Well, let me start by saying that Hungarians, in my view, regret the departure of the UK. I think we all remember that in the 1990s, the UK was one of the strong supporters of the enlargement of the European Union. And they played a strong role, whether it was conservative or Labour government, but they were promoters of the Eastern enlargement and we all would have wished the UK to stay. The Hungarian Prime Minister even published a paid advert in one of the newspapers last year before the referendum, asking them to stay. Of course, the vote did not turn out that way, but I think for us there is clarity about the need to continue the European Union as a strong community and also enlarge it further, if possible. We are very close to the Balkans, including the Western Balkans. We believe that the enlargement has a capacity to help reforming and transforming countries which aspire for EU membership. So we believe that even if the composition of the European Union will change as a result, one high-income country living, potentially a lower-income country is waiting for accession, but this needs to be taken very seriously, that this is an unfinished project in the Balkans. There is a real scare, and I tell you why. Because there is a scenario number three, which is phrased in a way to allow countries that want to form groups to deepen integration, to allow them, and not everybody being obliged to participate in any type of cooperation in the European Union, and you can have kind of overlapping groups to integrate in this area or that area. However, there is only one reading in this, maybe not only in Hungary but also in Poland, that this is a project for the two-speed Europe. This is a project to separate some countries from the core of the European Union, and this is not something people would like. From the very start, we experienced so-called transition periods on some issues. For example, on the free movement of workers, there were transitional arrangements. Then the eastern countries, the new member states, were always in favor of phasing out these transitional arrangements as soon as possible because, so to speak, we don't want to be second-class members. There should be no first-class or second-class membership. I know that this scenario number three is not entirely speaking about first-class or second-class, but there is this type of reading, which scares some people. And I think we need to clarify whether this is a favorite option or not for many other people. If not, then we can forget it, but if it is it, then it should be more clear what it is about. Well, I think at the time of the integration, but also since Hungarians observed and appreciated the parts of the European Union, whether it is a transfer of money, which is the agricultural policy and the cohesion policy, and I have to say we regret that in the recent years we saw a fall in the quality of the absorption of the regional money, a lot of examples for abuse, a lot of cases investigated by OLAF, which is the appropriate agency of the European Union. I think Hungarians also increasingly appreciated the possibility of free movement. Until 2011, we had the transition arrangements with the most relevant countries, Austria and Germany. The UK was open before, but a bit more distant from money. But since 2011, for various reasons, very high numbers of Hungarians went to other countries and this makes the EU popular because people realize that it's not only that you earn more, but also the working conditions, the social rights are at higher standards than at home. So a lot of people, when they return, they want to promote the development of wages, working conditions, social rights at home. And I think this is a very good impact. Well, I mean, the Wichagrand Alliance originally, you know, 25 years ago, was formed to promote European integration and to prevent backsliding towards the East and the Eastern standards. Well, it has changed a lot, especially in the last few years, when in Poland and Hungary we have a problematic government. I would say that this group is not as homogeneous as sometimes it seems because at this moment, at least the Czech Republic and the Slovakia, they are governed by Social Democratic Prime Ministers, one in coalition in the Czechs. So it's also a bit of diverse. Nevertheless, they represent a common view, which is, in a way, insistence on the status quo in terms of the arrangement of competencies in the EU, right? And that we join this EU. And then these governments often say, whether it is social democratic or conservative, that we don't want the EU to take more competence in the area of migration, which is a big clash between some of these governments and the EU institutions, and the argument is not so much about xenophobia. I'm sure there is an element of that too. But the argument is that we don't want the EU to take over the competence where it has been with the member state. I think in some issues, it's almost inevitable because the times have changed, the environment has changed, the European neighborhood has changed. And it's almost inevitable that there would be more coordination by the European Union. And I think the fair balance between coordination and solidarity, risk sharing, border control needs to be developed. And I think these countries may come on board.


Hi everybody it's Sam at Mixed Up Craft thank you for watching my tutorial today I've got a little Halloween trick or treat treat box thing to show you today so I have said to my husband that I would make little treats for the kids at the school that he's at so it's a brand new school so there's only 34 children there so I thought that's why I offered to do it and they are all 14 up 15 no 15 to 18 so these are they contain no nuts and they are just nice little sweets they're actually these which we I say we as in lots and lots of Chinese people love these they're called white rabbit they're creamy candies and they remind me of a hard version of the milk bottles that we would get the penny sweets they taste just like that but as a hard form and they're lovely so they have them in here and they also have some pineapple drops as well but they are just these little kind of pouches that I've made really really simple to make and then I fussy cut one of the 12 by 12 sheets from the fiesta fever first edition paper pack with all these sugar skulls so every single one those are the same there those have got that one on they've got the one with the rose and that one there's got another rose on the top so there's four different styles I've only got three six nine twelve here and I like I said I've got 34 to make and I'll probably make a few extras as well just in case and we're gonna it's a boarding school so these are all going to be put on their pillows I just thought it was a nice little kind of little thing they're decorating up the halls and they're going to watch a horror movie as well which I thought was quite good so I just thought I would share kind of the the make with you so like I said it is very easy but it's quick because I was making such a huge amount and I still am you kind of want to you know you want something that's going to look good but also actually not take you too much time so the most time consuming bit for me was fussy cutting my sugar skulls so they're the four different designs that I've got and I have the exact amount for those so I know I've got it all there and then I've been cutting all my card stock so here I have all the pieces I need and to make one of these it's eight and a quarter by four now you do only get two out of a sheet of A4 or letter paper however you could easily get three you would just have to shrink yours down but I did shrink it down it was just then becoming too tiny this is just a really nice four by one you know kind of size so I didn't mind only being able to get two out of my card stock I did go and buy a big pack of black card stock for this anyway so yeah so four by eight and a quarter and then I'll go through I've just cut these from I've got another sheet to go but these are two and three quarters squared so they fit inside just the front one I mean by all means you can decorate both sides but you know they're just literally going to be ripped in two really quickly so I don't want to go too mad with decoration in that sense and these just go on the front panel there so I'm just going to yeah just go through the scoring I've got some ribbon and some gold like twine there to do them up because again the ribbon is just an easy little fastening there so all you need is your piece of card stock along the eight and a quarter inch side you want to score it three four seven and eight it's a really simple and then rotate it so that that heart that one inch is now on the right hand side and you're going to score it three all the way down okay I do that obviously on you know however many you're going to do you might want to just have a little basket by your door for any trick or treat as you get you might want to do a few quick ones for some colleagues in work like I said they are quick so it's just nice to do so just then want to burnish all of those score lines I'm doing just one here but what I have been doing is I've done all them as a batch so I went and done all the scoring and then all of the burnishing then I went and stuck all the so rather than do one at a time you know do all those kind of stages and then it just makes that final piece really quick to do so along the bottom one inch piece here you just want to cut up all of these score lines just to that first score line so it's just simple box construction you're just creating or gift bag you're just creating that base then go up around the side and I've just taken that piece completely out and then just put a little wedge on the side and just remove that one there then with the two little squares that you've got here these one by one squares just take a little bit off each edge just removing that score line really just so you have there you can see the wedges that I've taken and again that one there you don't want to take anything off the longer pieces because that's your your you know your main front and back base this is your sides so if I just lie that down that's what you should have this little quarter inch tab here and then these are your base pieces those are your sides you two main front and back and there's your sides okay so while it's flat again because I've been in that kind of batch making I've then been sticking this down and you want to stick it on the square that's closest to your quarter inch tab you can by all means stick this on when you've put it all together but I always find adding the decoration like this is best to do when it's flat and then you can apply pressure to it so like I said that sits nicely in there giving you a little one eighth of an inch border like so and then I'm just going to add a thin amount you can use red tape double-sided tape you know you don't need to use your best stuff on things like this you know they're just going to get chucked into a little pumpkins and bags and the kids just will either hoard them for weeks because I know I used to do that with all my trick-or-treat sweets I would hide them under my bed in a shoebox and not let anybody else have them um but yeah you don't want to I don't well I don't anyway want to use you know too much of my like good red tape and things like that so I'm just using my wet glue so now I'm just popping in the back first and then pop in my sides just let them kind of just tack down there and then just pop some glue on those and pop down for the back hole I'm going to use my bone folder there just to buy some pressure inside let's use my ruler there so I can get right into the corners and I just seal down that base like so and then you can score down the sides but again I'm trying to keep this quick just pinch in like so so just pushed it in and squeezed it down and it just gives you quite a nice side there anyway then once that's squeezed together I've just got my hole punch and just come down about half an inch in the middle I've got these stripes so it's quite easy for me to kind of line up like so obviously you could punch an eyelet through there if you wanted to make them even more fancy but again I'm not doing that um then I've got the the sweets here it fits quite a few in one two three four five six seven I think that's plenty no maybe it's seven because I can't put the ribbon through otherwise but there you go there's seven in there then just grab my ribbon and I'll use this one here this sugar skull and then grab my little I put these on foam just to give it a little bit of dimension just pop three of those on the back and again just line that up there obviously you can decorate these any way you want and any theme as well I mean these are great for birthdays for little you know favors even on a wedding table you know and the colors of your your wedding they make lovely little favors as well and then I just thread it through bring them up together then grab a little bit of this gold a little bit off there bring it around the back and you're basically knotting this piece to keep the ribbon together I mean you can just tie the ribbon in a bow if you want to but this is just another nice way to keep those tails um pointed upwards which is quite a nice look tie it in a really really tight knot so you keep that ribbon nice and closed and secure like so and then just pull them up again just closing in like so just take off any bits and then I'm just going to just tie the off my edges there and then with my lighter just very carefully seal the edges there and there you have it now that's real time so that's how long it took to do one um like I said the fussy cutting get this cut get all your card cut have it all lined up and just go along and um it is it is really quick they took me no time at all to put together so um yeah I think they they look really effective they're going to look good all together I mean yeah I've suggested putting them on their beds but they may well just have them in a big tub somewhere for them to just help themselves but yeah not even halfway yet but I'll get there anyway hope you've been like hope you've hope you've enjoyed this tutorial nice and quick one if you have please give me a thumbs up and subscribe to my channel to see more thanks for watching bye


Let's get into the big topic of open source, something that we actually have in mind. This is so awesome. We are an open culture that is actually in place. It's that process that a developer or, let's say, a developer. How's the Kubernetes ecosystem really going? Good afternoon, good morning, good evening. Welcome to the Level Up Hour, where we talk about all things containers. Kubernetes and OpenShift. I'm your host, Randy Russell. And I'm joined by my co-host, Scott McBrien. And for our Chariwi, how are you this morning, gentlemen? Hello, Randy, thank you. So we have a great episode, I think, today on a topic that is sort of a back to the future. And I just want to remind everybody, like, subscribe and share so everybody knows that we're out here doing Level Up Hour. Today, we are going to talk about SE Linux and containers. And the reason that this strikes me as a back to the future kind of thing is that for those with a long memory, you might recall that OpenShift began as an SE Linux trick, right? Am I wrong? Well, I mean, we definitely use it in how we segment off containers and keep their workspaces separate for sure. Well, but the actual, before we actually did it as a container orchestration thing using Kubernetes, it actually was an SE Linux built product very, very early in its lifecycle, way, way back years. But now we have a different interest in it, right? But it's the same interest that we have in general with SE Linux. So maybe tell us a little bit about what SE Linux is before I go chasing after this. While you're opining. Well, I'm opining because I've got a lot of opining. So SE Linux was added to the Red Hat Enterprise Linux distribution as one of the standard features in Red Hat Enterprise Linux 4. So it's been with us for a long, long time. And its goal is to change how processes and users interact with resources on the system. And there's a whole like vast policy rule set that determines those rules of engagement between processes and users, or processes and files, or files and users, or ports and files, or ports and users and ports and processes. It's immensely complex. And I will warn you in advance that the demos that we're going to go through today and Randy, you've got to see this this morning. It's a lot of command line. So we're going to get into the weeds a little bit on SE Linux. Right. Well, so one of the things that I think that is notable here is that SE Linux is sort of at the heart of REL since REL 4. And I think when it was first introduced, it actually caught a lot of people by surprise. The scripts that you had lovingly curated for years under previous releases might not have worked. Applications might not have worked. But it's because it really fundamentally alters, as he said, everything, files, processes, users. You know, what users the processes are running under, what files a particular user running a particular process can run under. So it's very all encompassing, but it's always possible to be the executioner and just come in and go, no to SE Linux, right? Yeah, and we're making that harder and harder to do. And I will, full transparency, you know, when we introduced SE Linux in REL 4, its default policies were draconian. And like it did, it did cause interference with a lot of functions. And so I think in the REL 4 days, you know, like 15 years ago, it was very valid, especially because there was a lot of documentation and tooling and a whole bunch of other stuff to just like turn it off. But we don't do that anymore. In fact, many of your REL systems, if you've just installed one and are running it, probably have it on and enforcing by default. And you don't notice it because of all the improvements we've made to the policies and the interactions between things over the intervening 15 years. It actually, I'm going to say, I think not only is it improvements that we've made, but I think that it also made a lot of people give a second thought to a lot of things that they had maybe done and implemented prior to the advent of SE Linux that made them realize, well, okay, maybe it's not a good idea for this to run under this user or for, you know, this particular process to have this degree of file system access. So I think that it, in a sense, it was the rising tide that lifted all boats and we rose the tide a bit by trying to address it and make it a lot more just, it works, it's transparent, it's not a problem. But I think it also affected people's behavior. I think it made a lot of people rethink how they did things, which kind of takes us to the present day, right? And containers. Yeah. Well, it certainly interacts with containers. In fact, there's several SE Linux types that go along with containers and we'll see a little bit about that today. And then we also added some tools, specifically one that we'll take a look at in the second demo to create custom policy modules to insert into your policy for specific container contexts. Sounds good. Ja'far, are you ready for some command line wizardry here? Yeah, sure. Let's go ahead. All right. Stand back. That's right. Let's get a loosen up. So what we're looking at is a Red Hat Enterprise Linux 8.5 system. It does have SE Linux enabled and running. Just check that with the SE status. So it's enabled. It's using a policy called the targeted policy, which is the normal one that we use for Red Hat Enterprise Linux these days. And so it's there. And if you've not seen SE Linux before, one of the other Red Hat Enterprise Linux shows touches on some of the basics for it. And just the rules of the road are put things where we expect and know that SE Linux could be stopping things to know where to look to troubleshoot. So I think those are the two first pillars of working with SE Linux. So I'm just going to become a normal user and we're going to do some rootless container stuff. So I'm just going to build a container real quick. And to make my lights a little bit easier, I'm going to copy and paste from a document. All right. So I'm going to download the REL 8 universal base image because that's going to be my starting point for making a very simple container. I'm going to take and oops. Let's try this again. Install Apache into this container. So it's just going to run a web server, right? Super simple. And then I'm going to do a little bit of extra stuff to make sure that Apache is running when we start the container. Sorry. I'm having a very sloppy mousing today, apparently. Hey, come on. We're on the keyboard. It's all about keyboard today. We'll get there. Nobody wants to hear other than the copy and paste that you're doing on the keyboard. All right. So with this system CTL, I just made it so that when the container boots, Apache will start. And then I'm going to make sure that that's the service that, oh man, I did it again. I'm going to make sure that's the service that starts and attaches to port 80 in the container. Maybe I just need to be better at where I put my cursor. Okay. So now we've got a very simple Apache container that will start Apache when the container boots. So let's go ahead and commit this working container to a container image. All right. So if I do a podman images, right, there's this ELHTTPD container that I made that contains the Apache server. And we can spin it up. So if you're seeing podman for the first time, we're running container in detached mode. We're assigning a port assignment to it. So connections that come in on port 8080 of the host will be redirected to the containers port 80, which is where we have Apache sitting there and listening thanks to our configuration inside the container earlier. So there we go. And if we do a podman PS, right, there's my running container called using gates, apparently. So what you may not know is that as we invoke to this container, a whole bunch of SC Linux stuff started. So if we use PS AUXZ, right, you'll notice that all of the SC Linux commands have a capital Z to identify that you want the extended SC Linux attributes to also be included in the output of the command. And we're just going to grab HttPD. So these processes that are running in my container right here. What's interesting about them is with this Z output, I get this field of SC Linux stuff, right? And this field of SC Linux stuff tells me the contexts that this program is running with. Earlier we took a look at what the SC Linux policy was was the targeted policy. And the targeted policy typically looks at the third field in this set of context, this guy, for making decisions. But what's interesting about containers is that we also get this additional set of fields that is not usually set on processes on the system. So just for reference, the fields of this output are the user field. That's the system you the role that's the system are the type. So here we have a container underscore and it underscore T. The sensitivity. And then this last bit is called the category. And this is assigned in a container. Whereas if we look at other processes on the system, right, these other processes, we don't see that category set. Right. Also, if we invoke another container of the same image. And if I look at my same output. What we see is that one container has these categories assigned to it. And the other containers processes have these containers assigned to our categories assigned to it. And so this category assignment is actually how we keep the different containers separate so that they don't mash on each other or incorrectly. Align themselves to resources the other one has right because according to the system, if we're just to look at like basic Linux process management. These are running HTTP D processes and we would look at things like ownerships or permissions to determine their access to things. But thanks to s a Linux we now have this additional dimension of control. The identify individual containers to control them even more tightly is this assigned category parameter that's on the process. All right, so pause for a moment because we had a question I've actually had a couple of questions today and and one of them concerned. Should we use the uni net container for these sorts of use cases. You be in it. I think that might you be I in it. Well, Benjamin wrote uni in it but I think probably means you be in it. Alright, so I think that that's a typo. Oh, it's been blast. Oh, that guy. Okay, so it is a typo. I think he's talking about you be I in it. Because I didn't know there are several flavors of universal base image. And we've talked about that on a previous show. And we can use the UBI standard image like we're doing here, which is fine like clearly my process is running. It's listening on the right ports. The differential between UBI standard and UBI in it is if instead we had more complex processes running. So maybe we had a database running in this this container to. So there we can't just start up Apache as the base process when the container starts, we need to start up both Apache and the database. And that would be a reason why you would want to use the UBI init flavor, which includes a full system de implementation. So you can write the unit files and start services and control like the order in which they start and things like that. So if you're looking at some simple application containerization, UBI standard works really well, which is the one I used. If you're looking at taking an existing monolith or a set of services that you would normally install on a virtual machine or a server, and you want to run that collection together just like you would on a normal system. That's where you would look at something like UBI init. It increases your base image size because it includes that full system de implementation. But it allows you to have that more complexity and flexibility of using the full system de implementation. Hopefully that provides some clarity to that question. So back to the demo. Where next do we go with this? So just to like round out that SC Linux is there and doing things. So let me go back to being rude because I just want to show you some rules. Well, I just want to show you the rules. Okay, so I installed a package called SE tools dash console before the show. And that gives me this command called SC search. And I'm going to look at all the rules, but I'm really only interested in those rules that contain container. These are the ones that would affect that process that we were looking at that was running with the type container init T. And there's going to be a lot of them. So the rules that we've got are highly complex. In fact, let me take that and work on that. It's highly complex. And these rules determine what our container init type process is allowed to do in the system. So just the container init type, there's 99 rules. If I take away that filter and just look at all the rules in the SC Linux policy, it's going to be many. So I don't want to get into all the details about, excuse me, about how we write rules and things like that. I think that's probably below the fold for our discussion today. And we don't have four days of which to talk about it all. But just real quick, if you're interested in reading a little bit on your own. So let's take a look at this right here. So what does rule that I've highlighted says is that container init T type processes are allowed to attach to Unix datagram sockets, right? So they can open or use UDP based network connections. And when they attach to those UDP sockets, they're allowed to accept append, bind, connect, create, get attribute, get opt, IO control, lock them, memory map for them, and a variety of other parameters, right? So what we're looking at is whether it's an allow or deny, the context that this rule applies to, the function that this rule controls, Unix degram socket. And then when a process of this type tries to do an activity of this type, here are the actual things it's allowed to do. So we can see maybe a little bit smaller list. Like here's one where it's allowed only one activity. So if a container init T attaches to or tries to use peer, I don't know, system call maybe, it can only receive V. That's the only thing it's allowed to do. So, again, we don't want to kind of jump into the craziness of SELIX rule manufacturing. In fact, we have a tool to help us do that. So that's the second demo, but I'll pause there for anything else. You want to bring up Randy before we move on? Well, you know what, so far, so far, this is familiar looking stuff. If you have delved into the SELINIX, it's SELINIX in the container. Are there any sort of hurdles or gotchas that people might need to know if they're working in the container environment that they might not have encountered working more just on regular OS and SELINIX? I think that they, if they're familiar with SELINIX on RHEL, then transitioning to SELINIX managed containers or SELINIX interactions between containers is a pretty straightforward transition. The problem is, I think a lot of people work in an environment where they don't have SELINIX, either they're on another Linux, or they're using tools to build and manage their containers that don't interact with SELINIX. And so they take this from their development environment or from this other thing that they're working with, and they send it to a repository. Somebody on RHEL downloads it from the repository and tries to run it and it all comes crashing down on them. So sometimes this is going to be necessary as a troubleshooting measure for a container that you received elsewhere. Right, and that's where I think our second demo will get into it. So let me real quick build essentially the same thing, but in Roots local, automated repository. So we're just going to make another one of these EL HTTP containers. Let's see, Jafar is cringing because he's like, if only you put it in the registry, you goon. It's fine, no worries. We are open to everything here. But yeah, what I'd like to mention at some point is that we do provide also this kind of out of the box features for OpenShift in terms of SELINIX rules and configurations. But yeah, let's let's skip that a little bit later for a bit later. And apologies for the people on the stream. I'm a bit sick today, so it's better if I don't show my camera. Well, get better soon. Thank you very much. Here we're going to invoke our container a little bit differently. Number one, you'll notice that I'm doing it as root. So we're not going to be running rootless for this example because doing things like adding your own policy is something that requires root ability. And rather than trying to figure out like how to play between the root account and user accounts, I just said, well, for time's sake and simplicity, let's cut out the middleman there. All right, so I'm going to run my container. We're going to store its container ID that gets returned when PubMed invokes it into this variable called container. But this time, instead of just running the Apache container and binding it to a port, we also do a couple of additional things. We provide volume mapping between the container and the host. So inside the container, when somebody accesses slash home, that will access the hosts slash home, and they'll be given read-only access to that directory. And when somebody in the container accesses varspool, then that will access the hosts varspool, and for that container should be given read-write permission to that directory. All right, so here it is. If I do a codman ps, there's my running container, agitated vizvestraria, whatever that is. And so we're running, except it's not operating the way that one would expect. So notice there were no errors on the command line there, right? It's running and everything looks fine until you try to work with it a little bit closer. So I'm going to connect to the container and just have it invoke a bash shell so I can interact with that running container. All right, so here we are inside my container. And if I look at home, remember this was set up as a volume pass-through, so I should be able to see the contents of slash home on the container host. But no. And remember that I said we should also pass through varspool. But when I access varspool inside the container, I should pass through the container host varspool, and I should have read and write access to that. But no. And so this is actually SE Linux rearing its head and stopping the container from doing something that maybe it shouldn't do. So let me go out of my container here. And the first thing, remember, way back at the beginning of the episode, I said the two main things for SE Linux is put things where we expect and know where to look to troubleshoot if there are problems. Right. So here's the problem. We didn't put things where we expect. Why are containers accessing things in varspool? Why are containers accessing things in someone's home directory? Because it's an unusual activity for container to be given access to. And so the default SE Linux rules are like, nope, sorry, buddy, no dice on that. So now that we've broken the first rule of put things where we expect, we need to leverage our understanding of SE Linux and use the second rule, which is know where to go when things go wrong. So I'm going to use a team looks here, and I'm going to create two screens. And in one of them, I'm going to go back into that bash. Whoops. Sorry. Team X doesn't like me in one second. Right.  Or I guess I could have exported it, but she'll quote. So we're going to invoke another version of this container. And I'm going to connect to that container. In my other team X window. I'm still in the container host and I'm going to. They'll batch off our log messages. All right, so we see some error messages from beforehand, but I'm going to wait space in there so we can get some fresh data. And I'm going to go back into my container image. I'm going to do that LS again. I said LS whole, which according to the container invocation should work. We know it's not working. And. And then we're going to take a look at VAR school. But according to the container invocation should work, but we know it's not working. And as I'm doing these activities, you'll notice that some stuff is going into the VAR log messages file. And that stuff is specific Se Linux error messages. Right. And so it's telling me that right here. This is probably the most interesting message straight into the point. Se Linux is preventing our container from read access on the directory VAR school. And then it gives us some stuff that we can do if we wanted to. Resolve that with audit to allow. So we know that it's an Se Linux problem. Yeah. Because we're doing things. We're seeing us in next problems. All right. So to further drive that point home, I'm going to go back to being rude on my host.  Which is, you know, something that we don't normally do kids. Don't try this at home. Well, no, I mean, it's a valid troubleshooting. Yes. methodology. Just kidding. You wouldn't want to do this on a production system. Where you might have other things that if you turn off as he likes now, like expose some things you didn't mean to on, on the system.  But yes, Scott is absolutely correct. This is if it was something you shouldn't do it, you wouldn't be able to do it. But you will need to do this sometimes. And it's for exactly the kind of thing that Scott's doing now where it's a diagnostic thing. Well, okay. Let me, let me confirm that it is in fact what I'm thinking it is, which is Se Linux. This is the easiest way to do that on the edge of my seat. Now Scott. Well, my box became in, in effective. Let me, let me refresh this real quick. All right. You know, a box just got too busy. One of the magic things of P mocks, right? You can reattach your session in case you lose it. All right. So let's try this. So we turned off Se Linux. And now if I list whole as though my magic, I now get content. Right. If I touch a file and bar spool, as though my magic, it's there. Right. And we can verify that that's actually working by going back up and host. And there's that file that I just created from within my container. But if I re-enable Se Linux. Well, wait, wait, wait, wait, before you do that, let's, let's do a list with the Se Linux attributes and see what. Yep. Oh, there it is. Yep. All right. So let's re-enable Se Linux. Reinforce or set back to enforcing mode. And when we turn it back to a forcing mode. I expect if I try to look at home, it fails again. Right. So we've diagnosed that Se Linux is really a problem. We saw the error messages that were happening in context. Then when we turned it off, all of our problems were magically solved. We turned it back on. Oh gosh, it was terrible again. And at this point, the less seasoned administrator would be like, I'll just turn it off. Right. But we're not less seasoned administrators. We're people that know what we're doing. So what we're going to do instead is we are going to create a policy extension that will allow our container to actually do the things that we intended to do. So I'm back on my host over here. And let me go up to my top window. I'm going to install a package. In North America, you probably pronounce this Utica. But if you were a Czech engineer, you would pronounce it Utica, which apparently is Czech for fishing rod, because if you teach a man to fish, you feed him for a lifetime. Oh my God. Yeah. Fun times. Your Czech trivia of the day. All right. So I've installed this Utica module here. And what we're going to do is we are going to create an SE Linux extension to apply to this container. So what I'm going to do is I'm going to pull the JSON definition for this running container. And I'm going to pass that to Utica to make a special policy extension. So we're going to do a podman inspect. And that results in this container JSON, which is like all these definitions around what this thing does. But what's important about it is that in this definition, it's going to have information like the fact that this container was given pass-through access to home. And this container was given to read write pass-through access to VAR school. That's what's in this JSON that we care about. Also, it's going to have things like what it was attached to and some other stuff. So next, what we're going to do is we're going to call Utica. And we're going to tell it to make an SE Linux policy extension based off this container. And we're going to create a special type in the SE Linux policy extension for this type of container. All right. So it has successfully done that. And it says in the output here, like, hey, don't forget to load your extension into the SE Linux policy. And then also, when you start your container, you're going to have to tell the container that it needs to identify itself as this special kind of process so that it is able to be covered under this rule set that you just created. All right. Let's go ahead and do what it suggests, which is insert our policy extension. And then we're going to have to run our container again. But this time we're going to have to add a couple of extra options to it to make sure that it is of this type. So let me kill off that one that we're running. Two of them.  Now, for the grand finale. So we're going to invoke our container again. And we're going to do the same volume path, pass-throughs that we did before. But notice that we also add on these two additional parameters. We're using this extra security option. And we're telling it the label to this container's processes. So there we go. If I do a PubMap. Yes. Reverent surely is our magical special container here. All right. Let me go into this. By the way, the containers are special. The container names are especially wonderful this morning. So here I am on my container. Let me go back up to my other window so we can verify that there is nothing up my sleeves. So we're enforcing. And we're using the same policies before. So if I LS whole. It works. And now if I touch a file our school container. File to. It works. So there's the file that was created from my container. Again, give me the long listing, man. Okay. There's my container file to rate right there. Okay. And so the magic that's happening here is those additional policy extensions. So let me get out of my container. And we'll go back to full screen so we can see it a little bit easier. So if I do an SE search. Hey, remember we use this tool earlier to look at for things that were container in it type and the rules that went along with them. But now we're going to look for rules that are Scott app process. Maybe don't that didn't give me what I wanted. Let's change it a little bit. Add some more credentials on here. Let's do a type user home T. If that gives me what I want. There we go. So this one right here got added by adding that you need to generated extension. And it says that when things are running a Scott app process type, they're allowed access to user home directory type files. And when they access user home directory type files, they're allowed to do these things and those they're allowed to get attributes. So they can do things like an LS. They can work with it with IO control. They can lock files. They can open files. They can read contents and they can search through files. But notice what's missing from there? Right files. So I was able to look at my volume pass through of that invocation from my container. So the volume pass through was read only. And then it set up the SE Linux rules to only permit that read only access to that directory that we wanted. And likewise, if we looked for. So right here. Same thing. Scott app process type running processes are given access to bar spool type directories. And then here's the things they can do add name means that they can do things like create new files in there. There's also a right. Right. So I can actually like put the data in the directory in my files. So that's that's what we did with that you need to think right so. Super complex SE Linux. Became magically delicious by having a container tool. You need to create some container specific rules for our stuff. Right. And now we can invoke any container with the Scott app. Type. And it will be covered under these rules that we've added into the policy. Well, I'm liking the pizza. Yeah, I like the story. That's a great name. So. Yeah. Jafar see if you can you know drag yourself out of your sick bed for a moment and share with us. Are these things that when you're working within the open shift environment. Are. Things that you have to consider there as well or are they things that in a sense open shift is already taken care of for you. Yes. So so that's a good question and actually one of the great benefits of using. Rail as a foundation for open shift. And when I say rail it's in the in the broad sense because we used to have a rail. Before and with open shift for we switched to. Co or. Which basically shares the same kernel as as rail. And we do enforce a sea Linux by default. Which prevents from a lot of. Bad things from happening. So I think we Stephanie has shared the link on on the chat. And. So one of the great things is that all of those a Selenics. Rules are already also implemented for open shift. For containers to be able to run safely. And not be able to have too many capabilities. When running on open shift by default. So. We have what we call security context. Constraints. Which are ways for us to determine. Basically what. Containers are allowed to do. By default. So we do provide different types of. What we call. And I'm going to share a link. To the open shift documentation that explains basically what it does. And. So. Yeah it does. Provide all of those. Very. Rich. Policies and. That already. Implemented for open shift. And as an administrator you can. Change. The attributions and define you a security. Come. Scc's and such things but they do also control control. What happens with the Selenics. Context etc. So. That's one of the. From a security standpoint is one of the great things that open shift provides. And yeah I'll invite you to check into more in depth what this. This does. So I'm going to share a link to the. To the. Open shift. Documentation. Yeah. Well great so. Back to you Scott. Some closing thoughts perhaps on. The world of us in Linux and containers. So. As a far point out like. If you're using open shift all this stuff just kind of happens. And just like we. Manage the policies for. Well in a way that. Like mostly the services that work with relages kind of work. Same thing is true for open shift right so. We take care of that automatically in that product. So. When you have to get into the bowels of. Of Selenics is when you're using rel natively as a container host. And you have more eclectic container. Activities that you're trying to do. Where you're trying to pass through host. Accesses or host resources to your container. That's where you're going to. Probably run into some bumpiness and have to use some of these. Selenics troubleshooting techniques. That we talked about today. And tools like you did so to help. Just kind of. Smooth over those problems. You could also use audit to allow which is what the. Selenics error messages suggested. Invalid messages that would work too. But there you would. Make that the case for all containers. Not just ones of this type like we did with our. You need some policy extension that we added. No Stewart no. Man somebody. There's always going to be somebody. There's always going to be somebody. Yes set it for a zero. No. You know actually in the meeting notes there was one other. Thing that was mentioned and that was rootless containers. And are there some unique. Challenges associated with that. So. Yes. There's a reason why my second demo was being done as root. Because I couldn't figure out how to make it work for. Rootless users. And that's mostly because like. Can rootless users extend the as the next policy. Not really. Can rootless users do things when they invoke their containers. To make sure that they have the right policy set. I was having trouble with that. It's not to say that it can't be done. I'm just not smart enough to do it apparently. Or it's. Something that needs to be further enhanced. There's a couple of weird things that happen with rootless containers. And I know the pod man team specifically has been working. Just. Feverishly to try and resolve some of those things. Around things like namespaces and some of their stuff and they're getting better. They're getting incrementally better. And you should see some changes in pod man for. Which. Is some of those not all of them. And there's actually a. A doc. One second. Let me look it up. Sir. I have dropped it in the chat. If it's. The one that was in the meeting that it's. It is a. So that one is a an excellent article about rootless things from. Dan Walsh. Yeah. The other thing I wanted to put in was. Dan keeps a running tally of all of the annoyances of rootless that they want to. Resolve but are not yet resolved in the community. Get up for pod man. Yeah. This is it right here. So I'll put this in the chat too. Maybe. So these are the things that he knows about. That don't quite work the way one would like. That they're going to work on resolving but so when you were doing rootless. Stuff I always if I run into weird problems. I always check here first to make sure that it's not a known weird problem. Cause cause yeah there's still some where it is there. Yep. Well, maybe that's something we can consider in a future episode. But for now. Unless. We have some additional questions or comments. We had a lot of comments today. Your. Your. Your questions were comments like seven four zero. No. No, I say. Doesn't look like we have anymore. So I think with that. We could. Call it another one. So everybody please do remember to like. Subscribe and share. Let everybody know we're here. Approximately every other Wednesday morning morning in. U. S. Eastern time. And I guess I will. Say thank you for joining in gentlemen. Thank you for. For the show today. Bye bye. Thank you everyone. Bye bye.


Here are the three steps that you need to study it like a pro. Step number one is to know how to gather your information from lectures and your review material that you can then take home and predictably review. This is the most common place where most students fail because they'll have a no-folkful of information but then no good way of essentially going through it. Most students tend to just rewrite what this professor has said, they don't really know how to review it. A top student, on the other hand, is going to take their notes where they can essentially say, let me write questions in my notes so that I can essentially test myself on the information that I've written. If I can answer that question, I don't have to read the detail if I can't, then I need to look through it. Step number two is once you have a note-taking strategy and a note-gathering strategy that works for you, is to come to it both systematically and predictably. This is not useful if I come back to it a month later before my exam. It is useful if I review for it systematically where I know pass number one is going to be today, pass number two maybe next week. And then finally, step number three, despite going through a predictable review, a top student knows that there's going to be topics they're great at and some topics that they're not so hot on. And those students have a strategy where on a weekly basis they're going to be able to go to a whiteboard to practice questions on those topics, particularly to make those weaknesses into strikes.


Today I'm back for another Love Simon video now this one's going to be a spoiler review so if you have not seen the film I definitely recommend you wait till you can see the film before you watch this because I will literally be giving away like the entire movie like I'm going to be talking about every single scene in the entire movie so if you don't want to get spoiled I highly recommend you go watch the film if you just want to watch the film through my descriptions you can also watch this video too like I'm not judging you this is going to be less of a review and more of like a commentary and like I don't really know how to explain it because in my last video on my non-spoiler review I really did go into depth of my review about the film and really more like critiquing it not really critiquing it but it was more review style than like commentary style how I usually do so I'm gonna be hitting a couple main points in the movie so I can kind of control and organize my thoughts on it because usually I'm a very unorganized person when it comes to videos and I just spew my thoughts and give you a bunch of word vomit but I'm going to be kind of like structuring this out a little bit more haha I'm so prepared firstly I want to talk about his family now obviously I'm going to talk about the talks that he had with his parents because they were just such a big part of the film that I thought were really just touching to watch and really like had me in my feelings right there so what I liked about it was that when he came out like these weren't the initial conversations that he had they weren't really emotional at first and they really didn't talk that much when he first came out because it's like this really like awkward thing and like in that moment in time like he didn't really want to talk about it which is very understandable but then like after a while he didn't really talk to his mom or dad they kind of talked to him and they kind of they kind of opened up to him rather than it just being all of him opening up they really like opened up to their son and told him how they were like genuinely feeling about this the one with his mom was so beautiful and I think Jennifer Garner did like a wonderful job on this part honestly like Josh and Jennifer like just had me so like in the feels in this movie and they really did have like a really good like chemistry with the family and each other and what's so cool about it is that like Jennifer and Josh like definitely like had their fair share of like rom-coms and like when they were young they were the main leads in rom-coms and now they're playing the parents of a rom it's just it's really cute oh an amber alert amber alert San Antonio anyways back to my video but now going back into his mom's talk I just like felt everything that she was saying in it the way that she was saying everything you know how she was like you know I felt like you were holding breath and now you know you were still the same you even though like he said it she really wanted him to hear it from her that he would still be the same Simon he was before it was really just fucking impactful scene that just pulled on your heartstrings so much and really did just like it was having stabbed like it was really it was just truly like amazing and like I feel like it's really important to see that kind of talk play out on screen and the difference between the two talks between the one they have with this mom and the one that has with this dad were really the contrast between them was really funny because it's like his dad is like more of the goofball the more comedic approach to it and to see him open up and be emotional with his son and not so like jokie about it and take a little bit more serious approach with which we haven't seen them as character in the film that much and then you know his mom was like a therapist so like she really just has a way with words and she's supposed to know how to handle emotions and know like the human brain and all that but you know she still had a hard time approaching her son about this because it was something that so personal to him and she did a wonderful job at talking to him and then with his dad it was like you could see the regret and remorse he felt for everything over the years and I think that was really important for Simon to see even though Simon knew like his dad had no ill intentions with his jokes or anything but he was just joking around even though those jokes could have hurt his son when he was talking about him he was like oh so stupid four years how could I not know and just it was a lot and I just I really loved how they approached it and it wasn't like with this dad in the sun it wasn't like oh I've lost this person you know like I lost my son like he's not even my real son anymore like how I was supposed to talk about girls now he was really about his dad feeling guilty and regretful for everything that he said over the past years and letting his son know like he like loves him so much and I just I really loved that and I really loved their two talks I will say a little thing that I really liked about the movie was it kind of made fun of the whole coming out bit I don't know because we all see coming out as it's really big serious thing which it can be in some cases but I really liked that this movie kind of made fun of coming out in a sense you know with the whole like you know when he mentions like the whole like I'll you know be out and proud in college and it kind of it pokes fun at like the gay and college type of thing where they're really like ill-gbt and proud which is like not a bad thing but it just it kind of made fun of that which I really liked and they made fun of coming out in a way with the whole coming out of straight thing it made it sound so ridiculous like I think like a lot of people will realize how ridiculous coming out is when they saw it when people said they were heterosexual because in our heads heterosexual is normal so coming out about it and being nervous to say it seems funny to us which which is how it should be for gay people, bi people, pan people, asexuals, transgender it should be like that for everything it shouldn't be this very big dramatic thing which like it is okay if coming out was a very dramatic thing for you but I feel like the media has portrayed it as like this really like big thing because you're so weird if you're gay and you have to come out and you have to you know tell people this and it's supposed to be this big thing when it's really like it's actually pretty fucking funny to be like oh hey just to let you know here here's my preference and here's the here's what attracts me this is what i'm attracted to it does sound a little it does sound a little little weird if you think about it so I really love that they flipped it in the filming and showed why straight the default why do only gay people have to come out and they showed it with straight people and you know I'm sure a lot of straight people have oh my god that's hilarious straight people coming out that sounds so funny and that is so goofy well guess what you heterosexuals that is how ridiculous it sounds when when a gay person comes out as well or a bisexual person or asexual because it's like I shouldn't be having to tell you this like why am I telling you who I'm attracted to like it's a weird thing to tell someone and this is no way make me making fun of like I don't know like I feel like it is but it's also like I hope we come to one day where like we don't have to come out where it can just be like that's cool if you're gay like and we're already kind of getting to that point and I feel like they showed that really well in the movie that it was like abby and then his parents reactions like they were all very like okay and he was like you're not surprised and abby was like do you want me to be surprised and it's like the way that they reacted was a very I felt like a really realistic and kind of a happy realistic approach because sometimes it can go really bad and people can go oh what the fuck I felt like normalized like gay people in a big way so often when it's like coming out seeing it's like oh my god like this is a whole big thing it's like you know sometimes it's like really not anyways I don't know why I went so wrong about that like it didn't really make sense about anything that I was saying but you know that's just my life saying things that don't make sense moving into friends now I really wanted to talk a lot more about their backlash whenever they find out what Simon was doing and how it was lying to them and manipulating because I didn't really get to talk about this in my spoiler review because it's like a really big part of it you know blackmailing blah blah blah so like after he initially gets outed they're all very like worried about him but texting they're calling him and he immediately like he just doesn't want to talk about it which like is very understandable and Simon's one of you like it's just like not right now guys and so you just basically like cuts all ties from them all for all of break for all of Christmas break and then when they finally like over that course they like hang out they were blah blah blah and they kind of realize what he's doing so whenever they finally see each other when they're going back to school they confront him about all this and I feel like the only person that I could have sympathized with was Leah and why I say that is because it's like Abby and Nick it was sort of this thing where it was like like I get where you're coming from like I honestly do get where Nick and Abby were coming from like you you tried to get me with Martin you told me that Leah liked me I'm not some piece of meat you can just pawn off to Martin and all that stuff and it was honestly like it was like I was very indifferent on this and I really did have like a weird time like constructing my opinions about it because it was such like a like a torn thing I felt because I was like what would I do if I was in Simon's position would I go to that extent to keep my secret from being outed and I feel like that was one thing that they were they weren't like understanding and also like a part of it was like it wasn't this whole thing about the movie a lot of people say he was scared of being outed I don't really think Simon was scared of people knowing he was gay or being outed by Martin the whole thing was he didn't want to lose blue because if he knew if those emails got leaked he would lose blue because that's literally what happens in the movie the emails get leaked and then he loses blue and that was that was the biggest part whenever he got outed it was much more of an anger thing that he felt he looked very frustrated very angry and then like once blue sent that final email like he actually broke down and he started crying and it was very emotional people knowing that he was gay like it wasn't like I'm terrified of people knowing that I'm gay it wasn't that wasn't really the main point of the movie which I feel like is being misinterpreted by a lot of people I think a lot of people think that he's scared of being outed even though that's like no one should be outed like you should always have that choice to yourself it was more about losing blue anyways I'm getting sidetracked I was talking about the friends okay I will get more into blue and the emails and all that later but I was talking about the friends I'm much more sympathized with Lea rather than Abby and Nick because I felt like the thing that he did to Lea was a lot worse than what he did to Abby and Nick because the way like Nick and Abby approached it were like you kept this apart for three months and I was like okay like calm down like the way they said it I was like what what are you talking about like calm down with Lea she was like you set me up to get my heart broken and I thought that was really sad now let's talk about Lea's feelings Lea's feelings her whole I'm in love with you it was there I don't really know what to say about it because it's like okay and like yeah it's unrequited love but it's also like what like it was honestly like we all knew it was coming but it was also like okay what the fuck is happening like because you throughout the film you see Lea going through her own struggles or whatever you can obviously tell that she likes Simon but then it's like she says it to him she's like I'm in love with you and it's like even Simon was like um what because I don't want to be like oh like she's so like like why would she have feelings for Simon like it's understandable but I don't really I don't it's like what do you say about that like it's really weird that was not in the book in the book she was like pissed off like genuinely like pissed that he told Abby before her like she was like livid and then in this one it was it was like oh you told Abby before me and that was kind of her main issue that she was not about in the book rather than be like I'm in love with you which we were all like where did that come from but yeah I mean her feelings were they really necessary for the plot and they could have gone without that in the movie I don't think they would have lost much if they didn't put her loving him in the movie I don't know that's just my personal opinion I'm sure people have a lot of different opinions on Leah's feelings and all that shit I don't really know I don't know I feel like everyone's gonna slice me talking a little bit more about Martin I don't I think they did a really good job at making Martin unlikable which is the whole point of having a villain or a bad guy is to make them really unlikable but sometimes sometimes in movies they give you a weird backstory on them to why they're like that and you're like why are you telling me this like just make him an evil guy I don't want to feel any sympathy for him they I feel like you know in a sense they try to do that with a little bit of him confessing and you know getting made fun of a lot but it was like I really could not sympathize with him because Martin is just like an asshole um but also kind of seeing that Martin did feel regret for what he did and this is no way me making excuse for him but you did see him feel regret after he did it when he sees Simon getting like made fun of um when he sees him on the Ferris wheel by himself like he does feel some regret and I feel like in a way like Simon didn't forgive him but like after he kind of snapped on him I think Simon felt better and he kind of like just calmed down from because when Martin came up to the Ferris wheel he didn't seem like he like hated Martin with all his guts but he didn't he didn't like him but still I don't really know how to explain it but I liked that they kept him like unlikeable majority of the time and just gave him like a little bit of regret at the end made him seem like a little bit of a morally intact human towards the end of the movie you know what I'm saying okay so how do we talk about the Halloween party um oh my god I loved this Halloween party because you you don't think we ever see like Halloween parties in movies it's always like uh like everyone hates my costume and like I'm the odd kid out going to a Halloween party like no one likes me like I'm the outsider it's the popular kids party and I'm going to do it and everyone's gonna make fun of my costume as usually how it goes in high school movies when it comes to Halloween parties this one it was like it's at bram's house you know he's my he's my homie he's my he's my bro not really when he goes to the Halloween party like he has a suspicion that it's bram that's blue um we see Simon not like he kind of like let's loose a little bit now Simon's not really a super like ah like I don't know introverted but not like super like antisocial introverted like to an extreme he is just a little bit more laid back so to see him like loosen up during that party low key a little bit to impress bram because he was like oh yeah let's drink a little and then he goes after he's you know a little too turn he goes up to ask bram if he is blue and then he goes into the room and then he's like oh hey hey hey whoa whoa whoa oh my god I think bram is straight that's literally what his mind is like he's like oh my god a hetero on my watch what yo what up tom you hetero bitch hey man what's up man you touch any boobs lately you're straight brook obama and a minion in what world is that considered bestiality if you aren't with a minion that's not what he's thinking that's not what I was thinking I was like why is a minion hooking up with my boy bram like out of all things it had to be a minion like why couldn't it have been like a freaking a who from whoville like why did it have to be a minion out of all things I don't know why I'm getting so angry about that it's not really that big of a deal and that's pretty much the halloween scene for you um I don't that was one of my favorite parts about this movie I don't know Garrett with his karaoke Simon get it in on the karaoke it was all all around a good scene also bram and simon playing beer pong and the fist bump hell yeah going into a more serious emotional scene I'm gonna talk about a little bit more about bram or blue breaking things off so simon gets outed blue sees that he gets outed and decides to break things off with simon and this scene was like it was it was a lot I'll tell you that it was a fucking lot and I literally wanted to die in this scene like I literally wanted to actually jump off a roof because it was so hard to watch it was just like no you know how like he starts like Simon starts typing he's like my whole world's falling apart like I literally felt like my whole world was falling apart I'm like everything is ruined in my life and I'm literally like going to crumble right now you're just watching this happen and you're like he literally just got outed and now this is happening you feel like it's all happening in slow motion you're like he's like reading the email you're like no why and he's like he just can't do this and then he deactivates his email and I was like I'm going to literally fling myself off this planet right now like bitch and then everything that I'm saying is basically probably what Simon is thinking like he it was just it was so hard to watch and see Simon just break and just shatter basically rewinding a little bit to when he has the suspicion of who blue is the people that he thinks it is is bram lile cow and that's it um why did I feel like it was more people but it's literally only those three so he thinks it's bram for like a very short amount of time when he's like orange oreos the halloween oreos hey and then moves on to lile now the jump to lile was it was a very big reach to me because it was like oh I saw him go on his work break and then he was typing on his phone and then I got an email haha I'm sure like a bitch I found it out and that's kind of how Simon's mind works it I don't know I felt like the jump to lile was pretty big to me and then like I personally thought it was a little bit more if he wanted it to be lile in a sense like he liked lile and he sort of had like growing crush on lile I don't know that's how it seemed to me if you read the book that that's how it kind of was for cow like he kind of had like a crush on cow in the book so then that's who he just thought it was and he started connecting dots with cow and kind of making assumptions because he wanted it to be cow he kind of had a little little bit of a crush on cow but I feel like that's how it was with lile in the movie which I did not think it would be lile I thought they would just stick to what happened in the book and make it be like oh I want it to be cow my you know Prince cow but it really wasn't it was definitely more that for lile connections were blue to cow I think were it made sense you know middle nowhere middle nowhere got it got the connection the connection between bram and blue made sense you know the orios the orios made sense and then lile to blue I don't know where the fuck that happened but it did but I don't know where it came from hudging into orios whenever he gets the final email from blue there's like five open packs of orios in his room and I was like okay this is a big thing with the love simon promotion team they're always fucking talking about orios which I was like you know orios were in the book but I don't I don't remember them being this um relevant and such a big thing to the story in the book but I guess it is the movie and they really weren't to the movie let's just be real like he mentioned orios once but there's fucking like 10 packs of opened orios in his room I'm like what like at least make them unopened so it like he like goes through packing the opens a new one because if they're all open that means they're all probably gonna go stale and they weren't different flavors they weren't anyways that was just something that I noticed while watching it let's talk about the carnival scene you know what in a way I really liked it in a way I didn't really like it why I say I didn't like it is because I felt like since the whole school was basically watching him it made it really it made it harder to watch and also I feel like took away the some of the intimacy for bram and simon and that's just for me you guys may have liked that but I just wish that it was a little bit more of like a private moment for them but I don't know like I don't I think that was one of like the downsides of the movie for me was that it when they had their first meeting when they met each other it was in front of like a lot of people which I don't know he's on the Ferris wheel for a while as we know and then when martin comes up and he goes oh simon it's me I'm blue and like when he first walks up and he doesn't say anything I heard the audience of the movie theater gas as if they were really thinking that martin was blue I was honestly kind of offended like you have the audacity to even think and gasp as if you actually think martin is blue and I went to two early screening the one on the press tour and then the one that was like an amc promotion or something and both of those showings the audience gasped as if they really thought martin was blue and I was like are you fucking kidding me like I was actually kind of upset like I was actually kind of getting like personally offended like like really in this moment you should be sitting there like this because we already know that it's not martin even if you don't read the book you should know it's not gonna be martin you should be sitting there quiet unsurprise and be like well man it's not martin so I'm not gonna fall for that they fell for it they really did fall for that movie little um pretend plot twist and I was not here for it because I was like like not in one single god damn universe would martin be blue okay that's it don't even gasp don't even usher a word that even hints to you thinking that martin would be blue okay enough of me ranting let's move on to this moment that they had so the moment that they had it was literally it was the cutest because simon literally bram comes up and he's like can I sit there and simons dumb ass says sorry but the seat's kind of taken bitch bram's like yeah I know and then simons like oh my god like he finally gets it and he's like oh it's you and I'm like finally you got there you got there simon like it was so funny just to be like well this seat's kind of taking the worry and like just like well it's kind of taken it was so funny and then bram's like yeah bitch like I know like it's me I'm blue do I need arrows pointing at me and a sign that says I'm blue so he sits down they have their like weird like awkward moment where they go up on the Ferris wheel a little bit so they grieve the top and then they kind of they just you know they talk a little bit and the kiss and the second one the first one it was like that's a really soft kiss and then the second one I was like whoa whoa oh hey there oh whoa that escalated a little bit and then the third one these these bitches kiss three times on this Ferris wheel and the third one was like a nice ending kiss to that scene like it was really like it was some closure for me one thing that I wish that they didn't cut out from the book and I wish that they included this scene from the book was when Simon's basically looking at bram's ham bram's ham hands and he knows that like bram isn't out yet and he doesn't want to like force him or anything um but he like says so softly he's like I really want to hold your hand and then bram just goes so hold it and then he holds it and then it's just such a soft scene and I wish that they included that in the movie because it would have been so damn cute like you couldn't cut out one of the kisses to give me a little hand-holding action like hand-holding is literally the cutest like it's so cute they cut it out like it's really not that big of a deal like I wasn't mad about it at all another thing that I wish they didn't cut out which is not really that they cut out but I wish they could have included it was Leah Nick and Simon in the basement so in the book they kind of like go to the basement a lot that's kind of like their hangout place and I wish that they included that because I thought that would have been like a cool thing to add to it and show a little bit more about their friendship because I think the movie focused a lot on their the friendship between the four of them which is important and I I do love Abby and I think that her addition to the friendship was important but in the book it definitely showed you a little bit more about Nick Simon and Leah's relationship you know when they hang out in the basement and all that stuff I mean it wasn't that big of a deal I just thought it would have been cute if they added the basement like hangout scenes in there but whatever the movie is so good that like it's okay oh one thing I do want to touch on is Kanan and Nick's chemistry in the like short scenes that they had at the end of the movie I just I thought their chemistry was really good in those parts for two characters and two actors that didn't have that many scenes in the movie together and to sort of build that chemistry you know like in other movies these two actors will have like a lot of time to build some chemistry throughout the film but I think that they had really good chemistry on the Ferris wheel scene and the ending scene which I think is something that is should be praised because they didn't really have that many scenes in the movie together to kind of have an advantage to create chemistry but they did it anyways they did it anyways you know they got that chemistry on lockdown bitch I mean because we're being honest like Bram supposed to be more of like a background friend he's supposed to be like not the main core friends but like a lunch table friend the person that everyone knows in the movie but he's not supposed to be like a main friend you know what I'm saying it was great that they got they still had that ending chemistry in the last scenes but throughout the movie like Bram supposed to be in the audience eyes is like this friend of a friend sort of person and he in the movie like he only really had like a more prominent role when Simon did think it was actually Bram and then after that it kind of went back to being a background character it was just like no offense to like Bram like it was just how the movie worked and how it's from an audience perspective what it would be perceived as you know what I'm saying but I think their ending chemistry was like on point like it was amazing the last scene in the in the movie was just so it was so cute and it was just it was great and but also one thing why does Lia sit in the front seat if she's just gonna get out for Bram to be in the front seat you know what I'm saying I know it was supposed to be like a sort of shocker that like Bram would be there too but it was also like oh why don't you just sit in the back seat to begin with then we wouldn't have to do this whole moving thing and the way she goes she's like on the passenger side see she walks around the car to go to the back seat on the driver's side and I was like girl why just sit in the passenger side seat in the back seat like what she was just trying to get close to Abby but then Bram comes in and then they they do a little like super cute casual kiss and he was just like I'm gonna die you're gonna make my heart melt oh it'll be so much also if you don't like the two teachers the principal and the drama teacher honestly like you're probably the most bland unseasoned person ever if you didn't like those two characters because they were so fucking funny I can't wait to get flamed by these love simon stands oh what the huh so I think you covered a good majority of the movie I think I did oh lord I swear to god if I like edit this and realize like I miss so much things I'm gonna be so upset but if I did miss anything which I'm pretty sure I did um leave that in the comment section down below oh also I went to the press tour thing the press tour screening and you know like how like Nick and like Abby Greg were all there they like come out and like that it was very disappointing and why it was disappointing was that they came out before the movie came on and just said basically just said I hope you enjoy and then left and I was like okay like what was the point in coming out here if you're just gonna come and then tell us to go to another location after the movie but they didn't do shit and I was like why did you even come out here honestly literally Nick looked like he wanted to actually die I was like dude like honestly why did they even come out here if he literally wants to die and then you're gonna just tell me to enjoy the movie which I already will you don't need to tell me that and tell me to go to wheelers afterwards which you're gonna just told someone else to tell me you know what I'm saying like what was the point I'm not even gonna say I was appreciative of them coming out because it was like there was really no point for you to come to the theater because all you did was say hi and then leave what was the point so I think that wraps it up for today guys if you liked this video make sure you give it a thumbs up if you liked love simon give it a thumbs up if you ignore the thumbs up button that literally means that you hated love simon and you wanted to die so if you don't want love simon to die and you want it to um receive support you will give this video a thumbs up because if you don't you're homophobic and racist so you will also be deemed as an anti love simon fan if you don't subscribe I don't make the rules guys so just subscribe and yeah I hope you guys enjoyed thanks for watching and I'll see you in my next video


How we doing? Good. You got a lead off question? Yeah, coach, what are the vibes like in the locker room? I don't know. I don't go. I try to coach him on the field. Yeah, that's okay. You'd have to ask those guys. I try not to spend a lot of time in the locker room. But I think the most important thing is that we we got better each day throughout practice.  They got off to a great start last week with the chargers dead. So our ability to force them in a longer yard of situations will be critical. Five, three, third and one said three, third and twos. That's impressive. How valuable are guys like the query and mold and able to in the mid game able to shift back to old roles, you know, to help you out?  You know, just what's valuable is that everybody's doing their job. Everybody's doing it at a high level and if they make a mistake, they don't make the same mistake twice and that they, you know, are playing up to the standard and having versatility and being able to do that. I play multiple positions. We've talked about that at length. It is great. Whether it's an inside backer that can play both, you know, a guy like the Nico that can play some inside play some outside. Safety is that can play nickels, corners that can go in and play nickels inside and outside. There's a guy, Kiers, you know, we've seen his return guy, obviously, but in terms of the route running and learning the receiver position, how does he come along in that respect? Well, it's gotten better, you know, it's an improvement. We'll work Kiers in, you know, but he's really improved and done a nice job and trying to work him in there a little bit more. We'll see about what Eckler's delivery looks like, but if he doesn't play, what's Kelly's skill set like and how does he do? Well, they both, you know, they handed to him 17 times each, I think. Strong runner, physical runner, good vision, you know, good jump cut, you know, made a nice jump cut on third and one, had some penetration into the backfield last week and shortly after the handoff was able to jump cut and get vertical and, you know, get his pads down and gain a couple hard yards on shortly after. So, you know, both are good backs and they probably have a different skill set, but, you know, Kelly runs hard and runs with good pad level. How did Gibbons do last week? So we saw the one tackle for loss, the penetration that he had there, but he seems to be pretty active in the play. No issues with Gibby, none. The guys lined up, communicates, triggered when he needed to trigger. So, again, that's why he's in there. Yeah, yeah, I think Dylan will play in the game, so that'd be great. Let's say a testament to him and how hard he worked and the process here to get him back and get him ready to go. You know, I feel comfortable and confident, so excited to have him with us this weekend. Yeah, he's an offensive lineman. That's Dylan's position. He's actually going to have another versatility roll. Hooker will be out and Fulton will be out. I feel good. What's always been like, Dadra, is it kind of worked your way through?  Praxton, is it tough to get out there on Sunday, or you feel like it's a good process? Is it tough? No, it's not tough. No, it's not tough. How do you assess your chances? They're very last offensive snap in the game? Yeah, last offensive snap kind of just rolled up on my ankle pretty good. Always, always apparent, expected to play. Got you. How do you feel, you would have liked to obviously come back and get out of the field with Ryan to work on the things that went wrong? Of course.  Actually, if that, you know, if we got the ball back, but, you know, we prepared those situations and count. You know, those guys did before I got here as well, you could tell how they prepared and count when we went over those scenarios. So, you know, hopefully, you know, you don't want to be in those situations, but I feel like, you know, we were prepared. How do you guys talk with him? Of course. That's, you know, while Ryan played a lot of football, you know, that's why his record is what it is. Because he's the kind of guy that's going to come in the film room and help us correct our mistakes and, you know, his mistakes as well. Have you been able to do anything physical this week? Yeah, I do something physical every week. Such as? Such as coming to work, which is football. What do you see with their second there? I played against those guys last year.  You know, those guys played ball, those guys win. You're seeing what they did, you know, last year. Obviously, it was a good game against Miami last week as well, against some of the best-received in the league. So, you know, we got to come prepared.  And in NFL, you know, you want to go out and try to have the same success as other teams. But, you know, our skill set is different than Miami receive a skill set. You know, just trying to get my body ready to go, if I'm up Sunday. And that's really kind of, you know, a day-to-day process. You figure it's a Sunday morning decision? We shall see.  So, I'm not sure how it goes, but, you know, I'll be prepared. My number's up, I hope. Same time is exciting because I knew it was going to be a better rehab than even my right one was, because like I said, I had all those resources. So, a little bit of excitement, but also, I mean, just knowing that was a long grind. I mean, eight, nine months is always the timeline for that. So, it was a little bit of a grind, but a little bit of excitement in there, too. What's the process like as far as patience on your part? Two mates saying, hey, anytime's coming and you're just kind of having to let it storm a little bit. Yeah, like you said, it's just patience. I mean, because you can't rush. The graphs has got to set all that stuff. I mean, all those medical terms that the doctors tell you.  I mean, obviously, people healed at different rates. And, like I said, we did all those tests and kept testing it and pushing it forward. And maybe it'll play this week. And like I said, it took a lot of patience to get here, but we're here now, so hopefully it goes well. The last time I saw you was a left tackle. Have you been working anywhere in particular this week? Yeah, yeah. I've been working wherever they need me, which is everywhere right now. Just trying to figure out where we're going to need me this season and stuff like that. And yeah, we'll see where that leads. And I'm prepared to play anywhere. Does that complicate the return to play for you, or is it kind of natural to learn everything at once? It kind of matches. I mean, because you do rehab on the left leg and then you're trying to do all sorts of positions. So I've already been working all the positions and then in rehab. And so when they throw me back into practice, it's like I've already been there. I've been working it. What can you tell you about maybe what type of role they're going to have you in on Sunday? Yeah, I mean, just kind of playing where they need me. I couldn't tell you exactly where it's going to be. But wherever they plug me in, I'm definitely going to be ready to play there.


Welcome to All Hands Update. Here's what's happening around your Navy. Join the Navy and the nation in celebrating American Indian and Alaska Native Heritage Month throughout November. This year's theme, Serving Our Nations, represents American Indians and Alaska Natives as U.S. citizens and citizens of their tribes. amphibious assault ship USS America embarked 7 F-35 Bravo Lightning II aircraft for developmental and operational testing. The America is an aviation-centric platform capable of accommodating F-35 Bravos, Ospreys, and a complement of Navy and Marine Corps helicopters. U.S. and Royal Cambodian sailors kicked off the 7th Annual Cooperation of Float Readiness Training or CARE exercise at Ream Navy Base in Cambodia. CARE Cambodia is a bilateral training exercise to increase cooperation and enhance maritime security between the two navies. You can read more about what's happening around your Navy at Navy.mil.