDK6P23444oSYOPP2jq)yL6@teo6T{=Kak5%7z`$DR}mx z9G@ITfE8s#qbqrvVXOT{n6 z@KYbGW{vgY`Kp)ngQ>SpaE^_+Qk01}E&3mt>lwj{Yl)$iSBkMIfyL@qMBpO8Ahr^Ui`St3{^pIleJmtG5hKe6dYC=-1B{r0RM)UO4g!h(Kzfd*}TTw3rB53s%IZ$gi z*jpVuTu&AWeX)_jhsek(r)9mnqnryPiwap?7d+{$EcY^RA$pq<5aVMz%2SGO+THyH zC!9y=HauF^l+E-MVE&_po;C+I^W5aOulhGu|iXWj|^G;C7v0qYv_6{A+A4Gl6R?Mvh zP3|yU#Zl2(cMU*8b%aUfY8Soj)vOwfH9#aCFOg<;wq!pScZUkSOq^u2%BC~ALfTUT3|1xMBHIb9cZg9`kGrsR$Alzdm-_<2aHJcd*=5Y zeAA-Fq*!Bj1<>3Lm5o4*ts#=%PQoTj>=+Z!MUBA$;F!E8@?aJCRxy>`FInzwDu+j# zY<56rL#PDfcTyw{{h67@jGN3m0~6WcD?&R*d#@bxMw1=9_Et+0aX&Os-X|HJvdd~b zzsPR?24qHh)UP+n&+N+$q+523*Jq6*EB^xN3yqOn4^%le-vXRgb2-5GLE5vS6h&Lu zS|j{Ob|%1-vyA~(T-yI(>}vqWOsXum%_W-s)Y%!o@Ubbbd^6*z3>7 zh=?%lErs5nJjRe83TXG8C4GZm;)!_&>T~*ak{OCu=kKoz#hs5eb zs@SV`xJlV2T{LV!pm@(b9*1S;a-pEq711r>IEgQ2MC90ZE?Y+NA36zb^{S*n-^xx$ z(0B>hMvmM-UEVv*E-a$K>b?5Ai9S%Y_iO@YT4FWmbdFWZ=_?n}wUh+Sz_)`8!j79n z+<&3$k%sN?X)AYWR5K2{4)b>XD@O=AKWYe!urU`L&#wfbYjk|Vey~$pWKjVH#p^$W zrlTaX`>`oAjffm}H9cU9*|9H*ye9a)G5ZYT{KbTo&8DiqG^G(IIX5{pB2@zs^`>V{ zjpX305MtN@h%gpX_95uUBrI4s8vWom&+<3$-`T2XmQXd{N0{Ie zV!Y+^Pup)5s=97HtE#u(e*+Svm@+vx%HtV}`)2WGy`F3REiD}g=8ZVgtn*Q&sWKDa zW?VFDU9Sqs$NohjY+5oWV&%*qrz^$?QHKNvOPsqVe`k$f=J&<^VSLC%4Z?upVcv;v zwS3^gJ!jDD3{1#>`BIELWO*cbv9>q>KdNmAK_G0f^M~ntDSyHUM4zRkfytoVCQJ z@|Kt#+M0q>h}I~yCuI%!la_j{jH;^FfHqr^WrZ@~Zx6gO@gzT+%N;peVYOg=$pxWK zPd@D-n(Z3R{Em)@4-$D{B9}*JqzdWndEm>#zf8GCo@(76@h~{7?Nl2g<7y>D+ ze+VTwC`N$J!7Tl3`9XY2&U=)$Nt0~L2r9Eu>o+}*9K*lI-$e$%sGA)ea<27sUstM^ zjgIMdPA*z!%u~LZ4gf*=U{BQ`M0Oe&tbScPs;_<15UZkGU?KX+5`eM0EbB}e zF~3|_6GkgnI5w%C6cW5GP{a|t=HdZoNvILFDV)b-()?NHz~q0y;ngy?Cb|AXtbZ>; ziU>(M%XDBs*|m8K`_2$bXw~f@J|42M4ZuKAdQ3k>%5#XOp;1ImP;7f2L1p@M)uh6( z5rq(au?LtHwFwhqEV5KkP>uWB4m4QV?wFh8TP22xof9?QD;@_l{rK|pOmex&4cpln zS>=;u03Q>QtRM$lgCWB>i8S!Hy@b8u2c@wFleq|Ut>$i&JmZKEc&fd-wo0s}wo zerUZMLkjRnqEk4u?!OWllMR5rF%MD5e{PsR=MEihHQq@+?G-RTkgPuDSI=PZLr)1i z(yMBD)?U0p?g;eDPI3Lt+m%P&N1o=rHt@!Rle#x>=Orb@d#Ul1a5*s>)X<>O{Q0j? zY{h@UO@wS-{>HvHu&(@HU?RqjtARSZ`!!mG7)S%FZ z1kyCr5<2R%nL7K^0?*|7c`+Rb9EzAA7IK`0t>Dh(bs$cDZh^zC$#Y2&!r#mc-a^!2 z?`VP3{;##CZKC^JxdEvjaT)YlB+ z@H?BAAJjUZIlOvRJdq8Gd>I$I&?`i44J1ufpjB)@!WP%JmtCEH0JwvH4)-_f^1gbHalwqMlV z@FNDGM9S#Wa%v|w=j$SvE7L{QX{o@!--8izr-e#ohIl=@(#c*I58=p*GQkRRtA6i>tp*#5-Lg-z*3I8-ga;JsQ@$=qF2+rP zV){ON7zT3|P4Vbxd7bk*RKi?r@~hiM2;>ddy)8k6Or#Icpv9C@16ATUcc3DS@g>(- z9R?)m_NSeD;I9=UBpBaaSs$2*kCe1CMkO)7jUCy=5OJ-n=if5S9g zE&<+**6P-bl-faQ%+0@wYpN`cs6w9(rN#VClhdH4uiy%ePVciT$_wl;C8OfeKXZx3}M==Y23Nie8JL>kBqhSkFh;Q{M}KHVwsSO z6(i^K+{Zz+8AOLXxTWWfD@Cy{44C!{+sBj&&zo+Vm&<(0>>J-VIK-^ ziKX=J?=0Eo6I7~?$NS3LWjn~5R|wDB@DkgtClOQDpOkT?TF@iu-B;21B$qD_LK~Vf zM@;=f{SCR2GQ^7*Nxrrbl5||dnf>mz@F!(#0@rE;}=KA33;1`FZ(>-eil4J;P@u00VILmH+x-zP+R^6YJP$lu`Mm1Q^Wo~Dcx4Ivd7B<5ImRjS%)D-mM zDW)WF+E0G)zvLwE>PR*@u{DVG(!?Vm(2;N#T;=W(>Z~Di9ZWTNDCtK z+y*MB?!EWOS<8VdvkSIE)5SxJb|lfW09?i*1Nf~Xt1RR}JiER!Xahdd_K`a9vrf_R)A z=C+f^kvGkO*tQxXtd3Sd4)&PnR2>#@TkWEaXbThZO{z&LmSTfO1Yimpf0&}hcb#&j za;}%F10SDqH5l~-%#@HvR5+ovc4Y0E77!2`bi!YBb!na9CHUh@nt4?7v2sBQwFZS6 znNGD~&XGJlFSr*!U3WUzd2(*Z%QLZAKOORy5sHY0rA($p%BK1ELE*wS0JRN$t6-_6 zf5}`O5rrCPMP;s%g6|%m!9C{UjatYtJ{^zqmv=#RmVBz%ekMOvLBhe${-!ES&SX0j6j)wHYpJU%O@6fgAe>5@$&qaO^XH*P)NyE=-gC0 ziuhiDl=u)^kd8Q})TcqQy&qetmW`0o1H@6kKyq6kaN82(oKI#9y}GX~%3x;-$kZ(E z-IlQPg%SIbAUu9Zz|;i(dVLI`^eRRehZg(QOG`caB-kDOR%k^XG9a#(gTbasHcI%~ z6h3PyZK9}w7EZP=w7>?nq@)P1(3l#x5@0(DXx#o0TEkyYSfpN<+PCIj`m6?n3h!8m zbht~R)&41(u7woxVv+@I#p|}L$M9@-qJ7#6ZtiG0Vj0l zh5w=lA)UHv;~Be7HfhKCfUn;uDyjz+uXyi*^sMjvpn7jqJ@W8@qK4UqLmSTOaRc)I zpuG|4Zw-ymi*6=XdbDKoe-FLwhdX2qRAl$1n@tQy>bM>Fc_eK~8 zzmaZ3I77DyPat*EW)g5vHfLIRD2|CZjJU-=yY0}Yu?EphfF8p(mqM@ z?1%6hk8{td+3)kvj)m?WJbyim$dP=QKP@^j1&845EpOgkR-(7UxU@~>f{t9Pnv z`Ce+-X0;UoAyMgDposa6_nl)WP%~t${l4Dg4_wjjUv~&4Zm~Uxx{TZ|wI$BB91A~V zZ8zQ}z)_CKlMC-&2d{0k^C4;M`C>V=DBv#>c0SsWZ>LQ9;g+Lw$EcxI`QmX1YX!kY z3Jql=MX0~En?m?aWI$C7RCb9qHxtwuq}ujN*oWUj@9TR%E-U;tZH9D#Sg%C@Yu79v{90Lz3~116yZH#tZ(PqUM=*|+)Mb^IRW83a~lGd)_Y?;5qq6= zd&|fnekb<+GoUuVwD}d9*x9RFA>D%gA&o7aA6J~Oh!HS+BbB7Jr7ZlP9aF&e2}0|VD7Tz z<{)7P(rkqVgrHK`MZ>~|;!1=&{hlKn`+QrW9lB~43eJIxccOM6?PEbvfZ}fk?Pm7r z?j{xpr9<_kPzumBW3m;lSFS%RyxOcqRHWSJY`2UQ7KnFuvHrUpMDwE0EHphm}Vpoa-iJBh?vE`9DZ)YEa$1{XZgsiE0paqq1a-b^h>Brn-RF%+sgQ9a5184 z-p{tuQ}h?PfPf`6rwzz2I@(>c{cH z2O1!62nKh(2LmD6R|V8AVHo%ge*G3i%s}ot``m^WeJsZ{zGFkBw$a6A=R%QggGJv) zUa{nW%+fUi!pJ`~Q~b2nmG}!$lDpv~$kjKV>pF8Yi-{dvZu=llcYIxyWO`(&&%AJj z&D>VJ+TsR|{gk}T=@sORUy<@#PxzaHi=-KqtmD7aI>&DfCHB$6BL=!l27tie{x%c1 zU|6jL_1voHe!%$Cm}_+n)K}%sAmz)(8mJEJ_H9G|vlY6>D_oz{>R>qhS#gM1Xv&T{ zxt}^{>T#+(wYxIO1Y(HTAs@;a|lQ#dc zUGXh8#PbX zKkJUB*lu|BCUVu(TALO*TK1aw&Tiuij%50FZUn-g^! zHb)K&AkWqP7!qu~rMNN6ZbU$b%4ZC?a`}n7RpvyyF0}Fq63rX{??}hZv%ENC%T}s3x_^wh0B6-6skCBZZsc1J`-xYVYX+ScKtqW#xcTqS7`skLl zZyg4_B4fwfj8M+mJ(Mbv%7vIz+gb{FU%pIxjjn!#udwKTZM7!jIs2bk0PjdDpzJ>> zW+kgnTFv|Y>QfN%v_>={ndKzMpo6v62l9Fi#<4j&R8TTXL;9O?4Ky7~z3q^BTDB=E zn1K+EJOJJ^Thdp$Q~2*X(^#NVz(tmPD|<_}9ZcuQY*!QcpX->um@KJvCG=?ABsmDv zd8D>90%NxJlm@3+d4Lvb?HI(B6vcyrK)sYf@IW{-@$&t|`lG##4V@_-e;D`lxFenU z=B~Eie;sfl(Kgc#PT{+!n_9}iD>qe78N`>%VNtV-J<&E2S_K z7s28M>ZIT8LV?$((g)70y0`i*UokeY)fo3rBkM9WLkg2xEvSPbbLJA%(}(1 zLDF=HPE4J__vAmU9ODu+kf2{NON%e)hTP0<>6_?&_hIW9SDC*yDon0p0Y+Ej(Wd(W zL2`OS$=fy_k1^*Ys5caHY@uZ9=;RbnFNKR7n}9by*ZsEHR}Rm$v@D5&;!utHb-yO3)fsvjFAeWl+MAtHT|Z45edXj)F3_#NX? zR!Yo(ci3E4od;UH4@^$m4H`PLM1iB}AFpc@&x!dj^_3lS`C=1Elj@T zu8tl2+0IY!yGq!#9YqS2B;?ku$c110nBE$Pl?uDu+}=>9!Nn4_Uc4;B`(Y8i)eQza zwm}X776tm;^#1WZq17ilB-#@x7F?DSzD9~yI3`HHty|u@sIoK7v4h*(OMqPirviej z2q4;tc;s7V)t1Ef*N+b`&g<;-y`ljdB`w{kSSpa+^<`y@^&1W$}% zTIkS?(vP&uHIE|iO=QODnaV%y2GGyvSC9(2r+}cyRiw}((T-gd=a*Kkh>R&Pha~b_ z|9y+G0qN^y)zTE&b~Rc`AE8FYPZ`)D^9p2{GJD!Bvzg00cY>GCo(* z=Ebyj_;@%CDN#<2T=D+KV9a<@j==as)l=(;bQH?UMU9mCm-`!uYQYFr=yO=)m)uW! z1~7s(slT1-P6+{M55|mnX-2?#t&Z9{ZThsoOYvEb3bYxiSC7BAhqZ%xWHGl-=^kaM zVq@4SX=W9QpQUh3qhR)cDT!Rfv7CjlIDrgEocfYg1Gda?b@r|aHco2a5DuW-5)0WO z#9ZL_E2gndD_UoIT67{0rXj34on(V1#0n@~=DixIE8StSuYw!xj&fc7RgRFnL-;M3 z9m>ID{f&kOIF*B|e=pcBVXA5H)0*=UBV~@sEV|Pm?XkWbx1{f2J3}A?Qx1tw`YC0$ z4R(1p|KB*6mehF#`rjH*!POBJ@XY>0!i4z7o058pRY zc&`4pNhtwYumJ!prvzSh`0H}LvZMP2C6;oCb}zvN_E%>))e?P-uW3H}JKbbLdiGHD zb#<6a3%44Ldk9{{vmimhR*&s1GhqDrm1HB|sjvnqRIZHv zt~gC1h|Q4(&9Ai50c$-K=3_`)m??@1`H&I}Ew=vLViq4A1O4E1;P)@N5>9@Aia$&p zFV-K`2Uu)(%y2<4VJ3es(emC$c#bmQ_0{*kC3Of$0H%Ztx)VdM6uQ%8-F&^DeKN3? zn#4`c`=OAj+l#f{g~PjDokdLPnh6W2uYk$^lcVDKI1ty;?eBe8RON}o3UbP3}F_4r~{eXr?(z}>>c4yS< z&u+0SqjxuUsT8QnNGeyr1?*XFqoC18jTXEfXi=9()0svjr?hmn zyR=*8)6xe3)3{?YHqd7M;`lbwZ>ZG&pbyfZin<`;>-7HFPhwD;+RGKc?Slh!-+VMcYdvk&IC4TPw~hrV-<%GZJcUozhIbJ+C4# zCBBjJw$&JCR1`8v0pOH*A5Zf2>4%iw3)aB}TPcF$FC4TEZIQ~DXs!a}36aH5(z*tp zq(ujhhl3+nY5({?W#?SdINzMAvOd3CwsNP5>WUvp`l!!ZbZ`(B6E&|1vztXKX8lFw zlVU32I41|GF}cUj9!nC8KZTfLWFm-%-;tYK6)s4k^Yg8V7^;emz!nnRscP%EO|ZuC zfrf#4S{T~(e$4I{6YAA7{ZdA=so=o%ebXkzW@nTlQl9J{$DsFmEM>F5NwCu)T_DhM zxyjjCS_4PKR-%@F1$Z3`u@E`QwWX$NZOuIj=kqE~ZE=)U^fZ0Fv9)VV~nKHkFnwnMbr5Z{5!MmaPtPu{hfpX1Ec)?|W2t}5+9tp}+cv=AjRT3V7k|{Hw3I=F}{!oB4L>{YiJhGekFArAM_1nNK%=6|8qGj!j!)* zwPz}1bXEHr+4df#(tjK6yCJk%3#pLUv)xy7T(6QMIF+$VL7Ci&nq9mO(p_=mh}RHxoTgNohgE>KNwEX~hm<~zsSzTZfiP<8 zx)Dr}5oW&0su|Tp38!x(%ok)XosBK)y3l3y-4b@ait?hw zYsV|MnueN5e_ON+aW*1z2XW1Q1{Z_+>0sqrZ}pu4{qW&jWc92A=z=(8t4dFa3HBoz zG;kRG^OkGsCMAU!y@oixnDtR$3cz0DlOB=#Poz0c%Wko>%N-w|=Q9r+A>@wtFsO4t;$*0OhL2oe)hRJs@1mhyqfghSo>xi7+lA8Y&fysHmISTxe{AREPl8-0FsNlGinKa z`Lb8$Tcil-8gU!J`v>*RUO$81g(%RV(Yw@EuMFb+S@9&6z;k|AexjP0SLT- zUY3RWXAwQUPyL>+mFVD5VMAoy7T{j7%`MCJQtfDt!?R#AvqAVpvTv+xV&@)@&&^iw zayJk9<<=u?iE>)*v7mK#WBuS%w4HU2Jqc=BHN# zo8B)enach3gV(LhXZ1RSm*L3z^#%0z(_755RD)lYaY$I0oE=VZE;^Z0j*k*ImwDP5 zQF7scQ(9~uDl$-U*NQOO5TJ0ahy!v%VY_I6%BN98qyj+Hw;$+T6a_#}bd`JXeLa7V zPznjD?GOzBxcem6129t*uRWrtlrsl0Y0bHxop+}URCK%;?%Y5QtRelBk`I%_-Vpv2 z_Yb<4iRw2^{dQ;P_)W%z6AtbF-jN}&KQv}LP1tbzKh%5as**cw9785QORGwaIU) zTn}FoPAy5k@9r&t&r@D{u@(g7Bkny6Qdr_f>GwC*RFY{eI<#dw@ZeMEs@=>*aR~ueW3vLAexd-4}mTKN*~}tb|F%* zTX0s&+MmkkUI zk~tVcMBFWQ9r}2V2?_l4#v$3Q@iWbMyV$$y6U_-fCUKVxb`5^RMS`NhC9$B6R?_k* zj>nt9JK2KHoB01kc{LbDwRutBU@q%(EMIvZi<)a(9_^`TqeyrFOIx0ej|s_s^#Jpt z18YIbly4m_@Nys`%&G?&U|TB@6YuUO5EBokU`D1EkGLj*(VF_KfD{iCFWQ(gbbB~n zZ2v+yETInRwkZnQS6%zI zLDz%GoT=BHYapL1t!Mxdc*TlAyS9e}p~jES<&+}<d`@k_-kNbMoz1d2!Q}n*%4> z-7ikF)tEk3z{TF$#xg<5o{%mx$T_O^sjPz_qQ<~XQ(H!M1nYa#Vkby7qZ^UR<2(pH zr-QJ%gAHEukkv`)r)T3v#K^yL0BqR>np`c`Tms=Pv6c-b%XV&rfZ!oNEV zTc!j&CIzrEy46lj&+kWdU)>!{o2h^fEsncLQ+?-`x;ze=q{KAx1XBsC1^n8a36X-~ zTxmE18}$NDR|=^LH0DC*UvnlEw5jkWhqI* z{L^NOKU38F3eA~r)wQf^kyX8}!5y!}S;}KZeiRmdxp@3@HcMJ#JL54LEGJBwF~IWh zmoO=D<-~+QPf@^>$YR|&t4sU84pdr&9{Xl-m(bB(mh>N;_f3TBV7xNAM8x(8=N*v~ zb+emlcq$8zVux<+pF!p^+MnfV9xT#34|e%fR7e}PyQhSoNjJYf`$mxnWASV{3l;?} zkk|=W#_6hLoih9@X0k*3b**+d5o#$Im!}}JX8dX*(rbN^9?!lmZl6T7jB?VI9s+^d zge}Y8Px-~e;dj*?m zO#3=L(;?}Y*4A?RXyK6?Qm{SjG~ry3K~UtQq9j}M_28hM%TL_7rVJesK|Wi=Q> z|EcU^D0-@t-BGBb0 z9h%+YHPt(&`@Gc)6G~@qLfbg0!L0{D*?X~0Th);=zZEhdMB;yw;GXOQ_xxdJ0p!zO zu*-tmKc%z9_4PZw1f8cod)^&+TRH9#_jX@TdY-1=!E3R`e~QN!a3!l-vZI(=VT&T* zSJ(>5Sv1?*QXW@5nix_f3XWtE-g=(i*_3_L4;`w&deYoYtX!1AKT~q5+@BEp_sM8> z$IDi!WSc)GXW2uS;7x3!5wmL{^4XgApLo>#OnNp-~f$D;|Ti6D+Hk?e)t^XJl%D9Z)#kRbTI-8#L`qzj+o! zES0#Te8T94DIr`{S`)PEXJsSkecN+k-;y4b;ECljoIXfh{6|B`pjuqG>4;x@c``}d?zCDHXx*t9(j3WvEYKFv5B50s+2*ccOtR-Ys`}T+ zfPnvoT;5Ry7kD?k2VI>W*b+IsLm{&Y!}tP`e93tgdPv_qOdPYt^lqbri>)#q8>pH; z6;ESc`Xkg!>8jOEh^FLOiDDx+VqAMuL3W)3)B|NqN=#6aLlSw}10PT_nRC|**nYpc1zc~jsWwm5u|qTsJzDvjlwz}gj{ZMHePvV|z_u=g z0KtP4iU)USahGDn-JRl2u@-kJUaYvgyL(&Q-QC?CUV6^G_x;aW$(qc}XM67{Pgv>+ zdin-+nHB}$;S`RdPc2vC`Qi%`xWkX(=#+y0`5aLS>unuK(vABj=pvz{*Z(FkT{L_+ zXDDfaz0nqO@-(hd0|7t4W>hx?c;^`uUPnDVz~8@QDll!SS{u*{(SB=Tsd_l()By7f z&J}&^Rr?|J(l#b=gKR~6zj~lTT?CVzaWH)2wGHhl_gg3HTF55n2NaJzKLv2F6J$B0 zXzF!soVkzb3oMJUy2N?BNZV(Ak0XfKw}W}y>-fgPz?8f2HBQ=PXm86fHTvzz`|h}w zWf8ImB}mZb`zqny3c(N*WF@(eP0rc=I(L(u`YKv!^V0cizJk)nGdd&HR+n^DAMjj5 zE*Tk>j{xX8lizSx)upiYpGjnj8*h4g#@K2}lrj%y`5!q?6%a9qvnm_*y|x~iN=VIQ z@NvzU+rPH(W&}~<7R+y^hMOB2t zj_$s-_)f92O)LHge}_$2&MJCyu=ai_7-P3??Uj~jX`}inQw?AJ)$xqUZbHJ1_*^n| zI}LjC)-l22X58)U`Z4Kq|2liXOFt6aNUdG#)p%?CTwc2~G-Ure)E-$5r`5JGsT#V` z#BQTi)DZh?OKWnVd_au+Gx?u%%alI{j)P@=#&S;iDqoGANHfRH8Gk!ypKsV!@8tzSL%p95)O@Q>ugPfzFOH0U=g za&-A_hgRK+YgQDjVBg;djGa$BWo|AC=^mIO3|SHcWIOQn$rBapXPms)Enu7?lD>MP z!f#KZ2+2AYltSsQQbEt--sQg*(l=0*DRN)#LWgakd;eT*!uE+!)^ANad<+&*+qt0_WLCkNO-&18yL3~Zrh@u#IJ@}fhH}{OktI4G)99In?7h_L$;(HaV_?m#? zk;#8mAMz0}I&n7lmT`Qy!}b-;zcw$#O9DC#I*=25`LiBz(Uj)VR1daz1p2bZrv|==S|DAa>l59WfBdyPdCuMh0cyoTmyFXuf zE16#P)T5BVaBQut{R|~!$AGcKsmGg0C_PW_XNm~G@c2u(Rlwd}fXlAn3T??;HwW1W z=mtr92pH2vek1yhWlF8-vl}|Q0v&;9?&Tc>oxr@}L0|t6(zh0b*Dxd~lC1;(Y_;V%tm<6aMWr2c&qG06p(J9t;h0_pR2A z*jGta?+#!I{^WZN0AhVQYv+O$|LqSif(c(1>i=2oLCI!b5f%kk_1N2ZLq#?3ZdC{C zGlbGFFcJFc`?K$|;Th48>{9zElUpP!0Mt!MsSvT`)I3kftx zV_XGSV_A2Vo{*=sH2;T=o$+%zVyDjI-s-PHfiGvknR0WQp3!qf7}Q2SF<|xNGC7joE{#!n@xE2rJ@iaW}!p zN9dSD;jk?V0dcbdKD+&ae3GmWbr3kZo(k3GP#u_F-+(&+9X)9NiAZv|MFR+NL$Wj` zlnv07R2^9y9vcmK6#Y?FZx2@`xEr?MlVdU852#ZD)7pZv#E`Ve zcC_HYerxb&?JpmFByA~2NrLU(X;E6miy5aG)b*3=a8f^UZP`x=kb z)Y_`#?*0nXH#HQe|HVI4^<1`GS_;T=({ z{gq|=JuBeE`{WOPU1qHm1hRb9a_W2r7oh4UTxFx%ntc8N(UEeeC}lI+-qavL0MLVI zG?Nc|;g2ZJy*k!Ouebf?3=BcIxbp_Yv3pBX&TIb-eA3@LJ-Mm)!}|x0e>uASo+P~M zEEf?$$gakcS)a)816+1g$AK)N$p!=t3-hmO7T20L+>EhpbrCN|WCLEqhPV7TssC($ zk*-Mbh!q~T(e#}vh=uO*#yQ`otMMPIbDaQUp%5LH3pmAP-=Ui{QdsMkkM2`XkEg1I z`jli}{=5S$;!mx4gy~@#Ya*KSxR~WgNN#4EB#=bxCKyQna`>{C>!Ehd{74~XJ0nY4Vw`v}W;>b-9y5-gXiq`a6L ziE_Cn=w{1cjUqm8{iLPFFAm05>tBD`6<5?b2zJ8hQtEBtcmvRyA z)CC5Zu24~VKaa6UCn4-867x3ZXJf3Crv$G_LgLv!n!dwDK#E)ogE)}qT7UJ)k#ieg zTS8p1Ni>xJgMreV0IsS?Zrvh4J2R7o{&cw;x8K&*frOx}ZfjWNH>J+GudknkVTyYk zgpoE1sqShls&SEA-d+AhCi9kk_bgH$anxEq(d;4E9OrxwV$!Yp#pc92Z+fkHm-Jnv zOAQg~tR zZR(I=g7{B=YRoimn{5t#B!#Aq)0bQcjf@zi0*JFzaxb_C7Nll{k%~H!bmoTIAP^7; zkQCtCilKrwO@`%9xqzo zN@O+>+h<;oQqaQRGz%Jb93B7}Uvu+d{0i$TF7s{?UCm&>2Xq-)L8Z^9bz1iAXvnz+ zFe;z8Q0}OK{t^c0Kic1$VXa}8#ZxQ9g{bGF!g96rr$hiQ2a!sJHvj_|fu2Ts$0jGt zZa1sQBSME)$UkA&UddcIIYj04!<&j&o^wau;tbEJBY(~3L4||3^U7`mi)O_whP{cD z44sPdXZ`TiB4LFRdb&fje|a;<^~J0UD+_di{JVC@*Bt;f97jaNLUA&Mqk8KNN!bKy zZOo0(UQ&o6BMADMm2|`GEG8adr89M4*FOntSQ4$tP~*bj{sV>KsHq~iNr(kdV&ocExu19I+@a6&a3P(uE7MQ zwvj2b<^o}@nx1URrlndpB-7~3mwOw1A;lRLTGdfusb=io=F^!coel~hG10yW>^y%z zH5rUPu@Lj5Nb6u>^%pu)ngUgo__o%RN@rZxQauRW`emBAEp7Qq!?7#i+f&!ag~Y3iHf*%p(s&euA4itI*9qPFesyysf{OuH56%i2$5jnimRbF=uLW&0D*HJc|pXi~E@*NzJB?xC1#c(&Q>u&PER zzkbZ?zBnq;CXuji3@^+~4SLoA8fx))Us|{as639<7VZ8DqeynHdg*^?+;d2HIgc;? zY5y8m=sepavci{fx`Akn7jB21nCau5Qi5_eUoYTtHuHzssZZ@goHs8GV4O`cUop)H z&aH^h?m*Obu~9J{$%Ggrw`vIAU=2W20R{FF;O;2G`aLi+^fw&L6t+46ltarUaJ%|H zVpRRr#94ZARab8b`sU7)08u0d)Aj}U4iC%b{CKD4k%e*PQ#qQ2W4-)rT2{K0#VH_oikV7{ zc7{mIM64uhyuLH+H|YlI$;Cm=FMWA5Fn56Eskr$&-Z$@cFp^`j`FNF-fV=CWnDi#iN0&oM9&4^2 z?JGsrKD$AVgOSD$IWyB8D%MlMCpxb9WWV2Dt9<=6r^mJ3Oo)oT5-}9**AZAEzMRn6(taSLzFAjXOb`TAQ6*tq|(@PaZc1KfQ zVL7ZOyP5`J)~ufv5h^R9qOaF@Fnz6aXT`b$AjBNr2BLO-@=98`n6Iz*-%H;5Khz`H zIT3Q&7fzYmFv~+6o$ocudxFL6oHL}50(EvR+r!Q{)KtTw@vzw;PJ=bHRZ%fjhVC0T z18L%0WBjo%amLS2WoKIMKIZA0Bwn;+QapMGYnbNpnfZIv?KUkqYBZBzZrZ&Dx8NUa zKzWckS)_*<&Y8|s)HEy2Pkbo900W5veNzJ}7?R!r(*UsZ2HqC~ZtTyo9>dWYRp*MW zyq1OgpOGvnSrf}P!z^YmsUGsxzHP2{I0-h_Iz5q4Rm|U{$Pb3~smVx5_b=^Dj`+UL zl$ctprg%-^Mm~hRY$0QKQpbM6P?7=G*_Am?*?P^uz*^pr!8?<$myyRtcj0Av$}l9B zsk7|cE_-^cJx8+AfZ`Q_hDlzO4@KlwPG7$k>-DJ@$gTk+}c19qpy@!9%w^J42h;1lE@|d zN5iVf*H4t9YMcg@#F?{8)-x0mb?)c}zlXfJ+vt>IbxS|L7it@B*NoRoa6$njg$S#g z;mUcq@}ex|k7wVD5ez99`-=jY&nRo|gvepC|2(1{)%0H=m-OJHRBcRGZ%6Ocxy~Tm zT<%Su9-MWUh#B4pLP;bt3T!C+nISm>2%Mij+ER#R!Jt&6lV_Hr$ zO}z`@wob3HPV}nYhuC{Wpz!QyW@Fd!O>g7XyJQB_5(KPdM+l%lXNeTMlGRc^UAE9q z)Q+tj_TqlepUMhWIZQ$O{0wE5jooJYz?K5ZnDjCGyOVrWSaf{KG73t_ zEjkI+s^=Akx3Tyl>ucmNg$Zzu7eAaukOctbJMSY7KAVpONOuTYRihtGGd_A1r$|Z# zs*PU;>r|+0t~~NTeoKD!01~j5$iSU;By?mvk-C5xdxP2@?(PRNG@`pE;#IYW-gdK= zkxYhqbAywIb@p|=9=q{&$-zf=*O#h8>L>UyUH5LXYba$)liWjprJpk@aAliUcjyX@ z;R)tn2%PMOBZyoZS87U`ws&)I4#9s&Kj&58W^bE@YfRc-;n8!i8(aRtPLAPSqPti( z65rjw+aK+2q&K?v-}zDzTzakXkI^9l(8s#yh(AcPNK*jd&YIOsSAE;MRZ^cwiIoXj zwQ?Twe6Dkpsxa(k8hB8C+bQFw>oN88&EFng*_W_iCfcUdIvm#zV&;gsND!!yWBLmA zAlB~EULsJA)=p6?+0Kdyi_MKFWcINJveajpwg*ozGA;+eyI3>0(V7Gvz#!2%-hh_B zS(BP3dEXvu1w74Us*SD>f((6qHhRRVRR`(c3s*r}84{3ErYS71VcuHxQ`z>xbh-#Z zh#b681$jz;XmuotW~>O8L@tGWi7>%2_VtlR8w4p$ma`>cH9!Bp^w3jAY(>p%Ze46z zOgH(Zv>cK$VAcjRjjb6mF={$d5Y#e|UjGI|EWK5n@&>g;rn^=!Ci1l40L|zZMj#gJ zON6B?acZ)Ed_~w&q-z5xuk6lAJiUfMqUvzkkQAySe!bVmBq2GqBF;EJ?D9QcMMO9dPsRlR z=%geq7jhDum$Fi2d9?c~Y*99bzandhz^vV<&?sE&6_$}pkJ~>log*A&`#8hKB)&ZwP0Uj2q|sG6#s7 zh7Np}(p)p9j!dMFN0SE5da+!+7Ay6mBfUapijQb5*82+w2+KlO+2gx@7ZP)RVu+^cRy(Yf**9c^f*7gK<TFPZVZ!t4gv^0n<04n!N5dCO2@;qM=cv;2ZtYAA#*6omX|mYze6Ze+O8D|Zy>4XE2q>!oxkWSbZ`0w zfVqc}Xp6P>`cso}QVEPNIDbR;>V>OD1(XKb1J6}o%Qe=NaMN@DMng1%W#VOl5|KW? zf>7Nieg+NE(Nd1*_2t%sMWYr73-v!I_*mbv-{iKL+=^+taDbklUn=XY9(YYpR-n=| z<=h84Pv!$CK#h?|3OpM@$k;n`e0?yb8X{AWbF@%s7j}vareEyJdY-{EgWd%i+I^pP z44lGx_3l=b>hKb4lRg6>$Z2WLVh5wTP2c=@-K^~wAC^_7EbgM(t(v8-B-p(#X=~B8 zeMz=+DF+Gq19{SZ<*8?@N+arSSyj(-FQ+N0V~^(fql4Kpz3(yxd!~-Aagx6;CTds4 z9T;E=|1G=89_Zirq9%oZdpuiPOJ0$`MKjICprK>d=6jB?8;Ykj8F3nJoQ*-p4!ai z|Io_`{LBZ2<8?w9RfIUiWWU3~GHH}ME=CJPPww_`W?L%ld>G`Dw!qOQZ(Mc^5M3n4 zV-4bDe&9vSsQ-IzB26-eK&w2UC@WE*k$u*eo%!b&YP~u)ysh&dr1&ythumKR$l| z=WaiWWQncsC##+C_S>2i-w8|NhNHleX8usERYzNF`5w|jDQ#~hF-u!9G~|Me1dE~I zcIa{CQs;R=&-;Co(&Zq-z&(ico^<$83~ifCj4#yIFkinT#+T*ylrUkoXAm-Vsa5wF zisfmaK`O&_XKv<13yf5)gP+_Opu#i+3kwMj0eIZX=VDDGFM-hflVhsP^ozUuA@@x> z5!->%_Y(b@)eHtJxycQRI;#Z&@yV_~2Vr3p!%r=aD`qKA6B@g1ACS(^t1SQABkov_ zrE$9|hfPtaAQ+8w&|37O*_K+(^dj|z;6QfDIoEb`Se^cWwzs#7zShsTBhp?dVxf7_ zu2C_Ny@G8QEEueVYe}7hub=SL3KJI+6TYW7kjVWMxS#h5cIey;9`N(`g$fLA7{5^t z1_l7l_|UDrnj=>?^qgwpM12fWi!#9b$U^q-1D9pBm)ld(Q)zcX8k>a}{O*--+GI&> z+CX}ZV%hiaQJbD{M}LQ96L9p7&?PZx=l2tq%@4KEs1w7P=ruczw2!WSKpc>*hQJX2 zc=No8qj!-OO#Ae9Hwkog|Dik=Rbg$g8Tgg9DUR%LI(k#N@6pO2=4*f5gi_Gd8I?3H zfY!}=HU|^ic}J}ma{9PQ7$>7nkmVa_sNQf3WcJ@k4T=AyA!BOSHCNOg*u4E93hz>bQ(U zoL-J)f9Pi!f$oJ5cDn*RPP>fl&&Py=W`uyAUQ+y?N2+uj5?U4AhHv@Z2&NG&Vh5GX z@_oZzxTBvyAkb5_=7)-GIL?W&wh#K4>|p%a1;Y6#SMGJALBo4fNnb7j{qpZ zZYrc@_a5xgr5_azR->83jsMVC#^+H4HxU87?{7P=Pw=iR&d2$R-PTBU71L*J)%#_O zg$<{hLT2K+^TXAv987;5#1X_)C48(A?s$8o(e54m8D2@3q^DG7=(nR!o}Ze_ODAaH%ELt28` z6rgK&F+9I_kbtjJ?D?Ig@Gyjp6PLWxve>53Yx~#NFQNr0Q8beLe?D~%9C{siT-EEU zySFZG@9aoDec4JNAyU`8F@*vZPPacRe*FkJI06;lh|Le3eYvUeM7C z&&G28(kGMi4IH|`D52@pS7RnO#5wX$5+3$|aaaGg7~OMW!WtRb?)u(gXqEP>!w)2m zjQa2j=P7s`@wC(a6K_!FEC3k7NXx@EA5)>4?Lw;D7ALmCIqNinE;5$9+0sHNil54% z&=plqK&eKV25#bgHmmvVUVNhK@bfn&Otg3j93;SuRp6xF-68_rBY?J^x2O1xx5WWB zieuON8BIr#E886{hiYdDdHC&@L7g!ZlRr5v#~{zXzk)Bn7Sy8#lms*zc{w(SV2{TGoyg17m-X-aU19 zJjL0swQhT1C3D@Qe#RjMe6x?!O4?_PW2)C2*Fq#(pH#>%6?b!UgM!Hl9VO$hpTDL> zh2u35S34cYB8TN#c-`>+hx%8Qro!8a-YE1~&o!=!&C@Y6S&I6Z7-D z&-k;$pGN}B2cb{pPXnF@l3Bck-Wd3Tp@~&5++q%VuD0g9Xys{8uSK~1TFCW)8^Hl6>pTia{?IY7g%72iex&g` zMLjhL?OKQ710ae;P&=^u6<`Ebpbmy&!Z+4iuKk!~V^yV&RNDeR3BEjQ$};1_*IF|- z$CWXD1@3xZ*VCf}mvhxrWHA)LnaZcm+AD=udt6Bolv&JGa}dI$<$P|?ZZxwt(g~1o z`55~j$}9|a`0(%W4p#rDMiiPD*jT%_+Y$RS-<^q=)cow*{nCuS7A+pWcWJnZKvK77 zj?{z-np6t%?zGkW& zH5UHL2pN(<{JnLdH*GvF;O>%bH|JdQbSHbp@ZZZ18gxly$+;MK7Y%4tR#;KIj)4bA z{JUl-d|~g0(mF_g8++Udu+Q^{O`@x6_`vgsT8gb__k~PCW{0(!og=@FO?dsr*qj-f zqql{PXHHv>zq*K%JQ$JZ5^!PF;}KOe-3)?uW5m+iF3Xi(y4QN$>5HyUSG*I+AR&n# z;Wl(g@uV~mr45v-I@=r0yExLAIs`sldlte;5O^+te09H_okUyiHLM)Y7b~=X%KaXr2LoX+}wsD4Eip9{}{X2=D)+3S#Z1c{yYR0gC+M*j^$ zd?D*5pkJAX^0Ri96%Yq4kmrXhY>upXsn(h3!@lprN@Qnrv!>~vU0r#A=U?txyai4k z+l@|eCl3zh$Ll2}Yl)NfrwZG1>wwzz)^-_fsl?Lr!zy1gzElswm8h+FxE915wH7@P zjlSY{qT!(_*1Mw9F)1suKDBi#w+<>z0~ zN}^I^;a$NoK|M|oDacx`@fOv=CEx{UaIDPz3jzLlMmHFy3gcxW)K~z@NOW%Y>^3AZ zydHXz<1zK6dpD#-_V=Nps_K$rD#hd*R2zAqb91BDu}&o{^MT`4 zJedHy_E@{-)mwY{_dafAiAVDlNJIv+d@cQVn<%tfJ7e-YgAe#Q;0Th(@fCUGP<9GVYt%qo<=a;zD_=77CW zV~GfT7nsV8+AL$e;pn_L{*4{?b|s~&`__q{HuSpUb7V7PiCXR7M=(eGD*@remquk= zT@u)MWT>?aY-f8B)$Vk~j!b6%nfZ#CV4?eSz8EnOB@{Ova&tJfQg;_LP)W#@v0I+9 zh{+AnWcT|*Whp#MZWKwK5L1DwczvAJ1D0z2r7C+Q0 zK=`MFKG3k;`(E*9&AB}Hm#IRf_KmTj%FbsI8ifqyaEK*sbeBl8>dpCwA3`VPK<59Q z1rT4<@aGRHJ52n>ao_!tyK+RLn6H^l0vgV=cxn_RNOM& z8Yr=^_8cI1w0-^LB86I2?w|O%eyzqab8>2?ay7tqsc6O<-X{(kwVjO8~>edn>ZUPhZwZn zllXGiMQ&Um>SO4AxUj?At#j~@ewBh;co5qy@taTX$5`4OkjbT65B==xWIUGzG)gU* z>*jb^3mTO}1;i?GSZ*PtvQ1aC%dTr~RxH_3Zd=cM(Mvtde#lpxhu@C;7b`(mQ}}{B z#)UaaK7Aycr~}?S-HBy2{Ay-<)ZjQ~2%gvvW^y$%{WjixP`lEPKmY4*4@K?DgKh=E za!dk}9^fGC;BbGAYx>eWlDW_8#ax}sl&jTzUdJSj#R!#p&^w*^{M{FP(y6d5ni)EC z?`s0GND^2+O}TXwHW8zUBxJ**Hf z<9pC431`d@QvEDST+(+y+ne+Aj7?)pE^%nM`O)@H$ud&lpi`xwoIWkf#{6Hny-L9s z`H=w4_O}VLzdeG!GO#X0G6H6MgKz+e5RN#6BM5LQ@4M(|!-cts(Gz3tE8OEjugT#j zkj;*4pOBAE2`k%J=2-TE(;91gbdlByn7deZcM5*gYJ1p8OjVUhnkQ|TQVu66f0nb) z5P{hT>p$D^->#JSXTyHK`>MJyl#U3-8<;9DvrCeN_bdGblLGG~^cZ|f>WHB>jO`*u z;3K85(^(=v)J+BO>+U_xgC-TZkw*>6Q2T9)8qBc7d8Qa3${+Nn>-;Mc(f*OmT1)C} z^%3@9`e{>Xr(ebCT6ubwZ1`^UCK0G#q__h_Dpe*_{j4lM;1`W%;ZH zn;2+LU;uGor%EWO7UpNqUiCN|RnL5qv4=BuDlbCpS@d zMi&)#*c7JlXYoas$1Axa-#e%B$eTg0&i_amW&myK<((^yfkr*1J@KjNH)3qUi=R() zE;WfF&R-X6?Mp}>L$J^%=FLe8W5x|>j)K_dk}-vm!s-K&ycU}5P&Pt3(NClUcH)kW zZ=TsImHR4Aim*FlcmhPsSgoDnjr4VVyf+@Np`if*>@>8?hX7EBP`I7TkBrY5s@ae> z14Nf@5PUX95Ybip&z-GaL#P8aV4b8b1~hAphl6E?4TU^!V;44cnt$T&o8_59n>Sb# zwHH4EEFaFddW*5K=|D{xWZ`m%q3`9^HKhn_6lCOT!Q9?Ie*boL{5A-&< zerZ#n{G&IV-8Z{!eU;E1ssHJ}u+v2cwjem{?WFrHu}rthXqo2(`QR~I_@hn4nvDG6 zp>M4wW;b_q;+v&uvG{t5b!!P$e!dSg&Ay}9TqLWPUN-^9`}>^VTSsHBqF|Yop$Y}s zUjN=1IEpisr%gJRW5d`W-}#|``C|fu4A<&nlFMiM^Ja=SYs-cDl=*`nTYt-1@KHMMpw zs!#Ok@Cfbf?v|K>`FWpTY{gLfNdss8&_Vj6OH|9tKm;-D+|g0}iyQ}W_N(;_meWh; z?UVR8?&-36gs@;w`;Nkgu*9_!x0C2B~pSln#MeK!k>&kq|4Z zx$^wkEsV4tD6KC|-1^xRDE&W+Ck$=^0EzTJxxm{diUR#Q#n(r>Uk(&Ka|pH(LV%M2 z6lX6>FQ&N=MO_d?Mc5oAjofkz2_%M3CXzKNba~@%I^*c@1=h|ULO^6O)#je z8TYX2Gc}rQ*faRSEq!_6Y5d8~%~kVP5jnid&gsrU14tuXB0MSFDutK^Z|?QnqFb_a*wYvNv7W7ei_$tE- zF?ajFMBX_b;Zh#1VWToMGL!($kw8jsRzkbQyQw>r{kcqUjUk76WHgk5yk5HLWH!4G zAYU{dKnk)#WU{o;M)vew;?X|(tL&Q7TUTeidr|sMG(=Gh^t)@NY-K_KI9^UDh> zN;umN_M*&%&JiAd(*X*D3i3%BYyIDjds!^^ZdVR*AOjqJ0q>N`v}*0@<;Di@)tMCLB$lkV-*FH?HE&e9phC6mx&`4y&S_Oz zr!zT>S8P|7aITwTcPk*0;LhRTxa@k+672hOo|O3-vUz`SqSa94<8jNtZ*ik?B8dd8 zqg157JTEdTi*-^$14WVY$xHs^EBzXC*7+)R5?xdLr3?vBZA{F=!vkz5hJv9qxN8sH zBzv>~R;o6J*g59Hf3B1*L!(8S`)>5a7$YWqsVY*@K`Nj{E3BnJ;4G5t3 z#57TvwJF0Y}U))N|~^GTI6@({TM{n8{e37pkEqWpTZhHBaoJTZ7#^# zQb6W_g-%4tE!o_*n{UYG9R@|S9!A1u7ga}K2r7zs5Wy9eU zaxt|wdig?{%)!^Vka4KC9)3lvlN7}`HDpys-!iI_d}B#BCf%Ku?}oQgrO zWq~oJ8Uuk)CDS`-(alOmkK4LXT@|ei8s(t^AonrdJ1PSq|6uLCPpF{xnUnaqaHbi( zj_q7TotLY8+Gi-uQcu|;14In709h@O5o&(l_EEnFAZFeTs(B)Px`a$%{u3v-{9ts$ zp9LkIUct7ti8i^6WFQ;>;GVHkr(G%`_3!D5f{K1d5xcpARcLEKn}~_2*+-s?!G<$G zD|{_Z(6W=rv>~5hZ)k-8Z&8wVjL`qm1YxBA#I;l`T*y}!d8qM<)u6&ahyxF(sPOk# zXE~8LgcroOM8~4Q%1e>t#Jr#ZzUKn1Bc0$k$j&YzRwy5N4_nU{rT%ps*SAGN?mSxo}s1L7VbQ-=0v zIgvHX37cV-vlKQrM5_#z&`xgszBY)nrk(y#RkcEe7KP|>+^|HalM}@(gkh5?)6(Qx zlY*W9SH1Xe`0*cM!v@5Fs@>oqH(P20z!hs_R8{&*+TC6XwrH&ccA&P9to?6Jxpj8C z#V%$x0h9T$Y&&&2AjO3fY)+d1S-)_K%6RoA> z^dc1@8e?$*zo!t27CZr8kp;I#ev3l10w{w)~p#g!;B>f6;kEqvR7c=ne$ zh$J8cEid1vLXk?FHhU8G>)wz;ry3Ppe`1sEx*V_^Gwf$L%%CtfI*~GEWMd=O&5=*K z<#FninbPwsuztD4O9tvzYH>-0aq<~M5#Nw5`YV;(vSwp;8c?i}OUGO^vmhf#H8A0p z@T{#!A-BLG>2Wje%%cA#098tbjnyBq7t{3#`lA&!L5#0onp-MGM9Um&CH~cRPZvA- z{ONp1=@OxiME9&HodK!bwSOKRM%w#MOe;!!dv5r@o;h@hx{5I!z9B@Z z-#>=ucj?98k5{z35DDRsWj=#hO zBe#y@?D#2hI3Glmw!hdRK$ql_5Tm9dK<@J)+!k8-0E+X8U^5?`lu;>Q_)28^Ug$eJ z8HMa8aFaGrI1w6nWJ43ecr)d*4$g49G`E?{`noSi%r0S;4E z#-jlr?@;~U{>c%8Y59Zq(5agtLM^ZLO!xPnx4}afcUzENAUoUTxK|hq1<1K|JPKUs z*eH>8NfJY!5xA4qGeX13!U<_B@n-lvtGB7Cmd+rmV#LjAj>@vgbL5o-h;bg9DZ=`K((w+2luzlmRw4nK>XyETf4Jk z{ISxcC8|bGtiO`+3+GZI_y1hV9I^F2z2f*3m#DU6sj%BpVXq@x7M~4h&9MMq$WPXq zKN4-ULZ)CM9N*MVJK|wImVKE$4_HINo_NviV({%?V zX?#g?;MWQq!60T5E;M(JhId#&v!izM=-iuKGyEmCX51y z7S#xc@u%i*_2N9#$q~+Ab)6ja16PA#X<6;cl8xFQuh(TuT?hXR6e_>MyzhHgzoq}i zXK!3R|H27tJ9^s;eTcQGED&;D3FZbT3196oeaOsqd+^S6NwAtOvm1rAP2KL5jF{&D z5m6zG-7Oa_9*_5};kmtHC{1U6pQ261{O7FwM;_At3m>FunJ3Gze!!H)iLCC27A3q< zC|1T5Taz1(Sae}8J)MyhBlHO8zWEZ4Kw7mU9q7jtJU?aM7$2Sewtz`ymN_X1*J=&^=%9m) zj#6-L)zCq@$5>EJk*So})3rYF5u--0bwprzWF$a}2wL;ou<=a}-HIIH2$Q>#%%LeB zDUa#Xu8UdVhfF98O3Z`?JHQx#p-b8P%top<3xQn z$3>+_=Kll@)PMQ`E%_(%vBxMGDV9v$WBHkyclmZh{1cj-cbURdQINJj;U9@zKMX-; z?98=jZ$M>Q)fo+TtJz{fWV-*9tZJr`JRS~KQJ_(E&mn3M`-_C!A%kQbFQedc-gh{@ zv@$A5SHd(;SbR$C!ia1tA7%|Lawr_cCMS!(y=-vhk0>Xe^@@xfO~gJvz%jOGvdJs? z!-gBpn<7^4RFS+lUVm5@h{l%Q0l%Cz#s2GvNRdp0=_e+JSUP9v4iLC5aeE*HXzY&) zXBJ4$c(%WfU-!D+kv+;b>!3{VF4OLi$NZJ@4Sah7X0 zwh)z8giIv3%a09b5WZT7-1W>`bUiRQXgq)-q(r&s!>rfjj>@jsf3y34&LXrZH>E1z zHaQJN^-nIU+6BGFak(?M-xQ<@utCMS`R8?&Zv?*l=FGzRPCxxY(xAK(g|(i5ZeA)V9$QS*pezU3Z?9iQ~EQpe=K;m{eR#Xn^jEw0Cf(QxYpJDXTy;J5=6M)pFVX-y#-VG{d=+XtU>ng74lb zO=T&0m8tt-6($wD8La-il54PA6scYPRn8i;ej0KX69|C;nvMMuU1~bUN@f+PfWG)b zLQv-G7sJOo$R2Cy5`1}nZa7!>cTg9`RB85-#`CR3^K{3*=D#K)G%H{PO_ylvhv6Z* z^GHZeZUCcd+mt5d`yeoL(2?#P#TmC~9?-Eh>=;ZFR47rF3A**%nD;k(LDvs`2Bn2f z4uOYV`Hb3C1aPu)>qI+@C}0j+xKGaQ1#BD^x|xXCu~r}S(`=a!=4uW%v&u=*s(~l( z!0%Sm95Jys?OUoW7U)whR*6cm)xs-|CW7pm8u-4SKPfI(2N9=n+Rm3Oh8`z7j`7>2 zoI{I&fvgyQSUe1V0o~9__t(wM-%F@|Uj}Nrzdzn|l3;Ui2etmt;0`6taGU>CiuzI9?)_iOV3A(S8y=2--HC>+=3C6yD#1gp8@jBF&TP zo98#e#Y*Em{i8(Wo76KKV8z|lxTlojWU(VD@nlUwhdGS{@#S@om7|l(Rft%~@uyu! zN8y5NJzJrCLFt_WpONiSn+ngAuLaLvKv%7h&(eI;*1#)iC!=x_FcuL@GD+{A4KtUb z90n84SX$E6wIM@oD%I{tW^QFXPKrQCd|H$1)=Yy)135l88`Tk-aFr~rESyLtDK%rE zS4?VzTJ)U>6%idcXZ~v-qBuuyFUZDNwe9#4%Shc8Ii!Z^a2C*k#%cpS{l}7xHR~=Q zYwCluyhVu5|B(;n&@RhF?{1%+AzesgjcHMv$LoDAcgqpfr#Q(*U36rRtC^Qrjzcuy z;&4ba{Nf11Ja>Nwq9oy${b$P{{;u`CC{{UuJ{T&N=7g|F{;@0w{QlS;A+%85Z2X@B zK|fg{{sJN@Wy3*03`2~A3Q(HP+Px0bsJLVXNtk&~3*992`)^pbt7Y=r(DJFUFCOOT(wL?zw`>YiW_oU{*j$9-RO}99mJhcyzu6ST#3*p2_5V9OfMD}gRt-IS?9FX`|IE!Zp-zDT$Eo&>4L?fO+tb_{%-29lkL)j)<6gH(&U(k<5O) z7s`%{Oqa|`YWurB37_jOxMd0zCSD+#6oNAl(EmUEAPV;FWpf~!b!x6sfxzq~?iC2+ zvomh@<*Kxq+Ef!M@HLz$jVgGjk$r@g6qIb34khkfKh~J7w2X?aoDQO(e>6*S+x82FeTj$(nxogq=a;LcXy|BcXxMpgOqfa0@B?f zE#NzNj?eM=t@ry6ELiuvZ8ITxtHm^Nd9+-$XXokdxl}n%ajA;d$x} zc#MX1WKQBdzw1XH21ax0B00$S|9f%?Y%s)MNtk_ykJA1O3fy1gleR (8?d%u?u z`iS%sc8eM7fJEuN$cLo}k9+{ZC8snOI*f|WdHF$8rEWep?)wr-ZdcodXt_9WE-TkT z5E|7o$ArUnrhjD=LKwCs1_IU#fXOHkmRW4HNHDC>{6!_#QXfFc@T8QYj%M0;oz2%J zCd9-R-yylWa=X5CYVdio=k%og3gK-_@T8VJ4d9<%JXouM>kwHQ%{pSQJ;c#}i)a0E zUIdexL}~CF?edV_&A)BvpY(*lp{qHdnlz`205)s@fl_UFGF*~&%~y$endQ$znx8K# z0t<^+2y`qK>KAZES68DRS7$@0m2Wp4NLpPSI zgiY2(xhYT8?`+5YI=>=wrT0$)!qxoeF*F?mQXPo%>Vzy*moIbKSu$ZE@k)aettDde zW^T0!H+^jB9l>)yK0luDTlj)(Zp3t_n?umW2^PTMwc_@Mt6L^DZuas+9uC+0M*BBO zeHhN@dp<$OJ0YGk*lwqT@Y|^09i1&S9ZH3xS8vT+tX|Gdt_Z$#rEe`-!W>v;O79V` zgNC>}m{0c6sEuW}UMaifjW_N0_G94zj^j99&ar0PXp4W?N0HKnHvUgt1+x@W{aKBax=tS90jdBLN(E z9aPmA5Ig>4k4#C5r*Gb4gDkuMKynJ8Vik)rM#TV~}=w-x+-BBj!%Z&fB}BXwZRBzM`*5 zwx3{%c`w4YgkLFn7d>BU?#+Wbh4+p{Bpf7kj+j>A&eEFk1YWh4%zb?Ypx3#qYsRu@a#*YG3pXRMM#bs}fQVBUw)zYG2G9Qv zt%_hlLrgaksacCyRD*haJANt(JrUE7aE&91fWB6FvcHc&K+#6S4?sBYY!>(*4eu?m{jzo-gr2JGdE_;n)X9gy? zjU|^fdhdot%tKnEWC#+0hSXh^Lt<9B`KQ(KcKE zaB=zviMLc-R6!RSO;&UW+X^EDT^$=rs9$`2+1?_i9D6$2TC8@rJw&2^K-)o$1gV#f zy9qqU+nQQWo`q`QlmBraa2`0RAzYk~m`Js?K4igW6>VF!+$?wZMw3dZm5cBe3rM!f z|EV74+M#gTlczX5Sin|{hOvm$9AXkO>lBnB-KjW{Cw4}j*>oTk%fv{<>Vpz5RN>?tPr%zm2 zv>}~_qi%t-xMue#C}5apnsbIeyoBS-xlQgb{uUp5r$9<#>l_8-AwJ$KP%=H5N!~G% zg@{BgCcmAVlI)N&%E!&$V>ue5V34;D{1nqd^WiGng`U~Y0=5P-zxmCD>o9KFlaekP zCo;K+3c7IM^Fz?_@xe?73jouQHtrwixARrmSqe4m$k8>v>XwpU313@7|DKORcVWsr zj5>D33{wkhq@U5rr|M^XF z{ep|?cc$&=U_?{hFDIVi#xom6F8Tre1_7e%r;N~Wnxx4hVVW%!`6_;yz0a)SVR+;H z#1djr>6>0twQ*cPKkk3WKGzIIt^QZ5E zu~3aBqRDQfh`IJ=HQ<%W&{ZMz3(^l?)3w5Z#cWD=zFfwdr&+->K)~H$U~ZHNlE%h# zOA3us`I%+~g|A6WzDlP~CJV3ZK?Mwoo9*Wk3asDVyA&AZsxk+lD0&}u{tRItz4eK- z)@DJJpcY@Q70P~O765BbOcH+PPl-oOSa2AkKLr9{DY8y1w;E(S-&sFFJgs!b3(*5_ z#u$o=uAe#u5~~7x!VS;uh+K>SY3se0oKIx;HH{!Vv?`KiP}k5 zl}=L(P=ru23g=ldmG!ajToa~Au9jb^%{MVZ04mzp7JxS#(9=ysIC36>3xz_$bLgl) z6m3gbB_spWU3kC1iFD^bPTHE4)oqOS)rT zG2Y8TFn0X-VHPH2QPBW$yV!@F@Fm${AzvRUGq=(aPK~iNR(_v5U6JyQ z!-tafE>mU@wZH@U~R^$CFhj8x05Y$4uUi+cH%V@=qGg)+*_nl#SiJWm0gv z>^6(OuYq4B-5x29^DnSXG^x_F??8Y$iYLw|@yd?COX|IojpYahXtb3N6G*vN!k>w` z;lZHppa}^HJFEjj5E=LX7ux}tXBh~v&Q*0uIje!JAFBx}x=dhp!`J|$=kcV!=ALR7 zbeFS8gstYju;@Yn9v*1!upqt`3FZT~rDQin^Is*x#Y`~(=8wKmd=f|6Pq$R~h4Nf|T2#>H|a)~n!=AebvT{IHWR?cAAkdT1|u zCk17~bRnEo>m>oPCge}`v1yyPZlrJ@*1bkhiIA~S*&*cEXFHV*Z|V&UF!&(XCfo?| z-!9tZ-9N+3w|RPY#0z$@iN&%C|^|P=1${ER!5E%J!Z#cm%ZToCuFDhJk|Ftl+ryL(K+u8fvjAEafr1U5e&d1hU$3^TXYO== zNp-k<%YM1-?uJ_Bx>s2Mf!65Df&)h!&~XWV?TrDPW(h~k;4efR?KbFaR$8)ELxk|r zO%pBZhdV4pN>*=;q`G)j~FJaa#VOQFj7X;d4?W`%V(ssC1%J-;n_IO(gXwjzm#(A3olAz<`;h{v!7MnZU%IX+ z17iSduSj^%e!9>!r!ZLB>TaTx`{8!=8>GI0H-qmPI&G)mjxdvbHH_X#$hc_MYN#>H zpP3XurqqTmG|DV-e2V3b$O-fGOf2XL|MJuB`zFNX)xBaP6IH-urs-RI$c<_f;OMsV zZ9Q~7xUYddUM1L?Z}7G#0vaG02-Q++Lkufi|S)p zwZL2RGES4NGic%=(^!!)7C^Cp@}lfagp1+`K|?@+99FEc3r9+}02;KhKlerV=~|mA z-Ik|ZQ~898x-C>2lq-*_r)@0C)h@-lIW{Fg2;UX>T3zt$+IJ#1YI?Dx)@{Vrdqd@- zi>K{q&GEtG=NqNG0x<;yu-1JGpkI&ww4xL(SzsZu@Geo{2xNxGqmR@>zW7h49jHkP zL09s*%{EyNXdiUB99CBYt@}8Rd#2}y%o-{>wy5Cm{KG|zbw~2K+YP2ZLJ>Z?<&32Y zP4z&d4IWo|W8e#coXVWWSU%7|IK*rQ4Iy(jx2I9>c56Cf;KRz>B(6ko?0B#me?G9> z{_YUG8V2-#-fwIbt~x6`sNquv)S6JMTesG|1ZzIV5)wwtmT1T~SK{Mo0)zzKUa%Te zG9*y1#VQ*!pbW(*h&HLN7NTU>aXtJMUSfN^45pyC^bTur7XZ4;pIeU{D{r&AA9)q{4|*47@V0%Zwj4K{HRuo zg3}U?xczc9x-wNZ`(Bk4RC2L{y6T@+3Ir(4E8o73U35>90Sw?SN*6igdjPH_H^WQn`iIjHT%yJ$lhmoi`thAcHqGQit4sg#goV1M>2VYh@Y=9y0KT*0mqKpG{9|DA7z1$lt;6$w8Hdt5S|hIPuRTKc2yLYmO$;?M6TS9KX`F#8tmKCL`8$^n0F z&g`3ey+w-5XFGi7)0sS_8?*qCMCub`*V5vX+=3>h=mzb(PoLEE9>aSBWM)E)TM$Dd z38Y6T>@@6gkaWn{rgf3&h?L}Xa#{RdDSAJ;pVP$C4M)A-(91j?vVBZ_g)Y#mkD=7| z>6(vz^U#bfoM}g!j=#LUY(7oAa~*zmmFH@42#lwq<12TyOR5B4)m65x8yVKQSpbj^ZT;+PSLzRAWd2B)m9eNzP{%Km~BOW&!(SW6hh#YH*zD9v+&e@7h=Jb(is;=#K8x0Jlyw4%Mm_) zQhu=v5OLl#stQ%ho%(OPF0Z7>_@XduJAX0@YTAd{=vyFc*1L+>R=+bspnG>(Gcp2hDL5=zcC!zk$r*=T&cn*H7`P)H77};RVd0RJf9iZPWN1HJJf7hFk}2>9 z-}*bcZ=Y&jw-@jWCvO#~~ zwyacd6GVt7qK>4^01fzAQSIyYDwN0aLl51wBv-XJQ91i2(^D8^@)9w9mXd zr52z5_W4$I@TSOmF3W*018>2gj7wZsIeaDaEXqBrlP;PjHDdrFw*PLp*I$_kpg^Q* z>PRog{&{vvdqb(PUTLPENh-Oa%bu*Oi|{i?O0)G^UV4~A`V5+woCpO@==PyCfH;{H z5HG>3%D^rCq(8Qm%3EiFBb2uoy5~@eV98#ltWhIkoAY=y2Lz>68qLu;qAOaNjMzu> zRaq9ekj;wZ-DdRx-_?x7fXus|Y&B$_^Z~4Q(SgD$q&Nx?D-t;RR+L4T5Zqwl?{6(T zREJM5^9m1hO)7hp4D+R2*gQKE1jP69sxq1@l(X8GyW!M&Tz^KTn8>-4Yp*z4O$cpr za0cODBeZB$Fe?K9QV|Sq>T*wOaSGc>0FTaf{z(QIfiKZ6mE{C7p5EA>9ecT^0h4&I z8Yc7NXcMCM?&3&aqM=yBSu+@6jUV}t=;R;p&ubn@DFJ~hldb&pMShRYiwmwKy+&1D z=Zs%?6O}0~Q#s5t2heFIe;(1Y&(Y4Q$RQd`YY-g$Bx?z>E7T*R@iPrKIb$ zBr+q&^#%I`u^F-RN#$h&;yiYQ%=qcf?ID>`1xjSLmlvP;23d{;+V313RqLbY0jF!= z@uFy)yXqV7D>VS&z5p~OlQmvwC?U(Sa!*CnM@m5E?w?HjtB~H@Cj5U?LbZ-hU82^6 zgdJxcWoIq5gq+i@bHri@^#j=?!N8E$zij9erYH{7mR>m4NGZs!&akUV0Wd*5{%;o+ zLXf-s*jhbR5R-CT`%`bhO62FBW+|O7lwSlfk)4R1o+{E=o?pgDG#VVbNHn~>ybglC z{*cUMuUgN449s%=dE;kiFT{^L99$1MnkKNJmkU9GY5AVhfpUB6%Mz>4cSKJtisOw% zkH~R2ut{H#&u$%%LzH#3je5_h#B?S;VT_ePE z01KfMb=>5nI;iK)^`7*OvykpFf4Yf#^bW@|jW#fem>{xL`&Dd9EtoHLQiJvYo(+Jb zX({aHWq!enVq2#Etx5Br{M=ta9Kbr_aFV@&HW%9@kt@-$Hb%q${0kXq>9*L(`rw#? zQ`O}-qslD@oFESf$}D~QG&r@{HMtu(Rljcv;Wr}N% z4MTp+99GUXCXESc+83`Lz{I4Ue&GeTUvJU%Ry77$yW3b5wXJAf$*XCJWJ%fkbwOh~ z{;sUD3t*4TW}q)s!QdqpZFQI2OykxOVAn>KYfHv)0TNMERzlxBZ2lu)@n6H%lLovq z_BY5Ns1|MkAj&ftahbxD2ourWV0$zFgu6k<2Fr&wsy;YL+B!qGa?bhmh#|pg7kX;s zc-Ref#xDDb*ui{3?c2~YRyu%nm8_o7`}ZB0WESdeO0wmBV8e{^^HIq zEeqy-f6oAcFj+ts@~Q~Y$_z$%Y`#*LVup_o8byUQB#0b8bz-8pa&0hEc0}oV2}DF z5Vu;1Kzz(NLRp}CRtmN+`Y@76pP|4r@?Y-kf9hhHAbxz#;NN^V!QRxrP15Y1H>hg@ zQljY3El>{)Baz=iu~s~F4zT=91{(K^D+n)%qz3s|!uu+M&>x-Yo%;g8!x{lW9A!l1 ztS=0?8NpI=U^cq*=NzlY&mS^CsX;+_%+R6l)`O_5+?!x zyM~~$i7pTVp21Nld^>Jz*-yneO}4<{5;8 zD$g)}B)`<0ZninS-)TB4^#ObkJhAk5j-A=rvKqcG-0BO`dr@3rf5>#dIdvO>&~C~7 zjFq%WuC5@S{cc>DJ@$QfQt4VCelbhZ!u)=3;+XCVYRuk8SYWzrP~FERDjB0xOg&%z z%$daLc4jF=v+-l9JDJFK4-ms+Cg)eTb>pl(q)JI+i4s}BkB1HjCo zi$h!;06bre^pD)jKd)2E5}i2JSLZh1-xy%aCw$4-+$*A6dhL$jZOqkMJ1$m~$ut#^ zsvi%E8fG+AW1+zh@j+?>wzcxm$Gg4srk_MAYED#=%eH08P`$=?UzrRzyfE zWFAppfmy#<^49(hb9NFyj^X_`03-C;dA~CCALP%aHl^7$1=)n*8O?eP2Xc*web0Hc zDxGqjpzq-Dhl4LKE~XTS`z)ApUZIT=D?mhlK#zGMyA)rHFrB zwVS|*;{Xas`gB#inZ}L+t8bkLiJ8%+GPw+)4>>0bXZ&dSI6wFeN0%!1S8Kr!OroKQ z9%vg=zj6%!_=7T0J>6wjpwqOy_<4$z&^uQFMS%;gb?^|Aai0 zb#*12&TEKx^SOaA0pMX~j*if=z6C%Z z&Bq3|L!c= z2|?r@UmcB?mA`j9%%Lgstnu13xlQRgaOa=%GZTUJR{g+5CxhwA093r#< zjDj0{SFV1MB8eMG3X<9%ACt49TE|d0s~-n>JU;_+V}pg_#zoe?-5ZCe!xV&1Usu5nH}_Oz z+LAYNy*muekLKpaFNqu)O{4&&!bIwOm0S5j*wCDowH(oQS{Rj;bswgfFRTsoa~HDR z-d{6+?1Uvqp?;|_u7E^P>7mwy5)P^IbM*Y;QEmwl^evRM>lpw#+O3c2*5g&wHc?%( z{a#@*D8GYtdFq5O%lR0Ri{DV%hx=yYfSN@2FB3lJ!?oUOJSE!}nNN>XHQ}AT?Llyu z4Q>zS9@k+|l^vz-2lnb=Nw#~F1%%xhHTCA5G#-i}lh*K?zXP*r+J0Viu*uM9?G<@p zBZOUe41k?jHTOwiUh=Pr0r~-)n6Hge&gP#EH#CBJK%c9N%Q_hsfR*nNTdb8|e&$A? zH8gFogoREms5EBTdFd#hT}`{A z&Q}_AnZ5$@A*wqFDw#a4(b}@J(xS1-DFACoxqyWBeIkoXd6`vO4;U^RrMU+n{_^`}%P<`F5)ybInX^Itl{>S?99JPOzt!dhVkJ~pkLVpB zoL$@6y!@^EwojAw;mf59piL4<2Nkw^@GcLPQl4Q&UHFeV>uT8Pc*q zLuYnrKxIAYY_XDK%@nFVSZN{tO+s9@$Y%$xL`1V?R!eizIiP^qI)%@dY6YDM@YJWp zbSJhfze&_xU;e8a{aat&#sWDvG(&)4=qcIZes~@z@LXJtb_;M}z2Gn|_18fw8I=^3 za>q65PmnLfE}m*&kEyNJtCn<&bf~>U0~OSZWfD_}E{~@Oy|w_O2+qn|tZY>OVW4}^ zcimOiLZZdY!h8xzp>mq$oBKJQ^@b9+L@#dw`Dm^th1wNNyda0$P_qm2WNU!owXzE^ zW6)IF&fr#l{STKgeK&_nU&%m4RngJ z!9VCGZYeuS<$+BdJ>)>=MiY(RaI}_VX67yW^0`M~>p*DARVwl8NdoL>Z9!Omc`(+|7Jf z?#7qaIay*iO09`=n{oO_3jmYb-ixIimaM2L*PTZ3Fu528-C>}3u4#Y6Jbe2n*;dLM zICF&>r>iQpXrbr#REMdjd~RmPVC8G{>-gpBMj|3cY-PJ2crDIKj@+Ecobs zDoEgEB)=e`BWelx@r#w3V8$JRa;`}5&vJ8hpHVHE`H=VD#~A$zROFND53kP*tE}Lh zLc1^Ta`8)26E}an(dLvwkY$)$5xt)LMz8c`C_)Ilv#gWilM>wut}}Q$QP6!7T0ev1 zH{%Jd9rnHC%dHfs&+iwGo!Ukdb(&!>dEC|axVzdG`?5w3mb6K7;zK<2)tuD~Es)4q~M<}=1g@a8F$$dEqP$C~H-gh9|w=XuF zjgOgoJPk4bwdu5QGENJRebpauh={MQZhBC_guuD*nZ!NCwZOi?@Ze)QRM1aPg{)ZS z9e0<{Ye{Qwy=olINdY{m^kLY+RZ8D?#-A~o+Nh80V*!b{g6PCHr zxz*@ywWhRuAE18$BMZXEU?~(!Im+%D+1a0Vvb^c(ZHpS@Y zi-{*X6?QeGrfC0c%ikd4P+ph8Nzw1S(3uqjHEKvmofp4OvY@<_M81an>Nrfgh5&>3 z=nIl391aE>YVbuz;0;{zSAUE*aN(5U`9%4l+9*1LBF|oeZ_t$l+JP5}1-^>~@wm6nCBN&rDeo>csVYg@XXH#81sQ>& ze`wga9&B=_D|CABxxn|+@Hdgb24l8^Iq{%YO18;}H{lYJ!(XFtXNXzDaf^F{vXB%@ zB1mTUqcqKGZ&d7)u=R^&FLCNfgY1~7HLJaLK1@E>D9lkZIui`TLRnnqp%@&lz}YzE z1eDh!7cK`WpoE{SXt*3r#PX?~z1nQQjbK?-}15)aOqP z?EfU645Mxm?}+sZ2PqAxo}_vXUfa#0J;?e|6vFLTWSh>f=`DxZxNC7+yk(zMXL$ti zuttA|ODXI)<*zKmWKBN%A?gg-&)cFuOxi!FDOy5K)w6(-_dukApy`2Ghk~?(TeYTj z7Zx7s)Zwq~nxktv(V9)hV53wsX=@7~8A1QByRN^-q-yew)4brCkhf35 zEDKqYpqY4D)jc?iTp-~2PjUj_b_PM=$(a6)A_w+1bV|5KQuA^YpSM~KMrHBcT(53~ z9B()GC^#g(l-g;|En~07qBQn|-8U`~6{h&N+dhv;f4!n1pW^8qZ=T1Bk7FrO; zyXrt!&UYLEM&U<}cA()br?NH=O~_CgWaj-bBUQ$b2) z_c2USP^G#E3N&YJc4vX}hQ07!=i97g?-kQOk8i-Y62eT>cf6w3+4ke ziAadRO<1#i)vU`km&nuGJ}%lCEGMd|k9NGJvBiyPwAP}k)bREkGo~uwPI;OTNwx_| zQQ?%@{_i$^9f9AiWY4Z*sZ36VFag&9T{VgBJEMqs7Nu4PC+|?Yb=n$FzCroypiwOI;+DKO&>})M9f8o`_mfdBv%{*8 z4l@tO)!3YjI#SnP9rl9>b*;Ye79MqAa#j}sr_iRpBVO1CGwJ`&q53@^DJb8(uV^Qg zEvEgFQDUy{gbgT|uj~x$+Sp0RYVbZ6VQ$nk3Y`qUBV?f?3S2N!+<#(x=p_CG-Ty7gb4+l-xCUCmCG6{Z_=t0u{l$( z_LUrH-5D2{*mb7EXH99uXf_P!!ZM{ZA{x5ax&3oK>`;K0I3;nW>jr;lE8=u+o;_4( z)$-fEMqP>39}53OiRnB$X0EPyc{=yOMtIqdPRx88;=RAQhZqDe=CxswOi8%ZBabS~ zXM8-se$<8tfK)w^tFJ?^D;OLlQgFdyDVlOJg7SiH_AFPhoX&W*Qop6vsG{yn$HQ~{ zvr&LG6W}51fyHZh%fOA1-DlL1KK?ioR@XS1D3+>DyJr0r!mC~WvdmCke2%a51B$R> z*|3W*IIz)Nkf9e{2Q064D+bCH@lt)cKxH*p1u7LpCaXoDr};VdF5Pnec~U(v86xDJ z(`Y$eB;k8^lGx@f{LGvJbr`Whr=B<3VDfTgDtQiFd{mX>AChD779@H*BGLvrSI%HU zsho9oGV&De#YO|txv}sY-%u+2DCatTS<(YxN4uyX7ip`lEX^xxm_4$!@-}4YyhWE+ z+k_@GGV%krCVLtHiLmtq>oGR|@44uK&_MNzFbvRck8B-dBR{ji=={EL;ejGUJ-DDv6jb+MM#rG_Bo`{j#9ZIzufBBVWx@a7XcrW4=HRowIRdk>m7&LSHP7 z*Gx%`)>}#iBA(3;KgB_bd^#J(Ee=c!b{Y0T^K>rT-frnF36a-EXj#SRkF6p~2i*3^ zssA}Bsh$~#7e1ZH{BR4W3pwKUfRr7?!5R1YlnBCsJ@ zg$-nS{Y8eo)s9QypN|CDE}vxXPm%p9p_S(AE^=keo1(ouULQDD2dwXP5Y)gRu2ki_ zuC7Kf1q2i}hNmKUWb-UQIRZug?AK{Nn4Lrw;uJoSc`uA=z0B8b)F5dl=0jkxK!xJO zN?m!Ck5H6AjKA|qswdKSS(8s7noR^57Vo!BlM<-3|N1RSk2#`gsWMMjMZyAt-O zBX|mM5_%$R^xS*zvwLDhy&(>|Did;0lGM5)Uk}Qk1Ft1OG`pTaYpXPiUT(*qzID2@ z;qYd%)CQl3?;*(m$DSf(jg}`#UnzzM&BV;@D>Y~l8nFspLC-CR3h|{Nxt?H8{ZDK6 zfh`ig>28?N!!oUr=5teD$*KR^x!gC%*eG*(-VCH`U}t{LDDb0r$0ZMxXtBu|rtp8p z@H@`<^GBwDuk~UUNLqs#fO@cEUR0@bX#3X({_{tVzwcOy9R38u(8!iVX2oK!bX8yM zq#vfx)jz)R&mI3<-5TFRXdX1oP$LBL&>IGGHF$6)D1$My3!7Qlko3*7-37;9WrOqP z#nI&dz4AY%(H8+CoZ3Q8P9;EMwlMIXb3KenHm`n@+#dZ;tn~k0*Bb9TMrZeWnD3kd zG^z@ATh(%QMnn95nEW&Ue+KvaD=N_rB<70!y}uV350HYtuM)EuETC82(3&Pg-kL*A zMzIy0%w+v*@&3AaIvfT*8gavTK=bn1aON+k`P)h?GZP&Gfi}j#J2nM(Be0?==A>1p~G>5G&_;*2b^~jm}kdweHjvDQ>1tf^393 z;l%~dC_-tD+Twk7>A05S^Le3>Jxnc~X*0#H#z6@uYS}wUT>$7Wz;rhffVqo@*bR-6 z9BlYyoJWe#TBn61PW)ti`GGpu|F)h<8!M2I{~!iJx9X6~(laS2^=4kMl9ELwc4vEa zVaR@U0MzaH3dB-X9nZ3zcK6;z9@XTGEhWuJJuSSW7m10vcZhMR^F@^0+r-hUZ+5?wggrvW%C3utTMkS`9ozr zHAFjmWr6~@!R>^(qd)eal-blinOyE_D?C2cV!2jUGxBzDVbyq@MSXFc>Nl1z&O$g- zO3mNm1w12kp{?W~1|b%ehzlu3wDEN22rH$nQ#WX;t1Lz7EDO`~R|gG(dg!lo!#yu) z+PJj?Gh6#Hw+UCGK3O_0#;)JjJ_ID`8tKtdIr(U`5k4D+Y)`g6LQ&!oOU`oqgdcrt z?F5avCKaCSFGQ=A98sY3#K6BEL7*LMXwdR#L^T9egHN^_g(pTW%YeUFB{3APXmPS) z2jOS{etBdk3sXwE)7;7875JB#pi2;#VkFcN?KECX-;0xQq89Dc)GZNO$B9is$-jKs zCDpbMs(J4~%MGqulpa&9k+6Vr$Vq~rxP(jp+1%?{XU2~dayN>d721|>_U*YA8fBJB z9$3tKPxKP`iXNtOrO^8y)z@*`H24h)-dj%-K;)P~oJ&R1+d_EuZdY0#+;~>+v?Wae zFUuBsksdenZE)b`qvlk9FckO4q19RDx<{ku5v6$4gORTKtG)J-Ft=ZeGT2OoaG3HQ zibA{X9=9<|MsVu7cD}UfLS8SHQHkOQ4|SZJB}juvutTkNT^Bz(c$p+9K7UBI;nK_@ z63{31nM_IIaOG!KqMyn&8_#AzXUX4HsJ!Qbb9g=kX**5{o?`ynM`5Fs+G0;q;@Yw& z`Br7Y4mm-Bh!t*!vR;3;qWjF({or~v33eDe$$^)#E)&bGp}PK!kjFGod`P)mtCFko zoW#DQFO%?`#qU-y7gx8t5sSrDi9_pqy^vRvYP8Gqz*#6;dhn958!drCv5fcUIV+DO z_0f)=Jg?9# z(T>I4-G*ht`{_dkR14b02M~`?!iBku6_U2jrMmo=Jh->a6pifRfO%xNCXSeJdl#Jg z^O2a}WMo%iu>B(gbrzqJ;qJQ#f2@7#5z z7I1!>iVvUot?538>ZYehYho#eZ2fSmJl=XXWen8wif-O>i_(pStn#IxgEOm@%A61i| znun8q6KHX=N=hTjEr#83qfCG4Am%HWGCN-H=3bzx1ueY}E7BUr78hH1bq_-;k$@q+ ze*?o*g`F(cyS^2t1IMpIa^Z!hZ~aF(&Jk$5`3}3yw5?+$+}^> zipOK3IYLv!tno55{iUN0_9LVisVr2mFC`6^I~Geh0jU~n#Tf^=2YO3ojBM5kJSGD* zYtd!t|Mcju`>a0nmhC$eM{YUN@aMvz&Y>sg5udCpKv(9U&*IHmYZRfF#Ej}M07j2O< z9Mo9>qwr+M5>d1lt2vtW>tEpxHd?79xE@}KdJE}u*EE9=4ISxOb#p`AN@YA3^QEX0 zHQo#kvIwx&(lY(sS3jL&`itG`*^*sz-GrT?!(;k?Y1@N+t-+wl$?T6HgfslLT&pMZ zURrnBRU&cwds*q5fmdgkifnh6OlJ~^c6}njZQR`MVr05GHTX?4a%6Wj8utaDNOHe9 z89@(AeZxR_4L7H+*j=Qs%vo$`#3UoXwitW0cYAnPUxb36{^GWMCm6;6<)12@i)xR6_~USG67UL$IA*N@VJ zet=?FlHiT(dZ(=X+BAkSL8_ZLXYqAXN*#vz` z7myCCv_ny$%BmXo;dU36N6o;=NEMnT;TKcE%fYfFi>p_#vK4SAopp?)Esn>SQJS|b zA!MPnCGhm3Jd>?$PHjJQ?sz$erVFE|0si^){)xGPAv-;=JJ@wf)2U$vml0mfcLH%j-x_q?@Wg9hj`;6yhhmM@SWrB3=X#@Kq4^r4t@ z9*Aa6^g8B@Wl>o>iCGc-!mN=x3Np>X3D0715{57?$S>+W*QMg=wTYgL4Up&?0iw=n zA?Q}mF+P2PWRFGvkTnKG>83`Dz)~&YYSSY`8w*lGPG>R4MA}C@1@^Q4+OIN_72+_u zdMu{!{qurNu(sas$If9-*2z-Xub`uInKRrswY%2@z^psiD_t?XKkmLet zNq>d5zHDHXJ$0gAf`(pq<`&QEG2Dbs^vGe)C#`qWz-!0lI)D#9_KUHJ7fW(X*xj{n zQ{03;%7jESTY>20h8&?0o^_J4+qHtKSC+Fo7zVf z%L9%!5$XIjtq$@{A*6>+O2VLN9-Ev-sH2X!*d}nFT5s`DwU6TsRMe{nd!H0g*ic+E z-{0Z5E9_)*p1v+Q+Ueb*PjV>J=FQJ_ri6jow};B$a5a3U zj&)m!R?aM~3~2;hA8kGqclQ1-zW2kF(KECF?Ow@=D)OA#s4@H^ld{;@ba;JYe)d@< z!a?JxsXm;K&A||WyEUfL;?Lsb&T{@|&1x|o_Td#lB_!#@g6?eNN@NcEz-CrcCLMwO z_>BvJe0mV(e&dL#em%Vr0gCBUOMP~8F?vpyvp{nuF;l$fI1 zOz&=qT`6B~0lb$hQU1tC)Pf$3LMxd;{I@%Z;#1v^Wrz+X1~AUqh0*F>B*h4MWG3+V zEF9)s+HHm=Wylt40@1*N30RWqO~gpo*z?-=mj@`dlwQnib=?okQ7(<{^sRW1$WsO( zhpH4E{^rx>6!lZ`*Hlw483u+x#iQ?|< zTIewpKFd)-N`p5QNHatC4({Xo^&{R)qLqs>y*h2X75DsqpLhX7XrSIZ*A##?Kkvq; zSrwqM%Bgrhh~8PGWjIq-+ra{o%CW-$zN*qOS2tT`Cya~W+f2#-rG+v^6YBjBVQe2S zj+{)4oPORZ>z0qoC2)OxJVJ-9-^I6Ng5Hqu^*}5$fC5dtC@)hS0k=2X6ETmZCNrS4 z=rpD@g7+)!rVfPT*fhzg90(qSOcyG1M#@~**cqWsej)bzTV6ZZB1jPk{aa!lq`kwB zqM6OfkS9rBx)yy^C`VU$(L?$~A2e6yM_6PKO29C3IGT1Zd;4vXM5b)xFNc>MKD@8X z`*AZUd3X24$Z&t~cGNnag=)VDPSF+p(m9yygB(s;G#2fKCm)df$BqiF1u*(#abepvkDJ=_h( z?oe5T0WIf;{?&t7@6MFeHuk`!a=TD2B95aH89ZpdENb?o$`cKBBJs1Jx?&{f%72_H6;EL&ku-XfvVG}=D~C*QlMQ|DYloC&c)9bvxo z5u~0~3dd5U)&psQEP`WDniGlYtLm1NepDxHN(K~nkY~Kbm_+Rd8yeLgf9K$hxL|QF z1V&0A!qa-$H2zJCMKn8Rs_yCRomH;XR_E}sdsBr82H~@}PDd8QJf(&P?~=4k8$J_1lcoqIt9OmbKg>URy37dl*s^*@OKx%VgpA zkCuqY#FP@(=u5KQ5HcM?X%Tkx=gjj0!|T0CtRmu8iu>%}{T)K^z19Z~GDfyEy_VPC zm3t82LODbJt_+CsiZtyj$<@m8jy-A=4`jhglK(61{1a%Okj83iL|H^3CSmw8Naw-c zSU+xL@uC7dyx~v{qn zySuv$gy8P(3=rJiodkjecbDMI;C|=(_U_%iRl9#uHFN4^-gEkNKmF@&#I`kRV{z;qYHTL}24nG;KKO2h9HX)ScXoNS0Va+Bo2xXr zhY4THU%!~hH8>nBvtbGIg(ji#iQm8Zn8iI;YInOFv~_6gBa8YWVGBk{eERVH|T_I9M91v*h29g>(>>2McoEy(BxzE2g#B$vzvV`@t^s`nB!g z_=_|`+Boxb@2Q~5ht0TcJp4nOj}p--#q2-n7W*j$V9a)^=0ymilA}}HY_IY09Cx^B zF1)#J^A+?_$ zqz^y+W#)K5b+7G@gw@ejl*PdirlUYeHxNGxT|6*%4f+#D(~4lH;o8&abPUIgN526} zdAZk&ztq%$1Vt6f9P|iZB^MzySk52ck1o~{n4hi0YzAxwfqqPhK39wZ`HlM`qFuoI zgXrh;9MN1>EZYMAo;FlUWgmh!y=Uy#2^Ew3mv~eAs+*QD!3P^iyvcYL$`WLXwZf=- zdl&m#Ua-{8j$B#Xjh%tVDR%cjnMJW!NGsC0Ei~BCujz}V+K>I`+E6i@lWaN++G?wg z6dBA750eE!`P7{ewb=pcAAD$nT9+b-&HnYT)pIf^jHZ>8BMztDo)ky$4NFz#$Used z`|sSUxNk}MQJaSgc`Ef_g8)AS3`w*8eU=fPNeGCY%pX1^R5a;d`{b+IBFZ}7VMX~~oOdWuMwM`EjMDS>cz z{&()sT7q2C1^={&4M*4A63D&G8rX$ve=m%AGq&_zS3Qq6QYud{P9aKFBL8`8Vj1CN z6sUvRZ0`G7A zhZ?*2*R!Ajd*&}F3CHo0$}%Wu;RNWrv*Fsk{vLdVVd}E^#@FBm1H9ZHh0r>W6 zlA-&bE5Q45ekE~Ajhlc;sO})>TmBzoiP`zI=I_=>wXm9Tu`cWz)~+ zgxit5Zx=k8IjVz951%b*VEK%MyEs^p41YATTrIj5RrF(xEACcU@tLkoB=%+dTqjMA zgeALVEVXli*q<7pJ4F%qo6O+QF|6jXKrPu?Cc^3Zr)LpOA*TcwsicZ3^pmUo$s$<| zSxq6n>vNhPKx?I%roz~>@8m%o6)HN$MO~TBZfI+tPanQu8&=n9}L$=8;pS0yf%{V*14n#Y$SRc8G6WLnLc?9;N+C_bUVfV4|hV zsRw+3FhBXAc|~WT_oMT*7TQmz48>iEgxh=u2sP~|vO^wp!!>U&-+I~SuAi7kA%{j{ zd$?CD9CMtp9*0;5L{MvNy$B~zrGw2K7s2J$9SJFY`aAACpTLr{bjk3Vu1+^!ZzRAD zk1=j2W(q&cCAI5n|D^R#ZbP-?t55UC4;mbk(sztQqx%$`Ck9UZpn>^&y9dKHCpKS& zzn-5>w(mwSXPWvma*Q8#oyN-QUPsi^B5RW1Ndn244vA)&_j8TLzc+G!UfCI zgpo^HD!1qQVdCQTC@%L$*+u<@P55w90Y-Xu_a1WX#sX$vxmn7h>GnORwQhW63#}cZ zVbrLLkX83~?XMt4xi`iE@vJXY@Q{<6#>=;zur`%klm+%N84xq)B}>Mx-w5iK_CaG&IYJB~zN)ev+|-QsJ^=iNU=kvT58!lX?Po{`xr7+>RfI z!%ekofq1=DaOeCpb&rn-zig%ROHnuO&HI&O5OGSYP3|pS$j<%l>rxi<>|9-l>HXz3 z^dA{c9wsLSavPN>!t;bpcscBgqGz`pw-nOXYF{ zkLK}i=09aT2?~NMU>Nm)pT#cD*9YW=cK&5lPzlmwj;Q0P=R2ffldA z+RSKFC&?`Sa%1WA-QZ2Bz5AUIJnYx)VscqQLRUnj4Tb=8 zSahjQGcyxMPI(3giIP!U6QLWQ>ZhlFWzFGBjSj1QR}u9o#qQc?$ueCzEih{jv*8ad zD6h-5p>C(XlT|@=gG2e9kb|fQ9UDn!RtnwY)_(kW%A@BrwZZ58SpSBLI&>i8@DI&* zj%}JXjcS3yp&Z>HD9!hGkrfJ9Tw1Y1#wBzJxrt3Vk(lQ_C6gn>NJ>VEF@2ZqiTyR} zr$$D2?Qj!d?By7)Ufheb<&9nmJToFW+pxu_u4$VRkJKF|PVwC|l8+no(_I#N6JBek zaLa1;n0UW(Eer5+-{ce*uwfJh5u?yM(a0-t)8&;4ucIOMRCU?B(_7_N@Tiphizh*L zQm1AkRq{B#(9uvbUrU>mwAV2GM$fFkLg%y>?1<;QDAuOzvI4Zc`?WF_06k{Fw2 z6YZj^$dM^lcGPeV%dS+Mj!gFiY(UMa z#T0mz?!CfCq3&%9`vR-0Fq`-Rzrj)ML@KXuH`KTBq|x}y3X(aQgH1_IO!tu3sms<( zQaBUUz}?ySodp%vM=IOi=-K+?;5+b(=fi%n@E@mZ>9SOMwnwv(&6OOWcFUGnm7qBw zTX7K)D<6oy7|)Wusj3lTZjqw>ll@`1v*0B_s7GkemAK2LUiZ|qx!C*9BEDmojWFmb zYqItBvSn}it;kxuN+^g(10z6CH?|yn&eKL2U8VdJbD9=2-5pDzrk`r+L5xuqtBww|j2IW^Hb$d!F@@xcxcA80U0pLcy4 z0Xd1$>RmUicPj@$X2)S$Qp^6L@UOj3^gWs`JZ-fltEYdpO}?g}Xata}j?Lj&f?!G` zo)OohkdG)hmtr{Kc2&8X0l5_SJ#CXAmemqMjXE5TX!;0)d#7}Bm6ejV6_kGYfZ zyQH~sGP{f?V`;j*zVMz>_P=?HNuovVQ~uWdJwXJv3n1To$c$b@^*&PiH~Apn7X(LO zG?h0ziJiZbn+nfZ94QbekmtQe?efJ2X-9ahTnb!cA!I~ zh|D=+InR0c;uZ?~ek>2U|M2tkt34xaG~4cU(#fJ?`bH>k^nuy_u@$#@Mx{hLNF* zN7MoY!#o0sakDiCbnG*3-WfI*bzvmV(%1fQ^23⪼t%29WeDXy)4n%*(q$|3z4Dg zySPf9{!Zlj7lY|zCeM;+-#!ixRI@uRxRec*hbi{1fg2<)ThM>BONCw~p_&YJJ|Nsx z=eCp-O-d;JA{BSul?rXNy9sc!bYj;#5?{lA=mOMA6YMK+#7M)&5n(%intGSs-w#(N zd6g)syx$>CD1<&G;Kl#wc`K#@$=8NJ07nvqUsfZkZMe<+tGLxa@LwLRuA+RW+PGvn z?>rL-Y15!|JAAv$VsoHBY*nfgs7EV}`OJ)m^7^tTc&d5KsIXY?{bIoei!x7cclXBf zq_O=Y%(e;h(aL`BYiTj5;8ik@7-_-9{M~Lp|73ca((mO?RHr0=)6aYN@zHgb_wabN zcRw#y37G@mc-M*v^yX62a@`V1;2Ge4R*cLLrl)#)kQ5!sYr*eK#LFeN3c|~z&s3-s zf5Vu~am1(j%swX#MjGm(Uspah)Z>oY1K0^n=kkSazYN+`sC{hsb@X&x?Utnki2_y!oD3SUQ=0%Pr(t`K%wsh;=GJ{y>}EP<0xj~hU0b}sVbz`xEApF z(~{v@g4W;ERN_-sqg-=?B9hKWG(l+O21WU6b*gD1_gxQr)j@bzj+r%J&aQP&#J22e zUeErJaF@~fm#t|1(?@$mp=Y^Usk_+<;x>=J`^6o_Sv8zngC=Wkfn&5 zsYuzEAkhCBN9d_CBIV)88@RxHzw-jFYx=N2wtsiC_Y9^TpXC37gGADP zMhUU~wfz{dttuy^->~M{^SiWK0XG5Z7A&$z=Hz~~6&m+`$756IJG*445(&EGtFmP9 zzKV&Hi2Xf$Nn{n)aw zb@Z>0?q>5OlaRadeg4=v4#z0Sh=9a~Q^L1)eB)qTZOI6}T6Rg9G`0_IH=J3D5-K4| zS=(bAv~50Sa0<-?+&P*xY>zR$bjaJLK9`ruYo9Ap866A_sFnEI=~ZsW*}co`OPejO z@T-_8E19y=IM=KbWQFMgHnaFSr3c@$l~?`>TTK}c09U8;g{JH|IDhGOu}=Mczy@Pr=XaT(+kUV|ri zhNyqUEUZ@1rF*ivpwg?`8EsYXIpXeLD{n9#Vi3nK$q>g~Epce}FGGXJsw>Z{mL2h` zygBpTJR*J(bUgs|JelC}=Ns`q zDXfv0acCDa8pfnuGR;{GY#A{D&G$3e_g&jzMl(YlRD5`$(%BRl z0&E&mq*Bm;$l)hnv-iBBhR-7LD^n?s-n%e5q$^@j-x^+-06PuHj2Dj--85Ww$(O8R zQczT;e>*Eu`eA&t8-d;kd9+Z;PT2Hq6OFlVoB5;Oy|(jESzSUjES7bI$dH0oLH6=E z8B0g@vV{dtg9ZsF4hYA~kkraEPd&H0W=Je}FFhY{$D){8p$udjHil&0PkTcQO&@2# z7hWG6<5&V+Y@E%b1-NzY>)UU_UU7WN`BC~UWNCj2(&PWI%Xw3+LytmBF#Lj?Z08Y( zndmnvweUD%osfw3g;2#Vin^2{HY)uNv@;<8c_&y>ssOa@1L?buEL1(NXwYA4`b(v# z1(*`oVHMI&p{OmT&LN@Anp||-%#N~J{1wYr*tPs9hG_{H58U+hC^k_)9XjXey59c! z`-LW((I-V@(#9%4ogc+=WJtP9F#*)`pBbsaG-F@$vm-r@wc3uRY@0-nuYYlVXmKN@ zHX&3u2VkqgSsEXaw|_3`nwrYCR<6m$$+`O%AjQ!d+X?CgJc~H^T?;k9Ek5P3M(jmL zllIKlwO(z>tb7skoxwlKz&q_SZ186lFN_t@7qG|yzqeWSmbKZl;MUWDtfC;Mqp|3> z3iFQFIV@cwi|u>>w|PGgl&v<`mx<4OAMDvWoAb8zB<9vhEqC|NS3L~N$lVDof<*sju=n&}0zyZI1GQLzvcWp@>c z7UPjR`_ojmS5ly;e@>}yYPP{wP0B+o@R;b00bgir@q{+l+U#+z@a0bQFlhbgEQ#KL ztaNv7Zf=tD9GB2iB0+@8a0aE)+Gc1)Ir4dSC%l%X8uwkIduM`if6$WHcdfln1*sW-?nQB*CmEJ9DAF&! zicca3>e?g`HT^MQb!gjIY5q4qM_uh-f^yR@h82Q>p8&Dy=%31Ld#rwV0;k!q&E!qe z63CFcv(p7viEoQJBz@y9N1g~Sqdnp-noE9ctgZ>D9_y?4VTI4=Bu;yLq-5AnmPIoD zFGSxGfN5E5^v(1g)@#L7m%8C-0=}fIbjC0SNKB6m={h_;-YFE%7jogHh*3CNn4I+~ zPC7+9uR85muaiHeaJCMSw?W$R$0U+n#`}#}b{{m7R)c~Wa7|XJFHF3P*GMY(Ef(`- zCcjA7G=Kb>2MBreEl_Gp>_w-IICK?#no2R9@7I6M$q7d(Z@?Tt+;=3@X|q;es?_7i zD>!;b;a|^#IF5=p;*i+$R9D=EaX9cXJe%0?)19T*CX^hf6phsjbQ>Lk@p-6x=j;zJ*hV#Jca^0jmHF%gl8a6GLB$`eV9x1lP zr|}P5*GW&qf?*$HT&i8y4xee%4l=K!y45v~8t4?kFn7=;8&WkKi^Sg003Iych9r}x zY?yUq3I~(4z1DBvUks52m&8?dVH{JU3Gnc~f8&<9w_roTs*Oo01>%!-UnXgv=FJWd zeQgLxWx&%3?eN31*^9+uS*3xd3O%JoR-2hSv|}Kc2n;vob`?gIjh zBUUvgc}$emp`GUv#D+G8N`={W@da`lBHl>WLR^V7I68{Vz_$|^A^rXYh}Pn5uPWO! zW;)&$jrxcZG3EUhb!X7Mn&rG;ubTQg{FNRJfY>^us4z zUJDoLw;0=(u%{S$AV^9@+*c!_2OC({$#c->nN z@|jA5&|UM&ZFAR1+i%bX5Q!TZSzIFaNZr=Ui@UA!lLFfQmV#y`$Lx;2C#tKf+x9%` z`&=<52dROln?i4?lD%ZqocGWf>GtW0SHhv+s3jzKiC{D(y>IYa!&FRa9R)8hy7DqG znYcaGAFw~}E9h?``13o_Nq*D?IN3u}F1o);6mfjDADy82>@y;aMWeCJv&?tpN-62Z zc%dx!xU64QBhC2Z@#7-W^E$n%ja~xZQh&_jQAiV7NXt}oO9~x^q4v8T>T4uL9T(I@ z#GS?AB`e{!;acuY7n;%WX}!mO>SG-~Zs@jsZei27jSnV|^cvX-#}%=W#$91(E#HwfT^IdE}R@?Xx>=6@+C5 z1vxqh>L(hk-)?T{%2gFfI9-UzN{vodK_1P(%6Qsr1GAM|!4#d~pBXil4ol||age@W zVp7fmAiVwJH5KgBky*5^Z<)-DLvjqadJ@WNhWzstPF}iyDzM>{xOHEWA1gPm!37Rh z;g9oniV2p^?(ZHY?vv1nX8!09db@u|p8Q>Oj$wF0St#1lQCpb&g$Vl=DZa1KjpFj} zGTY~r$ZT3kpYAe{aSbj9gB~ns;3iG$9V=3)%W6NYxw_|uJ6w>+bq`h2g3Dy6ED(XA zM>q!8iMx4)PU!(VA27+-ynRR>R%I$6;5)NsEbSJYoE{K8sHG^?mDnr~rJ}*Gzjf)m z(S`lrJw))(J@om!%~s!guQ*c%D(`6ltUej~ZoAohsdKJ)zKx%?F%JnIN3cc$L&v7n zYcg^cghVEHQmh?YrwV-xgr@(`y}&h)64e?204-a8wG2iUmoQd zUuq;j&$HRa_gK%6V53HJ`#&?KO5_m;T1#^{Bu_OI99J!A^ z*|H;UCR>~=lHCMAs?AK7wZ9qRyh`f)1djf!@zB9IDzV1j)EW(!sZ^GjzIM}sTiml% zR}EC+4telNf+h0`xo^|YH>c9ETe8Oo4Fm-B%tX`)jM)uR4ub}&x3_J%*={?IHQiNZ zv!5rjy>G@Helk^yYFOa2aRKCQs_J-;k6!MK%o;`SU^gk#lP(xH-`&RD)p(KZthKX7Prw5_rLP)Ge2UAe z1Gg1>396~fhuCcLSFzf}-sMY$>g^hsW$FQf`ua1#r*s0ZBQ!Dtd!)ksX4kA}7`r4R z29j5gd{DL{DODLe-9i?S@&TgdE{uOI}n=o9yL5Z>Szw@Q4tRbIx<3@Ld$99N9Ls2nz<@+KOn zhKlj-F;mnM9euz?m1&%y9RLkDyyCdM&sHoT=^a$v89Ag3+l-yUeStSKW8{3}>pjn4 zIrCx6;2WyCBKe-3#@IIp?q&>$CGwyoA!3eK?Hj#zpDxg=zfK-?amY8G#cKL7`(S)O z^i*fQ+}+Hq6Rm9tAM?r7Gs-Jlk*vxMT@o2dih{u@3pH8Inh@^yF-Np$X0B8Hjh#Yh zb7&)D6iB$>(+!Is{NJg|f5g`Eef`i6sYK7kPIY<>3@Hiqv17sOiDSWc#CH(5^<-GF zuG3pj6Kg{j%#kBmG_wA>=dv9A(L=`JE1md_u75Qm~qCBY~6?D z$lB&~n3fiJORS3kc^~R2?MI4LYv9rg%=%jR5|z1K#t<8K%a4Z)9ss zn=%@Wx%G&r8`AIFrnruKxr{q1Cb*FFhJ~cNRX4w%0tqx*_wG`*_po#e8NOy-%@H}hFK}ZJ zH)U;#lwWz5kUKGFYmvd&+p)%<;|!wI52qnsEJc(SSo2}7wSdX5j)_%mo?d7oBIXGG z1_BPY6ZK}^KDA}A`w5;eaQE%2PE`-5H4gV|lm@cq%Es{izDLxLR2cF{H$NXD4iZa} zyt?hlobgb;ueJ-7kaKQW8+YGGZc0_B3o z=jX7Sb;@wwoc6UYaVtGmB`wUHzlu!%5)jV8nmz`4wyfP^I~){1u>y<6opwR#t?O+j zg~bO=r7?y9ng_-io2|aY0g5&7sH9jGCur0J;la^E{T^&wv**|!pEde_Yq?ZpR#W0$ zs$H{__N6BjL}HM_Jsi*Vd4M$2uL$>Hl6{LCzDo?~CVzrF2O+2ELDpD-4qROObmWNyN4%RX_FHKh{c!uw`e2#@0_OOE?}sLhVi`qF2TfS#Mj@ z&*M6ofr1A^~c1TZk+c_8 zTsMMCVxDFLPjrexpxIsTk23jhKLV*f#^48sWP~-ZhuZknIgG#GQ+^P53I1c&$AYYI z`n}_Mc$IK7s!kJid88QdMAzc57HjsQq$nZch#O&0a%iwa!IXNY)p0}^J|2`(fDrH^ z6)WQ36rcJGb;6BdS}^L)T5Yuizj_!z4v3}sC>D(_ktLrK9#0B8ESe2^CJ65eL~2;d zzuN$>RyOuE%Iq&!=iJ zc@P+qt}hFJ<=+S7^TX#mq+`=H)3)qLMF~3|Gi0#Upi-+im`7I^t&d+GTV)r_h8q74 z77a4P_^_WzbqG3ebsR=xc#Hl-Gu5}teaEF=47i7P+Po6-98~Y@eher5b9Nlg`V>U& z;VwINdAFkletonT)14VX6BZ*BLav<%L~tRFG0M3e;Z|tr5!A~tcl0J@$2ntFu$=Jq zFD8!QWylxF$xp1(IJ&>i)2c5V%7`3@Kfl_gxm)It+4#pZcZ5NC(>$xBh03(P+f3C` zU`N_$w;otocf<`t!=c6MJ+5x?l}3r4+-ReI{u4L(S{#qaO_8pyJ;WixdB50Nqy4=z zzr%OXCtwP>>4pw1DCue1?zS@k2#rAvoBFeG-JsJ(9v7p?SVij9<#80K zlxN{B$Re6=8%)h?;@#vi-|-6bMDIpM{&HU)dm!9^mi zRwn8%n8gg@Q*9AqG?Lmo;1Q_sL(d~x{(y!WKTaSQ~$67(#qnQkRO<^_TwlCvIo(D~tXdEU-MeDtgV zes9!Oa+NGYtrnDaSLxn==M`ktowO?_#luZXp*bVjJn-E{_z%)6E&pRP|!et+wjp@*dsS;OZ+Q=o(Zs z?2e=8fja$-x#w3|l(*~Lz%ghQ;tKnFy?{#3c`S>kOXws1Ir3+*+%ZrOT#wHF_(3LP zosE0vSNa0MOUua*r)d8tVPJnj7nqa>N9ngex>sCW3Z`c2`QTOlIont<_@*)?BKLx5 ziEvYTrh|*nawg<)ChgAA;5+!A6i5}O^(D8RmEiVtOBG75&(lhsh|G*E^fx3FQnuYx z$fawQ(5PVSdfIZ`%R*7k`qr2pp6g(g+*Nh9)F)0?erl7>cb%t`yeu>Nn9?hR<$P822_$MLR0W{a>K*>Vqe2tL#?-l)9tMF<9POo)#PAE zp@}MHuoSXbYrE3+;F-q#cJ<1=e2<`H);d$X@qa=fi__ojBb(-UXHS3DG3fcY& zY*RR03D8=)8Q2dC12u6<8CmWbUoHQc#Oi9nWPUTJ zLCpz%(#nB417f+*H-tLYcsGv(6E13>zAe~ zZ1~OaOt@j+3K4eC^M$7V!`KqvkI2mNu_yTgL9DumR$D8<#P)66az&h|QD;=AK`Nhu3-wk!-sfEo(A87OBx2R16)q(zFRa#yx z&njq%7SftuxSf;;HK%!Q?;H`Mps_;N+flcxUdoCWEWCg8Q@+usRNqf6L~X>}RNi`_ zR=DvMl()^m>Vq<2YksWGV;zMKu_sbro7G*fm+paE>5%c?aJmRVkdzB(WYc9MUBE{5 z=A$2_F6fNu2-T%PGvnF#HJgr+B-hU#s^ zl}q8)bhqnd(Cd&*Ro?D`1R}H%=?T;44#J!&W}^?0HBe5*Sl zwxH-5jysblP%~P2-DpOSL4&$T#?Y$ZUY)07M5$&Ahu4YK%5=>l=?wC_&}iX*KtmpVWL}iR+Rj&F9TL-vyPss(_=_Q5~p8JPtd>>|DzUn$J3@KoXN5l$^T9`!xQE7~dYD5*J&i)jSUn z%;%1PxmrNA3IT zBE@1Z^kJSJq__x6460Ih8GcaJJxpR(C}sY~0+K~5=w<$8{;bA0NorhGjA67&&q=}oV>#Lz`7AKq|e zoLOo36fsRRW}Y^gn!53RJse)!<+CMKvjaq9=d$!=Mq}NvQ&kl%eLr9F<9xM^4XyK} z9eQaGn1UqN6Q$_$k4%MXqZ^79$mE|<>`myE+oRd*K!`PC$6eZEKjf#yjQbBFGS2n=kMo&39M5wcjU1W7sWjse`HSV-sTNr} zREl|sO$ab~DwLOy@0HX1nqBY4E}7|NtHKG?8D4H?Fd2xwyqwC-m~#mI9{(t9L~HUK z6T>V|N?IkEdpy$k`$>}&#S)^M+2)#Is`c)Mktm}Wrx_3#i{B8V zWytwcRdRnAR=q&9EtvI$)F&KKNtk1JY*b9sbD7YH**SN!g`Hm5MZQ;#lsZVB}EXA9bt1B64;&POYBE_R-%mRD5r7uw#szR_#p^ENoy zzW}JM5BbAKGR}OZjzU`=9T<{F=F?kxy{eH$;h`9*j?DPvA76I(tAmbS;FV{qNu*dh z1}KR0Ex5z}Q(l`OsTv6pY_A$W_;oChO4ihNK0%vwrR5g2E;&5+f-ZX1+`UherpU=u zt8*^;kp%T55D)S6`^0w$0kjtcfyG=k(xqz;-|*OF(QF{vgM6xc7`np81Tr)AM3k3#M=pS9w`D*xJ%+IKs^=juSlIunWGN%`3$Cok zYlG$iR8E+6207Y9^ILefR^D)rDQhl#J_9XY9w^~U>TuQsq+-?G<(fJ9Q?fE~Iaryt z&BZ;=+}_oYdu%|1M`&**=#56KrnI!0)_lk9&nOuS( z&?*iTfP7chgs96-l0v$w9#fo@ai<%%aiJf(EG(((bceAsXe$hlQ+s$RBkLg^DfX_ z`C2|haNhmM76^m-h@%GYn9GaH@b<(d^k{=<*j1aK(f}pZq}BIYlM;+_-iP{PaVlUj zmx+7wFziZ!IDdKKB#uF!m#{D9=#Cnt*~D)?79HLZa)VBp!~HbgW3;&l7IR23L zX#o%(NkC82ZNM!e>SqQbLY>~@;ii9I2v8{Y&5{4cVi*51RUTS0XKgFEUDZ;h;Giv< z-@FYJc*7mgL=+5(45Nre~b4i>L z{S74{7y65R936)uAKF6ym7lWR|EH(9JlPO!uWB@b&#)PPbl*Q6jnF53tTvlT8`DTq ziOd4n--!LqKFBR<`%u&Fs!`MT8ZWR{BBKTm12nm*#-cv#ddICPcHQx=v2du$%zOgY z`oP4W=Y79RT1#koAe-FC{g%ui%*B`v6r}f~`MbMm^lkG{NNK!4%jCjJuI^;up%gXI zW^#^tYD#2gua(MbVwrzoi}Nu9-a#JjJ9QvB)ZQzVgP%AL_iRuHc79pcttA*MLQH)0 zw3m{`_ZxqNrb)%-0juN-0sO(iV-*Gv38uT=&>l%9rAWJW%trGsv;{>6QF0zU3gxs& zmy2t>=022f8~gKMM+#;woZb)`GaS@OBkv=c;9A0|h#>F#>eb6TF$QW0aDS7VG|v?2 zFR0sRfpG>rTq5lKMYf_0Tz1FFfx)sShRae_;%Q{ElOyE1JQZTpX_A6rK7N+Ckmr~i z=T_1!G2gsb{ao+zwH3?GG=mrFnba&G!sVv@|oVxdl_$QIc?qI>G11n z*d7y7yPZ9?8L4bUV1)7;W;rMriuIM*b7bWK#hJAP#1Y|vXdhmALF&>g-6h&XPdPm~@;L#=ggvpx^v9-Yl z*omUb@yarJ4kp1a5JbtIrQ^|7IT|L_D_^-Bd^Yar7>XB8TU zJs>WR7Dl}7jW>@Gx+p#S8HD0{d89fj{o0^RI{Dslo@yXKa1~d zR}IL5whYt7WYV2$)Fc9q7TqE^vA$P>0jN>u+dUN!q+sI?RcCg1g}aTs(X3<+RJTP&BHG8FPV^l+y;I-3@vkAq zoK_LsqFFTJ9BXZ)Uoucip*DMUXrL}gXud#+-+t(X=Zt=oG0M)H_?512o;kNyVH=@g zY%4Ze#IqNa^&G)b^N*3Ta|P=iQ2pMv+0jWEL5b@Bouem--@xtO{~g`_(+D>2!GI;eD_ujJRv zl4#9d{z5eK@zkBvowN@ef8f<9w5L(&iFVh^VDv;q7sj&R5Y3Kg$!?FAR0ogw=byqu zE4?MatCId;|1l=uZJyw_&CgaN-5>w{Fs1)x!*;pN6u-4iA8+NC5Za|1Za!%t4%$yJ`kV44;)gid07HO=@4TG>F2|sY-wC4X zSb#@hHN4DnU?0Ul9w4X>sSJZZA(8#puw#V%> z_9B9RN%L4vs&0z|dP>NQodmakw^VgIERC%p|Kbe76JTOi`A8S*D0&=rHj@V({>rBV z)nT9!`>ovG_JCr{ZN^HwZ>rcYbkxS?r<+eyA>hsK<$L!#8+$V1uzwNt^0hMQZ~EcH z9JXTYwiXPdYSk(%bq>#x=2B*l+q3OwU5@wFs^pdC!$!?LYR52zgMP!Z?G@t-+t~`V z*oYiIpI^+nig+gE{jIxB&w2nKNV~fy$o3u7zJvfMKS1M_g#c6{(GmLnJMGjUBiz7m z@wonBXZUH% z(z0HRqXV_c$WinPE=Zcc{gr%J!wRIN9=x)}6r+R<>)?zSm8A5IbaGpK!GIifKK85~ zcgEb?9)IG8$Tn9hoyLeQoH%d4opG)Hgw6C-Mr?W6oUmR|mYp$2)uy$4T;m7L{f+rO z;~TkJ1{|m}xai@cnp5zeGNs&1CxhROS`onDxlaoW$F-)C3OUDe`bt`xR{ag97dyAi zYW*`igF++~|CM`~dM+LF)9WbQ%KP`7$B2Hb4MVjuXIz~tb>=}>fju17^i`9+86D^{k6fJ1 z{;{hE#8`ggmG!#i7pFTWhy1c{Je-k;)TUa3s}X*s>5V18bPYQdRgK`rR8G1d4p#8X z?tRPcEz{2c^)U`)PEKcAh|N&^b12;cHj}zJ&Uh+ZQsX;Q`o~sHyLnwbt*V9UFV))BgatV2Lr77Y65_+eUq37-z6*kD zNZ6--$iF(z_B&kff*VK*eGXIdzT0ST1YYE1wjbtYJ}4=(8V~fiuNqw@@zw`0B#mwv z&5n@!KEMd@JGo5%c#t_XmbM0@c-RdMN&}{YnX_UN8=Xe|bsp>{Ujoy5FAE-v+=l6i zzvJq~KT`*=zO;Hv;2gZTjtsWBhXHFre$Z>wT&GVvKKk<4Y~y9#nqJ;ACYrtrvhx## z_+eM{$rKRRfxmTVgtNmf`Kp2AVBxCDgCdFb9(UCE*m1M=0YT}aDms3J36PlKPT)o! zCgjGCLzhh7Y8od=>aK|Yr0@FPH@lV{Ea(EpesNyk-6Xd>)7KXcsA=cD*VA!f`NCV- zO2lpdAz_#AN00NY`z&ZphC2ZAC5|;f*#3Hu_sHais#k z%4)s+7)ji!{Z2Ffpy+3z!*yR6oHZdM%LwMd6o%Rc5E4nH>dT4@?0y@Ysh<`hNkv9& zWj%EAf$g8kh1bl`k|C_!SW}>ks^tYmYdb zpzcl;E$K+}uJ1}K@1Gw{!w(JY^A}1-r;nMOZe-D9KS(|C&);5t^)t`-27|g1zp(8a z>w6x4&I$Cschqn0Hrj2Pb+Zq@wneG=NTb#5N;pY?-ZR{pwVvnwaN%-=Z-~!%>j|nI zeBsVBc5$7NKNI}iD(FVs!R>rPC{{+N$yBg6%%)jIKPHg|$T>0{$?v7wLPxhSKf);o z*w&}U#?Cj+!>Q|2qGv!?;mjy}kJH)vtks(j}yVXeDcnfN`X8cx( zln32dlVQI7x~t1QBj!Gn>Pk-p1M}ZcTMTdE!M`(@OiAmW1X6&|Epb(Kn-wYE)VVt& z=wnHfk8;+UZBM?z%zzEMQd;Qt=_SFa^-G1S{yGglZ*#|rpp?01?(^nSy^&Y7D z{*jF+dhhpwG<&XC@Xy@z$QjXJR)%!>NBGimA-&&ZrBJH=xnN5kVXYE#p9V2An<0lz-JCo zmC7xP&L&c9bUop2YBwXb0v}2Uw|=lseT_PG*3k3XwIbckc zgJ1XRqG3K6E^%Pk2CkiSoH)Ko)0ikH|$LAFTV@b3b2Ox#?-TXn{6m z^vUMVR-Ns_<>`2@xCN-_aIxv()`G_ zxWm9Z_ne&E=YHRPe!#odJ8Q35J+oKuuCA)Cs;;Wt)zTJw2*J?p4~gtfWjAWOa~DGj zPZDXa!L5CyR?J?~k;1yxn7w?Z2(CV3V%IJ(7$A8~QM-n{h`R5wPx87|=;!$7*%=Cl zQ@cgaLvXI!S_7`VM)BmqbqjC7uyu!}FvAidwaqVkyv|zjWR`-$P|NsUP6qF+QFe{}6WHoZCk+Pfp$(758@_4sl;D$B?v-JoNz529i=TDYN5Fs1A zwAAss;X)X^k>${4eza$Or)lq_FWs*fkt@})7gU4|y_^GkeVGNzyBW~CJ*<2;Rz zLsa4TePQ}})c?BXZhXmTd|7x`CEL+0v36yXf*U!N)}zqlRl>vOMV0trE*;dFL= z4r0D1Rpf*%Qp%-N8-u7%{Z7Poe1Xa=?XhpuGzr7cgZ*EGRaN4>6+!y@3XlJ_*I%bE zXF%ix8arT)v6p4F<%!@AfIkH)S?XVrxNLj8I^XLv$?BNz@HZ);V_gSp z80MBlm2JYE-oAWGNdpJ#27)DOCqvruI>f)^-$f#S$aF#OlVopsFF6?z5?w|In&OIz z;|H`1)Q#4LMz~VYA=fN1-zdwzQ3LfZ_(OLcRGwxPV7X-Qe|%X*`Uk+#^3+kP+@YPeLwn9v7sd0o53v86={2 z-bHL>PwF}yZU9EUB?G>2>}jfZu?cTwM_yH$sZuNEHq{U^Vef^8M;GdpJOTL5eCoRm z{d`f2q9-Gu^;UI{Urr$9wSbcIui3BSm+B#53IC=f@$<**cZGTh>8}D62XXyX3k*%r zf#P<41;`~zLd0n&ODHPq0b+VIPK03vi-v=+GOW3mRegfv)Q`EgSmP38)A*?yvj9Q0 zlMJ=wnQtEBOfw=e#$ZVwp1_8XhUlwU6r*bDI~mi+if|-Ei_leT$Fc-O(1Nndn5L4d zO0@clspAhG(L)oSRPJb`J2VxX827s)xZ&~dtH2ZqwO+AR)Fk*rWTaSsP6Pk20s?P0 z^$LFX6BFF4jdE^s+Jrf8FC?WZtws~)<#g%d9|t(3QbLPx`1|@Lnt#kKWFNIOQ)lXZ zaV?8>wl#*4ETqZnv29$JD+rNO7Y$_n4fBn|y;0w@vmg%&`j;R%5;}BJkgq&`o`8DK zF>$vTt)|O@3Q-t#f6uc0oo;UbuX7QReCfD;#Yphn4^56;d-s-CT5o;0XZ3&A6K2cmFOS9aCR2co1!Y~XqD5ra<%B;@oKQ_+pJ7-KOE{l2p!D6je+2Re z{iT<5ks+;@*&XJD5F`*vM$bFrG)WN4Bv0=*4 zxshP9k4GwmZ+!`X1pb9asLUoMgBg$=Cd*kAR+p zC3KL87Ub!ky8fj`3tn+(l(}QDp))mfi=m^&SA3VvD&lbS>ev?{1-xaKw;B$n=d(Fx z6TBkh1t5|&bn^Zoq_y+U`to|ra{G$!cPj6LNugYJNMjThzB?C59!%b!DjvptIEmx3 z!{%60o|PzV(@usPT1);<%!i32G3l0+0n|7m2vk$2x53_9<*q10TO{a5@OUviWMh)! zX|tJc#Rk?CTJ%~8Ws2|7=T@=Ay3<0x7hI@Vtdf1dzRA@})$0kBuv_$bQmivDl#crm zCDrG-np|<>xW3>VE>;^j=gmfE8{g7t4^cEiY|tP*?l1_~&?^Z&^q=%|{(xa6BD>?! zVdq+uT)`y^2`P{ORqRBOtde?O} zQ~<4-YDCJ<^DNz7^+O99|4fcFcU6H>@1T1@0273GydLg}k)X3Bw6Zp}VG`X!|c& z%>O16YFf3CtNTFNzxWn#AW_8RLdpoUvNEZ>i=#vo6hBY{nhqP=;xHt*)M+yTo&-sY zM1&e9XVHbAA2%EHRs3Neg-{X1dL<@2pj+>9#=75`<=yeK%0cFSoon@G)x`T-!7BzU z;;GY;WG&!yY)74#s5Z%Z_a_5s`S>Qgpd?{3wC^I#xOBm?IM;XzScqSb{(W(ZBAu80 zGLOTFTukciNuUQ*j)t42OsgbGRr9qp%2!4~zN?-qglRaL(L22-)mfwb$f5=Se~}8f z|Um^7^Xg^zrLf zrE7pB(tpi|Qyxipz3-Fw?aaiMb_znXvRmz8w9Ru_R%B)VGWLi3tM^C_S`)SPYKw~= zY&yc-a`Ipg0peesWswlYH{CO~ZdYF{E^XPr6Z>mgenrT2c=4|lCtDOEB1E(Iv&o?2 zb=VK)mh1#2gY9*z4tVi^)i15qC=v^Wj=I{-=p({^%UwUX)NpJ*TRk?RN()&xe?0YR<3 zo{aSdadh@w=hnb{ceY@zR~V_2Ri^+EP7vDbxUsfccN&Bv;ve<>XVU*_`0>+L2RNLvc@oX;;S(x_kXdcrDQcwp$j}2iU+tGR>h`k z)XzB*iTroS%=nR=W&r>IUNW@=Dzj~Jx3qz`F1sd8_iO5wdnerIvVLpjSSVH9H(Mka z$18nJ%gMY?X7jU5RQy48-5EORf3w9O2>)(ysvx1{;$Q7A6e3${cCH-t@Kv`k>{1<%PE&<38`= zpiAcKf4bi$BRQ3;a8i8@82t{Z#+2heFk|Z@8PxOVHoayyrDZTSSj*v6-ULXkd@sQp zbR4l}#?;@8RzTuFmpLANHC4_P?W~gAa9EFrcJ^i2KFn&&M~cEWV7r`$V3}6=X`vhr zG(X1E!xH8Nwn3e=WyQLwjg<&=wZs;je0Z-N7swot+j?4Oj>cQ$=s0D&cw$XQhlV`- zBAU~G{4UYp1JzwXG)8CDs5D=TA-O>4;fzD#Fstn=0JkSS9!z@0p!onaz;PyJ6yFEXg z9IHLjWSz_MwxGw9zU*__n^MwpUEK@6wn;U;ux7U8;meofAq=TgL)O){lIK(uo?biO z7{0DDydKKbv+!b4+}$}=*;pS2qogzp#9l3v_AdwDUEcR;TQNJh)!N2?ek0)SYJEEMrwk-Aj}Wz5C+wm3yX zO}NSgIC*D5o=gK)Gj^_|E~X7Fp&ytyC}}YZZT2^u#dFx{*Se z>gAYm?iH@5o3rgoGOQ;)LRN<{YQiACq=mLBnIw7wYY^97LRv}ffw2l)O$_orZ)9!- z-f#`Q2NiBFFjSRb;elW{(Gy;Up0--fhjdXBby;c89CMl<^yAboEutrsRW4P;oNaS^ z=G3WNyUg`6y}$5lslnl2nTsu`1p0Pqtw4h>ac9@S9`KG^LuPPoPoXDFLM`xX?=E)~ zFh66Ps)~OkdSWWUS~PRseBL88^#ZN8=-}gZQH^KUc>*|JfU}5^q4<}Uuv?YK*PIE_ zF~C;Bgn^D`W}KI(N&<5g7||Qo!}zI!|AcLA&o1Fa&+dz{7hZ(Bv=RVzwOOGxE06*n zNT?Hmkemz+#NWxGB@s2o&VD_+o8L=5<GMWyKJ%VblZ#@)Dn6LM@&-QMDDaiU)beVs3kB}@gtZ{X?@1(yJ?Q%;6k8Q z)s0`+j)RM-JZ%+!PxQo0zrz><4+K+4swE_{rvbqB@g=iHUP#0Gi!4}s8PD=*k zcDlp0C#P)v)s{&YUn}tcbn|L*38bTyWoKhVQy%-Ujj`R;^v)eEOf1)qIci8${VP^2 zMQcJxDUzm6n6u9CxyjU3ZqMhTugVaz6GPLxn&UcnUBAfK)z0Vl^W~WC@642^WS;`- zGPuW*g`FjLHp(&>sN}tN)k%-;YNV^-fXBwG<5hD$nw5f(5H^UcOvhDRFjowjB9zmo z69)n_E!z{i`SR(`N#EvnhG~MJ?_y3_W%HYAXC$m%hu;G?pP|nRqP=3mU+yw!MbpPf ziB6hduTC9F$RhZVJ9bSX+`N>NyD=Iubaf3Xsv5b9yG}H#>QX`_bV*gg=p4p2Cwof* z;nn+Tt!pyr2=$tAW>v#^XI`k64!j(bQ2ung)9>6uhd#a|wp^Fd(t#qz%6CH=p25Vr zv8mi1r{S!$lYCd4Q6^{7cI_UgW%BGQaoSmFubj*j5Zkqb$yvKdB5YzdHdcdC3QkB} z-q3>s3@qBNO@MkgVHsH4Fka{H=EhvAPtWR>xT98ZWK?yOJ${{^a*TR5*{zshtZfu~ zaC%|F0=TwX4NFLniSa$JHmUuo zq!wqC^%XcpGsswa`q1+Yp^F?%swV)P$QqioZCdp@!x;cYodQyJRb%A@q+c8x~uLX5wa1n|1q|D{no_o%nWn4zTqW__O*>tW!K2mN zgt70+WfKPz8@CA;7&ln?OCNxck8fex{a@)izIO2j_62HB2$ND%unGje=jP`tdw3wJ zL6SZ$s0}@+EK7^Hb|7Z{eooEIq6vOwY870PV>TtMvsoZRf#Wo`m<=@Crums2`hrLp z{)=FfcGhieNEfeK@s-Y?Ga6V&nTb>|6DRZo~zYVQ_gYy5kjEWkQj2p2Ek;f zVYiR(>BbgFJ$dIdXI#lJr{td7%Y_SpCD4Zfcd~~zsg2(7v}9&<%I$^8^dD}O>v`zD zT-`8DV(=N`LDs?7Rk`dFW5whye@C=FdtJY0@`Vn=3PL~-<3MCNe|g-8C;pir z3!K1gKfR*4Bc{)gxXP*5rPRec@$UF^%)Nj{`>n2fp3n7e`lPD5TB%32yG*SK@M*#3 zwOJg8`HnYtzcHj_*1pfNvVEq>g~0QAiZ?DnhP9g^<%XWsNZIfd{TpsqmUNg?Z?%k4 z0y@Vrq6=#&hk=iSO`D`42=H9an?^st3lHl*;r2QW7rM877w>CQx^C^%a#{ z_sfSlFw1iK2(Zp7eFdXMp|J|N`(pG%Ch2j@WE)MdC5t?z)Zixt@FJi6cf);~xz4OF zznGtn5$eXgcy2n?&l@~&QN5=NdR~>hwKgF;l+sv5JX9Q40SHBnF^x&*bTnwPav$fO zXGwt(22Vv;tSgHv^%XvP^yZU{geYJyeY<_328O^mxA(4M-2j~{!l=FM5xuo{ZG}%rw zO=K=?;x8TqTo!Y0ePF^UF7|9I&PF^<*F-VC-L24Yde7RYm9~&fKgmzI^gm_xL5mW(9|Ovn^H;&YDzkIvXZot|{?OhUumyzFafj z2RX+PUhS%g3g)SNXO)q++K^Y<8Rk~!1aM8$yr}|$K^Kc${W~YkZ?N(8h57Wd9}NA@ zc&dBG<~8HB1dJqeJ9v+b(idrrrL68egML`XD%IP+O}OD-+x7Ps=ZcjGQs+F_g|wqfdkxS z>ibJC3xch|Ee0VRs&Bv0p6KzgtE+|A@C%y`2Kvwg6JEy)beXd&ke?^B+fEt54GnJt zj-$71Z+FzG*PLqY=Y}^Y{*~Ee`gDVs8@g)3gS1On;<*vgTb%ad911qwtx!a(N;{Fo zPzbPm1I4t;pPMdpP)+lhsMk?qhfENPI5XgOnft)*<}m#C`b%L`On@yeD?=;Z@|=;- zw41^&tyre~j^}a-O>;h*7_~Phn$E*5Wj>nZxGXYbbvgpd`@~c8w8a+5HczYW`Nt*Q zb~se>_3EwiRbT0Vo-Y{PDZD>xk^vb;Ud*A6bB!f+Ri{2Zpoe|AlzlZ@6J(~5A zGS4-rEt~N{MCMNWiukedsmYUl}YnEw_k7=VT7yRN~|I5^#FBH08}Yw zSN&1{4xXke1m=-lzm136KE+x*TfUoM?|knuquNE6N1?ulwq_9x^c6PH{mNBR*PLh7 z>R9Z!E?%BgDBwZ5cc?BN^5pz9a%cbD)n2;LQ_BOAABo5Q zU4_o=>z$DGJcL~{95%`s#!nVW1hOVDkT>0J(Xn}+@2tekIf2;B$jp7p6S%ou(@mn! z{#7`8U=ETe=Tc-Yw(t9O!7=<19+w6)Jt_7nqN{s@FD9}GrcO40sM5?m0Ij`*loVkSZyl-+Hpsw%dDgmhB{#Qd zjlvas>3V8$3BfUkdPAxOdzY-WROZo#dSi9xMVoNBgp7}&USuSDZYo-Dq5Q9iT+-Fr zZy=(FViOe~*?ImKr&^i-Wk**yP?+mPomgWc{e8k_fj z^OYjPmMDn(E{}s2|CjNXkPChl9@73g`|soH6C&=1Z5P&{b4hoaf0&OcCo{IWWYOxgepbWn+`4VC%(k)-;_W`2&J zg+3Al{uR8nB7w91-=%6vfR%QS|o_9QZ4M@m-{y`ei7SJG*sUJSHH| zpEd9Kr3_b7YMcSA$oe^})&TZDR1xu~5y41(3U^E7`->2MPvt1HUXZ6hsQ3?(b4dL= zRQlFVA3GCe$nRVbMEnoQ{GKXNVw?B!m-pDm9p9yY(m47P$jz!I4*mxF z65F_o(ZmZkkxzk)4HiG$p1h=!2ipmDJ-6BF&>MW{oasNBC3)x^c<}aTt!_To0lUH? zvZOIvw@2Tw7x>Eyg>K7Mthd)6jip|;YXI|1^feyD?Zzs*4F`f+K7_xj+YEK@U+RV| zYWU&&wC?E$wfCCkZ{oM6$pc-FJ4ultDp}vH0x)5tRh!SE0*60AzR`Ya3Vc!OU_pwj z$cK@TE`XD!+V*2au<7VR%grqK@)r+FVgMwrR#L_%Nf2Tmbiab65EwkTg`;dI*T*aeLH695kwT5q8l&%5G2;smsqDs~jG5L~WW-5n0j zxY=wOJAkAFRF@A3)<98@a1(ONtfig|aVo{|V*M$WS7Zw_=$1F#ZXt zdWvUmJEnTvG#_B>ot6uKdn3-e7qIj`+;6G{KdhO`lC5mN9$RVP;pgl)1LISp&3zKP zphFXiXZkDST6V{0z=?0AJ-dPS^h?VVaS_U}b%;Xex_DasCjp8Z6`=wURtqNmXZf#j zaYAgK2V~o1)n(pQ zZP@N`75@s_k-|2Z(0!EhIb^&w@m%b!?!5r)6iLweo|TyC-9R1QkD&X8ypPdpO83=#6XdCVwW zF1x+~Up2M$k2YJ%m1uyR6*7L5H=quO^>*jx^KKND><1B*F9nLK39%0Aes&!8<=y8C zdsq-^Fscz&&?9h@{U@OP{Zal$uGYXIs^4L>CrDL|idvT>9~`czx+;gFyGo63)3y~d z0_knfOd4xhuM4(^?Pv8iv!`9*-Jp7PK@hsdi)H8raVo!`e((5f7?~zKh^5 zVSW0vp6cYl7k(_f8r6Bdh*J5<{l1H&J(j1>LImRTYJyb|zWrs`elv&2Za=7m&c!~F z5*p8`=v+RS8h9S>{K1ahLeFh*tp=FeQY^9(qHf=l)2%}tx|n&4B~(K3wC=biR8kUu zrA4c(li9ZPbhRQ+(VejLMi$JHs2+XX0C3g7uh0wpgL^S>HVEYC`lLTx>qA_ zf&TbuNbH(@s`6r!D}~feEKkug$!s}^$5lF1_z;Xu_~2O>JO-}?6`e@!fnflUV`oot z99vW@Pr|~DE8^6;?}9YHgK(iDUu{j}Szr87To;MI2>PRQsP@bR9lKFp%}U0xKDN@n zA;0InmQhE0S$}2CG(-}RwYlJZOWSZUdbm(?9^lsZghziqE8>Rsdp*)a3yd|fDhD~P z3Rex_6XjX{@M~RM?`(ogg=2eq0gU9Q#n{K;-<|5xCK{MvF-MuU$+PnTsy&zHRCVGLHrKS)$ zAAvz2!~DaTX~Sv-_A@LgZtnovcsJSLWAz6#p7b%)!cRFW4dkpsUII2r8HDn0KAp-p zHTp0O?Y>NA+04^E^?S#r_%jT${#2WzPFRz=i;7Y;Wbt;&zriBU^!RKbrJrq-`Nucy zNKapQ_WnH#v=|0Cp_%6`g9wz$XANBak6XVa5g#u1|0^DtCMRscu(HXTE;Lq)A#iL93+7qI?VdFwqO(Mnr|YLH%24 znpGj}2B#MQGwP;j|cCtVe3&3InT92Qm!GN!5tVsJ){i^~;cB6YJFQZvp zB{{3$U9e~I=4Cq}%VjLjZcJjZYPt7IR-J7+ud}hfq~VnqF(DOoCM_e+y#?*#l+!lE z@yF6B;=>(p)SV~WGehAkrinO&HoAulm<%dXD_|(|M)+dd*yA(jzsPV=QR8?#9IXsVQr$L~8*24_lDKqAF9m{bj3GQ^P^OJuNegyEdRtEY zJi$4l@;mY$;_kq`d{jLwP-V~;DSfI|1<@Czp`{wfs!L}r{tFILlD?sl>K@wX2l%1F zQyFaa=V`;0T`f2o;jW9vSE<}h(j%@b7^({%xr9Enss}a*apOTvpc9xHe)-^ymip4; z`BgjaA+Q$Nq3O$m-dP}Itvn&33)?@ki`v)iQRqFX$^hsR`32Cl_B@6Gn&-o_fyQ8a zSK{_JX+)6TBLSALJ|D&YW2$laG15djmr!_N=R3jnS_%R^O^ohIZ3k1!)_lT8tp)e+ z4i^Dokc%n?)hfYZA&e!5xQ^Rs^E3*md_+i>ZD zc(_g#@1gK<%Hv5=I>%v~`=aRWHlt#eTa3yde1;#?Sqa!F9mW|w3LhQHYpvhJo&S6^ zMWz+r`Qb+Y?uN=1eRK-Ch^1c9P$|LtVLO05&{HBD0|U$hnR% z&-gq)5nqLKhghx~nUHm;l@@~xgC;z4JyCB>J?lLB4!f&H7|m7DY)w}UqcRseJ%8~d z$Vbp;r~2Oh$t-Hz4&B@pbs4!Y#4;^sktY;qr>Zq7J%B8+`;S?_Xco@&Ctc@)?{V4< z=jw=st|BhKfm?k@k$JoomX_7kYRnCwxm&xJA7`sB_+{Yn3wRO!aIgOxMiOpQ(?(ZI zAA!8MEJ|Aehc|clsL8L}n@O&$azVi~_<>kQeMHq3+=_f_q+yU_(V0>+cAvgQ7ToTR zmN#%pQVwHE59eO7P`qI*>Ri=Gw$Mo5MYzBj?RL%Iz*kYKHU?Z17#18r|TaHRTpZK&jjeMEd(23~gdXvWI%Ad9aFXv97)TkS&9y90L z)NoQ)3lKI^uH!kkJTVUxfKJVSTtR)(m2NE*Q>u}n9>i`X^-T|erCS9uHp4t1WhX;%W~hZYtn7AC^z$aa8m+f zQu+yXEdkAW37rA(31Bc%MVv z2*5=ks(h`*ZnTN1ZP#gh_Wo4YD|$`gdbCzOqUA(a&^-%;_tWB=&&`3+y#3Sy??Kq< zQKPvYDzit?Vl72^&`?kP%$N;r-te*3k|sCTQyZ4Kc30=CZDM|m1pY>O=2|ApZ!fm} zA_B=*rEnis3`-`fOPAIO!J$_lWnkq+Lhcto4ZV89Id(+iie|U>^De@{IxVJ)Ef8ju4J2nI6V^!)H?@x z-?#Bn=`6V9Ao?*dmYu7f3gj!6_;Jsvc%=#a9h2LoP80hfhgTvDW1rH-D zuNGfpQ8)S(<-EoBpPi6Wj*l>SbJM2?Ttb!O(&C->vch|RC6ZqvDc8Im^adQdAt$RR zAKMx2Y+$kw;ZyjEEtgem{T(BTAQCDqzrG<(%m{hhDj_~*M$6VW4o`W_Q=yHaQMc1g zU$8)hkXO4n@A074h(PSHP($4=!^M&?AqOjj8F!`yUH^;0c zafycPZ)s9Mf>c?h8y<&2*m_``mMny6zqrhN zbSQjFcYpOuHIX0g%%ssWcuYUk_3#N2Ax+`-2m;>J)5x;K3e+}~ed_W2J(fCr#fHh# z=iSo~{2=?#7AKdKKF|$zy5|LG-eXOn!M4Rj8877#@M+rHy*)v$Jw8GDz4cdwz$1L0 zd02p-LP7JD!p_&2SvPlIgH2j4DYYt##|JI9kMFE^o#Yb&QhBuGU1|-Zq)4InY`O3BNXU0sU)=%XI z)R~MS$Emqd$qH1L6Z+YC0oTh+A+S@}i^cg*9jx}!!Y_L2Tq#xnMGKuhw|{H7WF~}T zD|!EiY3tt{N6h4xcyKk*QD<|ZHgt!&7*YVBZ%vg>cgXK=cx>VReR?*jD!0|Ca<&nn zMQ6`VWaC?cWrlq|6FF|KEEcjZ`*qIw7slD@g!PkqJbp0<`iinN*x4womd2gS(^bPq zn(zFao_f7$%sr#~i|NC+xr{XbolxI4qbguMNS*f8&s#mDZ|P29o-{FoCCn|Q{kJeS z{Ina7Q!m6BQ0NaJ+wwIdTJ6sXhdwWrhV{N8gi{;Ep*Mbtwznh|zq9$yqP96RGE5hf zyr#7WcMc`8%9t#5$FU_QATv!sifnPTnd@}fuXQ1t0UDjPhnYlg>etdfx|EhqQ%`%= zF>Qcm(_owKjjabLexwy?N`8R{zz0eHD6d|LBWbxnHKgBMmF>I|Uet#ogS1pJ#u*B>fSq zMC-`*&Lp><40_}jL1lOpBuYbPsIJs4ZYx=Vg;vrneBj;NTu!z3@~j3QuWb09Kd3Vp z0`6Gw(T>yM(LJLb(7~^pYIsZj%XD~=P;KZQcc}Aq*#Rv9Y}OMO(xP$mqh6tbbEx>@L>B_e()$PLU;MGO zVnrI5nUnsl>oAds#E*YHG)J<(@WCC3WU#k^!;J5g35ed;Ib*-qCQ1g^L^^n`#z90Q zuYDc!x4k&`ura-EAq|^t*xOSKSd0XaK+i2EATAkCr#R~!euNV~9hu#tEml{JbQ+hI zA@^|Sj_E+BOnyY?PN1{6*Qk`&-C~NHM z2Xy$n{g4(@Izx?J<6$kqO^wMnzFqYmQ(!Pf%6N7D5CUpH{?$New>Uu7ngc+4=RU^D z?zH|YjBNHfntL(3XBX2zZC>q;*f>wx94(Wj$q`fR>U&=->GUJ*kJl%JNl09ynum0` zTOwhlh+2zG2Yx2GX8oSI`pP8-je%@Xf?}@6UCw>t zz8;~uEslZ4Z+7JsdG-LJKQjo2H zDq&jg3ctL{ypBq|UdM0P9qXQ7@XJP5TVCl_lL)ISIYbupQEpJl-kRRC@1`YOiSJxI zGF(grCGzB3;1%gNJQR`$7RPoRG~7lx9#2j{=Ti{2RjVF_=4$#JDzo$*vC=pc3lOMx z?J5{7Y%nH2ENj+!$5Wx-(reJ*cY1!QYYMB`n2(8?kip_kdeo{1Y#GpL(#7MQ9MWV* zT|oxrxT%>%88#oUuie}*S$-xLfBJ}H$ziRyhac<7y9L!f%E$SO7p$=h7oPJKzc`xR zt#3}<2EqNLYB{8lJP+?(mb8`Tn=?G{g2$^p_gLKy|0m3oij7`G|UbQiJ~x6R9jPiE?e*`zxzOOTcm4<`3} zmU&C&rz9?_)4gSUdX>R5#cJMDyF!1=+>*;&8j>AP#vm)rqGb2gV#G6ZIIdF7}*nkP^O*jWStU+Vm zuBo906N0p*dg^+I(ou?R+?&=E@y|xz* z2;Pno*mlo4lT(^O$cv{_*u=NI_XOj^KUVVyC))luY)2?^ zyUOn%lZZEt8MLwS?V-l91R+yL?~loqlj5OY1>*d#(XKTvu5aDEiVphLy+et7`-uvC z&J%B#oAWLX%~>@_5QyQYgfMaUt?d54e&ERLVRQ-6(!2V^uPQc^yCdx literal 0 HcmV?d00001 diff --git a/docs/swarm/images/ingress-routing-mesh.png b/docs/swarm/images/ingress-routing-mesh.png new file mode 100644 index 0000000000000000000000000000000000000000..ad4d663e731bc0a05126d719f1b0b4cdbff6ac18 GIT binary patch literal 118815 zcmcG$W0<5(n=RUfF55>#S@W_ zR>X~UugEZYSut2BET|tpe!xnI3oHKk0c!r^2hcMF7~lv5KQJHQ3&>GXOz=n56wc|7 zAN)Tggawpcfi5y3J>iD2hkaTDi6Q)3uHVs~bxjY6@?EeNdFRHWQULJ)z!^E+f;6B{=`|Yo^gL%OkIvvuP?Z{?k8$(AP;(? zA?blgdq7iuAnO53`~GWVrxeM~r>xcS=)WKS*D+8)taCR3|KqO#!~B%_eWRF5a}d-) z|K}_CLe|6vXaAea`$84~16vhH{0!>(_3v&GaQY9Jf7eNXil9d%LrD&b=J&6U^{@AD zRj_ONukHW#q@}(;u+0?(2x}nz+u?t05W(_+{A>GP-=O$U&=v7`C@4RX|M!diuPb7k zzhM5mPJT*)9?>*qc?fFY{|lM_Ji&^1|MdS2+kbW{0s*io@E6oW{2!qG-(y6vyutom z=U*s@npjd)6yS(|hweYnGyS{H|No)yiAVf@fR{_-r-q}>4k}o1{3dM3`@Tq9$#1*S1t2g=PRpz-hqQ(kQ znXW9#8c%~5d;E4eY#($r&*kWnP_76r;}6xR!DzC-zFFYi7sQw!$Jy%0)Rf&4=o2Q9 zgd?KRZV#e7d7WRpx3Vv}7F~^EI$0M5#}(j=4Zm|yDc-nImZ$OQaO0RF0vc_#8eKX3 zmD>)&057~rDx**@juuiIYXv47w?8jUAOg`MKP-KwEgWL_{j|B_thp2gdVK*=mfFJW z;7(QHh?`@dJ0X3Rp5P&uHXi|KqtInbCirRrw+b8D5&YNm`kM#Z_v{tHNz_C@NC+;d zIwdTldw!5F$d)IT&A|@LcK(C&Y~~m_(o%QMju%HtET(5f2Qk z=m@%hV(OEDWdb)SKuq7Tx=zz~mklYsC{nnaWf|tUfNhHoLh2Y^M8$_D6l)E7X!r4_ zX#?_`t)L)~=VQMs^K`ZV-|+@=7)!!2ftcG-RRF3kyzoyRx!Ca4mnlayLWxAoylF$_ z;$3y8>8^=2`Ba$(N~ZIUIO%oHw%rl#bw_NnyhU_y7;|x3K~IFFYOHXmA=BF>UYHYl z$n(vM>r#Vt0fR%G`~_$ijvvSU+F?l3R*YrOfFuVEO!Qd;&hV6n5D=;7 z4E!ZZom{OR(zyP-*HhYkV=IV;GL?=xwX_Hs@pOi2Srfi@z2@;_xJrb`BkN-%YjzbC zuD&q7Z|#exs0u=4_UtfrbM-G}l>5c+XDYO+&C-KE+z)7shqR#^-qE5(L5ZFqXrFCA z*TtJaifQ|Kw0IAuk1nMlhK~nFCeobMn_RF99dS&nMF=eop3PXh_O%Z+(8r|JpVeq| zLv))jhNg&2?U~k)e?lGl@6*O(kZgr!FI)8;>3|cwxE+l|aBFlR#rNr_V7%(oIwfj8 z4cp)9{z0L}36+M6*wXGgngg3)uyf_|jDu{E-swxazS&5jvH17_`o|)edk6~M8Apdx zZV{Gwy7@d3o^wHXY8>4DAR1d1cLOTH+Aqzmkd~A4Sm;3myQ%aPBrif zdeEBF!)jU-bipPJibK1kcs7~7{<=NIUE^%P{}4M@NM5$xW1XoU-@Uq{Fk>2V0Y~@A zGRVRvx%P99r-i2_`0ouchB99_5}y4Fcn7_G^9jX`a>gs-JhO}Ey$Y5z^ph$PIODr+ObD}@P=W0FM-k@X7A|rXu)UIP=d|1$+ zygqY3{f-Lu7|>1eVMbmojFVkc4CXS*wDi@#CDkw?b+#GnB%3@HS!zvUG|uJ#=8hl2 zsWxSIQB?J=CrY9)n=Mk5m|K&z&!e3kagrM*nz!D<2@1=E$sZ)GJeb0RsV8DG+2VU_Cj%Os9kg9A~e z(VMo=&gNFWA?==zr1C4ZNpA`}<7Y zr%|AyYiyGc#U=sICWs^0-s7PDf<1-bq2*96aHYo@Qz2Vhb*mI3pBQ6zRENbyC^BIQ zgIS^jv+JDaLsdbl+QR{LR?7Uz>z>)+@4fJbp{do(M<;`+?{HGval}g-e4hYB*t*$p z?D$(64vklBn)(zU)qKHb{6x!jn3T{k>xERQTD2RuXMq%{`Zzq$$DUWn$wy<2sv>KW zzmt9(O$_QxZDe3!$HUcdOLW+wduP5whcrwxMjx~!j|}xb!o|OgSUMV^X#z~i4>vCN zt3%75a71_Bw|E$K{lWL3n)_=xddC<`59n)Jae0k^DI|LqIZY&w;{uOWBL&N=rzx2T z$tF|7S@XI|u1@^*Pil7JGDu#bC*vB@Hj4+5x+@%`n3=oFjZGxC3syYh3YZJgHI6L~ z$GVRo*>UPwvte{&s~{n$e6If_lwR-g;#Laswdu9+{?v(_io)eZi1%1hu4&QT4oH3v z-iZd9o8`zpQMw--xh}8|xLxc)R}hT4?;q$@M{(b_3v#TkX^JognS1T=&WIBnIho5n zewI8IqNZ~#zvgZ&9#oTxJ$$<5>S@QcNx2WD}Ni4s3U^$-E#rK zbG9}zE-C$;umQ8n9}U_pT2!15zf5jlEhX|S7%i2gJJE@bFXKxtBICq%U>E<<7~Vix z=YXrV+*5VKjQA^)*3n)?uJ=DJ+)R)GJhC{LpZLek5&;!R)V}bqTA%TsB;rnI?P- zto>c5GRv=HkGqdXCClNgfDT6mhK0Brv71>jcT4-l$ZJhu`lo8mIlPV6D1i-g+kU7j z3DeGGlavIq)~KZ0BnQ!y`+ooOOD2)NIzZV(Aw2o3HLIybZ~|_l#TcCRqBCbBTY8Xq zy@an;FL^};%=PpVuFX#r2iv5BIx3#; z?|Jw_I!u@a=+_WPZZzPkB?d=MH4HVu=S*c{Z~1E$z)NG-;AlzDTi)2P(f{5KX3d)9 zshes9%EM{XG&ypzaoCEFcCM1>9N}D6AiU>52V?_7BJ$HF%=(AlsJ)fJ29!}L9L~%J zuZ!?=eT1Uy&EK3zxaRd^s<_+zVYZxv=sG9%hNvc2@{`O)vsvxp(Zmt4+e-D|dCrw* zW=n0@OVrq9Y-`81DEkdlnKeyxpBFj}7~QLG#4HCraU69@0{KhZG^t_F>x*LfN7eeH zb^77CLz9=hXttf?hTEJGEX-#V85letZKlu*m5h$@}LU4np z0^$PueTtjEb2HRL7t!HV?yMIdc`mZ&G&!!1YEjE$Bm!bqJtqrjSeu#qdv+&pBuMrA z`C*)Af?`{~Ly&9V)1M@MV=6a=@}3LENC(5`Vg^k?bvoeVaaiatKE%-5E`XO{eM z37C$88{SU6RL@@5^8~+3;c3-!@4t@iOkqthu(SL)2J%ovvb%_u+s}< zYBHihqT}zB^Qn#M>m~SpN)r@9w)`G8nyNa{uItDf;?mU{4eV84Yt73XVMvyvbeCDE z??~;u?0ZD6aCAlyjR6=<(d`r;InMc3UyV-kt0?EH+Q8LoN^w6rtcQ7(a%u~UqxdHpT%l_?QjL*n6Q+Y zZHCVRZcOFYP-DyllJKkhDJ6US#W zdmtoHJ~>oz9pPNX0`GQUk(#=|HtPBhuJpM8Z^%h$$b0;ssA@zW*Cp!q**g!+b%?Ap zc&b%iG9*Xq{k$9{c=A4>?Xp9{4(g`+3W{gGdtXlUQRqCkoA~@7da(E_HcHN+>M)En zR$mo0p{_`ez3o8qDxI8aNmOPcN*&0pV5&;sIJ9-%0A?@?_P;wpMjpZ(MK{b80}`!p%ndNP6nX{_e@>(1Uz$n z@ipDqgmCzo?yXA2332jj&m|}?9v|#A%}TK;-|KtxrAhXQU)eC5Eu^t(kvbBG^Dg1J z-WrkV-ks$b$1`+pi?}FG{cR=kLbNsw6AkaG9?sg9RfVaf6O;LS?)gP^4UZA0i}yC# z-RWO9(irQ8F5%H%9Ip-ji*j%I_XV|Yvqgu5Cp;#sXgYsohC__O^@NdMw-$(Ehn>NO z%2%dA71MmnovDMIXeUXwm>f&$OjBCo+j!b3JsddNsg_!!M_M#Zk}UBhw%NVpIG0=V za4mn+0o+Og#=AC2k0_R!1W&-NcGF!tZmo2%$U0tk`I1YW)<-d%fXUPF?4aXJod`Vh zB@51_*}-$rRi}K#G8;Rh{zz|N;)Y#f)bf8UP1e=YkgB9qj&tvXR|Ny>niap4s+f;7 z9E#iyZMk$92@|nI+zse#1K^kd{>mjf%2B9*0qkBc29I%t4^(#~!faSY*2Bd+n43ln z(FVsowrH%Z-pu0jp$tOZ4%<%+W5WZnhhqqf5Seb8-nGB4?0AeY){7KG=_cM$US+>K zYxIAu(JIpX_&(ydYd3MtPt(>Us`KgYM`zzPDhj3j9esw8L)**QwFlinZvpu1sU>f2oCl8%$a21D+Ore+HD08eL|_%X|=$Z_%n zka~=IjlFUT{6p8_u#@bRCGr`IQcJ)TqgjjnBJE$pa|6zvSS5Zg8qE;GOhl#d(B24l zxg6T9;0@vhEGI3@$>@ocDBJXGZkNUhYPEKY&1AI}PJ>;oya2{CDpBukYTHl!&4b8~ zwlrIZIka)IhA283?GaP9GAqh30*7R*Ta|T8^LTjdY5~Za&9R! zwyMnp0mNb-k@P7hr~IH5`0{2>rs1si$9uIj}qH#x4XwmH9l<{_0m?#TlZS&s|+r8Zu$Ku3TC-B%pc2F zhbMyL<^IDT72D-4#9d|tz=>g00B*?GY!8$MsGYJBPv9`}UVDK!ugbtSMf;b@ui1k9 zG$U*eIjp|}6J;N87anS|8A)zsRMT*Q6EkcP*L*fmOEMnl*N?b?B;E5_B98_B8_bTB zO_cSWSx5l|6!tKre~JCXW?T0Rk-MX>Lari|L84yXaJ+6OT$YQ8gX{=_&$VIa@=w#n z+~m?`0lZM--QM=WKcuNc$t}wgsG{BgBSl1$bMPo1l9U#hk|C4Rp!CI?7Z6%mc7d}a zpI z2wG`+!MonTfkyE3pW=*(vp$kF;$|Sp^@@Yr5jAM9g~@?fKa&cbr1u<%&G$#s%*DyT zLh3JL-J#}AC@Sz>@M+?=M+%ZS9}#IXqUq%amKI8=c$^aLE=t~P`k!1~W`xL{-!leI zEZDk5e=EMX!mLa8Pt8~3Ni|Bjx<;tArlpk$!so?^E0CVXDkv>AbKejU*}G)0e%7<$ z1%5SBGiCe!aC*4``GjUAqZ_SE%LW4}$KC-Uy@3FY%XdT+sh?bXDkPD0SksHnp?xuQ zF$E-SJpSTuh5rN?ZDg%)N3&b;M-Kp6sk3Dz9tN0ovfQYkCz&27&4ECa{ZAu)u_u%& z=5B$4>?w7AND`u~rBPqrXWLxuUwi!Hk?VV};k@Rpl?TzsCLso6U3xIwhk@8iGP`0m zl8k0do(1e;uXerDljoE9T?Tnkc<2865kPsNnRd zYXXX7xzzfr;j;VzJl6vS1FwT+SOaCRacZgJN_Zad$`g*3+~~4vkLrY0PnkkoP)8VT z(Q(97ekg=c5u*VeR}|~eS|x1F;y+#>q%+G;fwTF--Vw$-3*ic8?~fWJRVfs=n|(32 z+Br)U&9Zw6F%1$X%l&=kcvzP@R*3{Oo6OWYV=48ZUW8^mf~S_s(M^^VcqpI~U7*kB zruMN_<0hSH!<>gF`wC>J{qh5-eW$YN!82_eio;Dm6O5H`V;@Iyl`B^ZAE<-NMy4UQ5EkZ&F`1Q>CU~cxEp=-ow8pVI@uKHFZH#4BKI@*rkleJu=&CaOi)wFq?slPf z6h?-;;NBWk@W_<;(m5Y}vMWiLZGNOx;*J&T^jEc*X8cDXoR#I|jILR05r$v^k?fd% zPT?my$epu3=uVkD@~&3X&7*BMDhp7v+nK|O4RQo7NFvQ%!OmPRqQbzfS(S66 z0*bHV%-Kpcq+Q}BhSUngzq&UH$0*PNCOs;Dh-d2LVpWH0F_5Wmcr7pS1Ljn6-m3FH zPc?_R;l~Vd~7kUCbOr|MlaiN^CkfA1s(E<1G-f zI4Mv)CwhzjG?z~vjC444yB9m+Jzl(DuyfVEAWONe;v3It+;5}I^Ol>J3MoJ-W*><( zIspZU!N844Fxrk5GF2j7d}?5>w10+{oKCi)0e=_e6f(l4-26SU;Be%+`9yX0&N;T= z&WUA%Nx)@j(~S7}n(L`OX22r5Po>D!qm|j6{7zLA9vM|Ia$-YKte=cZdMQ}CFZok5 zM{hy_Jb%|@pDfKS&u{B2v}}b$F^VGFr#bWEm*RwZ zz^<66c~IS#a_o+5eXxq+VQ+!onUuq#NXm4 zO7I`Po!w=RpRf{x9;>X|uIvVxNihWlmajarD9aSZ9{C3_GEF8WQ8Zeq2*)1oh2N&M z+}jSutk8S%T^Kqy$w5ZC77}MZ3-zlNFkC%dwYq+X2(|Unv+ltZ!6>AX9q_+)%!Plq zV2bO%0!UIf;36klV;_rAm`w~^v2@UG#RtE}DUwZ(gBRUUWwip{GH?A%OWmWQ2N^~H z@8DGB_7CsSb?_2d4(i$(UtYkTF_nhmjHvQy{oz_@8BT4BY&vy> z!d_F!v2B=*Ny3WF0ULk%6a4a8(BvbTpa+j{L$yI3aMrL+`=8qU*ZkOE}Y+)1f& z7>2?~p`s@RXLo&=*9Vabj8-^<>uS8sZTf-4-}*DDOUX$*u@O+4;c`nCDjytLE~1XL zwNZN?Gc8I)dIPks8!Nu(x@*3BBK7+pLF*`#!|7XZ53v1s9433|rUqIjH?$GE*Q$MR zbFcoR5tWhBzJV`L7`RrR&m-*)58JfXl=Y9%V-xc@TCr-Q$sX~uW-WKTA2t&Rp2g4v zrh^NGGMVLNOleTe9?;jcCjq4o6;^Mz&~NiZ@nVcV-a81IPgK=15@16a|2xgF#$^IH z=s$Sd-hUL-OHpgNX=%jHf3G3=SW3LhrNw+D?x`QIot}`DJI3E}0cJrU?Y0$y-`J&8rmq>q)obwMde);iz8sAf!BVH7hBZ4nk&bs_-0AOT(mO zC8CNMVc3^OcVok1*=E3D*9??TU+je#zz=kS&4{i0huV;xtP|4vl_8FGH+yvmgD(hU z<#32Bg&zvZPJLK=xm6Hp-}iT3Tv7~VHeFbu;u=w>AhLq(D6`5K0s{PbB{&n-=g9+ShHTJ(Gqgd(ah0H%H?i84D{hZ*TT{ zF;E)cRWFG4G+Q?BHfTE&cr(iTaJ67JaY@P#(QLW2od?Q3kD4bhz6&yxT<0A#YiZ%l z>Jl~J!s@ywlQNa^9GYExnYw3|Omj{3OMxLGrOKc$oj-P*U}IjPt9VmR#Wb1_xCdB- zLrbx<%)bK%(A!-2&SuJ+smS?f(n5ojQ4J&H!Tpt^Kqltu?CkgUWDX5 zUzX-ERJzOaQN1#2{4acG5w6A$LQ}pKVKy0VWFMSYBID6gMOLk`^UJk}H zq*oI|a@>u?LWcQvG}MBxV+m@aJ_orPX>xt3#@G_Z_F5Fsaz@2;w;Z*@60`Z&dz!8V z4stgSLR&op9VQbct%jaA_S%2Zz;JlRcwomaRTpJs5l zXDJ^)n-#xm$*lw=G7xd9cSw#!dE0wTs`h|kV)z{~Rd48dA1JcNvk9Z!?d~NvgbeN+uc*7X|bAh86Unz5!>IM%-*c5GtBP!005A;ErSGu5lxMq)&@N% zi>#CU6jYy>{Ky0d@_pb?n5pSJk=)Y8`>{Dd?pr-2SoO^uIGXB1kM0U^OQc6nsMV6E zJ>GuFeUTZaFpL=`RpKWG-BKwJHC%jP*3a>f7{f4WKPF&c5bMz)i=zPnh>x1o#auus zZft&_wYbn$`X5t7I+l>{Z#s7)^tTT*tLBj#b52ZbcH{xq*@#mM?(M+x7g6g!RlETP zE=EJvu6j=$9^0|DY=0uOB2jOdBTGtaVB>JVay<^b{}KWGA4NwGD1hNi@f}o1{WlU5 zz;siuW^vVSwQKu#5*R(;FeE@Wndi#>_unaSWc~wb^IWxn1Pz*MP}@e+qI@=w*%eYU4lR_H6FhehH41)@K84% z>G@Y5T;<@OZmc;ELFtRDeaJ&g&h!(E0e5$QF({e%edsI|U{dEbaHiy6|n zbPsCxl>r%Un#_n2DfK!%%qAVl!fU}O!gK8?;k4JoXTvlKO0)+BNQj@jZbvaI&WFAE zq>t)VY$VyPn6xPY)k*lm4Wv;g%GBz5Ub4_qXKE63smr8^E=aq3BAIF9BFKE2;FX!X zx}-N3NTE=hf%?#_`e*Q_x4M)Ada_;O6>k=JT^e0jJ{!>rSEOeXoE^=2GK|-BNR~zF z#m`0vtJ}lzqs!8?wd~Etypm04;jP6=`|*ZHzu9S#T^&FtP8-O`l9S>&UU5z-bJ@C; z9&Qj-;4RI`KHnRhXc3(CsdzOr+_!_6_j)+lPQl4lh5%@nQKO+z9zt^S{JdK0Oo^YK z9lufFL}lzea1qyT7aFd`=`6t=_S7^rB$_fj0MW&%SV@*!79si3du>lS9j} zz#>C%z6EW{iV!|c6S#SQhySR1rLUU5Yl-B5&J~G3D@of9ITF_G3m37x8BPolzj+ds zpB!>6w5M3bh=Lvd!Y#H3;VqfX!E#tFA!kUp9PcXkO@<#+a{Zld7e)u>bHx)l({4j7 z28;4s?4_dohslXAT06SPl$|eafzrb4hnU`X(taqxxnWk0W(mSyf!4jL!G85l8#>ty zSKr7j$PtwSEY0Ss7(qCb!~yV^J$)3KZtaJ32iq+TrhLgpcQe&)ln-X0j1SEgmB9Da z%NOVK?9iN+FOGeoAw{Q>+C`~LAH4Px1= z4ZllpIt9#O0zyNy1S%~^*mD&jJaErCqdR`#6B}ynPF-GP4Um!x>^up10U?eOHi|3z z`|B0Y7j7ED`=SOA`DzJd=4x`Mzm>>`otTzi1SSs^#*-Rgbe)R0sf(E0O|{lBGPTRJ z(Qw08GV8Vb2is#vY$9D?GAF;So`@C4&%Br7$kR@Lp?$evJclVofj$0xzRs@6f?@8% zeK%xk+MM#MYb;;qxz|kk7zf2c4(*A}1h?-mCdNu~8ID#-uRY(h4o^cIv}EOPA38+& zbo5J7qFZ&>cKgj_LJ_jmOBa_F-*#(qqL0&Rht2!5EbsT~1?%d7;^$h__ofd-bx)b= z6s@+fY38{&KAG+@@T|UR&G7;*3QSqVoCSy95q&XSrqo?f_HbL{y4^vxhw_(({A=s+ zEJ1nmWc~gNy#{A;9MbjmV>;YiyH489;d={fXACUtKh7k#__iLP|D1c_sd*VC&{IH@ zt5!mk8nYSCl^Q{iM~W)xE#tDVyDoy0LUG1{S|S#)KCu#>k#hbv)^yrS#D*6cNytGx%2Wf!B_QUwqtsG=C90vYztKcx!tl`9}tn&t`% z#+FNhRE-KbWVw_wVss4evOyfLc~gNolHV$!^-cYJsLa_^Gwb#nRb5geRO(5(J zw@JS=mplg*>NRC75)S4>7Uw+Fo1kT-t73%4y$6r#|NJtSGYaLCjI9M-a zjbjmGaKQ`OC)ymQ8Xydj1_(pub@*Pvh%8O#^T@l!y03%aB1Ysfbivn~VFL4MxeR29 zS`N){{IE6Qv%)24?n=zn52VD&{Zz1ravRo~A~?EHP`AE*3J$q-PYCgRV_0Q#Ky@bR zHjL@wgt8NnNsBgHD6-0!u81hh4ZJV*o(+O1teqM`MrcpXnE}E_X)9e}$Y@Rmconcp zu?|~HoR>d;F6vSX! zDfc0EQJ<%w&ss}Yo=tgVM`P?a=XCSu$WTiMQ0D<#d{2+3cC{ z<7o=V!`|!VHv9I@V|?VV*|ouVWB-ywFL?p4nx@;zkhJ(sKzjOT-t4uHmj4?ZjCRxV zJp=L#gxRAKSJS5##sVBN6mG9LwhrmTN&$YCNcson&3XGJL&6#!r2S;Ahb6q!CsNoZ zUtp4T7eBe1?&l4a=NfUbHQGV}AhBN<29zU$widPu0m*wn?_vp0il!57;@5x5Y~GLg zd63mo*7hA6o?5J#$2(Vp&4!1bGr7^D3-iVF4rm#i^snE1xKTf`N1nOQwLN%GcO!dY zlJRUpu6tR4W7R)q)yXo$J5!p?68mKbZPT0eS6mvE?7iqXW7N1%Q!lts4Z=pa+>7(l zglcK6vZDW(=oUwdA$V^yq696dE992n481&#DP;2gq}R1Bh>-m{qZ_6QPO_qd8|->> z8j|RD8BJS!g4JUAlmmb0EmlRk9BhU@%I)`^W~hp~Kv4f#4*nmt!^nhjTF-mY$PBzd zROpaA|FspATdsMpkz{p+bJ@XE71{ncy6x$3&!LZhxO3I{r}a>(D>hJ(-xo34TjgZ1 zIuB^5BFb0uU0D&;CHnIjSgdm#=M$HM4XciooQ{&7A(>EdhPT{MvYN1| z#&ma1OQi_Y!Oq3MkjDAmCc1bp-U3(+z`hi?mabw$=&e2oKc4sOv|ZTCiZ&>|J-{H% zq)-Pd$zBeJd)RbEce%jL_E)_YC^}*Aa^RYtuWW0N40syo z6yf{Br-nfpe@(wS^MNhf*pwviQAz$uJkP#f9;)>dHM-D2(m8kAAE^R=F&@X1CLoGZ ztiSpWi_)Jf**QX!99jz@*Acw>QB6h+%1nU9ciasR}!OwwIDXjdBTD}fPw4OY`m+sRu!m_-B*9uM}nm7cIa%C>r zQQ1KLyqP`uU6T4}>&aumx)e`nbXWl|-+mS|5b_{vAjOCbE!E^17i&MAsU%el5b5au zb<0=tV5UjOMl5bNyvV?9*>!=w_HIL*JZfM}$ehrQ&?Q^P4fL#4W*FEg0{h-b4wz}D zo}A8~%9`az-l%6=i;d=JGyxj2=?d2hLCarz$#_YR6JhDC zxHpCq|79EgS*Zh1?l?JYpDcsWq1^T0m!s*ORdL;LH{wKX-4CXoo^_TV=1Rme{jq=1 z<%?M{shlO6=1Zydbyd*YOtPNMljlWov?kD$iuOtUf%x}PNl2m8hU&or%XgD+YA_G_ z>V~rchX@|hOB)CO(H!V{T+7UHc|M#MkKT~#H*x2~N4mA2K>5y5El@h0izwM(52X^! zdb0|{4Do;(e{wJ!4D&Cnb8U>rd{wly>--Mnj>RGqi`iBJ+!gZX$u z9SVPD^x@kX-L!UCv=wR~Dr14na3GNF-h(QZM56}TAdE-U%<$^q?%*T8Tgj9QWo}?K+~%Qlsm$-%Kk%jp(9^W>(mDnvv~%>B-hJE_EtB!u3-8{&k&Ft)@>? z#TkgRAZ7Bjtnpu5+sk28v z1#yP329qA>5V)MFxRpw|edJG&7pmGqR!aGtt?;5bj9l)OVK>2GkKn9_jSxqN&b-k? zJ{C37zo=Mk2u>Tq%TPmA7+Bp`jT(U+t}fvSF`OQ<4Da5I5E#L5#!>2uchQt(WUC`TH_Y@A}SA`9(tIEUKnl{cc zwrU|Ql&ND(aNqS;XQ0O1VxYwkEj}3w9H{*M>Y7mAVzc=CbWG~5?sjCpmHT`PFla$E z<~ID2dkLJY5~SwxVF%deF~-NO4<6OWQ7+uX>?74SKy(E7x8Lc1J>=b!R$QC`!|Ry z4yb!A6BThc?Py>1iao7dM9$Lby^lsy7?e{XxQHjpVG*s)oM~=mVfoGq$IH|arc=q| zIT{ToJ;*d?PQ*?uH6fi_n-6PZO*3f4E3SNfuPxL}s>cqiZ1h5nH*%D{A z3Jq2i*adFB48s%0lGU22#-q%n7{Hd7Bq_R|Mm}koP%)mUvqbgGUsh=EG~~3v9!=)n zXD%7s;Zhd)Y=Dwlj6%mH(~0$k-77QNKVi9);LKGdfq^s-jjpcDB? zEk<~$;;Fu{M5Wo=AoQ6kRhyr(+WZ_HYgMqC;HMFA)H5r?prQPQvX}DnHCFk;lVecm z3dOpXsy%(=mgWu0u-j{+z>jGZnb2&_`{KJgkYzloLc3QY z2WQJPz(_LF$-ZkD(?U6!J|+puxhcE1q|95O0xn0XB$~C)T`r@Jfng-%y=^kv`VcI}(vj{)VLs(MAST@jkKHWbf+w_tK8ve=#YO7-O^WWloCQH_G9sZCz-s>% z{HAjDgk|}B6k6jBei|gF-1a!03Q_uj>7%M6|0|TSDt%k%7*FQ9E3P3XVus!S@Y`lv zY#~ajtheAta0e--d8wLrV?<$pPNwu8oB0zWyU$5_aaqT*AeTx8mp)x0?i}KEqJ+BbPf+qSbxdmON~?1By?Gn1Y?R^vVs9SE~`EiAx<`Dmqk`5Bhnq&y3?@BJn2O2fY457wdYe)TnHb z2d~#b_-RGQXBeZRqt%Ywu9w z9iuj?@f*jc&40-PD+=<`oJv-vQT^7Zf36S;Be_uk=>{>;fpv5bh8XtJ>Y7F{clsQ^Y-l0TV#9IjF*E zzoCD5@J&TsHXzOeL7NX+LL`#bXs46-XIFg#7X3k9m& znz?+NsLGvs;aTEn-hP8G)TEXK5&7iF??0ML!%FK*5}POMI5K7wkN_?($+G)Y<`{}- zaxy&)uEB;0`d5%-q9bf17L`P%)b+Ad@ib*E?wK3Z>{d*JIebNy&r)mA*sn&hriWmq z_5$kdc)}doeu-9D5e$>3t6(G0!!F@r!i2Ryh^Eg}mNXG_ zig_{V;*O81#!bVh6`wqUVe74>%AqD$O`@&>iMUP>lH<%erw9Y+_A?X=%*xH}fUhyb zb06i`hX)7cq4h)K^TVS@p%>Q=Q?s>NaLJAj-l6XXRMS3On#(b>`Z=x0!}6(1FdK?b z5h6_X~SCiEyF?vK_u^(4dP3o^JuXh1;rfW(8M!-CD>dZLj*SmMA&#yQ-&VzX+X}Lrfk`k{7r@rU>w2Nf zd(My_pi!&GOKbZU!6wA(dE%SeH3?7;7kX!uH!V~coj@7xQmEEG*~z{<$+9xj{4*2< zH7$UoTD(CQND*adnw{)ixSO#8eWh?%4{;tdrF5Lrvlo=oYSjJ}XCKkw|JtBX_kzvs zh6X4Wdb%rO2vmrD(3C;~=xMV|j#&ojjnSzL>*7Al=7IURT-w^_noDK%WM_ld0;3Sh zT2FTBOe8xKD)EVMeg0i7(TmucxTl=fnC(AVq8p>1k|p-Kfge#|1`f4mM)XY+c)Y%9 zK;|&yn)$TO)Y1EIgPrP~6zz<^K61Q&qKu_vC;f3ZM6{;vxLsx$@s#fR(psh~IY9J! z4@Od(D1y#qd1m=EjG|K70Tib4_jgifwN@cgtS-VMruR)vS5S*KeXh%iVhW86m7=b0 zitS|AOWAw+zY8eDtv)n*Rv_IKo1dGDj(?Mhcf2vEKQv?RoWB z01(GbAl=+LQn96Z3HRh zm>DGY<`A$=tC+z;CW$j`_ibZ&Q-@)2G}WzU7s%nU=X`eC+gYGz;i9gf8pksX;3ZI0pv7WzfaS@FaYRlJe&46&qA0mhA zxxWTcZ&P-G#GB!zFkX1-Si*2F)VE|lGrF(!xyW>Zz@d+ZhY9p*=8KgL8c1gjlXf-}_^8Xba{Mwd)`zfLX)IaoFjWS-kdbu;j`TaTfNobZITH)j)jqAM~{ z2gg(uzWjApgWRo6MvNtF@(`;nm5)a;1se`A#ni5QR2b(DP|+ABH#b9ep5hZeR|bye zvy&2QvtvR3&wl|N9^f?sb>o~1gAw+xpDZbO(ZOEc6?n&+WMgtTLJ`5zpT9@Bwl__Z znS8Gn`e0V)LW6NIuqeIzw>IDM#v>*4r}`2B(>7?}=$LS$s~2Nh547QPZ9EgSeB+Ub zU%;zy@edhfzFVDdgjt)Rm9Ir-x9dTJvDPg4fiGXv^U6xR#V@r!fQ=HGPPuQW2ayb~ zX`Q<%=B<0L<{cQah3=C70no}N1!0aI8x%4qN)~8}E|h_Rc}fhSku-g$nNXTw%FS*{ zZ+Q|R<=v_c=C-trxSFN*JcntUroUY!(#U2v2?=SnvY6EdGSf63{sVR3vmu*n=Q zr&X)MYK31>h~hNz&DL1Y{zNs`4eF(;d=^frJ@Yjq!_tOfrA5F6PNPg=YE}v9L6CR` z++j3LaJ531Z;Mp>qpUln(16;RNr z6b+sJ#e(e#6?hV%0u@zm;X(>VsipHj zr~NURhPs#^AxFwqks-waM=j;91`kBpTvq5ax8Ck**imj{!tFCb{$Y0#jCbER^&0Lc znlUn)Q?zK3Vc?VWyp{Tga_D>2k*^Md3K0_ zqyF(T7%w61>#z#e3^7?GCe&+;SJzei>Km|uA-|k7H~Vd?R#pYCFwm2cgwG2<*G-pZ zK)>H%7CK}~3ItY!+1B+&sJuB_tGL!CPj|uo#q_H_s=co zNv`**;hRUc!MR9dGL|!5Hhf0WIH9rZo6p>Z*X&;tEQn)!bB;EjPAT0vk}>xlF6ab$ z29R=d`MLU{opjv7K_hjC;poi%OmgcMk*xi1>76j-o2pP+W_2^CH9Wl`$Ei=i4o0iF z^eNQw(DW{&S-(%y>&5lNfAny_&z7GeVUX_0DjiS94aX`p8KdLVzqZ8GQOhQkP_BpN z=tE5gpwv>IPMo-l6(N(p)sM0C3TUdAwq>*w>l;eLedkKm>7{IO(k_)>lB;F%F&t78 zT554*0v1?qUT0H&XGAQ3wOD~lp4Z8z<>_;|oS=;aTYFP~*Pz~oYp}ZaFA1&ED>45s zy52G%t|izO4g`01cXtn#;O@=%xThWKhf1n*Y;1byl2^#@4Q3F zPgukeAN{w&cQu_S3%;KunD@h$t6a!&KaQ3ksFpoZO@V^n<&e8rXjsT7Z+?{|js#VC zS#azZX*&F9I6;XwY7a1uOS#-&5=*I1TCCEcB79cmPK+hq;{s|nTh~rX z4^1C^4t!3FsYxam(_6_FxL6pZdn`_AOt9PrVc*dP=BK-6X$kCPnPGi0`Tgjx z?G6vK1!n_BGk2XKT33_h0rA~6ZQr9)JB>&bkMrj{_w*AI`l>y?AhT%H7-m?>(Rm;0 zK7L(yd||cevBHu12Hlb@`*DtP{;rfDRq?abq3(r$^hcEygQ;w_Yr*!2yQk~!CoZl2 zC&6GTjw?2c0X}XE@nUxI%e8~zD?QDULNVcAs^&}Sr>gf!pGuFC4)^3Nlcvo^5=!+& zWU#7s@p9rm+k!7uCf48^_i*8KwLN9;$n>xz;>CAs;njPvg-OszUIZq@$+i4=`pQ1c zJ4K4~vo|nSIP4cuQ!w6P1+9hZ2|pP9to&$9v4El^r}waYU~K?>23)LuIMD&imku!; zYUvlHU3A=gb+?bi_5i*Ya#i!`g(!t+U?hM|S_=Y8a48jCu$*0^_3Fu73jb3BPL2F` z^$4T*>+$a=sv%c~Gs;uNii;f_;Ess;muQlc(eIt@Y{mU&MSqP*MfbIwQCIz&8(r zqA@GY#tP{<4XR_VC-Rwe)6KqS+l-hNRScH~3M%MVEI-NV z^fl5=KpGBqBTo+P&FpRo?v3M}T+hsy?$*#Fi!4FT9)Fwb(N`99WHRPcNWZs)DwB5p zV0aZr1U0X0*>b&OvD;zNVIOk`?I~;b#Wr+6kZJ=QEO;WNb=-o`&Mwkbiw!&;OowNi$bcW?`Lq^KN zBw5=D7*o`Sh;|}UoznO6c{m!l*vC(LQ3dN1)=s>@kw{n zg@06=U zcfJx!snmj3#;nMX?5;=b?xHD@`@j5OCM)E4c|8NDs4edZepXQe8MVv3IK^ZNZB`ms zn)HoCf`#F$o-M6Kq4N}a+`Mv`y3knBp6Lv_7u(Iv76UZCN9SsB8A1C7i9s0!9H@@I zRU;*}zfjI&SX4N0QD;$wSA8eQ2#@56CNA)aglz%B**hg~Bom7Wx)HZo4I!oHTGb6| zr?}xVYVjhesfnbfeB`*5~B28o^1xUiEZK~S(s%f{%ndI^$@e}EhXDy}_Y19@M! zqJr`8Ui9}P@u2az5QM_}sjBnKyxkywEoYIIntSyd8*LbmWXGPdN}c=Y>QRCi{H2pS zwE6h3h{izA*jm;mGw~h7(aleK3F#IO*CzySh8EEkIw9&@_hTWWue=+{A+1Pgc0OUI zI(qQYev4Vt;it^_tNMmg>p4%&50*XFI}%@4kqgrN8r7Z%imeRG4q#5>|dA1!+0?;^xD`W_c8L z8~0$5`QUH{h>5W4ARYNplwWX&_@~%AddTazDNAfpIb+1c;+24fx=PEs(#4VL8zM_v z&jKEsv79Z7vAncWdyV?%_?LM;rDA|M1M+xdwEq>{Hti zqFLRz-$10!-o|h--5h=VGDH8-^zC}FaP@oqX==f$r_oRr3K+;CKIXP}-yExQPbqZ_ zP{kE8UqYm@@Q2(#$n|o=oVvXES0`F?;R%dw+rmip9#e~J10qT(u3#>C(RyaM=`SbO zx9xmho8(q?xLBn#Wk1IC5aGt_&x^CNKT@5!vlevuP;EqX2JYrg8t!QcXj(TvX*Y9D z9yAOQ{g(3ToFPSVC3>HRIN;%o%t$JF?l*rpD}3dI;s^v$pD40GoW8h;)6|a3)L*KT z5tr0LsJE%UKPldsP9T5cqeOW+kMc3w3YSH1KelY>2qhxTa5Fp|kux(Q%8SRB7HQ}@ znNj>)RTLd8eDYp5nNCtl$a9tGezMOSmN;5CT1X9e7oAmALy*$O&gQj-3*ssAkoWAz zQ=E@F(;4m#l&sna=9ws;WYU0{zKPm9nkr-p4BoGk$27MFA1fD@>#NnvU-_;&V~x5(X2;@5Hw}Y_|?2 zH;YCE1N{Zjhb}TXCPZ0<3eqEx24Ynv6brv{tu~Y2X6HZxmY(a{_KDGTFa1#F`la|K`e&{XetWA%cl>CPpX&2jBJQ?mW+WCDcw&(4_ zItFOg{nv#2!_fqh&iLc^Sl{pM{9$eSCs3ncV+XU1>Cd1OO%>8N*Vz^m*98A*(g55d z_T5CDRCsf2h+bX~f0lMY8w<2vA9S(Df)pq(3 zn9tPuSYpJR7=j=ErgBcpDP2b9nSwW*y@rQ6VjYqtF(}7Ga_}ME{*PK02#Y**aC)xO z-aP?mjEj;a=05SXS#3oIjb>7i=9!a9f*1L}cx4iTpPrs-p6^OLB4Q6`N!v@;FIJ{0%ZNXOrQjzIvo0dWY_^1axAJ2HO@opmCBO$E&@SDo4<-Ik?t zfM|{e;6U_^$Zr4;mH!WB|4WhXd=chcHf3ys@aWvo2!lC6|Nm|gGy=&;2p_EuOkcg$vJiC=1$ig;hrn4Hs*zrZX++R6$V>mR zgD*7(ak>`X`>a2IKsH~jo%#O+zvGP8_y*Pn^q2WK!=`EY-+xYy+j;s|jqV%)_5A$2 zGmRJh=EHdEs{a2k>|uVvEzl0869psRyGCUGJQgRBExHLl)Dlx+_%~$9u=i#cGb>d~ z)yDP@d{H1GuJ9$yd4Jc?cE1LQS@|#P_>VN+Z-7X|U_rQJ^bLjn&l3t?{q7;|D$-pJ zwA5(SBJLiiEh_)VnI%hqYwoGbMD6|o9RWQgI(ndz+4KlP{Q7WM94`aP^N;AAf2}m= zPO?Saj^-(c*hYW(hm`X#Axw@F8}l?OWtBdo|6N-k|BbbwsP_xEzwz+bAdhKhb}R%BXsT;09$RE2%2o!@%E8 zEF*R4{qGWS3xWwzuseG(srMNW#AQG7`S0Q(DgVu>)@I~Q`XGmjlJ%2|$@cPUD4}4- z?DJm^TpTNWTlP%5IIGFTfDVH3FkIN5zv6!CChAvsq#0eel?wgYB!zxhbF#N^<|6bDOX@TMAC}kf_kE%pPhd)RqQcrT=(i z=hzsdJNBj8-;rU1&7a-(MZtDJT*z(X(wQI@q*b|t3PSa=@#3FHekVB<3KGGtm;Hi1 z1tswDwEsj*S_P2T&`u<%7=yb&u$hd8c+Alq?myI2@xlFPfWO0>A^2_>ws-{Jw*t4E z=VDD|tVq~AWbkL$(`%(DFYJGV+#i4Zd#HHSF(szc&vz_H7qEV|P{@$8rR0efw*gmHWcdFe>UVvfe!1-rLoE81Z z&UGI=WzF&Db)v?wB53!mp2-piwdm^ z0-CH93Ep<+H&P!Sw1VI|MtncAB{tdtjZ<->!=ZGK#p6T=@&0Q3)A87b9nT6=bR_&u>BB$pt%}fFwyNxmsKM^dMSYh z+_gx&;nH;_uJ7}=;A={xO-t;-uw}>^n%7|aifXefh z{_!*zO{~aevp5?AnHI-FtnsK!HQe1ox%sope0MeUYP!&Bt{rvvkIKV}l`#G1V-0rV zR)N*TZSUl_zSE8~Iv?caeFFo+5y`H3cvK#TUzuo0yx*uj)FyK8`#Ly%*SfPd?-I9# z>1q~=PB`w^6Aw-3bT-43wK`-?fK3m)blc6EaZ*PcWeu2#Eok||e?K8`(uk20+@{gsce-wW$b|Gt zp4BF+s_}$#bmUP|S~%C7)-wRVTB4cRhFREc&-zKw6S5fCZdgeb8|t>%kf8+Sam?6{O0C9MGa_0z>VthQD(68&zqyyoRuMU9RhkN18@`F3?hzgX{2;=tlG7Tcij4;y!v;F+@EAF79&JvLo9d<2Z#Zv%+X9wi&m7m9(I z4YPCYsv7K;&NrYdcOVtJ+n*q)tcprkihxAw$0fu9rEQ0)b3e69O3gsHu5iECtFSIE z9Vr67me0?Ty{1mqf6oWPwJ}~d*zFbpxwz-&UNlJ80NrXM$&iR}Bh8jiua=67S>3yy zTY>_m>o~`juqCBU#sI`ZGcW%fV0~`0wq|*$uL=NQT2u;stjS~;k z&sgWWcXM+Zh|V{KMhmD|wCkn$;9ir}3A;<_-WzzQ0x=VMm?fnXxJO4EC8hS3fO4Hl zVorETJyunX4zBq*LsgCU-iaOpE_>kL^UTB=$?`{X6~ggo(f~*GrEmQP7qBvbU!phU z$aCnM0?M<`&g~Zg)s>Eq1WHP45S{BN=jN0x0d4Xo^)bWp zj-YE;S1L#+Pxew<>_u{5ds`qqTA? z_X?X19DfmwT~9Us(yi3F?^SZi;h7iXLCufwb8~OS&T6xWN)j9men*y#+8QIu>A=7o zxjV$UxhHMFn2d8>NLlID@=#EHK@~8pSs)xZqw82wx;xu!xl&*yady{jnSRPPH|}Qt6WhtZT~A5tj(SyFnhTr~-D&4f|=1D`PV76Sd{|V!?>K zb6rb(b6VE26sT6!ET+1)@K?L&e1HR&O*$387we+ZEda?HZ1)^(O5z&k717RAQx*@CCl$pZ8< z`3odW8|J#h+oCUg7eLH2-LWq@cfCqC0;FqGTY&PWIaQ5`VrNd|L@jEObQ{{aIeJh` z5qG|!6ai#Nd};n*nLb_*466?^cZAW1Uv_fNs6E6}N(YuK7odN^o2sAs8BY0Lk+0CJ zVlA5uo^^IkqZkQea@k2$BN_jw#M~&fKFO}INUos^WXl)!DRFer_|eaxFES^8MupE7 zw9u_M{d|j?AiC?=nfY8+T3q*rDLmn;A)+sGU^8_$a}B)xURbaHkSAbL+&glDL%V!s zjDyl2^Jqz~VI?YPa>3*I@3u#lBoS4Tq~}e6e*Q@L!34E`3Gcsq6MwUGzj9V_oL1(T zu^bd!E_z5)@hJk_8~@T-(W7E~ivW`c?rLrLV^6QI_~UVXtqfWxYTwv@?7WL3Wd9u9 z{+d-Q9p2f3jCS3)hKyd;O@{CpmFsi=alm?tDaCF%(%^=CgmX%aOuCfg)5lhyRo^Ns z-T>VOBZkinx#b|$jIV*w9?0B7wyg{47}!LYuQp->I)SU%jdycev<*^B+s@nve6HNI zON2e%@fyiWgC@pXn-<=-{VY0E;(BD>7WG7ZJ9dk4$0)%BA~Z=&Bp4`Qzc|2B@ce+w#%S#F-p0>9X3!Q7JHe!Y_US8 zin?J*-`v3D1pw;Ko45Uv^)wTo}F`13Lug@z7i|n`(+zne#vY6pzR#OlCyfOQmPD_r9>vgBtdbLM*MC;MY_n_^XT%D}4 z^Ls|Q6{8a-?61*;U$jS_p~q{ep--!1LU-lrWZ z0hM+<<`uK(#bzt#IV#zMwgZR(59Ww&wxaK6ijZ^07kOajM(+6TP1I<6Cjz9Wq^x=_ zpRe`2X{h-Wd9{x$8OFq?jWI03n)8NeuX9*sYnf|VTAHO>TiGP3>d#PeR*0H;_nb4_ zOqB8ML+90c*wZxuFAL&@`0MEPvafPKfFtEZhluHF#ZjF&sF7TeC+am>-g{B6E~ z-R`#19XsS{3h0;{%B@X^a%Valy62`fUF*#RDdP;Dqn0jz@IekKwxLQ6+rq6QoP}Hl zG{^}(s6-QnsJ1zs$8070szzhpY1+UC?QxLSkaVkZ})UlE8vFWVI}9duOJuj@d~1b&eAaUG3Kx zyO{0ydYOUr_V0Y7#>dsRc7-&MU&hoXY;Dpjn6uj6kZyl17ihYCArQoAc)PXKqnyx( zgY@Gaxzadzz=5C8_j1#ngdVr|X6G;k0vW_Oqn)FpvAeg4G&!J^NUsIZh3E7M#Tr-X0GE~ zZ0!I!im=p5JF`|G_p7kwlh6G|_g>RseZ8}F!Py(CAtqB_NgBjueZKQG{4TvUU8=Ft z7=2TTgOA}wB1g%D5SC5w$`v*jW>FrA>SsM5C6AJW* zcKu&a&34r~F&)=Z>SGoU-i)hDT<5Edn6JuvkGgF4-g4m|Hir95vzIc?+0YLdvX0@; zT>XI0^27-uZc~ekqiOKzOodPvhE(lpVWsNT(b%>Ctll`eUi2|K8K9Lu3p3khU8<^{ z7kMWW|7)C7D?@uv&nMiL(tCJc?E4R0`LS*ftNi!gwp;l?u+$At#eJh8H&5t`5=uQE zS3H-%;T)q4W;NsP5gQxb<*O~D;eqrsYa&Bwr$+t#lgp3Y90^AhK}<=I!mwk1CIj&s7N+DCV6Ui&4n<7zhq zXVXp6>jG~*(t}OX-&6BD2(Fr>JJ3(mdjbKlY7a)9enD~8}n0U6KKX#O6ug}%5hicn&xK9nv#ipBWQ;6yocBHTG`@@e$gD`0yedo_CUwcirmGRc+fZt1BJ^2K^kz9fGZy7M{(DMAlp3OZOrP@Dd z=Abi5`P*amVVj}bpK=DOO58Xrx(9Q_Qtk#_N&O|4uxaT(8to_YC?#d97zln+EZ8nnh(B8gZzrI3%UDs_FXNA8H zE(!4pxuVhYe>BG>Psqdnw7~tc*9->QpDj^S4Akpcoq!cT055d%Lyl3<)DDZe*ZwtyEivq(qEewGKS z-1pO?-Hmx0@XL|Ragx`~(|hC7A3PlKmopfYnP%Y3IoWovTGKGjVri)0sN^vQg$B9Q z3dps|sZ&_btmiolpkDuDf?TR!d|YqRlD&L<-#UKIH8afXVi<$Cg}a>36`KK{n>pPnShSkmIK66g77g36P( zW{whZawV1}j&D#gElgwPWaX1}0mi&Ji3u?QU%>U`_l0Y4!LaCXn)((ZJ zdHb$vQSLAvg~t^9`)tT1I(=v)k36E;aJXq`h-44dkVhEYPg#pf9wJ0!t*;OgSCuj= zu~ePKhNYI4@5kzuwRvd&Hreh3!pVu8m8C;J`)k5ZUT5_`^DcZ3!@K9-dsNd^$szuA>1!u&$^`#36(@~Y7gmz7pqe04QAjCK(X?t0=ui%M>rxlx z9b;&D=CE;t+)tW#nBbx$w6v($S)Ss4VrSpW{+Rji3h~#ZWbwX)*tr>3YEDjHrB`pE zeL({skju_%hHNRJnTb~lp5_bQdc{B-pdM4PYfuJWn6)#BltP=6x)xrz58XjS2u^qNG z8p9ujlx3tx?6Ga07gcecLnSV9I1k3NU#i5A^ zaQ*20@HBRB>MN!jrNy@@2csC%k^wISgFxjy%94kH^j9!Ip@%rdEB6;l+O(mVbEaXLOErNpX_ZFIKyFK)0k{d&@W1Q&?5aq|^ww z=A1Y(2*b!uV%=@Sa+zu3zk5FL6Rz&_BSstw2(A8*uk&N`AkRhGF}7dGMZSYk4CY!D zynY#Kr|m_{;2zpcPSiQ`{u;_}@azAqBwBwTb*sW-<3Nll^k_T_KY8^RaVNiNO`1KRc=Sf^HtHh1?p9Kan&ED=U~;=7+-ID7_%YKkNB- zimHI<&*GudYhil90=JhEc8m?W3d7D@QarotE{m3jD{bUwo3{Adb3lHVtpZLI4c+i^ zn%VitKK?>lFvib%u7~w+fB-c(sRmB&fHw8>NIWf-jeqG!Jg2f_tf{dJ_`TZUdFSpS z9odo|j1#CL&N8LAj)M~+&;^yNbTz{~nfZ4NYsLqYZ&gG~_}bE5-`;|#)c;rb34sNd zlN+473_`fyV%KG7+fiB`u`t!$UM2 zmFrQbnWrs_eTt-vjS~3^`}%9PeAgF*cr!bg;QEadVbmJIbnGD>qKB-Ig@Zv)ySHag zuZlja>izIpj+I530!1$h+hN#07Wx;VnUnUsdtJ4eZb`ge`JTf!Ee67Wcg@3kab1$O zk(LS(@w_ZYE0!p?7FzR}e|lHPgd2Yw_G^!M87@5VuqVs?*T;>kb*xuZ77KK75*^Wx5b&fnD(d}8L`=lIU= z{KLUOStUM($jBa33&!;-z-E%Zz7VJR%~e<2%?rYCllJ0XoWyfL0Ic1e(73K!G>KK` zPL&>u9SQBuQmRW;_xnL`I3!~DP`0K~l^u#J<;@GGmvtr2w@*kxREdcg z-k{7uCahp+U2YDd@|srvkYd4|(mfW%4Be$DDpa zYK4CoRBrXBA|*6NJq=MWY@W37ktVv|Wv-)ie(g(n9{Gw5&qZLRB#{(O6jdh~A4MfY zASlvH@%b=e9s(2}9pV^prbbHhHn@fnV&@0gPmlJ)4}{Uo87Ta1S9MBL7HViZZRD*< zjT+KoM2jaD9mJ)LVOXr_Us5jUmu%Fd#NIav&Bi&$_gM&o_Z1c|tp{*OE11=XiOCs9 zh1HTlL}k63@VaGBRr0As_4Hy&Vcc2kB`X^-D=%smoIYV{5~3Y(5@4C6Ct|>g&Wds2 ztjs6t(1f__NFy+&UEZRsH&!0Q3cvQ$koY90@-05VZulJyR`@a@O0gDt(y{! z9Z)Ir2b{@RVZh_nXIfDC2W?~LQ)$!6hv|OIb;o#sX7Cqf!xs>)beosu#@>TcB>7AZ z%NaR%kO3ot@zp{sKD3q*Vk=e{Nr1wxwIU>h2&T_EZgB5=LPGmv-I|zQj^HCPuspOR6lE z3}PAmAl*<&lwYcAH8Z013>6~I!o}Z+EP>FRR~<{2UK4CFe7_I)fMN4CS37O zb)N=hrh*h#$@-z$613JX78pT$vb|x=2*>8Wtp>7 zl4JV8;P?ZzT7D~lyzaV1qtKNswl|Fft+VuiXntzvlS6@8CNGBoi}FJiN(^n9Q4ZA; z0XLWr!3Hr45<+X%DCqs0*20b|QyeV?REV(S&k)XHl0Z{;9bOwq0Y%M7Q!!mD8*?>q zJY~V2t%^Tds!@vMr#V2HA zT@0U)SfDAs+RDP?4B|m9;*~Ux2nMvRi4lvB_VR71DN7nRE8OazSkR5C8f4-*>7D>S zw=z(ULfkh?>4u(?VmcOl>T`(gt@iL(Gl1_;fT%%xs}72i)8>-n87Aco&{25FPGZ?Y9Z3Ao}Nka8YB$3E8^!Dy>tc_!;uj)=ETQA3%LVYGBJ^N- z!NBTK%>08Gd$qDRArRCkq8z0t?5SeWSSp2?C@&%IABPA07_spWUlRecrN=rkl6SQP zu2sP5R0d1y*t3*coOp;N>xwWBxKok*ewJKA^cpNm6$F#0>=OayfOqJF6tO{On3i5O z2+t^81zG$pB$V~Ac3fyt`duGS5fa)L#JJL*pmh zQxj-}O{|EPYC)voyx^T*>CjQ?8hmU`B_d;RTA5Xqs5y7aNc^2zPS8NIjPE5e%&Zz; z=EkIdGS}nI1=foXSue6&H?g)2b2G}0D2Qc>J!}x2GW;aQq z)4xyj=|ut~2VkIE)cdcdCv=7yFOLPv37dQ+b%~nU^yn6{)8*%o>FxW7jIIn?SRsVq zUW~g2T_=1!U|-$ElasX&6et?RXscxWw%=czk?JIS5FT;XhblYCpn}e0F0j|+{^Alp zj)=lUL<)ghdc${(w4n@P;W`#&guL-_*#U-()2x=HIYAU0vl^T|l2ILW9znut?E)S7qI`E^2QXK@s9f zODb-J*pxh7r!GA~#ggw!r!7EatVz@9oAC9{%4ZiR#^!wo1*Gf5Yc+IqrizW@rnUU* z;4xRT64A_g%P=xdda2#^^7Q}~V$}68C?GsMs_^%5*6^D!8o*5Fa8s}8fdVyAt{J^7 zZDORif1^c;SrcX-TA*>(s;owbgd*Sy~cAQgzX1MLylI_F4BEb2_Z9ol;csQ^@!fkV5DDxF2kPuL+fG+*yG&2J){ zpN8PvnIV6z%gx(EdvEfR2{?=u&L#aS`)IEvzymCrv+gu8av&2Bw_px}siYh9|Mt?i z>)FXIx%@>auJO@|BBvk`Q7F8EPTfP_QlK#ij&ZW zniy1DLg59c%ECF_f`+0aVurk-D&?lVkRY-9xdV>x3$5VslN_efs#y6zecpGB6JIPZ zwBeiWDQ*$~U5Mes7k;TMZqxj1NMw9T&o#^t9Mpn=Deqo;3a&IN=eUr6C*w z7~G0SJ-1pGAsX<3jQ3>{aMgZ0GtslctDeLcGWon*8xD;wSOY^YT7r;=^fhbVq*pmE;+2Q-;OABg6S4;TX z$MK!4jj0jpA6v)C=l3m%82r`{nO>)KJCF4?%WXJ!6Z!?M`19YxTg>jR%I!C+Ajw+Lx5e%vJD`I6H*u~|^ z9Pw}><-Gd!R;|42M_<;)bGUrZ{K8s4Uu}kwK2}AiW2tY1ufBj9YWVUQ?b%MO%E&)|`IJ_=+S4 z`+jnv9y?qR5RHX4795=sRNNC+_2tI3s2ZWO5&XS6^9!042H1K;D{8#mWgZ!Y;+W@x zPgt~u&5ukKdf0EQM&q=zpnE;n#s3ske;0W(VMl3)^GK%kuB(p>CL08F#2jQnuG}V> zy_pOu4(xnRtVfdRY=WJ5fJpoKEX89xu4$Z0G$N!OBK9G}xbG7A+4T|UyPzr7`RS*F z>*Ff>Ea)cQ62I!Zl}P`i1x(w(Z=!gV-&L=Wyg-pPxoIZ2TkBCtIQt?mvXgl{6ZB~Y z=KAt`6lUi2QtP{JEB&n<9aH+J^sk1>?w|Xz!LY1Xa(W(At}37CO&oWHDmd}?v%Kj% z7Rvin!rRHU3LtIUZ;{GpKHu*UZ`P8%7xcX&EGwJtsy$Wns&XYW-A!Gli=hOi+W^0L zi0>`u&*jlu@q3f$=?cld{@B=gTgxkF-J^Of7tfAYRgsTuOPh^5-UO}n?RBoWkYo=k!p~@xxXuY*b%G%rTZXP+kfa=AslFP;76f!Ep_(t(X}QyEMDFXo zppQx__q1Y09z_S0p7rcIDcdZnMzQq?Oyb4`IUFHw9b4W)od`Um0f4?(vx0 zThN@F@%SGa@_8_>~^4mX~f5X5=b;ZM1%JK=k=rQV#W^R!vGKNiqr z$g8K@3P2rtyIUV&{S}n@1?vMT=Mers{zYa|N5k~2O)OQc4|5M2uvT?1gt)y9RfsQl zUE(l3hB%jQGt)Z6a;sNz6a{h8<`5(MzBG41h{ywr(M(~Ws2glhZmiEX(+7M36w14} ztv;AoVhNI<8k?}DHcXtpmw9nvKz5LtKCCwcq&~i@+AT$d1NIi9PbJ^FzHadG^ZWoG zyY2Q9e&491uM&7P54r}sp!&{v{Dhbm9MRXHzKT|8>E=ng>x5U(U;Kr{wwJ}=f(^~3 zn$;|fZj#0-4$4rv8M*@cW==o&8510ohs!BG z-Qbo9x}5_1tq_8f_Dx(hzlNx;Tx39T$Ym$R4##TPQ__M+M@JF?F#8!u^I^#MclPv` zL=8!pBa4*Ky(f28%+D}KUsPX;Fipm{FqVq9;WQ9#X8S-iWn%$M!APE$fjbQ$Qnok= zflv-MI(>({H#6q#edF=`<<-Lk+lBmbb7+QjyO$Oxp>GQ&MktDi35)rw&qBlXJ63$& z4+}K&w7fYJWKXsN)oskEGGmqAn};6>@;+b z@WsyC-J(1YH3Zr2y7F|9>tpGyx}>O|An=^Gzg8Lf?T#dH|LSwmcfOSP9jLNt{RcG} zr+af7&#gQN@-G+3DsA*dB;ihNXs3Iz91bH<48VtYUJ8OIk9*!W%A++5(wUR|f%)LX zOdcZc0IwJC6rBV($2A(+J0D>tMasq6La^~V<1=}a&Oun7SV7MwH^TYy)zG6Vn?AX) z)!2SyN!5CLV%^XWr(V3q;wc(#hh2s&C5bL=gfO(Za4)1`iI$&U@!9iS2R+~Lff7V$ z&m21ypm;MyrO4wArT84Wg>=1J?b^xA^d6pi3z~YOR}~JbO!w6qGDZBy0~gv@_(JtY zM#vofktBmuj{-A(v;r1GzaHAq2rIr6ei$aar0udO0;#JamZrla@+WYUex2K8_{GK+ z0+S~?MZ6FNbUb8Mix6D4QfweTZ@tr3c4&)hX1XI^uAde5-j%_MEP)b0#vp)uOOZ-#a4lMGxzvPv z+`bz2h>L59V!&*omBs=K5;?=kCrB=+#S1-N%%Al`ol!V%!fL9ztrOa8&$rZNs)JNZ zIm}28W2-JWEOK+WjKw!}U#w5${=)Mpu~yPl{=S+5l(9P`QOz1;KoAAB9_KHc$ z{|etke{iNNcs_2xFcOXg+fJ4aqlzfR-K?nmy!5mv{3CpU9V$@k*_$XrDKo}4UUP43*XEg zyAJ?|_q{qqTkOyfJ3BPG#2_1wLw*k)No|Gz{9uL$=Xv)@*#XbQxTxpY_gN&^z6pui z(vz{jlapV*N~Qs{4L$e>L1t7Z$%@t&*a7WbYFxCBFtG)L1=>QiorOT5j_JtPrA{)> zg|%X^$;clWAJO5FCv$l+fa#O~a9h?ccwcXpkSJT?E3m%cMuU#-lcYSU z3uCZf6qM^ZC%5QD-T%V7kVwU-}$Q-3T)2u0`9po;{%lrgW%nBZsSfYGUg_} zPpQ~ZyYP(`Np!2mLf)G<*Fr(vN&LyJ zTOf^S>*3yseg^+6Du@tw+*Y3+^>Y;SpOgyJpE>LX2_R;$k{hW(0;OI(2}}Jh=_@eF z!dyCUyxeXv0Y>y=(+(q?nvIuS-(i&}uD=+O>5N^YL9W_!xUW~F&`@St(6RXwWJ5zg zLvvonsNmDaD3#YT&3=&I6&$i66>Pydr~>7suH(A0r@&@`%$>iC{x-kexjXb~dt3RP(2kSRWOt>jLB* zHm5E899!ec9@0IWN{Xto5~V7c`-07|G*Y+N^CcaSJZ{DFlQXoF8`VGlFyLHV(7HlY z;f>pI`@(k<7hBN=ZCav))Z$ z5^pYEupl;*h4=NLq-St#2Ky@!Ef&`!z+jx4yka!?hm2Oq6iy*9%b!0vJ(!Tr%u#A7 zuS-nV1+Cidl_p2GTOGy10|Sn=Eu>`Y*ct9}V}QYcys4|YFhj}iSy-7sujc6V^vL3_ zfAjm)-BnHMzw9~S5>;Y&f>5?M5Hl*j<_*ey;|{^|z)V=ZfdP3gmCmRb3BGh?6jz!) zpFaUAX9g=}kL6|(FW8b*`Z<6B>$1@i0$jK09!F+z)AZ-qdT&H+dFDO#&=6>ziK zsA32eQY3tSXT{Z^LbTf#N}KLFbf>>&EAibECIA5=#-flGyo>^$8BGQ&qsY@x#OVQ) zf}L2z51HOt6gR9&eWPc<6}DsnA65pmb}s(Lw_3Drg^xPfb?6aMpZ=J{~O@GYIA*j+yN*2XYDT^P$zh z9=T5p9D#bnY?9?QxZVY}X>i(C`wisvWM7~)CeZ#n$E?Kh+;@~7H<2p50`F+#1G<{u zAe#z4Q$mvd>b+H;vTO*?XWQp5U>v`r=O<>Oa6dlGbJfJ+VS*!6a4@KGg&#g>fnCWv zx#;T2jp})Ml&x=?p(bfXq>D`R-M~mSHo1jvJy<`Z(r$rO#f&3)6r&46YeH(NX6bu& zcz(!87WfwqA;5fGnYzlWZI>l91%{Y!sYs67gmcS7N)X^mMaa{Ey$eCIATXt)NTL9e zvrHK#ILf~-C0NGOQWL(}{lI0`t_O|Az$L7E59bh;u?cudPYKo<6R zRT0zqs$wLkuZCNL?f6GW-Q^ENwP|rl$dawtZ!C&FwK#|^a8T0Vv&u={^kt$NoRk(l za-z0d8i0$bdsr)F;6Feh10_6qo@De$MdyKyCtRrx`7qvpKOl(5MwK7^!!P{{06af| zK_n_Q#HXhVGw3U9*2b;)H%`d>F*zWjA({^ELMc=D_#Lt{K&4_xQ$e^2!lp^%*cr*R zVyJ|mn`)GK#=fakE7;wnX%vEY&?tYUQPwsvWk}dRScpM z1Ia{Dh{Kmk+R9mS|oLC8u6z`Hz9f6`Xzf?hr+5do^FaZkSl0b-A8!?k58HvI@3-n3C=i(db;owd( z6>iXKsw+8&?-EI8j!61X$>Mg7XhxjU|F^K&D5VeAmM>;~W=rNeL64Y7CpIjT{N_uf5u~-ICvZj+nhp;}ki{n+inHxswq&0y}mU zzcabAfX}qy9-ASXa`MIhA2fz*j{9`}{w*eH{|#|*g8uTW<)FD=2jSny6U3046#=IE z#ry4@?XsWT_kG`6cc)V8=q$!LFuMqEq-6zYm!C(j%cv|FaQK`BN<}PIvniY z8y3p$-mR!Is70Omk7^T7!-9b}6<-rwsfC4T_HSu3VQ%pJ9cOmJ6^*KJD4 zyqSR$*&%Xu9XWa*y-LpuLJw10e15MJ$HD`CksWCgD>Vic01iWC8q57i8e2Wm8b;>j zLO(}sy;K+nkai#)DJuk^vR&2FDFTkLxJ;=2zApqni1@O5#8DfYxcET|3c}oofXc3Q zABsH?G>M%maY&t@bNnR>p53XA!iS9HUqVOIKH@`EFuyF(nnBG|RF36Vag>MhLSR!j z`dU{KU7AF`Hi<4sFXE=s6kNCkOrV$z(^!Gy05cyu@aU4lu&C}j(VLi1+_gW@y`}u~ zc816+rp8j!bHz4=&ku1Tp#OCeSAp>WN9U-edTgpswyUf4a;hb{`l=wzdBnV%yTNgl zl*2IEiS96thd^$~w&jIxu$^LUH{t2uX|Izo7^n0b!ndzRI9u6?yE0k9;=Ku@VWM*Q zMFxz@j|b&N9~wF|a8&a;G)9ndEl6u?`miPXZ0E$y>vfzHifvm#c|tpMfX`|(6@+9K zGY8RhDJhG=?6-p-@>k^zbmOZKU!;^CfX1)kYXOnLSuV z^P4+JNZlbl0*shr03ljn$8*cqVM@>rz5|d={kV%Rf+Tjh0f-cGd8*YHAuGUOMOztc z9j7455qgo#Qlri3&Hd0EBhwDE7kHq|(Qbsr7bybM%=}{d-hA=B=hkFuv%9e9(l|Vv z^{j2w3*@&xOwAZ{i9^VpcmKv_cMmGmq1Xl z?q+#_Z&z1>)lv{rH`z1x=QO^({!GUK$=8=mMfi*sAzEu@xG3(j-vMVQchlT#=dyX= z|A~KHjKS3wOkL<$ljbR=AHq&r=qrl{0ahqcq5`;&H2>VrXON|qFtqAHLM%M6Z`ViZgo$`1BP(Cw(uiYBT*p{dDe`qE z6q`IlMl%OWKY>w{^68 z2i5uf;L&h|lt-h}+L=nlczRI$)o1kjZ-Z1ekY2q zsgA?$-fF+gp9bKjs;il#kz1 z9wsKw2|{hI(X_wf38qU?cBBvjA=MA+-;*y9=`Alcd@k;at-^A*?}}3Flk{svEP0* zp2UGcl;{Ow%JUM=&$~J(TSz+#F(=weAtpB4+6Fls;m2+3NcF7$$*ZDuBcoiNmmx3M z-wtf1vmEpPp{c$#lteG+>cg@|50S|HyBBp*m3Z|(pjz;rg7NrNn$hC%?^3aT9FKhm z!R|=*C*9>14N0(&HuQ-{^5R0L&J16px>DqX_kSBt_hU^urey9w*geq)Z#tG2wr=7- zFT+rxzr>4%;R zvnL?^d*^zhzd)w$tOW1nB?70Hzm-vExkn7iv`1GN=UM;BWv^yP_jc5fQOgU#XddW+ za2U|p#6p>vmB>OFm9EPpS`Ymp!{d}x@Rzl?jeIiMcWmo}u4=F^aZ&%@k)dEP40_f# z8eq&akc7F{L&3KPIFNX|?9ChtDNd|L@@b9oB!Q zumNOf^I5pGE6CRXwPM9U(*KCzyh2&xPpmryVfOtX_Vg3(KoLUw{Z`qDJ)(WKQ|bRR z&;MTa0Aq1}o-A0_!g5Bz3L@EuERZjSh>QSQ-&1HW&0YA;L$eX67LPvJW1aAx%Sl51 za{v}74h0dF7+pY~hZcUFqB78Dv|K|$U#gG$Kf{~uf`u=WdZfY<8F3v=chlU1} z%GKWQhsnT6!zvb9{3NM=(@-SqrGJq{#2*T*BehB7?6?f;n4)4%EDjNDg^B(t8}0co z;c@6o^bGE;L&+1IkG1k{F`{0$unyoOhYk{t9tiIgCe2YzwHtn#FJz#@)O0`#2~ato2AP=rOIV( z=mKiU*HCyK6YY&j%?9X-9__G1sV0Hf$YH~s%T70eDZA74R@4gii^Aqf35ltXs9X41 z=5@8U4eu!EIp1>q;K9nArT$vn;QE1tEbJ_m-y*O6Ba)6I+PaQmUPbTLj#w!VlB(LS zY!JtT$1Vg}c|Fblxc^;All$EJg+ID6#IQ6H?p;_TwDEEtJJe1R1GG$~fPQy#a*+^0 zc+}~m=AEh4bC|Q`4ts;8ENh2*&A0STG4H#UXQrA~dKVtw`~MqwhgBEIXGo=N-Gyxm zSwdT{FPH3ubW91g*H@#A>!pE+cu)9=TO%*7HrdDVo%`)CywLBRhU_m_7w-R2_!RHJ z^TT zN*v4t0$BbI*x946#CD>A?j#tO0DmTtmGl1C`m&FWm4}OljQM8g?ORY5<#gBqk$T_l7=gz-D7DO3KswFNUM=2yPJ3Wr(g5}{xO781KOf-M)aCZbCr6f zFsynSOy=itOx7lZtu*Z0RU!5Urr#0mX*EJw2svqp@*4Ab{6mnsB9tPPcc;>W1$1~J ze9*M&j-u`_PiM~I9d9*_w>NItax^ZnkIMx{{^rUJuQxPYEjJ*=3mW?`W=8&Hcx5U^ ztTiBwi92~d{4PFC^NX?{YgNv{T6p!iJTXClZNBQm{a(B;yL21gv3 z)1P=e@38}~@HLO|i{=f(@VPR4maQCK2@2z|Vv>(BT;1@Q${tyUN5`}2?4xtDo zn5H6G;;X+i#bnhvT8z|X;SP~14dH1^72S(g>?90&E3F+Czm?C+ypNv;t~=rqkXEEa z+Sl~P*`-I{=GNpX;wlI(u&GbcE5Mo@Y!z?l>3AGy|9p;}_2{5k*oHv0=-ja3eF+<9 z8a=@H?mT0kzv|AmZ_Cts#O?CS(7Ad**Bs-^Eg}ORKz9$pBcRzU} zR^F{=*3&=)F~>djF8x5#Yi2@n3eW~?&wEer7VQ|sZ8ohLg${k)#aWSEh?h8` zhypXCTB|vbI2yZX-gv3bX9w$Thb+OgKf8U$XOX4jO{l&arZg$D04>6<%rK?-<(44gDUe0=U zW9Z~MdEVJ%2>tM%&b3jIEu7%w`xvIOVYJW0T)pQvw}vU5uRg(BgjOGTz z-t>!Vbe4l}3k{2v-uRbSwTls{={$6Rgr3MCmdAQTvl$3315!^>%$o_lqgU*lo3OgP zY<&q6g0T=4EU6I8&NThpLnXw{qUpnwxKUHJ5y*$0L)RXs9*s3BX zbFsp%2d?2-MLZC$rUzqQeKSU$DrI?bwY>IZVA0YV!inM?{@v?Q;~eojFYl#>{>#yD zNnQ0HTkm#jiv2${G|BHvO4oL|MJB5y|M7`1gaM@;mxN73azIuP_1X==z$O~q%jmgb z<)oEhwm>>r-KI0U-O6h3>LLgJKu+Dt^M`@ZO2(g%pnf%q#LlUwKvUIzMev3M-{h=^ zV32hD_CES1^#wC~}nJ7cJs>P}zDrl_mAPo-wW>O~1O%H|VF2xXpu0UaGnYOZ)&wWGng_=`HYx=HrvDnq9BHWu&iK-SseQUxBwCqzHbj)mO31IvxPx`K?>ZC()R zH_7KLDoLL4T=C<6>1*6@eY+-l*Zwalic&@+@kDh6X1~AK{3T{m`rKdhk*G(~vHX{)TZxhBovmG|g{83hW?FxL)2ZVHu=>%rR;;~9^INVPsVl>!$htq+#DSLFcAJA@3e> z?Wdc{uoiZbzm@xbwi*Y0io*Z<_QWo>&V{MDR+QoDu|1^Pm^ToPCNIdWIe&Wpjl#5$ zyv4Qs8>ZglGv!aWr)!8(65Ma|Go`jk!%tuKVmSB^#=rugmY(-2q{?meG?nC5<6S3b zQcd8q=P>hndvYiB{nJHzhGEDriy?*xyK2J4&VNK;&GO&}UBWhVb@vUt6U2Hk5L68F zJEZP@7Z3<(p{DuX;YZ=i7_+%ja39Ss;i}=`|ZL8`r##)yh(!@K*1yon&>OD85O@?-#mzB z_z1eu!0Yz={Y1WIQH8_xQ0POJsThN2jSm(4?ccr@lt+7{2)Zy-+;t1802SV9s%pi7 zQ2Obu>wXy~OJ7zpmR29owUdFysBk%A?b{NdBu{Cmdc}^)Jvu+e0SGhT+-( z-&Ec6{_(lCp_HMBtdO%?yIZ|knY)B$ppPQYzGI2?Ra_}L&|NyeMl(=Mz5#_w?3@DSgtT!@cUl$vUNuT=afCn!b(R$no z{_-}7ztnbm(P}efgriT=jBZbMLg3nAO|Qx#tho3eY|Khp>-P?Z%JVtMNDsgFnqjOz zxLTB=0%gS5)r0rhjoTo1Q)!@_uJq|qM78(cw)1XY+hOxs4W8#OPINxJACWbV{Q^uD zC%sDeO8t#(Wo4s*H(1oO4Hq>?01pz~&;_J9Zwp9$&0=;1S+rRnp^R?=u(2vb-HMwn zK~z-8I1tMc3i!qz+*UPJ{(FtSC4qVKwB)NAs1LyLz8l3z_N^5EMK?eq=CrjDu6XrI zO!qC>7$Ac$ZdtAUrB(#R!k;WM?(z^#{c$acmh&i;W9L){j!!N=3MGPt=15gK{cCmS zF=i{#qHvA^#*z}yW~wG*7WXMDRGc9jyjyfpJ&AMRIZ=?s`FzCuEWxs zb~^q#lO1bu!$Y44%PbF)jooa^)&m$At37Sxah#$B3K7Gh!DCMJhE6ui9Q9gza5tYZ z`Sa!$@M^X|eG53PDh3dtyg)`*$i7bKx{#1mMvB7DpW3 z+O}G{{iWv(Mswf97jvrp`uW_$mT5!xh2M=$;gs<|9$W(Xvh5O@V?G~Fz!sDs+OPSs zRCk{mWidJ9J!#>ttj9qu1|l=PCiL*e@Yp|a(ewNbOH)XTEAA>s_UWX5A*KWA2oQP( ziWd1JePFGA!1utt-<18{@|&cR>D##I5jRazblgTN69yHZ+kx(N=?uFGxllJ+Kqo%$ zSdv}AiApC|ikL?(Aj@}zH|u=$^%$-~;o!2@ppKMIGJVZ4;&Rlz?~-n65m0UK0}VF|kKTd=^=0Fu0X3 z-|B#3YZLOzOGiLN+_v!-T~Ibh)C>bU3$2$U3mi(G1>_&Zj2^7n&%`AECp8ebGKt{c zXhQB979jY{CB9(hawC6YBqt@lk0J!Ulr(D~(9e#4m!xD|V%i+1@q0T(_wCZ+Y0|Rm zH}mSFk!xGg?ouCRZHTTpPb~ddHR$#gi4~mn-^NnvAfQ>S?nAUnp~L$1bmZFVop^j) zriHJzBM+BS5L<=lL;ZK@_%iFqYpdUzQ>j|mzzX+S!^_Ff?f~43f?6CC=|S-%y%GI= z2GOJLi#n6s6_>sxXNO&RvkInBZ?zcvo)`7b`ewuvOYb*kyWzO2D7fPCy51MU+13I5 z#&;ihzuY1*P?Xh3LIhHsCVck{5yTB(>Pngxy0Vy^Qu6yUN< z-fmGV+-fIQ^F+iWi{h7avXzz=7V7ZIC}`rAIq$8%w73_Q@C!t&dQ_m1&|CG}f%GuK z(-vBwP6^)!d)CpNg(dWo(T3#^cMvF&NTw^Xu16w$pq_E{Bo(W3Ij<&hf@Kf|}F{ z`WIuUhndoydbL1KZ=?JEo^F4R<~b!B31G+3M((rA-gi#Ar4WHL0guxmd4=-U%ZgXf zOHX|7lqVD_fv-NrJ>tZ}(6)3@LV41F>)(|>|H?90-@wa&sIYbs5%%*tz{7U_cY;&d zZd`fN2v(gnJEUlIjgM*`hmNl4%(-1N#-CSFH3gJiXVm~+ex^0|Z!y!1bfdh9qMKJ5 z_yoVY!$=JnlgM`x&~VahO=8MIWjS?h4fRXp3~OBzKP31&0sicPR;9>zu9$E1pLecy z`hTUoI#tDlHB_44D2im{IA$4JB_qa#DW%WYkiRBAhNP=8Q~zZcQ86!K$woB@2(8Ma z;>fO#>7!h5X%DIdUAROffEQpCMS-W?6CIFrwv`oC4gAKrEM@eIogsdZ3I)Iu6-*bf zUlBWup$AGP-l}#VjeoXRqTenyoVbn>tOp4O{Vwo;OY5{F=V=nyupkpJX_NRnf6iT5 zVIfFbwAHL&F#lJqbQzU|OTv<-8HRO6*PJARRjmPqAkLG`rLo2C0^G7m=6A|$7tok| z>(Ez!j1Notv`3w2(H#B`)?MhSF%V-JJu2LWcaP1v$8k>7v5k6q`fm}|l67bvVQJ6R zuF5nBH%)|BZAjU3lk}cj%3&7Kl!OT|@Cj;2IQ;7$V1v8`4eh&Jb^Oh8-$T)5#xzQl z`bxC-Ymzoza&}FFSsi;!O%Q0K-2ps~xim_d9tlo$UE;{dyJ2bt2Y!*f!HR>>as81R zo;$U_log#O71x4O)U622zc=uEgmnqfGQ;ZG5TaOlPe2v_2$OQ2Z3ZoA$rdZR)hce` zQ~^&EC9^pK7PUi^t)h)+vuPl^WTS3b+i=5f;hl^dDX{>X8e0tteiaTvgF$Pj%@&3x z46>&z$|y=f;1D(zrV0^p12T^A_Bf+Xj|Wq>bv#hV|7gd`)fCQGqk@i_C1np>kKzuk z8-`)a%G;nXwSj$}OcVjE;^%|B$Muz7c$$wat7G2%z7@KmrwLx&%5D z$ZgNX9^=={;pR!hcN8vYEM0M3ml})DlN32*B%b_-g&0{E9D!_>EJ9Pso45c$MQm(q}h-K(MOr*Sb3&T*^Vja%cmI$ z0h{F`x1o&C5NviPo4m|fwTysx)J(wAVteyUzRQ#dy`0T-W->6Ov#~Bh+>;z&6#7Zu z`0+(Xy8ep~h>jJdN8qR7+>3d^YyfD$+(&KOwJWpyzFn{nC2Yt}iG>XykjSH(BGC*4 zfz&ttn^Ff1BVb9Wgn*^_h?*8p)IqMdR82th1E<4!XDX?FiED|i5rf_BuAjL4u+QLQ>=*~K;a&U@w1rbT zg8oG)oj>sT&paV3=84!FOqXJ2?Uz1n{BPooazv7^R>yjzRksx&N-cB_d zn``1LN!FHCS}OuRHO!Q2FuB!9E%Sl{jt@hpWfyf=K#P4-X+V)bEYsimuQE5zpE+R9 zi8!i~K?AwO+-L42TZ$Rp?OWm!Yn}TLPD@n#ENEAwK7C%Tvc7 zRZJ$@j3Ygv8r5SiIx(`0zwvLC**NX@H4}&SC6RU%S>h<1yOXLPVG+kqz=xo3kQbEW z3B+5)gf%!BGo~}qkT|%R{)x*zG|M-|clA+^J|>7kAAL3=KAGb$3k!Kj{eUc!1TqhB zP%-szV%fU#X%1ce4o*%ZnHK5G&Kx~Ut;!Kpi_~+1kefnh;w?r@bPQGO?KCp<>UaFooE>V&l{PGC%W4%3p*n&23t&5jmMCUgb# z9jIxSnP3J6dq!7<^{rq{5~#z>13u4A{I?WCOjtIX6oEYZ&xmU5hJLavke!Y33I^cj zty{S2>K*?5cp{4OLNUZ*LpYRtcF}L^HIOtO4KXVnqGf|aU(f=-(ij3LWu^u4(dI*5a}Ic zMG42{W{Q5qQy-QbawS%uv%SgL%(-t}9kMoS#b-x0TiH28Zzq?)M>3m%%*hVEXVWAR z=;4mC+r)?El z^TaX8pRyEBr@jMzkAqj!_0pOYVeMEAl&-%ybG{ux{xLh)65RW0v(b!E)AdX!L%@M@ z@OoIen}@!ydlV5ZO5dzBd!h3Q(PV1BEqItxIoML`| z{nJy8VsI7G5LQcs_E7QSJ9B}htKU}Zg{IB+?NCccyoXToh#eNV#x_ykgdF|_j6bO* ziHJWKaOF!jmz=yv8l+>+iHJ3#WkVblgN~{zOBN{|K>*eatfA!aCC@}#KcScocEH!9 zyJlMyF~kJbzf;6dVPhPnP=4G6t5lmqX(YYalAKGXkhfpxCIk6dla{0~e?Nt)eLkI+ zI+t5pUwRMlvU(d|YPJr$zJ_p{rHzW1YQ>Y{IcI3Py_JxZy6%aI=C%5Ja;{wPP~dNV?KV~ z2)wOK5~^#I0Lk)f^rOp=*79|LT`3;=X20m~Z$QT+&TGX4I&?V1*dhf~6*G?jxY z>^ks;p^^Hjf0r2jd|*P)pmaJ{z{?H{@}yB>nxybJ9Lm4oWp%b=KKY}g8k_b)324Uz zYu2dDR~M^?g*X~+j5Yg4V~uBWF1!C=GuEdTd1DlXG=z}&R=-D*N%KT+i~_myqx<~J zx^x|W78ZLe{Q}T~J+=yMxl)g*igKK6NHuk%<0xab zx5pTY;q*vt>RUeUWO_ba?yfdv%fi&c7y; z6f4Qjq7~7yqb8*(btY-`baU4<_M9V~*BHyZG7DiA6B2l@-1!5qzBTfrJD+BE2XH7k zFtb`Z(#m@|ElVO!aV5$boYvl<{oITITAn@>#;1;BH7%7LhGX+e`(-cTn?r)?bk+S@ z@NlSDrEUYk>j>so1Zrs7N0;x3X0EUMRa@%Ac{=Eb*nfjX4nJN#!0!7=d}$k zV(`g&@^QyYL2|P!X2^6+?0_?qf8AG+<-mDQR(mmK*ZpIewbQ8HQbo;Gja0F}6?0_8 zxGF4ywNLppSkbZDJrVG@pY?UVcd4fv?#upmo<$D`O?6NG-Zwig0~TBL0`z$@9k|ZM zCJnW+S+a6jKD(YGQBcqkW)l6qZ`YyV`_5eBr9Oyyb06W#>E=-Oe<<3lR1isn zP*vr0UZ901h_6u@6S{}^H30|ukkjC$KXTG{0&Z-Ny!tP-)#_r0?WpDE5?@!FxD*WG z>1qXsf3#+<-G5bMC8*b!OTv(49@30vlCQ`5L7^ML_8}?|O-7*zGIE$}zLwRudDIwQ z>5G3Gqzr&^GWGnkL8+kEjN~Pu(Y6weOd=CGqt)Da>K9qQtB zvVR7aV8$51YM#X-UdL>rKAk*gQakAH)=SV4@$KlpvSz_b zl&wN|Iy~0|!muT*5FLDKzZ|1B56%w6ZaXI^IeKsXhqzRrk$|rH9wYRWZ3*hwh(LZ_^Sbz+ zQLMSlDBCdSmTtB`Dq~yrUCm0<%&OV_(LTfLg72#!ih`hNtK$2GGyTD(ZoQMkww{N+ zU#h*|Cf6@~--E}E`)~Wof8MA>2U)F`)1de^HeD=_5>=Bk5{pv?j5Rdy1@iDjr9DeG zCE}OEg9{|hw8xxGOC7fRD?>aIBAu5HsW-$4)$4UEt(FS;$;ru;y=}m=Wn?*4`>j>g z4`%&H5D9*?$DEDd-?FEF27iPELz?OqT2QrIh#jvO#lhZJh5OSU=pRKoeIMXOmGYh> z6D}YYu=i?tiH5YM5N9=CC6~0BE-{+M)fqLAWjWIB>an>dh25F>673mNs+HA9WxRA<9>z|tB_z{i7t@+zX9s? z*_?d>E8A3!S^6a7Ntb*l)v@`SxgKlmq<575z2ab zn!gWbUy(M130}xZDZ$BQ7wRbrJE}F?`m)-g-o-D@GF53_=1Vp!-WyllY$R37Lo;4Y z#E_8zfPgHat;O88LeUQ8yklk!ucEM)9Zx>eQ&T#F@L1t0+It03|yIbbS_Yg`NkR;C!Q!~`gO;i*mO zyeEI)I~06vZ-rfy-mu?e+ngT^13&;bLs<|kd)`=oo-Y@f3a=9@ijT}nAKkl@8C5ae zcCqff-q&z)cUQ+|v4~^qPJ0I_{_Di6K36HFbDN|{8j5Oom}>QyC9MD*xAHQM1-hQs ztAdw>D*y*eeAWCdGLT^AB1Fdzn%o0Q=vP^a%AsvhQl`%Ow5!`>lcAvOe9LWEKDY5G z6nUxD4GvNb=FbGSfGdGX1MfIDTrB(?sl4YixmKME9i4Wg(s!Pt6Jj6N8GC7}7-g0B z9WWJ8iuK5Q3sh78BmQ4wx)l!(H19|M&wnbenCJ1;c$EH%IdYx>pZn^mYGR=;I#KM<95`y z?u|asWF~+XXhL+n$@Y?Cq<@OmtGTk^FF7PIw2!cQ1X}Gps;Pczt+{M|oy+QFHdfxj zcvdFGFb!+If#g+nW0bojN+onnw3M^2`a#346QJ^WWGWaKn;7|qhOMboGTE;lq(yO% zZ~;CYq=(rY8>H@XNFkrhVzgA95k6V)+!zqcb~c9N(szFwU>BV}44tb?QWb^=H-|`) zLdcwB3Bv8l1+5NfT7pkJ;Xv8aO8tg(v(DQ9uzki<=bbS+l1{A!W$hQJzN#`gpG-#6 zziKgMz6IPWQ#95JMsiNsEY|9_h4KP#O88xFd!ACeU#HR{24ux1U31hB(f+N5Jxm_0 zz}Rhc-6PU)6Z#Io%v^j=2NQvqe6L zZ;UUj-xO_w4Uo#sgAU#Fl|^?wb7a{jCx(Fmp9=6FV6n_9$ejKBmB<`f@XI@HO}8*6 zy-Dd}1w;4Onoh1*XvVvr4_wYoegbfBN%Py9Ka-BxOJ#YQ&v#hWIjmNG099B)y^xp8Zg@x)$VPDgm^W5|z~ zVDV$v-oJ{QDipZit}5kOBGSl?-L%bxL$~sQ6ND~;TRKUs{3+K?Hqa=_O`&HkN@(~` zt-E8CnqlM3=vw5#1fGooNyK_GOAcx>6o!FSoO-#!gqc2(HmPZ)8Vi)P!X64?;bvDG zi+Y~FPjS8xMIN(NR;3K|pN&g?-LXi7^5iU_?Q415C#0S=BJx80iRt>JNL+ww^?D zJZ-VLl4{~P&PjEq79xz&{%ogb(wl@Ys|f^LBY{(i3pJ1PyXlrI)bXamv#Dj%Y%6B5 zoU&I?R%ryBWfb=LLj(mRCsBWy>~=`#heB=*i98Vq4s&b7O_#AZA&Uu){Q_Tj9M}z{n4`%81+Pg4a2UYItyMajuK{pZKt3@<+@?R6(%#_}y3Lj*1fTB+J#uH-VPUHZr4(j>0N-6UNi-EEf2+j`NsJ(x(phrrW{&Wi z6&pF?j|F~@?X{in!m!`gZbZiTN&42mO%|gL%h6vk*Cw58_)Pccu3}O_v^5B`H8$|~ zh42cmSu8qEKq@G=lZmn<>->uyRAmvAgzI`LHE)Fg5$fE6Hny7RHp4#FrO-*~M5MlsG+gFwu# zuUR}8W@RJ)p6l5`lc}MD1fH6-L13Rlav+BL2Pe>Wr+Yek=u0u85?6AqY+pQM(h9z8qU+--^U#N@((Skn)PuK>lPGGKnQTZYt_QSZ0 z_k`5b!?V=q5*lekEY5F%c08Jh2u6noJS08+YhR%DHm{LI>lh-XWi>vKO9Dz!ByV`Ea<9awJb}Mb4 zS_XP;D-`&2yk?zC(<~L$P&+`mxW@)3R>enl*2G=Ms+U{U^k<4%tn|EAHe~Z&?N3S8i293%!3sOR12U_8xu`iTPkV~A)xIEM%%DA}~N}g&!3++p7pIkT> z&8s&dn!wRE$>YiAQ%vHf8T-E6`8Bez@bJ*FO~$h>ffXsO+`^K@vV}%_$h`8CbSMge zF0N}raFAu>awhX`oUzN-j!@S{-pJRl2_t6Il2tYE+J*A6 z=~h@38LYk3>9wux>}tEYqPC8D5zz1owVJG}XFYE{KX#Vj2C+Xp+Tp|%jlrMVSRk`xi)Aw;6%&}sHH~w< zLd3dmXd$7Nc``YbGmGdzHgj-=A)+yPPSF*EEB*!H-oT$z!tF76eamXTK)EkMg(PH& z*grz@Gt-G#^}EHf4A7+G@KamRHKA;6uV6m1fXVk9w< zcke$S0q!Vrij@yoN@=x0TCB*t@{OVQ-SDi$=-sbwd%Aa^jzaswmJ zxbhcWe5;LJ#s}=7g;!VOB-*tQ^+t^aS>MAISC{aqYddqfkgPFUdsj8@8#?vbCa9 z86l1F-f=1a<0dH(`j@x!lqYX83Csd;WJBOFgZ$IRi7XQ zElDe<2NQ4xD|?tei+v8?3)5sP_EF4kUW&k?JbbS7W7mjYAj;3Us3KvVe$sa6^-ZL( z$~I%!zs7a{hUP8s-}dSf>)cFbg~ic6^zswT9uH`F{MH${SEFWExyFZpJ@-ft7KF!v zAf!s{jQ>n%x71Ke>S)Lly=2`;UTeEN%8M}lJfaHx25sbXQAw$6r1k|tg_F`0QY&PgBwVF!a@v!uIY+nv0cXKCx;odJvN*i{K zBPQAg6KR|#*Xp1b52rf#7SO|IQao3ymQLS~?U~5FT_%Je8aUh%VOJ zBW(tvY*}_QvGrw5nMs$@p~rHAO68FUKk_1XU+S;z9x%U8ZxS60tUoKs_Igqq>Dvrp z0O1o?%N&otv(%rbHt!ohz4wzi`rk;tTga-9?vAvfn1laLa%3_E+v1rrlMK5I?GfJJ zWDl3!epF}cwX`$B_ZvrGL;xCFM?9GCRgP8o7L84Rct47UT$2#Il}>=G$keVGga*d9 z_cISIMgbJzlhd7raz(=dM;@a zaYn8Mo-&j*Npm?0S!6)K+&fG9#c9-Zsm-O5JKHa}IZq1Da#V1_d3?;*Ivu-h#^PIO z86^_5$c)D7!Z8X1Z>V_R^SO^`k2s$hD-Jj$RinF)0Xd&l5518Dsoz|InVh93=$>-L75=rY@SM%Wtz3FDv(d&SY?ir(D}<8sBatw#!P{I}R( zJi-BqaaSh(d7Ex8VoIBrD~ z`#c#@b%je)he}S34&9QR7{K;omjjUef>0+Q_yG0SE&rD;c5*P-6JOQLe})_yg3s$ z%Wxgm;K`HbQbx}t-#?7)OnpPfO`sR6`ZnKmy%f+Q`CUe z7;`n;Fx#y|lUv(Ai2x{DDGeUgjKA70iMA%!baK0Q#8B6?w&$*0aq zHXcWF`m=J32Cd(vYsNw=ip8Ik{`B2f3cTj%gXg}{Xvoe-425Tp|* z>g?Bb^INv@cp6Ugi8>y$nhETe$}6NN6g98*o$Kg>Wl%0^@ebcXyms_d3cCJ=16b&+ zAmkKx+f{P1C}EK|5R|_JnCpWum;ngZ-XCo&HlS z7nQ?QswY^>b>roMZ<@s{|JpRVgdy&Lx+Cr*l_GV;`hn?@}zgYHCxq>Z_W0iF4wR-mf_LCpvMn<08t z_75LYBNLq8FdNP(N>u9?ZfjMdF<=OyA$}cI80%OQ{=}G+z88|jivsBwU7_ezt~E?% z-rp&zcX%V&GHTFimE&-^HB}J`1=HaR_!Gsanz|?83U!8J2ugtolK*w|`l>}AM03=F zW?OF$nc+as_rh7((M#$r`Y3ZAjajgaB5HG~YW_l}ih^&vz^FevT}M05!ljb+gw|Xc zaHHEy4KgJ*Bo~j<^0~V{f0vMmA)lH{`E*r=C2hrTHaqs8T;GmOYC`28UD7Q2Nu{LsdKVB2Ps%=~Sf8x^_xQd=3b1HR$;nW@L z(YsN_&Oc_QscM%7=;_>vc_5rv-aI4GnR5BuOv}?>rTwXHU;FO5T z`xw-jh!M~pK%=uIi`&R>+gO9oW;dyLdNR_CoR-~%Xgg1aQh>hut(-|}0p^xGMe0-Tjrc$#e2X(DC{jSo6 z@HH?LCUEyH$@b^oHB0V4i9CHCUxkBZCk_2YrZk7JPhve;Q~e!mVW40<+ytko>Ek*3 zo2}VOCs@V>jHbgkU$brUNqz7NBCdC(!4N-qh>sp)i0u>)vplKK&6$!(*#U zjOs>F2xAlwm6nkr9VW8^=3O~YDc}Sb>=NDBh+z3&cS4=wP=2$dhEb%}z%7@;o3`~3 zAw7#{RIwDL>%eg|YT$G0wR=@%e2Hg0*&Jcj6J6dC^|0~o_Yn1>DLJ7{VfODo1jk?q ziZA3G^z>qt5SU{j!V@DHExXvpL@o5>$EM{429W6{$6?0L)?1GCPeWo1EoRAS1f_WE z31tOUWpdfE&sOM6H`YO{>ohOJ6~Ph`9d_7|KyZkbD+Pt|anrp1N%~G!s7Q=`_ImaJ zTXNY8u0vq3$8R{vp0=<(lLTA4dM4A3hzp1vKw+VUlN=V_QoNN@mkv99XF`DPE33dg)yDlAreRT(}hwPl;zbGZLXCMGu3D~ z-jUaKDmfB$-jCXem;zl$>yYl2K)gY&1{^(yG4}_*Qi1{G)m7y2(t1UAL4+%iL z(B*?FoKl$FL73K*We7x-7?=Y2{oW$laJi+7<*P)549A}NxeD-}JKK}i`a(j^la;;E~K8L(+g7ugr2?bSNyGAf` zhUx;tKQ;{i2IW5368+K%q3q`UBMSa)NDV9FdM)(r?ZFQ({X%>4PbaG-+p&d zOoI{Lz03)gg`;;Z+#7!z)rEn26pQ?*HUbo2^tK0o*>`Ns26CtRABih`dRJ;n@eu}!d9I7tvzjZ{B8=G;^)mZ$pecw&97P%cqdwuEYG*h9X zB8PNDM7vm>blSacVn?%}O?p(dOnB3V4mS4FaLJQa5CX2`L{n<;lYgg)M5B6o1f@U(b6lTb7jw=w0eal{d=rE!=jt`KO+F{Oz41TT_ zm%@idsMURYaf=9~B<7!tWnFtAY=DcNhuTzsJ_IJSNoopc*O?+cHH1-PA_ofFjimx; z2K%K+xypFzKgW999cVI(a);U8D7crOlKC{$COQx0u~;=R{s??eW1T0HD|#viZNOWA zO%ToE92U?_(A*7fLwGK@Xx`OgB`=-1y4(tn{A=!vJg!)u{;?n( z$u!zFlxl_szy-3Wjr{tAXJmMgi%dvOF5eXTo>&2m(d*99P`zAhw(VYnTXkCXXFVd z9Qm*vLVs7z$78~=3%ct6kv!{O&XLPLm_;A~24qit{CA3+-krgpp5D#}hN1q^29ojz zQ-I{j<@AzAqWk@WQw=F^KmR>*UzG_S^H%ffT$gGp#oy370?h1g zR^{&cJ?=zAmdGo;rV3WOK`_hGgMp=sQuzwO!dnAtj@YrHtb^HBx7`p{99$Am_ zjgDMDS$3I!lqUk&>>(#@V!J=xSd|R#%5Bb`s#J->!-BZjzg+lj&mMly?n<1i;e1He zjdpw&x#zy?c6Kimg%EDNbdpF!9nBv}E|Po3F37|(NExlad!BIy_K4L^V~#mK2!bzG z;xUdbcG8)QUA|mcD;~A+kD7U)LnB!Z3`KYZG$Ghv&!0ucZ2Hj6`#Um^-C^1M(9Jmr zd_DVQxO3P=s``j?XS-e;MQogn63l!BgxvEq2DIw&2lt+*S#XDz?XEl{J;EUlVtY*K41>rm&kV&%goI zzhA$i75zx5opEIlIx=B+nGHI(yv!PzWv|AfcD6RWG{Jys~ccrh&e?4vKtJ?Kt~31iYLDOuIXfPQWM|<}NH9}1TVo^n`5l-L2C?(jGLIXX3p|`={C2u%xYw_+a ze_rBGuyRVXyC>VTGg$&d*DaD#o%p9@@;SxlAWxD0AJNqrG>n_NplsH1zn&%8?vENM z!P!SPDg#^^r1@;_AaFd&ndAgWDB$F6uZC#$!?l9IebJCASCZq8jsbzR?VmY#qi6!? z>ea9#QUlQ{hOq+X@AaoU5g)eqrc>%96{n7RME@BV*e_qix|u+NGs`0_Wsm;OLqxQe zV`U1XeH*<6gz?=as_e(aOUUqiul^3#NpgVo>$O|IvzwXtF%){|T?aaS6sW;~uJZRk zU1bk@2r@_zl>}l^D13(4a5AD$#PQ>Vg17U9vU7>9D1^dgEhwk`gm|oaBG49z&$F{R ztK&T?$+6it9hLrZR=ApxRgsIg&x6+4zm~)#c1yoTp3MywKQ6s->f&7oo;d~pby;`(Hy|ZgZeiOJ&dEhOlNmf&KGV)&=Wl1D^ zd|WPjbaH85)U;GZYCSHnpfwfp>bjxHLjjSFc_Dj8F&XQ1m5_SzWvu%TJmjQ4BlbZb zn`@`>W1ofu4JKT7J2w*a^3O>ct#Ul-0ePX4zh389-+zP~-{-5mEI(yT?je=p8GBp~ zLQiUup*WN(B8VcFRnlJXQ$>Q|F$#w`Td)R${*zaNI#GxLPKDyB7neKEJ5af4uK0@% z)f@_)mk3HyFl=C{*hX08y98i?@ZA!561g3&O%fESRQ*Lv9l`-2`@T8dhBz#4CDLJQ zt=&kWa4*1pS|nKaeZ;cUY)Pf)VCk|=PQ@1t$m+f>8qL@k3hY@7rPibOXwAplGP^22@GsCHqZLr@0l^G6wAa6QJzk{w5(=NBdV>Q zOvy)KwCvd3%~BDzV!o_eO&P@7vI8y(?VVfAmq)&begpKnP~I_1FvpL*QHSF8Yu**=yja5UApuX@b@eVb*kwYa@!k%j8wbwGy11D&&TF}$iS z+7KmGTn=9mpcrODiT7GE-C8gFNuZ3|mjoftiK-QTx*?LB67U=yLTK?nW=41`75r}x ze}z#O&CJ8HU{s`@%R``1`=PBq{QBNQAV1Zc!E0gBMNcNz{;ta-20vf6l6^wt#KL^v zqd-kfy||LiEe4&Bfhv?OoG;k?F0?EtY5-xTB*7(TAfYo>@TVU*=Zv5CnpNA(8}lr5 z0w2R3`)KDUzq8?6Zr7ix7K17<;;I53i7V|Js9o6#XcTu|$OFigTy>_Sr^ zW}%%+p)tocd&VRyRTYRVvpt)xaXN+i(s9K5Q)+quppXvz9UH8Jfs7Iy?GoAB`*2JHYq4s1r#w+})#a(>rODM!J zA%*N`k$6h^?WsgVOpkIKe}5A+!W_O9Kn4JYZYP8(=smKDz^-$g?)mkB=sd{9-%@yT zafi@3*FkXxqIY(3I;;gVwXBI4CbI-x?EribIP{V9YtraPkGMos3B#@oMl}RRx<5bp zU^5vBsic-#jY_qDEF_Ed8j4-3%W1j_gbFVftfaYx+5sS2kLW*x_Mh#CfbPgCrIL~u zy!tpK3%5RiLrpi_C4cb?C!FHuY(4ULt4)*26B6x{_eCe~v6X)ygdn#S`o+cvhlG~R zP)firG|i{$)>f5po^r|${GEJBR&6=?TUS_7wQ_h~g*R~)y2{{9TRwixFN?tp^NZe6 z1If8_ec?`BsYd?!`+ZpV7R6l41#g#vt;{kjqIRu)2`f!^X&9#RG5HlE)F*<1f;<=8 z^q3>l)araIg5zjS*p_RD^U6vKa71zq3!z__V49$VR3x3lVr?*g`g0;TQ+pWn=QEpL zpYk)wp@@N5Xwa)(9pW9uC0F@miJc2#C0gkh#0+U}NpV^^>g z;&?!pXRD{$5$9ki_FWvt>O6>b8`6zNm^ipp#g9S3C;W^atMe+Sr2fFt{bRGSE>zI(mYX7hRAQN)T1;2rVZwwfCMc(=4=pRWf%Bn(mQ^#xLP$Sz+BZ zEpgVR8Q4L@wSHqxT&fLIx41JO_~rX8uUMHY<$H6>G*>?)^u$B1RvJH~tgA1F2VB%j z)wj9cg~F*8f-h4WHsTO4-DMsE1$xW(MJ5J*Mu;eck1(?)$EPo!2Gs+o91voR%>#VW zWFRS>JD4oRt)_An(DLdD?X)#GR$Wu)D%UKtJNeV{CZTQHn0~TYSI4uW>wJrxYI4y! zlf1>B%h6c(R?_RpD{Om&DvPZntmdzj&BTX{We#<`AOG`ih|I@l&6_zq`W+H-EwBBw zMK!5!rW}&V@D&%a^0PR{`jmbXeOD@VmCsyzzVugZw0N)o{!bW49MR5|iWbA={Gp%# zA;UYs9ReO`zAM7txA2@$B)PUq_-FqI(t-oBr%kG0D*UlUsZv~)2qudP6g98FfJ{JWjPj04V$dF9&;L17 zW##Mg4duAL$lHJB1;@YRQ&cKvhS;YXrC006q=(0EWn>ff10-?^9*0e~K9z5Gr~JT`Z1P7s zlPdK;%CKz_#%KfAf@M^jR?WFkzjFa!&vZ6j699Vu36{-daFgm7Qh9w2tF?M|Jj1xq zxcg)21%35JA|q!&%8j=w0XTAmzy6+eOQ?+%rj;L_D9LNe#A? zjB&GkgsvG*szL(c{R0gCf!ix$8#9l9mB}8={6P6Ijvs3MHwO z_2m)vwzk$=&TA=Q`T=|Ay6GBA)&>R+_KOsz*r8QnkymHMh(VBC zb#}kdW8L=DLlz$bzAym1_3#1>gACzUxZBMsf%3L)7;>zgXw=eUO;uCYWzw%(-$a_DzY8b+`ixJYyYGzhhII{%3v8M?tW{ zV2?h2|Lk`KNs~&Q7oPCdLZPMO40R+>K3MQw=w2xc(qp>dcDcwWRB)OhmU6k_L={?) zSFUg4Tw4n7VD)67KJ2b09aB2~tgR#2DUn94If2;Hane_JX{J@p#O?LMI)|o|vdGwr z!lYZ1vM|L;BUD<*{r8}GFfe>-1a|%j5ltKYeKKL0b~`3fo1=&r z!ikA5k>zufKO8PJw-9N2OsGw+X(uDkE#?2#Ec$mF4aS#Nwb~aRsMuqXWuH1^%Lz(D z-7Yc76Ba7p{Bz}=_ey#ZjNABiyG^6S|5gtZlpmY%`;!J#lbb3E6>%893z0KavY0Er z)f=5sKzB}tnC!V=TRZ7Go0J!99TpxUANvt|ugr!1I{DhbCI64u`1ez0;6NsDdVOtF zI()J1S|uBdzmUd8vfqCtYt|eA-*9?$FCUq|IgT3PU2d^_KtDJ)Zj0S(W`?4=uS&wt zVN9QMAYWNIp0H=s#-ohrO6*jU=CgcWG=k>m(qlU1X(Zzk-zzuI`e86NDd~`+(U?etv4-3@TpXU6n0#{ z3`Sxj>RpeQ8>_W;Ot(eraD~(^)mL+ZaJg18LTJuH zOR9u<+zz9DKIi`3$HQ$?K>nI?kB~n&g3D@Zm!!TX_mGqPU;7R4LI^NNu-;dEp_+~@ zz3JppuAgD}Gq?;eSS^)=Uznb5wkx$-uc-H}vTO5z`gu)%s>(H4-JyEuZTvNdKp!$grKb3K+1|SS= z5ueZQYoC6Yh>f?{=dZnb7u%8Z@g?L=^+n>$GD{K=uC1|G!@{6-A4TtM?~9p@Br1_1 zhkweDkg!ZdPrILecHa&2#&6f)#uBcKx9SpyAX@`uNDXgMFeW_mnT%euhibMeDw2AZ z(<`nhJIe4HI`~E~g;WH?R5sB%an}1K5L%KF`VgGv( zTuy@~C^P|fw_PrWLtG**p-HAC?!ZuiYS$OW3 zYvBJRLf=DAQ`IWaM<|uep1~E2@2lxan(cJaeUS`6gkZOh8rs#7tV8(EXV(qY$aOV< zA3zY&2{|XY)b7?mB75i5B(eIf?hta$04k^YBFw;QS6Sx}j(Av>tXg;(V4muPhrE!S*E@xj2h5GfnVb=W0n_-{I4eWYi$NTyCI@) z0^s=fFLSY49sLE2(3k^wF}%0v7X6;+XMj}vzvBlH8w%;3LTQRx(-A8)iB`TLWZ7nJ z7Y+|NWCyA&wf%cOB-Sh3Z=w>h8f+Q4#dYyPd>1hxNf&F`YS)@_EM*^ zaf8vzNJ&Y9v;9elK>)%2uo8$qqs0U^#{R>C!mM%OZSq7by${-7t1}_;y?#X7V@5!V znYzrwvaRFO#Gv+uhU=Px82Y{4dx_<(E@$M1!iVNV87pKS^~+KwcKKFkCT-Do=A@fvJ@7UTlmJ{&Yt0+Pm67FXVZ&NX1R5G8~ zDi1vuwa^=tU@*6^xXgYLCNC%z6E0sJ;d`47o-Emam5#Il=uRt1yaak;u1|ART>)FWe^iRZj?HJ1Y8+_7)Vi$^ggU_xm}se* zzw&tz@&&_1Cc_T5wXy(Z(wm79xM@bR=(NUVOO%G*pmmr4ZBx(GkvJA3o-g*)?F&hN zEbBvSGPO<`cn$S8!DNmKzV%?R9ubA{u-CH1@SH<0b}uF%+JXbduK=@M&C0U3J($&R z$`WuTRYVjCVNkYIpQtH1u@;$EHRwro-~!imW0@AB$GvawB&usQRQWk85uuELhHfJy$am_ytG7D?nIoXt6`jS}f8eJ((qw8Nv|)|j89&Ej z%TZPbGUVeu`SY{i31Lh&EwA{Ku254DI1&yrXC2!vt;h?M(a!Fcftk{~aVPzc0-Z^* z^GjybFTde(#YVl;Yqm_Bx_;PB?$CrcWoo;ANMMI}dm^bL;Q}8p@B&rkaKlg<0!ADEM>~8|| z`}f*(k$Iksyka87xC=}q`>^(y$GaU*VdTQl^7Q&reiAqRso3k&<;+6D=eOg~e}3zC zbEcua^7JVnbX9T(79lP&21iPMRvLM3G8Kh~D=S}aP=ubpuvRP5{!8N>pCj=13v$IxDnH;cNuK1 ziQ_tD)b7(imiOz^S`PcB2ZksL2v0Ol?7VMzfS(lZuA4iSew*l^klDm1Tb`jYvTh1GIJ`Or*2Y zKAAh(08ppdW)se@0xu%JieZ6TH7Cdr;pPlzkf9(1t!)B%euiv5&-tm*nD>R?2ca71 zKkLT6QD*30z*ZHkn!X2j4gv^yq=9g? z$?CT$wAjVZwmc|pDM#2_=tE%v#N{@ZZWdb|EIWIAQ82JD@ybqiPTdn=g}`Cx z06vO%+X5$72~gqF!7(>#7X9b6Z{q;h#|#7wT=a63y>44@hH=@2cq^gFbAvyhSK^q_ z`~xHYtxY2@6zX`MlUGO{v{w)W96dJ@q{6r(R+uv-{X;TkR9s{;0Th);w_HawBmZNP z-_spVUHCXA+=zAxN2~Y8rAGV6r6hEJ*+d^pjCCD{b6Gw6w$!W%xFT6-Uw#QWrO%;P zA6sJ)0!I-Df#{tgG%!+r+16(*^~cfLIZ^d)&U~oimoJDGGn|iZtF@a(mEO5W(qRCF!0b8ISZfwy_rPKJKL^yM|`b zOUyd}!;PI>GzdfMTVgX=vB?F^onZdIM;0kYfck~mo5xR!SS1yZzcUx$8`wt36#7aP zQfIPRtvnpA({J9fT{f*4G-V)xFG$gTckFbzc7%DSt6H!w|6TnHtIa4kY6Ben(UX+| z@5MJpr~|zvqmbn`hO-O-YZ9uWtZJLgXfU-LidRaBLwK^APdTLEFXyZr)yESVlKeSv zG@pP61Uj@v#G6xV?XFS1kLwOgkhAT=)Kxp2^n~X^dvA%ezwA*yXos1NkG;~}wMv@x z8iKie@9_6L5b9?I{NGEP(Iwdv%nr88P$j`mWk#z>N!C~bv&${FC%;2Vd|z4ZGj6>-9wi z^Gq$MS!2ZaUusV7s0sPI3=bvtO7siaZmvtEPMZ`4t0yAId+zwG%HbRI*Zthj(i+Z) zkO{9FhwpEEKUH(x-AXaGtE-(ygEa||Xs+sDWSybn=a7KU zBVn@ohQ8iQ)ZV^JFxQLHW|(HHM^Sq}q-;|w5O`@9gYF^hSveVn9eTi6sVsBIm1C>i z&i$$`yU{yZG&Zr3+XSbk^T+MWTG_YRa@-;p{#@%-{N z*DabRRF!oVR*fK8`r0;tB_c|Z_ljYrascZDmnQ%M?!K! z%`F0~k;-+IK4CZe8F9|Xq49O|$rAR)1tQalTB9ywn+>TuAlE!v(*GBK34@jDR``7! z7Cy!I>KVE0w@`g&-(W|p0IXWo?JK7RX_V)anArdl@-MtMDxJ(_-6nvnvH0CzfDvrR zsgD(qX4~ZrGiD=+M}UJ<`hV{NVBqQAM}6K1RVE_@qG|aB8J93}DJPpm8}Yts6+pXe z-Mz!ax?PS|^uE#l@<8zuYe@)~i6T6OX-E;{R6w{!!3?FSC8RDX+#UNA=omMnhtCui=Md zS}p`}Mox8}a{WeGwmfm_0IgJ$JNf|xGY8;a%k?L!!tKBdh%c!^CF@ka*GLy?#$}pD zZo0zKzNgJ>2`Z9m*e`&dQb4FacLi=iVQ3GKjh);Mo1W@WFS12T;5n335D% zR1WtKd&N^N%w?;FQ}Pzj$oQ=bJYQXvc4yL}&-c)?aWx75i#VZ<*n4$3{_JR4{GdQ%#dUtDL3?djEPe> zmz&!~$lb7s-!klv)#Dm5CP`X}6zH-)Hr)k1>3U;HQg^&Cm0|LC__p@fh&Q@qL<5|w z$wo?WXJiE+G$uFpz#<`5n^_=r-wAytiQptLTi@GDM*;^u zQoTEj&TNgoM2>JxMHF1#TxcOB)<09G2VJU`O>lT?#c0ORv}U@zm&xjK6h^ZRU*YwD z3XH*m8$E|ERy@g)B-{Dh^rw~+Ca)jApesn2r%=$AN6Va@ot=oQOCUVuh74(!gq$1b zj5su9)BV5Y6cH+M?J0X;Xnoc{yFS1OpllySH{rt)9x7RN2ay-A)&hyjP|IR~~%_ zPZx&AB-1(URqRBuNB_YOX&3VjG6*4rz*Tm@ED0?sH}&$DFrooBu0M`G_-3s(ljN77M9qpk`77k^(UPG@{SaB+LLF5&z6r}!L_$jS}qer z{`4Bx&m^c*mq2_kT8Agqj)OZM2%xt4FBw?_QPtr~SW{`{$TPo(!$>Xdj+J=df{da&Q0QijpJ z%;pG|#TBi5w$E+RH02Ip`*Gu;Z1?}oPJ;ZR8>}O>8wQu@3`#$RIh33l$}T1B-R1$k zqPfSa_F9uW(-`UOH*aTioB3J<*&cS0b7rXs_-+D2yWO;Ikt<8~aSyqc zAGL}-u(G287p5RXHn)k0?hD~k$9@2@RavymCy3t9-&x2|er@&%)j8YAF)xDL|NO;1wCP;MYoPK_99LnkxM}b2`e^&Bf4S zv6x7-fFpI@@%q!*T!eai$AhBi1c$)&y8ylphaJZNCHb!}Sma~i~-1y^*A%;kS<;e4f%|;aYqD(-C;qV zsEuPh;i`?}o}LsGwXSmN18;Oo`UgQ=wgvmxlQ2p^e1Y=c1 z>f#2j-`5<9`Za9ukD%gETd*X+-iOjfgwT?b*dTp?68bpeBHrh6vsZdfL;1@n_ZMsM z6BMi{{~_H@*| ze8(*9Xn`b28+{-hpNgx9(_&5tPoL39im=BUF%XR(Cmv7lOBqohCP zBSaB}>Z6{mmN&9-<1Jg0HQijEJubqEtF54B6GBZDn{)FpAyl#>)vitt^rK@k99vG%kAvWOHQEjG)@XIUeQkdIG>qcr{ zPLqnm&Np9-Z+Qq68GoG)JB5I(49wG%&UxE#Z&3n0?#2JFL<++Y_!VMz7T>zPGOEzb zyMNph$`A!~Sm^pkB443kB7Z?MMF89Qp$$I}wj)Y3Hhh=en9wOFG?_P1N$6d@y$x^Ra70lGXA2!d53#h0@d zYs;m#qt|y)?*Uk$k$QI*h%V(i|M8dKmsgV@l&>*7_D&aSyEhy`5Y-q$?#G`lZ!{_D zV~WIl3OBsNsQ@(ebkBFu`z=Mgo|~bm>0{0^PzCdcJ)IAgsUj~l6rVTHK-`nW%#MTq zu5r$HsQzZle_J1M+#`0Mul>Z6DIgmhRu>*iV?0wZv1&;-wcaAD}|IS`Nm z=**1a3@^VEMMUH)kDSjRG72hoRiA*NQym2gJjb&ii7PIOnfe7tUg@CQ{-|@8RQbGN z0*nM&G4ZZA6bs{j#F#c=-Ect^KWdoo)rM|NaYp zs-0ii?r*6ym`Eyzfw{j2h3nXpd#5ck?Gh~XWsFYW`p;#O(zh9t7^M2rXP8GU=MCMh z;|F%;ou~G%>1gz10Yx{^gCsEDVX~s>z_up}uR# zY|(&rHZ*6|*iAy%>Sweo_D=ef?$wD4>GXndW`#*jX(jA)-Q;7w3f zq^;A^2C{CBx>SdA8@2n{!UQg%LaUC|mr=`$+}rTnMKif1%?Z9k3{FDQA)lO{_L&}Y z+}yatq|zaW>1)cr#ef1P;3l0@V6W@caooQx&rOY<+bJ7Yuij(BjMo3+hZAn36D_tdPI$z_K^$`gl0-cs?1Q z^slci`iX z9bv2;%pVZd;y>F$&Iz_E*OMntQmfG4Yz^?VjmuAltKg9lTn;55X;mcqXQfbhByVxOPwpyT!I z%=P@$qht*x3C++B8ckY(CqKz35(S4hqFD8+Ql6lCrj{{1LBq|t=+VIAA^F=%SME> zPDk?(EBiU9u+Ij>Y7|X5gc|454I0~{fn`(Nw?9==AL%Zl(oVJNiaOQTHyhl>3pJJT z_KfxKS-MH*z~WER{FRCkpazCXH@`y|fhRSlqBuflvssipoHNW69Rn`!+@Xs4`etUm z)=bSeXuQ@uqv+4?d?xK&KuZh}bTXpQo(sZ0in8!v;l!CMvzxvON~vTc(F8S0xum!8 zf;K4#w^=`1ptVLCK2xsfc0DmV7D zIL^cUYaCZv?3+@iV-Gg&* z4ess|$lLV2-JLte`+nsQ*=OywR#nZanl*Qz-DWVAj)v<{*kDFU_(LueAa0}IfGPXb zZ2P04nBd0r$%Y8XaCy5F;lK-_MKZMVK0lYEJLSylbCuCs56hZMiGT43{l3!9G^ji;S!-DRH%1;0kVK_ zToUU9Cj>)$Q6)F?5fj>bhN}OtM&i5+fDT ztfLcw0jv>adlKq63-sSnU5~Tr9xB)cj(1y^xogj#zGe!)7=!iq50vd_*`*UCK;ub! zu$&u`t(WIRKyWsZm^emHJ{c1$gIZlX-z69LSHoExITP`Gn33~ zBNREws$v3@SqMaf+l9sueUnli zBV#7rrcgp>bx3J(&t55u@9hvj7NRB`q`8knd4SPNyz$f4;igOM_e&|!PVC<{{c75a zuXIxk{X*R4D^kH5a6S1o4cg_M_pF`dewQ&oCsiCbj;yfl7gq{jv?|@|!}p1p)A_8- zr-QvS-vWpy^8L|+y6Y*6>1bxKl_U z+ucEXF?|$cfpL7ozE1q!DH=ps0TpD1it6LG)8#j-+kl3Xo-LQ*$D6x4R-tg0-Fq>U zy~l$P-XFr>kXuL_N^dv{(A9rSWvfnmG4{M5D*E{FJ-iL)v7JdQT{-TIO%kjO>bf&x z%HNUKLaRkBn}uzBV)8?}#hx=2^Sf@4YL{{={x$W63Z$Rc(7u)M{d&SH>OX_0|M811 zWRvtwi0>Uauygn8uDyq7Kcg zN+%gdNq~AUi+XedYNyEQgK|1u;brIPVq@cXf? z&~Y&>*+S=>q(%V&BV{xi4|t*9>F=nw*3WZv%$Q<8P&PW>jmvkW7o;%^`XjJ*)S$VK zOlI7>+O6>hQ|M2u8Y_T-tB)fOo?u=A)52bfnbsdckDLT0_JQT)E#J$y(8JQ&Tkp!W zWvM;zIm^C%+Zd|p=mt}WoSrK&N;LHH!L;%5l>4xvN$MRSJ8i&!TN;&;cQLsCfb)%2 zy5QoB2I$fNl%gZsEAc{w96Q+Ofc$QUprWFp)dryan(p#1vICk1)ZjwI_T?u)y|(h< zRJQCl78s8*A|U(eb2)|ctDaSkm)DAH#8tcov2XlH; zFor1<5ntK&`M0$K#9a|3()DwNH2Lyx-RQXV@530fhQ`#a<1vWhTzGK6U$wIcAuGV? zrhO-Ug8Xar8W17&tldrsAEC_r5UxMCiNpi>tmNMTU`|20zGp6v}ts{#<2bIfjuqHr? z1Z#?}o{l+sT;CYM{&f5Krayq+*C(pZ>+0&Rb87FZqfiKCMSS&a-;@i}JOKJDYjs11 z;|93fF=);>z}1t9(aKG~2iZ|y>?_Cx^`Jw?dVTCO6-tfV(!>rYDfboZ!Zwk0wBdy!I^89IuOAC~1 zc8=%TlAqmsj^idQ&KCiqB~rH{9WYnF>Mj3C-1gH$Qh}K?1`_!F*eoTI5dVE=$=eiG zO=JYJB!83ekk+) z1kTdVdwqZbS*_LkPz@qe(or*wjzDbCrN zeL`41i^*Iry_;iT^Qnm2WHx-`( zKt$$ne&zm>w^UlFd#r)*3?kW)7hNf<+OOZ}G+NV2jv0pTvRyOY`aeaWRGU#QbAJ_UVN zOy^L4?l30qOb19mwVL@t0VhKh{%VruBss1n&L5id*D7y1u516{8~j!MhlT`toEjJO zN(GTvIY|g9ivj8H6R0k!z}vlk79L((Ok@ncLo_Hc82s{3`VAK~x7?Vdm3h|80>8q} zIisTT_g$|;VHGavzN^=Q!I59}UQG~VLLqC)%KA>Z|4V=Zm{owNWMF#AbQr3kfmj5(~;dJ!K&I#_O}8IgH`@%Q8OH`mn8GCThI+)~ckj=&Ev zI2ryjx7Xal*-s>GDeP0WRK52dIwNuh)q1`*mmRBU<%;GbE%Lly#n^>Ej~qix*%M8{ zpe%;Fi*rNgyYEyR!|x@?+PI$1b+^!7{d;jpVSh1z6ZN*iwzLT8!<~$OUGqc(Xj0(v zSX6C&0sJg$hJ%Let)z~v>3Ss~bW4TpA|6lj;1EHfG~>l6-0ORYLRYvzh&W7APSmGc z;4M1oahp0ft52D3O22%hUMW$JXfCUA0n< z?BS>m(w5Sm(BG*l+MFoi`zw_}VPFBH$M;u@&LR!Vg9|T$-F(5GA+GZl&S)>Yxw-jd zdR1E)WD?48WcEg0Xp_K0&`)C68!_=+F6x`_{F=ub6!rU!RM2+&KY-i&`BP7+Ioxw@ zJqMYP|1bKcxQ;B8 z#T_ygiKNwR$tSa{jxytvHKQ`U=28S1cR?an#}0GUnvc7+S72-P)$G$r|whz%E*TmbN~NXSX`*ga4|v<-KermnE0 zgYQFhjVGTmP?``F)@*2|FzK2GMz&`;5Df=oKaZI|V46%3RJiBKN4b)q$9@RE)Rj-H zCcen<214JrG->_+frl<4II%uRc*sbMg zeYdxGVm1c*c~VlPT(qfB&gC#0)ZhH6DJa=Fmft}Yj|Pw;E=EJq!5XgA)L%FhN7wf@)aumqya--D*cyo;)P<8dWDE3ZP>fjeul6R&7_&nZ3%`CA5tmBj0E*nU>6zVlYz-82-_s-)$@@CaTB?fH%(XvTXz~3(>?oUvC6IGjGs>>-00*~A;~1Z81GJ?z z7SV@r9UNE=XDZsQu|IQjJ1h*G1)em*NJLRvMbs60016j!TL{SV2VXlyc~FsfAO8;o_s=~aeDz&UL$HHA^QcdSK>&fQr-K@>Ud>*R(T7NHvx^f zq{n-pPzc6tey3sFn`=V5KtXm`e8}6t;0kI3mC`^kNPUs@rX;7005U7<`4M_EHJG34 zB<5ElDcvKj8NAaZos58fHWw{h|MYaCp$|hDq19DLMXB<_yGA1tSa-^62>)_wo9t^? zN+f7;N1mDiU{1_jKf*~X3a7DmjpzrT-*;jPz*{qrzHu(JiVP_%A!TvfCDEFz)K-6Q zyHB+H`5cdE$F`n}NKbXE@aD(Zs-nYi;z8k!o@TST&&LX}^(X%OaG1+{rpMgLuY3cY z>~jfPVR+)zII0EK#bj31i0#aoK7hti$?vYGre8k{ct7rN&RLcP{h6hY2mK{pUQ!48 zk|CaLeM3KN%KNx(Qu?k)cRceRe*$uIgY*bH8xiImahQ09;qUJ2*s-r7GyATOz+}S* z!4J9QD0m5lqFY`ZPjv^@j^>TiZj2(w7;{tM(uvK8#idTtx&RC8@ivl#Jv>p2gMD=mbG62g)s!Ru@RA_b<;NZj;$2Dc8+)-&~4!009p z@o;vMz79x5~$IfYlUUSZa* zSUrY6B4%cA!g6K+)d_=Hk&42MNrP#-42mFVLZCmmI$!h3SlC7tfT1z+f~Wg(IrMte zGchxhT+`aqIIuM0gHS|{9CGLU0|sa=L+D(ib}nq;u+KB)M8;k zCP;1Sc2|VCo$^lr*gG$hOv_x~pDHGoUA!VLbLd!<+21+TS&XYwg#z`J;RE@_OqBPr z{EcUtOWZ(o#>O`*_YHh=0d9Z?Nw{3T7&^o!;g<^VT;tW$K~c*D!|AT!iA%D866C+Z za~&MkwQRSy5GG|P#ULxfT$W_ldISic9-o>LxziiNpxi4vs(8IvEqN5OcobKQ12OR~ zHdWwDQRDLF?~4-qCHg_YS0gkJ)FiPpju*?)m#`}31{0M5Ehq+n)g=g-#3uWry~ z?oDIX#l&Dhf2C*wqPtRdX1UUd99TLW81Hd~CId{^LcUVF3H@p=cp5u=uch;$-X`LG z@+cs1)ulM{|LMjN$CgP@nHPoW!D3zgwH$1(Cl*HhcxOw15I579U} zjitFivRP^3@&1~(`7iHXAJsoMm=%#hqJQ-=EXQONxQtEfPvnZ@Azg#Vpqy{{0p&Wt z*Cp_Oh<)KD@<{XHAX8l|J9P2=)lE|$%cO_a)IbfmguwzpHp=wN?O9zjTM5()`-dJE zIp5vi$C)t3nEiKyohcs=+C}%_1i|CUCBaItkCCt#7gSVLFn`fuV-iFNOV+qQBhU{k zi$Y;)haQx|UK=D*q+O^`R!YksEnE7LT)};y+M>gWqc;?6l)rfTU#3+x>cV9 zJ{}lW8O2R(rUPM8?AJFKj%;8x36raLKSP#(C=Ju4fy`_vBo(63l`PxCciNvJejzrO zl$R&i>fkZ+tc$?LJG9yW-E?&D+^4H>Q@UB&o}(qITI=}|Qgbm^TWL<)&a`@;Ie%6pLyBw$&{%EIis8q{>?grN^!C7!#c%d;P}Uqq z;3i`;vsA4aJBS#+v2T8c4oX0!=3q>%k2&P@?2~CuP3wz+d+R?ZDe`MAnd(q-ypMxq ztKcA5D>5`Rlx*6e^Tl6-CMw;LjG0gv^mcV>y?X#6$F0%kNhpeteH3-GmVssq#6X>y z?DyfU(xcYSEvf!JD8EH@iVzb&Bsn=5I>!axs*hI5aw{AwC8)YZy6Ti#y*23k!;9}O zt)b@xWa^v$?xp`nMN+ydaIEk6kW=U@WQO)($gC&YT+$nv%&d#wGza7zxd#(nP4Rn3 zPd2r`^+}(3#~j&rBtYWSD&l`iz-%B=OPsdURg2(oJ9ue!$2+bF8&{EPvAq&m;NVG2 z7RRT)WScjAcl~>(cA0vT!jF$YlcRuc*c>Xw&4$Z(u)#oWP?nMC8ALFF zUwiN14Ze9tlrTPKHvwCLEBPkxIN5JA3l&scf{_=+#&EaGC91 zyY3>>MnWXjMh$8NEX`s3K*pp1rh2TLoSf4}Q#^Fl(fmtHkZ-KaUamdo$DWW;fGm_R z|D)cvp+@h1R6ur;GAgdl?BDw+B25(+XJB6o>E4P7a-9iXo*VHoJ|jbqf|P53mU!1k zd)ym4(a@|TR=u&iOJ4y^4o*cRJCIP6g5QH+5^dVs@7+(uT0u%Wsf?ZhyD@%=k|Oq1 zjPgs#%S$?^c~`AI{_M-<(;bo%HWqd~>3)!_y)A~6KI(`9gA(o|=SOn;3G?qsQW7-p zc=A_#_iLVtj}5holz5l4f)c3D0J{a;_2YG9JcnA8OZ`bzCbgJej$&R@!Y2B!`&GWE z^tS`%hlS2RJ$_%IbjpI`JDtSd_$G9p!wYcy7BXW2)l|p6XB2oiJ>tCodFYm)6%|{B zG7#0?MLL5PfGa6OVH+0Cr-7@8ecE%8H%ZabTED60dPWT5+=)dU_;Zthb$Eg+&F5P^ zkUJwEQ^louqdPG9Xj@+kUoSlK_}-JI=c0~Oe3mGShb5CoUi{L$wT74K^#Dm%{#M8e zxKy|h$neN$*G{n zh|Ty}#lp;N*~v@gEkJDt^j7Ub>5EZl)3G0f1xDgRF8ov1`T<)6qc&DBo{{X8y;qH7 zN^g`+c|s0jU0IU@&pUWM5%v##oiCV_b*OM8?`eD@(TB8ea zc~ty5XD@f+fQeyuOD!=LQ0?4D7c$c+Eu@AMP$P^+YwM%m=zn;$3XI$RwGnu6Q0h*H z1WZq(XWjkd;9otIB1V&!aVlj7+?{Q6L(=r8BCsrb)O3sQ*ltUOIn}XWsMh5faQm;L z2i7v53ZkNLIcKU@N)zhlQy8Vm@d`1Oa5u2PQ;ykrLD!TfxIl0rEW%3p_(H*A!|)59 zpJ}=>iylsMSZ+jtk945HxQCn(iuHL)T0(SyiGQP(p-4s@n6s9`6U4rIM9H6xw=^4s zOchzCS{D_A;a<|eNxzrDL(tdL`_U6se?mVL=K;HTJe=KzpqL_06D`>kU$Y@uRW5=I zmq}wN09|+5BnonVIAb`Ikpvi#!XYTcemuI8vOK;ZMvgh5(cF>@^Qfwt#@oZATC=tn&GmXAkO+KjKTWZ$wHg(QOC4DHp;RWGJ`qas@Im!d~Vhn zMc}b7&|_-{izm$kQ5rpFtA;m{vU}*lj4pvxY9UQEL+3^ocM21qrw1wQMEdYroDA^= zUXQ)16R2v)(kGwJ#@j(k9!bIm_C=6uYR-ZL-$PM3kwXfamL^qGP;dbT)#G=rpqu;U zH6EV?`gIn*@ppT7ULlAyvBaKlC?^lrU~;!gAv!cn5W)F-dvl45W{OU)A>ECm9h^?X z2>$NqQTTi&2_5pjCD$bk|J{SLpvU35mn(s0=b@T@eHCRn{>lgn#;3yEbRlN6!GM}g z2WXX+U@oT>_{?FfS^EvztNkdoc^S+m$+*c7PHVl5#7#!lzd*t3ov8@(n-1o9!1_*G z37T}J$&tzvOL^nQK>vB`9h#!7!%UZQB8svdp1zxAy=Jeb9t6%(V^QJm6b95nJq;0o zdx1Jk9%1)O7W6Vp0O+E9*>PPb29mKw-ml(0XKK?h^Lc%vlAJ8s6;70y%ER~6@d2{v z+@Kf+87FZ)cr$YH19`)y^0VN2JJc5H_Fnk7iO{*)beW~=Sz9EO0oi>{#VL6kF&)O>A3Sn*IMc1+3bRtQKduMk^~{ zhOUT%rtPORaQNFFrqcEu4gW<8Tw?1#+27MvO-)Ah&<8zw7#laa*X^wwROI*82hDbr zt7)jUE>HJjv2T*6x5wR56|#-YZZxW(kyG&aK|+43ZJ=x-Tq1spBY7`J9@v9 ztFCe;Ad{cdba^S~{kR~aHgXpnn?iv7*_Ck7lXxG!RO+V^eQ}u@R@J?+63e~k-IuI( z*Qx!r)T~W-H&fRcaaP4~)HP2S%C?LBAhlR~o)fe{_;;Fad2n^BD4|~#9(>mpCl7lPF_o)$wgsKYk5m$ z$S^BJRcak_Kd4>3Xf{t;GP|M5q(d{C=EWOYRfRAJ?scUxLYCfUuapV1&FtkU%>GIM z?LzgGu=;-?&layLeTFR!EAmR_Fte_cr_+|kH6i#EA6CSoOdYk z=BG9=;oQXsRidTWL?W>Z*^CTcD&_wbqF;}ByLXcVn(g=HUQ zh~RRDnYgqMM-jjz_?;7>ZB!(tr&~f2-cm~hGlVuLLM!-yk+hY+EZi4snxSTj5`C?s zJfWS5ABYJzj&?pp6V;=+*C3SoIZQ!&iw6KxM!a_0*#fqKi9v;IMbv$RW{j8Q@O)PB z%-aacN5ur}%wqXjg9C0EbW<{s_wx;KVQ0AuqnWA0T8ZL%*i4?10crT?+le6sD4@x2 z9i8Dq>N!+ToX3A0`6LKZVAWv#^HWf5)LS8e=}4xUWhi^pQGkd+{VR! ziTs-003|tu57BKVzKSnLyR}HEg<#Pzhxgj?CY~V6)U~l)_Cpl$kfkn(cnOy7 zA!&p~g@D7Y}ovHu2=`9%E7wG8HDWy<<3IbG61J#&QvoV_p`^h(*bcCo}@`(=>8Fip_g(|iLm z{G>T4NdB(KMf*tFLZRlz;dC{b944wl{h3{mR0C_9DP{lD=X;{?j+D6e%`fp;^osya zw>*LbKfFZMYLL&mRC5Z75C_LU`>Zhm-FTDh^m0Ni@>9E35u#D#os7CHzGlAYjO3|W-jhe)skF!Gs5gZbc zkJ2=>MOLmr;mAgktIy@4s;9TXs1Wm)uaxeP$jR?^2})ptl8GpRF9=4TdUc1|&PX&% zl1;aNlHZM*{s3~={Jyj z{)LgB;DWTC8EmFx7d{)OY@2U5P>e-Jg0rN1tW zNn%~Yi8E$TdtJt!mrcG@j}iwkk9wJsG?{w!S)of&q6;})bdBS7uOCSL)IAp`$Rb^W zVTGna(>9{QGKV^)GS40I(baj~uQ2@+?EO@Pbpm#D^$lequVsj8&H@@6AstXSJ7Uh+2rV{U;0 zt0Hy{=R=w0kPPHQ^5-}ScYU(}Kni0Rf6{_FgA|rf^fF!mwC_R+45@VLJclDHAnX;j zaqqs|XZ&M3#^7Tjq?6M~WNW9ecNc!bM2$f%UZrL&FvjNEzL+y%vzfYv)R?;NYP$*p zCRBTi->I5h(kj0CrM?tW>%qP%iDowC9r+EcH+ORb zmd2onD@|=4EROXOMW3N{tt4=fuuJbu-AFzvbY=K)94bGuf4|O(LnzI=3wecgTo~u& zBUJnp^}4aChm?F9$EhOXkSo{V=PhhamLoZH7xcRzf?N-1->O6ew|#H|28rB$%zLW*XD9LVD? z|3Qg~F8?Avh@(%ecsr07WL&e{&%T)thiDXSf)oeAH3r9_#m19LOtRY?L)K**`NhC+M zHwKPFO2iW=o2ffPpZE>*oC^Z~xjd{>a<5f98tz=rm>cYo`Doi+f=UbOe>@^KDeA_N zC_V?hRf~EmisGO>*dCC`E)avE>V5vM6VM7JXPJ~g{FZN!2%3V?dw~?pM_RNTS}Nwo z5+AakJJk;kY=pUC2P^T7cMoKrhFYchgW%t&p$k$swQK(r?8F!D6#K)9<0Z7eVz1%7 z5)4f?&bX^1yuSAzFZj1tw4??v_gz!S=Kb0rlO3$txkS!3&i;>?{JS9;oM1)D?tEEB z;Zd8`Nppwmhq*n~%r6$1?~sT7*|onP`rj2R1PtU?H~R$64UCs=VP z6(LyF%9T2;yFR0@Fy>obd!8%)f0hP3B^wGBxMn%oxyZAWba1!Uc)i_#d_EMh0L_p8 z>qlK)t0$_h&0X`oSj^0Py2BCg#dcBrCV&dhzZ>=UF~9ZyLNgg%$OGlsEGzFQeeYQ> z69VLkc#E?nrZ!0Oj*YM;N=bj*{C}(&DAU|PhDbeJps!TC&^bZ>|DO&~l(p9-LdtTQ=u_KUV!eTVRy= z>eJ@9kvfh$)&EEj9W&IJtZ+{CKSsq44qyt%PtAE2aVZ?DKYG9CrFPX6Y^|q43$KTH z5Tb=%q`#Mch<=_YN%{6;ki~cJfS-hUAHPS@KsebhOve1@s63TR}b&qUL&&F$F>75%{mJbIQ14C3W>4S&O z37kHs52|7Mp#@V?|96)Od8!UQ;#f(T(JKYdcga!wANn_bM7A-3zBj3OK%)pJMBUJD zUA{T1n&?^&_qn)wZf1G3exhG2C?c(i#sm(oDjtgn$ZoPf17~n&e z3pB#!34^}eL;2WCwRQ0>jh+oReHXTG3bPUBZhw!6L{Wvt;Vw0*>R;=DKY*D_~j)eFhxncj!(YaaF+1t zw29D1o$@Ka_S*t$K0g@ivom69|MU>zS|uPga95NaT#6dVE1?#hpnx$48`EUpIvk<2vz=B|T>fzX=pGBss(`L?tE%l>7=RqEO`*9lV!CrvdJLOO7?TQjH z>$Uq}_)yOZ-tdu-aC#kv5G|HsQzdml_j7;egOHQEzpLyXQAkDApj>9jNR=Q;D^7^q zyk@C>Ie)2ZVAGcIcCE<$WE}#epIW`VlqCohzaI0^ z@jh2C+tMe!8|#k>*=iZk z7WhZsis>Ug#|H5uSDfN>;hBPuNoKczCm^MTo<;ZGT2Q1ZXu)VJoLVqOp^6U4oa%T6 z%=kZhdR3qusW!Kcg!qd~hvcQJu2Oo#+`@|z8mN~HUnsYbOEeJ2HhD37Iw2hfxhdb! zjE#H_L*Qy`7ysCg&QK8KhGtElxoKT+RpfPui!Ni@=%@>F-ecFJfgu$Hvj;3BsT#7-#L>`Mk4RUK8B z8bbF^Zm)M@cHRBeZHRkjHGDC;XHiz_k7g*IKDVOhGLMLfrh!I^HXGDql?A}s28k}HMB=di+gO&a4Ar%B@;rN_=F4(#LR7c#aSRio zLbp)ZtqPouN!wv5eJ14NlwcBro@m8`!@%Ozb--2g@UmDdUx&jLmS~Z|vV-8!c}s+x z;78QWO+XLN&kFUn605eGZO=|F^%?UM!YhHiMi%QVy5A2MCHXJfgkoB$Lu8zILULpe z0l@h8763SH5)!P40NI}W`J=PmDbLEJu#UAr3Jv#+jyC?UO3V6gmam3rP8`=jTzItz z;%^l@^G{V}jZArclb>*-!=@t`N+a|YysP2mKS=c4xpEP|V_4Qkoz5P(L(N1bV&q3I zw6=8Ki@fJtdQel_{j2pD>c{Zd2d(-MDIvbFt`an)?mp_{wSX21YvUG@TyQ=pfS2eZ zz0=PFT47vi;DO+!i~}8bpC3b-jL4T@tU5hKiaS*lyR5FD(FR}jMg8vEd}xi8u^`~i z>>E(rRAG*!Zb8W+d|&9f9px=waz*mTk-r6V0Y{Pr8-32a@eHcMhv@wdLSM0G{>WuH z!8f~$?14=LBh7Iy$x4Ja!8>ST^x)$)U_7Gsu55VPs4ajG@;0*jH#2W=*?c6Hq};`I zs2FSKT6;}Ci6W;8AMxYSic>L6pELlnQc)eRk~ocmHZG2>Ti!RYxk=!d7!53VManup zha-6R9<(OI9V_F+r}BQsfetyWruwONZhJh<>d6|TDl`}8xBCUEq;>$+K=*t>B$BG% zC!kGHyDCBJTAuQ!bCy|d;M{c!;*^8z^%8hO$Lmk#xoblnt_pDVmW(Xx&bKTICqz+^C1gCMt!=qdM_oVBn{8g11ZJ%d^zR9$5dy}Nq!h@k;=fTKgigdZpvy|~e&iy{M!Vpp zW+~)l$hFGTW|jdW3~?4e;a#7uUf2r9O4e`S%U*r&!Nz)BCI+h_q1UJIYVL3Aa&*vX z<_8J1sWz*`aEi8$C{=LiqNg!J<8{bE)ot1QjzyKWIj+T#U3jjMjOnY{0rh^>! z!Sqkf?t}ou2_zPiMSi&|Sup`gx%E)ja$o$467tx**jRYhpb1iEqu14X%F?Xeu(ELV zAk;vQ2?5?rORQ^5y1ocd-&>n7LqVO>A1T7P?q$#oO_<_j^ z1X$;Lq5nC;*HVIx%rq(sF>fBu#SezzKauSufVnuSV7|!sq{rY zW@*rYl2g}V#N(Qezqo1|M?#P#OvK^!g(J8%UDCd+-4K)C&nv)LZ}_ZeGdYxFaIj2f zGqRnOrbvQCJOhUNQ?jFjr35`@v@t{I_xpblwa5{*ihhNt=zF3|25VJayR{J8tTq5d zUrqc#Z);>g_;$h{c=mhDK1=QUlEyy~*AdZjBJPcqtPYkXlNW>PKp(Wcwx%bQOdg%` zic>XsILm9HNlxS>FrKVd#B@h#@lA8LxEtEsams{uI|26?_LMyCCY4>sC}Cep>Swmt z)3IcVspcL%VK?;-DZ#kRA(3D9>S{%{}l&fw{Z2 zZb)`+&Vh??KkC2I5`or>Kz!uH(tR7S=b8@%(BGdgokylt#h16Olv-4LudfTAR-7Cm zKgI;Y)w_TjHhH(%N>jgA2mf+1TP0aRH%L=O^o7${24m-kyg6AE_}0uCroh!_aKjfa zJ#^Ec+q3*{;2OcpDby4Ny4VpJyct0@pW}*-E_WU^+iCAVa?dK$Td(rjHvy&g9jh} z)J&5@c{j?G&hJijnNp|T;OR#bIh=LdO*Ep=*jue`23pM6HO!4Tp7KUZdI^tWF)nw1u;SejT6xAvTtfj?)_wTzD#*NPQ0%hd#LO zs_t3Sty0GFVRwJ7K7_lU5^N@JZ?oFQVDvgl{p5G8^!c9ZyBm2X4}P5=@AS}iu)&&8 zA-C8#7!FU@p8wMFyr%Z{Ci0@pmkXeZFLbP8;t!hN7EkQttD^1eTo&)lRcD&38s?x= zo{xMqSyTRWL7nWhwM0>m2a_^rS2#-OcVSxK;(WWShurV`KY8}}m)G=h6@11q2ijS- z0-2fFqUeiHL$D3f1|uKxNA7#DtAR(%NwYeBVg?{u^-V#VM_wlSMqV~SuU~lP=v-+D z;lVQZXZ~KaLMv0k3FCG^$~khD4&z704!Z}(*l&V#Jw4~DegFPV4suT!Nk-`D2+EdX z&0+l-+>^HZ_;GA7MjzWsp;FBvxH3+f4t=X3#%A@}Z(4i3_*g=Uvz)0MoeN{5K76aG zu;sZ;zjjZjGHq9^9!GBXb~K~B>k6X7?ZuoBy%#S6j+>o}9*8Ow=`#n6i}gpjKw+os ztJ^;IJH##pv%sF)-DOHCA(KB`#xnWamQSSCR$MBuUkR=+swU(6brr1OU_W*IJi?b z4O~oU5NF#m z*1dNUbxh^k6QY_;Ze-33?sIvd-3ceL5t^0TUc+okb9Hc=q#H*z= zoatIsXc@D&RsqRToL(h4Z62nVihC3Xht?T%<%!yj&Ti6sZ&A>V-Z_2TUY4`$==&pR zafy@m%x7Z4_&MTN+t6851TU(2T5%twaaC5h6WThQCqho-QpKea8Eg%MFOIRWF$Ka(R>wGoMjBtWO@si#U?SWp7Lk45*^av2ebY}hg@(x1~PdZ z!TpA|L=HXb6f7ZsXV7`^xl1k#Z->g_shpV1He&**FgpGRS^gJk-=YmM0sc%X^pL(Q zy^ufHiOSa>dB8s=q0J}XfE=_#=|1(x#4gBAl?0Mk*o-P;bSgr z^A6`ZnXK$LR0oA4n&VuqDx2nTtuZ|%rRYDiy1&_vujR6ev^NM=x;I-JqyLg0{-+p5 z6zn%$1bn&bQ_p-aQvY{dE4tGd@Gm3(M{%*92pmTmMm%qpENMCc;O`SM}YaCx+zbL-!!L{HHWSh zT$yv)Y5r78*K#J##>bVdt5JBb%z`ure3bhg(j!d*@SXQe-p6PJ8%?WmT zq3)CS@E>>kR?%2lD*Olf3KLoW#(~nw6Ol~=D12&_yF+O}*kXH1XOODAKMP5^di|Lr zU*l@1a;wQ%0XUd?NpNfB<`~VbmBXcb2NZlrj-_JbHr7TItx-gA2f?J*@`xtQC=`!f zJnr5r59IF`vx@`{dTH*;x}bSB_SAlOV4QrA>+otbc70A03Wx|e5BS)idJv9ZT|Yoj zs>9%cVZv7=6MC*t8g?3jnv&50kxYjKnOp`5-S1Sa;g%&ri5S^3Sly~Q1^jVe_V*z( zgjP$8Qn`D41XVQh0wZ2(Y`#Gfa<U_@>?{!YwlW1-kITZuMv4h* z6ssLZdUHwDAH*&jtvuMsAE_$q-sTPA)W2hZMnIWjv|z^TSPH$C+4GiqpcgR$TlT`j zu~rS{uG%pwwnhuWYDk$mLC#>(*D*Dm2q+*f@;K@uWTvoCBVXj{(^bNM`iPkuW=@%D zN;#2GF#>@tzw_*V1hVWYfRCVUu z`<_E}HaKI~+#gImUdb7!n@4=&NE90_zC6Uumy`|V72Oy2P8qfF%g_NLjYkP`+&>8}>k`djeXqKm5tmJ5d% z_`Fk3Sd83?M$Thd<-~6xc1K($%N-o0MuHm!x8i3xW{wvUrDi@$T11~@zo}T`9iX0; z1fE3zuczi`lJVmaZlj9rVa2U14%cK$i5w=e;T6I`#6dO$)64b28cB zdcyZmPtN+;KZszX^Xhb*P)EM~g8MUFx7}s9qSaS3VnZ1futgsf9>`Rh3jHT{*TCp(m zQ>aJ%?5uj-mFFc+V{q+ZiA~|8tUjKx?RyJ?Vf|!$#FBXjF%$Q}(1BQ*mh|cYp0!b4 zt0Z2t&Yd;R?^QsuQ@vIw9;m zE)rixt7WYaMOr|h$JIFZ1&a;woOq3wxtx!TKIJL#iNEiQJ2(To!FpP1xMaBB_%h6d zLTu2ZD>nACmaGP6>fNlB{;da%LWdBz2WPBM-{L|NTHt}fAqJnzTY2=!eb>*atYSJh zjcR)(5Kel8j_YsEDXfm##KiFFw6TI0Qd!(#HA|gAb5l7ED7>c>Pc8)zcCOlpS4HuW zhu|1sV~X>4J#JIPJioNzvuH%!3{Cl@+Rno37fqZYrF>-vVXi*h^uSi3w{?)qqhtF# z&5HKj;04-551V322x)xERYtS}eYI*XRnF*fM%RaP|LiLasx=w>e{_9gbYxu@W+xrn zNykpdHaoU$c5K_Wt&VNm9VZprww+A9?>G2n)|!9y=boy%2m9;?dxK@<`t6-A!BqP0 zx}(heg}2V8!%|!Kp)>>?t2;U(xS5u~eEm?{J)_VQ9yFC=^eR zEyZ|VE-Z~FI5J=?ydyGwCIf=@7IU`GoZa%}M*N;$(EU9g$o3$`)-erIbw)uBz(`gp z8aSp24`X508J8nfn>v?hHA}JNBkF2-^RxtM7d!fsC4WODh}~CwfcY-e@OR|_;=8t} zYciyo4pF<%WtyigO|k1(|MAeu80{wWKf-y-wYmQ6g&zfj zWq}lY9!4C)kkIH0@?IVN1g`vc$`NNx&TXv`L0rX#G-SpkZ~qgdy8ncR&oiZfDy{@w zgJSGn7=xZKwi(1E4MUd2;Q|@o%nqk}EtA2NZpSt1@q(fM60q$o|E5>P8?)njZ+$?v zd;aguL=)3L@XUwV`1m%M-e}ki`x~mwIVqgZ18$B^x~#Jm2HU4IsJ*rEtB<4)8PypJ z6tPSOp`6-192<6eveeOik1PSxa;io|&2B^8t3I0#Z^qF*XptsB3NxdNf(;7^2RP4Rjb&z%kv$!K{u_c)`JObu!ACnClQ8W4ooiVFOcp zMGzaohKzd4G+|!6+9y`nS4Ru#uDBQR?dyBJ_wr9fC~5_)#{@qURlWDEzF~UZlti0zE&@g3cWgex!dz6vM||KPRNcBqgzBi?alE86^TU?a*I1|0cbc z5HT}j%7lKih=9E}NMf;?qc8o-FY|)pUT|SdV!mKva4_Ji-%Xll{^y(5T96--DvuW@ zv?N-|;}Dv+H@C5&T9=<_H>bXE?XHyV-WcMNHs#XFsIM`x2%~IHX7n`E!C8x3DWVaS zl@k&dpDy9fvjD~U$FA@oIo(0KyvM4FT1)H0gNjd=4i*SYPRKxj zM0?Gm2io)yV4lL8KDG@w8hC3`Dwg%s7Qt}SOMzc>GCCMbW%@uNluiRNqPTiOi6`mk5P$>{bymj2P4 zOEauz9xVQs=)xbv?n0}o2;2{wV&%7(>nO&6ubR?QvS?}n{b{swL;nLwz5ny$J0Z`T z8K|nN+4VVMTbdc0rsrirNA)quBrH3+><`C-Jp^e1M-&3RJ6yKe4)@9T(CxMpp~|RK z?lu_oEg#g{>-6+6MrK9TlzRBwo?GZo#s(?E`K=o7bE0*Q<_;8*k8Te1iY;$Q{_`Y$ zfw5@+z2ROF{%n!9-*BzM8uU6T%fcOiS%JQ)h zUrrWTB`usiLiZ2n9c(OO>g+fs{FIt2?GLsRad7@i`84EuHM|>PMvE|mme2o`y4Q?P zw_GojmZ`LtuFAN5norbMHJ4R5pK*%l#nPz{Hs#2_j2n((_%a+gTzW`PR3c0?Z=kFJLPy5p$ys(Vb29oWapX z<0P=bUyJ5!F%>?3;lbO(+8KP!R&{K6A>PXZd9<;YDJ4hPaO#^pL}=C6OjczC8w;g@ z4Ax2S15+||p=}aMVzHO2ei>a(q@W8296&G4&LWNHnxFtlbt>LQRLSKh%y2s#rxyPp zZ>*065HS7>&Uni(iDZ1r#w*rjWi3;8S%bv@#YQIIx$?cX{UHNgXPDbWbK=|jkkdi~ z#^Ru<@%*@8dYwD{&spX?6y1L4()sbhq|MifxUMB?S7Tf>dG1W~>)5D(pZgX$)z>E#IeoJFTPBTmrh^K_ioUG~XZL7Q6O^Nb0Ilskez}D>=J59du{Q|?+YPx2 zB6JKRJZN!&W~<@out5gwqSSMM@x1;P2;(SBtC?5Y1~qx|LWV_C7G=XcQzdsK-EY8Q zAQlm{nefvBdL%|nZx#_-RILQr4*x~CfW{?d8HbJ7(hfQ^NOUWaRm=PBl%bbQhQV+( z>rzcN#YPO-c&fp|>Ikxt2{?uIp@GCP{n#Em;i@F$Kx?7b#6P(g2Ro>#$~55HL2AoX z6IC8^+vsK!g4{$_ENyym`_74_-moBW@aq~Xxq*-#xiBH>YOu_lE=+oL+5ch;C60)2~ zcg+}ef~e&l9LcyJiJ0r!>)p{ixBs^VbzOjXsdlQ_0L0$S*Lnbmj+cDWGv=nJP18N2 zUD`-c*h~gIt*iEAD;+?sVjn=v)0cvR#7iu zmglE}mO3>(Q}cG2Ua9H$vEN|`8lJwxyO=>6Smm>0$FX(w5M|yz*Uxgh2-dxR<5zv> zTJ&)#_!FG9AT^4ggJ#3wtmAby^Brl$>g`XLkw-qyXw{0*G^di|2(4kU+328!ct+-U z;}Ja&^t1B?;~zJtp$C80(gU9*8nIEKH3pLkaYUhZU|EIdKh?P^AjdXN&qR@RoU^$- z6i4XKI~g)koKRMb&AcyM)FiY-9eo(uXXh)BkG@ln)?N=sp8!Q=OABgnr~qD#<*H*% z`0jlkFW*Fd7E&~J4mBpf%KQ_#d%m(0b?I0|Z6sP)^Gl10dxNfznI@3E%V7f)w(}v@ zihW!t92SBuHmtn?nmty8fsu<;zswa)T@qW5Z!NlfNSl9$a^yA#-h9U&cYHLvVA&CJ zC3hvtPgVs#R%d`Mq;~kbZ{atReU}D8oUQ*-=>025;t1+pnQsW?^F-~L?ai~}vi6#8_4v3g0{9hS*=gS_yN2m-em6{LF3sF}eQre)eNTU%QA%T^#QrHe^2)B; z%=MS@-K0v#KX&h+IYM>`7O~rfK=i377!G)*dRX+@uRewr=7YQw+sp1`KbYa;{onI;hZq66~~z>S|Rn< z<4Ni4hUnZurnDc_abw`k>DwIx4Hw*|g{@Oe2i#pQmbt!?E+vkt_{MX=4#}+Vp_01Y z2m@F}*{P#a!P+s-^^~O=cE8oLQ+B1lk|W%fHJT@Cb@vGB4o7SWe_6x9P6Gr=Y46tfJh5{=x zQ@gnhZaaMISX(xgD$P31>EjP%6M+8Sm$8sRJ0ZQtG`6jB){6ZyVcsl|R^g>ZodU%k zcP%K;{lRpmG0|m$CHTE_8*c`F?{IpcsQZ??XslxCk2TIiMN^4-zymDiHslA3lFYI4 zI+v{NIUvKe`(IMejsYa|bR|RBt4Gy5_HiUZ1(qQJj72bN7a4%6MyDIn@izY5)6nl$ zt*f}ee#5ITE0r-4jO7pd*{_F}YKL|Dv4UwEce8{3^jN<2`=OVb#H8&v zy}47WE|a;FT63^IaFy+16m;N7i@N%k|B+m=0WE{_`dAbZf3-r3@zU-Izw_N92rtNm zZ>n|Q4x819rw0msDM5FZbOP{yqj&o%BR1%xb2RJVf1np2w&>s)x#SL}d(#bl2<;4LBQ^VxE;-XI-fj7-F4mKWFf`%uk|VrVZI1lVOqH>}7fe}jrcyrGm|yp?fA=>{9yR|d z4u}XDyXCGkT6=_{b(9lhF40c+o>+WvD=0*{rc#VnC_@Vk*cUsVts{``g~K}x$UvDj ze__RnycRXscJuTzv^!ha!sNK~gV6hC%3yPPh(Q=&ddu^hnC#p`mCDB3cm6L*${?B! zTtjR%a`?q0(IX8*12YVtF+yA+EIZh;;-NzRNH2^&2G||%z}w-(De&7ywfkT zxXtH0bI=3_@43yXO);V$hSX%9Zq$+T8jv6msk!ulB|xecEN z5(ORRZuC94^pz>}nNgScKSQxL$QWZrkE?NLS;?~^Xr|udm4lH7c+8B|+DSiF?k@1x z+q*+lOBGXEs(L6yU5|!Dk8$jF+nL(WV6;SC&y03S$Y(e}2oT3l$I0p;rwS0RdlC}< z;OeFm{<+xf0io>1)`55`q!({T6Ohg>tEk9b;%4BQmlS`iVoga* zLngJ-@YH-16l^yDG!nrOh`Mxk&Rv()DhXXiz`mRCzxMdodDpVoU}E6P6J7N}M`g-D z1Qo2?5h|GljH2644DuCIbDj)*3PXVTYMP+nH7aZ{_$K{n(u|C*s0SKklK>%ZJD-_B zbXalsYUO>GX;2@l^+IlwEZ8T~M?m+Lt0xv1pK9lIk&8rc;$Xm`?0n)q&g@d+*an+g z&tlf#=|~Q%*-Tgrz=(i1mWU-e`5(o;blwZpvhFmM`{~?tdvmUov8~YBl9-;STHIl^ z-RkA6>RNaA_g%AvB492ScdezP&hM6Z_vWzv-qE^RJ3iI;8-@cb_0u$;Z$^4O?wT5d zuT7H)Ij+`%(?!|~r+|3>QGS52aKWu9i{*gM~$DWz~m?7ARJ~L=JW@Y^Ps0rQW?+Fc^5IR(!%w24mUPJ)U7mJg^>O z%@lR5h`f0y2{m_m`pNb?O#VF0?*l9ZE}|YqJZIO~Ye363bAXIDCxvVgRy>L~Y|kS- z>IKisS9w;ow$;SGuinULXXsckf0mIThZSTxL})SgE%T)gMHFuiy5Sxo%xKu34N=W9zmFC2yxpNM+{ZB$1o**UnfPWit?}S2g2MYTE6heW zJwN(o6Us7u%!61&#-C4vQ48u^CDc$02FFen7yy?}j_e8TIAZ!P()HvncyWHsYu}uj zu&T(AR8L2nm3tO{U-V0{^8gcRqKh$+T;5m%>%4&(5IrF}CRDQ}Fsmxlji{8d&2)gg z=X^a7SrpTe#V6{*zHF|`o54w3Fp|lpl zu%oE~g{+sX<1PTBd`X7KoC$YzgIfx>!$Wo+kGk~OspeF0bF8b4laItqxfr@5$~jij z2;cJptxphjJlG0jfcP3dW1bxv zi;#Oq`IlPBlI z2`ufSp+^F}W8zgPT3T2eDo@A3zNwGHl|S2l6^zv|L75ps1nqSc4KNOGDGC_P9aqo7 zP{P;C>r;AWb9Y|guBZmwc9WnIB8Ptp{S-xod*qXjQzo%?&De=}u5EK)T&wtc(sPH2 z>I-y|_b+^YWw_;40|Ohyvs2MvviROXMAc5wo@u4CqnZ{&A_kCG)&xgiD`Xs6H8gE{ z_ExF4`U-}7)3wOI07(CEbQUvCLu?0>hs6VPPil9h&r#bYae8Xt=g$`uRJ))4%?dq> z#b0HZGk=4h+Vmm#d^{mw&2V4o?2LgF5=XE=6|oISWs8`Ec7px7aYj!XRaK)Hj>X$z zjyMaf(dr{_f^KNo<;KKnEiW?qNlX;Uh~2I+Bb9_-0o8Kk$fY+-WR3^wbR~~5`Y#=m zkH%6EUh|?-wrw75a}}A>8V|ssEKtFZjak4+C?-_!&cLvqX$6R@oLv3(=R3emMuCM# z(b8L3X}@cS!KndU%yq$F$IVcJ1D~o);8(Dln_;7>Og4z)N{+@#2G)jkV<%`>JoCdE zh%RA4{aro@)N{erAe82JPE4v)67`n>1s?CnvPTgUfbFxot$-qq3txMpOJs+qZAJyG zd9}?h=GM+}5$w#g_*oH~b3xy+u{YhqF}nrQij{br6`=F(#>I=nH!0qmy#6k!0e%|D zS+lUKVKMo5PXf^Z{Ut*%mSDH%YOqR7^7jXu*9jY_2Cmb>=k0%FgiQWy@;w%cb?^D~ z@YpQ&?7R`+ErYk;|5f!jLWAn^8o@Ukq4c~*tQN>+Hi`wuZ_5z)h?&HfFe3iI5E(HR zs`Ql`4M{V5^J!rFF|AEtt-J|i_2Lvw6y-3`<)`cXHnLi(&K}jNNFtOj}3bvAgXR6NINtuanc+!t3%*xYi_KDU)8jeyfdpq z(S?Y6v4V8$xDtI_iJ10$QQ@|8hX>@*f5|w516q6n-DAJ3!X6VkhR3MA-0u6bTU-;X zBN5jfpE|>z6N44gvYvCV2T2|b;QUVrz53A;ZrJRr49CUNdaS-PMOfyQRfy^Wa@{_1 zeVrQr zkOU!uyy^B*a>Y&J%i|E$d;NhhjyFt}HIRf|r3Ja_YcX^%1@uj&0Td~XSUzI^_&9$Uf zC}c?Uk!xORLfm`Z+K-Jae<#%ScI$RW8h3nE=dDdkx%YADa-#Pf zZ*j|N_MnggYuv;%TvXvbX0i-jXfXFDab{5MM2alz)N})XHIPS?L!B(a_=^m5DXn7o zFKYLcPwB6%CJr{}qP#7o8V;_s&n3u|L=Hc07qwRH?Nt0jeIxmQy7I+TxbTPPiZ2sE zAZ%&Y&Ja^@)!*}9O=_L8`gcLfdpe;siLp!gAbK_7B6^u1PwWb^TfA-7zbSY*3hS2L zpOH=PTEgn}CVj1klX|p%W+?(bWh4E2yB8NPdt#|z1WjhY%W=PD@ z-sFpL4#%l@&fQ@CzT;+7&2_<7oYpH{hk-6^g_e)k6*ON5l+i;RYgb*s@sfcv;i2A{|dVO0-@6u3NY$$wp`DmP6)apM@kTz zuF2`{aXmRxyqf0?Eflxov~D&nnHg!;l^Om30pzGq8wRu0G&bfy`ypzA?UR+gN|?%z z_UPXAqH%_CGkMhN4f`j|@yg~@kxvNOZfIMdFBU@~={us!Ce@Z)RhL)pCa4|?%-!u1 zk4&z~biL%5EN0Yq?kcFa(!As*W3Y^3zR57ul)UUCgu^3)(_9=lXfH+^9*B^?)Xsy- zm%;)jpzA`W{iD2EX{adPyvK)M@?m;&@OP&u`v>Ux8Ry3R%uou*^<3skWlLyBge~G2 zvK?(Nee}dwo3uPb<~o|#IoyP&0xLz@-l$&d=W69%hSLaMK1?bR#$mqS_;Oej!cl&q z>D6Q*noX%OX*7;Qyo=4~H)mUNV;k-T0=+*$qMORblAE>+FkPX93k?rGx!i+y9OHs6 z_pd5_k8+FV6B}(poI{sV)q?DLdIN2=kYBvGv1+l3naSEgp^!f5Y?CSa=b=C??W1&F zHK_ZFyQ1g(KlvNqmSe3-zWNDIT`McKt zIJoSU=h;S#e8<-hOIP;VkdO*G@^z-jAP~mE()?IKH;Hzxn_H??-bh%+wltlhb?=~{ z#FE0JS#bCwqKE&o|0~d|O8vG}Q}wiBHwDC4%^<f)}$LtSbXLmADA1xt*s*4 zXAK!2i$yLD!Y&_MQZFc_#BRm~Gh%KF+p_*kKJs7QJAptjuZ8N;h4#K_8E}FO=y{YW zAVsdQ@y-~PvNKgPD_CKziB~~J_81E>b~RCG?vsI@enT*;A8wS?~PurW9F-Fv8O67Ue?;(`C;~95>FEhu$Z|Z7A=+>%k+x8R$nIlyFPJ3@_US6 z6B}yitzR$M(#0NuiaP;b5FDQdmqpYVt8rk1UzDNGY7StL(`me zP_W%VS#iormGlQHJ?|}gf{e{axJs^9lzl@^|9Qoq=u5Qi*wobR#O(UG!p~usN}{jC zBc51|L>wfr1{n_gcjoe`Cn-($*A zCa1wX=^xNYU;r%RvuagME{W_t;zh2SoUx&7t@aYr49FJX)J$8c$5~?wb2X6pcBt{h ze%VYg!qc9jm_tsCc zXwfG&27jH0%D`NWf^^r-Nd^Mf*4gJ4ei>JoM;BLJ!RSFN@8_=gZ;zYUYs^ToQ6~{A z1%DVw=m4AB=ef|0zM!lWb+7rs>N3EKbftx=GHC{s*;K9z3BHya4&4bIefr~53H|Qc zhY5tLgdQC$lo`v0=(fKIqQU0*=yB!K%^UZ$zK~>cUk@#$h8F+G2ffv-=R;5vm6Q_< z#tAU*k7K^5?zmYNN+l8{uoy`luOrby=0l6qKeZ0@BfnhLx*7bl#_&t87`3M}QtorA zA)~2KB@!MKJ6q0oo%73QqRqN=e~HYMJ;%!_Sz=^V_e&ME$zc|Qe6?~C$bkPn^M)np z2d+)=x-xBqUH<7B@RP;kY>2f~UQ?tQacPXr0E6y&BvT6BBj=HGPaDaJPE%04bU)f2 zm5$T!h(I?LASZv)$>8&Pq3pX6d=>&GnWi(xz87!0i1X2mQ(`OiiQxU7^h;om+YR)P zHY0j%SVSDTVhnM2H1-LL%;E8&0xdjy3wQZ!>t_i(9^2$T?x~bkcL%&lR1GuGgODtc z*rUOH1|8b`@0>1$fRF8}{Q$}oYx@-6Y^I#rXv-B%cB)qNNS3US0AN{NJm*$#8HFYn zgAn9`NG5U}^ZC;gnmL&#tHHdW_6L3p>u$OnqONzg#mX{?_U+`+06b=ylxbk3K|rsv-}zeN@hkbmgrk0 z2nq>@*)+Q9^}HJqOxYXR31Iww4VVBbrZ(P8l$eS|N7!BnSq@5Wjv&V+^bL!f49Sdl z5%owStIwRW8NV7Z8F_>;=-}{Xapb1GU`NX(-@6~cM0K|C$^-V6t1+czbX(CHM8{3A zdEUK*`Q912IZp!kd$t6#<1A&s)mSCeyA-2HE6f@_s8l<7@eGho;6}n)^%#!g3FH%6 zKq|h{BQ%Uk2aIccsSlWXjJXpn&fj;rDO(p!!BV{4`P-o$mS*jbx6XtnyuB&bV?M*I zDM}12TwUjXTlcSVA6U5Wdruo(n$$PXZ6klb9{P|o@Q#7W{n~QTeti#uC~-^SUazshZyE=LYK(Dgkhf%rJmx`8K#Lpdwg~uYP8>l)zJ)6@E0R1^jvFM!NFy zN?pe&dfeFlwY8H&u_Sa*55I=66<}$|Th-qXDK^RYw%V<#q)fLuHCXMTns_?%8Je&b z({9^ox~x!U*Oo58j8rQ93gSoxBBKbynozRZ$86W7D?k!@JN*21nZ#nOe83%- zRprmdy^@#h@Dye50ThA2fAyvLIJ%zfPgIklTBCL$Ht2x+WIqvPg0aYF4<0t%-j~NC zPO?Fn6+%&NWR{E&yNL6{oznPLQpr+Cf#TWo7u%*Ow0~mpbccHBQVMGnSKkVEk{Y9^ znew{;sS}bn`zvS8-*WJAvY#vN!Z4OKzMRFwpR0X^#Na*g-(*@9Ty;rc&F&RK^_+OC z0hWK?ALQDdSTABH0lH#yc{c5p6`K?n>s)*7Z^IHtHaBbbomoR$4|dOC&@95ek6Y#5 z4?z$=JYyxp7h^i72=f#iW{+02?C_!Kl*>U$v#3<)v{u$~da`(ZM?vi_fbBWaO;MKo zDr|?-K6x2`uj@ab!aHPJ15a$LE%s0vrsaodrqRx!@C)gw;_k+e4$FAPZeSGkQvq%M z{C!bDfxD2>^ulgyile&x#)Yi+6M1&XZ`&^OE%tJM(uY** z--4ePWu|x!6WG(Zuo*A!TLq5^QGG>0dmXZ&%61?9o#ea`?k+$=7Q?Qsu}&gml2`<%)?8mhFvyrx^B5 z#_pC4!P-5TY4C1Um{uCRs@(2q7o;5vb!$x((9M_h@tit!%}@d)(N(kPhg34sY?u~$ zb-zS^)N?c@hoi_#hqmg+)e%arLl5VbF-0a_Ko)hjyZ@CNG<}B>mR$WM3Fl{~ zM5RK7P#k|B@ek52gHrp|VjES#|E4bgaNF-~WzFNPJpgl?>g){}V4)7D(H{*F4HaW(jrFwyRm+D74 zt43&g<#TsWPo8SaESY!5gb3#KI;N;9P7Zv95L!%~O&8Y4YzN=Mix1T_f^cSEsAs$> z%W5@THiEUkasNP;j{X`eycmOz^wvqH18DV{dKAmM|GM_+V+0g-Qr%mB|e)=}rVWsZ%91e}k4>0N=?D zpjCRh4@f0#MZS^{B4JMH111naJCW5_RsWPnKYuwzfLVjn!t&>Z$H#%}F$QJvuk_E$ zvw`Ide)tI3gDWBN7otj^N7{EJdP`a=dztPl%8B-gzi#gF7bIZF_GP7dy8@l_L#NR^1!6uG0|_hXouygwEiVDWm~hACvC5Yq!l(!X0Cks+5$86 zc``qDdd6pCREUTWtUOJ?&X8M5zzE{pmPB`s9D(*N4e**&Q*2~X&Z(|8s&Ti%;@OkY zbBuKch@voo#_#gRrZl_FVZ5;4;KY-1EaycO%jDC62Z?^Hosg1S)b!GaHj6MqIo1j^ z4{)U!3{2&Zwsxobu*dow{O+PY-t!7JEuA3=irt_=b?m@fUB@=mh&L;u+z=z0)=9ZW z!K`|$TIl`C&G#AcR6(RL@;JFHWed$Q8pHRkr05iQl-2V_~Gl{NPebh83 z(TYOUBAADd{L@#bD#PUul5h6|y-_Sf$o$2a{qQG4(RXU!SLLtT_X>?>zhVtkG0fXF z_MF~A`esW7l}c~c?@*1?(DPj>6DX+%riPyId0jNVJ(i(#n1TXONfLRT&dnC9;Q}M| z{);cSu?7+YZEqrO4vh=n+!uE@Oexktu|-|(sFzY^B3$Glh6^lSe=W1|ZTspc^7ol}a3q~cHH*%dHB8DN&^YFxd{UYaU z@O0SpeAxCD1y7<<3jasjf-FS@8QKgV_bY^UqHTYxp6VUJ-L|mw*YS_e zn;~N!CmmN3W4Rg4PR0v*W(+>S)mXSoluSpC-<{Zfi(CMV&KJ217u(w7=^u`K_F;9Y zf#ykf=r1n^a@F{;uU8ShnZv=FRd>=Ac4BcN3i&6hobqS*@Vw~A(Q8lc{UiC}phatV z&$}LdVK!z89UOLo`5diOgXo#=@SYk*vh2mjL=;-@4{;Z3BktindIbxMB(Z}vXp|Xg z?{BEIMD_+1$gKyq8Na2_56O#{pm@G+I@~U+maadwT6S10Z7a}idxBL$X=Bi>^i-I> zUpRs~*X))(U(L?xs%H5=qk%p|3Ye^gXJC(~Si(siKhd~>KYcB|uBOEMF^gq|?{sCZ z(jPQc==ByeJt6_?#vi=>}d#G|}c*r4at(Xo!}9XRzYX23qM? zVDZJ`shP=ft!JT&+<9o;hb~_1h73Bw2C|9tw59eD?%UNfyBy^(+%RnvLO@!@okl@= zqMDA=J=}BoIPg@dMQP3ZZQGX%o&-0@RYuoS^ICo6=$>bBzX0N;9YI)_6h|p%d5C zv_r|cab>gY02A-R#+TGzgnCVi?ff0_sxfn_Ia%DnSX2TEc4 z9H!Gz%C?98Cj)-+Nx{3QUQB2*PU_-5H?`PrPzMLW3XW5yUq(+BOQw{pI!&04WfJ9- zkwzS6tii3DBT6mgDcNEhp`&tofqf&aA`Rrw_e*dkS*|~H(_Yc&tc@fE?i#$Fs8$%C z(4$(wSl&&x>nU=YVy~*Jmj-U&@bj{zfnC?5a*lG%Ma|FA6J`4|jQ99X?=x{hqHjn+ zgsz_X-<*AHl{=7nE6L+kp!pyVdD&$&CM*X;;IMZ z%y;tBSs8kRGiPK;HrJ^3`ag2|x2v7h9AC`>bX8ftcIBYv#X!-`DJ&dlw7MB-;u_}G z9pg5(KEp`zc3e^BUbNR8RV?=&jH}gct(fIkJ7B`ZL|#h)#B@h@5zP&(FH>Xb$sR|Q ztE}dyD9Bt$a}qHbJREZSl2Fem*UvDw7OpuOVdn#($m=eI!~Cqh6xlgRS2v6od;NGK zXBZ028!0QOH@!*G!@QOb>o1EN$GL?;5X}u#9Z+@6&j(7yk43Y)3&Ks20Y8FUdNpS( zphyLgEX-oRh0e|23rR_;SeAY1=pE@j_YFsy;tHyP@*gYreGfdxqD9$TCk;pdB&Hm|Rz`D}( zR_8t|YOJ$5B+FltcihW%HkfvJydJ@>U$cRtfq`B_TUa+Hz!;vV{ZK~pW#|fr^0U~5 zaM`M-bJ12t392>wuWq2}NIJH6)}jrG?a+tXQ#A&1qJ_+yl43M%g_ov-9LTd1`iOG1 zH|qfOzwsk+H9`lE_rhf8mcBbkz?&4wjaxyRXM2{LD5=^7uid;3vF{aI+6;t_>tItg+Fv_qk`ER8emx!< zQ_4T7vZ&mmE~0Hz(XZe6?%%brB=-FH(#kUB35#JQQ-$ZoH(iIkP>+JQu!SBUZyt)Q ztbh_euE#$!*LfXP6U-o_&KDs~M@EO!ln3qvfT5&Q7VioO z8ny2!@F)Xeq*XdR-f7;=zfRYyMe0|pdwFJWOkRoRFy`wcT@dTtnr8n-5j}L8|LZH7OSs7Xh($D4W2(qY<3y#fh{aMBh~#T6U_zkQI7;rVFuw;;$bY5=Z1P-t;UK zcp6fCgRlfOjlpukq3rsrf%ID0dZ4T9%xBgx)^P8Kj)^yyp;|L_nUqYKAE&0vCNkQJQoY9Sn%V6xHO9Jbe-TEU>n>A#?;whOVU!>dfj;q*HkJIi51a$SA z+3esA1U>*jlzD6g-MLw7_?3Hk(}X1=IUfgJM`dEIqMAFp+*53)| zqO`RYeJP!ChB@($cM7m~6#0VzD*E(a@b6p|i=iORs9K+I#k5#EG6A8Dly<9X6;(Pt z7C7}?DIrp1Yb%E(2!CptJE31NcwDZWtj3wvdiw)?x0~Mhm}jniSb?SBvnzz(ESg+F z9yrmA@-Cyn)DlL4rzbYeK0lEi91>J%Hk1>M)H@Zc4XhcQR0fNV921{({o`{-OQ&D5 zg|rNbp10Lzr5xs6k`n)gjsOqnd4aNhIT|VqX`V|n=#_L)L-ogROf(|qt;l;GdWYk7 zwx}{z`yCogO+enL&1g7Gd z$CADNH2Q0BZ`zN?l~Bg3K(NLM*&+P1GjoN4zScwSO~_&_?!%9zwD$&nwp^aupL~q; z-k!D(E+=>|*N=Tdg{O;)2Lb-6gchEsdh8Gb|!1OuR})|OKZU&Z`- zu{`N*H|r_G1LQ)VF+DP0{9dA&JJo47DAk$y9jpf<-Zp6hnGko*Y$=`Gu>5gr{i4ur zpTl#0BN!ydy-%%YfUDU`8PG?YBh>f_=-IGP`ngBzFu|Ul>=4QWm+6!1XxsaRlBCE8 ze)1|Y?QoDQ-jLu4W57V#Kp)QVgi(uSjey!iGFc^ab$1=)Wm+e8ANS!-HRD~9(OygI zF^4vHJGIV|H4!`o8+#)oaioS)Sdb(5y-mM+1f?j{GtqXFEHiA(FJ$w%eXtig+xxu& zK&<5A!nf7%e%iE$PZ!C+l})g#cbKP5O@})N*?keY&JZaN`5aIyQ>jAwYJ$twI{GH~ z@#yBAZmEanKIsuM)EW^f%btv}#+vobA@G?aJHGEH1q7Vwgg+D)sY{~uKw5h zJDxJpCf-aa0^B&y+;`y;Hrikl8UbepDx0Fg5G0ILXz&F>GlYL!Oa#;W;3q3r^jtrz z#5I%CQ)^GzL2TR8Kl9Acz}QRc%TLM}>?ty(d;=5_RzWkmk91(zd=&eoj0IsnmlW9RjCc5}{qgr%3V;!l~EZ^Q7) zq5U;Ts_heSMXBcBe#G$bER9F#qZvXOI69fj8!+4D9V=#vzS3aR3W=zFydN)Q%lD4J z<9Q_?o%q94dI`jBzl(dOF2-{9r{D@v<*0Dt2ofOTXJNatG2MmYBQTUngOb`!Y{`iP zv)25HLtU(V?MqTr`)*D_JVr}V6#L5x)ZA1`Lho*;Wjk5y^Y^)<353O`9_|K$udgwR z=;KVV7P_t8JAR!^B&syDW3o1yg38lS%)Y|*v zi{Ef;krI2LDUjsGGHbW%Ts>}FndQQ-PPWDR$CcC73hdkF>ur@tLSbLN5g}egHwt4+xPV{EL zc+&aOZP{4OiC14*<8g@m-qBRc@;=joJmT@iFS;L+iI$fg~E^(%c zGo8@i&tN(TMc~yo+=gp}hHPfu%&*;qMClz~zH8DF#KBk%o?IlC3mHbKM@l5sG zkQDI7{cs9+2Y?c7cRUw%(-T9PNt~bm7;I+L%x`D%d;@rtIAhxtc@m~Ym;+v#41mVw z2mip{OsR-A_%5{AK%u~o#B!LlWr!@=;o zwBG;w?s8gE5B}zJAcKmb`)it0fD&TOV5Rg&7u{^c^P#4od+P%u)c3In4kT`K)9?8z z<}Lo=FI0Fs7m#uIzu~``gBqMm4CuKJL4mOQcj_D_$}7QAv#LMN*^wl864{Z0LXx!4 zc4l^i2elBE6#h!;xDeMJ{8T57YY9#1o88nSYJ5z1EEo+t_VYRmDlvi%+*g5u0s(?a zKnE-mD3`y*QsE0VCv4`ia!FKxVGuav&IH0@H-iV2#kGg8xD-o?L?A_$@}FDRIW?Zw zJ$ko#e>?c@U@rV*_Gq>gavAK^NC+bPzX+D$pqo~jQNSTVkeBfm(Ze|_#N9)JSim7G z`7`1|UoU^4$>;4p9}~)_iG0w*4wz%1jE-*y)KdT1nvG{44F*04L~wvVOx_mStIdV~ z(G=aU1^OZlDcG@tL#t$7xwu>>@lanDq#1v#Z%U|bIeY3&X}+4Wa1t6(1XpbDSBBFa zMDS4K6Gz2vBr+%jh+@yt2lKLU?P4h5~KZBCUi}zpY%r>SbhPG$?+%yex znc99WiqS@(;js5^MB4UY_xyek(pd3_3tMU%LHJ3;1wQN4sgW?r>;Js71);pS;=o{$ zp=*Gi!lc!f7BLC%Vo8Z?gy&Yv{3q3ZqJ$CpDXz9ypWs77%x}^EUIN7;{u}JM`bSO- zA_T4T7>spzAW{8%8OBzau+B8}c?nk%hD5-WK0w;&mkguK1hZN^#*psV3i9JY*^ztd z{u@!RxAmcSF#nlXLNJT;UVE88v(1E{HwO5m!Xb;2 z7UjSKO%)m}&o#v{+jR6pANdzZc(ZunZBCsA%9t4}mEiTqTv;gs!7YEFg_;T|Z54-f zoKd&w+c~w&34kjvMDAl(g0$-kkI|Gk7M#rxxTH(bKyv(S!|(%PpNMc^%C8 z889Lat^S-{6c@`NW&a*>W=LbfjXtZD9HP##^#4Y0LRE;0_JSs|D7k;u52u(h#*T_A z`PO%%sK|9t;rB?cN#M-}BTh&s`d>T8*E}Hd&<|>n5o#@{c!;u!Q3(${C=p4Xo0548aY;i8{&f=4NDb%TW~Onhe0s>* zl%FTE-kDVul>am`Qgg>=*GC#uP#=fAl9|GRCx;zbs6z7JKUuJs+%Bpj(yf;9H^Zti zJyCQ9tAI59|ETM$zn8!G!S2jmbH_FJ%%qgZehElyDK8JWlKn)9`ZkiS^=Ld%c>P=3xf|>W zD_S&=bWs&PhuNF&fO?5)GfwZx&9a6|PR~;#Y+0EFs`u_835~eXM2|;FU*99|f12xi zf+<{u{;OaXY4mtGs@BF2G0|Z?B&w_e$`XClSJ~D|q;I!w`@KDeyj3E5ChXuQ$nCw& zu97|EJoCo9?S+Z_46y1+^TO|({jVtAN{pvq!DRENulmcz`6M&HaJ@2)Rp3WLjQ$|^ z{^QWdO)>0hz`G;alKBjOSpaDVDVDgD#^jG|_0Zj!5i7;~l~1PH)%}`bNK;k@PL_Zl z86(R!k3O_0y?nQPYCbf)xODBJT#rQqM9Lkkl01Q3^9Cjx(j2ZV$Bbn4FfdazlL-#! zXTWc!c<^dJfOaW8=;BDy@sSyRpisd`zc>*j@eOH?pq`gaRGY&8R#S6M1)!HrqxH9` zw6lt>6xSf`ART##$L8d~08L3pxsuan^`iax9=cU|4+Hu@+^n`=+?mNlyo=R6_)yybu)iie!pf6-4(bsE5{^<|Yn& z59BZrI5(=pz6@}Zl1FN>VTFlng5WuDFGd#I`SFF77&b7?mtgJ_kKf#E)SAxifEY_% zgZ)dD@Rrzqah3OnmXu~GZkT@nbWIS!l=IZ0$Nen0ZNHbUUwegACJYq6Kq*8F6rCsV zZdR9T<|Z6l@(g0031yiBbYL@yCf{BN$>b&Yv$;}+M-$HB5K>CNN0lG4`{3KsW6FC5(Qj_j-+o^bK% z)Z7-3QWZ*6;z(*O-nwn+G~ILif33s+9%+syDqauXM!%wh4mCgfow(@_n*6y$e$FtC z?2~eyAR47W2b3rrW&Y$JxSd#q|1D~yFYPmzx-2=a#m_u~l>by?dxdnSr;bj%kpO!J zJl^LxTA8k&bG(av%CdR=_M3DRXdbuZcTw-9?4%_8vW#@#3(-`U?dgO(>3z90V2IRT zVw8flPzc=rjJU7=d5)Kv8HHYl|M!24FikP=0w@$N!aWBA(TI(Q+8B&`Id+^W=N4LO^!jV-v2VQza102WTu@s2J-X^sB(O1JgtIi zz%Dn_u%U+4)`U&bM%I6`{5vGtGGTx0r^%wJDzK`M2uC)%_K%%IOE?~G2h5|94;<^A zG5=!bADjMrvI$JMwnG8fRSX|GE`4X;s9>dPebBD4At^b#P`Af>th>M%hkl{r+bk3_ zph@WspttyCbN|U;{uxjt9E&GSJ7|)o>!HMv-^Ws@2^`d^iTvVR3h{mzO?KV^RWd^OZLAU z0OcAY7J5_!haz>1Mj+Rcl4rL9Vk7pbAbyv`M5A0wwc6!37--60O&|#GqKSg4PNT~fUj>1-{j z;4Dv{zEI*qS7H(%T}^~kC=WEQ#+Mg(Zv%a|iJD)hAd>y2DtIO}I#REWKh-m1vH{be z5Lh|u_9oHq$8K#KCYbZ$o$4R=}A?sn42NKK%=Jw z)KR{rlHwAo29e_8d_`Tk%Dp|IqT;q4r})bi^G|Pg7hq=@lhxEmvKomB_ZZ?^+Nvw_ zrzce>k}YR!5?WY_im9s`Z|{y?SqgtnXwjHUe<+ccpVh8@V2LSYH-IGV?TP#-eH3xJ zh*DM8<_c;L{*l&ri#j=(rnI-WU3^8{wCs?y7-KM6Q}NU|7r1B6UtDVZarRD)(LMj8 zu9b26iSw7ayNp^sqq34lzOa5^wd!T~s7N-H|yL$thL|En6^gTox817M7+wi1QZ}d&0=woO?LIO9|IjFUnsmY3$GE z_mV&S#@14BaM~AWS&0(D;@qOFu8>o&rIcp5;NfbBeUP+m?tO8Y8vMv z_smmavlObRyV?kF(W|KAo5K#5PO8@2yKS!uFy*fE#PjB(Oiq3*)^nPijGiddT7*}F z5vmu_NF?TTaWKBeaDn~8%&M8qXi9aD&c4L!`-_X>mTIq>iN+89$BaKRM)w)KDN@TO zCu0jsx$5@J&1(~Hnet1&y?YS|>R!h{`V)M>pWmRuiob#r?iRdyuJoK(pn5~E2sIz;ntvLkobs6|=pvmv#+hJ4Pt4_*+; zoXr$N9N4cZa|Jr)#WQgQ#e)Mxkc-U5x!Iy(*XoN7lC=_9;i5aM0@P0qJdwAP;b>*b z^B;A?Irod)Wu1)!#W}(_!0k;1Bqw7H{jc&HiHs&ELCvH`(=j+1_v!^FNuDQ2z z7J3*<5W@9mR~}}M700v zH0dtQm!DD@IqzKxC|9Jnma5@Wc3eNo9-I}tSV>R#!PS|>lY=G8)iLMLx{ds!GBod9 z>RA_Pm%~*Vv>>t%3N$M(IB*#~vQYoRL6lT(Ci?<*M-j1sJbCKDwdj0=KPrPj?Z5>e zXu)C^#I&KPZ@=Wk&nyt38y%_3D)If`<$FfyE3h3ylg>-MI^~gBRE5qsQuJ0Q{`A-T z9J`=hSA<$&yrUgZU?ID@ekF@+9lv<93gV=Iyh&$sGffVwyCdEP&!Yz*6)ygK zu9*=a!B4-DR3Vf7JwbZ__wv-C%lEAsTDE(#cv7pY&-u|0n`TClyG7?!q{rB~_YJPN z=B_7=NjpZ717&1+;4b|XUuov6{s_XNdY&Vu9|sct{JSRncp(hlM~(g1{6=73kf1Et z`=Z9Vpg#^97vB|ix#G~J9=McQZ5wx5lX$nfLRU8#-1z{lYGxbPE_E)rw1HXk&j$xc zOzjsM)6WcZ8ru7u>zhi=o3D377BhgC3r_K_h1W#mO3I7N9cdn)V=?07s<51D+VRGB ztccs(amnr=^IXoln{2sjj5z_oE3lE`Y=x~@-TGDTfeTgH{H~GzJcbeeT2b-BAN2e! zf~y=RqcrbkPbpM-dO&XTcw%t&i_CAi$#*#@4ZD0S79$48>Ub^B8~2Pmts>9BRxuwC z?;xhlv}i)OnwPdVaez;CIKhnDNc#2s@s18hKH^tat%@JI8A@vRG@k{NonR zTHVQ8HhO@ZI9%f}0I z%fOuS>i(%+T0c38L>wtT??u`o%rb;k_CU#6P5E`%2gl`Hd4{VIN5>c!*oZ$^xly_t z`AdsGh|F~As!KmBdX=wvl|MdmX>^Hw%hNqs%c?!;%;q2{yWF^Ek$;7KOOPb&wPQ9h z&-Kt^mjaQdC|g5uil60R(C&{Aw%yYwqiT|s;Ta-NcI5x2@J7FNsmxwian)`?CoxXA z)UYvqB&|a?(kX!%*lILVXSH4{+LI5BxxsHkJxcX-J!S8a+0v8sm2A*zQjdiKj__U3 zz{~G6TchL-bwukCJEjQo={!q}Zo25tzgC7{yc?6XTfA;l^XCZrQlobL%Kk`W0)LbO zt`ECnlwwbE@RT}+%GdJFMT=eX!B4+HPGTKt08?-k)jN*V`wg^$y0Eb_G#h43$LQMn zjfVz1hg*pT_;T<=ySVMUO8QE!)$411TsdXZ{me12+oSYn6u&BhdN`~{53x9#4oK)8 z4$3fRUu(H8E3EE65<#Spb6sF3_DK= z$pNm8A_2?sWVGH$#@3c=oWO;QLdSAlu^~NM#jHqODti9{7U&Lj;8CP2eUoqXyEtob zv%zjM%p+NdhiR5~N^VQ6lk*F7$*=bqN%m~kIwS&GN2*;KG<%~+Yn}q=J3{+`UpeVV zU2#W6)D+r)%w5tHne&_zNjT#!AL<|jz<^M7>f6laQ3m%uoPeV;R-4uy+}Kz7GP7em zc`CHlz-DHZ8z`7jE*_vhyKZkjt@&0F)11V_P?ry6VpmPMFOt z-*6V~>0vpt?{k_=xw<)7bNwC?D!8}Fm@`vXO8c=@l@AI{=cp7;pU%Q+)~Hg52h_Du zoP0?R2dYcw8G()Fcpn#u~sw=-z||j1AzU->d3a7S>r|(wvMR zVpVfh1TnN)ClPAf@J7w?zEJ3*G2O#=+PxNQHi|aAbM~jN7vyI(BvF{lkrxzQQ)s*bH&0P@CkbbuSo9e9%}1vsBh9XbM03oUm*<|{*9#AeOsA;Tca zSw@aYm>D(8p|K_Z;?k)$)AJaWV!C0fZXZQstI(imi6*)x^^ca zWj4J-*cyw>!wk>^ZmRA?^&C!DLw-D}okx|xA<$_YXi?tN%(zKXYZj7GMY=6@6Pi=+ z1WEI&>*uhYR8^x^_f>T!G?!|=CaqX4Q)yh?3;^lYEWB}#M{5OCm73>|+TBb)>{=1% z?Sssz23HeR)p@NK$(z(A0q%U>wcGaD{i4B*AB+@gaNT(Iy>%{e^zf4Q^9)6Cek{Mu zJuq{MU#?)gkGMF$n@}a%*adxH>G5hP*#+s~#oJA*zV_31w>EL~7IISEr#rtLdOWYp zZ{x0AZzTH6i3`h92DmkS15l@(7j1Qo4q3RQOTB#d87%6{$Cke~mDFo9R+h)$*HM}JI6 zby%Z$jrNgO4fO?fiE6jxMN5C#2gGHE<-D-eL@nUYOIYBYdMIrDcDT@des8y20!uA0 z0ac@i6Ei+t8$yb+@dd@*#hE`3=nOQ*%Lsu-Mg4U^`59yYqN2y5Q~aIkW9Lw>E;B!b zK;mM(1R+aS6Bfo53i_DuHfz;4hw7*M)zgX(3Y*KD0!k~vb6Wi;dEpGQS4k0x?u`5` zX;sU{-7*MW1I~_+kp6Fbfs3+pkR)cv-irm0K%SwT23K>K1fe{PVqxV0%WJ;w#WJnV z=d})zyXOM+1K))Huvj6=E;xM=*k>e`+tV`i`YO0zK74EjotP}Lu#srnL^i*_^_$Hl z*eH_o?Q9$YL~%YZfwu8(ojLrw^n2yX#r5U_4*R4ub)%%O*7-}6^X&YK^0|qJ8UzLN zr~Ha}gN;R}FI7?7Hlqh5TRHQf>guZQ?L_O1t6rSLM2y$P#luO%u(vt|y`5^rXCb|m zFkL!*By?^o>Xow`anjn({i_bXLUfyjRT5jdopCpbH+bf5k3Dk~;EnsxxmxDj!8Vs- zq^Xka3f4%v1_`AfzC~SI^F{7Y(|fz}PUwL-@BfXL{{>0IFy22gzZ$W2OucFOd#vLB z3kUOihKWHLj`QOGLR}}G!%^iFz5u+7`FqI!4gX<|zbE{SxBkx$iI7rIh^FwJV9_A| z?=Sv6CuMltKM?2t{19w^JogK zu}`)rVORW0*^EWIDb=B5=E(n&%O3Ibv7AC18`*KjUt-}Dqj2YcZ2H8B$E@w2p>EZ? z+L;opX29!)MDz5>$xP^lV4YNZvC|jFPp71?Aie?oTfQQ>NI|r6xhKIUzsTV+M}`k1 ztI>=NQ|10D;K6SPXAQJXqB_eoF_w3d(r{l@77TvNRcV&<&Rp)W|wozqgiSv;JJ=sHzcO{#r9qwSp?c~jH#%H;I)LXy|`=+w)=hr&F z2q;*F?`&GlMaY;q7I?qs|8JOg5BE=|)yrhC{$?5`+6hlM%%Jc!PLVu%v{)O15dZuC z?CKa{M=6TUdUUJ(O`|59*|ptXzDC^cb9-#tQ@QNXF`@5tsLL^nddUcHB7~6ZbSKgI z@w~&Ygr3lr0rTNFp_*WjpzRUD_NPJKhq0V6GH!=yd)X&PF5`!4BG~g*LTo)f!36vu z4%#qsAKJcw)4l4=_xTTU@~t~B(`K0m!#dob>3QDsa(&*)u3t5~1|y8Q>{pnuxXw~` zwHh|H61Z>n5U`iGjO>aA)-r>^5aFI`1nqQ(48cTKU-BRiD$zHzq^EiAiGc(ruv!`D3i$XtqSBk%J z_?4vBEA+GugIhqh-#a9k9B{L3>&+5u)D`_`0y<0+s>P9#{@LpeZ$q8Pr zT_CuBKtb-2cwlk3T;y5e%tCC|;MjbpBj{;S=oK2{_DSVDnBtAK6vqOHWTai~G|0j``15Y^UpSVAj^K>lr^6|rscyT4{&yQH=pn0>EZFmQ7Ij3YFnXYW(@$xwQXS>sO$_+iUwLhVrkZ-FN zFF+O;Bm?m7+ZGIKfYJ*HEs*9jBHRC7xhn*(DF)Ib#_$2Nu)e)N`%tJcGL&ksMLMN6@40dJ#2C>uI ztd&zVPL znTdp7z?(^BtiT+GoOip_tv-$K7+*nDQj|3?cVNY}5+^&m*}ANX*O z1-%gds5X2aitj#s|0R&N*+}7BEYUO6$gGP+WM~8(&~aE+TGh2FeVns>+*|N1F9@7k zi+n76_J;OHzZh#e%Vyut+QmkI3ZDzxNQ$7svMm=@<@BdB$g;s;1DJ5w`SFC0teS)U z`knrG^0mu&JdgBSnSQ}9ys_lqLx)SEBf)o}woqbUmg6m8Z%ft%^d@ntX7>qVQYOBf zH++_|AuJ58d4j#TNFs38r?fER%@Wqp+ZylU8Bgs(;IQ9jd)%;yku6E3*>ut;6S>-f zU?xe@LC=2rP#R6JIIcBk1lGAkVE-7<5Y}*My}(t8PbB5nE;Hcm<+6>iAOIQDaXa3x zAu!pF_B`r@JY6Tr4}&;Ndlwvqk4Ps6fIdAkU#(j&-fHuI?)9cMxb7<(YYOkEDU$=& zP@1{i-4e5yg(fe5OI(N?>AmuqmQgB;!uaf_@Ek8GMT4?9!NBl{g~SGso2~kBKhdxh zPdMMaBj&=z;JsmM^-#z${@iqnR2rOEMqvLWs=~E7AFQ!~!#Pzo+a4_2*=6wDb3Q3I$GbD%+G%dp7g# zvuc{a^l)ydoz$U)2Jq(S!y6@_>~`+10W=4I@7xD)MrSZb5iFFMu7ltOU$`5Nmdmgj zb~F)KnW`UjN&((hq}#iBKkobiTfAJD;kHYMfR$KAxhyo{IX37EroJ^st_H`F>Z+%~ z@H(9>>P&rnId`C6qK$P|VgRyc8zKW(lfKC^OGNRUWx?(%ZKnS8*jv`EqbA$NA1&~f za?BENpZ@Ufek$|6b`lUO&7jQG2UB9o*-gozudR~#*DlMol|aX4q#yP9@?aO{7HdGo zut&?mlIPYY9w77pZ8M{{uop~gsukZOiLqc>gWK`*wp5X3E37=Oyg)*N@4Q#1-=e95 zTFhpT@7E2L+U`i_FX)!6u8;TwM{a!i2x~)yQVbFqy=>{;M!L7-jh@6}R14o2++RP| zuy~%Zue45kzbPCu)FOP+b6RG+9&zfjGiXz`JA_>!aoYBFHFc}E{&R!MUJRB@+ELnh zBa-Pt$v+v{7jjs7dip|w4Eg!5j0nlEJsevyMe7x_!q{Qce5{>b@n@!_^#gr~*Mu-j zb78j8T77s&(tH`9!lS?9s-x}Pyn&TAXRvJ!zO!fK!0rn4z>Ids;h#V?m!@4%!=o8pZH*%GiEa+*`>Gr!iF zf7}@e5R@ifYYouf-@9(?R5=S9k$O9&hy-76t56Fb--Lgpq96VmwoNiB8*=DIKHNti zT=&gi5*urF(kwxDI1Ia1UT9SQoDg4ob|!y^SXyxjuty|VShEyhtu1^=;%u3^cFj1* ztUr;xU(D?>be{l(tSgo~BUqC{OMV!2PoYO;?%aAkF8Lp6mi{M~q+JP{@eBN?e!yUP z4$R}IH=)NKJ((hy$SU}pnkftGzj5DBtg##3-PX&Dib=C< z+B&Zdc`IT(r%!SQP23L``+i8I(I|2F3fuQvOS;D&HtFFGfM$5ZBhRn$&$R-E`U1_O z@psL->w3)SuHGerq)iD9cVflsjyAFzPPe-G$9BK-pNz&OUvG|(^2AwOO9pz;t#n(H zj+Q9C7=4-hGIfbso>{ei^1HeMosNkUj-X6e@5AtDfkUEkwK&57AYV+=HOO*r1D$5{ z1GB`>Rq?#iPP;P}t+UU`xWY`%)vn`QhOITyj`~gPcJmkxo+JRlTRWqWGoPAJ601}{ z%=~QXs{T3Op1xtWAIRGopO`tTJa2&KWUdvL@=6u^ANw9$XQb}hG-V1sS`zCGe`GTD z3U5}m7D5uAJwx}G7JsLrvcCq-TPae4mv{{qh4@e1Ba-Y{w*qVB`n!rN`YN)tG*p}S zJfn3YH$Hnnk*)DPhYg{$2^+tR_J_t*I>jJ{*GUuU{FZ{8K;&S3BjtfmO*0qx7JJW^1#}wJ`gaufN=u5xtB83SgH?bJrzFLob zfMTw!Gn4pL$?ttN9+PjjRHvrhr)RI$x2p7}4aQH5yDy&M4J~&Hg^vP+ zTbc+%r!~2HI_qQS$=+ep(+-;K5l5zc(5jArq<4&&6S4pJIE`yWBTliHjX@ zq)zxP6u&QG?Ke6b0}LN@M^O8i0tHo;e+5n;e%T34leDa+>u^`E zlly=@MwG6dtjxWqI6!>kPH%3FSVPEQ{;F1i)1c`j;l;^W;EQtaX)UJvM|TfSZ+b6z z5C>13w~*xB87nrc;ic~m@sDo->tT$?-~d*{a`RoAq?S*VTceMR!&GFOXxC?lbkceo ztj*k|RnYQ)GB;ELzjtrNqSet%=(TC)+GN~w;;?lpS(XmWXw$C-l~97mb;iW*L^3s8gV9=g_aAuqNv@& ze69xzqOb)x1(5bgj20c$JBuvkuOru1{WbzmP@deC)cQ!(GbRG7s+!CzGNK4G6j|vp8}AaylQQp_XT6a;OPXr1*9XP0gKBg2C^|uZF8XiwyUIs8N{pz)Y zH9zvh7a4auADqOb{T5h(z*mepVM&zD^_ymPX?j|x*Gn}CwQ*}}L6P&9yXH;EbKLmQ z8f70#lshVHVR=tnbipUCJlQ8K6mBvOEBn~fwpqQk$?XgvD{_C z`kU5Zjk{I&b4n{TBfK&e1v|d-Eqo6aCkC?CD=&d65y-2T$cQK&!+8(ZOW!V@FMap4 zh&%mU+8tnT(_8GJy2jneIc&WLd(kafrvDX_&AzB?+O@#9R5ntG8FT|Dye}GrvG&DR z`y9+!Az@7N&U@`a0dEFuaz!=+p8B*WbRy1A$`16##l}y8Bc9SC+^f>8KCY{CmAO#P zKA<=V-B{k5zgs@(g?MT;`I*%YoB^vvn$+|I*7JOyBEarEB4}Pul}zpo07<*Qx=S(O zz#Pvp$4MY%dTf99rPYX1)KixdP7g-74GeO#OqZ?DpgRD)=7Dnt?noz8--8>PLt0M% zs8Eo9teAKJo=tg#pDKHIhVepA&*LIb?kl?_E&U4zY#&0&S9^FvD{L)PO+zTSo`5qC+o@qC#ouiSY5grFm%paYz8%g^ps<3&B_y#PJ?;;3wgL+HXlc7k!>9cA+;Rje%=sh zW|u^JRrm0~dtt}~Q2kkha@?|klob*qFX0TOpr7|%!OuB0TK~SjPTr`^FZgoBNWr^8 zDT&}eURec}ozdflYy9quED(abJq0)09rz82Cr&?<|dftGiHuLVj`qWbdmJuRi-77h8wrE z?sly4Oc&iJ+gNOhM|c-;8t`TEh1O$7fQEpc(^?NY_#thc(CUP;*%gwC!w+tC?1%&k z6RB6DyGlJ0;Ptr6Ikw#HQi2ae+~2}1=PYRZ(e%$h&T0Q_T@S^0)pGA~2fLC+V9O0F zjOR`z71Yplaw+^2>|BzodT+Zi!(Qa2sktWYa>KPYs;p#2uMF>h(if(NX5(I7z1tB=U? z$$==$X@ONE#K9=H&LSF@!28>-X%}Zg8xIR2Jg!%JmPG;8d=FT!GR_gVv{u`m23uUN ze97uf4k#QgNWyf9)jlzpoml!&uMoPlR&7Z6YaX^q`<~nvMB2^{I#M&>Im!||Ilm%c zgQG@t6mgm38vMqJ0z}ar<1mxks_F^t(@= zPxF&#z@dJal5oPICzZLp+gWV$^ z=c#mfF74B%sWAhCpg8y@HuDuOD?Ty$g)EHF`N#WIyOFTdq|c{oMhdYbNB+o1o*@j_ z!PkHFj>GKL76%554=J9ry=MFskUzE|Ig*_|Yi01lqXym&$=B04;CoF?!QpaR1!r#P z)_VE_h|>I$Z5D%4%iM>AoWQXS$bgpGKAR|nMXV2AcK ze(#85wI?3)^-C1|0-Re0s^yDw(m7_-NHKiEJtnfl@D!z*5VgW-WN&+aF_Q3K3h;hZ@Yk&6NZS?;%A97C?JW z@wW-LlRqb~`6JP{^1vgVugRZhgg?U@F`>;F-I{oG$@RUuhsvd}bt6i#kO!861#$T; z&shVnJzwWMYG<4)VD+YgV-?VY^ZKGaJMsxpTaUyHaA%h`E<~;18K&u+9xBw!DjE^) z#rf&v{owuaKz(Li?c9X6jCxkq!IpwZ=$7{k#5fV|q|0q>)^4Rej9=Bi4)oT*S zBjvbXLN=Z@uDHrA=r1v%8yGE@{@}!c*t@Bj%?zH_8*IOLNXwP$mn+tHUW?sNL-n47 z3ML=*2vPFrCpByYFP_-vQF>~>*}k;#Nc0jSWrhl=&xMcK2wKu8!E{TX07#(>N!w0lJ!mbkWD1${P-V!14N zKh#g!_GDYUZnpJxai(@VDt)9tW7s6reiPfV`#P&y_Qb0JlM*xN!gYBvTFW`<{u{{9 z`DF_ogGSalpj4XLZ3J}zZS(gY3G8&n3wZJO%CNVMXx{z3mmmnon7-pRp^LYFF(8qA3WPAziRObJvi5y3Onj4tJ&ZZ4|e>lvGB24U3W*TM2gPj+dG5ToBt^!Fpz@2 zAeq5+zK-}$UH@;=U}sna;nNn8is?L%|9y7#UnBfkWRd)-ShV+R;{R+&{f~XWNjVsY zlX4oJ|L55QURc(iM-tT?{12e;+h6>ycvE4N7NwT^{Y#a9V>`bl`)ZGYK`F;e5sdxc t9QeDiroyd{toMJ>xk+*IgwE-4*-X+p_zd&nD*DOi{{gKpE^z<= literal 0 HcmV?d00001 diff --git a/docs/swarm/images/src/ingress-lb.svg b/docs/swarm/images/src/ingress-lb.svg new file mode 100644 index 0000000000..79e6db5f4c --- /dev/null +++ b/docs/swarm/images/src/ingress-lb.svg @@ -0,0 +1 @@ +ingressnetworknode1192.168.99.10010.0.0.1:80my-web.1192.168.99.100:8080my-webpublishedportnode2192.168.99.101node3192.168.99.102swarmloadbalancerswarmloadbalancerswarmloadbalancer10.0.0.2:80my-web.2192.168.99.101:8080my-webpublishedport192.168.99.102:8080my-webpublishedportHAProxy192.168.99.99:80 \ No newline at end of file diff --git a/docs/swarm/images/src/ingress-routing-mesh.svg b/docs/swarm/images/src/ingress-routing-mesh.svg new file mode 100644 index 0000000000..f44afcf77f --- /dev/null +++ b/docs/swarm/images/src/ingress-routing-mesh.svg @@ -0,0 +1 @@ +ingressnetworknode1192.168.99.10010.0.0.1:80my-web.1192.168.99.100:8080my-webpublishedportnode2192.168.99.101node3192.168.99.102swarmloadbalancerswarmloadbalancerswarmloadbalancer10.0.0.2:80my-web.2192.168.99.101:8080my-webpublishedport192.168.99.102:8080my-webpublishedport \ No newline at end of file diff --git a/docs/swarm/ingress.md b/docs/swarm/ingress.md new file mode 100644 index 0000000000..73910e719c --- /dev/null +++ b/docs/swarm/ingress.md @@ -0,0 +1,132 @@ + + +# Use swarm mode routing mesh + +Docker Engine swarm mode makes it easy to publish ports for services to make +them available to resources outside the swarm. All nodes participate in an +ingress **routing mesh**. The routing mesh enables each node in the swarm to +accept connections on published ports for any service running in the swarm, even +if there's no task running on the node. The routing mesh routes all +incoming requests to published ports on available nodes to an active container. + +In order to use the ingress network in the swarm, you need to have the following +ports open between the swarm nodes before you enable swarm mode: + +* Port `7946` TCP/UDP for container network discovery. +* Port `4789` UDP for the container ingress network. + +You must also open the published port between the swarm nodes and any external +resources, such as an external load balancer, that require access to the port. + +## Publish a port for a service + +Use the `--publish` flag to publish a port when you create a service: + +```bash +$ docker service create \ + --name \ + --publish : \ + +``` + +The `` is the port where the container listens. +The `` is the port where the swarm makes the service available. + +For example, the following command publishes port 80 in the nginx container to +port 8080 for any node in the swarm: + +```bash +$ docker service create \ + --name my-web \ + --publish 8080:80 \ + --replicas 2 \ + nginx +``` + +When you access port 8080 on any node, the swarm load balancer routes your +request to an active container. + +The routing mesh listens on the published port for any IP address assigned to +the node. For externally routable IP addresses, the port is available from +outside the host. For all other IP addresses the access is only available from +within the host. + +![service ingress image](images/ingress-routing-mesh.png) + +You can publish a port for an existing service using the following command: + +```bash +$ docker service update \ + --publish-add : \ + +``` + +You can use `docker service inspect` to view the service's published port. For +instance: + +```bash +$ docker service inspect --format="{{json .Endpoint.Spec.Ports}}" my-web + +[{"Protocol":"tcp","TargetPort":80,"PublishedPort":8080}] +``` + +The output shows the `` from the containers and the +`` where nodes listen for requests for the service. + +## Configure an external load balancer + +You can configure an external load balancer to route requests to a swarm +service. For example, you could configure [HAProxy](http://www.haproxy.org) to +balance requests to an nginx service published to port 8080. + +![ingress with external load balancer image](images/ingress-lb.png) + +In this case, port 8080 must be open between the load balancer and the nodes in +the swarm. The swarm nodes can reside on a private network that is accessible to +the proxy server, but that is not publicly accessible. + +You can configure the load balancer to balance requests between every node in +the swarm even if the there are no tasks scheduled on the node. For example, you +could have the following HAProxy configuration in `/etc/haproxy/haproxy.cfg`: + +```bash +global + log /dev/log local0 + log /dev/log local1 notice +...snip... + +# Configure HAProxy to listen on port 80 +frontend http_front + bind *:80 + stats uri /haproxy?stats + default_backend http_back + +# Configure HAProxy to route requests to swarm nodes on port 8080 +backend http_back + balance roundrobin + server node1 192.168.99.100:8080 check + server node2 192.168.99.101:8080 check + server node3 192.168.99.102:8080 check +``` + +When you access the HAProxy load balancer on port 80, it forwards requests to +nodes in the swarm. The swarm routing mesh routes the request to an active task. +If, for any reason the swarm scheduler dispatches tasks to different nodes, you +don't need to reconfigure the load balancer. + +You can configure any type of load balancer to route requests to swarm nodes. +To learn more about HAProxy, see the [HAProxy documentation](https://cbonte.github.io/haproxy-dconv/). + +## Learn more + +* [Deploy services to a swarm](services.md) From e097320c926407adba93d0267a7ffe0de6e192db Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Thu, 18 Aug 2016 17:08:41 +0200 Subject: [PATCH 08/13] Merge pull request #25792 from lixiaobing10051267/masterSwarmLeave Specify woker node for docker swarm leave command (cherry picked from commit 90308fd78315412c30da90217ee14515de4fbf8a) Signed-off-by: Charles Smith --- docs/reference/commandline/swarm_leave.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/reference/commandline/swarm_leave.md b/docs/reference/commandline/swarm_leave.md index e8bbe0c5e9..d1de2306b8 100644 --- a/docs/reference/commandline/swarm_leave.md +++ b/docs/reference/commandline/swarm_leave.md @@ -33,7 +33,7 @@ dkp8vy1dq1kxleu9g4u78tlag worker1 Ready Active Reachable dvfxp4zseq4s0rih1selh0d20 * manager1 Ready Active Leader ``` -On a worker node: +On a worker node, worker2 in the following example: ```bash $ docker swarm leave Node left the default swarm. From 069aa4e11a3e02fc135edea1300798dfb77d56ed Mon Sep 17 00:00:00 2001 From: Vincent Demeester Date: Thu, 18 Aug 2016 15:26:59 +0200 Subject: [PATCH 09/13] Merge pull request #25815 from justincormack/capdoc Split list of capabilities into those added by default and those not (cherry picked from commit d854c4fcc6255330693eee67b655606e92b11544) Signed-off-by: Charles Smith --- docs/reference/run.md | 38 ++++++++++++++++++++++---------------- 1 file changed, 22 insertions(+), 16 deletions(-) diff --git a/docs/reference/run.md b/docs/reference/run.md index 4f6e679c9e..404bbb6270 100644 --- a/docs/reference/run.md +++ b/docs/reference/run.md @@ -1138,11 +1138,30 @@ This can be overridden using a third `:rwm` set of options to each `--device` fl In addition to `--privileged`, the operator can have fine grain control over the capabilities using `--cap-add` and `--cap-drop`. By default, Docker has a default -list of capabilities that are kept. The following table lists the Linux capability options which can be added or dropped. +list of capabilities that are kept. The following table lists the Linux capability +options which are allowed by default and can be dropped. | Capability Key | Capability Description | | ---------------- | ----------------------------------------------------------------------------------------------------------------------------- | | SETPCAP | Modify process capabilities. | +| MKNOD | Create special files using mknod(2). | +| AUDIT_WRITE | Write records to kernel auditing log. | +| CHOWN | Make arbitrary changes to file UIDs and GIDs (see chown(2)). | +| NET_RAW | Use RAW and PACKET sockets. | +| DAC_OVERRIDE | Bypass file read, write, and execute permission checks. | +| FOWNER | Bypass permission checks on operations that normally require the file system UID of the process to match the UID of the file. | +| FSETID | Don't clear set-user-ID and set-group-ID permission bits when a file is modified. | +| KILL | Bypass permission checks for sending signals. | +| SETGID | Make arbitrary manipulations of process GIDs and supplementary GID list. | +| SETUID | Make arbitrary manipulations of process UIDs. | +| NET_BIND_SERVICE | Bind a socket to internet domain privileged ports (port numbers less than 1024). | +| SYS_CHROOT | Use chroot(2), change root directory. | +| SETFCAP | Set file capabilities. | + +The next table shows the capabilities which are not granted by default and may be added. + +| Capability Key | Capability Description | +| ---------------- | ----------------------------------------------------------------------------------------------------------------------------- | | SYS_MODULE | Load and unload kernel modules. | | SYS_RAWIO | Perform I/O port operations (iopl(2) and ioperm(2)). | | SYS_PACCT | Use acct(2), switch process accounting on or off. | @@ -1151,36 +1170,23 @@ list of capabilities that are kept. The following table lists the Linux capabili | SYS_RESOURCE | Override resource Limits. | | SYS_TIME | Set system clock (settimeofday(2), stime(2), adjtimex(2)); set real-time (hardware) clock. | | SYS_TTY_CONFIG | Use vhangup(2); employ various privileged ioctl(2) operations on virtual terminals. | -| MKNOD | Create special files using mknod(2). | -| AUDIT_WRITE | Write records to kernel auditing log. | | AUDIT_CONTROL | Enable and disable kernel auditing; change auditing filter rules; retrieve auditing status and filtering rules. | | MAC_OVERRIDE | Allow MAC configuration or state changes. Implemented for the Smack LSM. | | MAC_ADMIN | Override Mandatory Access Control (MAC). Implemented for the Smack Linux Security Module (LSM). | | NET_ADMIN | Perform various network-related operations. | | SYSLOG | Perform privileged syslog(2) operations. | -| CHOWN | Make arbitrary changes to file UIDs and GIDs (see chown(2)). | -| NET_RAW | Use RAW and PACKET sockets. | -| DAC_OVERRIDE | Bypass file read, write, and execute permission checks. | -| FOWNER | Bypass permission checks on operations that normally require the file system UID of the process to match the UID of the file. | | DAC_READ_SEARCH | Bypass file read permission checks and directory read and execute permission checks. | -| FSETID | Don't clear set-user-ID and set-group-ID permission bits when a file is modified. | -| KILL | Bypass permission checks for sending signals. | -| SETGID | Make arbitrary manipulations of process GIDs and supplementary GID list. | -| SETUID | Make arbitrary manipulations of process UIDs. | | LINUX_IMMUTABLE | Set the FS_APPEND_FL and FS_IMMUTABLE_FL i-node flags. | -| NET_BIND_SERVICE | Bind a socket to internet domain privileged ports (port numbers less than 1024). | | NET_BROADCAST | Make socket broadcasts, and listen to multicasts. | | IPC_LOCK | Lock memory (mlock(2), mlockall(2), mmap(2), shmctl(2)). | | IPC_OWNER | Bypass permission checks for operations on System V IPC objects. | -| SYS_CHROOT | Use chroot(2), change root directory. | | SYS_PTRACE | Trace arbitrary processes using ptrace(2). | | SYS_BOOT | Use reboot(2) and kexec_load(2), reboot and load a new kernel for later execution. | | LEASE | Establish leases on arbitrary files (see fcntl(2)). | -| SETFCAP | Set file capabilities. | | WAKE_ALARM | Trigger something that will wake up the system. | -| BLOCK_SUSPEND | Employ features that can block system suspend. +| BLOCK_SUSPEND | Employ features that can block system suspend. | -Further reference information is available on the [capabilities(7) - Linux man page](http://linux.die.net/man/7/capabilities) +Further reference information is available on the [capabilities(7) - Linux man page](http://man7.org/linux/man-pages/man7/capabilities.7.html) Both flags support the value `ALL`, so if the operator wants to have all capabilities but `MKNOD` they could use: From 7e956837f2f0dfb8e415e38af26a64c272162095 Mon Sep 17 00:00:00 2001 From: Sven Dowideit Date: Mon, 22 Aug 2016 15:47:23 +1000 Subject: [PATCH 10/13] Merge pull request #25835 from decoursin/patch-1 Update apparmor error message (cherry picked from commit e168f0b4ad4dfc11a4423a6785d80153f0969808) Signed-off-by: Charles Smith --- hack/install.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hack/install.sh b/hack/install.sh index 711a38d2a3..70621a5e19 100644 --- a/hack/install.sh +++ b/hack/install.sh @@ -421,7 +421,7 @@ do_install() { if command -v apparmor_parser >/dev/null 2>&1; then echo 'apparmor is enabled in the kernel and apparmor utils were already installed' else - echo 'apparmor is enabled in the kernel, but apparmor_parser missing' + echo 'apparmor is enabled in the kernel, but apparmor_parser is missing. Trying to install it..' apt_get_update ( set -x; $sh_c 'sleep 3; apt-get install -y -q apparmor' ) fi From ca9bb6e4455201d56868ae769100c8ad086e81f5 Mon Sep 17 00:00:00 2001 From: Vincent Demeester Date: Mon, 22 Aug 2016 09:17:32 +0200 Subject: [PATCH 11/13] Merge pull request #25899 from yuexiao-wang/fix-overview Optimize description for Feature highlights (cherry picked from commit d2fa978d4d66622a197eb98f9a77fa217e25f449) Signed-off-by: Charles Smith --- docs/swarm/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/swarm/index.md b/docs/swarm/index.md index 4ed9722fcf..55d78b6ea9 100644 --- a/docs/swarm/index.md +++ b/docs/swarm/index.md @@ -34,7 +34,7 @@ a swarm. * **Decentralized design:** Instead of handling differentiation between node roles at deployment time, the Docker Engine handles any specialization at runtime. You can deploy both kinds of nodes, managers and workers, using the -Docker Engine. This means you can build an entire Swarm from a single disk +Docker Engine. This means you can build an entire swarm from a single disk image. * **Declarative service model:** Docker Engine uses a declarative approach to @@ -50,7 +50,7 @@ adding or removing tasks to maintain the desired state. the cluster state and reconciles any differences between the actual state your expressed desired state. For example, if you set up a service to run 10 replicas of a container, and a worker machine hosting two of those replicas -crashes, the manager will create two new replicas to replace the ones that +crashes, the manager will create two new replicas to replace the replicas that crashed. The swarm manager assigns the new replicas to workers that are running and available. From be94e07b6d53384357c69064f02b5d07b78c936b Mon Sep 17 00:00:00 2001 From: Sven Dowideit Date: Mon, 22 Aug 2016 11:58:30 +1000 Subject: [PATCH 12/13] Merge pull request #25901 from yuexiao-wang/add-content Add the content for how services work (cherry picked from commit abd08f4784810bcf8b4e88e3f9ef1023cb15b8b5) Signed-off-by: Charles Smith --- docs/swarm/how-swarm-mode-works/menu.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/swarm/how-swarm-mode-works/menu.md b/docs/swarm/how-swarm-mode-works/menu.md index 797a0f71fa..fc8b45e3fa 100644 --- a/docs/swarm/how-swarm-mode-works/menu.md +++ b/docs/swarm/how-swarm-mode-works/menu.md @@ -15,3 +15,4 @@ weight=11 ## TOC * [How nodes work](nodes.md) +* [How services work](services.md) From 080891bb116318284d786de91434abcf417048c9 Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Sun, 21 Aug 2016 02:12:02 +0200 Subject: [PATCH 13/13] Merge pull request #25902 from MihaiB/docs-link-fragment docs: fix typo in url fragment (cherry picked from commit ab533a98dceecec707414006544411cfd18b2d30) Signed-off-by: Charles Smith --- docs/reference/builder.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/reference/builder.md b/docs/reference/builder.md index 15bfd9a295..c63bcf5347 100644 --- a/docs/reference/builder.md +++ b/docs/reference/builder.md @@ -120,7 +120,7 @@ instruction must be \`FROM\`** in order to specify the [*Base Image*](glossary.md#base-image) from which you are building. Docker treats lines that *begin* with `#` as a comment, unless the line is -a valid [parser directive](builder.md#parser directives). A `#` marker anywhere +a valid [parser directive](builder.md#parser-directives). A `#` marker anywhere else in a line is treated as an argument. This allows statements like: ```Dockerfile