Thank you everyone for joining. Welcome to our presentation. I am Preeti Desai and I'm here today to talk to you about interoperability in CI CD, RoboCat meets Octopus and OctoCat. I have Jarrett with me. Hi everyone. My name is Jarrett Kiputo. I'm a Software Engineer at Google, working on Cloud CI CD specifically Tecton. Before diving into interoperability, let's first look into CI CD process in practice. Thanks Jarrett. Let's look at what CI CD process is in practice. As a developer, when I'm implementing features in application in this world of microservices, when I'm adding a new feature into a service or an application, I create a pull request and the build process kicks in and runs the basic testing. Basically, it clones an application repo. It builds the application, runs the Golang test, Linting, other tests, integration tests, unit tests, any other tests that we might have. Once the testing is successful, like Jarrett can come and review PR and she says, okay, looks good to me. Everything is good and we merge it. Now, after we merge this PR, the changes are available upstream in either main or master branch. That's how basically the continuous integration process works, where different development developers come together and implements our works on their own features. That was the continuous integration phase. Let's look at continuous delivery. After my whole team, Jarrett is done with her features and I'm done with whatever the set of features that we desire to be part of the release. We are done implementing them. What we want to do next is create a release. The build process again starts running, clones the repo and then starts running the validation. There could be multiple validation checks that needs to be running such as security, compliance, there could be even the documentation checks. There could be multiple of these checks running once those checks pass, then the application, we build application and then we publishes, so the build publishes that image into the image repository. We have created a release for example, and that completes the continuous delivery phase. Next is the continuous deployment. Now once we have that release image, it's certified or released and we want to basically deploy it in the staging cluster so that it's available to the other developers or early adopters, or even if you want to deploy it in production, so that it's available to the users. That is continuous deployment. We just looked at the basic principles of CIED. Now let's begin putting these principles into practice by understanding how the CI CD pipeline can be implemented. We are very fortunate to have so many different options, but the question is, do we have to choose one over the other, or is it possible to build our use cases by using multiple of these systems? The clear question is, are these systems interoperable? Can these systems operate in conjunction with each other? Let's narrow down our options for the next 30 minutes and experience building CI CD pipeline using these three systems, Tecton, Argos CD, and GitHub Actions. So, Jarrett is going to take this into the Tecton world, where she'll basically give us an idea of how Tecton has implemented, and then we'll look at the demonstration of Tecton and Argos CD and GitHub Actions. Jarrett? Thank you pretty for introducing the CI CD principles, and next we look at understanding Tecton. Tecton is a Kubernetes native open-source framework for creating continuous integration and continuous delivery systems. It provides Kubernetes-style custom resources for declaring CI CD-style pipelines. So, Tecton is built on five core building blocks. One, it's a step. Two, task. Three, pipeline. Four, trigger, and five, catalog. Let's explore each of these blocks. The first is a step which is equivalent to a container image in which it executes a tool on the specified input parameters and produces an output. Now, we can name the step to signify and identify what the step is doing. An example, deploy app, and specify the container image we want to pull. Define the environment variables, which is accessible to the container, such as API key. The script, which is invoked as well, has to be specified as if it was stored inside the container image. In this case, we have Cloud Logging, and which uses the parameters specified. The second is a task, which executes a pod on the Kubernetes cluster. A task is a sequence of steps running a sequence of containers. All the steps in a task have access to shared workspace, which is mounted on a pod as an implicit volume. So, a task is a custom resource with kind task, and has to have a name to be referenced so that it can be reused. Now, a case deployed to my awesome cloud, and the task specification includes a list of parameters, which have defaults and description of the parameters. So, in a case, API URL and cloud.com. Then we have steps, deploy app with the same image and the script specified in there. The third is a pipeline, which is a collection of tasks, running a set of pods. A pipeline is a graph, which provides flexibility to organize the workflow based on the user requirements. A pipeline combines tasks with parameters, results, and workspaces. And it also provides step and task level isolation if needed. So, a pipeline is a custom resource of kind pipeline, just like task, and we name it for future reference and reusing. The pipeline's specification also includes a list of parameters, like in our case, API URL, cloud region, et cetera, and a list of tasks, like clone, build, deploy. So, in our case here, we have git clone followed by build task, and then at the end, we deploy the build application. I can manually run my pipeline, but how do I automatically invoke the pipeline, such as when I push a code, commit, or create a pull request? For that, we have triggers. The trigger binding extracts information from the event payload, and the trigger template provides the blueprint for creating a pipeline run. Here, the event listener connects the trigger binding to the trigger templates. Let's look at the trigger binding itself. So, trigger binding is a resource that specifies the fields in the event payload from which you want to extract the data, as well as fields corresponding to your trigger template, which will be populated with extracted values. So, in our case here, we have a git repo URL as a value that's extracted from the event. Secondly, we have the trigger templates. The trigger template is a resource that specifies a blueprint for the resource, such as task run or pipeline run, that you want to instantiate or execute when an event listener detects an event. So, here, it exposes the parameters that you can use anywhere within your resource system plate. Lastly, the piece that connects this together is the event listener. The event listener is a Kubernetes object that listens for events, for a specified port on your Kubernetes cluster. It exposes an addressable sync that receives incoming event events, and specify one or more triggers. And this trigger, or each of these triggers allows you to specify the event bindings or trigger bindings to extract the field and the values from the payloads, and one or more trigger templates that receives these values and allows you to create resources such as task runs and pipeline runs with that data. So, here, we have binding and then the template from above is. Instead of everyone creating their own task and pipeline, is there any way to share usable resources across the organization? We have a Tecton catalog, which can be shared across the entire organization and with the community. And as you can see here, we have already a lot of resources that have been contributed by the community. Next, Priti will look into August CD and how it interoperates with Tecton. Thank you. Thanks, Cherub. So, we just looked at, we just looked into Tecton. Let's briefly look into Argo CD. So, Argo CD is a declarative GitOps continuous delivery tool for Kubernetes. The main purpose of Argo CD is to basically sync whatever is defined in a GitHub application or a GitHub repository and make sure that those sources exist in the cluster. So, we thought that, okay, why not? So, basically to define or implement CI CD pipeline using Tecton, we need to create so many resources, tasks, pipeline, event listener and triggers. So, we thought that why not actually treat the Tecton resources as code and basically create a GitHub Argo CD application for the Tecton resources so that those can be made available on the cluster. So, we looked at the CI CD in practice, kind of, you know, okay, what it is and kind of looked at those diagrams. What we have here is a very simplified use case of, you know, just build, test and apply. So, as a developer, if I want to commit some changes upstream and make it available to the development cluster so that, you know, Jerrick can access those changes. So, now what I have here is the build process, clones and application repo runs all the tests and then builds and publishes in that particular image with the changes and then deploys it on the development cluster. So, the changes are available right away. So, here, we are going to look at the, that simplified use case. We are going to look at the demo of how Argo CD and Tecton together. We have make it possible to kind of implement that use case. So, for the Argo CD part, so, first of all, we have GitHub repository. Here, we have a GitHub repository where all the Tecton resources are part of the repository and also the application is part of the repository. So, creating an application, Argo CD application to sync all the Tecton resources so that all these tasks and pipeline and also the trigger is basically available on the cluster. We created one more Argo CD application to kind of, for the service itself to kind of deploy that service in a cloud. So, this Argo CD application can be triggered by the Tecton pipeline so that it can sync the deployment, that whole idea. So, for making this whole use case possible, the, you know, this is how kind of we have laid out and the very first thing we need here is the secrets for, so Argo CD secrets and also, you know, I'm using Docker desktop, so Docker Hub service account to basically push the images. So, and next we want is basically, we create the application with the Tecton resources. The next is you, we create the Argo CD application, one more application to deploy. And the next is we need a webhook on the GitHub repository. So that whenever a new changes are committed and basically can send payload to the Tecton trigger. So these four things are the basic configuration steps here. Now the workflow, the web workflow is, we'll look at this workflow in the demonstration is when as a developer I'm making some changes to my application, sorry. And then that push is triggering. Basically there is a webhook is getting triggered and sending that payload to the Tecton trigger which is listening for that payload. Then that payload data is mapped to a particular basically that pipeline parameters. And you know, it's basically configured to run that pipeline. It triggers and creates that pipeline run. And the next is after cloning and building and publishing and then it triggers the sync and wait task in the pipeline which basically creates a, it syncs the deploy application which in turn will deploy the latest image or whatever image that we have specified from the image repository. So this is how the entire workflow looks like. Now let's look at the demonstration for this particular use case. So let's look at the demonstration for this particular use case. So let's look at the use case we just kind of went over. Let's look at that use case in action. So here like I mentioned, we have a configuration setup. We need to create those secrets for the tasks Argo CD and the service account or the publish task. So we created Argo C secrets. Now let's create the Docker Hub service account so that the image can be pushed to the Docker Hub. Next is let's create. So I'm using Argo C CLI. There is no application as such right now. I'm creating an application with the repository and the destination cluster and also the path. Now sync this application so that basically all the pipeline and trigger binding everything is getting created on the cluster. Next is again, we create deploy app on the Argo CD. And here we'll see that we have pipeline which was just created and then the event listener. So event listener spins off a pod in that particular namespace. So we have that service running in the namespace, demo namespace. And let's forward so that we can access it. And next is we need to create a webhook so that the payload can be sent to the cluster and we're using. So here we create a new webhook on the GitHub. We basically specify the URL and then JSON. And then just the push event is fine for now. So it created a webhook.  Now let's go into the application. This is a very simple application. We are just basically changing the version for now making it as one, zero, one. So this is the diff, looks good. Now we can push. So we are pushing the changes so that it's available in the repo and this push trigger around. Let's look at the pipeline. So here look, there was a payload that got to the board and we should see a pipeline run. So we have a new pipeline run here. It has finished cloning the entire source and it's building an application. Whatever we have in our Docker file, it's building that image. And next one, so it's pushing that image to a call Docker hub and one sits. So it's finished pushing. Now it's basically syncing, running the sync on the deployment application. So this will deploy that particular image onto the service, onto the cluster. So this is the port that we can access and let's look at that application. So yay, we have the application deployed. Now let's change this application. So once again, we go and update our application. Let's go and update our file where we say, okay, let's do the next version and our double some application and we change our deployment file as well to maintain the same version. So it matches with the application source and the depth looks fine. Now let's commit upgrading the application to our double awesome application and reset push. Here, we should see one more run and again, same thing. It's basically building an image with the latest changes and it pushes that image to the repository. So now we have the latest image and it is now triggering the sync on our OCD application. And that is all done. So we should now be able to work in accessible application on the same port and it has double awesome application. So the changes that we just made are now accessible. So this is a very simple use case and demonstration of that use case where the changes that are being made are available and basically it's using Argo CD and Tecton. So I'll hand off over to Jarekna for the next Tecton and GitHub Actions. Thanks, Jarek. RoboCut plays with Octocut. We're going to look at a use case to plug and play with GitHub Actions and Tecton. In this case, GitHub Actions is used for triggering while Tecton pipelines for execution. So GitHub Actions is an API for cost and effect on GitHub. Why GitHub Actions? Well, GitHub Actions makes it easy to build, test, and deploy code right from GitHub. So why not write the execution logic in vendor agnostic Tecton pipelines and trigger them using GitHub Actions? The use case we look at involves a couple of steps. First, a developer pushes code to the application repository. Then this change triggers a GitHub workflow or the specification in GitHub Actions for an execution workflow that needs to happen, which thereafter triggers a Tecton pipeline run.  The first one is cloning, second one is linking, third testing, building, and then running that application with the change or the commit that the developer just made. And some of this pipeline, most of the first four tasks come from the Tecton Hub or the Tecton Catalog, which is shared by the community. Well, the second part, the run itself comes from the Tecton folder within that repository itself. So you can fetch your tasks or resources from different sources depending on your requirements or your infrastructure. So next, we look at this use case and see how it works together. We'll start by going to the GitHub Actions, our GitHub Marketplace and look up Tecton. The first thing we find is installed Tecton GitHub Action. You can see here, if you set specify that these GitHub Actions configures TKN CLI, the Tecton CLI in your environment for managing Tecton resources. So you can see here that the process for usage is that you just specify that you use gerov slash tkn, specify the version as needed. But this is after installing kind or whichever other format of when it is cluster you want to use and then installing Tecton pipelines in your environment. Let's go to the project itself. You can see those same steps and guidelines for how to use it as specified with the repo. And the Action YAML which is the main part of this GitHub Action takes a version that you can specify for which CLI you want to use. So we'll go to the demo repo where we show how this actually is used to test and build a Hello World Go application. The application is simply saying Hello World in this case we can modify what or who we're greeting. And we have a simple test there that verifies that function works as expected. Then we have a Tecton repo with some Tecton resources or Tecton folder and then we have the work clothes folder which specify the GitHub Action itself will be triggered upon when events happen. So let's pull this by locally and see or make a change and see how this impacts things. But first we'll verify the things are how we expect or how we saw it in the in the repository on GitHub the same function Hello and then you can see here we have the same test Test Hello confirming that Hello World is what you would get and we can locally trigger this test and see that it's passing and then you can see that the workflow is as expected it's acting on push pull request and work through dispatch which is a manual triggering and the series of steps here where it's setting up kind we are applying Tecton pipelines the environment we are installing TKN and then we're using TKN to install Tecton tasks from the hub let's see Git clone GoLangTest GoLangLint GoLangBuild then there's one for applying a local task so for Git clone itself can see that it's there in the hub as expected so this is what we are pulling into the environment installing it second one is GoLangTest right there and we should be able to find that in the hub as well yeah we have GoLangTest there with all the parameters and what species is it expecting and then the LinkedIn GoLang CI links the same case expecting to have it in Tecton hub with specifications of all the parameters it expects or can take and the workspace containing the source to build and lastly from the hub we're installing GoLangBuild similarly we can see that this is a task for building Go projects and we can see the parameters and what species it's expecting lastly we have GoLangGran which is not available in the catalog of the hub but we've specified it locally in our project and you can see here the labels, the description, the parameters which expect a package, context, version etc and then the workspace itself which has the source code that will be run and then the script which actually contains the logic that we want for this function to run the application all of these things come together in the workflow file then finally we're going to start a pipeline Tecton pipeline YAML which is specified here as well that puts or connects all of those tasks together let's look at how that works when we open the pipeline.yaml file we'll see that we have the work area where the workspace where the code will be committed to and then expecting the results and then we have the clone tasks linking, testing building and then running all of them organized sequentially and they're all with tasks referencing the respective tasks from the hub or the catalog or GoLangGran which is specified in the report itself and then lastly we have the workspace which comes from our volume claim templates so here assistant volume claim here that's specified within the Tecton folder we'll start that pipeline and then we'll list it and then describe it and validate that it does all those steps or tasks that we're expecting to so we'll list triggering of this workflow using a git commit or push happening we're going to modify hello world and say hello cdcon or we can say hello anything really but let's say cdcon so we're going to validate that that's the only change you've made then we're going to commit add the change and then commit it hello cdcon as the message then we'll push this change then we can see that that triggered an action, we get an action and we're starting the workflow run and look at the code you can see the commits you can see the commits share for that change that we made see go back to the action or the workflow run you can see we checked out the code, we set up kind then we're installing the titan pipeline we install tpn installing all the tasks from the catalog and then the git clone has been installed there and it has the same when you describe it to the same specification that we have from the hub same thing with the linting task, the building task and then the running task you can see here that tpn was installed in version 18 for linux which is auto handled by the git tpn git itself so we see that the pipeline is running and we're showing the logs the clone task has executed, you can see share is exactly what we saw in the commit within the repo cloning, the clone is so scored we're linting a then you can see the tests passed with the coverage detail there as well we built it and then we ran and you can see hello cdcone the application has been updated the pipeline running successful then when we describe it and get the further detail we can see all the tasks that executed, how long we took and their status and you can see that the result of the commit share has been propagated all the way to the pipeline running so this demonstration simply shows you how tpn can be used for writing the execution logic while git abuctions is for triggering and how these two interoperate should solve for your use species thank you thank you everyone and if you have any questions let us know


Everybody forced here we've been 2023 tops finest flashbacks baseball hobby six bucks case number six pick your team style Got Brad R. Marlins, Brendan S. Cubs and White Sox Brian H Jays Cameron with the Rangers candler with the Braves Charles a twins Cory B Royals Darrell M. Guardians Don B. Diamondbacks and Mets Eric R. Yankees Mariners Felix and Astros ENT Pirates Padres Giants James J. Cardinals John W. Tigers Joshua R. Angels and Orioles Kendall M. A's Dodgers Musa Masatomo with Washington Matthew S. Phillies Nate S. Rocky Scott T. Ray's Seth R Reds Suganori Red Sox and Tim with the Brewers 30 teams. Let's get it going everybody teams on sale and Bowman Chrome choice next all on sale all on sale Lane's here Woodson He's a packer. I Agree, but hey, you got his ring that he went back He was a he did what he had to do Took care of business. Where does he rank among all-time DB's? Does After D on it gets like oh boy, then you got like corners and safeties. Yeah Secondary or do you like Specifies I guess you do Either way D on is the answer for both Well, I guess in like corner, it's it's closer because you got guys like Rivas Taylor Dawkins Sanders who was the No, lost it lost the name. There's her first refractor going astros you're on Alvarez the common refractor there Ronnie lot, that's a good answer Gunner Henderson. I've recap all refractors and golds and anything better gunner base There's a gold. It's Nolan Gorman Cardinals rookie on the rare Two golds a box one of one refractor per box. I I'm pretty sure showcase show he could play outfield, right? If they really wanted them to I feel like yeah Because I know I see I saw him in like warm-ups times. He's like, you know getting fly balls. Yeah, and he's fast enough He had silver devils for the Red Sox. I Just don't think obviously they ever wanted him doing that because that guy gets injured and oh boy That's it for your whole franchise Essentially, yes, that is it for your old friend. He could he could probably play corner corner outfield.  He'll do it But yeah, silver you've got a tease for the Padres Plus I like a Tisto He's running out dying in the wall. Yeah, he's one of the guys that health was a concern But hey now he's a platinum Glover In the outfield Yeah, I feel like Shohei Otani is a kind of guy. He could probably play any position at least decently I feel like he can go and probably play another sport decently too Probably Silver torque tigers. Yeah, I think he generates more than he would cost to That is a gold tie cob tigers franchise or find us franchises Go on the rare for the tigers silver of springer for the jays out of the rutchman, I mean best DB ever has got to be uh Brandon Merriweather Not the best first sharp pick the Patriots have ever had not the worst though Silver Eloy for the white socks Man, they've had some bad ones.  He could play pretty well I would have to assume I feel like first is probably the safest position from the play Yeah, because you're really not doing throwing super hard most of the time and also he probably throwing You're not diving all over the place. You're literally you don't have people sliding into the base near you and You're probably like you're literally staying in a zone that's bearing you like 50 feet less than 50 feet Or you might have to jump and grab a ball here and there Silver rookie. Oh hot bay for the angels Come on. Find us. Let's go. Let's hit a monster this morning. I want to see a super out of this That would be that would be a decent idea. It would it would make sense to do it like that You got silver machado for the Padres.  There we go One of 10 refractor protector gold That's pretty wild That's the best thing we've hit out of this so far. I would say yeah Hey, find this flashback is delivering the heat Got the most expensive team and it was rewarded. Thank you joshua Refractor here nice masatake Yoshida on the common refractor red socks Got silver rookie liberator for the cardinals I think so too, dany. I think so too Gold now fan Friday's franchise is ken griffy jr. For seattle the rare silver rookie morale for the cubs Dude, I would love a rule like that I would be freaking awesome. Yeah, probably is it gone It would attract people from from buying a franchise is the only issue, but oh man, and oh god, that'd be so awesome Yeah, no owners would do that. It will never pass but that would be sick God nice gold gunner here Find his gamers for the orioles good box for the orioles good box overall too. You had the refractor of Yoshida as well It's one great thing about this product. It's pretty much all really good players in the checklist silver matt chatman So the hits gonna feel like far and few in between there's not a lot of number cards only one refractor a box one auto a case, but The hits can be huge Gunner base Is there? Yeah, what does that mean? Well, what does that mean because silver Reese Hoskins Phillies I think I'll be content. What's it gonna be spencer jones and like Roger garyas with some more like I don't know like The thing is they won't both end me because it's the most to develop out of our system No, the crappy thing is you know, you can't get rid of stan unless you take the whole contract Because it's the Padres. They can't take stance contract Nice gold rookie auto. It's a 50 josh gum texas Big hit texas Somebody call for a josh string super. Well, that's Cameron. There you go, buddy.  This is what he gets Unbelievable unbelievable God gold rookie paraza for the Yankees Slashbacks silver of freemen Yeah, this is this is a neat product How much will soto make i'm not sure People talk about his crazy return on that that it was was it close to it was over 400 million from the nationals I just think he really didn't want to be a national to be honest. It's like all the big stars Leave washington like they don't want to be there Turner got silver bogarts for the Padres sherser Turner sherser harbor and they were traded for Rikki refractor hunter brown for the astros nice one stroze. They were one of the last teams sitting there Roger base Maybe he thought he could get more which would be crazy, but maybe he didn't want to be a national Maybe I don't know man silver jashezzan for the marlins yeah, I A lot of times i'm like, oh they turned down this a lot of times i'm like Okay, but like what what really happened like what did the owner tell their buddy in the media to say? Like do we ever get the straight truth? You know what I mean, especially from especially from ownerships of franchises I just I said gold or tees for the red sox Yeah, because I know speaking from red sox fans perspective the red sox are the kings of like Well, we tried to keep them. We tried to keep johnny daemon. We offered 80 million dollars less But we tried to keep him. He wanted to leave silver jram They're the kings of that. I'm gonna say you guys every time man A lot of franchises do it We're just the franchise huge thing in baseball too. It is a huge thing in baseball. That's why I hate cashmen for it Because he he's wrote he almost ruined what jeter leaving the inkeys on his literally final contract Gonna we got a silver abrams for the nationals Heather's true So also to show you man, but also to say that is japanese tradition They don't like any of that stuff when dealing with business. They don't like anything aired out And they do take that very highly. Yeah, I'm I appreciate jacobie ellsberg for uh Giving us his best and then immediately doing nothing as soon as thank yous gave a lot of money. Thank you Thank you mvp contender in 2013 won the world series and he's like, you know what? Thank you very much, boston. I will help you out even further I will continue to help you By sitting on the yanky payroll and do nothing. Yeah, dude.  You got us It was injuries though.  So jeez. Oh, we wish We wish and then have a terrible attitude about it, too Like I don't know you guys anything. What are you talking about?   I was looking at bruce grad kowsky autos on ebay Couldn't sleep or I don't know why i'm looking at values of bruce grad kowsky But you can get rookie autos for like four or five bucks. That's not bad. Well, that's what they listed for you probably like two or three bucks dollar He also signed a lot when he was a rookie apparently Was every yeah He was like he was fine. He was a mid-round quarterback though. He wasn't like drafted highly He was serviceable for the bucks for a couple years when he started But like replacement level so he was replaced Who was the quarterback that? Took over for him probably the stopgap guy was like chris sims or something rookie silver or chris sims I think before grad kowsky. No idea dude silver rookie langley or zaze It is a twilight zone of ebay dude vaughn. I looked up a marise agar and ben gordon dual auto I missed out on it. I should it was it ended up bidding like five bucks I'm like, I should have I should have got the ben gordon marise agar dual auto for five bucks I missed out Yeah, it's it's been weird for me lately. Did you just find so many interesting pieces? Yeah, especially since I Wasn't into this hobby until like 2020 knew nothing about it. So looking back. I'm like, oh wow. Look at good lord What is that brand? Oh, look at that product and you're like, oh my god, remember that name It's true. That sounds like a great week Cameron adley ryan rare even that would have been solved for the rangers price Uh silver harper for the Phillies what you got josh young auto. Hey got something better As I marked every team down in museum Some of them again There's a johnny bench gold for the reds the golds are rares Silver's uncommons and coppers are common silver of seager this time for texas You guys we are behind let's get some breaks filling up here Bowman chrome choice coming up right after this. What up b dug? What's happening all teams marked down in bowman chrome choice as well rare here is mookie betz dodgers minus phenoms Uh bowman draft releases december 12th I'll tell you one thing b dug. You'll know as bowman draft release day when that's all you see on lanesportscards.com pretty much silver mount castle for the orioles Yeah, December 12th releases on a tuesday And a refractor rookie of alvarez for the mets minus phenoms They're releases on 1212 because uh, mr. Tom Brady's in the product I feel like fanatics or something. I think fanatics will do some of the release at it, too I think they're gonna go to like a store or something I don't know. I don't know if they're gonna like a fanatics live type thing where they do some big release promo I have no idea That would be something though because if they're releasing it on 1212 and brady's in it I feel like they're gonna do something because he's been collabing with them. He's doing stuff with them a lot, obviously God gold intimidators is gonna be the grom for the rangers No, not one k won't be well because they don't have crews in it Yeah, who's and brady they're very smart to break that up though because that would have been chaos That would have been chaos So I would assume cruise is 24 bowman Which is is the right move is the right move because you still have langford. You still have schemes. You still have uh I'm missing names now, dude. I can't think silver is kb for the rockies 1k isn't crazy. I'd be dug. I guarantee there's some breakers that would charge that though Oh 100% That thought about it I don't know where we're gonna happen yet. They're gonna be one of I mean obviously one of the top three Priciest teams I would I would have to assume we end up there, but that's probably gonna be like the number one team that's priced Maybe maybe silver lube on white socks What'd you get sin? Some breakers wouldn't sell a spot taker for themselves. Well, sir a lot of times you can price it out like There's other ways to break where you can like sell the 29 teams at a little bit higher and then random off the big tea Like it's crazy like that silver scherzer. Is that a refractor? That is a refractor scherzer for the Mets The timbaters. I don't know. It's not past me or like I know you can do You got silver boba chef for the jays you can do like you get The nationals in this box Yeah, like you can do it by that box. Yeah Where they re-random the teams box by box craziness Adley. I'm just glad they they've just put them up There wasn't nobody Oh, no, sir. Got gold of clement day for the pirates. Yeah, I saw our first draft of like Initial pricing and then we'll have to Later they're gonna look over it again today And we're just gonna look at the world. Look at it. He's gonna look at it again I'm gonna be looking at it back and forth silver akunya. There you go, Atlanta. Lee uncommon Omen chrome choice everybody Do team drafts? Yeah, that gets That just takes forever or to go Get a little behind here, but uh, that is okay. We started at 10 today. We go a bit of time Let's get it filled up Just got the reds brewers Mets and pirates left in number 43 Pretty affordable. Yeah, nothing too expensive remaining Good value teams Like yeah, that's for sure. Good value teams Hoops, dude sampled a wimby to 75 out of hoops on monday monster card silver hunter green huge card Did you see it like si rookie going for like 15 grand if you can get it to gem They'll go for 15 grand Anybody gem in si rookie? Is that even possible? I've seen him before but geez man You got a carol rookie He just submitted a vest of 100 grand kowsky So a lot of them right jeff. I was surprised. I was like, oh, it just keeps going. I was expecting to see like five or six It just kept going going Dude, am I are we about to spike the brusch grad kowsky market? Am I an influencer? Am I an influencer? Do not invest in brusch grad kowsky, but you can get him for cheap and just have a brusch grad kowsky auto Why not slipper bobby wit? If in the museum, it's awesome museum has been good this year, man There's some sneaky good stuff in there a lot of low number in every case I've pulled like every red sox one-of-one patch. It seems like The dammer big poppy. I pulled the devils logo man at a museum. It's honestly like torture at this point Seeing all these amazing red sox cards in my hands and I dept that there's somebody else's like not yours It is oh man. It is tough. It is tough It's not actually tough. It's first world tough, but oh first world problems. It is it is It's how it be sometimes oh and Star Wars finest guys. We got we got a ways to go today.  It's noon. It's noon. It's wednesday the weekend's almost here That is random mini box style finest you get an auto per spot a 7999 plus parallels sp insert chases It's fun checklist this year. You've got an aronado silver for the cardinals He's he feels repetitive. I mean breaking it has not been repetitive But you said that about the year as well You said you said that about the year also I think lane's looking at bruce grad kowsky yacht is right now time is flying by Got silver joey vato for the reds Dude, if we all went and bought one bruce grad kowsky auto per person We could really like we could cause a lot of confusion We could we could we could we could be disruptors on the bruce grad kowsky market ricky refractor garret michael for the brewers You bought six grad kowsky autos dang, dude I spoke out I spoke out the plan and now it's backfire on me. I can't get nothing Next thing, you know, you're not even going to be able to find them anymore Either way, I've referred to your my car legend is ours So we're talking for the astros So that's how I am with with with my wife like I have things in our mind and then she has things that are hers and then we have things that are ours And in cards like like all the pokemon and star wars is pretty much ours But like the sports which she couldn't care less about and I open and I rip like those are mine. Those are mine Although if I sell the cards it becomes our money If I get cash Our Got a silver garret coal for the yankees Although we're getting a new car soon, so I have to go start lowering some price on my cards and then sitting on ebay for a little bit Or sell the lane for some almanac, maybe God gold buster posie for the giants I think that was the exact last team taken very nice for 14 bucks right there There's gonna be a grad kowsky almanac coming up. I bet It's not a left field We need to make lane we need to make a NBA role-player almanac and sam can break it silver is trade turner for the fillies Same bond would probably buy all the spots you could have like Ben gordon marie's egg or do a lot of Oh man, that'd be a cheap buy-in too Israel pinata almanac.  You've got gold wander For tampa be pretty cool. Be pretty cool. Really marcus smart autos and stuff A four dollar almanac No, I mean you could get those players but like big cards of them and you could make it like Like decent like we're not just gonna put like rookie refractor to you know base rookie refractors or whatever von grissom on the silver rookie for the braves And the thing is though, you could probably like Get like better patches everything because the sixth man. You could get like lowland. Yeah. Yeah, something like that But yeah guys lanes make an almanac right now He's building a personal's almanac A Personal's almanac price point in the 200 dollar ballpark Uh, when it will happen. I don't know. I think next week sometimes. I think Maybe lane can chime in on that. Maybe he'll be silent and we'll we'll just have to guess Coming in december, I think I can safely say that I can safely say that Coming this december personal's almanac All-time worst bowman busts almanac Who is the braves guy from uh, the acunia year that everyone was buying up? Oh, uh Thing uh Kevin my tan my tan. Yeah, my tan That's the guy. Oh god Uh, at least on comments i'ma skip the on comments guys. We're gonna go golds and refractors and then the the big stuff here Um golds of wander posy clemente the grom mookie bench or teas Parasa gunner griffy cob Gorman refractors of michael scherzer hunter brown That's masatake yoshida and yordan alvarez the other refractor that we didn't see there was a Refractor protector one of ten rare adley ruchman. That is a big card big congrats baltimore That's huge and rookie auto finest phenoms the 50 rangers josh young Really good case. Thanks again everybody moving on now to bummer chrome choice


Testink, testink, toukaj, slyšíš mi? Jo, jo, testink. Ready? Jo. Now days. Super, dík. Budu na YouTube, si se koukáv. Ale je tam jen zvuk a prezentace. Na některých je toho víc, ale tady jenem. Přijdeš náhrad dělat toho nabíte, já jsem. Prostě připravo do meho kompa. To nědostou v zatebě. Welcome everyone. Preži o tenšin. Hier are some free posters. So if you want, you can grab one. Please, when you come during the presentation, please close the door as quietly as possible. When you want elevate decisions, you can visit this link. a můžeme příjti, když se zvukáváme konferenc a vytvoříte blog post. A tady, můžeme příjti, můžeme příjti mým prezentám Miro Slavgreplu s SE Linux v návnice. V návnice říkajte. Můžete mít? Tak, můžete mít. Vypůjte v návnice. Je to větší, že jste zvukat, že je to zvukat. Je to zvukat, že je se zvukat.  A do laty jsme představili vyjelé následné úvědné úplny na celý SNUX-touk z upstreamu v Fedora 23. a vytvoříme na první výstřet. Na srdském výstřetu s tím, který se počeká výstřet, a na rádném. A náví se výstřete, co se vyskávat, když jde do výstřetů, které se vyskávat, co si linnukové dělává? A příklad se závodovat, závodovat, co se závodovat, co jsme dělává, co si dělává. A závodovat a dělávat. Jsme dělává? A závodovat. The first big improvements. We introduced big performance gains. Do you remember, if you recently, if you previously tried to install the policy, or if you tried to disable or enable a policy for a service, for example for the docker, it took your time, it took my time, you were waiting and waiting and waiting. Is there Lukáš? Lukáš, do you remember? Yeah, I do, yeah, me too, yeah. So you had approximately 15 seconds for these guys, for these words. And I don't, to be honest, I don't know how to spell it. I am not Bostonian. I like this guy who is traveling for Super Bowl right now. And also I really like this picture, but sorry man, sorry then, but I like this picture much more. You can see, if you previously installed the policy, it took 20 seconds. If the currently, if right now, you try to install the policy, it takes five, six seconds. And the same. I am then Vosch, and I wanted previously try to disable docker policy. So it took 20 seconds. But currently, right now, it takes five seconds. And the same if you wanted to back to enable the policy. Do you like it? I like it, I really, it's really huge. So we introduced 75% speed up of tools that perform a Selinux policy management. It's huge, really huge. Is it true? Thanks, thanks, thanks, come on. Thanks. Of course. To be all. Yeah, yeah. Thank you. And thank you for, it's the last day. So thank you for your questions. If you can trust me. Thank you, really thanks. No, it's a roll height. So, sandbox in system. Okay, so counting counting. Hopefully you can trust me. It's, it's here. Do you trust me? Okay, thanks. Okay, so the second, the second big improvement. We introduce a new way. A new really easy way how to shift your own policy, your own version policy for your service, for your product, and so on. So, let's go again with Docker. I am Dan Walsh. I deployed the Docker policy. I installed the policy and right now what happened? I failed. I failed. There was the following error. There was a duplicate error. There was a conflict. Why? Do you know? Okay, these guys know. Because the Docker policy was also shipped by the distribution policy. But with the new Sinox tooling, no more errors. No more fails. You don't care about the distribution. You care about the distribution policy. And we make Dan Walsh happy. So, to be happy. So, there is an example. If the current, if the currently install the Docker, you will see something like this. You can see there is a Docker policy shipped by the distribution policy. So it's a Docker distribution policy. It has 100 priority. And in the same time, you will see, you can see Docker policy, my own Docker policy, which has 400 priority. And surprisingly, maybe not, higher priority wins. So, my own Docker policy is used in the distribution. And overrides the distribution policy. Yes? It can be different. Right now, 100 priority is a default priority for distribution modules. You can change it. You can have 200 priority. It can be changed. So, and we, and Dan, is, we are happy with that solution. So, we have a ability to assign priorities to modules. So, the first big improvement. With the new SNUX tooling, we introduce new common intermediate language called SEAL. That is, I have a story for this topic. Sometimes ago, we needed to create a local policy for SNUX toolbox tool to make this tool working, because there were some kernel changes, let's say, no, no, no, the issues, no, the bugs, but changes. So, I created mySENBOX.t file. Here you can see the example. It's written in M4 macro language. And right now, the fun started. I needed, I needed to compile this file to create mySENBOX.pp file. It's a, it's a compiled policy module. We call it as a high-level language, high-level language, high-level language, which is not readable. There is no easy way, because it's compiled. There is no easy way how to read it. And after that, we needed to recompile this compiled module to create binary policy. And this binary policy was loaded to the kernel. So kernel could enforce this policy. So it's really complicated. And right now, right now, you know why it took 20 seconds. Yeah, it's too many steps. Do you like it? Me too, yeah. Even more, I don't know how to write these rules. So there is a picture for these steps. You can see we have source files. We compile them to .pp through intermediate files. And after that, this compiled policy module we recompile to binary policy. And this binary policy is loaded to the kernel. So I don't like it. With SEAL, it's much more easier. It's like a dream for me. So I can just write. I create my sandbox.seal file. I can just write one line, one line, no compiling. And just I load it using SEAL module tool. So it's really awesome. It's amazing for me, probably for you. And more. This is intermediate language. And this language is human readable for me, probably for you. It will be better. But it's much more better than M4 language in the previous example. So we have readable intermediate policy language. And we have ability, we have a potential for a new high-level language. For a new high-level language, which is readable against .pp, which is not readable. I have an example for you. There is a high-level language called LOL policy from Joshua Brindle. And there is an example of the policy. I am a log watch, and I want to read web server logs. It's human readable. Do you understand it? It's much more better. There is a big opportunity for a new high-level language. I like it. It's like a dream. We can write a new high-level language, for example, in JavaScript or something like that. So it's here. It's important. It's here. It's Fedora 23. So feel free to test it. Feel free to run a C module, dash B and test it. So the question is who is behind these changes at the Red Hat. So me, currently working on a stimulate and policy stuff like that, I will mention some guys, please, guys, put your hands up if you are here. Paul, working on Kernel, this guy. Petr, working on mainly user space. Here he is. Yeah, thank you. I would say a new policy guy, my replacement. Lukáš is, ah, nice. All settings team is here. Weed is our intern. We currently is working on policy analyze tool. I will talk about it later in this presentation. Miloš is our QE guy at the Red Hat. Miloš, thank you for your talk about SNU's troubleshooting. It was really great. OK, so it was SNU's team at the Red Hat. Nice faces, right? It's binding, yeah. Thank you. OK, so right now you will get, hopefully, your answers. What SNU's can do for me? What SNU's can do for you? SNU protects your system for consequences of exploited applications, of exploited your favorite applications. Give me some examples. What is your favorite apps? SSD system, the stuff like that. And maybe, you know, there was a security issue in SNU. This one, when under certain conditions, you were able to access any file on your system. So for example, you were able to access Etsy shadow file. And what is the question? The question is, was your, was my system protected? This system wasn't protected. Definitely wasn't. You can see, we were able to access Etsy shadow file. So we were able to see our secrets as a consequence of the pseudo exploit. Fortunately, my system, and probably also your systems, my system was protected before that attack. And why? Because I have SC Linux turned on. And I have SC Linux in enforcing mode. It's correct? It's true? Let's check. Ah, it's true. You can see. In enforcing mode. So as a result, pseudo process was successfully isolated by SC Linux. So what next? SC Linux protects your virtual machines. Again, there was a security issue called Venom. Do you know about it? You mentioned it. Joshua also mentioned it yesterday. Josh mentioned it yesterday. And the question, again, the same questions, is my system protected? Are my virtual machines protected before that exploit? With SC Linux, yes. If you have SC Linux with libvert, you get your virtual machines isolated by SC Linux using categories. So each virtual machine has its own category, its own unique category. So if there is an exploit in a virtual machine, your hosting system is protected because your virtual machine is isolated by SC Linux. And even more, your other virtual machines are also protected because they are also isolated. So it's called a sweat. OK. What next? SC Linux keeps your container in its own space. Containers are everywhere. Maybe you know containers don't contain. Correct. Thank you. So what SC Linux does with containers? No magic. It's the same as we have with a sweat. We can have thousands of containers, thousands and thousands of containers. And each container is isolated in the same way as a sweat. So each container has its own unique category. That's the whole story. It's the same as we have for virtual machines. Still the same. Yeah. Thank you. No. Yeah. Easy answer. I'm talking about isolation outside containers. Yeah. So yeah. It's a future now. No. No. Look at this guy. No. Yeah. We were talking about that on the party and even a lot of beers. No. No. There is no chance inside containers. So OK. So I've been talking about a thousand containers. So SC Linux brings advanced security for multi-tenant environments. What is specific for these environments? We can have thousands and thousands processes. And we want to isolate them from each other to prevent consequences of possible exploits. So give me some example of multi-tenant environments. I will. OK. OpenShift. So in OpenShift, in older version of OpenShift, we have gears isolated in the same way as I described above for virtual machines for containers. In OpenShift version 3 containers are in the game. So right now, you know, we have isolated containers in OpenShift 3. OK. So stand up. Please, please, come on, please. Please, come on, please. It's morning, almost lunch. OK. Thank you. Thank you. And let's start. Security. Security. Vynce. Vynce. Vynce. Vynce. SC Linux. Vynce. Thank you. So what we are going, what is coming this year, what we are going to do for you this year. Excuse me. The biggest goal is we call it a new SC Linux on ATOMIC, SEATOMIC. What we would like to achieve? What we would like to address with SEATOMIC? We would like to have a support for factory reset. In the new SC Linux tooling, we have distribution defaults. It means we have defaults policy modules in warlike SC Linux directory. Also together with your customizations. What does it mean if we talk about factory reset? The idea is that a slash war is empty if there is a factory reset. So our customizations are gone. It's OK. But we also have distribution defaults in the directory. So it means our distribution defaults will and will lose. And we lose them currently. The idea is to split these distribution defaults and these customizations. So we can leave your customizations in warlike SC Linux and move distribution defaults to read only directory. So for example, user like SC Linux. And with that, the idea of factory reset on ATOMIC GOATS will work. We were talking about it with Colin. So some additional fixes will be needed on ATOMIC, but this idea. So what is the next goal? What is the second goal with SC ATOMIC? We would like to provide a policy reflecting ATOMIC host requirements. So from our point of view, from SC Linux point of view, ATOMIC hosts are about containers and are about services around containers. There is no need, really no need to have such a huge policy, which we currently have. It's targeted policy. I called it workstation policy. Some numbers. In this policy, we have thousands types for your services. We have over 100 rules for your services. So it's so huge. It's so complicated and really no need to have this policy on ATOMIC GOATS. So we would like to bring a new concept, a policy written from the scratch, totally from the scratch. New ideas. I called it lightweight policy. We would bring a big reduction of types from thousands to tens. We can start with five, ten process types. Ten process types against thousands. Do you see? It's really huge. It's the same for rules. We will bring a reduction of these rules from tens thousands to thousands, I would say, maybe hundreds, only two hundreds. Because containers. So we would also bring simplified and understandable policy for you. Really easy policy. And as a consequence of these changes, we would introduce significant speed-up, additional significant speed-up of tools that perform a Syllinux policy management. I think we could talk about almost 100% speed-up of these tools. So it would be really quick. It would be really fast. And it's coming. OK, the next goal, our next goal for reserve is Syllinux troubleshooting. OK, have you ever seen a picture like this?  Yeah, yeah, thank you. So sometimes if you are doing a Syllinux troubleshooting, SE Alert gives you multiple choices. And the question is how do you know what is the best solution? How do you know what you are supposed to do? Is the correct question? I think so. It is. So we would like to bring improvements and provide you easy, really easy solution. Easy, clever solution for you, for your policy issues. And even more, we would like to integrate this Syllinux troubleshooting with cockpit. Steph Walters, we are talking about it yesterday, so it's happening right now. It's coming really, really soon. OK, and the last goal in this presentation is Syllinux policy analysis tool. Excuse me, I mentioned it at the beginning. What is the story about this tool as a user or as a developer? I would like to have a human readable big picture of the policy on my system. I would like to see what, for example, Firefox plugins can do on my system from the policy perspective. So we would like to introduce a picture like this. I apologize, it's a preview of preview of preview. So we could see flows. We could see if Firefox plugins can access SC shadow file, for example. So we could see if we add some changes, if there is a change in the flow. If there is a security issue introduced by us or introduced by applications. So we will get a tool for Syllinux policy integrity testing. Do you like it? It's really nice. This guy is working on it, so keep going, good work. OK, so summary. Right now, you know, we reach 75% speed up of tools that performs Syllinux policy management. You know, we have an easy way how to shift on version of policy for your product, for your service. The next one. We know there is a new intermediate policy language called Syll. We know Syllinux helps mitigate consequences of exploits. We know new Syllinux for Atomic hosts, known as SE Atomic, is coming soon. Together with new troubleshooting and together with a new Syllinux analysis tool for Vizuli. Could you help me? Vizuli. Ah, thank you. OK, so it was summary. It's coming. So thank you and please contact me with questions and let's ask if you have questions. So the question is how we will provide additional security with SE Atomic, about which I was talking, for example, for Sulu. But the key point is on containers, on Atomic hosts, we care about containers. Of course, there will be probably a set of base services, as the system with its own policy. So there will be a policy for core services. OK, thank you. OK, next one. So if I understand correctly, you are asking about how a Syllinux will help with containers on the share volume. Just thinking, what was the question? How Syllinux will help with containers on shared volumes? So is there an open issue? Of course, if it is a shared volume, this volume is readable by another container, because it's a shared volume. So if there is a rule for it, we will close it. Yeah, but it's correct. So if the label is the same, which is for the shared volume, I guess. So if there is a rule allowing it, it will allow it. So let's talk about it after that. Thank you. Another question. Is there a remit? Paul is saying. Thanks Paul. Another question? Yeah, we will see. Yeah, it's a huge change. But good questions. But it's a no. There is a gift for you. OK, so we are out of time. Feel free to catch me if you have additional questions or other Syllinux guys. Thank you. Já mám nějaký spelling issue. A ti to uložím. Ale je možný topad nějak dodatěšně posládním komu. Já to uložím ti ušitě. A ti máš tedy. Jo, jo, jesný, jesný. Summary page? Yeah, which you have on the slide. Take a shot of it or can you publish it? It will be published. Yeah. It will be available. OK? Yeah, let's see.


Okay, we're back. We're live and see 11 o'clock. I'm J5. This is think tech Hawaii and we're talking about community matters. We're talking about coronavirus. What's next? So let's talk with Winston Welch and Stephanie Dalton about what is happening with the disease. You guys, you did a little research. So Winston, we have new symptoms that have just popped up. What are they? Well, the CDC has advised three new symptoms. It makes it look more like the common cold more than anything else. So in addition to the ones that we've already heard about, we've got some other ones here and they are, let's see, so you've got shortness of breath, fever, cough. We already heard about that. Chills, shaking, loss of taste, muscle pain, headache, and sore throat. So I think those are the last ones are what they have added on there, which was sore throat. What did they say? Six, they added six more. I'm sorry, I just lost it here. Oh, congestion, running nose, nausea, diarrhea, joined the federal agencies list that already included fever or chills, cough, shortness of breath, or difficulty breathing, fatigue, muscle and body aches, headache, new loss or taste of smell, and sore throat. So it sounds like everything that everybody would ever go to the emergency room for. But we've heard all of those before. Every one of the ones we've just had heard have been discussed before. I hadn't heard running nose or congestion. So that one was a new one for me. And out of all of these, the loss of taste or smell is the only really distinguishing one from any other diseases might present in a emergency room. But we've heard that before. It's not new. This reminds me of the CDC ads, which have begun appearing on television, where the CDC gets on and buys a spot on television and the spot says, wash your hands. I said, my God, that is amazing that they're just getting around to tell us that, Nat. Now, do you think that everybody in the country hasn't heard that X millions of times already? Why are they telling us now? At the same time, at the same time, this is my point, they haven't told us about that whole list you just read. Now, if they were really interested in informing us and saving us, they would give us the whole list, wouldn't they? I would think they would more focus on other strategies like wearing a mask in public and that this is not a controversial thing. Every credible health authority in the entire world says wear a mask. It's a simple. The White House is opposed to that. The White House does not want to encourage you. That is not a credible health authority. But elements inside of the government do are credible health authorities like the National Institutes of Health or the CDC. They do say to wear a mask, as well as our state, local governments. Everybody understands. Are you saying that the CDC is separate and distinct and not under the influence of Donald Trump and the White House? No, sadly not, because when we're just seeing an ad come out up to three months that says to wash your hands, it is still its own organization. It has just been blocked at the top like so many other organizations. Departments of the government have been. We can find true news inside of it, but we have to look for it. It's not coming out from the top. Well, okay, but why doesn't the coronavirus task force tell us about this, Stephanie? That has dissipated. That's gone away. That is no longer there. And the speaking by Fauci and Dr. Redfield and Dr. Redlaner, those are all coming out of their own areas of employment and they're silent on why they're not participating in the task force. It's just over. But I know that with Redlaner, who is a person who's the director of the National Center for Disease Disaster Research and has said that his prediction out of the work that they've done is that 50% of Americans will get this virus by the end of 2020. 50% because the estimates are so low. The truer estimates are those that they have been broadcasting at 10%. He says it's higher. It says 10 times that the news is saying 10 times the number that's reported for the 2.5 million is actually going to be by more like 20. I think that came out of the CDC and it was this morning and for everyone that's reported, they say there are 10 more. So that's really just amazing. 2020,000 for what's on the news and then it's actually the estimate is half of us are going to get it because it's going so virulently. So far only like 5% have gotten it or less 2%, something really low. We're on land and sneaking around to escape it. Now the good news is that more young people are getting it, which means that cases are going to rise dramatically, but the deaths aren't. So it's still going to be the oldsters and at-riskers who are going to die, but the others are going to recover because the young people seem to be recovering. You have to see the young people as more than just having coronavirus. You have to see them as spreaders. They're unknowing spreaders and they can spread it to everyone else. So even if they do fairly well and dealing with the disease personally, they're going to be throwing viral particles in all directions without knowing it. That's why it's so dangerous to have these rallies and reopenings because they go and they feel just fine, but everybody around them is getting the particles. Well, the chilling news for me is that they are saying the children are asymptomatic and may not be getting it as easily because their nose tissues are not mature enough to provide the catchment or the attachment feature of the corona. It can't get in there and hang there and do its thing as well as it does in the adults. So they have some degree of protection from what I've heard and read. However, they're saying that a kid can be a spreader. So the kid can have the virus and be asymptomatic and then and unaffected much and yet can still take it around and spread it as you're saying these other post infection young people can be. Okay, let's talk some more medicine. Winston, what about this BCG thing? Is that a viable option to treat the virus? I don't know. It's interesting to see that that's one theory is why folks in Korea and Japan have not been hit as hard as because they were vaccinated against that whereas we in America typically not at the time. So it may be something there may be something in there where the immune system is recognizing it even decades later. I see other things where they're saying maybe some antibiotics will help or even using radiation on the lungs. But it's interesting to see all of these other things coming up and saying who doesn't get it and why and why are they not getting it and trying to focus on that. But I don't think we have 250, 500 million doses of BCG vaccine ready to go in this country either. And even if they decided that was the cure, it'd take a long time for that to get rolled out as well. So I don't know that there's any magic bullet here. And as far as the young people, we read about young people getting this and that it's a third of the cases now from what I've read about a third are in their 20s. But when we say they've recovered, I think it's important to realize that we don't know what recovery means. And a lot of people are not recovering or when they're recovering, they're recovering with lungs that are permanently damaged or organs that may be permanently damaged. So we shouldn't be cavalier at all about who gets this disease and why we can see that certain groups certainly are dying at a lot higher rates. But why is it to CDC telling us that? I just don't think that they're in disarray right now. They're afraid to publish their results. They're afraid to, I mean, there's a culture of fear inside of so many agencies of the government that we may not be getting this information for a while. And I think that if CDC really wants to help us right now, it needs to have a mass campaign sent to every house that says, wear a mask when you are outside. It protects. It's the right thing to do to protect you and other people. Yeah, but the president doesn't wear a mask and he's sending a message to a lot of people. And you have even like, I saw there was a sheriff in Washington state, Jay Inslee says, the governor, wear a mask when you're outside.  Don't wear a mask if you don't want to wear a mask. You're getting very contradictory messages. And I think in places in the world, they're just looking at us like, what kind of mask delusion are we under here that we can't simply abide by wearing a mask? This is not a major aspect. Okay, let me tell you about a question that came in. This person, and thank you to the viewer for the question. I work in hospice care. When the second wave hits, perhaps in the fall, it's coming soon. Will society deem as expendable those with severe dementia and allow the virus to reduce our medical care load? Whoa, that's out of a bad science fiction novel. Stephanie, you got a reaction to that? We care about old people who have dementia. How much do we care?  I think we care. I've been through the hospice situation with my husband, but I believe that one of the tools that the administration has to use and that has been admitted now in the reporting testifying to the House committee is that there's fear. People are afraid of the President, and so it has been assumed. I mean, I assumed it and even worried about mortal threat at some point, but people are indeed admitting that they're afraid of the President, and that's why they did some of the things they did. What I'm saying is that the fear of this is rational, because if there is by omission or commission threat by the President, there may be some holdup on getting the right supplies and the important medicines to these healthcare facilities. But on the other hand, everybody's had a chance to ramp up. We know that's a weak spot. We knew that early and that there's been a tremendous effort to strengthen the facilities and to get the supplies in. So it can go. If you had a choice between going into a senior facility, because you would otherwise go into a senior facility and saying, no, I think I'll stay at home instead right now, which one would you pick? Definitely stay at home. There were so many flaws in the systems of these nursing homes pre all of this that needed fixing them more actually. I want to go to this expectation, this projection that came out in the morning paper. I forget which one. I said next few months, we're going to have 180,000 tests. We're at 120 now. So this is moving very quickly. And I don't know the total number, but between the three or four top states where it's spiking, we're talking about 15, 20,000 per day. So it's quite remarkable what's happening. So the next couple of months will be 180,000. But the think tank that came up also said that if we all wore masks, it would be 140,000. So we can save 40,000 lives if we all wear masks. I find that remarkable and to your point Winston, it's incredible that people don't all get that. That just seems so simple. The other thing is testing. On Saturday night, Trump said, I love this part, Trump said at the rally in Tulsa that he was going to slow down on testing because the more you test, the more cases you find. And he didn't want to find the cases. He wanted to turn his back on the numbers, ignore them. So let's not do testing. And then when the press called him on that, he said, no, no, no, no, no. I was just joking. Now my reaction was, you got to fool me that he was just joking because we all saw him say that and he wasn't, he didn't seem to be joking. I think it was his press secretary said he was joking. And then he said, I never joke. Isn't that what it was? Whatever it is. This information where he says one thing and says, Oh, I was just doing it to raz the press or whatever it is. The best part Winston is that this morning he announced or the paper reported that he was defunding the testing program. No more testing, no more support for testing in this country from the federal government. I said, well, I guess now he's not lying. Now he's not joking. He's really doing it because he doesn't want to know about the cases. Well, this is part of the strategy of having the states and local governments take care of it. So if your state is one that takes it seriously, that's great. But you know, there's others, even inside of the states, you've got other elements like in, I saw Governor Newsom says, you're wearing a mask if you're in public. And then he is having to threaten to cut off counties that don't abide by the law that are going rogue and saying, Oh, no, this is a matter of personal freedom or whatever. It's, it's, it's a matter of public health. Same for Arizona. I saw that the governor had funding allow the decision to be made at the state or local level. But, but up till now, a lot of them, a lot of states and localities that have tested people have been, have had the benefit of federal funds to pay for the costs of the tests. Now that's being, that's being removed. Yeah, that's done. But you have to think about it. This is a, this has become a political thing. So when the president says, if you're wearing a mask, it's, you are stating that you are against me. And so, I mean, it's dangerous on a number of levels, but basically just, so you're wearing a mask and you're, let's say you're in a state where you have people that really believe that that's true, and there is no threat of the virus or there, or whatever they believe, and you're wearing a mask, and you might be surrounded by a hostile crowd of non-masquers that are thinking that you're making a political statement by wearing a mask when in fact you're just trying to follow basic hygiene of public health. And so this, it's so convoluted. It's, it's, you can't understand the cognitive. Well, there is a common denominator. He's, he's, Trump is doing all this. He's managing things like a marionette, marionette or a puppeteer. And I give Stephanie these two things and see if you can connect them up. One is that there was a curfew established by the city of Tulsa over the weekend because they were very worried about a lot of things about COVID, among other things, and they were, you know, concerned about demonstrations and violence and all. So they were taking all the steps they could and they made a curfew. Well, the secret service went to the city and instructed them to take the curfew off. Secret service works for who? Okay. And, and they did. So then the curfew went away. In a parallel fashion, you know, the United States Attorney for the District of Hawaii is involved in litigation over the, the travel quarantine that David E. Gay imposed, which is about to be changed already. But they, but what happened is a Department of Justice went to the U.S. Attorney for the District of Hawaii and told him to make sure to oppose that travel, that travel quarantine requirement. So they leave it to the states. The states try, and now the White House is trying to insinuate itself into the decisions the states make. I mean, what, do you see a comparison there? And do you see other things happening like that where the president says, oh, no, I'm leaving to the states and if anything goes wrong, it's their fault, not mine. And then what we have is you try to manipulate through other agencies. Well, the states, according to the latest news are at breaking points, most of them, all of them, they have no more funding. Okay, it's all dried up and they're having to depend on the sources that they get from the federal government. So I see this, it could be a desperate blow for states who are already underwater. And without money for the funding for tests in states, states are not going to be able to pick that up to supplant what the feds are no longer going to give. So that, of course, is going to have a huge impact. And the, the, this seems to be the pattern that I'm seeing. And in, because states are not going to be able to afford to do all these where they get in the money from that they've got to get the money from their state taxes, and they're not going to have that coming in. People are not able to pay and they're prolonging it. Now this, this goes to the whole reopening issue. So they have the the PPP, the payroll protection program, which is part of the CARES Act, right, is billions and billions of dollars involved. The deadline for filing, okay, is June 30th. That's one week away. You'd really have to hustle to make your application, to get the loan, to take the remaining part of that money and get the benefits of the PPP. Congress has not authorized any more money. It has largely expired. There's 120-some-odd billion left that has not been spent. Don't ask me why that would be true. And we are about to have what the paper charitably calls a pause, a pause in many states. So first you have the epidemic, which you don't recognize, then you recognize it, and then you have a lockdown, and then you have a reopening, and then you have a re-epidemic, a spike. All these are great words to describe the journey we've been on. And after the spike or the resurgence, now we're having a pause in three or four states today. So where does it take us when you have the pause on the reopening and these businesses don't really have options to get the federal money or more federal money? And they are going, lots of them are going to go out of business, Winston. What is going to happen to our economy in the pause? I don't see any pause in anything, honestly. It seems like these numbers are just climbing, climbing, climbing in California, Florida. This is the pause in reopening. It's the pause in reopening. You know what? It's like I've said a month ago, we're just giving up on it. We're just going to let it run wildfire and do what it does. And that question from the viewer was deeply disturbing, and thank you for the question. This idea of sort of a eugenics almost, of letting our weakest and sickest die, that is the hallmark of civilization, is that we take care of our weakest and sickest. So I would hope that, although who was the fellow that initially onset, was it Glenn Beck or somebody said, I would gladly go out and sacrifice my life for the economy or whatever it was, a couple of months ago. But when it actually comes down to real people and letting them do that, it's horrific to even think that we would be a society that does that. We're not in a place where we need to make those choices. But what we do need is just common sense solutions. Here in Hawaii, when we open up here, which we are opening up, I was down at the beach the other day, they're also having a spike. If you look at the charts, they are having a spike every day and restaurants are packed. I'm seeing it. Well, businesses have picked up. Definitely. People are out and about. When we start getting our tourists back in here, we need common sense rules that require several days, several tests, two or three tests minimum. And then a couple days after that, where we can always reach them by phone, just in case they slip through the test and using different tests. We can do it. We can do it sensibly. We were down to zero new cases for a while there. And now we're just back up to 18, 19, 15, 12 cases a day. And that's going to go way up as well once we open the doors here. We are opening them. And we're not on a pause here yet. And we're trying to get more people to come. And the restaurants are open and full. And I think in all that message of reopening, there's a certain sub-message about complacency. You don't have to worry. It's over. We're beyond that. We have prevailed. We're back. And all this is coming originally from Trump. So Stephanie, are you going out to a lot of restaurants these days? I mean, personally, don't you have some concern about that? Well, certainly I do. I mean, but I have the more general concern about Hawaii's economy and its survival and the nations because the economists are predicting it's at least three to five years for recovery from this fiscal calamity. And certainly in Hawaii, the prediction is that or longer. And it's going to require leadership governance to have multi-year strategies for spending cuts. So because they're not going to have the inflow of income that states and cities and counties expect to have. So I think we're facing that. And I understand the tension is terrific because when you go to that restaurant, I have a good feeling when I do get whatever I get usually take out. I'm happy, you know, to tip and all of that because these people are in survival mode and it is we are all connected in it together. So they do need as much support as possible. And of course, many are dropping by the wayside. And this is putting the state and us all in this disastrous on the edge of the cliff of real financial calamity, where we don't have the funds to do the things we know need to be done.  Who's going to pay for that? What about the police? Who's going to pay for that? What about the schools? I mean, all of this stuff is real close to home here when it comes to the list of what are the funding needs. And with the state having no money, they are going to start down that list. And that's leading us right. Civil. Watch out for that. We have a $2.3 billion shortfall in the state budget. The legislature was really out for most of the session. It's back now. And the question is, what do we do to cover that $2.3 billion? Well, one of the things they have done, I think a few days ago, is they agreed over objection by some members of the community to give $150 million to the unions for a delayed increase in pay to union members. I think HGA, the Hawaii government employees union, which you can see is political and which you can see drives the other direction about trying to narrow the gap and avoid the shortfall. So we're not sure what they're going to do in the next couple of weeks, but it's a monumental task to deal with the shortfall. As you say, Stephanie, that we don't have the tax revenues that we used to have before. And every time you look, the council on revenues doesn't find any improvement in that. In fact, we find deterioration in that. So Hawaii has a serious and unique problem. And I don't know when we'll have a vaccine or a therapeutic or anything. Before we start the show, you guys were talking about this O blood type O transfusion. What about that? Does that offer any comfort here? It seems there's some evidence that the different blood types are having infection at different levels and that the O's look like not much infection. Those with O's are not as often infected. So I haven't seen any more about that, but it looks like there's a line of research opened up here. And that might give us the option of transfusions, if the O types are... I don't even know if that's an effective way to get the effects out of the O into another person. So I mean, with the antibody research and this kind of blood, which might tie in with what Winston was talking about earlier with the vascular disease connection, I mean, maybe we're getting a good, rich, strong effort on the research to uncover some of that. Indeed we are. And the press is covering it. And I get more confused every day about what the good candidates are, because you know they're not all good candidates. And there's talk about herd immunity, such as I think in Sweden where they made a policy choice on that. Herd immunity means what 60%, 70% of the population has had it. And so the fertility rate, so to speak, the transmission rate is reduced below one per capita. And then it sort of dies out because there's nobody around to spread it. This is a long shot. And it also means that 60% or 70% of the people have had it and are at risk of really being seriously ill and dying. It's not very attractive. But you know what? We may go through that anyway. Winston, you know, if we don't have a solution and the federal government is not going to help us and everybody's confused and they think it's a question of their personal liberty and to wear masks and get tested and all this. And we're in a state of chaos on this issue. Chaos. Then what will happen is we will have herd immunity, but a lot of people will die in the process. Am I right? Tell me I'm wrong. Well, like you said, lots of information, lots of confusion out there, 160 different vaccine tests going on right now in people. Who knows who's going to rise to the top? Basically at this point, what is under your control? Under your control, you can't control Donald Trump. You can't control the governor. What you can control is wearing a mask when you go out. If you are at risk, you reduce your going out. If you are, everyone is at risk, but if you are at higher risk, you reduce that. When you go out, you make sure that you are practicing good social distancing and common courtesy because we are not sociopaths and we respect each other with aloha. And that is what we can do as individuals. We can keep abreast of things, but eventually whenever vaccines or treatments come out, that will happen. But in the meantime, we have the control we have is wash your hands, cover your face. We've heard that, but you know, the problem is complacency sets in. So if I tell you there's going to be, what did Fauci say the other day, don't expect any vaccine until at the earliest the end of 2021. So that's a year and a year and a half away already. Well, yeah, about a year and a half away. Yeah, we may get corona fatigue. Very true. Exactly. And then we have complacency setting in. And because you wash your hands yesterday, doesn't help you today. Because you wore a mask yesterday, doesn't help you today. And people will kind of sluff off on that sort of thing. And then we'll be back in my favorite scenario, namely herd immunity because, you know, we're not taking care of ourselves. Benefit is that you won't catch it today. That doesn't solve the problem on the community. Today. Yes, that's a good point is it's today. And that's all you got is today anyway. But we should avoid the idea of herd immunity because we don't know that there's any herd immunity. This could be closer to smallpox or HIV, as far as its transmissibility and protection and maybe even a vaccine out there. So it may be just that Sweden took their pain a little bit earlier, but they also had public health and hospital beds. And that's what we were really trying to avoid was the surge or the hump. And now we, we have gotten past that and we realize, okay, we can, our hospitals can handle it. So we're just spreading out now. We're in a, we're in a spike right now. The other day, we had 27 cases. Yes, it's going to continue for a year, but they decided our hospitals can handle it at this point because we avoided the initial surge. And they looked at Sweden and said, okay, they had so many ICU beds and yeah, their death rate was four times higher, but they could handle it. So I think they just are extrapolating and putting it here. Stephanie, you really want to say something, don't you? Italy, Spain, Germany are down. Okay. They had the self-discipline that we started out to have and fell apart from it. So that discipline has those European countries under control and they are locking us out, us Americans out. We are going to be their threat. Okay. Now they did it. We can do that. We just have to pick it up and do it. There's no doubt we can do it and we just have to step up to it. We missed our first opportunity and paid for it. Now let's go again, pick it up and get it, get it knocked under. That's exactly what we got to do. I think the horse left the barn. We can do it in Hawaii and Alaska and that's about it at this point. Why? There's no doubt. We can do it in Hawaii because there's a disciplined population here that can, can manage. So Stephanie, you mentioned a number of countries in Europe, but what about Asia? There's been a bit of a resurgence in Korea, a bigger resurgence in Beijing. Beijing is now under a brand new lockdown and other places, even Singapore as spikes. So question is, what can we learn from Asia? A lot from them because they know how to do this. They did the same thing as Germany and Spain. Those people followed that, but the point is because they do the contact and the follow-up and the continued testing, they're still, they didn't, they're doing follow-up. They have the continued care continuity of attention to this so that as soon as they find the spot that's going to come back up, they get them and they isolate them and they treat them and that's it. So they're not going to rise up again to a plateau kind of graph like we have. They're going to- One more thing is, okay, so we test and maybe we're getting better at testing. We appreciate that testing is only good for a moment in time. 24 hours later, you know, you could have the virus, but let's assume we find somebody on our testing program who has the disease. What do we do about that? What do we do about that here? We don't have a working tracing program. We don't have that. We don't have rooms full of people who make telephone calls and trace through. We don't have software that does it. So we find somebody. What do we do? We warn the person. What do we do? With that is they do not let the person go. As soon as the person is identified and not even yet tested, they test them. They don't go anywhere until that test result comes back. Then if that comes back positive, they get shipped off to the wherever. Well, I suppose if you quarantined them, that would even be better for the community. What do you do Winston? If you find somebody who tests positive, what do you do? You know what? You treat them with kindness and aloha and assume we have 30,000 empty hotel rooms right a mile away from all of us in Waikiki. We just designate that as a COVID hotel for right now. We let them get it out. We have medical care that's available to them if they need it and need to be elevated to a higher level of care. We put everybody else that they came into contact with there until they prove that they aren't carriers of the disease. We can do it in Hawaii. Stephanie's right. We can do it in Hawaii. Weston and Hilton can just kick in on this and get pseudo hospital sections or temporary hospital sections. That's a wonderful contribution they are. Welcome to make. And get paid for it. I mean, they need the revenue now too. Sure, they need somebody to be in their rooms. Yeah. And we'll pay them assuming we have the money, assuming we have the money. I'll tell you guys we're about a time. I hate being out of time on every level. So Winston, thank you very much for joining us. Winston, this is Coronaville. What's next? And Stephanie, thank you so much. We'll talk to you soon and in any event next week.


And that's pretty much all there is to setting up DKEM signing in Office 365. If you're using any other domains or using any other services such as, you know, constant contact and SurveyMonkey and things of that nature, then you may have additional setup that you need to do so that you can publish DKEM records for those services and configure those services so that they are also signing messages that are sent as your domain. That requires research from those vendors. And that's really the best way to go about it is to contact the vendor of each one of those services and see if they have recommendations on how to set up DKEM. And that pretty much concludes the setup for DKEM. Next we're going to be covering DMARC, which takes the information that we found in SPF and DKEM and kind of combines that into an even more secure method of keeping people from spoofing emails.