passenger 5.0.4 → 5.0.5

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    YmY2MzQzMzFjNmI3NjYxMDEyYTUxZjdmOTVjMGQ3OGQxYzAwMmE0Ng==
+    NzFhZjIxODFjNjEyZjdlNTkwYjllYTgxNjk0NjIzMTAzZjhkMGFkMw==
   data.tar.gz: !binary |-
-    OTI3YWU1OTFjZWQ1ZDY0NGQ4ODkxZjZlNTIyYWQ4Y2RmNTY3N2M0Yg==
+    YWRhYjgyYWEyNzIyMzA2ZTZiNGYzMDNjZWI4ZDM1ZGNiYWM2YTEyZQ==
 SHA512:
   metadata.gz: !binary |-
-    MzBhZTQ5OWExZjk3MjE2NTRmNTVhMmM0ZDk3ZTMzMjFjZDBlNTk3ZTY1NjU3
-    ODYyOWU4ODAzOTMzNjZmOTQ3MzMyY2JlMjhlNzI3MGUxYjc2ZTVhOTE3NTIz
-    ZjI1ZjVjNjRjOGNlMmE4N2U2ZGU5NzQ2ZGVjMzljZjUyNThhNDY=
+    YzVkYjlmNGQyMzc0MzdlZjQyMmIzYzNhNDE2ZDVlYjFlNjAzNWQ5NTJlNGRm
+    YTBjZDRjMGFmMDAzNTNlZGJhNjAwODI3OWVjNDgyM2Y1MjI2ODc2NTNhYzZl
+    MmQwNTM2M2NhYzIzODU4ZDQwMTc0YjgwOGE2ZmNmMmVkNDFhYjU=
   data.tar.gz: !binary |-
-    ODk2OWZiZWM0MDQzZTFkYmI3ZDU3YWQwODA5ZDMzODA2Y2RiMzlkYzA3Yjg4
-    YmQ5ZmY1Nzk4YWQ3OWU5NjdlZGNmMzYzZDYzNmI3OWE4M2U4OGU2OTI4ZmY0
-    MTRiNDI2OTE4MjYyODIzY2M4Njk4MzBiNmRkYzYwYjVhMGNhY2M=
+    MDU1MzkxOTU1ZWEyNzFiZTU3OTdiZGY3NDU0MWEyMDRkNzVlOTM3YzdiY2Ez
+    MTc0ZjhhMDRhYWM3Zjk2NmViMjVkOGQ5OTBlNTdmZWEzN2RlNTZiYmY0OTkx
+    ZDc1OGJlMzQxODhkMDBmZDkyOWU0ODdhNTczNWEwMzA3MzM3OTk=

checksums.yaml.gz.asc

@@ -2,11 +2,11 @@
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org
 
-iQEbBAABAgAGBQJVAMcIAAoJECrHRaUKISqMrKEH+L/QNKR4k4UHVI2hroSq/J6S
-LYYxZ4MYaGxl7y8FUfwXa95k/rlfaIEsUqUqgFzxEjyrzhKGCeI2dpAcETQ67XbK
-Hf5SgkHsK9Wt/6mnH9BJP7wmGVL+edxBjUbkPH9POUkFxxS+3MbrMtgAw7MQ11kt
-zi9Q9jcjK0QYKhmElLyr+WiR5J16NstckZFcWdD14sQ3p1V9MsjPR64DkRWAbC+r
-YtBoqQSDf/Q9mPGv2MtFeHt4dI4IME5QxNCpZDZuklOPTcmYIEAUhxM61xxJ1Ut3
-OU8edjXaVRvyTE80Kd+WjiaN3fNxOyReQa36MXwV4LHmNRBk/9+IjSd7BsaI5A==
-=uI22
+iQEcBAABAgAGBQJVETeoAAoJECrHRaUKISqMINgH/icpoSgLhQhurZC5QgKuo/YJ
+tDIylDa5nkw1HHuA1W4NPdvOKTpalRwwAZyHZU9O9CIoI29ss0Th6mkEp90/wM6U
+VL/rnU1+Vc9I60myPCJ8RUnQZAU5PB712/ePnqyx+ooIKZ9K53ludC5uzBDmK3wW
+usNC0qw/W5IATogPaGqRjVYA9hbeTZdaekolqhyeyEbrO7QAoOFqeDBGjNsH+Vkk
+IUBBg/D2w9yo9I+wwOgj/w/F9kJpEHnAQv1KWWcoHhFN0In/8JyjwWacksASrh63
+MGTVw0Z9++tjC5w7+1yt0KxaTHaB/ZdtEdBX4RECDZbJ534BP/8jJyMF0uXxKFY=
+=Gu+t
 -----END PGP SIGNATURE-----

data.tar.gz.asc

@@ -2,11 +2,11 @@
 Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
 Comment: GPGTools - http://gpgtools.org
 
-iQEcBAABAgAGBQJVAMcHAAoJECrHRaUKISqMGasIAJ0EInreQLYYfKbAQ+LjDl+p
-8g6OvYe3ul8ze0L0hwI9uZ88ofM6Iw91aVSemwkBk6gy7koDQdo1raR7elyaAsTd
-T3nYOvXv65HgzUS3a4XnK2pGnL/zD3/GZ8C7Ge0bDzwPfVtV54cc/0ZnDE940Qh2
-MZi/j5wYkzjCGyHRtbVk/V1+HWJbNEcIH0l9sUMLRYeYyE1FKYwA2FM+Dv3B0s58
-kt+Udta8eqWghm/IPD7aiUTdmuPNGmyxJMOPgBtBhgYOIFx02fzsmMSEXrbybKGZ
-7YceTWGNh9iBKKOPmaxLXBr27t9QZdoTiW5SlLmZbpJT9Q2iFIPbKt8CBsjMv0A=
-=asyk
+iQEcBAABAgAGBQJVETeoAAoJECrHRaUKISqMKVEIALBq6o8FeKNDeMk77Fr0j4RJ
+mkM2maA/GgrxWNtVnAmbIKznk/2f097Iu94YbVEIkqtTd7SYvWbEEP+5vYCkAyB7
+/jU14bg3tw97gKRABDbQikeRveTWgFHlctL8z+bgo27HL2fpfaE4HHq9aFfUWKce
+30nD63Vr/2S9NfpJSUFM40FOR+TRX4FKdvOgeZf6A6vBWHjSgrX9UqND89s/ryfu
+gT+vNPk9h3xCloIfXEOambGR8WyjdoIQ8ecSHVWfTsC8O35kJ9ehdBfLWsp40PTV
+jbBVGn0SOjMBZZwDXAyQLruf1gtVLKVkgoFQDjFlBNmatZCyi/ocPbv19YTEVtE=
+=Gc47
 -----END PGP SIGNATURE-----

data/.editorconfig

@@ -76,6 +76,16 @@ indent_size = 4
 indent_style = space
 indent_size = 4
 
+[ext/libev/*.c]
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = false
+
+[ext/libev/*.h]
+indent_style = space
+indent_size = 2
+trim_trailing_whitespace = false
+
 [ext/libeio/*.c]
 indent_style = space
 indent_size = 2

data/CHANGELOG

@@ -1,3 +1,24 @@
+Release 5.0.5
+-------------
+
+ * Fixes various crashes due to use of uninitialized memory. One such crash is documented in GH-1431.
+ * Fixes a connection stall in the Apache module. Closes GH-1425.
+ * Fixes a potential read-past-buffer bug in string-to-integer conversion routines. Thanks to dcb314 for spotting this. Closes GH-1441.
+ * Fixes a compilation problem on Solaris. This problem was caused by the fact that `tm_gmtoff` is not supported on that platform. Closes GH-1435.
+ * There is now an API endpoint for force disconnecting a client: `passenger-config admin-command DELETE /server/<client name>.json`. Closes GH-1246.
+ * Fixes some file descriptor leaks. These leaks were caused by the fact that keep-alive connections with application processes were not being closed properly. Closes GH-1439.
+ * In order to more easily debug future file descriptor leaks, we've introduced the `PassengerFileDescriptorLogFile` (Apache) and `passenger_file_descriptor_log_file` (Nginx) config options. This allows Passenger to log all file descriptor open/close activity to a specific log file.
+ * The `PassengerDebugLogFile` (Apache) and `passenger_debug_log_file` (Nginx) configuration options have been renamed to `PassengerLogFile` and `passenger_log_file`, respectively. The old name is support supported for backward compatibility reasons.
+ * [Enterprise] Fixes a bug in Flying Passenger's `--instance-registry-dir` command line parameter. This command line parameter didn't do anything.
+ * [Enterprise] The Flying Passenger daemon no longer supports the `--max-preloader-idle-time` config option. This is because the config option never worked. The correct way to set the max preloader idle time is through the Nginx config option, but this was wrongly documented, so the documentation has been fixed.
+
+
+Release 5.0.4
+-------------
+
+ * Fixes a compilation problem introduced in 5.0.3.
+
+
 Release 5.0.3
 -------------
 

data/build/agents.rb

@@ -1,5 +1,5 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2014 Phusion
+#  Copyright (c) 2010-2015 Phusion
 #
 #  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
 #
@@ -155,7 +155,7 @@ file AGENT_OUTPUT_DIR + AGENT_EXE => dependencies do
     "#{AGENT_OUTPUT_DIR}#{AGENT_EXE}.o",
     "#{agent_libs.link_objects_as_string} " <<
     "#{agent_objects_as_string} " <<
-    "#{LIBBOOST_OXT} " <<
+    "#{LIBBOOST_OXT_LINKARG} " <<
     "#{EXTRA_PRE_CXX_LDFLAGS} " <<
     "#{LIBEV_LIBS} " <<
     "#{LIBEIO_LIBS} " <<

data/build/apache2.rb

@@ -1,5 +1,5 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2014 Phusion
+#  Copyright (c) 2010-2015 Phusion
 #
 #  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
 #
@@ -65,9 +65,10 @@ APACHE2_MODULE_CXXFLAGS =
   "-Iext -Iext/common #{PlatformInfo.apache2_module_cxxflags} " <<
   "#{EXTRA_CXXFLAGS}"
 
-APACHE2_MODULE_BOOST_OXT_LIBRARY = define_libboost_oxt_task("apache2",
-  APACHE2_OUTPUT_DIR + "module_libboost_oxt",
-  PlatformInfo.apache2_module_cflags)
+APACHE2_MODULE_BOOST_OXT_LIBRARY, APACHE2_MODULE_BOOST_OXT_LINKARG =
+  define_libboost_oxt_task("apache2",
+    APACHE2_OUTPUT_DIR + "module_libboost_oxt",
+    PlatformInfo.apache2_module_cflags)
 APACHE2_MODULE_COMMON_LIBRARIES  = COMMON_LIBRARY.
   only(:base, 'ApplicationPool2/AppTypes.o',
     'Utils/MD5.o', 'Utils/modp_b64.o').
@@ -126,7 +127,7 @@ file APACHE2_MODULE => dependencies do
   linkflags =
     "#{EXTRA_PRE_CXX_LDFLAGS} " <<
     "#{APACHE2_MODULE_COMMON_LIBRARIES.join(' ')} " <<
-    "#{APACHE2_MODULE_BOOST_OXT_LIBRARY} " <<
+    "#{APACHE2_MODULE_BOOST_OXT_LINKARG} " <<
     "#{PlatformInfo.apache2_module_cxx_ldflags} " <<
     "#{PlatformInfo.portability_cxx_ldflags} " <<
     "#{EXTRA_CXX_LDFLAGS} "

data/build/common_library.rb

@@ -1,5 +1,5 @@
 #  Phusion Passenger - https://www.phusionpassenger.com/
-#  Copyright (c) 2010-2013 Phusion
+#  Copyright (c) 2010-2015 Phusion
 #
 #  "Phusion Passenger" is a trademark of Hongli Lai & Ninh Bui.
 #
@@ -83,7 +83,13 @@ def define_libboost_oxt_task(namespace, output_dir, extra_compiler_flags = nil)
     sh "rm -rf #{output_file} #{output_dir}"
   end
 
-  return output_file
+  if OPTIMIZE && LTO
+    # Clang -flto does not support static libraries containing
+    # .o files that are compiled with -flto themselves.
+    [output_file, Dir["#{output_dir}/*/*.o"].join(" ")]
+  else
+    [output_file, output_file]
+  end
 end
 
 
@@ -103,8 +109,12 @@ if USE_VENDORED_LIBEV
     "ext/libev/Makefile.am"
   ]
   file LIBEV_OUTPUT_DIR + "Makefile" => dependencies do
-    cc = PlatformInfo.cc
-    cxx = PlatformInfo.cxx
+    cc = CC
+    cxx = CXX
+    if OPTIMIZE && LTO
+      cc = "#{cc} -flto"
+      cxx = "#{cxx} -flto"
+    end
     # Disable all warnings: http://pod.tst.eu/http://cvs.schmorp.de/libev/ev.pod#COMPILER_WARNINGS
     cflags = "#{EXTRA_CFLAGS} -w"
     sh "mkdir -p #{LIBEV_OUTPUT_DIR}" if !File.directory?(LIBEV_OUTPUT_DIR)
@@ -157,8 +167,12 @@ if USE_VENDORED_LIBEIO
     "ext/libeio/Makefile.am"
   ]
   file LIBEIO_OUTPUT_DIR + "Makefile" => dependencies do
-    cc = PlatformInfo.cc
-    cxx = PlatformInfo.cxx
+    cc = CC
+    cxx = CXX
+    if OPTIMIZE && LTO
+      cc = "#{cc} -flto"
+      cxx = "#{cxx} -flto"
+    end
     # Disable all warnings. The author has a clear standpoint on that:
     # http://pod.tst.eu/http://cvs.schmorp.de/libev/ev.pod#COMPILER_WARNINGS
     cflags = "#{EXTRA_CFLAGS} -w"
@@ -215,6 +229,7 @@ end
 libboost_oxt_cflags = ""
 libboost_oxt_cflags << " #{PlatformInfo.adress_sanitizer_flag}" if USE_ASAN
 libboost_oxt_cflags.strip!
-LIBBOOST_OXT = define_libboost_oxt_task("common", COMMON_OUTPUT_DIR + "libboost_oxt", libboost_oxt_cflags)
+LIBBOOST_OXT, LIBBOOST_OXT_LINKARG =
+  define_libboost_oxt_task("common", COMMON_OUTPUT_DIR + "libboost_oxt", libboost_oxt_cflags)
 COMMON_LIBRARY.enable_optimizations!(LTO) if OPTIMIZE
 COMMON_LIBRARY.define_tasks(libboost_oxt_cflags)

data/build/cxx_tests.rb

@@ -175,9 +175,6 @@ TEST_CXX_OBJECTS = {
   'test/cxx/EventedClientTest.o' => %w(
     test/cxx/EventedClientTest.cpp
     ext/common/EventedClient.h),
-  'test/cxx/EventedBufferedInput.o' => %w(
-    test/cxx/EventedBufferedInputTest.cpp
-    ext/common/EventedBufferedInput.h),
   'test/cxx/MessageServerTest.o' => %w(
     test/cxx/MessageServerTest.cpp
     ext/common/Logging.h

data/build/misc.rb

@@ -198,7 +198,7 @@ task :compile_app => dependencies do
       "-Iext -Iext/common #{LIBEV_CFLAGS} #{LIBEIO_CFLAGS} " <<
       "#{EXTRA_CXXFLAGS} " <<
       "#{COMMON_LIBRARY.link_objects_as_string} " <<
-      "#{LIBBOOST_OXT} " <<
+      "#{LIBBOOST_OXT_LINKARG} " <<
       "#{LIBEV_LIBS} " <<
       "#{LIBEIO_LIBS} " <<
       "#{PlatformInfo.portability_cxx_ldflags} " <<

data/dev/parse_file_descriptor_log

@@ -0,0 +1,119 @@
+#!/usr/bin/env ruby
+# Parses a file descriptor log as produced by Passenger,
+# and display the file descriptors that are still open
+# according to the log.
+
+class ParserApp
+  Agent = Struct.new(:name, :fds)
+  Entry = Struct.new(:source, :purpose)
+
+  def initialize(path)
+    @io = File.open(path, "r")
+    @agents = {}
+  end
+
+  def close
+    @io.close
+  end
+
+  def analyze
+    @lineno = 1
+    while !@io.eof?
+      line = @io.readline.strip
+      pid, source, message = parse_line(line)
+
+      case message
+      when /^Starting agent: (.+)$/
+        agent_name = $1
+        if (old_pid = find_agent(agent_name))
+          warn "#{agent_name} restarted"
+          @agents.delete(old_pid)
+        end
+        @agents[pid] = Agent.new(agent_name, {})
+
+      when /^File descriptor opened: (.+)/
+        fd = $1.to_i
+        if agent = @agents[pid]
+          if agent.fds.has_key?(fd)
+            warn "FD #{fd} already opened"
+          end
+          agent.fds[fd] = Entry.new(source)
+        else
+          warn "No agent information about #{pid}"
+        end
+
+      when /^File descriptor closed: (.+)/
+        fd = $1.to_i
+        if agent = @agents[pid]
+          if agent.fds.has_key?(fd)
+            agent.fds.delete(fd)
+          else
+            warn "FD #{fd} not opened"
+          end
+        else
+          warn "No agent information about #{pid}"
+        end
+
+      when /^File descriptor purpose: (.+?): (.+)/
+        fd = $1.to_i
+        purpose = $2
+        if agent = @agents[pid]
+          if entry = agent.fds[fd]
+            entry.purpose = purpose
+          else
+            warn "FD #{fd} not opened"
+          end
+        else
+          warn "No agent information about #{pid}"
+        end
+      end
+
+      @lineno += 1
+    end
+  rescue EOFError
+  end
+
+  def report
+    @agents.each_pair do |pid, agent|
+      puts
+      puts "#{pid}: #{agent.name}"
+      puts("-" * 80)
+      agent.fds.keys.sort.each do |fd|
+        entry = agent.fds[fd]
+        printf "%-5d  %-30s  %s\n", fd, entry.source, entry.purpose
+      end
+    end
+  end
+
+private
+  def parse_line(line)
+    if line =~ /^\[ (.+?) \]: (.+)/
+      info = $1
+      message = $2
+      fragments = info.split(" ")
+      pid = fragments[2].sub(/\/.*/, '')
+      source = fragments.last
+      [pid, source, message]
+    else
+      nil
+    end
+  end
+
+  def find_agent(name)
+    @agents.each_pair do |pid, agent|
+      if agent.name == name
+        return pid
+      end
+    end
+    nil
+  end
+
+  def warn(message)
+    STDERR.puts "Warning:#{@lineno}: #{message}"
+  end
+end
+
+app = ParserApp.new(ARGV[0])
+app.analyze
+app.report
+app.close

data/doc/CloudLicensingConfiguration.html

@@ -0,0 +1,387 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Cloud Licensing Configuration</title>
+    <!-- Le HTML5 shim, for IE6-8 support of HTML elements -->
+    <!--[if lt IE 9]>
+      <script src="https://html5shim.googlecode.com/svn/trunk/html5.js" type="text/javascript"></script>
+    <![endif]-->
+    <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,600,700,400italic,600italic,700italic" rel="stylesheet" type="text/css">
+    <style type="text/css">
+      /*!
+ * Bootstrap v3.3.0 (http://getbootstrap.com)
+ * Copyright 2011-2014 Twitter, Inc.
+ * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)
+ */
+
+/*!
+ * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=572bbf800700ea752a72)
+ * Config saved to config.json and https://gist.github.com/572bbf800700ea752a72
+ *//*! normalize.css v3.0.2 | MIT License | git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace, monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html input[type="button"],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}input{line-height:normal}input[type="checkbox"],input[type="radio"]{box-sizing:border-box;padding:0}input[type="number"]::-webkit-inner-spin-button,input[type="number"]::-webkit-outer-spin-button{height:auto}input[type="search"]{-webkit-appearance:textfield;-moz-box-sizing:content-box;-webkit-box-sizing:content-box;box-sizing:content-box}input[type="search"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}fieldset{border:1px solid #c0c0c0;margin:0 2px;padding:0.35em 0.625em 0.75em}legend{border:0;padding:0}textarea{overflow:auto}optgroup{font-weight:bold}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}/*! Source: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css */@media print{*,*:before,*:after{background:transparent !important;color:#000 !important;box-shadow:none !important;text-shadow:none !important}a,a:visited{text-decoration:underline}a[href]:after{content:" (" attr(href) ")"}abbr[title]:after{content:" (" attr(title) ")"}a[href^="#"]:after,a[href^="javascript:"]:after{content:""}pre,blockquote{border:1px solid #999;page-break-inside:avoid}thead{display:table-header-group}tr,img{page-break-inside:avoid}img{max-width:100% !important}p,h2,h3{orphans:3;widows:3}h2,h3{page-break-after:avoid}select{background:#fff !important}.navbar{display:none}.btn>.caret,.dropup>.btn>.caret{border-top-color:#000 !important}.label{border:1px solid #000}.table{border-collapse:collapse !important}.table td,.table th{background-color:#fff !important}.table-bordered th,.table-bordered td{border:1px solid #ddd !important}}*{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}*:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}html{font-size:10px;-webkit-tap-highlight-color:rgba(0,0,0,0)}body{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;line-height:1.42857143;color:#333;background-color:#fff}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a{color:#428bca;text-decoration:none}a:hover,a:focus{color:#2a6496;text-decoration:underline}a:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}figure{margin:0}img{vertical-align:middle}.img-responsive{display:block;max-width:100%;height:auto}.img-rounded{border-radius:6px}.img-thumbnail{padding:4px;line-height:1.42857143;background-color:#fff;border:1px solid #ddd;border-radius:4px;-webkit-transition:all .2s ease-in-out;-o-transition:all .2s ease-in-out;transition:all .2s ease-in-out;display:inline-block;max-width:100%;height:auto}.img-circle{border-radius:50%}hr{margin-top:20px;margin-bottom:20px;border:0;border-top:1px solid #eee}.sr-only{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip:rect(0, 0, 0, 0);border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:auto;margin:0;overflow:visible;clip:auto}h1,h2,h3,h4,h5,h6,.h1,.h2,.h3,.h4,.h5,.h6{font-family:inherit;font-weight:500;line-height:1.1;color:inherit}h1 small,h2 small,h3 small,h4 small,h5 small,h6 small,.h1 small,.h2 small,.h3 small,.h4 small,.h5 small,.h6 small,h1 .small,h2 .small,h3 .small,h4 .small,h5 .small,h6 .small,.h1 .small,.h2 .small,.h3 .small,.h4 .small,.h5 .small,.h6 .small{font-weight:normal;line-height:1;color:#777}h1,.h1,h2,.h2,h3,.h3{margin-top:20px;margin-bottom:10px}h1 small,.h1 small,h2 small,.h2 small,h3 small,.h3 small,h1 .small,.h1 .small,h2 .small,.h2 .small,h3 .small,.h3 .small{font-size:65%}h4,.h4,h5,.h5,h6,.h6{margin-top:10px;margin-bottom:10px}h4 small,.h4 small,h5 small,.h5 small,h6 small,.h6 small,h4 .small,.h4 .small,h5 .small,.h5 .small,h6 .small,.h6 .small{font-size:75%}h1,.h1{font-size:36px}h2,.h2{font-size:30px}h3,.h3{font-size:24px}h4,.h4{font-size:18px}h5,.h5{font-size:14px}h6,.h6{font-size:12px}p{margin:0 0 10px}.lead{margin-bottom:20px;font-size:16px;font-weight:300;line-height:1.4}@media (min-width:768px){.lead{font-size:21px}}small,.small{font-size:85%}mark,.mark{background-color:#fcf8e3;padding:.2em}.text-left{text-align:left}.text-right{text-align:right}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-transform:lowercase}.text-uppercase{text-transform:uppercase}.text-capitalize{text-transform:capitalize}.text-muted{color:#777}.text-primary{color:#428bca}a.text-primary:hover{color:#3071a9}.text-success{color:#3c763d}a.text-success:hover{color:#2b542c}.text-info{color:#31708f}a.text-info:hover{color:#245269}.text-warning{color:#8a6d3b}a.text-warning:hover{color:#66512c}.text-danger{color:#a94442}a.text-danger:hover{color:#843534}.bg-primary{color:#fff;background-color:#428bca}a.bg-primary:hover{background-color:#3071a9}.bg-success{background-color:#dff0d8}a.bg-success:hover{background-color:#c1e2b3}.bg-info{background-color:#d9edf7}a.bg-info:hover{background-color:#afd9ee}.bg-warning{background-color:#fcf8e3}a.bg-warning:hover{background-color:#f7ecb5}.bg-danger{background-color:#f2dede}a.bg-danger:hover{background-color:#e4b9b9}.page-header{padding-bottom:9px;margin:40px 0 20px;border-bottom:1px solid #eee}ul,ol{margin-top:0;margin-bottom:10px}ul ul,ol ul,ul ol,ol ol{margin-bottom:0}.list-unstyled{padding-left:0;list-style:none}.list-inline{padding-left:0;list-style:none;margin-left:-5px}.list-inline>li{display:inline-block;padding-left:5px;padding-right:5px}dl{margin-top:0;margin-bottom:20px}dt,dd{line-height:1.42857143}dt{font-weight:bold}dd{margin-left:0}@media (min-width:768px){.dl-horizontal dt{float:left;width:160px;clear:left;text-align:right;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.dl-horizontal dd{margin-left:180px}}abbr[title],abbr[data-original-title]{cursor:help;border-bottom:1px dotted #777}.initialism{font-size:90%;text-transform:uppercase}blockquote{padding:10px 20px;margin:0 0 20px;font-size:17.5px;border-left:5px solid #eee}blockquote p:last-child,blockquote ul:last-child,blockquote ol:last-child{margin-bottom:0}blockquote footer,blockquote small,blockquote .small{display:block;font-size:80%;line-height:1.42857143;color:#777}blockquote footer:before,blockquote small:before,blockquote .small:before{content:'\2014 \00A0'}.blockquote-reverse,blockquote.pull-right{padding-right:15px;padding-left:0;border-right:5px solid #eee;border-left:0;text-align:right}.blockquote-reverse footer:before,blockquote.pull-right footer:before,.blockquote-reverse small:before,blockquote.pull-right small:before,.blockquote-reverse .small:before,blockquote.pull-right .small:before{content:''}.blockquote-reverse footer:after,blockquote.pull-right footer:after,.blockquote-reverse small:after,blockquote.pull-right small:after,.blockquote-reverse .small:after,blockquote.pull-right .small:after{content:'\00A0 \2014'}address{margin-bottom:20px;font-style:normal;line-height:1.42857143}code,kbd,pre,samp{font-family:Menlo,Monaco,Consolas,"Courier New",monospace}code{padding:2px 4px;font-size:90%;color:#c7254e;background-color:#f9f2f4;border-radius:4px}kbd{padding:2px 4px;font-size:90%;color:#fff;background-color:#333;border-radius:3px;box-shadow:inset 0 -1px 0 rgba(0,0,0,0.25)}kbd kbd{padding:0;font-size:100%;font-weight:bold;box-shadow:none}pre{display:block;padding:9.5px;margin:0 0 10px;font-size:13px;line-height:1.42857143;word-break:break-all;word-wrap:break-word;color:#333;background-color:#f5f5f5;border:1px solid #ccc;border-radius:4px}pre code{padding:0;font-size:inherit;color:inherit;white-space:pre-wrap;background-color:transparent;border-radius:0}.pre-scrollable{max-height:340px;overflow-y:scroll}table{background-color:transparent}caption{padding-top:8px;padding-bottom:8px;color:#777;text-align:left}th{text-align:left}.table{width:100%;max-width:100%;margin-bottom:20px}.table>thead>tr>th,.table>tbody>tr>th,.table>tfoot>tr>th,.table>thead>tr>td,.table>tbody>tr>td,.table>tfoot>tr>td{padding:8px;line-height:1.42857143;vertical-align:top;border-top:1px solid #ddd}.table>thead>tr>th{vertical-align:bottom;border-bottom:2px solid #ddd}.table>caption+thead>tr:first-child>th,.table>colgroup+thead>tr:first-child>th,.table>thead:first-child>tr:first-child>th,.table>caption+thead>tr:first-child>td,.table>colgroup+thead>tr:first-child>td,.table>thead:first-child>tr:first-child>td{border-top:0}.table>tbody+tbody{border-top:2px solid #ddd}.table .table{background-color:#fff}.table-condensed>thead>tr>th,.table-condensed>tbody>tr>th,.table-condensed>tfoot>tr>th,.table-condensed>thead>tr>td,.table-condensed>tbody>tr>td,.table-condensed>tfoot>tr>td{padding:5px}.table-bordered{border:1px solid #ddd}.table-bordered>thead>tr>th,.table-bordered>tbody>tr>th,.table-bordered>tfoot>tr>th,.table-bordered>thead>tr>td,.table-bordered>tbody>tr>td,.table-bordered>tfoot>tr>td{border:1px solid #ddd}.table-bordered>thead>tr>th,.table-bordered>thead>tr>td{border-bottom-width:2px}.table-striped>tbody>tr:nth-child(odd){background-color:#f9f9f9}.table-hover>tbody>tr:hover{background-color:#f5f5f5}table col[class*="col-"]{position:static;float:none;display:table-column}table td[class*="col-"],table th[class*="col-"]{position:static;float:none;display:table-cell}.table>thead>tr>td.active,.table>tbody>tr>td.active,.table>tfoot>tr>td.active,.table>thead>tr>th.active,.table>tbody>tr>th.active,.table>tfoot>tr>th.active,.table>thead>tr.active>td,.table>tbody>tr.active>td,.table>tfoot>tr.active>td,.table>thead>tr.active>th,.table>tbody>tr.active>th,.table>tfoot>tr.active>th{background-color:#f5f5f5}.table-hover>tbody>tr>td.active:hover,.table-hover>tbody>tr>th.active:hover,.table-hover>tbody>tr.active:hover>td,.table-hover>tbody>tr:hover>.active,.table-hover>tbody>tr.active:hover>th{background-color:#e8e8e8}.table>thead>tr>td.success,.table>tbody>tr>td.success,.table>tfoot>tr>td.success,.table>thead>tr>th.success,.table>tbody>tr>th.success,.table>tfoot>tr>th.success,.table>thead>tr.success>td,.table>tbody>tr.success>td,.table>tfoot>tr.success>td,.table>thead>tr.success>th,.table>tbody>tr.success>th,.table>tfoot>tr.success>th{background-color:#dff0d8}.table-hover>tbody>tr>td.success:hover,.table-hover>tbody>tr>th.success:hover,.table-hover>tbody>tr.success:hover>td,.table-hover>tbody>tr:hover>.success,.table-hover>tbody>tr.success:hover>th{background-color:#d0e9c6}.table>thead>tr>td.info,.table>tbody>tr>td.info,.table>tfoot>tr>td.info,.table>thead>tr>th.info,.table>tbody>tr>th.info,.table>tfoot>tr>th.info,.table>thead>tr.info>td,.table>tbody>tr.info>td,.table>tfoot>tr.info>td,.table>thead>tr.info>th,.table>tbody>tr.info>th,.table>tfoot>tr.info>th{background-color:#d9edf7}.table-hover>tbody>tr>td.info:hover,.table-hover>tbody>tr>th.info:hover,.table-hover>tbody>tr.info:hover>td,.table-hover>tbody>tr:hover>.info,.table-hover>tbody>tr.info:hover>th{background-color:#c4e3f3}.table>thead>tr>td.warning,.table>tbody>tr>td.warning,.table>tfoot>tr>td.warning,.table>thead>tr>th.warning,.table>tbody>tr>th.warning,.table>tfoot>tr>th.warning,.table>thead>tr.warning>td,.table>tbody>tr.warning>td,.table>tfoot>tr.warning>td,.table>thead>tr.warning>th,.table>tbody>tr.warning>th,.table>tfoot>tr.warning>th{background-color:#fcf8e3}.table-hover>tbody>tr>td.warning:hover,.table-hover>tbody>tr>th.warning:hover,.table-hover>tbody>tr.warning:hover>td,.table-hover>tbody>tr:hover>.warning,.table-hover>tbody>tr.warning:hover>th{background-color:#faf2cc}.table>thead>tr>td.danger,.table>tbody>tr>td.danger,.table>tfoot>tr>td.danger,.table>thead>tr>th.danger,.table>tbody>tr>th.danger,.table>tfoot>tr>th.danger,.table>thead>tr.danger>td,.table>tbody>tr.danger>td,.table>tfoot>tr.danger>td,.table>thead>tr.danger>th,.table>tbody>tr.danger>th,.table>tfoot>tr.danger>th{background-color:#f2dede}.table-hover>tbody>tr>td.danger:hover,.table-hover>tbody>tr>th.danger:hover,.table-hover>tbody>tr.danger:hover>td,.table-hover>tbody>tr:hover>.danger,.table-hover>tbody>tr.danger:hover>th{background-color:#ebcccc}.table-responsive{overflow-x:auto;min-height:0.01%}@media screen and (max-width:767px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar;border:1px solid #ddd}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table-responsive>.table>tbody>tr>th,.table-responsive>.table>tfoot>tr>th,.table-responsive>.table>thead>tr>td,.table-responsive>.table>tbody>tr>td,.table-responsive>.table>tfoot>tr>td{white-space:nowrap}.table-responsive>.table-bordered{border:0}.table-responsive>.table-bordered>thead>tr>th:first-child,.table-responsive>.table-bordered>tbody>tr>th:first-child,.table-responsive>.table-bordered>tfoot>tr>th:first-child,.table-responsive>.table-bordered>thead>tr>td:first-child,.table-responsive>.table-bordered>tbody>tr>td:first-child,.table-responsive>.table-bordered>tfoot>tr>td:first-child{border-left:0}.table-responsive>.table-bordered>thead>tr>th:last-child,.table-responsive>.table-bordered>tbody>tr>th:last-child,.table-responsive>.table-bordered>tfoot>tr>th:last-child,.table-responsive>.table-bordered>thead>tr>td:last-child,.table-responsive>.table-bordered>tbody>tr>td:last-child,.table-responsive>.table-bordered>tfoot>tr>td:last-child{border-right:0}.table-responsive>.table-bordered>tbody>tr:last-child>th,.table-responsive>.table-bordered>tfoot>tr:last-child>th,.table-responsive>.table-bordered>tbody>tr:last-child>td,.table-responsive>.table-bordered>tfoot>tr:last-child>td{border-bottom:0}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;margin-bottom:20px;font-size:21px;line-height:inherit;color:#333;border:0;border-bottom:1px solid #e5e5e5}label{display:inline-block;max-width:100%;margin-bottom:5px;font-weight:bold}input[type="search"]{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}input[type="radio"],input[type="checkbox"]{margin:4px 0 0;margin-top:1px \9;line-height:normal}input[type="file"]{display:block}input[type="range"]{display:block;width:100%}select[multiple],select[size]{height:auto}input[type="file"]:focus,input[type="radio"]:focus,input[type="checkbox"]:focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}output{display:block;padding-top:7px;font-size:14px;line-height:1.42857143;color:#555}.form-control{display:block;width:100%;height:34px;padding:6px 12px;font-size:14px;line-height:1.42857143;color:#555;background-color:#fff;background-image:none;border:1px solid #ccc;border-radius:4px;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);-webkit-transition:border-color ease-in-out .15s, box-shadow ease-in-out .15s;-o-transition:border-color ease-in-out .15s, box-shadow ease-in-out .15s;transition:border-color ease-in-out .15s, box-shadow ease-in-out .15s}.form-control:focus{border-color:#66afe9;outline:0;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,.075), 0 0 8px rgba(102, 175, 233, 0.6);box-shadow:inset 0 1px 1px rgba(0,0,0,.075), 0 0 8px rgba(102, 175, 233, 0.6)}.form-control::-moz-placeholder{color:#999;opacity:1}.form-control:-ms-input-placeholder{color:#999}.form-control::-webkit-input-placeholder{color:#999}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control{cursor:not-allowed;background-color:#eee;opacity:1}textarea.form-control{height:auto}input[type="search"]{-webkit-appearance:none}input[type="date"],input[type="time"],input[type="datetime-local"],input[type="month"]{line-height:34px;line-height:1.42857143 \0}input[type="date"].input-sm,input[type="time"].input-sm,input[type="datetime-local"].input-sm,input[type="month"].input-sm{line-height:30px;line-height:1.5 \0}input[type="date"].input-lg,input[type="time"].input-lg,input[type="datetime-local"].input-lg,input[type="month"].input-lg{line-height:46px;line-height:1.33 \0}_:-ms-fullscreen,:root input[type="date"],_:-ms-fullscreen,:root input[type="time"],_:-ms-fullscreen,:root input[type="datetime-local"],_:-ms-fullscreen,:root input[type="month"]{line-height:1.42857143}_:-ms-fullscreen.input-sm,:root input[type="date"].input-sm,_:-ms-fullscreen.input-sm,:root input[type="time"].input-sm,_:-ms-fullscreen.input-sm,:root input[type="datetime-local"].input-sm,_:-ms-fullscreen.input-sm,:root input[type="month"].input-sm{line-height:1.5}_:-ms-fullscreen.input-lg,:root input[type="date"].input-lg,_:-ms-fullscreen.input-lg,:root input[type="time"].input-lg,_:-ms-fullscreen.input-lg,:root input[type="datetime-local"].input-lg,_:-ms-fullscreen.input-lg,:root input[type="month"].input-lg{line-height:1.33}.form-group{margin-bottom:15px}.radio,.checkbox{position:relative;display:block;margin-top:10px;margin-bottom:10px}.radio label,.checkbox label{min-height:20px;padding-left:20px;margin-bottom:0;font-weight:normal;cursor:pointer}.radio input[type="radio"],.radio-inline input[type="radio"],.checkbox input[type="checkbox"],.checkbox-inline input[type="checkbox"]{position:absolute;margin-left:-20px;margin-top:4px \9}.radio+.radio,.checkbox+.checkbox{margin-top:-5px}.radio-inline,.checkbox-inline{display:inline-block;padding-left:20px;margin-bottom:0;vertical-align:middle;font-weight:normal;cursor:pointer}.radio-inline+.radio-inline,.checkbox-inline+.checkbox-inline{margin-top:0;margin-left:10px}input[type="radio"][disabled],input[type="checkbox"][disabled],input[type="radio"].disabled,input[type="checkbox"].disabled,fieldset[disabled] input[type="radio"],fieldset[disabled] input[type="checkbox"]{cursor:not-allowed}.radio-inline.disabled,.checkbox-inline.disabled,fieldset[disabled] .radio-inline,fieldset[disabled] .checkbox-inline{cursor:not-allowed}.radio.disabled label,.checkbox.disabled label,fieldset[disabled] .radio label,fieldset[disabled] .checkbox label{cursor:not-allowed}.form-control-static{padding-top:7px;padding-bottom:7px;margin-bottom:0}.form-control-static.input-lg,.form-control-static.input-sm{padding-left:0;padding-right:0}.input-sm,.form-group-sm .form-control{height:30px;padding:5px 10px;font-size:12px;line-height:1.5;border-radius:3px}select.input-sm,select.form-group-sm .form-control{height:30px;line-height:30px}textarea.input-sm,textarea.form-group-sm .form-control,select[multiple].input-sm,select[multiple].form-group-sm .form-control{height:auto}.input-lg,.form-group-lg .form-control{height:46px;padding:10px 16px;font-size:18px;line-height:1.33;border-radius:6px}select.input-lg,select.form-group-lg .form-control{height:46px;line-height:46px}textarea.input-lg,textarea.form-group-lg .form-control,select[multiple].input-lg,select[multiple].form-group-lg .form-control{height:auto}.has-feedback{position:relative}.has-feedback .form-control{padding-right:42.5px}.form-control-feedback{position:absolute;top:0;right:0;z-index:2;display:block;width:34px;height:34px;line-height:34px;text-align:center;pointer-events:none}.input-lg+.form-control-feedback{width:46px;height:46px;line-height:46px}.input-sm+.form-control-feedback{width:30px;height:30px;line-height:30px}.has-success .help-block,.has-success .control-label,.has-success .radio,.has-success .checkbox,.has-success .radio-inline,.has-success .checkbox-inline,.has-success.radio label,.has-success.checkbox label,.has-success.radio-inline label,.has-success.checkbox-inline label{color:#3c763d}.has-success .form-control{border-color:#3c763d;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);box-shadow:inset 0 1px 1px rgba(0,0,0,0.075)}.has-success .form-control:focus{border-color:#2b542c;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #67b168;box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #67b168}.has-success .input-group-addon{color:#3c763d;border-color:#3c763d;background-color:#dff0d8}.has-success .form-control-feedback{color:#3c763d}.has-warning .help-block,.has-warning .control-label,.has-warning .radio,.has-warning .checkbox,.has-warning .radio-inline,.has-warning .checkbox-inline,.has-warning.radio label,.has-warning.checkbox label,.has-warning.radio-inline label,.has-warning.checkbox-inline label{color:#8a6d3b}.has-warning .form-control{border-color:#8a6d3b;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);box-shadow:inset 0 1px 1px rgba(0,0,0,0.075)}.has-warning .form-control:focus{border-color:#66512c;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #c0a16b;box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #c0a16b}.has-warning .input-group-addon{color:#8a6d3b;border-color:#8a6d3b;background-color:#fcf8e3}.has-warning .form-control-feedback{color:#8a6d3b}.has-error .help-block,.has-error .control-label,.has-error .radio,.has-error .checkbox,.has-error .radio-inline,.has-error .checkbox-inline,.has-error.radio label,.has-error.checkbox label,.has-error.radio-inline label,.has-error.checkbox-inline label{color:#a94442}.has-error .form-control{border-color:#a94442;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);box-shadow:inset 0 1px 1px rgba(0,0,0,0.075)}.has-error .form-control:focus{border-color:#843534;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #ce8483;box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 6px #ce8483}.has-error .input-group-addon{color:#a94442;border-color:#a94442;background-color:#f2dede}.has-error .form-control-feedback{color:#a94442}.has-feedback label~.form-control-feedback{top:25px}.has-feedback label.sr-only~.form-control-feedback{top:0}.help-block{display:block;margin-top:5px;margin-bottom:10px;color:#737373}@media (min-width:768px){.form-inline .form-group{display:inline-block;margin-bottom:0;vertical-align:middle}.form-inline .form-control{display:inline-block;width:auto;vertical-align:middle}.form-inline .form-control-static{display:inline-block}.form-inline .input-group{display:inline-table;vertical-align:middle}.form-inline .input-group .input-group-addon,.form-inline .input-group .input-group-btn,.form-inline .input-group .form-control{width:auto}.form-inline .input-group>.form-control{width:100%}.form-inline .control-label{margin-bottom:0;vertical-align:middle}.form-inline .radio,.form-inline .checkbox{display:inline-block;margin-top:0;margin-bottom:0;vertical-align:middle}.form-inline .radio label,.form-inline .checkbox label{padding-left:0}.form-inline .radio input[type="radio"],.form-inline .checkbox input[type="checkbox"]{position:relative;margin-left:0}.form-inline .has-feedback .form-control-feedback{top:0}}.form-horizontal .radio,.form-horizontal .checkbox,.form-horizontal .radio-inline,.form-horizontal .checkbox-inline{margin-top:0;margin-bottom:0;padding-top:7px}.form-horizontal .radio,.form-horizontal .checkbox{min-height:27px}.form-horizontal .form-group{margin-left:-15px;margin-right:-15px}@media (min-width:768px){.form-horizontal .control-label{text-align:right;margin-bottom:0;padding-top:7px}}.form-horizontal .has-feedback .form-control-feedback{right:15px}@media (min-width:768px){.form-horizontal .form-group-lg .control-label{padding-top:14.3px}}@media (min-width:768px){.form-horizontal .form-group-sm .control-label{padding-top:6px}}.btn{display:inline-block;margin-bottom:0;font-weight:normal;text-align:center;vertical-align:middle;touch-action:manipulation;cursor:pointer;background-image:none;border:1px solid transparent;white-space:nowrap;padding:6px 12px;font-size:14px;line-height:1.42857143;border-radius:4px;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.btn:focus,.btn:active:focus,.btn.active:focus,.btn.focus,.btn:active.focus,.btn.active.focus{outline:thin dotted;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}.btn:hover,.btn:focus,.btn.focus{color:#333;text-decoration:none}.btn:active,.btn.active{outline:0;background-image:none;-webkit-box-shadow:inset 0 3px 5px rgba(0,0,0,0.125);box-shadow:inset 0 3px 5px rgba(0,0,0,0.125)}.btn.disabled,.btn[disabled],fieldset[disabled] .btn{cursor:not-allowed;pointer-events:none;opacity:.65;filter:alpha(opacity=65);-webkit-box-shadow:none;box-shadow:none}.btn-default{color:#333;background-color:#fff;border-color:#ccc}.btn-default:hover,.btn-default:focus,.btn-default.focus,.btn-default:active,.btn-default.active,.open>.dropdown-toggle.btn-default{color:#333;background-color:#e6e6e6;border-color:#adadad}.btn-default:active,.btn-default.active,.open>.dropdown-toggle.btn-default{background-image:none}.btn-default.disabled,.btn-default[disabled],fieldset[disabled] .btn-default,.btn-default.disabled:hover,.btn-default[disabled]:hover,fieldset[disabled] .btn-default:hover,.btn-default.disabled:focus,.btn-default[disabled]:focus,fieldset[disabled] .btn-default:focus,.btn-default.disabled.focus,.btn-default[disabled].focus,fieldset[disabled] .btn-default.focus,.btn-default.disabled:active,.btn-default[disabled]:active,fieldset[disabled] .btn-default:active,.btn-default.disabled.active,.btn-default[disabled].active,fieldset[disabled] .btn-default.active{background-color:#fff;border-color:#ccc}.btn-default .badge{color:#fff;background-color:#333}.btn-primary{color:#fff;background-color:#428bca;border-color:#357ebd}.btn-primary:hover,.btn-primary:focus,.btn-primary.focus,.btn-primary:active,.btn-primary.active,.open>.dropdown-toggle.btn-primary{color:#fff;background-color:#3071a9;border-color:#285e8e}.btn-primary:active,.btn-primary.active,.open>.dropdown-toggle.btn-primary{background-image:none}.btn-primary.disabled,.btn-primary[disabled],fieldset[disabled] .btn-primary,.btn-primary.disabled:hover,.btn-primary[disabled]:hover,fieldset[disabled] .btn-primary:hover,.btn-primary.disabled:focus,.btn-primary[disabled]:focus,fieldset[disabled] .btn-primary:focus,.btn-primary.disabled.focus,.btn-primary[disabled].focus,fieldset[disabled] .btn-primary.focus,.btn-primary.disabled:active,.btn-primary[disabled]:active,fieldset[disabled] .btn-primary:active,.btn-primary.disabled.active,.btn-primary[disabled].active,fieldset[disabled] .btn-primary.active{background-color:#428bca;border-color:#357ebd}.btn-primary .badge{color:#428bca;background-color:#fff}.btn-success{color:#fff;background-color:#5cb85c;border-color:#4cae4c}.btn-success:hover,.btn-success:focus,.btn-success.focus,.btn-success:active,.btn-success.active,.open>.dropdown-toggle.btn-success{color:#fff;background-color:#449d44;border-color:#398439}.btn-success:active,.btn-success.active,.open>.dropdown-toggle.btn-success{background-image:none}.btn-success.disabled,.btn-success[disabled],fieldset[disabled] .btn-success,.btn-success.disabled:hover,.btn-success[disabled]:hover,fieldset[disabled] .btn-success:hover,.btn-success.disabled:focus,.btn-success[disabled]:focus,fieldset[disabled] .btn-success:focus,.btn-success.disabled.focus,.btn-success[disabled].focus,fieldset[disabled] .btn-success.focus,.btn-success.disabled:active,.btn-success[disabled]:active,fieldset[disabled] .btn-success:active,.btn-success.disabled.active,.btn-success[disabled].active,fieldset[disabled] .btn-success.active{background-color:#5cb85c;border-color:#4cae4c}.btn-success .badge{color:#5cb85c;background-color:#fff}.btn-info{color:#fff;background-color:#5bc0de;border-color:#46b8da}.btn-info:hover,.btn-info:focus,.btn-info.focus,.btn-info:active,.btn-info.active,.open>.dropdown-toggle.btn-info{color:#fff;background-color:#31b0d5;border-color:#269abc}.btn-info:active,.btn-info.active,.open>.dropdown-toggle.btn-info{background-image:none}.btn-info.disabled,.btn-info[disabled],fieldset[disabled] .btn-info,.btn-info.disabled:hover,.btn-info[disabled]:hover,fieldset[disabled] .btn-info:hover,.btn-info.disabled:focus,.btn-info[disabled]:focus,fieldset[disabled] .btn-info:focus,.btn-info.disabled.focus,.btn-info[disabled].focus,fieldset[disabled] .btn-info.focus,.btn-info.disabled:active,.btn-info[disabled]:active,fieldset[disabled] .btn-info:active,.btn-info.disabled.active,.btn-info[disabled].active,fieldset[disabled] .btn-info.active{background-color:#5bc0de;border-color:#46b8da}.btn-info .badge{color:#5bc0de;background-color:#fff}.btn-warning{color:#fff;background-color:#f0ad4e;border-color:#eea236}.btn-warning:hover,.btn-warning:focus,.btn-warning.focus,.btn-warning:active,.btn-warning.active,.open>.dropdown-toggle.btn-warning{color:#fff;background-color:#ec971f;border-color:#d58512}.btn-warning:active,.btn-warning.active,.open>.dropdown-toggle.btn-warning{background-image:none}.btn-warning.disabled,.btn-warning[disabled],fieldset[disabled] .btn-warning,.btn-warning.disabled:hover,.btn-warning[disabled]:hover,fieldset[disabled] .btn-warning:hover,.btn-warning.disabled:focus,.btn-warning[disabled]:focus,fieldset[disabled] .btn-warning:focus,.btn-warning.disabled.focus,.btn-warning[disabled].focus,fieldset[disabled] .btn-warning.focus,.btn-warning.disabled:active,.btn-warning[disabled]:active,fieldset[disabled] .btn-warning:active,.btn-warning.disabled.active,.btn-warning[disabled].active,fieldset[disabled] .btn-warning.active{background-color:#f0ad4e;border-color:#eea236}.btn-warning .badge{color:#f0ad4e;background-color:#fff}.btn-danger{color:#fff;background-color:#d9534f;border-color:#d43f3a}.btn-danger:hover,.btn-danger:focus,.btn-danger.focus,.btn-danger:active,.btn-danger.active,.open>.dropdown-toggle.btn-danger{color:#fff;background-color:#c9302c;border-color:#ac2925}.btn-danger:active,.btn-danger.active,.open>.dropdown-toggle.btn-danger{background-image:none}.btn-danger.disabled,.btn-danger[disabled],fieldset[disabled] .btn-danger,.btn-danger.disabled:hover,.btn-danger[disabled]:hover,fieldset[disabled] .btn-danger:hover,.btn-danger.disabled:focus,.btn-danger[disabled]:focus,fieldset[disabled] .btn-danger:focus,.btn-danger.disabled.focus,.btn-danger[disabled].focus,fieldset[disabled] .btn-danger.focus,.btn-danger.disabled:active,.btn-danger[disabled]:active,fieldset[disabled] .btn-danger:active,.btn-danger.disabled.active,.btn-danger[disabled].active,fieldset[disabled] .btn-danger.active{background-color:#d9534f;border-color:#d43f3a}.btn-danger .badge{color:#d9534f;background-color:#fff}.btn-link{color:#428bca;font-weight:normal;border-radius:0}.btn-link,.btn-link:active,.btn-link.active,.btn-link[disabled],fieldset[disabled] .btn-link{background-color:transparent;-webkit-box-shadow:none;box-shadow:none}.btn-link,.btn-link:hover,.btn-link:focus,.btn-link:active{border-color:transparent}.btn-link:hover,.btn-link:focus{color:#2a6496;text-decoration:underline;background-color:transparent}.btn-link[disabled]:hover,fieldset[disabled] .btn-link:hover,.btn-link[disabled]:focus,fieldset[disabled] .btn-link:focus{color:#777;text-decoration:none}.btn-lg{padding:10px 16px;font-size:18px;line-height:1.33;border-radius:6px}.btn-sm{padding:5px 10px;font-size:12px;line-height:1.5;border-radius:3px}.btn-xs{padding:1px 5px;font-size:12px;line-height:1.5;border-radius:3px}.btn-block{display:block;width:100%}.btn-block+.btn-block{margin-top:5px}input[type="submit"].btn-block,input[type="reset"].btn-block,input[type="button"].btn-block{width:100%}.clearfix:before,.clearfix:after,.dl-horizontal dd:before,.dl-horizontal dd:after,.form-horizontal .form-group:before,.form-horizontal .form-group:after{content:" ";display:table}.clearfix:after,.dl-horizontal dd:after,.form-horizontal .form-group:after{clear:both}.center-block{display:block;margin-left:auto;margin-right:auto}.pull-right{float:right !important}.pull-left{float:left !important}.hide{display:none !important}.show{display:block !important}.invisible{visibility:hidden}.text-hide{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}.hidden{display:none !important;visibility:hidden !important}.affix{position:fixed}
+      
+      body {
+        font-family: "Source Sans Pro", sans-serif;
+        color: #444;
+      }
+
+      h1, h2, h3, h4, h5, h6, strong {
+        font-weight: 600;
+      }
+
+      h1, h2, h3, h4, h5, h6 {
+        color: #333;
+      }
+
+      @media (min-width: 768px) {
+        body {
+          font-size: 18px;
+        }
+
+        pre {
+          font-size: 14px;
+        }
+
+        h1 { font-size: 40px; }
+        h2 { font-size: 34px; }
+        h3 { font-size: 28px; }
+        h4 { font-size: 22px; }
+        h5 { font-size: 20px; }
+
+        p {
+          line-height: 1.55;
+        }
+      }
+
+      ul ul,
+      ul ol,
+      ol ol,
+      ol ul {
+        margin-bottom: 9px;
+      }
+
+      img {
+        max-width: 100%;
+      }
+
+      #container {
+        max-width: 800px;
+        margin-left: auto;
+        margin-right: auto;
+      }
+
+      @media(max-width: 830px) {
+        #container {
+          max-width: auto;
+          margin-left: 1em;
+          margin-right: 1em;
+        }
+      }
+
+      #top-vertical-container-margin {
+        margin-top: 20px;
+      }
+
+      #bottom-vertical-container-margin {
+        margin-bottom: 20px;
+      }
+
+      #logo {
+        text-align: center;
+        margin-bottom: 9px;
+      }
+
+      #title {
+        color: black;
+        text-align: center;
+        font-size: 300%;
+        line-height: 1em;
+        padding-bottom: 30px;
+        margin-bottom: 30px;
+        border-bottom: solid 1px #d0d0d0;
+      }
+
+      #toc {
+        margin-bottom: 20px;
+      }
+
+      #toc .level-2 {
+        margin-left: 18px;
+      }
+
+      #toc .level-3 {
+        margin-left: 36px;
+      }
+
+      footer {
+        border-top: solid 1px #d0d0d0;
+        margin-top: 9px;
+        padding-top: 9px;
+      }
+    </style>
+  </head>
+  <body>
+
+    <div id="container" class="container">
+      <div id="top-vertical-container-margin"></div>
+      <div id="logo">
+        <a href="http://www.phusion.nl/"><img src="images/phusion_banner_small.png" alt="Phusion docs" width="350" height="59"></a>
+      </div>
+      <div id="title">Cloud Licensing Configuration</div>
+
+      <div id="toc" style="display: none">
+        <div class="header"><strong>Table of contents</strong></div>
+      </div>
+
+      <h1>Phusion Passenger Enterprise cloud licensing configuration</h1>
+
+<p>When using the <a href="https://www.phusionpassenger.com/enterprise">Phusion Passenger Enterprise</a> cloud license, you are billed per server per hour. There is a mechanism which automatically reports usage to the Phusion licensing server. This is implemented by sending a certain HTTPS request to the Phusion Passenger website, https://www.phusionpassenger.com, every 15 minutes, on every server that Phusion Passenger Enterprise is running with a cloud license.</p>
+
+<p>Sometimes, this manner of reporting usage data is not desirable, e.g. because of organizational security policies. For example, the servers that run Phusion Passenger Enterprise might block all outgoing traffic, or the network intrusion detection system might flag the usage reports as suspicious. To address these concerns, Phusion Passenger Enterprise 4.0.54 and later provide the ability to report usage through periodic batch jobs.</p>
+
+<h2>Conceptual overview</h2>
+
+<p>The setup works as follows:</p>
+
+<ol>
+<li>Phusion Passenger Enterprise stores usage data on the local disk, but does not send them to the Phusion licensing server.</li>
+<li>On each server that runs Phusion Passenger Enterprise, a batch job A generates a package from the usage data that's stored on disk.</li>
+<li>All these packages are copied to another machine (let's call this "Reporter"), e.g. through SCP, USB stick, etc. The reporter machine may be any machine that you choose, as long as it can access the Phusion licensing server. The method of copying does not matter.</li>
+<li>On the reporter machine, a batch job B uploads all these packages to the Phusion licensing server.</li>
+</ol>
+
+
+<p><img src="images/cloud_licensing_batch_job.png" alt="Conceptual overview" /></p>
+
+<h2>Phase 1: setting up web servers</h2>
+
+<p>Follow these instructions on each server running Phusion Passenger Enterprise with a cloud license.</p>
+
+<ol>
+<li><p>Login to the web server and open a superuser shell. For example:</p>
+
+<pre><code>bash$ sudo -H bash
+</code></pre>
+
+<p>Or, if you're an RVM user, use rvmsudo instead of sudo:</p>
+
+<pre><code>bash$ rvmsudo -H bash
+</code></pre></li>
+<li><p>Add the following configuration to your Apache or Nginx configuration file:</p>
+
+<pre><code># Apache
+PassengerCtl licensing_data_points_auto_send false
+
+# Nginx
+passenger_ctl licensing_data_points_auto_send false;
+</code></pre>
+
+<p>Then restart Apache/Nginx. This configuration tells Phusion Passenger Enterprise not to automatically send usage data to the Phusion licensing server.</p></li>
+<li><p>Find out what user the PassengerHelperAgent process is running as.</p>
+
+<p>First, look for the PID of the PassengerHelperAgent process.</p>
+
+<pre><code>bash# passenger-memory-stats
+...
+------ Passenger processes ------
+PID    VMSize     Resident  Name
+---------------------------------
+11243  2405.8 MB  2.7 MB    PassengerHelperAgent
+...
+</code></pre>
+
+<p>Then use <code>ps</code> to determine what user it's running as. Usually, it's running as root.</p>
+
+<pre><code>bash# ps -o pid,user -p 11243
+  PID USER
+11245 root
+</code></pre></li>
+<li><p>Create a directory in which to store usage data packages. For example:</p>
+
+<pre><code>bash# mkdir /var/lib/passenger-enterprise-usage
+</code></pre>
+
+<p>Ensure that it's owned by the user that PassengerHelperAgent runs as, and make it owner-accessible only:</p>
+
+<pre><code>bash# chown root: /var/lib/passenger-enterprise-usage
+bash# chmod 700 /var/lib/passenger-enterprise-usage
+</code></pre></li>
+<li><p>Create a script inside the previous directory for generating a usage data package, and for copying packages to the reporter machine. This script is part of batch job A.</p>
+
+<pre><code>bash# touch /var/lib/passenger-enterprise-usage/script
+bash# chmod +x /var/lib/passenger-enterprise-usage/script
+bash# editor /var/lib/passenger-enterprise-usage/script
+</code></pre>
+
+<p>The script should contain:</p>
+
+<pre><code>#!/bin/bash
+set -e
+
+REPORTER_MACHINE=foo@reporter-machine-host-name
+HOSTNAME=`hostname`
+DATE=`date +%s`
+
+set -x
+passenger-config package-cloud-usage /var/lib/passenger-enterprise-usage/$HOSTNAME-$DATE.tar.gz
+scp /var/lib/passenger-enterprise-usage/*.tar.gz $REPORTER_MACHINE:passenger-enterprise-usage/
+rm -f /var/lib/passenger-enterprise-usage/*.tar.gz
+</code></pre>
+
+<p>Here, <code>foo@reporter-machine-host-name</code> specifies which reporter machine you want to copy the package to, and which username you want to use to login to the reporter machine. Replace this with an appropriate value.</p>
+
+<p><strong>Notes about SSH keys</strong>: don't forget to setup SSH keys so that the script can scp to the reporter machine. The script will be run as the user that PassengerHelperAgent is running as.</p>
+
+<p><strong>Notes about PATH</strong>: the above script assumes that the <code>passenger-config</code> command is in PATH. This is always the case if you installed Passenger Enterprise using Debian or RPM packages, but may not be the case if you installed it using RubyGems or tarball. If it's not in PATH, or when in doubt, you should specify the full path to passenger-config. You can find out where passenger-config is using <code>which</code>. For example:</p>
+
+<pre><code>bash# which passenger-config
+/opt/passenger-enterprise-x.x.x/bin/passenger-config
+</code></pre>
+
+<p>Then the script should call:</p>
+
+<pre><code>/opt/passenger-enterprise-x.x.x/bin/passenger-config package-cloud-usage ...
+</code></pre></li>
+<li><p>Open the crontab of the user that PassengerHelperAgent is running as. For example, if PassengerHelperAgent is running as root:</p>
+
+<pre><code>bash# sudo -u root -H crontab -e
+</code></pre></li>
+<li><p>Insert the following entry into the crontab, so that the script is invoked on the 1st of every month:</p>
+
+<pre><code>0 0 1 * * /var/lib/passenger-enterprise-usage/script
+</code></pre></li>
+<li><p>Ensure that <code>/var/lib/passenger-enterprise-usage/script</code> is run during system shutdown, as the user that PassengerHelperAgent is running as. On most Linux systems, this can be achieved by as follows:</p>
+
+<pre><code>bash# touch /etc/init.d/passenger-enterprise-cloud-license
+bash# chmod +x /etc/init.d/passenger-enterprise-cloud-license
+bash# ln -s /etc/init.d/passenger-enterprise-cloud-license /etc/rc0.d/K00passenger-enterprise-cloud-license
+bash# ln -s /etc/init.d/passenger-enterprise-cloud-license /etc/rc6.d/K00passenger-enterprise-cloud-license
+bash# editor /etc/init.d/passenger-enterprise-cloud-license
+</code></pre>
+
+<p>If PassengerHelperAgent is running as root, then <code>/etc/init.d/passenger-enterprise-cloud-license</code> should contain:</p>
+
+<pre><code>#!/bin/bash
+set -e
+exec /var/lib/passenger-enterprise-usage/script
+</code></pre>
+
+<p>If PassengerHelperAgent is not running as root, then it should contain:</p>
+
+<pre><code>#!/bin/bash
+set -e
+exec sudo -u PROPER_USERNAME_HERE -H /var/lib/passenger-enterprise-usage/script
+</code></pre>
+
+<p>Or, if you're an RVM user, use rvmsudo instead of sudo:</p>
+
+<pre><code>#!/bin/bash
+set -e
+exec rvmsudo -u PROPER_USERNAME_HERE -H /var/lib/passenger-enterprise-usage/script
+</code></pre>
+
+<p><strong>Note:</strong> If your operating system does not respect /etc/rcX.d, please consult your operating system's manual to learn how to run <code>/var/lib/passenger-enterprise-usage/script</code> during system shutdown.</p></li>
+</ol>
+
+
+<h2>Phase 2: setting up the "reporter" machine</h2>
+
+<p>In phase 1, you've setup web servers to scp usage data packages to the reporter machine, by logging into the reporter machine as a certain user. Let's call that user "foo".</p>
+
+<ol>
+<li><p>Login to the reporter machine as user foo.</p></li>
+<li><p>Create a directory that the web servers can scp into:</p>
+
+<pre><code>bash$ mkdir ~/passenger-enterprise-usage
+bash$ chmod 700 ~/passenger-enterprise-usage
+</code></pre></li>
+<li><p>Install the <a href="https://github.com/phusion/passenger-enterprise-bulk-send-cloud-usage">passenger-enterprise-bulk-send-cloud-usage</a> tool:</p>
+
+<pre><code>bash$ cd ~
+bash$ curl -L -O https://github.com/phusion/passenger-enterprise-bulk-send-cloud-usage/archive/master.tar.gz
+bash$ tar xzvf master.tar.gz &amp;&amp; rm master.tar.gz
+</code></pre></li>
+<li><p>Open the crontab of user foo:</p>
+
+<pre><code>bash$ crontab -e
+</code></pre></li>
+<li><p>Insert the following entry into the crontab to upload usage data packages on the 1st of every month:</p>
+
+<pre><code>0 1 1 * * ~/passenger-enterprise-bulk-send-cloud-usage/passenger-enterprise-bulk-send-cloud-usage --delete ~/passenger-enterprise-usage-*.tar.gz
+</code></pre>
+
+<p>This crontab entry is batch job B as described in the conceptual overview.</p>
+
+<p>Note that this command is run at 1 AM: 1 hour after the web servers have generated usage data packages and copied them over to the reporter machine. You <em>must</em> therefore ensure that the clocks on the web servers and the reporter machine are properly synchronized, and that they are set to the same time zone.</p></li>
+</ol>
+
+
+<h2>Phase 3: testing</h2>
+
+<p>Once the web servers and the reporter machine are all setup, you can test whether the setup works correctly.</p>
+
+<ol>
+<li><p>On each web server, run <code>/var/lib/passenger-enterprise-usage/script</code> as the user that PassengerHelperAgent runs as. For example, if PassengerHelperAgent is running as root:</p>
+
+<pre><code>sudo -u root -H /var/lib/passenger-enterprise-usage/script
+</code></pre>
+
+<p>Or, if you're an RVM user, use rvmsudo instead of sudo:</p>
+
+<pre><code>rvmsudo -u root -H /var/lib/passenger-enterprise-usage/script
+</code></pre>
+
+<p>You should see output like this:</p>
+
+<pre><code>+ passenger-config package-cloud-usage /var/lib/passenger-enterprise-usage/myhostname-1415377926.tar.gz
++ scp /var/lib/passenger-enterprise-usage/myhostname-1415377310.tar.gz hongli@localhost:passenger-enterprise-usage/
+myhostname-1415377310.tar.gz                     100%  605     0.6KB/s   00:00
++ rm -f /var/lib/passenger-enterprise-usage/myhostname-1415377310.tar.gz
+</code></pre></li>
+<li><p>Login to the reporter machine as the "foo" user (as described in phase 2) and run:</p>
+
+<pre><code>~/passenger-enterprise-bulk-send-cloud-usage-master/passenger-enterprise-bulk-send-cloud-usage --delete ~/passenger-enterprise-usage/*.tar.gz
+</code></pre>
+
+<p>You should see output like this:</p>
+
+<pre><code>---- Uploading ~/passenger-enterprise-usage/myhostname-1415377310.tar.gz -----
+Success!
+Deleting ~/passenger-enterprise-usage/myhostname-1415377310.tar.gz
+</code></pre></li>
+<li><p>Login to the <a href="https://www.phusionpassenger.com/orders">Phusion Passenger Enterprise Customer Area</a>. Under "Cloud subscription status", click "View usage details". Verify that usage has been properly registered.</p></li>
+</ol>
+
+
+      <footer>
+        <p>&copy; Phusion</p>
+      </footer>
+
+      <div id="bottom-vertical-container-margin"></div>
+    </div>
+
+    <script src="https://ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js"></script>
+    <script>
+      (function() {
+        var toc = $('#toc');
+        var i = 1;
+
+        $('h1,h2,h3').each(function() {
+          var level = parseInt(this.nodeName.match(/\d+/)[0]);
+          var id = "header_" + i;
+          var item = $('<div><a></a></div>').appendTo(toc);
+          item.addClass("level-" + level);
+          item.find('a').
+            text($(this).text()).
+            prop('href', '#' + id);
+          $(this).prop('id', id);
+          i++;
+        });
+
+        toc.show();
+      })();
+    </script>
+
+  </body>
+</html>