Received: by 2002:ab2:6857:0:b0:1ef:ffd0:ce49 with SMTP id l23csp1167625lqp; Fri, 22 Mar 2024 07:27:43 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCVgjRbLJouXo4mBJBVGyzT0v9wTWCK4wYZzsUuHCpvMB0VPPnQbEs7jhIr0kq1qb/PgbOSVei1EVvp/H6R7bk5uKbFtRH6HgaL2myLt7Q== X-Google-Smtp-Source: AGHT+IHIhid/B/r2I9Zq/FlHR9kXZJB0KmNHZog4K5G+2YgpXJWy8eDselvYAtl9PHVfoeyXpMdo X-Received: by 2002:a05:6214:29e1:b0:696:315e:4eeb with SMTP id jv1-20020a05621429e100b00696315e4eebmr3033609qvb.8.1711117663296; Fri, 22 Mar 2024 07:27:43 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1711117663; cv=pass; d=google.com; s=arc-20160816; b=z0v9Rozh9EYGmlGfB2bWzDU1GAVtM9RTv/XmczM8h0G78eTpqjqxQVoAMS1wR6adM0 Tyx2yGqKxqxpJ8mNX8VFdurioppeDJ117SVEwXMiU/WeWKBTysxr/P5I9Gikvv/BpUUo 2cwzxsrafdRHS3wxs1VEO08gLH66FyKob/UfLhIHZcQ0r/CFsftk6684jVfKzM5gtueo 7nEZJegmgHq2K/war7UQSPYVPtqx7OVk5MHQk7WMrLycFsHJM9TMYDjtJakkIpWAcW9U vqiUVCkqd9wqDWj1y3/1paEVBzw//vc2EYH8u+bXuPcC6DqIe6uQmSmQx89Zi7Zu35fX 3IpQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:list-unsubscribe:list-subscribe:list-id:precedence :user-agent:references:in-reply-to:date:cc:to:from:subject :message-id:dkim-signature; bh=bw4vhtLjqJpYwYIS8AXmj7MejXi/EOT8hO1g7e2RFqQ=; fh=tYRR9hoX8ahp05k92AyEy17hNocUiW9YF+YMZyUaveg=; b=hfG5Y7IivDog/2sedUAKCNyfE4iASK3ZAB94sK5Hk5s0lvViHBOGCmWP4Lm6co7/by OEyxPCYio+XlK9NiRK3evqk51ICpq3FocUi68ouzhZCN8MTlDf83K72qFqPplIYZbatL O9TL3b48j0W9QPeQulqyr1ihRj+v4rvX6MDAB5Fer3gKUAQrODM834If8cFRSH4DM09W Zhu4S/ZFP4lpZIYKlGZ9v+SrAOCNVDHKXf1DX1BZ/n/i5fLNwRX6NJH7gUWZFJm9x3/b gGdRz/J/u3/tvTYYH8HHm2YATx3BZ20tIVX9Qi27cr0s+WqDVlk08XYCeaSqwqHnDN9i I7/w==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@infradead.org header.s=casper.20170209 header.b=Dwo8MzsG; arc=pass (i=1 dkim=pass dkdomain=infradead.org); spf=pass (google.com: domain of linux-kernel+bounces-111609-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-111609-linux.lists.archive=gmail.com@vger.kernel.org" Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [147.75.199.223]) by mx.google.com with ESMTPS id e12-20020a0562141d0c00b0069611eff2besi2130285qvd.175.2024.03.22.07.27.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 22 Mar 2024 07:27:43 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-111609-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223; Authentication-Results: mx.google.com; dkim=pass header.i=@infradead.org header.s=casper.20170209 header.b=Dwo8MzsG; arc=pass (i=1 dkim=pass dkdomain=infradead.org); spf=pass (google.com: domain of linux-kernel+bounces-111609-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-111609-linux.lists.archive=gmail.com@vger.kernel.org" Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id EFA911C203B5 for ; Fri, 22 Mar 2024 14:27:42 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id DDCD24776F; Fri, 22 Mar 2024 14:27:36 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="Dwo8MzsG" Received: from casper.infradead.org (casper.infradead.org [90.155.50.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 81D6F44C89; Fri, 22 Mar 2024 14:27:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=90.155.50.34 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1711117655; cv=none; b=Gm2hIqkRLJpm+qHVfI6pXWmBOueU/rDWPY3jDgaB2p4jL3gv9r9lwpswRKgxWL8uiPEHvLdtAWW2uad41HN5i9YmPRBkkOTevOrW0AzZah9v2pC20Udl/XA7PXUcPoMf0inAlE3CNR8VO1mmi1KYfW9DnYXQx//ynEyrqyGgZPw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1711117655; c=relaxed/simple; bh=bw4vhtLjqJpYwYIS8AXmj7MejXi/EOT8hO1g7e2RFqQ=; h=Message-ID:Subject:From:To:Cc:Date:In-Reply-To:References: Content-Type:MIME-Version; b=uDNflKA8KHOO6AI4sdPpNvp/IPS+8RWiA/94ccTtTupV5mBdVg6exzFivDu+HRVyPE5bnOw3BJgg9f1z1WH1CK03grxEYRdXR3e5GzsP/VIGvC5x6IVy17Eys3MrXZbKGaY56y5JuA4B36wN2RZJSnQm0EqRoEiqTqrD3Okttko= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org; spf=none smtp.mailfrom=casper.srs.infradead.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b=Dwo8MzsG; arc=none smtp.client-ip=90.155.50.34 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=infradead.org Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=casper.srs.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=casper.20170209; h=MIME-Version:Content-Type:References: In-Reply-To:Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=bw4vhtLjqJpYwYIS8AXmj7MejXi/EOT8hO1g7e2RFqQ=; b=Dwo8MzsGf5mwG11t9wkNFBKuuv VO9pmMb2xGCeMRKHfaQWX6vozNKPf1rENfBw8eU60rqQT09J6aOmAoXz9HH/ZmJpnz9aE7CSNEu71 PTNDo8LI3JhD/eCa+LzfItgVzA4q4QG9n9u0D27Ldo4bpthGMECulFzqQQn6L+ZRSHEweB4UeY3rr ngjyAT784booYg3I3Q1xriYXg7oPp8e/SuZuS8215cFdNEqWTnOjJcqhEt/XQsMb6wUObf5dErBgO bPUBHyzgzDrU2K5QDCW74egoyHo9uGsehkh8FOdrvnxjqGjY8nLkwKAjNV/S/n9Tmu//JP6xOcch0 RPg+f3Ow==; Received: from [2001:8b0:10b:5:244c:6ee0:3d43:8a85] (helo=u3832b3a9db3152.ant.amazon.com) by casper.infradead.org with esmtpsa (Exim 4.97.1 #2 (Red Hat Linux)) id 1rnfrf-00000009W4L-0FTH; Fri, 22 Mar 2024 14:27:23 +0000 Message-ID: <0a83e174db16e15cb0f0d3ac37d6717c918ee78d.camel@infradead.org> Subject: Re: [PATCH v1 0/4] virt: vmgenid: Add devicetree bindings support From: David Woodhouse To: Rob Herring Cc: Krzysztof Kozlowski , "Landge, Sudan" , Sudan Landge , tytso@mit.edu, Jason@zx2c4.com, krzysztof.kozlowski+dt@linaro.org, conor+dt@kernel.org, sathyanarayanan.kuppuswamy@linux.intel.com, thomas.lendacky@amd.com, dan.j.williams@intel.com, devicetree@vger.kernel.org, linux-kernel@vger.kernel.org, graf@amazon.de, bchalios@amazon.es, xmarcalx@amazon.co.uk, ardb@kernel.org, benh Date: Fri, 22 Mar 2024 14:27:22 +0000 In-Reply-To: References: <20240319143253.22317-1-sudanl@amazon.com> <23692c07-98bd-477d-b244-bba14c50352c@linaro.org> <38aad6c0e698c8e804694276d1762d61f2068ce8.camel@infradead.org> <20240320161531.GA1810860-robh@kernel.org> <60404403932a984d1f75d111ff53b9053af03579.camel@infradead.org> <20240321133250.GA1600070-robh@kernel.org> <17611183-f288-47fe-a5e1-91ee16168db0@linaro.org> Content-Type: multipart/signed; micalg="sha-256"; protocol="application/pkcs7-signature"; boundary="=-VP6CJ8fN7Mq7yYfq63Ga" User-Agent: Evolution 3.44.4-0ubuntu2 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 X-SRS-Rewrite: SMTP reverse-path rewritten from by casper.infradead.org. See http://www.infradead.org/rpr.html --=-VP6CJ8fN7Mq7yYfq63Ga Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Fri, 2024-03-22 at 08:22 -0500, Rob Herring wrote: >=20 > > > What stops you from passing fw_cfg not to UEFI FW? BTW, no actual VM > > > name was used in your posting, but now suddenly it is a talk about QE= MU. (Forgot to address the second part of that last time. No specific VMM was mentioned in the first place because this isn't VMM-specific) > > That would be possible. But not ideal. >=20 > Why not ideal? >=20 > To rephrase the question, why is it fine for UEFI to read the vmgenid > from fw_cfg, but the kernel can't use the same mechanism? Because fw_cfg an incestuous way to get data from the VMM into the BIOS (both SeaBIOS and UEFI). It's the way we pass the ACPI tables and things like that. It *isn't* designed as a general-purpose way of doing device discovery for use by various operating systems. I'm also not sure Firecracker, which is the VMM Sudan is working on, even *has* fw_cfg. Especially on ARM. If we're going to be forced to add some complicated device with MMIO and DMA just to be able to advertise the existence of a simple memory region, that's just as bad as being forced to expose it as an emulated PCI device. This is what DT is *for*. > The response > that you'd have to use UEFI to use fw_cfg makes no sense to me.=C2=A0The > only reason I can think of is just being lazy and wanting to have > minimal changes to some existing driver. It looks to me like you could > implement this entirely in userspace already with zero kernel or > binding changes. From a quick look, we already have a fw_cfg driver > exposing UUID (that's the same thing as vmgenid AIUI) to userspace, > and you can feed that back into the random pool. >=20 > I am concerned that we already have a mechanism and you want to add a > second way. When do we ever think that's a good idea? What happens=C2=A0 > on the next piece of fw_cfg data? We add yet another binding? No, because fw_cfg is a way for the VMM to give configuration information to the firmware. There's a clue in the name. The firmware then sets up ACPI tables or DT to pass information in a more coherent and structured fashion to general-purpose operating systems. And some VMMs *don't* use fw_cfg at all because for the minimal microvm case it's overkill. --=-VP6CJ8fN7Mq7yYfq63Ga Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCEkQw ggYQMIID+KADAgECAhBNlCwQ1DvglAnFgS06KwZPMA0GCSqGSIb3DQEBDAUAMIGIMQswCQYDVQQG EwJVUzETMBEGA1UECBMKTmV3IEplcnNleTEUMBIGA1UEBxMLSmVyc2V5IENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEuMCwGA1UEAxMlVVNFUlRydXN0IFJTQSBDZXJ0aWZpY2F0 aW9uIEF1dGhvcml0eTAeFw0xODExMDIwMDAwMDBaFw0zMDEyMzEyMzU5NTlaMIGWMQswCQYDVQQG EwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYD VQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50 aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjztlApB/975Rrno1jvm2pK/KxBOqhq8gr2+JhwpKirSzZxQgT9tlC7zl6hn1fXjSo5MqXUf ItMltrMaXqcESJuK8dtK56NCSrq4iDKaKq9NxOXFmqXX2zN8HHGjQ2b2Xv0v1L5Nk1MQPKA19xeW QcpGEGFUUd0kN+oHox+L9aV1rjfNiCj3bJk6kJaOPabPi2503nn/ITX5e8WfPnGw4VuZ79Khj1YB rf24k5Ee1sLTHsLtpiK9OjG4iQRBdq6Z/TlVx/hGAez5h36bBJMxqdHLpdwIUkTqT8se3ed0PewD ch/8kHPo5fZl5u1B0ecpq/sDN/5sCG52Ds+QU5O5EwIDAQABo4IBZDCCAWAwHwYDVR0jBBgwFoAU U3m/WqorSs9UgOHYm8Cd8rIDZsswHQYDVR0OBBYEFAnA8vwL2pTbX/4r36iZQs/J4K0AMA4GA1Ud DwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEF BQcDBDARBgNVHSAECjAIMAYGBFUdIAAwUAYDVR0fBEkwRzBFoEOgQYY/aHR0cDovL2NybC51c2Vy dHJ1c3QuY29tL1VTRVJUcnVzdFJTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHYGCCsGAQUF BwEBBGowaDA/BggrBgEFBQcwAoYzaHR0cDovL2NydC51c2VydHJ1c3QuY29tL1VTRVJUcnVzdFJT QUFkZFRydXN0Q0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0G CSqGSIb3DQEBDAUAA4ICAQBBRHUAqznCFfXejpVtMnFojADdF9d6HBA4kMjjsb0XMZHztuOCtKF+ xswhh2GqkW5JQrM8zVlU+A2VP72Ky2nlRA1GwmIPgou74TZ/XTarHG8zdMSgaDrkVYzz1g3nIVO9 IHk96VwsacIvBF8JfqIs+8aWH2PfSUrNxP6Ys7U0sZYx4rXD6+cqFq/ZW5BUfClN/rhk2ddQXyn7 kkmka2RQb9d90nmNHdgKrwfQ49mQ2hWQNDkJJIXwKjYA6VUR/fZUFeCUisdDe/0ABLTI+jheXUV1 eoYV7lNwNBKpeHdNuO6Aacb533JlfeUHxvBz9OfYWUiXu09sMAviM11Q0DuMZ5760CdO2VnpsXP4 KxaYIhvqPqUMWqRdWyn7crItNkZeroXaecG03i3mM7dkiPaCkgocBg0EBYsbZDZ8bsG3a08LwEsL 1Ygz3SBsyECa0waq4hOf/Z85F2w2ZpXfP+w8q4ifwO90SGZZV+HR/Jh6rEaVPDRF/CEGVqR1hiuQ OZ1YL5ezMTX0ZSLwrymUE0pwi/KDaiYB15uswgeIAcA6JzPFf9pLkAFFWs1QNyN++niFhsM47qod x/PL+5jR87myx5uYdBEQkkDc+lKB1Wct6ucXqm2EmsaQ0M95QjTmy+rDWjkDYdw3Ms6mSWE3Bn7i 5ZgtwCLXgAIe5W8mybM2JzCCBhQwggT8oAMCAQICEQDGvhmWZ0DEAx0oURL6O6l+MA0GCSqGSIb3 DQEBCwUAMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNlY3RpZ28g UlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBMB4XDTIyMDEwNzAw MDAwMFoXDTI1MDEwNjIzNTk1OVowJDEiMCAGCSqGSIb3DQEJARYTZHdtdzJAaW5mcmFkZWFkLm9y ZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQ3GpC2bomUqk+91wLYBzDMcCj5C9m6 oZaHwvmIdXftOgTbCJXADo6G9T7BBAebw2JV38EINgKpy/ZHh7htyAkWYVoFsFPrwHounto8xTsy SSePMiPlmIdQ10BcVSXMUJ3Juu16GlWOnAMJY2oYfEzmE7uT9YgcBqKCo65pTFmOnR/VVbjJk4K2 xE34GC2nAdUQkPFuyaFisicc6HRMOYXPuF0DuwITEKnjxgNjP+qDrh0db7PAjO1D4d5ftfrsf+kd RR4gKVGSk8Tz2WwvtLAroJM4nXjNPIBJNT4w/FWWc/5qPHJy2U+eITZ5LLE5s45mX2oPFknWqxBo bQZ8a9dsZ3dSPZBvE9ZrmtFLrVrN4eo1jsXgAp1+p7bkfqd3BgBEmfsYWlBXO8rVXfvPgLs32VdV NZxb/CDWPqBsiYv0Hv3HPsz07j5b+/cVoWqyHDKzkaVbxfq/7auNVRmPB3v5SWEsH8xi4Bez2V9U KxfYCnqsjp8RaC2/khxKt0A552Eaxnz/4ly/2C7wkwTQnBmdlFYhAflWKQ03Ufiu8t3iBE3VJbc2 5oMrglj7TRZrmKq3CkbFnX0fyulB+kHimrt6PIWn7kgyl9aelIl6vtbhMA+l0nfrsORMa4kobqQ5 C5rveVgmcIad67EDa+UqEKy/GltUwlSh6xy+TrK1tzDvAgMBAAGjggHMMIIByDAfBgNVHSMEGDAW gBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUzMeDMcimo0oz8o1R1Nver3ZVpSkwDgYD VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMC MEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln by5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGln b1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5jcmwwgYoGCCsGAQUFBwEB BH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBQ2xpZW50 QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAjBggrBgEFBQcwAYYXaHR0cDovL29j c3Auc2VjdGlnby5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5mcmFkZWFkLm9yZzANBgkqhkiG9w0B AQsFAAOCAQEAyW6MUir5dm495teKqAQjDJwuFCi35h4xgnQvQ/fzPXmtR9t54rpmI2TfyvcKgOXp qa7BGXNFfh1JsqexVkIqZP9uWB2J+uVMD+XZEs/KYNNX2PvIlSPrzIB4Z2wyIGQpaPLlYflrrVFK v9CjT2zdqvy2maK7HKOQRt3BiJbVG5lRiwbbygldcALEV9ChWFfgSXvrWDZspnU3Gjw/rMHrGnql Htlyebp3pf3fSS9kzQ1FVtVIDrL6eqhTwJxe+pXSMMqFiN0whpBtXdyDjzBtQTaZJ7zTT/vlehc/ tDuqZwGHm/YJy883Ll+GP3NvOkgaRGWEuYWJJ6hFCkXYjyR9IzCCBhQwggT8oAMCAQICEQDGvhmW Z0DEAx0oURL6O6l+MA0GCSqGSIb3DQEBCwUAMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3Jl YXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0 ZWQxPjA8BgNVBAMTNVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJl IEVtYWlsIENBMB4XDTIyMDEwNzAwMDAwMFoXDTI1MDEwNjIzNTk1OVowJDEiMCAGCSqGSIb3DQEJ ARYTZHdtdzJAaW5mcmFkZWFkLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALQ3 GpC2bomUqk+91wLYBzDMcCj5C9m6oZaHwvmIdXftOgTbCJXADo6G9T7BBAebw2JV38EINgKpy/ZH h7htyAkWYVoFsFPrwHounto8xTsySSePMiPlmIdQ10BcVSXMUJ3Juu16GlWOnAMJY2oYfEzmE7uT 9YgcBqKCo65pTFmOnR/VVbjJk4K2xE34GC2nAdUQkPFuyaFisicc6HRMOYXPuF0DuwITEKnjxgNj P+qDrh0db7PAjO1D4d5ftfrsf+kdRR4gKVGSk8Tz2WwvtLAroJM4nXjNPIBJNT4w/FWWc/5qPHJy 2U+eITZ5LLE5s45mX2oPFknWqxBobQZ8a9dsZ3dSPZBvE9ZrmtFLrVrN4eo1jsXgAp1+p7bkfqd3 BgBEmfsYWlBXO8rVXfvPgLs32VdVNZxb/CDWPqBsiYv0Hv3HPsz07j5b+/cVoWqyHDKzkaVbxfq/ 7auNVRmPB3v5SWEsH8xi4Bez2V9UKxfYCnqsjp8RaC2/khxKt0A552Eaxnz/4ly/2C7wkwTQnBmd lFYhAflWKQ03Ufiu8t3iBE3VJbc25oMrglj7TRZrmKq3CkbFnX0fyulB+kHimrt6PIWn7kgyl9ae lIl6vtbhMA+l0nfrsORMa4kobqQ5C5rveVgmcIad67EDa+UqEKy/GltUwlSh6xy+TrK1tzDvAgMB AAGjggHMMIIByDAfBgNVHSMEGDAWgBQJwPL8C9qU21/+K9+omULPyeCtADAdBgNVHQ4EFgQUzMeD Mcimo0oz8o1R1Nver3ZVpSkwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYw FAYIKwYBBQUHAwQGCCsGAQUFBwMCMEAGA1UdIAQ5MDcwNQYMKwYBBAGyMQECAQEBMCUwIwYIKwYB BQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMFoGA1UdHwRTMFEwT6BNoEuGSWh0dHA6Ly9j cmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQUNsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1h aWxDQS5jcmwwgYoGCCsGAQUFBwEBBH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdv LmNvbS9TZWN0aWdvUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNydDAj BggrBgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wHgYDVR0RBBcwFYETZHdtdzJAaW5m cmFkZWFkLm9yZzANBgkqhkiG9w0BAQsFAAOCAQEAyW6MUir5dm495teKqAQjDJwuFCi35h4xgnQv Q/fzPXmtR9t54rpmI2TfyvcKgOXpqa7BGXNFfh1JsqexVkIqZP9uWB2J+uVMD+XZEs/KYNNX2PvI lSPrzIB4Z2wyIGQpaPLlYflrrVFKv9CjT2zdqvy2maK7HKOQRt3BiJbVG5lRiwbbygldcALEV9Ch WFfgSXvrWDZspnU3Gjw/rMHrGnqlHtlyebp3pf3fSS9kzQ1FVtVIDrL6eqhTwJxe+pXSMMqFiN0w hpBtXdyDjzBtQTaZJ7zTT/vlehc/tDuqZwGHm/YJy883Ll+GP3NvOkgaRGWEuYWJJ6hFCkXYjyR9 IzGCBMcwggTDAgEBMIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVz dGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMT NVNlY3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEA xr4ZlmdAxAMdKFES+jupfjANBglghkgBZQMEAgEFAKCCAeswGAYJKoZIhvcNAQkDMQsGCSqGSIb3 DQEHATAcBgkqhkiG9w0BCQUxDxcNMjQwMzIyMTQyNzIyWjAvBgkqhkiG9w0BCQQxIgQg+3vGUD6V EitP3niXqqd2TDfUo5u2taJJJRl+DHsGLL0wgb0GCSsGAQQBgjcQBDGBrzCBrDCBljELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEYMBYG A1UEChMPU2VjdGlnbyBMaW1pdGVkMT4wPAYDVQQDEzVTZWN0aWdvIFJTQSBDbGllbnQgQXV0aGVu dGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIRAMa+GZZnQMQDHShREvo7qX4wgb8GCyqGSIb3 DQEJEAILMYGvoIGsMIGWMQswCQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVy MRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9TZWN0aWdvIExpbWl0ZWQxPjA8BgNVBAMTNVNl Y3RpZ28gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEAxr4Z lmdAxAMdKFES+jupfjANBgkqhkiG9w0BAQEFAASCAgAxakefUqDO0nSV9EHZyOP9YntNKNLrByzp NiWRr7o+htR0VW0sn68dXVDS6PYXpzT1u7K2DGsl1WVh3gxa1TguiwFHYj25H6a90YpifG3Tbx5v kAOjzDVd42XJ9G+yOKQDLF9WvZZAqDYEwuqQel0mF6wkDqU4DyTo14Oevcj8XQebR2PKGhHd8cTU Q/2ovCNxcahOyfYWaZ9R9segsaAvNJYeTpDBRDYJToWnelVB1teLV2sPKrg519RL871YlEJ1wmEd n1wnYfhf9BH3v6xLjA+EynQQgBsP+fVeoH2FQMIN+l5Lz6tA4Si8uR8mSPwPqj/8s+4EQxYxJEIZ W/Wv4w3+3tHXITg/XxkNyH3BfbUok2pc9P9cP+zsQ0jJEBzrMdsX2RswOg8BBg+KIyEnU/Huuzo4 YV2iGrB3tX7CBaL60+8H9IA70mOhHVN4mhsm7fQpYdBS5wZFsa6PvtxAxanUWwR7WmWx1DdeOKRo ROyP0MvYOC79o03TLHVpxmXN4Jqt2eZmNPI4aLtiJVdxYqVCl5CgNKB7ZTKUQZ/VOuyyJVYPD+G2 C7+G+4Z39NLwzUnHhqjegs+zD4gOabWekxaEavlnDibKke1LvZl6oYvJlM52Vu7Mdx1BSOz/ocw/ ZRkPvt+2cNE6iGUeDunYvt4yqItHdsFmpi2vkWFfWgAAAAAAAA== --=-VP6CJ8fN7Mq7yYfq63Ga--