Oct 2 19:42:00.089678 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 19:42:00.090453 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:42:00.090469 kernel: BIOS-provided physical RAM map: Oct 2 19:42:00.090478 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 19:42:00.090487 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 19:42:00.090498 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 19:42:00.090515 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 19:42:00.090525 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 19:42:00.090537 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 19:42:00.090547 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 19:42:00.090558 kernel: NX (Execute Disable) protection: active Oct 2 19:42:00.090569 kernel: SMBIOS 2.7 present. Oct 2 19:42:00.090579 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 19:42:00.090590 kernel: Hypervisor detected: KVM Oct 2 19:42:00.090607 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 19:42:00.090619 kernel: kvm-clock: cpu 0, msr 51f8a001, primary cpu clock Oct 2 19:42:00.090631 kernel: kvm-clock: using sched offset of 6202010791 cycles Oct 2 19:42:00.090644 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 19:42:00.090655 kernel: tsc: Detected 2499.996 MHz processor Oct 2 19:42:00.090667 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 19:42:00.090682 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 19:42:00.090696 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 19:42:00.090761 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 19:42:00.090776 kernel: Using GB pages for direct mapping Oct 2 19:42:00.090791 kernel: ACPI: Early table checksum verification disabled Oct 2 19:42:00.090805 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 19:42:00.090819 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 19:42:00.090832 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 19:42:00.090845 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 19:42:00.090862 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 19:42:00.090875 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:42:00.090888 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 19:42:00.090902 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 19:42:00.090915 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 19:42:00.090928 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 19:42:00.090941 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 19:42:00.090954 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 19:42:00.090971 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 19:42:00.090984 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 19:42:00.090999 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 19:42:00.091018 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 19:42:00.091033 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 19:42:00.091047 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 19:42:00.091122 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 19:42:00.091196 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 19:42:00.091212 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 19:42:00.091226 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 19:42:00.093457 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 19:42:00.093484 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 19:42:00.093498 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 19:42:00.093512 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 19:42:00.093526 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 19:42:00.093547 kernel: Zone ranges: Oct 2 19:42:00.093562 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 19:42:00.093577 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 19:42:00.093591 kernel: Normal empty Oct 2 19:42:00.093605 kernel: Movable zone start for each node Oct 2 19:42:00.093619 kernel: Early memory node ranges Oct 2 19:42:00.093634 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 19:42:00.093648 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 19:42:00.093662 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 19:42:00.093679 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 19:42:00.093694 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 19:42:00.093708 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 19:42:00.093722 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 19:42:00.093736 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 19:42:00.093751 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 19:42:00.093764 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 19:42:00.093779 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 19:42:00.093793 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 19:42:00.093811 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 19:42:00.093825 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 19:42:00.093838 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 19:42:00.093852 kernel: TSC deadline timer available Oct 2 19:42:00.093866 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 19:42:00.093881 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 19:42:00.093895 kernel: Booting paravirtualized kernel on KVM Oct 2 19:42:00.093910 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 19:42:00.093925 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 19:42:00.093943 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 19:42:00.093956 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 19:42:00.093971 kernel: pcpu-alloc: [0] 0 1 Oct 2 19:42:00.093985 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 19:42:00.094007 kernel: kvm-guest: PV spinlocks enabled Oct 2 19:42:00.094022 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 19:42:00.094036 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 19:42:00.094051 kernel: Policy zone: DMA32 Oct 2 19:42:00.094068 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:42:00.094087 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 19:42:00.094112 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 19:42:00.094123 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 19:42:00.094135 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 19:42:00.094147 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 19:42:00.094161 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 19:42:00.094176 kernel: Kernel/User page tables isolation: enabled Oct 2 19:42:00.094189 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 19:42:00.094208 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 19:42:00.094222 kernel: rcu: Hierarchical RCU implementation. Oct 2 19:42:00.094323 kernel: rcu: RCU event tracing is enabled. Oct 2 19:42:00.094340 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 19:42:00.094397 kernel: Rude variant of Tasks RCU enabled. Oct 2 19:42:00.094416 kernel: Tracing variant of Tasks RCU enabled. Oct 2 19:42:00.094511 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 19:42:00.094530 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 19:42:00.094545 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 19:42:00.094674 kernel: random: crng init done Oct 2 19:42:00.094691 kernel: Console: colour VGA+ 80x25 Oct 2 19:42:00.094751 kernel: printk: console [ttyS0] enabled Oct 2 19:42:00.094767 kernel: ACPI: Core revision 20210730 Oct 2 19:42:00.094782 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 19:42:00.094794 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 19:42:00.094806 kernel: x2apic enabled Oct 2 19:42:00.094818 kernel: Switched APIC routing to physical x2apic. Oct 2 19:42:00.094831 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Oct 2 19:42:00.094847 kernel: Calibrating delay loop (skipped) preset value.. 4999.99 BogoMIPS (lpj=2499996) Oct 2 19:42:00.094860 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 19:42:00.094960 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 19:42:00.094976 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 19:42:00.095000 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 19:42:00.095017 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 19:42:00.095030 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 19:42:00.095044 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 19:42:00.095059 kernel: RETBleed: Vulnerable Oct 2 19:42:00.095072 kernel: Speculative Store Bypass: Vulnerable Oct 2 19:42:00.095088 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:42:00.095144 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 19:42:00.095156 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 19:42:00.095172 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 19:42:00.095192 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 19:42:00.095209 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 19:42:00.095225 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 19:42:00.095240 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 19:42:00.095255 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 19:42:00.095274 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 19:42:00.095289 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 19:42:00.095306 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 19:42:00.095321 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 19:42:00.095336 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 19:42:00.095352 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 19:42:00.095368 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 19:42:00.095383 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 19:42:00.095398 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 19:42:00.095413 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 19:42:00.095428 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 19:42:00.095443 kernel: Freeing SMP alternatives memory: 32K Oct 2 19:42:00.095461 kernel: pid_max: default: 32768 minimum: 301 Oct 2 19:42:00.095474 kernel: LSM: Security Framework initializing Oct 2 19:42:00.095486 kernel: SELinux: Initializing. Oct 2 19:42:00.095499 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:42:00.095512 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 19:42:00.095526 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 19:42:00.095539 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 19:42:00.095553 kernel: signal: max sigframe size: 3632 Oct 2 19:42:00.095637 kernel: rcu: Hierarchical SRCU implementation. Oct 2 19:42:00.095656 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 19:42:00.095674 kernel: smp: Bringing up secondary CPUs ... Oct 2 19:42:00.095687 kernel: x86: Booting SMP configuration: Oct 2 19:42:00.095701 kernel: .... node #0, CPUs: #1 Oct 2 19:42:00.095714 kernel: kvm-clock: cpu 1, msr 51f8a041, secondary cpu clock Oct 2 19:42:00.095727 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 19:42:00.095742 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 19:42:00.095756 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 19:42:00.095770 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 19:42:00.095783 kernel: smpboot: Max logical packages: 1 Oct 2 19:42:00.095799 kernel: smpboot: Total of 2 processors activated (9999.98 BogoMIPS) Oct 2 19:42:00.095813 kernel: devtmpfs: initialized Oct 2 19:42:00.095827 kernel: x86/mm: Memory block size: 128MB Oct 2 19:42:00.095841 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 19:42:00.095855 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 19:42:00.095869 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 19:42:00.095882 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 19:42:00.095896 kernel: audit: initializing netlink subsys (disabled) Oct 2 19:42:00.095911 kernel: audit: type=2000 audit(1696275719.250:1): state=initialized audit_enabled=0 res=1 Oct 2 19:42:00.095927 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 19:42:00.095941 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 19:42:00.095955 kernel: cpuidle: using governor menu Oct 2 19:42:00.095969 kernel: ACPI: bus type PCI registered Oct 2 19:42:00.096078 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 19:42:00.096106 kernel: dca service started, version 1.12.1 Oct 2 19:42:00.096122 kernel: PCI: Using configuration type 1 for base access Oct 2 19:42:00.096136 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 19:42:00.096150 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 19:42:00.096167 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 19:42:00.096182 kernel: ACPI: Added _OSI(Module Device) Oct 2 19:42:00.096196 kernel: ACPI: Added _OSI(Processor Device) Oct 2 19:42:00.096209 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 19:42:00.096223 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 19:42:00.096237 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 19:42:00.096251 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 19:42:00.096265 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 19:42:00.096279 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 19:42:00.096296 kernel: ACPI: Interpreter enabled Oct 2 19:42:00.096310 kernel: ACPI: PM: (supports S0 S5) Oct 2 19:42:00.096324 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 19:42:00.096338 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 19:42:00.096352 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 19:42:00.096367 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 19:42:00.096595 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 19:42:00.096725 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 19:42:00.096748 kernel: acpiphp: Slot [3] registered Oct 2 19:42:00.096763 kernel: acpiphp: Slot [4] registered Oct 2 19:42:00.096777 kernel: acpiphp: Slot [5] registered Oct 2 19:42:00.096792 kernel: acpiphp: Slot [6] registered Oct 2 19:42:00.096806 kernel: acpiphp: Slot [7] registered Oct 2 19:42:00.096820 kernel: acpiphp: Slot [8] registered Oct 2 19:42:00.096835 kernel: acpiphp: Slot [9] registered Oct 2 19:42:00.096850 kernel: acpiphp: Slot [10] registered Oct 2 19:42:00.096864 kernel: acpiphp: Slot [11] registered Oct 2 19:42:00.096882 kernel: acpiphp: Slot [12] registered Oct 2 19:42:00.096896 kernel: acpiphp: Slot [13] registered Oct 2 19:42:00.096911 kernel: acpiphp: Slot [14] registered Oct 2 19:42:00.096925 kernel: acpiphp: Slot [15] registered Oct 2 19:42:00.096940 kernel: acpiphp: Slot [16] registered Oct 2 19:42:00.096954 kernel: acpiphp: Slot [17] registered Oct 2 19:42:00.096969 kernel: acpiphp: Slot [18] registered Oct 2 19:42:00.096983 kernel: acpiphp: Slot [19] registered Oct 2 19:42:00.096997 kernel: acpiphp: Slot [20] registered Oct 2 19:42:00.097014 kernel: acpiphp: Slot [21] registered Oct 2 19:42:00.097028 kernel: acpiphp: Slot [22] registered Oct 2 19:42:00.097043 kernel: acpiphp: Slot [23] registered Oct 2 19:42:00.097057 kernel: acpiphp: Slot [24] registered Oct 2 19:42:00.097072 kernel: acpiphp: Slot [25] registered Oct 2 19:42:00.097087 kernel: acpiphp: Slot [26] registered Oct 2 19:42:00.097115 kernel: acpiphp: Slot [27] registered Oct 2 19:42:00.097128 kernel: acpiphp: Slot [28] registered Oct 2 19:42:00.097142 kernel: acpiphp: Slot [29] registered Oct 2 19:42:00.097156 kernel: acpiphp: Slot [30] registered Oct 2 19:42:00.097176 kernel: acpiphp: Slot [31] registered Oct 2 19:42:00.097190 kernel: PCI host bridge to bus 0000:00 Oct 2 19:42:00.097340 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 19:42:00.097452 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 19:42:00.097562 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 19:42:00.097671 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 19:42:00.097779 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 19:42:00.097921 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 19:42:00.098080 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 19:42:00.098296 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 19:42:00.098439 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 19:42:00.098624 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 19:42:00.098757 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 19:42:00.098881 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 19:42:00.099010 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 19:42:00.099153 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 19:42:00.099274 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 19:42:00.099397 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 19:42:00.099532 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 19:42:00.099661 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 19:42:00.099788 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 19:42:00.099919 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 19:42:00.100060 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 19:42:00.100204 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 19:42:00.100340 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 19:42:00.100470 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 19:42:00.100490 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 19:42:00.100510 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 19:42:00.100526 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 19:42:00.100541 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 19:42:00.100556 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 19:42:00.100571 kernel: iommu: Default domain type: Translated Oct 2 19:42:00.100586 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 19:42:00.100714 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 19:42:00.100842 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 19:42:00.101468 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 19:42:00.101526 kernel: vgaarb: loaded Oct 2 19:42:00.101542 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 19:42:00.101556 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 19:42:00.101569 kernel: PTP clock support registered Oct 2 19:42:00.101583 kernel: PCI: Using ACPI for IRQ routing Oct 2 19:42:00.101597 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 19:42:00.101613 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 19:42:00.101628 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 19:42:00.101645 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 19:42:00.101660 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 19:42:00.101675 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 19:42:00.101690 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 19:42:00.101706 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 19:42:00.101720 kernel: pnp: PnP ACPI init Oct 2 19:42:00.101735 kernel: pnp: PnP ACPI: found 5 devices Oct 2 19:42:00.101751 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 19:42:00.102128 kernel: NET: Registered PF_INET protocol family Oct 2 19:42:00.102153 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 19:42:00.102168 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 19:42:00.102183 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 19:42:00.102197 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 19:42:00.102211 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 19:42:00.102226 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 19:42:00.102276 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:42:00.102292 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 19:42:00.102306 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 19:42:00.102324 kernel: NET: Registered PF_XDP protocol family Oct 2 19:42:00.102476 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 19:42:00.103383 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 19:42:00.103524 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 19:42:00.103640 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 19:42:00.103775 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 19:42:00.103909 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 19:42:00.103933 kernel: PCI: CLS 0 bytes, default 64 Oct 2 19:42:00.103949 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 19:42:00.103965 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x24093623c91, max_idle_ns: 440795291220 ns Oct 2 19:42:00.103980 kernel: clocksource: Switched to clocksource tsc Oct 2 19:42:00.103995 kernel: Initialise system trusted keyrings Oct 2 19:42:00.104010 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 19:42:00.104025 kernel: Key type asymmetric registered Oct 2 19:42:00.104039 kernel: Asymmetric key parser 'x509' registered Oct 2 19:42:00.104054 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 19:42:00.104071 kernel: io scheduler mq-deadline registered Oct 2 19:42:00.104086 kernel: io scheduler kyber registered Oct 2 19:42:00.104114 kernel: io scheduler bfq registered Oct 2 19:42:00.104161 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 19:42:00.104176 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 19:42:00.104191 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 19:42:00.104206 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 19:42:00.104221 kernel: i8042: Warning: Keylock active Oct 2 19:42:00.104235 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 19:42:00.104672 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 19:42:00.105293 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 19:42:00.105956 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 19:42:00.106108 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T19:41:59 UTC (1696275719) Oct 2 19:42:00.106288 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 19:42:00.106310 kernel: intel_pstate: CPU model not supported Oct 2 19:42:00.106327 kernel: NET: Registered PF_INET6 protocol family Oct 2 19:42:00.106342 kernel: Segment Routing with IPv6 Oct 2 19:42:00.106361 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 19:42:00.106374 kernel: NET: Registered PF_PACKET protocol family Oct 2 19:42:00.106388 kernel: Key type dns_resolver registered Oct 2 19:42:00.106401 kernel: IPI shorthand broadcast: enabled Oct 2 19:42:00.106415 kernel: sched_clock: Marking stable (478841390, 387618622)->(1059566791, -193106779) Oct 2 19:42:00.106429 kernel: registered taskstats version 1 Oct 2 19:42:00.106443 kernel: Loading compiled-in X.509 certificates Oct 2 19:42:00.106457 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 19:42:00.106471 kernel: Key type .fscrypt registered Oct 2 19:42:00.106487 kernel: Key type fscrypt-provisioning registered Oct 2 19:42:00.106500 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 19:42:00.106513 kernel: ima: Allocated hash algorithm: sha1 Oct 2 19:42:00.106526 kernel: ima: No architecture policies found Oct 2 19:42:00.106539 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 19:42:00.106552 kernel: Write protecting the kernel read-only data: 28672k Oct 2 19:42:00.106565 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 19:42:00.106579 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 19:42:00.106593 kernel: Run /init as init process Oct 2 19:42:00.106610 kernel: with arguments: Oct 2 19:42:00.106624 kernel: /init Oct 2 19:42:00.106637 kernel: with environment: Oct 2 19:42:00.106650 kernel: HOME=/ Oct 2 19:42:00.106664 kernel: TERM=linux Oct 2 19:42:00.106676 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 19:42:00.106694 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:42:00.106715 systemd[1]: Detected virtualization amazon. Oct 2 19:42:00.106730 systemd[1]: Detected architecture x86-64. Oct 2 19:42:00.106744 systemd[1]: Running in initrd. Oct 2 19:42:00.106757 systemd[1]: No hostname configured, using default hostname. Oct 2 19:42:00.106774 systemd[1]: Hostname set to . Oct 2 19:42:00.106808 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:42:00.106827 systemd[1]: Queued start job for default target initrd.target. Oct 2 19:42:00.106843 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:42:00.106895 systemd[1]: Reached target cryptsetup.target. Oct 2 19:42:00.106909 systemd[1]: Reached target paths.target. Oct 2 19:42:00.106923 systemd[1]: Reached target slices.target. Oct 2 19:42:00.106937 systemd[1]: Reached target swap.target. Oct 2 19:42:00.106952 systemd[1]: Reached target timers.target. Oct 2 19:42:00.106967 systemd[1]: Listening on iscsid.socket. Oct 2 19:42:00.106988 systemd[1]: Listening on iscsiuio.socket. Oct 2 19:42:00.107006 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 19:42:00.107023 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 19:42:00.107041 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 19:42:00.107060 systemd[1]: Listening on systemd-journald.socket. Oct 2 19:42:00.107078 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:42:00.107107 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:42:00.107123 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:42:00.107139 systemd[1]: Reached target sockets.target. Oct 2 19:42:00.107158 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:42:00.107173 systemd[1]: Finished network-cleanup.service. Oct 2 19:42:00.107190 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 19:42:00.107207 systemd[1]: Starting systemd-journald.service... Oct 2 19:42:00.107224 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:42:00.107241 systemd[1]: Starting systemd-resolved.service... Oct 2 19:42:00.107259 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 19:42:00.107276 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:42:00.107293 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 19:42:00.107313 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 19:42:00.107335 systemd-journald[185]: Journal started Oct 2 19:42:00.107410 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2ff7c086b520bfd01192edc7d948a4) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:42:00.109132 systemd[1]: Started systemd-journald.service. Oct 2 19:42:00.125756 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 19:42:00.359670 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 19:42:00.359713 kernel: Bridge firewalling registered Oct 2 19:42:00.359739 kernel: SCSI subsystem initialized Oct 2 19:42:00.359755 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 19:42:00.359771 kernel: device-mapper: uevent: version 1.0.3 Oct 2 19:42:00.359790 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 19:42:00.187082 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 19:42:00.368150 kernel: audit: type=1130 audit(1696275720.358:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.241790 systemd-resolved[187]: Positive Trust Anchors: Oct 2 19:42:00.376599 kernel: audit: type=1130 audit(1696275720.368:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.368000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.241801 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:42:00.383361 kernel: audit: type=1130 audit(1696275720.375:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.241852 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:42:00.397288 kernel: audit: type=1130 audit(1696275720.383:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.245213 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 19:42:00.246739 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 19:42:00.368483 systemd[1]: Started systemd-resolved.service. Oct 2 19:42:00.370095 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:42:00.376921 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 19:42:00.384832 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 19:42:00.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.404336 systemd[1]: Reached target nss-lookup.target. Oct 2 19:42:00.411819 kernel: audit: type=1130 audit(1696275720.402:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.412747 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 19:42:00.414980 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:42:00.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.428833 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:42:00.437524 kernel: audit: type=1130 audit(1696275720.429:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.447550 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 19:42:00.458268 kernel: audit: type=1130 audit(1696275720.447:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.447000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.454919 systemd[1]: Starting dracut-cmdline.service... Oct 2 19:42:00.473595 dracut-cmdline[208]: dracut-dracut-053 Oct 2 19:42:00.484065 dracut-cmdline[208]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 19:42:00.630234 kernel: Loading iSCSI transport class v2.0-870. Oct 2 19:42:00.648131 kernel: iscsi: registered transport (tcp) Oct 2 19:42:00.721115 kernel: iscsi: registered transport (qla4xxx) Oct 2 19:42:00.721198 kernel: QLogic iSCSI HBA Driver Oct 2 19:42:00.769270 systemd[1]: Finished dracut-cmdline.service. Oct 2 19:42:00.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.772348 systemd[1]: Starting dracut-pre-udev.service... Oct 2 19:42:00.779565 kernel: audit: type=1130 audit(1696275720.770:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:00.830130 kernel: raid6: avx512x4 gen() 13580 MB/s Oct 2 19:42:00.847122 kernel: raid6: avx512x4 xor() 4666 MB/s Oct 2 19:42:00.865128 kernel: raid6: avx512x2 gen() 14705 MB/s Oct 2 19:42:00.882129 kernel: raid6: avx512x2 xor() 19022 MB/s Oct 2 19:42:00.899131 kernel: raid6: avx512x1 gen() 14405 MB/s Oct 2 19:42:00.917131 kernel: raid6: avx512x1 xor() 14086 MB/s Oct 2 19:42:00.935127 kernel: raid6: avx2x4 gen() 12600 MB/s Oct 2 19:42:00.953130 kernel: raid6: avx2x4 xor() 6082 MB/s Oct 2 19:42:00.971127 kernel: raid6: avx2x2 gen() 14768 MB/s Oct 2 19:42:00.989126 kernel: raid6: avx2x2 xor() 15470 MB/s Oct 2 19:42:01.006154 kernel: raid6: avx2x1 gen() 10684 MB/s Oct 2 19:42:01.024128 kernel: raid6: avx2x1 xor() 9579 MB/s Oct 2 19:42:01.042253 kernel: raid6: sse2x4 gen() 7290 MB/s Oct 2 19:42:01.062991 kernel: raid6: sse2x4 xor() 3675 MB/s Oct 2 19:42:01.079289 kernel: raid6: sse2x2 gen() 4555 MB/s Oct 2 19:42:01.097139 kernel: raid6: sse2x2 xor() 2554 MB/s Oct 2 19:42:01.117750 kernel: raid6: sse2x1 gen() 3057 MB/s Oct 2 19:42:01.135879 kernel: raid6: sse2x1 xor() 2712 MB/s Oct 2 19:42:01.135957 kernel: raid6: using algorithm avx2x2 gen() 14768 MB/s Oct 2 19:42:01.135975 kernel: raid6: .... xor() 15470 MB/s, rmw enabled Oct 2 19:42:01.140197 kernel: raid6: using avx512x2 recovery algorithm Oct 2 19:42:01.168318 kernel: xor: automatically using best checksumming function avx Oct 2 19:42:01.364133 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 19:42:01.379128 systemd[1]: Finished dracut-pre-udev.service. Oct 2 19:42:01.379000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.385000 audit: BPF prog-id=7 op=LOAD Oct 2 19:42:01.385000 audit: BPF prog-id=8 op=LOAD Oct 2 19:42:01.387119 kernel: audit: type=1130 audit(1696275721.379:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.387680 systemd[1]: Starting systemd-udevd.service... Oct 2 19:42:01.421581 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 19:42:01.440819 systemd[1]: Started systemd-udevd.service. Oct 2 19:42:01.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.475902 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 19:42:01.547822 dracut-pre-trigger[401]: rd.md=0: removing MD RAID activation Oct 2 19:42:01.687760 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 19:42:01.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.690062 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:42:01.853549 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:42:01.854000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:01.958403 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 19:42:01.958781 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 19:42:01.965227 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 19:42:01.972650 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 19:42:01.983566 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:4b:6e:fb:3e:e1 Oct 2 19:42:01.997681 (udev-worker)[445]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:42:02.020952 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 19:42:02.021315 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 19:42:02.024136 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 19:42:02.024197 kernel: AES CTR mode by8 optimization enabled Oct 2 19:42:02.032184 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 19:42:02.044601 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 19:42:02.044673 kernel: GPT:9289727 != 16777215 Oct 2 19:42:02.044699 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 19:42:02.044718 kernel: GPT:9289727 != 16777215 Oct 2 19:42:02.044735 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 19:42:02.044752 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:42:02.133132 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (445) Oct 2 19:42:02.188802 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 19:42:02.334908 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 19:42:02.335197 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 19:42:02.368299 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 19:42:02.385351 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:42:02.387088 systemd[1]: Starting disk-uuid.service... Oct 2 19:42:02.399452 disk-uuid[586]: Primary Header is updated. Oct 2 19:42:02.399452 disk-uuid[586]: Secondary Entries is updated. Oct 2 19:42:02.399452 disk-uuid[586]: Secondary Header is updated. Oct 2 19:42:02.411124 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:42:02.420126 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:42:02.425123 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:42:03.419123 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 19:42:03.420621 disk-uuid[587]: The operation has completed successfully. Oct 2 19:42:03.561843 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 19:42:03.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:03.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:03.561967 systemd[1]: Finished disk-uuid.service. Oct 2 19:42:03.574714 systemd[1]: Starting verity-setup.service... Oct 2 19:42:03.602361 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 19:42:03.706922 systemd[1]: Found device dev-mapper-usr.device. Oct 2 19:42:03.718887 systemd[1]: Mounting sysusr-usr.mount... Oct 2 19:42:03.727749 systemd[1]: Finished verity-setup.service. Oct 2 19:42:03.728000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:03.831780 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 19:42:03.832208 systemd[1]: Mounted sysusr-usr.mount. Oct 2 19:42:03.832773 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 19:42:03.833868 systemd[1]: Starting ignition-setup.service... Oct 2 19:42:03.840739 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 19:42:03.866703 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:42:03.866774 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:42:03.866792 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:42:03.877129 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:42:03.895251 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 19:42:03.920443 systemd[1]: Finished ignition-setup.service. Oct 2 19:42:03.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:03.925725 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 19:42:03.955402 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 19:42:03.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:03.958000 audit: BPF prog-id=9 op=LOAD Oct 2 19:42:03.961184 systemd[1]: Starting systemd-networkd.service... Oct 2 19:42:04.006581 systemd-networkd[1099]: lo: Link UP Oct 2 19:42:04.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.006592 systemd-networkd[1099]: lo: Gained carrier Oct 2 19:42:04.007341 systemd-networkd[1099]: Enumeration completed Oct 2 19:42:04.007453 systemd[1]: Started systemd-networkd.service. Oct 2 19:42:04.008394 systemd[1]: Reached target network.target. Oct 2 19:42:04.008685 systemd-networkd[1099]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:42:04.014350 systemd[1]: Starting iscsiuio.service... Oct 2 19:42:04.045755 systemd-networkd[1099]: eth0: Link UP Oct 2 19:42:04.045767 systemd-networkd[1099]: eth0: Gained carrier Oct 2 19:42:04.051152 systemd[1]: Started iscsiuio.service. Oct 2 19:42:04.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.052817 systemd[1]: Starting iscsid.service... Oct 2 19:42:04.060028 iscsid[1104]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:42:04.060028 iscsid[1104]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 19:42:04.060028 iscsid[1104]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 19:42:04.060028 iscsid[1104]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 19:42:04.060028 iscsid[1104]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 19:42:04.060028 iscsid[1104]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 19:42:04.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.067215 systemd[1]: Started iscsid.service. Oct 2 19:42:04.089328 systemd[1]: Starting dracut-initqueue.service... Oct 2 19:42:04.090325 systemd-networkd[1099]: eth0: DHCPv4 address 172.31.22.231/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:42:04.124010 systemd[1]: Finished dracut-initqueue.service. Oct 2 19:42:04.138601 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:42:04.138633 kernel: audit: type=1130 audit(1696275724.125:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.125000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.132492 systemd[1]: Reached target remote-fs-pre.target. Oct 2 19:42:04.138608 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:42:04.140872 systemd[1]: Reached target remote-fs.target. Oct 2 19:42:04.147371 systemd[1]: Starting dracut-pre-mount.service... Oct 2 19:42:04.166384 systemd[1]: Finished dracut-pre-mount.service. Oct 2 19:42:04.175576 kernel: audit: type=1130 audit(1696275724.166:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.166000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.581696 ignition[1067]: Ignition 2.14.0 Oct 2 19:42:04.581711 ignition[1067]: Stage: fetch-offline Oct 2 19:42:04.581863 ignition[1067]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:04.581907 ignition[1067]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:04.602625 ignition[1067]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:04.604531 ignition[1067]: Ignition finished successfully Oct 2 19:42:04.606474 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 19:42:04.615309 kernel: audit: type=1130 audit(1696275724.606:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.606000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.609563 systemd[1]: Starting ignition-fetch.service... Oct 2 19:42:04.623909 ignition[1123]: Ignition 2.14.0 Oct 2 19:42:04.623922 ignition[1123]: Stage: fetch Oct 2 19:42:04.624137 ignition[1123]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:04.624169 ignition[1123]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:04.636092 ignition[1123]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:04.638478 ignition[1123]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:04.681288 ignition[1123]: INFO : PUT result: OK Oct 2 19:42:04.694172 ignition[1123]: DEBUG : parsed url from cmdline: "" Oct 2 19:42:04.694172 ignition[1123]: INFO : no config URL provided Oct 2 19:42:04.694172 ignition[1123]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 19:42:04.694172 ignition[1123]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 19:42:04.699842 ignition[1123]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:04.703791 ignition[1123]: INFO : PUT result: OK Oct 2 19:42:04.704810 ignition[1123]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 19:42:04.707712 ignition[1123]: INFO : GET result: OK Oct 2 19:42:04.712662 ignition[1123]: DEBUG : parsing config with SHA512: ddbf9dc741b5400cf5df88430606e0aaccf10a1e4ae8774b900372329c7171f8f829058656558d25e24cf833797a56e601f24b4bf3c5ace1e7d57677d2bfcf33 Oct 2 19:42:04.754228 unknown[1123]: fetched base config from "system" Oct 2 19:42:04.754304 unknown[1123]: fetched base config from "system" Oct 2 19:42:04.754317 unknown[1123]: fetched user config from "aws" Oct 2 19:42:04.758016 ignition[1123]: fetch: fetch complete Oct 2 19:42:04.758031 ignition[1123]: fetch: fetch passed Oct 2 19:42:04.758115 ignition[1123]: Ignition finished successfully Oct 2 19:42:04.773827 kernel: audit: type=1130 audit(1696275724.760:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.760387 systemd[1]: Finished ignition-fetch.service. Oct 2 19:42:04.762833 systemd[1]: Starting ignition-kargs.service... Oct 2 19:42:04.786840 ignition[1129]: Ignition 2.14.0 Oct 2 19:42:04.786853 ignition[1129]: Stage: kargs Oct 2 19:42:04.787059 ignition[1129]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:04.787094 ignition[1129]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:04.802370 ignition[1129]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:04.804605 ignition[1129]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:04.807234 ignition[1129]: INFO : PUT result: OK Oct 2 19:42:04.813346 ignition[1129]: kargs: kargs passed Oct 2 19:42:04.813578 ignition[1129]: Ignition finished successfully Oct 2 19:42:04.816205 systemd[1]: Finished ignition-kargs.service. Oct 2 19:42:04.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.817687 systemd[1]: Starting ignition-disks.service... Oct 2 19:42:04.824583 kernel: audit: type=1130 audit(1696275724.815:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.852948 ignition[1135]: Ignition 2.14.0 Oct 2 19:42:04.852963 ignition[1135]: Stage: disks Oct 2 19:42:04.853335 ignition[1135]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:04.853369 ignition[1135]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:04.863116 ignition[1135]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:04.864885 ignition[1135]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:04.866543 ignition[1135]: INFO : PUT result: OK Oct 2 19:42:04.870264 ignition[1135]: disks: disks passed Oct 2 19:42:04.870323 ignition[1135]: Ignition finished successfully Oct 2 19:42:04.872789 systemd[1]: Finished ignition-disks.service. Oct 2 19:42:04.873000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.875209 systemd[1]: Reached target initrd-root-device.target. Oct 2 19:42:04.884390 kernel: audit: type=1130 audit(1696275724.873:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.883732 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:42:04.885402 systemd[1]: Reached target local-fs.target. Oct 2 19:42:04.886609 systemd[1]: Reached target sysinit.target. Oct 2 19:42:04.888586 systemd[1]: Reached target basic.target. Oct 2 19:42:04.894277 systemd[1]: Starting systemd-fsck-root.service... Oct 2 19:42:04.915710 systemd-fsck[1143]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 19:42:04.924961 systemd[1]: Finished systemd-fsck-root.service. Oct 2 19:42:04.928264 systemd[1]: Mounting sysroot.mount... Oct 2 19:42:04.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.936123 kernel: audit: type=1130 audit(1696275724.925:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:04.946198 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 19:42:04.948415 systemd[1]: Mounted sysroot.mount. Oct 2 19:42:04.948692 systemd[1]: Reached target initrd-root-fs.target. Oct 2 19:42:04.954278 systemd[1]: Mounting sysroot-usr.mount... Oct 2 19:42:04.964249 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 19:42:04.964505 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 19:42:04.964544 systemd[1]: Reached target ignition-diskful.target. Oct 2 19:42:04.984853 systemd[1]: Mounted sysroot-usr.mount. Oct 2 19:42:04.999795 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:42:05.004557 systemd[1]: Starting initrd-setup-root.service... Oct 2 19:42:05.025346 initrd-setup-root[1165]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 19:42:05.028444 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1160) Oct 2 19:42:05.035138 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:42:05.035207 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:42:05.035232 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:42:05.043123 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:42:05.043686 initrd-setup-root[1191]: cut: /sysroot/etc/group: No such file or directory Oct 2 19:42:05.051966 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:42:05.057592 initrd-setup-root[1199]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 19:42:05.065902 initrd-setup-root[1207]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 19:42:05.242661 systemd[1]: Finished initrd-setup-root.service. Oct 2 19:42:05.252631 kernel: audit: type=1130 audit(1696275725.241:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:05.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:05.243992 systemd[1]: Starting ignition-mount.service... Oct 2 19:42:05.255449 systemd[1]: Starting sysroot-boot.service... Oct 2 19:42:05.262301 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 19:42:05.263887 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 19:42:05.293441 ignition[1226]: INFO : Ignition 2.14.0 Oct 2 19:42:05.293441 ignition[1226]: INFO : Stage: mount Oct 2 19:42:05.300073 ignition[1226]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:05.300073 ignition[1226]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:05.300406 systemd[1]: Finished sysroot-boot.service. Oct 2 19:42:05.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:05.323239 kernel: audit: type=1130 audit(1696275725.309:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:05.328271 ignition[1226]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:05.329967 ignition[1226]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:05.332299 ignition[1226]: INFO : PUT result: OK Oct 2 19:42:05.335662 ignition[1226]: INFO : mount: mount passed Oct 2 19:42:05.336779 ignition[1226]: INFO : Ignition finished successfully Oct 2 19:42:05.337863 systemd[1]: Finished ignition-mount.service. Oct 2 19:42:05.362041 kernel: audit: type=1130 audit(1696275725.346:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:05.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:05.351403 systemd[1]: Starting ignition-files.service... Oct 2 19:42:05.367653 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 19:42:05.397130 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1235) Oct 2 19:42:05.400581 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 19:42:05.400645 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 19:42:05.400664 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 19:42:05.408119 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 19:42:05.416978 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 19:42:05.436153 ignition[1254]: INFO : Ignition 2.14.0 Oct 2 19:42:05.438011 ignition[1254]: INFO : Stage: files Oct 2 19:42:05.438011 ignition[1254]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:05.438011 ignition[1254]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:05.446226 systemd-networkd[1099]: eth0: Gained IPv6LL Oct 2 19:42:05.452814 ignition[1254]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:05.455281 ignition[1254]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:05.458653 ignition[1254]: INFO : PUT result: OK Oct 2 19:42:05.463547 ignition[1254]: DEBUG : files: compiled without relabeling support, skipping Oct 2 19:42:05.468987 ignition[1254]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 19:42:05.468987 ignition[1254]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 19:42:05.485405 ignition[1254]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 19:42:05.487613 ignition[1254]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 19:42:05.491819 unknown[1254]: wrote ssh authorized keys file for user: core Oct 2 19:42:05.496046 ignition[1254]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 19:42:05.502267 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:42:05.506928 ignition[1254]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 19:42:05.755025 ignition[1254]: INFO : GET result: OK Oct 2 19:42:06.111635 ignition[1254]: DEBUG : file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 19:42:06.115556 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 19:42:06.115556 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:42:06.115556 ignition[1254]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 19:42:06.391032 ignition[1254]: INFO : GET result: OK Oct 2 19:42:06.694890 ignition[1254]: DEBUG : file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 19:42:06.698314 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 19:42:06.698314 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:42:06.698314 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 19:42:06.698314 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:42:06.698314 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:42:06.733408 ignition[1254]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem742916147" Oct 2 19:42:06.744627 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1259) Oct 2 19:42:06.744668 ignition[1254]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem742916147": device or resource busy Oct 2 19:42:06.744668 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem742916147", trying btrfs: device or resource busy Oct 2 19:42:06.744668 ignition[1254]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem742916147" Oct 2 19:42:06.744668 ignition[1254]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem742916147" Oct 2 19:42:06.764814 ignition[1254]: INFO : op(3): [started] unmounting "/mnt/oem742916147" Oct 2 19:42:06.764814 ignition[1254]: INFO : op(3): [finished] unmounting "/mnt/oem742916147" Oct 2 19:42:06.764814 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 19:42:06.764814 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:42:06.764814 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubeadm: attempt #1 Oct 2 19:42:06.759786 systemd[1]: mnt-oem742916147.mount: Deactivated successfully. Oct 2 19:42:06.834132 ignition[1254]: INFO : GET result: OK Oct 2 19:42:08.260877 ignition[1254]: DEBUG : file matches expected sum of: f40216b7d14046931c58072d10c7122934eac5a23c08821371f8b08ac1779443ad11d3458a4c5dcde7cf80fc600a9fefb14b1942aa46a52330248d497ca88836 Oct 2 19:42:08.264874 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 19:42:08.264874 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:42:08.264874 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubelet: attempt #1 Oct 2 19:42:08.326832 ignition[1254]: INFO : GET result: OK Oct 2 19:42:10.225670 ignition[1254]: DEBUG : file matches expected sum of: a283da2224d456958b2cb99b4f6faf4457c4ed89e9e95f37d970c637f6a7f64ff4dd4d2bfce538759b2d2090933bece599a285ef8fd132eb383fece9a3941560 Oct 2 19:42:10.230663 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 19:42:10.230663 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:42:10.230663 ignition[1254]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.27.2/bin/linux/amd64/kubectl: attempt #1 Oct 2 19:42:10.280531 ignition[1254]: INFO : GET result: OK Oct 2 19:42:11.251875 ignition[1254]: DEBUG : file matches expected sum of: 857e67001e74840518413593d90c6e64ad3f00d55fa44ad9a8e2ed6135392c908caff7ec19af18cbe10784b8f83afe687a0bc3bacbc9eee984cdeb9c0749cb83 Oct 2 19:42:11.255388 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 19:42:11.255388 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:42:11.255388 ignition[1254]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 19:42:11.500291 ignition[1254]: INFO : GET result: OK Oct 2 19:42:11.672361 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 19:42:11.672361 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 19:42:11.680487 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 19:42:11.680487 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:42:11.680487 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 19:42:11.680487 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:42:11.680487 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:42:11.693528 ignition[1254]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1154353792" Oct 2 19:42:11.693528 ignition[1254]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1154353792": device or resource busy Oct 2 19:42:11.693528 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1154353792", trying btrfs: device or resource busy Oct 2 19:42:11.693528 ignition[1254]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1154353792" Oct 2 19:42:11.709592 ignition[1254]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1154353792" Oct 2 19:42:11.709592 ignition[1254]: INFO : op(6): [started] unmounting "/mnt/oem1154353792" Oct 2 19:42:11.709592 ignition[1254]: INFO : op(6): [finished] unmounting "/mnt/oem1154353792" Oct 2 19:42:11.709592 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 19:42:11.709592 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:42:11.709592 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:42:11.718324 systemd[1]: mnt-oem1154353792.mount: Deactivated successfully. Oct 2 19:42:11.733757 ignition[1254]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2780208142" Oct 2 19:42:11.735881 ignition[1254]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2780208142": device or resource busy Oct 2 19:42:11.735881 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2780208142", trying btrfs: device or resource busy Oct 2 19:42:11.735881 ignition[1254]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2780208142" Oct 2 19:42:11.735881 ignition[1254]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2780208142" Oct 2 19:42:11.735881 ignition[1254]: INFO : op(9): [started] unmounting "/mnt/oem2780208142" Oct 2 19:42:11.735881 ignition[1254]: INFO : op(9): [finished] unmounting "/mnt/oem2780208142" Oct 2 19:42:11.735881 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 19:42:11.752260 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:42:11.752260 ignition[1254]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 19:42:11.759421 ignition[1254]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1699364473" Oct 2 19:42:11.761594 ignition[1254]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1699364473": device or resource busy Oct 2 19:42:11.761594 ignition[1254]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1699364473", trying btrfs: device or resource busy Oct 2 19:42:11.761594 ignition[1254]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1699364473" Oct 2 19:42:11.771318 ignition[1254]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1699364473" Oct 2 19:42:11.771318 ignition[1254]: INFO : op(c): [started] unmounting "/mnt/oem1699364473" Oct 2 19:42:11.771318 ignition[1254]: INFO : op(c): [finished] unmounting "/mnt/oem1699364473" Oct 2 19:42:11.771318 ignition[1254]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 19:42:11.771318 ignition[1254]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:42:11.771318 ignition[1254]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 19:42:11.771318 ignition[1254]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 19:42:11.789813 ignition[1254]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 19:42:11.858571 ignition[1254]: INFO : files: files passed Oct 2 19:42:11.858571 ignition[1254]: INFO : Ignition finished successfully Oct 2 19:42:11.877625 systemd[1]: Finished ignition-files.service. Oct 2 19:42:11.903136 kernel: audit: type=1130 audit(1696275731.894:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.904113 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 19:42:11.905962 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 19:42:11.907382 systemd[1]: Starting ignition-quench.service... Oct 2 19:42:11.929959 kernel: audit: type=1130 audit(1696275731.916:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.929993 kernel: audit: type=1131 audit(1696275731.916:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.916000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.915056 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 19:42:11.915216 systemd[1]: Finished ignition-quench.service. Oct 2 19:42:11.938765 initrd-setup-root-after-ignition[1279]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 19:42:11.940975 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 19:42:11.971135 kernel: audit: type=1130 audit(1696275731.941:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.941000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:11.942903 systemd[1]: Reached target ignition-complete.target. Oct 2 19:42:11.987759 systemd[1]: Starting initrd-parse-etc.service... Oct 2 19:42:12.015652 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 19:42:12.015828 systemd[1]: Finished initrd-parse-etc.service. Oct 2 19:42:12.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.020985 systemd[1]: Reached target initrd-fs.target. Oct 2 19:42:12.036969 kernel: audit: type=1130 audit(1696275732.019:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.037028 kernel: audit: type=1131 audit(1696275732.019:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.031999 systemd[1]: Reached target initrd.target. Oct 2 19:42:12.037200 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 19:42:12.039562 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 19:42:12.063024 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 19:42:12.065563 systemd[1]: Starting initrd-cleanup.service... Oct 2 19:42:12.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.081132 kernel: audit: type=1130 audit(1696275732.063:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.087677 systemd[1]: Stopped target nss-lookup.target. Oct 2 19:42:12.087922 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 19:42:12.095569 systemd[1]: Stopped target timers.target. Oct 2 19:42:12.098516 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 19:42:12.101594 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 19:42:12.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.103237 systemd[1]: Stopped target initrd.target. Oct 2 19:42:12.111537 kernel: audit: type=1131 audit(1696275732.101:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.111756 systemd[1]: Stopped target basic.target. Oct 2 19:42:12.113833 systemd[1]: Stopped target ignition-complete.target. Oct 2 19:42:12.116547 systemd[1]: Stopped target ignition-diskful.target. Oct 2 19:42:12.119238 systemd[1]: Stopped target initrd-root-device.target. Oct 2 19:42:12.121460 systemd[1]: Stopped target remote-fs.target. Oct 2 19:42:12.124338 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 19:42:12.128014 systemd[1]: Stopped target sysinit.target. Oct 2 19:42:12.130690 systemd[1]: Stopped target local-fs.target. Oct 2 19:42:12.133458 systemd[1]: Stopped target local-fs-pre.target. Oct 2 19:42:12.136315 systemd[1]: Stopped target swap.target. Oct 2 19:42:12.138988 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 19:42:12.141105 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 19:42:12.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.142520 systemd[1]: Stopped target cryptsetup.target. Oct 2 19:42:12.153911 kernel: audit: type=1131 audit(1696275732.141:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.153904 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 19:42:12.154041 systemd[1]: Stopped dracut-initqueue.service. Oct 2 19:42:12.157672 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 19:42:12.156000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.170536 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 19:42:12.184745 kernel: audit: type=1131 audit(1696275732.156:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.184815 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 19:42:12.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.184930 systemd[1]: Stopped ignition-files.service. Oct 2 19:42:12.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.190419 systemd[1]: Stopping ignition-mount.service... Oct 2 19:42:12.198369 iscsid[1104]: iscsid shutting down. Oct 2 19:42:12.198000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.194883 systemd[1]: Stopping iscsid.service... Oct 2 19:42:12.209315 ignition[1292]: INFO : Ignition 2.14.0 Oct 2 19:42:12.209315 ignition[1292]: INFO : Stage: umount Oct 2 19:42:12.209315 ignition[1292]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 19:42:12.209315 ignition[1292]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 19:42:12.197885 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 19:42:12.198459 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 19:42:12.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.203801 systemd[1]: Stopping sysroot-boot.service... Oct 2 19:42:12.211587 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 19:42:12.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.217081 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 19:42:12.224410 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 19:42:12.225823 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 19:42:12.235929 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 19:42:12.237249 systemd[1]: Stopped iscsid.service. Oct 2 19:42:12.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.240419 systemd[1]: Stopping iscsiuio.service... Oct 2 19:42:12.246000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.246000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.243086 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 19:42:12.243220 systemd[1]: Finished initrd-cleanup.service. Oct 2 19:42:12.248886 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 19:42:12.250609 systemd[1]: Stopped iscsiuio.service. Oct 2 19:42:12.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.256289 ignition[1292]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 19:42:12.256289 ignition[1292]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 19:42:12.261386 ignition[1292]: INFO : PUT result: OK Oct 2 19:42:12.261468 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 19:42:12.265195 systemd[1]: Stopped sysroot-boot.service. Oct 2 19:42:12.267000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.270540 ignition[1292]: INFO : umount: umount passed Oct 2 19:42:12.272480 ignition[1292]: INFO : Ignition finished successfully Oct 2 19:42:12.274076 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 19:42:12.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.274302 systemd[1]: Stopped ignition-mount.service. Oct 2 19:42:12.278119 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 19:42:12.278197 systemd[1]: Stopped ignition-disks.service. Oct 2 19:42:12.279157 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 19:42:12.279201 systemd[1]: Stopped ignition-kargs.service. Oct 2 19:42:12.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.287000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.285614 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 19:42:12.286523 systemd[1]: Stopped ignition-fetch.service. Oct 2 19:42:12.293000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.290006 systemd[1]: Stopped target network.target. Oct 2 19:42:12.291104 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 19:42:12.291199 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 19:42:12.295160 systemd[1]: Stopped target paths.target. Oct 2 19:42:12.297258 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 19:42:12.303166 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 19:42:12.305000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.305078 systemd[1]: Stopped target slices.target. Oct 2 19:42:12.307073 systemd[1]: Stopped target sockets.target. Oct 2 19:42:12.307152 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 19:42:12.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.307197 systemd[1]: Closed iscsid.socket. Oct 2 19:42:12.307251 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 19:42:12.307276 systemd[1]: Closed iscsiuio.socket. Oct 2 19:42:12.307313 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 19:42:12.330000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.307349 systemd[1]: Stopped ignition-setup.service. Oct 2 19:42:12.307419 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 19:42:12.307448 systemd[1]: Stopped initrd-setup-root.service. Oct 2 19:42:12.307771 systemd[1]: Stopping systemd-networkd.service... Oct 2 19:42:12.308033 systemd[1]: Stopping systemd-resolved.service... Oct 2 19:42:12.337000 audit: BPF prog-id=6 op=UNLOAD Oct 2 19:42:12.318446 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 19:42:12.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.318589 systemd[1]: Stopped systemd-resolved.service. Oct 2 19:42:12.320190 systemd-networkd[1099]: eth0: DHCPv6 lease lost Oct 2 19:42:12.347000 audit: BPF prog-id=9 op=UNLOAD Oct 2 19:42:12.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.324646 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 19:42:12.327842 systemd[1]: Stopped systemd-networkd.service. Oct 2 19:42:12.333310 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 19:42:12.333376 systemd[1]: Closed systemd-networkd.socket. Oct 2 19:42:12.337187 systemd[1]: Stopping network-cleanup.service... Oct 2 19:42:12.354000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.341767 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 19:42:12.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.341838 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 19:42:12.344018 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 19:42:12.344081 systemd[1]: Stopped systemd-sysctl.service. Oct 2 19:42:12.372000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.352308 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 19:42:12.378000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.353702 systemd[1]: Stopped systemd-modules-load.service. Oct 2 19:42:12.358403 systemd[1]: Stopping systemd-udevd.service... Oct 2 19:42:12.383000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.362029 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 19:42:12.362264 systemd[1]: Stopped systemd-udevd.service. Oct 2 19:42:12.368991 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 19:42:12.369109 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 19:42:12.371438 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 19:42:12.371499 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 19:42:12.373809 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 19:42:12.373922 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 19:42:12.374088 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 19:42:12.374233 systemd[1]: Stopped dracut-cmdline.service. Oct 2 19:42:12.380827 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 19:42:12.381238 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 19:42:12.398120 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 19:42:12.407077 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 19:42:12.407000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.407188 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 19:42:12.409442 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 19:42:12.411000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.413000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:12.409577 systemd[1]: Stopped network-cleanup.service. Oct 2 19:42:12.412952 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 19:42:12.413074 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 19:42:12.415286 systemd[1]: Reached target initrd-switch-root.target. Oct 2 19:42:12.418615 systemd[1]: Starting initrd-switch-root.service... Oct 2 19:42:12.433626 systemd[1]: Switching root. Oct 2 19:42:12.456988 systemd-journald[185]: Journal stopped Oct 2 19:42:18.579599 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 19:42:18.579684 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 19:42:18.579708 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 19:42:18.579789 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 19:42:18.579815 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 19:42:18.579835 kernel: SELinux: policy capability open_perms=1 Oct 2 19:42:18.579854 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 19:42:18.579873 kernel: SELinux: policy capability always_check_network=0 Oct 2 19:42:18.579899 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 19:42:18.579918 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 19:42:18.579936 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 19:42:18.579956 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 19:42:18.579977 systemd[1]: Successfully loaded SELinux policy in 138.594ms. Oct 2 19:42:18.580015 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.176ms. Oct 2 19:42:18.580043 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 19:42:18.580065 systemd[1]: Detected virtualization amazon. Oct 2 19:42:18.580089 systemd[1]: Detected architecture x86-64. Oct 2 19:42:18.580126 systemd[1]: Detected first boot. Oct 2 19:42:18.580147 systemd[1]: Initializing machine ID from VM UUID. Oct 2 19:42:18.580168 systemd[1]: Populated /etc with preset unit settings. Oct 2 19:42:18.580189 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:42:18.580210 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:42:18.580233 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:42:18.580257 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 19:42:18.580277 kernel: audit: type=1334 audit(1696275738.060:84): prog-id=12 op=LOAD Oct 2 19:42:18.580295 kernel: audit: type=1334 audit(1696275738.060:85): prog-id=3 op=UNLOAD Oct 2 19:42:18.580314 kernel: audit: type=1334 audit(1696275738.064:86): prog-id=13 op=LOAD Oct 2 19:42:18.580333 kernel: audit: type=1334 audit(1696275738.070:87): prog-id=14 op=LOAD Oct 2 19:42:18.580352 kernel: audit: type=1334 audit(1696275738.070:88): prog-id=4 op=UNLOAD Oct 2 19:42:18.580371 kernel: audit: type=1334 audit(1696275738.070:89): prog-id=5 op=UNLOAD Oct 2 19:42:18.580390 kernel: audit: type=1334 audit(1696275738.074:90): prog-id=15 op=LOAD Oct 2 19:42:18.580408 kernel: audit: type=1334 audit(1696275738.074:91): prog-id=12 op=UNLOAD Oct 2 19:42:18.580430 kernel: audit: type=1334 audit(1696275738.077:92): prog-id=16 op=LOAD Oct 2 19:42:18.580455 kernel: audit: type=1334 audit(1696275738.086:93): prog-id=17 op=LOAD Oct 2 19:42:18.580473 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 19:42:18.580493 systemd[1]: Stopped initrd-switch-root.service. Oct 2 19:42:18.580513 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 19:42:18.580534 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 19:42:18.580553 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 19:42:18.580574 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 19:42:18.580597 systemd[1]: Created slice system-getty.slice. Oct 2 19:42:18.580617 systemd[1]: Created slice system-modprobe.slice. Oct 2 19:42:18.580638 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 19:42:18.580659 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 19:42:18.580679 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 19:42:18.580699 systemd[1]: Created slice user.slice. Oct 2 19:42:18.580719 systemd[1]: Started systemd-ask-password-console.path. Oct 2 19:42:18.580740 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 19:42:18.580763 systemd[1]: Set up automount boot.automount. Oct 2 19:42:18.580784 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 19:42:18.580804 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 19:42:18.580823 systemd[1]: Stopped target initrd-fs.target. Oct 2 19:42:18.580844 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 19:42:18.580864 systemd[1]: Reached target integritysetup.target. Oct 2 19:42:18.580885 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 19:42:18.580905 systemd[1]: Reached target remote-fs.target. Oct 2 19:42:18.580924 systemd[1]: Reached target slices.target. Oct 2 19:42:18.580944 systemd[1]: Reached target swap.target. Oct 2 19:42:18.580971 systemd[1]: Reached target torcx.target. Oct 2 19:42:18.580992 systemd[1]: Reached target veritysetup.target. Oct 2 19:42:18.581021 systemd[1]: Listening on systemd-coredump.socket. Oct 2 19:42:18.581047 systemd[1]: Listening on systemd-initctl.socket. Oct 2 19:42:18.581070 systemd[1]: Listening on systemd-networkd.socket. Oct 2 19:42:18.581090 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 19:42:18.581122 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 19:42:18.581142 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 19:42:18.590178 systemd[1]: Mounting dev-hugepages.mount... Oct 2 19:42:18.590213 systemd[1]: Mounting dev-mqueue.mount... Oct 2 19:42:18.590236 systemd[1]: Mounting media.mount... Oct 2 19:42:18.590258 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:42:18.590281 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 19:42:18.590300 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 19:42:18.590330 systemd[1]: Mounting tmp.mount... Oct 2 19:42:18.590353 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 19:42:18.590379 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 19:42:18.590403 systemd[1]: Starting kmod-static-nodes.service... Oct 2 19:42:18.590425 systemd[1]: Starting modprobe@configfs.service... Oct 2 19:42:18.590448 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 19:42:18.590472 systemd[1]: Starting modprobe@drm.service... Oct 2 19:42:18.590496 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 19:42:18.590519 systemd[1]: Starting modprobe@fuse.service... Oct 2 19:42:18.590545 systemd[1]: Starting modprobe@loop.service... Oct 2 19:42:18.590570 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 19:42:18.590593 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 19:42:18.590617 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 19:42:18.590639 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 19:42:18.590663 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 19:42:18.590685 systemd[1]: Stopped systemd-journald.service. Oct 2 19:42:18.590709 systemd[1]: Starting systemd-journald.service... Oct 2 19:42:18.590733 systemd[1]: Starting systemd-modules-load.service... Oct 2 19:42:18.600856 systemd[1]: Starting systemd-network-generator.service... Oct 2 19:42:18.600922 systemd[1]: Starting systemd-remount-fs.service... Oct 2 19:42:18.600942 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 19:42:18.601045 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 19:42:18.601203 systemd[1]: Stopped verity-setup.service. Oct 2 19:42:18.601232 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 19:42:18.601251 systemd[1]: Mounted dev-hugepages.mount. Oct 2 19:42:18.601273 systemd[1]: Mounted dev-mqueue.mount. Oct 2 19:42:18.601300 systemd[1]: Mounted media.mount. Oct 2 19:42:18.601327 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 19:42:18.601346 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 19:42:18.601440 systemd[1]: Mounted tmp.mount. Oct 2 19:42:18.601461 systemd[1]: Finished kmod-static-nodes.service. Oct 2 19:42:18.601479 kernel: loop: module loaded Oct 2 19:42:18.601499 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 19:42:18.601518 systemd[1]: Finished modprobe@configfs.service. Oct 2 19:42:18.601675 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 19:42:18.601698 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 19:42:18.601725 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 19:42:18.601746 systemd[1]: Finished modprobe@drm.service. Oct 2 19:42:18.601766 kernel: fuse: init (API version 7.34) Oct 2 19:42:18.601795 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 19:42:18.601815 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 19:42:18.602490 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 19:42:18.602514 systemd[1]: Finished modprobe@fuse.service. Oct 2 19:42:18.602534 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 19:42:18.602555 systemd[1]: Finished modprobe@loop.service. Oct 2 19:42:18.602576 systemd[1]: Finished systemd-modules-load.service. Oct 2 19:42:18.602598 systemd[1]: Finished systemd-network-generator.service. Oct 2 19:42:18.602621 systemd[1]: Finished systemd-remount-fs.service. Oct 2 19:42:18.602641 systemd[1]: Reached target network-pre.target. Oct 2 19:42:18.602672 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 19:42:18.602693 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 19:42:18.602733 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 19:42:18.602763 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 19:42:18.602786 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 19:42:18.602812 systemd[1]: Starting systemd-random-seed.service... Oct 2 19:42:18.602834 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 19:42:18.602858 systemd[1]: Starting systemd-sysctl.service... Oct 2 19:42:18.602880 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 19:42:18.602901 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 19:42:18.602934 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 19:42:18.602961 systemd[1]: Finished systemd-random-seed.service. Oct 2 19:42:18.602982 systemd[1]: Reached target first-boot-complete.target. Oct 2 19:42:18.603003 systemd[1]: Starting systemd-sysusers.service... Oct 2 19:42:18.603030 systemd-journald[1401]: Journal started Oct 2 19:42:18.603125 systemd-journald[1401]: Runtime Journal (/run/log/journal/ec2ff7c086b520bfd01192edc7d948a4) is 4.8M, max 38.7M, 33.9M free. Oct 2 19:42:13.164000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 19:42:18.616144 systemd[1]: Started systemd-journald.service. Oct 2 19:42:13.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:42:13.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 19:42:13.370000 audit: BPF prog-id=10 op=LOAD Oct 2 19:42:13.370000 audit: BPF prog-id=10 op=UNLOAD Oct 2 19:42:13.370000 audit: BPF prog-id=11 op=LOAD Oct 2 19:42:13.370000 audit: BPF prog-id=11 op=UNLOAD Oct 2 19:42:18.060000 audit: BPF prog-id=12 op=LOAD Oct 2 19:42:18.060000 audit: BPF prog-id=3 op=UNLOAD Oct 2 19:42:18.064000 audit: BPF prog-id=13 op=LOAD Oct 2 19:42:18.070000 audit: BPF prog-id=14 op=LOAD Oct 2 19:42:18.070000 audit: BPF prog-id=4 op=UNLOAD Oct 2 19:42:18.070000 audit: BPF prog-id=5 op=UNLOAD Oct 2 19:42:18.074000 audit: BPF prog-id=15 op=LOAD Oct 2 19:42:18.074000 audit: BPF prog-id=12 op=UNLOAD Oct 2 19:42:18.077000 audit: BPF prog-id=16 op=LOAD Oct 2 19:42:18.086000 audit: BPF prog-id=17 op=LOAD Oct 2 19:42:18.086000 audit: BPF prog-id=13 op=UNLOAD Oct 2 19:42:18.086000 audit: BPF prog-id=14 op=UNLOAD Oct 2 19:42:18.101000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.108000 audit: BPF prog-id=15 op=UNLOAD Oct 2 19:42:18.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.118000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.337000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.342000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.350000 audit: BPF prog-id=18 op=LOAD Oct 2 19:42:18.351000 audit: BPF prog-id=19 op=LOAD Oct 2 19:42:18.351000 audit: BPF prog-id=20 op=LOAD Oct 2 19:42:18.351000 audit: BPF prog-id=16 op=UNLOAD Oct 2 19:42:18.351000 audit: BPF prog-id=17 op=UNLOAD Oct 2 19:42:18.400000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.448000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.464000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.480000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.480000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.485000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.489000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.559000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 19:42:18.559000 audit[1401]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7fff6b80a4a0 a2=4000 a3=7fff6b80a53c items=0 ppid=1 pid=1401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:18.559000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 19:42:18.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.058849 systemd[1]: Queued start job for default target multi-user.target. Oct 2 19:42:13.582559 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:42:18.101378 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 19:42:13.583578 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:42:18.608351 systemd[1]: Starting systemd-journal-flush.service... Oct 2 19:42:13.583608 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:42:13.583654 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 19:42:13.583671 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 19:42:13.583717 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 19:42:18.627000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.628856 systemd-journald[1401]: Time spent on flushing to /var/log/journal/ec2ff7c086b520bfd01192edc7d948a4 is 41.578ms for 1197 entries. Oct 2 19:42:18.628856 systemd-journald[1401]: System Journal (/var/log/journal/ec2ff7c086b520bfd01192edc7d948a4) is 8.0M, max 195.6M, 187.6M free. Oct 2 19:42:18.678442 systemd-journald[1401]: Received client request to flush runtime journal. Oct 2 19:42:13.583737 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 19:42:18.627046 systemd[1]: Finished systemd-sysctl.service. Oct 2 19:42:13.584238 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 19:42:13.584414 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 19:42:13.584622 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 19:42:13.585651 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 19:42:13.585710 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 19:42:13.585809 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 19:42:13.585856 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 19:42:13.585886 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 19:42:13.585907 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:13Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 19:42:17.518749 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:17Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:17.519323 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:17Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:17.519510 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:17Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:17.520078 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:17Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 19:42:17.520227 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:17Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 19:42:17.520292 /usr/lib/systemd/system-generators/torcx-generator[1325]: time="2023-10-02T19:42:17Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 19:42:18.683000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.697000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.683368 systemd[1]: Finished systemd-journal-flush.service. Oct 2 19:42:18.697668 systemd[1]: Finished systemd-sysusers.service. Oct 2 19:42:18.712485 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 19:42:18.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:18.715491 systemd[1]: Starting systemd-udev-settle.service... Oct 2 19:42:18.725057 udevadm[1441]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 19:42:19.467060 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 19:42:19.467000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.468000 audit: BPF prog-id=21 op=LOAD Oct 2 19:42:19.468000 audit: BPF prog-id=22 op=LOAD Oct 2 19:42:19.468000 audit: BPF prog-id=7 op=UNLOAD Oct 2 19:42:19.468000 audit: BPF prog-id=8 op=UNLOAD Oct 2 19:42:19.470029 systemd[1]: Starting systemd-udevd.service... Oct 2 19:42:19.491347 systemd-udevd[1442]: Using default interface naming scheme 'v252'. Oct 2 19:42:19.528264 systemd[1]: Started systemd-udevd.service. Oct 2 19:42:19.528000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.529000 audit: BPF prog-id=23 op=LOAD Oct 2 19:42:19.532466 systemd[1]: Starting systemd-networkd.service... Oct 2 19:42:19.549000 audit: BPF prog-id=24 op=LOAD Oct 2 19:42:19.550000 audit: BPF prog-id=25 op=LOAD Oct 2 19:42:19.550000 audit: BPF prog-id=26 op=LOAD Oct 2 19:42:19.552991 systemd[1]: Starting systemd-userdbd.service... Oct 2 19:42:19.662687 systemd[1]: Started systemd-userdbd.service. Oct 2 19:42:19.663000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.673514 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 19:42:19.688383 (udev-worker)[1447]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:42:19.753126 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 19:42:19.766739 kernel: ACPI: button: Power Button [PWRF] Oct 2 19:42:19.766861 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Oct 2 19:42:19.775119 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 19:42:19.828732 systemd-networkd[1448]: lo: Link UP Oct 2 19:42:19.828744 systemd-networkd[1448]: lo: Gained carrier Oct 2 19:42:19.829340 systemd-networkd[1448]: Enumeration completed Oct 2 19:42:19.829467 systemd[1]: Started systemd-networkd.service. Oct 2 19:42:19.830398 systemd-networkd[1448]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 19:42:19.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:19.838247 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 19:42:19.838016 systemd-networkd[1448]: eth0: Link UP Oct 2 19:42:19.838215 systemd-networkd[1448]: eth0: Gained carrier Oct 2 19:42:19.843848 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 19:42:19.856357 systemd-networkd[1448]: eth0: DHCPv4 address 172.31.22.231/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 19:42:19.821000 audit[1452]: AVC avc: denied { confidentiality } for pid=1452 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 19:42:19.821000 audit[1452]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55de3f45a1a0 a1=32194 a2=7f1f697b6bc5 a3=5 items=106 ppid=1442 pid=1452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:19.821000 audit: CWD cwd="/" Oct 2 19:42:19.821000 audit: PATH item=0 name=(null) inode=14852 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=1 name=(null) inode=14853 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=2 name=(null) inode=14852 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=3 name=(null) inode=14854 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=4 name=(null) inode=14852 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=5 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=6 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=7 name=(null) inode=14856 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=8 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=9 name=(null) inode=14857 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=10 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=11 name=(null) inode=14858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=12 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=13 name=(null) inode=14859 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=14 name=(null) inode=14855 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=15 name=(null) inode=14860 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=16 name=(null) inode=14852 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=17 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=18 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=19 name=(null) inode=14862 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=20 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=21 name=(null) inode=14863 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=22 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=23 name=(null) inode=14864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=24 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=25 name=(null) inode=14865 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.910131 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1453) Oct 2 19:42:19.821000 audit: PATH item=26 name=(null) inode=14861 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=27 name=(null) inode=14866 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=28 name=(null) inode=14852 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=29 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=30 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=31 name=(null) inode=14868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=32 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=33 name=(null) inode=14869 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=34 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=35 name=(null) inode=14870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=36 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=37 name=(null) inode=14871 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=38 name=(null) inode=14867 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=39 name=(null) inode=14872 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=40 name=(null) inode=14852 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=41 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=42 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.918117 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 19:42:19.821000 audit: PATH item=43 name=(null) inode=14874 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=44 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=45 name=(null) inode=14875 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=46 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=47 name=(null) inode=14876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=48 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=49 name=(null) inode=14877 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=50 name=(null) inode=14873 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=51 name=(null) inode=14878 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=52 name=(null) inode=1039 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=53 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=54 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=55 name=(null) inode=14880 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=56 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=57 name=(null) inode=14881 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=58 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=59 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=60 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=61 name=(null) inode=14883 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=62 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=63 name=(null) inode=14884 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=64 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=65 name=(null) inode=14885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=66 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=67 name=(null) inode=14886 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=68 name=(null) inode=14882 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=69 name=(null) inode=14887 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=70 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=71 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=72 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=73 name=(null) inode=14889 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=74 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=75 name=(null) inode=14890 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=76 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=77 name=(null) inode=14891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=78 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=79 name=(null) inode=14892 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=80 name=(null) inode=14888 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=81 name=(null) inode=14893 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=82 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=83 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=84 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=85 name=(null) inode=14895 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=86 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=87 name=(null) inode=14896 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=88 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=89 name=(null) inode=14897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=90 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=91 name=(null) inode=14898 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=92 name=(null) inode=14894 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=93 name=(null) inode=14899 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=94 name=(null) inode=14879 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=95 name=(null) inode=14900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=96 name=(null) inode=14900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=97 name=(null) inode=14901 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=98 name=(null) inode=14900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=99 name=(null) inode=14902 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=100 name=(null) inode=14900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=101 name=(null) inode=14903 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=102 name=(null) inode=14900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=103 name=(null) inode=14904 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=104 name=(null) inode=14900 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PATH item=105 name=(null) inode=14905 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 19:42:19.821000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 19:42:19.972562 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 19:42:19.983117 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 19:42:20.086151 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 19:42:20.181550 systemd[1]: Finished systemd-udev-settle.service. Oct 2 19:42:20.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:20.185352 systemd[1]: Starting lvm2-activation-early.service... Oct 2 19:42:20.221044 lvm[1556]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:42:20.249422 systemd[1]: Finished lvm2-activation-early.service. Oct 2 19:42:20.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:20.250913 systemd[1]: Reached target cryptsetup.target. Oct 2 19:42:20.253495 systemd[1]: Starting lvm2-activation.service... Oct 2 19:42:20.260403 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 19:42:20.300517 systemd[1]: Finished lvm2-activation.service. Oct 2 19:42:20.300000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:20.303317 systemd[1]: Reached target local-fs-pre.target. Oct 2 19:42:20.305322 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 19:42:20.306380 systemd[1]: Reached target local-fs.target. Oct 2 19:42:20.309324 systemd[1]: Reached target machines.target. Oct 2 19:42:20.318361 systemd[1]: Starting ldconfig.service... Oct 2 19:42:20.324374 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 19:42:20.324451 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:42:20.334254 systemd[1]: Starting systemd-boot-update.service... Oct 2 19:42:20.338707 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 19:42:20.352359 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 19:42:20.353894 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:42:20.353986 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 19:42:20.357184 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 19:42:20.383639 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1559 (bootctl) Oct 2 19:42:20.389523 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 19:42:20.427577 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 19:42:20.428699 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 19:42:20.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:20.460536 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 19:42:20.482858 systemd-tmpfiles[1562]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 19:42:20.587733 systemd-fsck[1567]: fsck.fat 4.2 (2021-01-31) Oct 2 19:42:20.587733 systemd-fsck[1567]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 19:42:20.593202 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 19:42:20.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:20.596928 systemd[1]: Mounting boot.mount... Oct 2 19:42:20.622606 systemd[1]: Mounted boot.mount. Oct 2 19:42:20.681920 systemd[1]: Finished systemd-boot-update.service. Oct 2 19:42:20.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.025873 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 19:42:21.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.029428 systemd[1]: Starting audit-rules.service... Oct 2 19:42:21.033256 systemd[1]: Starting clean-ca-certificates.service... Oct 2 19:42:21.038977 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 19:42:21.046000 audit: BPF prog-id=27 op=LOAD Oct 2 19:42:21.058000 audit: BPF prog-id=28 op=LOAD Oct 2 19:42:21.048658 systemd[1]: Starting systemd-resolved.service... Oct 2 19:42:21.063362 systemd[1]: Starting systemd-timesyncd.service... Oct 2 19:42:21.066401 systemd[1]: Starting systemd-update-utmp.service... Oct 2 19:42:21.087584 systemd[1]: Finished clean-ca-certificates.service. Oct 2 19:42:21.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.090642 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 19:42:21.093000 audit[1589]: SYSTEM_BOOT pid=1589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.100134 systemd[1]: Finished systemd-update-utmp.service. Oct 2 19:42:21.100000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.190224 systemd-networkd[1448]: eth0: Gained IPv6LL Oct 2 19:42:21.196545 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 19:42:21.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.247709 systemd[1]: Started systemd-timesyncd.service. Oct 2 19:42:21.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.249271 systemd[1]: Reached target time-set.target. Oct 2 19:42:21.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:21.288850 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 19:42:21.293528 systemd-resolved[1586]: Positive Trust Anchors: Oct 2 19:42:21.293545 systemd-resolved[1586]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 19:42:21.293591 systemd-resolved[1586]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 19:42:21.306000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 19:42:21.306000 audit[1604]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff5f8003e0 a2=420 a3=0 items=0 ppid=1583 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:21.306000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 19:42:21.310365 augenrules[1604]: No rules Oct 2 19:42:21.311821 systemd[1]: Finished audit-rules.service. Oct 2 19:42:21.343872 systemd-resolved[1586]: Defaulting to hostname 'linux'. Oct 2 19:42:21.345956 systemd[1]: Started systemd-resolved.service. Oct 2 19:42:21.347199 systemd[1]: Reached target network.target. Oct 2 19:42:21.348315 systemd[1]: Reached target network-online.target. Oct 2 19:42:21.349584 systemd[1]: Reached target nss-lookup.target. Oct 2 19:42:21.358008 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 19:42:21.358639 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 19:42:22.170747 systemd-timesyncd[1588]: Contacted time server 198.137.202.56:123 (0.flatcar.pool.ntp.org). Oct 2 19:42:22.170833 systemd-timesyncd[1588]: Initial clock synchronization to Mon 2023-10-02 19:42:22.170583 UTC. Oct 2 19:42:22.171551 systemd-resolved[1586]: Clock change detected. Flushing caches. Oct 2 19:42:22.566839 ldconfig[1558]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 19:42:22.577824 systemd[1]: Finished ldconfig.service. Oct 2 19:42:22.582165 systemd[1]: Starting systemd-update-done.service... Oct 2 19:42:22.598784 systemd[1]: Finished systemd-update-done.service. Oct 2 19:42:22.600266 systemd[1]: Reached target sysinit.target. Oct 2 19:42:22.601671 systemd[1]: Started motdgen.path. Oct 2 19:42:22.603473 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 19:42:22.614846 systemd[1]: Started logrotate.timer. Oct 2 19:42:22.620751 systemd[1]: Started mdadm.timer. Oct 2 19:42:22.623538 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 19:42:22.624826 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 19:42:22.624873 systemd[1]: Reached target paths.target. Oct 2 19:42:22.625913 systemd[1]: Reached target timers.target. Oct 2 19:42:22.627891 systemd[1]: Listening on dbus.socket. Oct 2 19:42:22.630279 systemd[1]: Starting docker.socket... Oct 2 19:42:22.634908 systemd[1]: Listening on sshd.socket. Oct 2 19:42:22.637195 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:42:22.637721 systemd[1]: Listening on docker.socket. Oct 2 19:42:22.640336 systemd[1]: Reached target sockets.target. Oct 2 19:42:22.641794 systemd[1]: Reached target basic.target. Oct 2 19:42:22.642934 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:42:22.642965 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 19:42:22.644264 systemd[1]: Started amazon-ssm-agent.service. Oct 2 19:42:22.646662 systemd[1]: Starting containerd.service... Oct 2 19:42:22.649069 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 19:42:22.653506 systemd[1]: Starting dbus.service... Oct 2 19:42:22.657773 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 19:42:22.660674 systemd[1]: Starting extend-filesystems.service... Oct 2 19:42:22.661997 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 19:42:22.663506 systemd[1]: Starting motdgen.service... Oct 2 19:42:22.666103 systemd[1]: Started nvidia.service. Oct 2 19:42:22.670584 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 19:42:22.674439 systemd[1]: Starting prepare-critools.service... Oct 2 19:42:22.677843 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 19:42:22.685424 systemd[1]: Starting sshd-keygen.service... Oct 2 19:42:22.697525 systemd[1]: Starting systemd-logind.service... Oct 2 19:42:22.698724 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 19:42:22.698807 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 19:42:22.699632 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 19:42:22.700691 systemd[1]: Starting update-engine.service... Oct 2 19:42:22.704079 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 19:42:22.779365 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 19:42:22.779593 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 19:42:22.797811 jq[1616]: false Oct 2 19:42:22.796010 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 19:42:22.798093 jq[1626]: true Oct 2 19:42:22.796233 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 19:42:22.876475 tar[1628]: ./ Oct 2 19:42:22.888596 tar[1628]: ./loopback Oct 2 19:42:22.927612 tar[1627]: crictl Oct 2 19:42:23.015264 dbus-daemon[1615]: [system] SELinux support is enabled Oct 2 19:42:23.015470 systemd[1]: Started dbus.service. Oct 2 19:42:23.033554 jq[1640]: true Oct 2 19:42:23.028552 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 19:42:23.028596 systemd[1]: Reached target system-config.target. Oct 2 19:42:23.030072 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 19:42:23.030111 systemd[1]: Reached target user-config.target. Oct 2 19:42:23.031742 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 19:42:23.031945 systemd[1]: Finished motdgen.service. Oct 2 19:42:23.042828 dbus-daemon[1615]: [system] Activating systemd to hand-off: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1448 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 19:42:23.044565 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.systemd1' Oct 2 19:42:23.050411 systemd[1]: Starting systemd-hostnamed.service... Oct 2 19:42:23.056025 extend-filesystems[1617]: Found nvme0n1 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p4 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p1 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p2 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p3 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found usr Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p6 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p7 Oct 2 19:42:23.068599 extend-filesystems[1617]: Found nvme0n1p9 Oct 2 19:42:23.079985 extend-filesystems[1617]: Checking size of /dev/nvme0n1p9 Oct 2 19:42:23.114675 amazon-ssm-agent[1612]: 2023/10/02 19:42:23 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 19:42:23.160143 amazon-ssm-agent[1612]: Initializing new seelog logger Oct 2 19:42:23.160296 amazon-ssm-agent[1612]: New Seelog Logger Creation Complete Oct 2 19:42:23.160384 amazon-ssm-agent[1612]: 2023/10/02 19:42:23 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:42:23.160384 amazon-ssm-agent[1612]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 19:42:23.160863 amazon-ssm-agent[1612]: 2023/10/02 19:42:23 processing appconfig overrides Oct 2 19:42:23.164406 extend-filesystems[1617]: Resized partition /dev/nvme0n1p9 Oct 2 19:42:23.185889 extend-filesystems[1678]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 19:42:23.204515 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 19:42:23.218531 env[1632]: time="2023-10-02T19:42:23.218434096Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 19:42:23.232224 update_engine[1625]: I1002 19:42:23.230849 1625 main.cc:92] Flatcar Update Engine starting Oct 2 19:42:23.238943 systemd[1]: Started update-engine.service. Oct 2 19:42:23.239541 update_engine[1625]: I1002 19:42:23.239406 1625 update_check_scheduler.cc:74] Next update check in 3m7s Oct 2 19:42:23.242614 systemd[1]: Started locksmithd.service. Oct 2 19:42:23.321502 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 19:42:23.356730 extend-filesystems[1678]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 19:42:23.356730 extend-filesystems[1678]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 19:42:23.356730 extend-filesystems[1678]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 19:42:23.364334 bash[1689]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:42:23.352354 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 19:42:23.364592 extend-filesystems[1617]: Resized filesystem in /dev/nvme0n1p9 Oct 2 19:42:23.353024 systemd[1]: Finished extend-filesystems.service. Oct 2 19:42:23.355114 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 19:42:23.406135 systemd-logind[1624]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 19:42:23.406170 systemd-logind[1624]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 19:42:23.406193 systemd-logind[1624]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 19:42:23.407690 systemd-logind[1624]: New seat seat0. Oct 2 19:42:23.418776 systemd[1]: Started systemd-logind.service. Oct 2 19:42:23.421584 tar[1628]: ./bandwidth Oct 2 19:42:23.526742 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 19:42:23.526931 systemd[1]: Started systemd-hostnamed.service. Oct 2 19:42:23.535870 dbus-daemon[1615]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1660 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 19:42:23.540637 systemd[1]: Starting polkit.service... Oct 2 19:42:23.578741 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 19:42:23.588057 polkitd[1708]: Started polkitd version 121 Oct 2 19:42:23.594092 env[1632]: time="2023-10-02T19:42:23.593924872Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 19:42:23.594227 env[1632]: time="2023-10-02T19:42:23.594105152Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:23.599569 env[1632]: time="2023-10-02T19:42:23.598815749Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:42:23.599569 env[1632]: time="2023-10-02T19:42:23.598869051Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:23.599569 env[1632]: time="2023-10-02T19:42:23.599525813Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:42:23.599569 env[1632]: time="2023-10-02T19:42:23.599557784Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:23.599569 env[1632]: time="2023-10-02T19:42:23.599577747Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 19:42:23.600184 env[1632]: time="2023-10-02T19:42:23.599590729Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:23.600184 env[1632]: time="2023-10-02T19:42:23.599836853Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:23.600385 env[1632]: time="2023-10-02T19:42:23.600356894Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 19:42:23.600630 env[1632]: time="2023-10-02T19:42:23.600599468Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 19:42:23.600695 env[1632]: time="2023-10-02T19:42:23.600632028Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 19:42:23.600741 env[1632]: time="2023-10-02T19:42:23.600713607Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 19:42:23.600741 env[1632]: time="2023-10-02T19:42:23.600732725Z" level=info msg="metadata content store policy set" policy=shared Oct 2 19:42:23.617519 env[1632]: time="2023-10-02T19:42:23.617401035Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 19:42:23.617519 env[1632]: time="2023-10-02T19:42:23.617522667Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 19:42:23.617745 env[1632]: time="2023-10-02T19:42:23.617547486Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 19:42:23.617745 env[1632]: time="2023-10-02T19:42:23.617610766Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.617745 env[1632]: time="2023-10-02T19:42:23.617632498Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.617910 env[1632]: time="2023-10-02T19:42:23.617760671Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.617910 env[1632]: time="2023-10-02T19:42:23.617783050Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.617910 env[1632]: time="2023-10-02T19:42:23.617805768Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.617910 env[1632]: time="2023-10-02T19:42:23.617872199Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.617910 env[1632]: time="2023-10-02T19:42:23.617892215Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.618189 env[1632]: time="2023-10-02T19:42:23.617928876Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.618189 env[1632]: time="2023-10-02T19:42:23.617949389Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 19:42:23.618282 env[1632]: time="2023-10-02T19:42:23.618199026Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 19:42:23.618408 env[1632]: time="2023-10-02T19:42:23.618386289Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 19:42:23.619325 env[1632]: time="2023-10-02T19:42:23.619293166Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 19:42:23.619449 env[1632]: time="2023-10-02T19:42:23.619355744Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619449 env[1632]: time="2023-10-02T19:42:23.619377575Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 19:42:23.619650 env[1632]: time="2023-10-02T19:42:23.619510447Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619650 env[1632]: time="2023-10-02T19:42:23.619534430Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619836 env[1632]: time="2023-10-02T19:42:23.619665140Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619836 env[1632]: time="2023-10-02T19:42:23.619687850Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619836 env[1632]: time="2023-10-02T19:42:23.619706862Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619836 env[1632]: time="2023-10-02T19:42:23.619775347Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619836 env[1632]: time="2023-10-02T19:42:23.619813734Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.619836 env[1632]: time="2023-10-02T19:42:23.619833375Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.620375 env[1632]: time="2023-10-02T19:42:23.619854007Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 19:42:23.620375 env[1632]: time="2023-10-02T19:42:23.620325989Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.620375 env[1632]: time="2023-10-02T19:42:23.620355832Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.620558 env[1632]: time="2023-10-02T19:42:23.620376736Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.620558 env[1632]: time="2023-10-02T19:42:23.620412272Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 19:42:23.620558 env[1632]: time="2023-10-02T19:42:23.620435921Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 19:42:23.620558 env[1632]: time="2023-10-02T19:42:23.620506003Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 19:42:23.620558 env[1632]: time="2023-10-02T19:42:23.620534317Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 19:42:23.620839 env[1632]: time="2023-10-02T19:42:23.620594340Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 19:42:23.630614 env[1632]: time="2023-10-02T19:42:23.621048939Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.630629476Z" level=info msg="Connect containerd service" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.630924371Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.631939411Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.632313387Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.632410843Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.633607476Z" level=info msg="Start subscribing containerd event" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.633688644Z" level=info msg="Start recovering state" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.633791639Z" level=info msg="Start event monitor" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.633806517Z" level=info msg="Start snapshots syncer" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.633819332Z" level=info msg="Start cni network conf syncer for default" Oct 2 19:42:23.639242 env[1632]: time="2023-10-02T19:42:23.633829285Z" level=info msg="Start streaming server" Oct 2 19:42:23.633396 polkitd[1708]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 19:42:23.632633 systemd[1]: Started containerd.service. Oct 2 19:42:23.633469 polkitd[1708]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 19:42:23.656541 polkitd[1708]: Finished loading, compiling and executing 2 rules Oct 2 19:42:23.657359 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 19:42:23.657572 systemd[1]: Started polkit.service. Oct 2 19:42:23.660061 polkitd[1708]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 19:42:23.680575 env[1632]: time="2023-10-02T19:42:23.680448058Z" level=info msg="containerd successfully booted in 0.463165s" Oct 2 19:42:23.702618 systemd-hostnamed[1660]: Hostname set to (transient) Oct 2 19:42:23.702748 systemd-resolved[1586]: System hostname changed to 'ip-172-31-22-231'. Oct 2 19:42:23.734608 tar[1628]: ./ptp Oct 2 19:42:23.899425 tar[1628]: ./vlan Oct 2 19:42:24.040883 amazon-ssm-agent[1612]: 2023-10-02 19:42:24 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0045c971f2f501441 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0045c971f2f501441 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:42:24.040883 amazon-ssm-agent[1612]: status code: 400, request id: a85dcc4b-3c10-4943-9a65-5297a868b213 Oct 2 19:42:24.040883 amazon-ssm-agent[1612]: 2023-10-02 19:42:24 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 19:42:24.055471 coreos-metadata[1614]: Oct 02 19:42:24.055 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 19:42:24.059469 coreos-metadata[1614]: Oct 02 19:42:24.059 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 19:42:24.060322 coreos-metadata[1614]: Oct 02 19:42:24.060 INFO Fetch successful Oct 2 19:42:24.060566 coreos-metadata[1614]: Oct 02 19:42:24.060 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 19:42:24.061448 coreos-metadata[1614]: Oct 02 19:42:24.061 INFO Fetch successful Oct 2 19:42:24.078078 unknown[1614]: wrote ssh authorized keys file for user: core Oct 2 19:42:24.089760 tar[1628]: ./host-device Oct 2 19:42:24.103059 update-ssh-keys[1791]: Updated "/home/core/.ssh/authorized_keys" Oct 2 19:42:24.103404 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 19:42:24.198210 tar[1628]: ./tuning Oct 2 19:42:24.270752 tar[1628]: ./vrf Oct 2 19:42:24.334240 tar[1628]: ./sbr Oct 2 19:42:24.400718 tar[1628]: ./tap Oct 2 19:42:24.482049 tar[1628]: ./dhcp Oct 2 19:42:24.650887 tar[1628]: ./static Oct 2 19:42:24.691709 tar[1628]: ./firewall Oct 2 19:42:24.764202 tar[1628]: ./macvlan Oct 2 19:42:24.894184 tar[1628]: ./dummy Oct 2 19:42:25.010381 tar[1628]: ./bridge Oct 2 19:42:25.044651 systemd[1]: Finished prepare-critools.service. Oct 2 19:42:25.109959 tar[1628]: ./ipvlan Oct 2 19:42:25.187194 tar[1628]: ./portmap Oct 2 19:42:25.246236 tar[1628]: ./host-local Oct 2 19:42:25.320320 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 19:42:25.430398 locksmithd[1696]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 19:42:27.653067 sshd_keygen[1654]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 19:42:27.689339 systemd[1]: Finished sshd-keygen.service. Oct 2 19:42:27.693173 systemd[1]: Starting issuegen.service... Oct 2 19:42:27.702678 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 19:42:27.702894 systemd[1]: Finished issuegen.service. Oct 2 19:42:27.706458 systemd[1]: Starting systemd-user-sessions.service... Oct 2 19:42:27.716806 systemd[1]: Finished systemd-user-sessions.service. Oct 2 19:42:27.720493 systemd[1]: Started getty@tty1.service. Oct 2 19:42:27.724714 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 19:42:27.726255 systemd[1]: Reached target getty.target. Oct 2 19:42:27.730157 systemd[1]: Reached target multi-user.target. Oct 2 19:42:27.733230 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 19:42:27.752771 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 19:42:27.753589 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 19:42:27.756036 systemd[1]: Startup finished in 767ms (kernel) + 13.190s (initrd) + 14.037s (userspace) = 27.995s. Oct 2 19:42:31.587412 systemd[1]: Created slice system-sshd.slice. Oct 2 19:42:31.589053 systemd[1]: Started sshd@0-172.31.22.231:22-139.178.89.65:53134.service. Oct 2 19:42:31.770698 sshd[1826]: Accepted publickey for core from 139.178.89.65 port 53134 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:31.772817 sshd[1826]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:31.786156 systemd[1]: Created slice user-500.slice. Oct 2 19:42:31.788355 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 19:42:31.793144 systemd-logind[1624]: New session 1 of user core. Oct 2 19:42:31.800957 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 19:42:31.803294 systemd[1]: Starting user@500.service... Oct 2 19:42:31.807583 (systemd)[1829]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:31.904811 systemd[1829]: Queued start job for default target default.target. Oct 2 19:42:31.905597 systemd[1829]: Reached target paths.target. Oct 2 19:42:31.905627 systemd[1829]: Reached target sockets.target. Oct 2 19:42:31.905644 systemd[1829]: Reached target timers.target. Oct 2 19:42:31.905661 systemd[1829]: Reached target basic.target. Oct 2 19:42:31.905781 systemd[1]: Started user@500.service. Oct 2 19:42:31.907210 systemd[1]: Started session-1.scope. Oct 2 19:42:31.908440 systemd[1829]: Reached target default.target. Oct 2 19:42:31.908689 systemd[1829]: Startup finished in 93ms. Oct 2 19:42:32.059620 systemd[1]: Started sshd@1-172.31.22.231:22-139.178.89.65:53138.service. Oct 2 19:42:32.223791 sshd[1838]: Accepted publickey for core from 139.178.89.65 port 53138 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:32.225706 sshd[1838]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:32.234007 systemd[1]: Started session-2.scope. Oct 2 19:42:32.234649 systemd-logind[1624]: New session 2 of user core. Oct 2 19:42:32.367415 sshd[1838]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:32.370710 systemd[1]: sshd@1-172.31.22.231:22-139.178.89.65:53138.service: Deactivated successfully. Oct 2 19:42:32.371577 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 19:42:32.372212 systemd-logind[1624]: Session 2 logged out. Waiting for processes to exit. Oct 2 19:42:32.373078 systemd-logind[1624]: Removed session 2. Oct 2 19:42:32.393372 systemd[1]: Started sshd@2-172.31.22.231:22-139.178.89.65:53140.service. Oct 2 19:42:32.558750 sshd[1844]: Accepted publickey for core from 139.178.89.65 port 53140 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:32.559772 sshd[1844]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:32.566511 systemd[1]: Started session-3.scope. Oct 2 19:42:32.567201 systemd-logind[1624]: New session 3 of user core. Oct 2 19:42:32.686837 sshd[1844]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:32.690260 systemd[1]: sshd@2-172.31.22.231:22-139.178.89.65:53140.service: Deactivated successfully. Oct 2 19:42:32.691311 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 19:42:32.692130 systemd-logind[1624]: Session 3 logged out. Waiting for processes to exit. Oct 2 19:42:32.693370 systemd-logind[1624]: Removed session 3. Oct 2 19:42:32.713501 systemd[1]: Started sshd@3-172.31.22.231:22-139.178.89.65:53152.service. Oct 2 19:42:32.877962 sshd[1850]: Accepted publickey for core from 139.178.89.65 port 53152 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:32.879044 sshd[1850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:32.885672 systemd[1]: Started session-4.scope. Oct 2 19:42:32.886529 systemd-logind[1624]: New session 4 of user core. Oct 2 19:42:33.011519 sshd[1850]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:33.015243 systemd[1]: sshd@3-172.31.22.231:22-139.178.89.65:53152.service: Deactivated successfully. Oct 2 19:42:33.016574 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 19:42:33.017397 systemd-logind[1624]: Session 4 logged out. Waiting for processes to exit. Oct 2 19:42:33.019695 systemd-logind[1624]: Removed session 4. Oct 2 19:42:33.038461 systemd[1]: Started sshd@4-172.31.22.231:22-139.178.89.65:53168.service. Oct 2 19:42:33.199982 sshd[1856]: Accepted publickey for core from 139.178.89.65 port 53168 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:33.201194 sshd[1856]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:33.211389 systemd-logind[1624]: New session 5 of user core. Oct 2 19:42:33.212828 systemd[1]: Started session-5.scope. Oct 2 19:42:33.352212 sudo[1859]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 19:42:33.353138 sudo[1859]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:33.366744 dbus-daemon[1615]: н*\xb1\x80U: received setenforce notice (enforcing=2023462544) Oct 2 19:42:33.368781 sudo[1859]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:33.392827 sshd[1856]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:33.397566 systemd[1]: sshd@4-172.31.22.231:22-139.178.89.65:53168.service: Deactivated successfully. Oct 2 19:42:33.399837 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 19:42:33.401970 systemd-logind[1624]: Session 5 logged out. Waiting for processes to exit. Oct 2 19:42:33.406741 systemd-logind[1624]: Removed session 5. Oct 2 19:42:33.425751 systemd[1]: Started sshd@5-172.31.22.231:22-139.178.89.65:53178.service. Oct 2 19:42:33.604334 sshd[1863]: Accepted publickey for core from 139.178.89.65 port 53178 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:33.606834 sshd[1863]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:33.618906 systemd[1]: Started session-6.scope. Oct 2 19:42:33.620405 systemd-logind[1624]: New session 6 of user core. Oct 2 19:42:33.753258 sudo[1867]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 19:42:33.753726 sudo[1867]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:33.767507 sudo[1867]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:33.778765 sudo[1866]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 19:42:33.779061 sudo[1866]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:33.805296 systemd[1]: Stopping audit-rules.service... Oct 2 19:42:33.813511 kernel: kauditd_printk_skb: 182 callbacks suppressed Oct 2 19:42:33.813666 kernel: audit: type=1305 audit(1696275753.809:163): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:42:33.809000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 19:42:33.815757 auditctl[1870]: No rules Oct 2 19:42:33.809000 audit[1870]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd5517a220 a2=420 a3=0 items=0 ppid=1 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.820210 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 19:42:33.821722 systemd[1]: Stopped audit-rules.service. Oct 2 19:42:33.824772 systemd[1]: Starting audit-rules.service... Oct 2 19:42:33.833944 kernel: audit: type=1300 audit(1696275753.809:163): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd5517a220 a2=420 a3=0 items=0 ppid=1 pid=1870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:33.834043 kernel: audit: type=1327 audit(1696275753.809:163): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:42:33.809000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 19:42:33.821000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.843837 kernel: audit: type=1131 audit(1696275753.821:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.866928 augenrules[1887]: No rules Oct 2 19:42:33.868908 systemd[1]: Finished audit-rules.service. Oct 2 19:42:33.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.871203 sudo[1866]: pam_unix(sudo:session): session closed for user root Oct 2 19:42:33.869000 audit[1866]: USER_END pid=1866 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.882617 kernel: audit: type=1130 audit(1696275753.867:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.882950 kernel: audit: type=1106 audit(1696275753.869:166): pid=1866 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.883038 kernel: audit: type=1104 audit(1696275753.869:167): pid=1866 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.869000 audit[1866]: CRED_DISP pid=1866 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.895634 sshd[1863]: pam_unix(sshd:session): session closed for user core Oct 2 19:42:33.895000 audit[1863]: USER_END pid=1863 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.900202 systemd[1]: sshd@5-172.31.22.231:22-139.178.89.65:53178.service: Deactivated successfully. Oct 2 19:42:33.901865 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 19:42:33.903545 systemd-logind[1624]: Session 6 logged out. Waiting for processes to exit. Oct 2 19:42:33.895000 audit[1863]: CRED_DISP pid=1863 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.906203 systemd-logind[1624]: Removed session 6. Oct 2 19:42:33.912700 kernel: audit: type=1106 audit(1696275753.895:168): pid=1863 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.912919 kernel: audit: type=1104 audit(1696275753.895:169): pid=1863 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:33.912958 kernel: audit: type=1131 audit(1696275753.899:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.22.231:22-139.178.89.65:53178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.22.231:22-139.178.89.65:53178 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:33.927975 systemd[1]: Started sshd@6-172.31.22.231:22-139.178.89.65:53184.service. Oct 2 19:42:33.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.231:22-139.178.89.65:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:34.092000 audit[1893]: USER_ACCT pid=1893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:34.094646 sshd[1893]: Accepted publickey for core from 139.178.89.65 port 53184 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:42:34.094000 audit[1893]: CRED_ACQ pid=1893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:34.094000 audit[1893]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef695f4a0 a2=3 a3=0 items=0 ppid=1 pid=1893 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:34.094000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:42:34.096979 sshd[1893]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:42:34.102581 systemd-logind[1624]: New session 7 of user core. Oct 2 19:42:34.103149 systemd[1]: Started session-7.scope. Oct 2 19:42:34.108000 audit[1893]: USER_START pid=1893 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:34.110000 audit[1895]: CRED_ACQ pid=1895 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:42:34.213000 audit[1896]: USER_ACCT pid=1896 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:34.215536 sudo[1896]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 19:42:34.214000 audit[1896]: CRED_REFR pid=1896 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:34.219366 sudo[1896]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 19:42:34.228000 audit[1896]: USER_START pid=1896 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:42:34.946602 systemd[1]: Starting docker.service... Oct 2 19:42:34.989325 env[1911]: time="2023-10-02T19:42:34.989267423Z" level=info msg="Starting up" Oct 2 19:42:34.990819 env[1911]: time="2023-10-02T19:42:34.990780275Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:42:34.990819 env[1911]: time="2023-10-02T19:42:34.990801230Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:42:34.990979 env[1911]: time="2023-10-02T19:42:34.990823946Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:42:34.990979 env[1911]: time="2023-10-02T19:42:34.990838063Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:42:34.993150 env[1911]: time="2023-10-02T19:42:34.993086473Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 19:42:34.993275 env[1911]: time="2023-10-02T19:42:34.993258884Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 19:42:34.993396 env[1911]: time="2023-10-02T19:42:34.993377573Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 19:42:34.993452 env[1911]: time="2023-10-02T19:42:34.993442738Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 19:42:35.001530 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport762096399-merged.mount: Deactivated successfully. Oct 2 19:42:35.046412 env[1911]: time="2023-10-02T19:42:35.046360830Z" level=info msg="Loading containers: start." Oct 2 19:42:35.123000 audit[1942]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1942 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.123000 audit[1942]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd74609dd0 a2=0 a3=7ffd74609dbc items=0 ppid=1911 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.123000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 19:42:35.127000 audit[1944]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1944 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.127000 audit[1944]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffdd15551a0 a2=0 a3=7ffdd155518c items=0 ppid=1911 pid=1944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.127000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 19:42:35.129000 audit[1946]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.129000 audit[1946]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe6b5e6d50 a2=0 a3=7ffe6b5e6d3c items=0 ppid=1911 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.129000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:42:35.132000 audit[1948]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.132000 audit[1948]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffea2098430 a2=0 a3=7ffea209841c items=0 ppid=1911 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.132000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:42:35.136000 audit[1950]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.136000 audit[1950]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff95b492c0 a2=0 a3=7fff95b492ac items=0 ppid=1911 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.136000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 19:42:35.168000 audit[1955]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1955 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.168000 audit[1955]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc8ffce5d0 a2=0 a3=7ffc8ffce5bc items=0 ppid=1911 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.168000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 19:42:35.178000 audit[1957]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1957 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.178000 audit[1957]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc8a654e60 a2=0 a3=7ffc8a654e4c items=0 ppid=1911 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.178000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 19:42:35.182000 audit[1959]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.182000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffde58c7560 a2=0 a3=7ffde58c754c items=0 ppid=1911 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.182000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 19:42:35.186000 audit[1961]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.186000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd69950d80 a2=0 a3=7ffd69950d6c items=0 ppid=1911 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.186000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:35.199000 audit[1965]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.199000 audit[1965]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffa0c515a0 a2=0 a3=7fffa0c5158c items=0 ppid=1911 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.199000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:35.201000 audit[1966]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1966 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.201000 audit[1966]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fffe76e1af0 a2=0 a3=7fffe76e1adc items=0 ppid=1911 pid=1966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.201000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:35.214528 kernel: Initializing XFRM netlink socket Oct 2 19:42:35.262729 env[1911]: time="2023-10-02T19:42:35.262687754Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 19:42:35.264394 (udev-worker)[1920]: Network interface NamePolicy= disabled on kernel command line. Oct 2 19:42:35.324000 audit[1974]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.324000 audit[1974]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd0f5dcef0 a2=0 a3=7ffd0f5dcedc items=0 ppid=1911 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.324000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 19:42:35.398000 audit[1977]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.398000 audit[1977]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fff62e459e0 a2=0 a3=7fff62e459cc items=0 ppid=1911 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.398000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 19:42:35.402000 audit[1980]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1980 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.402000 audit[1980]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd21a70f10 a2=0 a3=7ffd21a70efc items=0 ppid=1911 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.402000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 19:42:35.404000 audit[1982]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1982 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.404000 audit[1982]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd666f6380 a2=0 a3=7ffd666f636c items=0 ppid=1911 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.404000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 19:42:35.407000 audit[1984]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.407000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe767e9a00 a2=0 a3=7ffe767e99ec items=0 ppid=1911 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.407000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 19:42:35.410000 audit[1986]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.410000 audit[1986]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7fff073f4ed0 a2=0 a3=7fff073f4ebc items=0 ppid=1911 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.410000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 19:42:35.412000 audit[1988]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.412000 audit[1988]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc1a2a21c0 a2=0 a3=7ffc1a2a21ac items=0 ppid=1911 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.412000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 19:42:35.425000 audit[1991]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1991 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.425000 audit[1991]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff2db544a0 a2=0 a3=7fff2db5448c items=0 ppid=1911 pid=1991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.425000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 19:42:35.429000 audit[1993]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1993 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.429000 audit[1993]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd4db918d0 a2=0 a3=7ffd4db918bc items=0 ppid=1911 pid=1993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.429000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 19:42:35.432000 audit[1995]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.432000 audit[1995]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fffb3df9bd0 a2=0 a3=7fffb3df9bbc items=0 ppid=1911 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.432000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 19:42:35.435000 audit[1997]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.435000 audit[1997]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffeb76c56a0 a2=0 a3=7ffeb76c568c items=0 ppid=1911 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.435000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 19:42:35.437663 systemd-networkd[1448]: docker0: Link UP Oct 2 19:42:35.448000 audit[2001]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.448000 audit[2001]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffff00862f0 a2=0 a3=7ffff00862dc items=0 ppid=1911 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.448000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:35.449000 audit[2002]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2002 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:42:35.449000 audit[2002]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffca1cca450 a2=0 a3=7ffca1cca43c items=0 ppid=1911 pid=2002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:42:35.449000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 19:42:35.451302 env[1911]: time="2023-10-02T19:42:35.451263336Z" level=info msg="Loading containers: done." Oct 2 19:42:35.480175 env[1911]: time="2023-10-02T19:42:35.479777601Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 19:42:35.481928 env[1911]: time="2023-10-02T19:42:35.481889668Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 19:42:35.482067 env[1911]: time="2023-10-02T19:42:35.482037814Z" level=info msg="Daemon has completed initialization" Oct 2 19:42:35.503024 systemd[1]: Started docker.service. Oct 2 19:42:35.501000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:35.518314 env[1911]: time="2023-10-02T19:42:35.518243613Z" level=info msg="API listen on /run/docker.sock" Oct 2 19:42:35.543678 systemd[1]: Reloading. Oct 2 19:42:35.681667 /usr/lib/systemd/system-generators/torcx-generator[2047]: time="2023-10-02T19:42:35Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:42:35.684299 /usr/lib/systemd/system-generators/torcx-generator[2047]: time="2023-10-02T19:42:35Z" level=info msg="torcx already run" Oct 2 19:42:35.820517 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:42:35.820543 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:42:35.852841 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:42:35.968000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit: BPF prog-id=37 op=LOAD Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.970000 audit: BPF prog-id=38 op=LOAD Oct 2 19:42:35.970000 audit: BPF prog-id=21 op=UNLOAD Oct 2 19:42:35.970000 audit: BPF prog-id=22 op=UNLOAD Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.971000 audit: BPF prog-id=39 op=LOAD Oct 2 19:42:35.971000 audit: BPF prog-id=27 op=UNLOAD Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit: BPF prog-id=40 op=LOAD Oct 2 19:42:35.972000 audit: BPF prog-id=32 op=UNLOAD Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit: BPF prog-id=41 op=LOAD Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.972000 audit: BPF prog-id=42 op=LOAD Oct 2 19:42:35.972000 audit: BPF prog-id=33 op=UNLOAD Oct 2 19:42:35.972000 audit: BPF prog-id=34 op=UNLOAD Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.974000 audit: BPF prog-id=43 op=LOAD Oct 2 19:42:35.974000 audit: BPF prog-id=35 op=UNLOAD Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit: BPF prog-id=44 op=LOAD Oct 2 19:42:35.980000 audit: BPF prog-id=24 op=UNLOAD Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit: BPF prog-id=45 op=LOAD Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.980000 audit: BPF prog-id=46 op=LOAD Oct 2 19:42:35.980000 audit: BPF prog-id=25 op=UNLOAD Oct 2 19:42:35.980000 audit: BPF prog-id=26 op=UNLOAD Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.981000 audit: BPF prog-id=47 op=LOAD Oct 2 19:42:35.981000 audit: BPF prog-id=23 op=UNLOAD Oct 2 19:42:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.982000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.982000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit: BPF prog-id=48 op=LOAD Oct 2 19:42:35.983000 audit: BPF prog-id=28 op=UNLOAD Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.983000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit: BPF prog-id=49 op=LOAD Oct 2 19:42:35.984000 audit: BPF prog-id=18 op=UNLOAD Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit: BPF prog-id=50 op=LOAD Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.984000 audit: BPF prog-id=51 op=LOAD Oct 2 19:42:35.984000 audit: BPF prog-id=19 op=UNLOAD Oct 2 19:42:35.984000 audit: BPF prog-id=20 op=UNLOAD Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.986000 audit: BPF prog-id=52 op=LOAD Oct 2 19:42:35.987000 audit: BPF prog-id=29 op=UNLOAD Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit: BPF prog-id=53 op=LOAD Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:42:35.987000 audit: BPF prog-id=54 op=LOAD Oct 2 19:42:35.987000 audit: BPF prog-id=30 op=UNLOAD Oct 2 19:42:35.987000 audit: BPF prog-id=31 op=UNLOAD Oct 2 19:42:36.004000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:36.005908 systemd[1]: Started kubelet.service. Oct 2 19:42:36.101636 kubelet[2099]: E1002 19:42:36.096804 2099 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:42:36.107623 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:42:36.107795 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:42:36.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:36.575895 env[1632]: time="2023-10-02T19:42:36.575604875Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\"" Oct 2 19:42:37.233435 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount848063649.mount: Deactivated successfully. Oct 2 19:42:40.604706 env[1632]: time="2023-10-02T19:42:40.604649193Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:40.607743 env[1632]: time="2023-10-02T19:42:40.607697388Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:40.609937 env[1632]: time="2023-10-02T19:42:40.609895784Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:40.611981 env[1632]: time="2023-10-02T19:42:40.611944357Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5e7a0196a7908cb49bcbf751d2546a008c329ff1e70c26c1cd542e0ada4b623c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:40.612859 env[1632]: time="2023-10-02T19:42:40.612666902Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.27.6\" returns image reference \"sha256:19b9246d37c8b8c754a8af86facf1975604cfc709fc0ff736531917402189d9c\"" Oct 2 19:42:40.627456 env[1632]: time="2023-10-02T19:42:40.627417035Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\"" Oct 2 19:42:44.294735 env[1632]: time="2023-10-02T19:42:44.294679021Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:44.297659 env[1632]: time="2023-10-02T19:42:44.297615505Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:44.299878 env[1632]: time="2023-10-02T19:42:44.299839736Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:44.301950 env[1632]: time="2023-10-02T19:42:44.301911250Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:c76ca5b0cf607f82c54d51c3c6766da30c9a9f684065e1cac761ea9b07b74e97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:44.302818 env[1632]: time="2023-10-02T19:42:44.302778245Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.27.6\" returns image reference \"sha256:7810e6aed9778a5f84fc93f48b0c52edfc55333d7b8de7c71972df8c5b925988\"" Oct 2 19:42:44.315776 env[1632]: time="2023-10-02T19:42:44.315730160Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\"" Oct 2 19:42:46.297809 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 19:42:46.298050 kernel: audit: type=1130 audit(1696275766.283:413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.283000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.284610 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 19:42:46.285005 systemd[1]: Stopped kubelet.service. Oct 2 19:42:46.297366 systemd[1]: Started kubelet.service. Oct 2 19:42:46.312894 kernel: audit: type=1131 audit(1696275766.283:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.313002 kernel: audit: type=1130 audit(1696275766.296:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.283000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:46.470263 kubelet[2128]: E1002 19:42:46.470218 2128 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:42:46.490078 kernel: audit: type=1131 audit(1696275766.479:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:46.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:46.476707 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:42:46.476885 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:42:46.919326 env[1632]: time="2023-10-02T19:42:46.919270568Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:46.922627 env[1632]: time="2023-10-02T19:42:46.922156168Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:46.925043 env[1632]: time="2023-10-02T19:42:46.925001611Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:46.927541 env[1632]: time="2023-10-02T19:42:46.927489638Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:bb227512d96e93dd3fe356cef552cc3f78905f36330b762adde23c3f0943d57b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:46.928363 env[1632]: time="2023-10-02T19:42:46.928323811Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.27.6\" returns image reference \"sha256:993d768b9b96e874c4a171298200661de0d28e52f4d8764e6b2ed1c42470851d\"" Oct 2 19:42:46.944214 env[1632]: time="2023-10-02T19:42:46.944165324Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\"" Oct 2 19:42:48.628361 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4187634128.mount: Deactivated successfully. Oct 2 19:42:49.677883 env[1632]: time="2023-10-02T19:42:49.677819968Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:49.680667 env[1632]: time="2023-10-02T19:42:49.680559685Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:49.682769 env[1632]: time="2023-10-02T19:42:49.682730809Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.27.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:49.685365 env[1632]: time="2023-10-02T19:42:49.685319879Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.27.6\" returns image reference \"sha256:ec57bbfaaae73ecc3c12f05d5ae974468cc0ef356dee588cd15fd471815c7985\"" Oct 2 19:42:49.685753 env[1632]: time="2023-10-02T19:42:49.685726696Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:8e9eff2f6d0b398f9ac5f5a15c1cb7d5f468f28d64a78d593d57f72a969a54ef,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:49.697384 env[1632]: time="2023-10-02T19:42:49.697337513Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 19:42:50.211657 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount820088358.mount: Deactivated successfully. Oct 2 19:42:50.217995 env[1632]: time="2023-10-02T19:42:50.217929794Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:50.220303 env[1632]: time="2023-10-02T19:42:50.220242573Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:50.222824 env[1632]: time="2023-10-02T19:42:50.222787359Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:50.226324 env[1632]: time="2023-10-02T19:42:50.225793230Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:50.227306 env[1632]: time="2023-10-02T19:42:50.227270500Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 19:42:50.238596 env[1632]: time="2023-10-02T19:42:50.238540604Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\"" Oct 2 19:42:51.079146 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1002682435.mount: Deactivated successfully. Oct 2 19:42:53.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:53.731706 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 19:42:53.737527 kernel: audit: type=1131 audit(1696275773.731:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:53.754000 audit: BPF prog-id=42 op=UNLOAD Oct 2 19:42:53.761101 kernel: audit: type=1334 audit(1696275773.754:418): prog-id=42 op=UNLOAD Oct 2 19:42:53.761227 kernel: audit: type=1334 audit(1696275773.754:419): prog-id=41 op=UNLOAD Oct 2 19:42:53.761260 kernel: audit: type=1334 audit(1696275773.754:420): prog-id=40 op=UNLOAD Oct 2 19:42:53.754000 audit: BPF prog-id=41 op=UNLOAD Oct 2 19:42:53.754000 audit: BPF prog-id=40 op=UNLOAD Oct 2 19:42:56.550169 kernel: audit: type=1130 audit(1696275776.532:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:56.550410 kernel: audit: type=1131 audit(1696275776.532:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:56.532000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:56.532000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:56.533392 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 19:42:56.533701 systemd[1]: Stopped kubelet.service. Oct 2 19:42:56.542878 systemd[1]: Started kubelet.service. Oct 2 19:42:56.563804 kernel: audit: type=1130 audit(1696275776.542:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:56.542000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:42:56.686418 kubelet[2152]: E1002 19:42:56.686368 2152 run.go:74] "command failed" err="failed to load kubelet config file, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory, path: /var/lib/kubelet/config.yaml" Oct 2 19:42:56.698141 kernel: audit: type=1131 audit(1696275776.688:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:56.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 19:42:56.689645 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 19:42:56.689822 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 19:42:58.442095 env[1632]: time="2023-10-02T19:42:58.442030406Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:58.444808 env[1632]: time="2023-10-02T19:42:58.444734567Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:58.448130 env[1632]: time="2023-10-02T19:42:58.448087954Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.7-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:58.452061 env[1632]: time="2023-10-02T19:42:58.451992731Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:51eae8381dcb1078289fa7b4f3df2630cdc18d09fb56f8e56b41c40e191d6c83,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:42:58.452733 env[1632]: time="2023-10-02T19:42:58.452698184Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.7-0\" returns image reference \"sha256:86b6af7dd652c1b38118be1c338e9354b33469e69a218f7e290a0ca5304ad681\"" Oct 2 19:42:58.485499 env[1632]: time="2023-10-02T19:42:58.485449411Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 19:42:59.083569 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1916837475.mount: Deactivated successfully. Oct 2 19:43:00.046111 env[1632]: time="2023-10-02T19:43:00.046055956Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:00.058784 env[1632]: time="2023-10-02T19:43:00.058733932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:00.061040 env[1632]: time="2023-10-02T19:43:00.060992504Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:00.063433 env[1632]: time="2023-10-02T19:43:00.063390187Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:00.063926 env[1632]: time="2023-10-02T19:43:00.063890309Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 19:43:03.773779 systemd[1]: Stopped kubelet.service. Oct 2 19:43:03.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:03.785681 kernel: audit: type=1130 audit(1696275783.773:425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:03.785891 kernel: audit: type=1131 audit(1696275783.773:426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:03.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:03.819826 systemd[1]: Reloading. Oct 2 19:43:03.935918 /usr/lib/systemd/system-generators/torcx-generator[2251]: time="2023-10-02T19:43:03Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:43:03.935962 /usr/lib/systemd/system-generators/torcx-generator[2251]: time="2023-10-02T19:43:03Z" level=info msg="torcx already run" Oct 2 19:43:04.123808 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:43:04.123830 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:43:04.150514 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:43:04.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.316810 kernel: audit: type=1400 audit(1696275784.301:427): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.316968 kernel: audit: type=1400 audit(1696275784.307:428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.317119 kernel: audit: type=1400 audit(1696275784.307:429): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.328014 kernel: audit: type=1400 audit(1696275784.307:430): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.328145 kernel: audit: type=1400 audit(1696275784.307:431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.338559 kernel: audit: type=1400 audit(1696275784.307:432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.339001 kernel: audit: type=1400 audit(1696275784.307:433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.307000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.348918 kernel: audit: type=1400 audit(1696275784.307:434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit: BPF prog-id=55 op=LOAD Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit: BPF prog-id=56 op=LOAD Oct 2 19:43:04.332000 audit: BPF prog-id=37 op=UNLOAD Oct 2 19:43:04.332000 audit: BPF prog-id=38 op=UNLOAD Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit: BPF prog-id=57 op=LOAD Oct 2 19:43:04.343000 audit: BPF prog-id=39 op=UNLOAD Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.349000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.349000 audit: BPF prog-id=58 op=LOAD Oct 2 19:43:04.349000 audit: BPF prog-id=43 op=UNLOAD Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit: BPF prog-id=59 op=LOAD Oct 2 19:43:04.351000 audit: BPF prog-id=44 op=UNLOAD Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.351000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit: BPF prog-id=60 op=LOAD Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.352000 audit: BPF prog-id=61 op=LOAD Oct 2 19:43:04.352000 audit: BPF prog-id=45 op=UNLOAD Oct 2 19:43:04.352000 audit: BPF prog-id=46 op=UNLOAD Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.353000 audit: BPF prog-id=62 op=LOAD Oct 2 19:43:04.353000 audit: BPF prog-id=47 op=UNLOAD Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.356000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit: BPF prog-id=63 op=LOAD Oct 2 19:43:04.357000 audit: BPF prog-id=48 op=UNLOAD Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.357000 audit: BPF prog-id=64 op=LOAD Oct 2 19:43:04.358000 audit: BPF prog-id=49 op=UNLOAD Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit: BPF prog-id=65 op=LOAD Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.358000 audit: BPF prog-id=66 op=LOAD Oct 2 19:43:04.358000 audit: BPF prog-id=50 op=UNLOAD Oct 2 19:43:04.358000 audit: BPF prog-id=51 op=UNLOAD Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit: BPF prog-id=67 op=LOAD Oct 2 19:43:04.361000 audit: BPF prog-id=52 op=UNLOAD Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit: BPF prog-id=68 op=LOAD Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.361000 audit: BPF prog-id=69 op=LOAD Oct 2 19:43:04.361000 audit: BPF prog-id=53 op=UNLOAD Oct 2 19:43:04.361000 audit: BPF prog-id=54 op=UNLOAD Oct 2 19:43:04.388633 systemd[1]: Started kubelet.service. Oct 2 19:43:04.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:04.479502 kubelet[2304]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:43:04.479864 kubelet[2304]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:43:04.479913 kubelet[2304]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:43:04.480032 kubelet[2304]: I1002 19:43:04.480003 2304 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:43:04.859690 kubelet[2304]: I1002 19:43:04.859662 2304 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:43:04.860306 kubelet[2304]: I1002 19:43:04.859864 2304 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:43:04.860306 kubelet[2304]: I1002 19:43:04.860103 2304 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:43:04.865673 kubelet[2304]: E1002 19:43:04.865648 2304 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.22.231:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.865870 kubelet[2304]: I1002 19:43:04.865714 2304 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:43:04.868920 kubelet[2304]: I1002 19:43:04.868885 2304 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:43:04.869225 kubelet[2304]: I1002 19:43:04.869202 2304 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:43:04.869314 kubelet[2304]: I1002 19:43:04.869304 2304 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:43:04.869535 kubelet[2304]: I1002 19:43:04.869328 2304 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:43:04.869535 kubelet[2304]: I1002 19:43:04.869344 2304 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:43:04.869643 kubelet[2304]: I1002 19:43:04.869543 2304 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:43:04.873351 kubelet[2304]: I1002 19:43:04.873326 2304 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:43:04.873351 kubelet[2304]: I1002 19:43:04.873351 2304 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:43:04.873574 kubelet[2304]: I1002 19:43:04.873374 2304 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:43:04.873574 kubelet[2304]: I1002 19:43:04.873404 2304 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:43:04.874449 kubelet[2304]: I1002 19:43:04.874429 2304 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:43:04.874775 kubelet[2304]: W1002 19:43:04.874758 2304 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 19:43:04.876461 kubelet[2304]: W1002 19:43:04.876386 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.22.231:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-231&limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.876572 kubelet[2304]: E1002 19:43:04.876508 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.22.231:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-231&limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.876647 kubelet[2304]: I1002 19:43:04.876633 2304 server.go:1168] "Started kubelet" Oct 2 19:43:04.880000 audit[2304]: AVC avc: denied { mac_admin } for pid=2304 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.880000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:43:04.880000 audit[2304]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000cf8b40 a1=c000a28b58 a2=c000cf8b10 a3=25 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.880000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:43:04.880000 audit[2304]: AVC avc: denied { mac_admin } for pid=2304 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.880000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:43:04.880000 audit[2304]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00039d8e0 a1=c000a28b70 a2=c000cf8bd0 a3=25 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.880000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:43:04.881746 kubelet[2304]: I1002 19:43:04.881016 2304 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:43:04.881746 kubelet[2304]: I1002 19:43:04.881216 2304 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:43:04.881746 kubelet[2304]: I1002 19:43:04.881311 2304 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:43:04.886511 kubelet[2304]: I1002 19:43:04.886467 2304 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:43:04.889000 audit[2315]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.889000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff10d478a0 a2=0 a3=7fff10d4788c items=0 ppid=2304 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:43:04.892000 audit[2316]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.892000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe37ca4e30 a2=0 a3=7ffe37ca4e1c items=0 ppid=2304 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.892000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:43:04.894719 kubelet[2304]: I1002 19:43:04.894693 2304 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:43:04.896000 audit[2318]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.896000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff06e2ac90 a2=0 a3=7fff06e2ac7c items=0 ppid=2304 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.896000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:43:04.897580 kubelet[2304]: I1002 19:43:04.886649 2304 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:43:04.897859 kubelet[2304]: I1002 19:43:04.887601 2304 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:43:04.898168 kubelet[2304]: I1002 19:43:04.887619 2304 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:43:04.898275 kubelet[2304]: E1002 19:43:04.890934 2304 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-22-231.178a61d6ceaaa484", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-22-231", UID:"ip-172-31-22-231", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-22-231"}, FirstTimestamp:time.Date(2023, time.October, 2, 19, 43, 4, 876598404, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 19, 43, 4, 876598404, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.22.231:6443/api/v1/namespaces/default/events": dial tcp 172.31.22.231:6443: connect: connection refused'(may retry after sleeping) Oct 2 19:43:04.898646 kubelet[2304]: E1002 19:43:04.898632 2304 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:43:04.898722 kubelet[2304]: E1002 19:43:04.898715 2304 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:43:04.898875 kubelet[2304]: W1002 19:43:04.898846 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.22.231:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.898984 kubelet[2304]: E1002 19:43:04.898978 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.22.231:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.899975 kubelet[2304]: E1002 19:43:04.899954 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": dial tcp 172.31.22.231:6443: connect: connection refused" interval="200ms" Oct 2 19:43:04.900339 kubelet[2304]: W1002 19:43:04.900295 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.22.231:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.900470 kubelet[2304]: E1002 19:43:04.900458 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.22.231:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.904000 audit[2320]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.904000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffb07cd170 a2=0 a3=7fffb07cd15c items=0 ppid=2304 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:43:04.928000 audit[2326]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.928000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd0b2e3040 a2=0 a3=7ffd0b2e302c items=0 ppid=2304 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.928000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 19:43:04.931062 kubelet[2304]: I1002 19:43:04.931040 2304 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:43:04.939000 audit[2327]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:04.939000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc3c2a1050 a2=0 a3=7ffc3c2a103c items=0 ppid=2304 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.939000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 19:43:04.940699 kubelet[2304]: I1002 19:43:04.940682 2304 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:43:04.940842 kubelet[2304]: I1002 19:43:04.940830 2304 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:43:04.941186 kubelet[2304]: I1002 19:43:04.941140 2304 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:43:04.941363 kubelet[2304]: E1002 19:43:04.941333 2304 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:43:04.942275 kubelet[2304]: I1002 19:43:04.941425 2304 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:43:04.942384 kubelet[2304]: I1002 19:43:04.942373 2304 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:43:04.942475 kubelet[2304]: I1002 19:43:04.942466 2304 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:43:04.942000 audit[2328]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:04.942000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd551ec0b0 a2=0 a3=7ffd551ec09c items=0 ppid=2304 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.942000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:43:04.944000 audit[2329]: NETFILTER_CFG table=nat:33 family=10 entries=2 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:04.944000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffc1d606b10 a2=0 a3=7ffc1d606afc items=0 ppid=2304 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.944000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:43:04.947652 kubelet[2304]: W1002 19:43:04.947600 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.22.231:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.947982 kubelet[2304]: E1002 19:43:04.947968 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.22.231:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:04.947000 audit[2330]: NETFILTER_CFG table=mangle:34 family=2 entries=1 op=nft_register_chain pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.947000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc06c39be0 a2=0 a3=7ffc06c39bcc items=0 ppid=2304 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.947000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 19:43:04.950000 audit[2332]: NETFILTER_CFG table=filter:35 family=10 entries=2 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:04.950000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff5f7e4eb0 a2=0 a3=7fff5f7e4e9c items=0 ppid=2304 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.950000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:43:04.952289 kubelet[2304]: I1002 19:43:04.952264 2304 policy_none.go:49] "None policy: Start" Oct 2 19:43:04.951000 audit[2333]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.951000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8e013d40 a2=0 a3=7ffd8e013d2c items=0 ppid=2304 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.951000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 19:43:04.953622 kubelet[2304]: I1002 19:43:04.953598 2304 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:43:04.953711 kubelet[2304]: I1002 19:43:04.953629 2304 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:43:04.954000 audit[2334]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:04.954000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc688e8cf0 a2=0 a3=7ffc688e8cdc items=0 ppid=2304 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.954000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 19:43:04.967025 systemd[1]: Created slice kubepods.slice. Oct 2 19:43:04.972806 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 19:43:04.976613 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 19:43:04.983768 kubelet[2304]: I1002 19:43:04.983739 2304 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:43:04.983000 audit[2304]: AVC avc: denied { mac_admin } for pid=2304 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:04.983000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:43:04.983000 audit[2304]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0010ac150 a1=c001079470 a2=c0010ac120 a3=25 items=0 ppid=1 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:04.983000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:43:04.984192 kubelet[2304]: I1002 19:43:04.983887 2304 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:43:04.985910 kubelet[2304]: E1002 19:43:04.985880 2304 eviction_manager.go:262] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-22-231\" not found" Oct 2 19:43:04.986575 kubelet[2304]: I1002 19:43:04.986548 2304 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:43:04.989325 kubelet[2304]: I1002 19:43:04.989301 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:04.989726 kubelet[2304]: E1002 19:43:04.989714 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.231:6443/api/v1/nodes\": dial tcp 172.31.22.231:6443: connect: connection refused" node="ip-172-31-22-231" Oct 2 19:43:05.045286 kubelet[2304]: I1002 19:43:05.045213 2304 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:05.053069 kubelet[2304]: I1002 19:43:05.053038 2304 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:05.056877 kubelet[2304]: I1002 19:43:05.056824 2304 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:05.070462 systemd[1]: Created slice kubepods-burstable-podc3d669cc51be5ba167759079020f2cdc.slice. Oct 2 19:43:05.089382 systemd[1]: Created slice kubepods-burstable-pod43b6802bc0bbb41c408c3c95b8b2c340.slice. Oct 2 19:43:05.094393 systemd[1]: Created slice kubepods-burstable-pod3a6fa83bed3cecb71e4bce75adf2ab94.slice. Oct 2 19:43:05.101443 kubelet[2304]: E1002 19:43:05.101412 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": dial tcp 172.31.22.231:6443: connect: connection refused" interval="400ms" Oct 2 19:43:05.196543 kubelet[2304]: I1002 19:43:05.192969 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:05.196543 kubelet[2304]: E1002 19:43:05.193325 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.231:6443/api/v1/nodes\": dial tcp 172.31.22.231:6443: connect: connection refused" node="ip-172-31-22-231" Oct 2 19:43:05.199881 kubelet[2304]: I1002 19:43:05.199848 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:05.200154 kubelet[2304]: I1002 19:43:05.199895 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-kubeconfig\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:05.200154 kubelet[2304]: I1002 19:43:05.199925 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:05.200154 kubelet[2304]: I1002 19:43:05.200132 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3a6fa83bed3cecb71e4bce75adf2ab94-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-22-231\" (UID: \"3a6fa83bed3cecb71e4bce75adf2ab94\") " pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:05.200334 kubelet[2304]: I1002 19:43:05.200172 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3a6fa83bed3cecb71e4bce75adf2ab94-k8s-certs\") pod \"kube-apiserver-ip-172-31-22-231\" (UID: \"3a6fa83bed3cecb71e4bce75adf2ab94\") " pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:05.200334 kubelet[2304]: I1002 19:43:05.200200 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-ca-certs\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:05.200334 kubelet[2304]: I1002 19:43:05.200236 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-k8s-certs\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:05.200334 kubelet[2304]: I1002 19:43:05.200269 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/43b6802bc0bbb41c408c3c95b8b2c340-kubeconfig\") pod \"kube-scheduler-ip-172-31-22-231\" (UID: \"43b6802bc0bbb41c408c3c95b8b2c340\") " pod="kube-system/kube-scheduler-ip-172-31-22-231" Oct 2 19:43:05.200334 kubelet[2304]: I1002 19:43:05.200299 2304 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3a6fa83bed3cecb71e4bce75adf2ab94-ca-certs\") pod \"kube-apiserver-ip-172-31-22-231\" (UID: \"3a6fa83bed3cecb71e4bce75adf2ab94\") " pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:05.387915 env[1632]: time="2023-10-02T19:43:05.387870379Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-22-231,Uid:c3d669cc51be5ba167759079020f2cdc,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:05.392816 env[1632]: time="2023-10-02T19:43:05.392715428Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-22-231,Uid:43b6802bc0bbb41c408c3c95b8b2c340,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:05.397861 env[1632]: time="2023-10-02T19:43:05.397822029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-22-231,Uid:3a6fa83bed3cecb71e4bce75adf2ab94,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:05.502950 kubelet[2304]: E1002 19:43:05.502832 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": dial tcp 172.31.22.231:6443: connect: connection refused" interval="800ms" Oct 2 19:43:05.595988 kubelet[2304]: I1002 19:43:05.595855 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:05.596504 kubelet[2304]: E1002 19:43:05.596457 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.231:6443/api/v1/nodes\": dial tcp 172.31.22.231:6443: connect: connection refused" node="ip-172-31-22-231" Oct 2 19:43:05.766330 kubelet[2304]: W1002 19:43:05.766143 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.22.231:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-231&limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:05.766330 kubelet[2304]: E1002 19:43:05.766213 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.22.231:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-22-231&limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:05.839460 kubelet[2304]: W1002 19:43:05.839426 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.22.231:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:05.839630 kubelet[2304]: E1002 19:43:05.839466 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.22.231:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:05.904154 kubelet[2304]: W1002 19:43:05.904083 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.22.231:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:05.904154 kubelet[2304]: E1002 19:43:05.904128 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.22.231:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:05.917984 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount791570326.mount: Deactivated successfully. Oct 2 19:43:05.928655 env[1632]: time="2023-10-02T19:43:05.928599808Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.930548 env[1632]: time="2023-10-02T19:43:05.930094727Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.934218 env[1632]: time="2023-10-02T19:43:05.934168803Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.935636 env[1632]: time="2023-10-02T19:43:05.935599403Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.944890 env[1632]: time="2023-10-02T19:43:05.944834707Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.947350 env[1632]: time="2023-10-02T19:43:05.947300481Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.949136 env[1632]: time="2023-10-02T19:43:05.949095278Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.954941 env[1632]: time="2023-10-02T19:43:05.954899349Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.956492 env[1632]: time="2023-10-02T19:43:05.956417247Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.960225 env[1632]: time="2023-10-02T19:43:05.959648109Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.961582 env[1632]: time="2023-10-02T19:43:05.961547194Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:05.963387 env[1632]: time="2023-10-02T19:43:05.963352837Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:06.017397 kubelet[2304]: W1002 19:43:06.017224 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.22.231:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:06.017397 kubelet[2304]: E1002 19:43:06.017274 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.22.231:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:06.045369 env[1632]: time="2023-10-02T19:43:06.045290884Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:06.045725 env[1632]: time="2023-10-02T19:43:06.045560197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:06.045725 env[1632]: time="2023-10-02T19:43:06.045640872Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:06.045725 env[1632]: time="2023-10-02T19:43:06.045656937Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:06.046138 env[1632]: time="2023-10-02T19:43:06.046095242Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:06.046291 env[1632]: time="2023-10-02T19:43:06.046263690Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:06.046450 env[1632]: time="2023-10-02T19:43:06.046392504Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d pid=2352 runtime=io.containerd.runc.v2 Oct 2 19:43:06.046766 env[1632]: time="2023-10-02T19:43:06.046707758Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e pid=2356 runtime=io.containerd.runc.v2 Oct 2 19:43:06.053358 env[1632]: time="2023-10-02T19:43:06.053269232Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:06.054503 env[1632]: time="2023-10-02T19:43:06.053974294Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:06.061683 env[1632]: time="2023-10-02T19:43:06.061545956Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:06.062230 env[1632]: time="2023-10-02T19:43:06.062181377Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f8adfb4611c6c57638d2443497324d117b865f61381b6ad86761a7fe41379134 pid=2363 runtime=io.containerd.runc.v2 Oct 2 19:43:06.095549 systemd[1]: Started cri-containerd-84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e.scope. Oct 2 19:43:06.123884 systemd[1]: Started cri-containerd-637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d.scope. Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.158000 audit: BPF prog-id=70 op=LOAD Oct 2 19:43:06.159000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.159000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000217c48 a2=10 a3=1c items=0 ppid=2356 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333632663232386665393331373239656339396435326563333236 Oct 2 19:43:06.166000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.166000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0002176b0 a2=3c a3=8 items=0 ppid=2356 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333632663232386665393331373239656339396435326563333236 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit: BPF prog-id=71 op=LOAD Oct 2 19:43:06.167000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0002179d8 a2=78 a3=c00037f770 items=0 ppid=2356 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333632663232386665393331373239656339396435326563333236 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit: BPF prog-id=72 op=LOAD Oct 2 19:43:06.167000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000217770 a2=78 a3=c00037f7b8 items=0 ppid=2356 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333632663232386665393331373239656339396435326563333236 Oct 2 19:43:06.167000 audit: BPF prog-id=72 op=UNLOAD Oct 2 19:43:06.167000 audit: BPF prog-id=71 op=UNLOAD Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { perfmon } for pid=2380 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit[2380]: AVC avc: denied { bpf } for pid=2380 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.167000 audit: BPF prog-id=73 op=LOAD Oct 2 19:43:06.167000 audit[2380]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000217c30 a2=78 a3=c00037fbc8 items=0 ppid=2356 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.167000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834333632663232386665393331373239656339396435326563333236 Oct 2 19:43:06.181750 systemd[1]: Started cri-containerd-f8adfb4611c6c57638d2443497324d117b865f61381b6ad86761a7fe41379134.scope. Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.198000 audit: BPF prog-id=74 op=LOAD Oct 2 19:43:06.199000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.199000 audit[2386]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2352 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633376331636531663663333866376366633361373230393632653438 Oct 2 19:43:06.199000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.199000 audit[2386]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2352 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633376331636531663663333866376366633361373230393632653438 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit: BPF prog-id=75 op=LOAD Oct 2 19:43:06.200000 audit[2386]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028dc70 items=0 ppid=2352 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633376331636531663663333866376366633361373230393632653438 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.200000 audit: BPF prog-id=76 op=LOAD Oct 2 19:43:06.200000 audit[2386]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028dcb8 items=0 ppid=2352 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.200000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633376331636531663663333866376366633361373230393632653438 Oct 2 19:43:06.200000 audit: BPF prog-id=76 op=UNLOAD Oct 2 19:43:06.200000 audit: BPF prog-id=75 op=UNLOAD Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { perfmon } for pid=2386 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit[2386]: AVC avc: denied { bpf } for pid=2386 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.201000 audit: BPF prog-id=77 op=LOAD Oct 2 19:43:06.201000 audit[2386]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002f80c8 items=0 ppid=2352 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.201000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633376331636531663663333866376366633361373230393632653438 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.217000 audit: BPF prog-id=78 op=LOAD Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2363 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638616466623436313163366335373633386432343433343937333234 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2363 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638616466623436313163366335373633386432343433343937333234 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.228000 audit: BPF prog-id=79 op=LOAD Oct 2 19:43:06.228000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0000243f0 items=0 ppid=2363 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638616466623436313163366335373633386432343433343937333234 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.229000 audit: BPF prog-id=80 op=LOAD Oct 2 19:43:06.229000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024438 items=0 ppid=2363 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638616466623436313163366335373633386432343433343937333234 Oct 2 19:43:06.236000 audit: BPF prog-id=80 op=UNLOAD Oct 2 19:43:06.236000 audit: BPF prog-id=79 op=UNLOAD Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { perfmon } for pid=2397 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit[2397]: AVC avc: denied { bpf } for pid=2397 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.236000 audit: BPF prog-id=81 op=LOAD Oct 2 19:43:06.236000 audit[2397]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000024848 items=0 ppid=2363 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.236000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638616466623436313163366335373633386432343433343937333234 Oct 2 19:43:06.278555 env[1632]: time="2023-10-02T19:43:06.273738895Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-22-231,Uid:c3d669cc51be5ba167759079020f2cdc,Namespace:kube-system,Attempt:0,} returns sandbox id \"84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e\"" Oct 2 19:43:06.286036 env[1632]: time="2023-10-02T19:43:06.285985704Z" level=info msg="CreateContainer within sandbox \"84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 19:43:06.304278 kubelet[2304]: E1002 19:43:06.304244 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": dial tcp 172.31.22.231:6443: connect: connection refused" interval="1.6s" Oct 2 19:43:06.325332 env[1632]: time="2023-10-02T19:43:06.325279659Z" level=info msg="CreateContainer within sandbox \"84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88\"" Oct 2 19:43:06.327724 env[1632]: time="2023-10-02T19:43:06.327677359Z" level=info msg="StartContainer for \"988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88\"" Oct 2 19:43:06.346527 env[1632]: time="2023-10-02T19:43:06.346427378Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-22-231,Uid:3a6fa83bed3cecb71e4bce75adf2ab94,Namespace:kube-system,Attempt:0,} returns sandbox id \"f8adfb4611c6c57638d2443497324d117b865f61381b6ad86761a7fe41379134\"" Oct 2 19:43:06.409964 env[1632]: time="2023-10-02T19:43:06.409916440Z" level=info msg="CreateContainer within sandbox \"f8adfb4611c6c57638d2443497324d117b865f61381b6ad86761a7fe41379134\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 19:43:06.410952 kubelet[2304]: I1002 19:43:06.410927 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:06.411741 kubelet[2304]: E1002 19:43:06.411721 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.231:6443/api/v1/nodes\": dial tcp 172.31.22.231:6443: connect: connection refused" node="ip-172-31-22-231" Oct 2 19:43:06.415804 env[1632]: time="2023-10-02T19:43:06.415506303Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-22-231,Uid:43b6802bc0bbb41c408c3c95b8b2c340,Namespace:kube-system,Attempt:0,} returns sandbox id \"637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d\"" Oct 2 19:43:06.421801 env[1632]: time="2023-10-02T19:43:06.421754489Z" level=info msg="CreateContainer within sandbox \"637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 19:43:06.438080 systemd[1]: Started cri-containerd-988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88.scope. Oct 2 19:43:06.458669 env[1632]: time="2023-10-02T19:43:06.458620961Z" level=info msg="CreateContainer within sandbox \"f8adfb4611c6c57638d2443497324d117b865f61381b6ad86761a7fe41379134\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"fb9911796ba8d60cedc82e22a23fae5782259696ca6329595b5597fb1d44002f\"" Oct 2 19:43:06.460136 env[1632]: time="2023-10-02T19:43:06.460096350Z" level=info msg="StartContainer for \"fb9911796ba8d60cedc82e22a23fae5782259696ca6329595b5597fb1d44002f\"" Oct 2 19:43:06.473868 env[1632]: time="2023-10-02T19:43:06.473811126Z" level=info msg="CreateContainer within sandbox \"637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711\"" Oct 2 19:43:06.475066 env[1632]: time="2023-10-02T19:43:06.475033042Z" level=info msg="StartContainer for \"d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711\"" Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.477000 audit: BPF prog-id=82 op=LOAD Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2356 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386531376338393262326530363335353731343264333534613061 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2356 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386531376338393262326530363335353731343264333534613061 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.478000 audit: BPF prog-id=83 op=LOAD Oct 2 19:43:06.478000 audit[2466]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003d2190 items=0 ppid=2356 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386531376338393262326530363335353731343264333534613061 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit: BPF prog-id=84 op=LOAD Oct 2 19:43:06.479000 audit[2466]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003d21d8 items=0 ppid=2356 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386531376338393262326530363335353731343264333534613061 Oct 2 19:43:06.479000 audit: BPF prog-id=84 op=UNLOAD Oct 2 19:43:06.479000 audit: BPF prog-id=83 op=UNLOAD Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { perfmon } for pid=2466 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit[2466]: AVC avc: denied { bpf } for pid=2466 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.479000 audit: BPF prog-id=85 op=LOAD Oct 2 19:43:06.479000 audit[2466]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003d25e8 items=0 ppid=2356 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938386531376338393262326530363335353731343264333534613061 Oct 2 19:43:06.515893 systemd[1]: Started cri-containerd-fb9911796ba8d60cedc82e22a23fae5782259696ca6329595b5597fb1d44002f.scope. Oct 2 19:43:06.588075 systemd[1]: Started cri-containerd-d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711.scope. Oct 2 19:43:06.595000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.596000 audit: BPF prog-id=86 op=LOAD Oct 2 19:43:06.597000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.597000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2363 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662393931313739366261386436306365646338326532326132336661 Oct 2 19:43:06.597000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.597000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2363 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.597000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662393931313739366261386436306365646338326532326132336661 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit: BPF prog-id=87 op=LOAD Oct 2 19:43:06.598000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c48d0 items=0 ppid=2363 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662393931313739366261386436306365646338326532326132336661 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit: BPF prog-id=88 op=LOAD Oct 2 19:43:06.598000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c4918 items=0 ppid=2363 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662393931313739366261386436306365646338326532326132336661 Oct 2 19:43:06.598000 audit: BPF prog-id=88 op=UNLOAD Oct 2 19:43:06.598000 audit: BPF prog-id=87 op=UNLOAD Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { perfmon } for pid=2496 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit[2496]: AVC avc: denied { bpf } for pid=2496 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.598000 audit: BPF prog-id=89 op=LOAD Oct 2 19:43:06.598000 audit[2496]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c4d28 items=0 ppid=2363 pid=2496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.598000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662393931313739366261386436306365646338326532326132336661 Oct 2 19:43:06.620873 env[1632]: time="2023-10-02T19:43:06.620818424Z" level=info msg="StartContainer for \"988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88\" returns successfully" Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.628000 audit: BPF prog-id=90 op=LOAD Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2352 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656631356132363939353537333639623233316636373033316538 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2352 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656631356132363939353537333639623233316636373033316538 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.630000 audit: BPF prog-id=91 op=LOAD Oct 2 19:43:06.630000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00009d720 items=0 ppid=2352 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.630000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656631356132363939353537333639623233316636373033316538 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.632000 audit: BPF prog-id=92 op=LOAD Oct 2 19:43:06.632000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00009d768 items=0 ppid=2352 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656631356132363939353537333639623233316636373033316538 Oct 2 19:43:06.633000 audit: BPF prog-id=92 op=UNLOAD Oct 2 19:43:06.633000 audit: BPF prog-id=91 op=UNLOAD Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { perfmon } for pid=2512 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit[2512]: AVC avc: denied { bpf } for pid=2512 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:06.633000 audit: BPF prog-id=93 op=LOAD Oct 2 19:43:06.633000 audit[2512]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00009db78 items=0 ppid=2352 pid=2512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:06.633000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431656631356132363939353537333639623233316636373033316538 Oct 2 19:43:06.690090 env[1632]: time="2023-10-02T19:43:06.689853312Z" level=info msg="StartContainer for \"d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711\" returns successfully" Oct 2 19:43:06.719456 env[1632]: time="2023-10-02T19:43:06.719363131Z" level=info msg="StartContainer for \"fb9911796ba8d60cedc82e22a23fae5782259696ca6329595b5597fb1d44002f\" returns successfully" Oct 2 19:43:06.916354 kubelet[2304]: E1002 19:43:06.916241 2304 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.22.231:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.557172 kubelet[2304]: W1002 19:43:07.557105 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.22.231:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.557413 kubelet[2304]: E1002 19:43:07.557401 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.22.231:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.558029 kubelet[2304]: W1002 19:43:07.557987 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.22.231:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.558167 kubelet[2304]: E1002 19:43:07.558158 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.22.231:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.710464 kubelet[2304]: W1002 19:43:07.710398 2304 reflector.go:533] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.22.231:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.710797 kubelet[2304]: E1002 19:43:07.710781 2304 reflector.go:148] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.22.231:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.22.231:6443: connect: connection refused Oct 2 19:43:07.905874 kubelet[2304]: E1002 19:43:07.905718 2304 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": dial tcp 172.31.22.231:6443: connect: connection refused" interval="3.2s" Oct 2 19:43:08.013527 kubelet[2304]: I1002 19:43:08.013501 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:08.014329 kubelet[2304]: E1002 19:43:08.014310 2304 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.22.231:6443/api/v1/nodes\": dial tcp 172.31.22.231:6443: connect: connection refused" node="ip-172-31-22-231" Oct 2 19:43:08.763053 update_engine[1625]: I1002 19:43:08.762547 1625 update_attempter.cc:505] Updating boot flags... Oct 2 19:43:09.212000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:09.214699 kernel: kauditd_printk_skb: 555 callbacks suppressed Oct 2 19:43:09.214862 kernel: audit: type=1400 audit(1696275789.212:723): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:09.212000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0010fa000 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:09.232509 kernel: audit: type=1300 audit(1696275789.212:723): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0010fa000 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:09.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:09.212000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:09.249660 kernel: audit: type=1327 audit(1696275789.212:723): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:09.249786 kernel: audit: type=1400 audit(1696275789.212:724): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:09.212000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056240 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:09.264564 kernel: audit: type=1300 audit(1696275789.212:724): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000056240 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:09.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:09.277537 kernel: audit: type=1327 audit(1696275789.212:724): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:11.216646 kubelet[2304]: I1002 19:43:11.216613 2304 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:11.320000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.333624 kernel: audit: type=1400 audit(1696275791.320:725): avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.333784 kernel: audit: type=1400 audit(1696275791.322:726): avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.322000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.355509 kernel: audit: type=1300 audit(1696275791.322:726): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0039fbd40 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.322000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0039fbd40 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.320000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c003a2e000 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.320000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.328000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.328000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c003bc40a0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.335000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.335000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c003a2f230 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.372499 kernel: audit: type=1327 audit(1696275791.322:726): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.335000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.415000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.415000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00a2f7b00 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.415000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.416000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:11.416000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003b872f0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:43:11.416000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:43:11.556229 kubelet[2304]: E1002 19:43:11.556193 2304 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-22-231\" not found" node="ip-172-31-22-231" Oct 2 19:43:11.651242 kubelet[2304]: I1002 19:43:11.651209 2304 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-22-231" Oct 2 19:43:11.905939 kubelet[2304]: I1002 19:43:11.905805 2304 apiserver.go:52] "Watching apiserver" Oct 2 19:43:11.999018 kubelet[2304]: I1002 19:43:11.998977 2304 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:43:12.059050 kubelet[2304]: I1002 19:43:12.059004 2304 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:43:14.100048 systemd[1]: Reloading. Oct 2 19:43:14.252392 /usr/lib/systemd/system-generators/torcx-generator[2866]: time="2023-10-02T19:43:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 19:43:14.256608 /usr/lib/systemd/system-generators/torcx-generator[2866]: time="2023-10-02T19:43:14Z" level=info msg="torcx already run" Oct 2 19:43:14.380722 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 19:43:14.381226 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 19:43:14.427922 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 19:43:14.630270 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:43:14.630419 kernel: audit: type=1400 audit(1696275794.619:731): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630568 kernel: audit: type=1400 audit(1696275794.619:732): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.619000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.640564 kernel: audit: type=1400 audit(1696275794.620:733): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.640706 kernel: audit: type=1400 audit(1696275794.620:734): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646696 kernel: audit: type=1400 audit(1696275794.620:735): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651457 kernel: audit: type=1400 audit(1696275794.620:736): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.661205 kernel: audit: type=1400 audit(1696275794.620:737): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.661324 kernel: audit: type=1400 audit(1696275794.620:738): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.661595 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 19:43:14.666926 kernel: audit: type=1400 audit(1696275794.620:739): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.620000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.629000 audit: BPF prog-id=94 op=LOAD Oct 2 19:43:14.629000 audit: BPF prog-id=70 op=UNLOAD Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit: BPF prog-id=95 op=LOAD Oct 2 19:43:14.635000 audit: BPF prog-id=90 op=UNLOAD Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit: BPF prog-id=96 op=LOAD Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit: BPF prog-id=97 op=LOAD Oct 2 19:43:14.646000 audit: BPF prog-id=55 op=UNLOAD Oct 2 19:43:14.646000 audit: BPF prog-id=56 op=UNLOAD Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit: BPF prog-id=98 op=LOAD Oct 2 19:43:14.651000 audit: BPF prog-id=57 op=UNLOAD Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.651000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.656000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.656000 audit: BPF prog-id=99 op=LOAD Oct 2 19:43:14.656000 audit: BPF prog-id=86 op=UNLOAD Oct 2 19:43:14.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.660000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.660000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.666000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.666000 audit: BPF prog-id=82 op=UNLOAD Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.667000 audit: BPF prog-id=101 op=LOAD Oct 2 19:43:14.667000 audit: BPF prog-id=58 op=UNLOAD Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.669000 audit: BPF prog-id=102 op=LOAD Oct 2 19:43:14.670000 audit: BPF prog-id=78 op=UNLOAD Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit: BPF prog-id=103 op=LOAD Oct 2 19:43:14.670000 audit: BPF prog-id=59 op=UNLOAD Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit: BPF prog-id=104 op=LOAD Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.671000 audit: BPF prog-id=105 op=LOAD Oct 2 19:43:14.671000 audit: BPF prog-id=60 op=UNLOAD Oct 2 19:43:14.671000 audit: BPF prog-id=61 op=UNLOAD Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.672000 audit: BPF prog-id=106 op=LOAD Oct 2 19:43:14.672000 audit: BPF prog-id=62 op=UNLOAD Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.673000 audit: BPF prog-id=107 op=LOAD Oct 2 19:43:14.673000 audit: BPF prog-id=74 op=UNLOAD Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.675000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit: BPF prog-id=108 op=LOAD Oct 2 19:43:14.676000 audit: BPF prog-id=63 op=UNLOAD Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.676000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit: BPF prog-id=109 op=LOAD Oct 2 19:43:14.677000 audit: BPF prog-id=64 op=UNLOAD Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit: BPF prog-id=110 op=LOAD Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.677000 audit: BPF prog-id=111 op=LOAD Oct 2 19:43:14.677000 audit: BPF prog-id=65 op=UNLOAD Oct 2 19:43:14.677000 audit: BPF prog-id=66 op=UNLOAD Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit: BPF prog-id=112 op=LOAD Oct 2 19:43:14.680000 audit: BPF prog-id=67 op=UNLOAD Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit: BPF prog-id=113 op=LOAD Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.680000 audit: BPF prog-id=114 op=LOAD Oct 2 19:43:14.680000 audit: BPF prog-id=68 op=UNLOAD Oct 2 19:43:14.680000 audit: BPF prog-id=69 op=UNLOAD Oct 2 19:43:14.698957 systemd[1]: Stopping kubelet.service... Oct 2 19:43:14.699404 kubelet[2304]: I1002 19:43:14.699187 2304 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:43:14.720934 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 19:43:14.721178 systemd[1]: Stopped kubelet.service. Oct 2 19:43:14.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:14.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:14.723525 systemd[1]: Started kubelet.service. Oct 2 19:43:14.846272 kubelet[2916]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:43:14.846641 kubelet[2916]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 19:43:14.846714 kubelet[2916]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 19:43:14.847361 kubelet[2916]: I1002 19:43:14.847326 2916 server.go:199] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 19:43:14.853000 audit[2927]: USER_ACCT pid=2927 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:14.854696 sudo[2927]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 19:43:14.854000 audit[2927]: CRED_REFR pid=2927 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:14.855147 sudo[2927]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 19:43:14.857000 audit[2927]: USER_START pid=2927 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:14.858836 kubelet[2916]: I1002 19:43:14.858394 2916 server.go:415] "Kubelet version" kubeletVersion="v1.27.2" Oct 2 19:43:14.859236 kubelet[2916]: I1002 19:43:14.859222 2916 server.go:417] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 19:43:14.860857 kubelet[2916]: I1002 19:43:14.860831 2916 server.go:837] "Client rotation is on, will bootstrap in background" Oct 2 19:43:14.863584 kubelet[2916]: I1002 19:43:14.863545 2916 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 19:43:14.865336 kubelet[2916]: I1002 19:43:14.865310 2916 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 19:43:14.868433 kubelet[2916]: I1002 19:43:14.868409 2916 server.go:662] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 19:43:14.868694 kubelet[2916]: I1002 19:43:14.868679 2916 container_manager_linux.go:266] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 19:43:14.868791 kubelet[2916]: I1002 19:43:14.868777 2916 container_manager_linux.go:271] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] TopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] PodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms TopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 19:43:14.868917 kubelet[2916]: I1002 19:43:14.868809 2916 topology_manager.go:136] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 19:43:14.868917 kubelet[2916]: I1002 19:43:14.868826 2916 container_manager_linux.go:302] "Creating device plugin manager" Oct 2 19:43:14.868917 kubelet[2916]: I1002 19:43:14.868864 2916 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:43:14.883911 kubelet[2916]: I1002 19:43:14.883883 2916 kubelet.go:405] "Attempting to sync node with API server" Oct 2 19:43:14.883911 kubelet[2916]: I1002 19:43:14.883915 2916 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 19:43:14.884104 kubelet[2916]: I1002 19:43:14.883936 2916 kubelet.go:309] "Adding apiserver pod source" Oct 2 19:43:14.884104 kubelet[2916]: I1002 19:43:14.883953 2916 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 19:43:14.905660 kubelet[2916]: I1002 19:43:14.905527 2916 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 19:43:14.906748 kubelet[2916]: I1002 19:43:14.906725 2916 server.go:1168] "Started kubelet" Oct 2 19:43:14.908000 audit[2916]: AVC avc: denied { mac_admin } for pid=2916 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.908000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:43:14.908000 audit[2916]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009b75f0 a1=c000c4c870 a2=c0009b75c0 a3=25 items=0 ppid=1 pid=2916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.908000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:43:14.916065 kubelet[2916]: I1002 19:43:14.916034 2916 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 19:43:14.917001 kubelet[2916]: I1002 19:43:14.916977 2916 server.go:461] "Adding debug handlers to kubelet server" Oct 2 19:43:14.934785 kubelet[2916]: I1002 19:43:14.934749 2916 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 19:43:14.936049 kubelet[2916]: I1002 19:43:14.936027 2916 kubelet.go:1355] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 19:43:14.935000 audit[2916]: AVC avc: denied { mac_admin } for pid=2916 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:14.935000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:43:14.935000 audit[2916]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0009b3e40 a1=c000c4cac8 a2=c000b983f0 a3=25 items=0 ppid=1 pid=2916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:14.935000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:43:14.939875 kubelet[2916]: I1002 19:43:14.936361 2916 kubelet.go:1359] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 19:43:14.939875 kubelet[2916]: I1002 19:43:14.936393 2916 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 19:43:14.952510 kubelet[2916]: E1002 19:43:14.952147 2916 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 19:43:14.952510 kubelet[2916]: E1002 19:43:14.952183 2916 kubelet.go:1400] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 19:43:14.961513 kubelet[2916]: I1002 19:43:14.955834 2916 volume_manager.go:284] "Starting Kubelet Volume Manager" Oct 2 19:43:14.961513 kubelet[2916]: I1002 19:43:14.956219 2916 desired_state_of_world_populator.go:145] "Desired state populator starts to run" Oct 2 19:43:14.990725 kubelet[2916]: I1002 19:43:14.990661 2916 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 19:43:15.001602 kubelet[2916]: I1002 19:43:15.001577 2916 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 19:43:15.001781 kubelet[2916]: I1002 19:43:15.001769 2916 status_manager.go:207] "Starting to sync pod status with apiserver" Oct 2 19:43:15.001868 kubelet[2916]: I1002 19:43:15.001859 2916 kubelet.go:2257] "Starting kubelet main sync loop" Oct 2 19:43:15.001971 kubelet[2916]: E1002 19:43:15.001963 2916 kubelet.go:2281] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 19:43:15.085038 kubelet[2916]: I1002 19:43:15.084997 2916 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-22-231" Oct 2 19:43:15.102572 kubelet[2916]: E1002 19:43:15.102445 2916 kubelet.go:2281] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 19:43:15.112197 kubelet[2916]: I1002 19:43:15.112163 2916 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-22-231" Oct 2 19:43:15.112406 kubelet[2916]: I1002 19:43:15.112248 2916 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-22-231" Oct 2 19:43:15.177646 kubelet[2916]: I1002 19:43:15.177550 2916 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 19:43:15.177646 kubelet[2916]: I1002 19:43:15.177579 2916 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 19:43:15.177646 kubelet[2916]: I1002 19:43:15.177599 2916 state_mem.go:36] "Initialized new in-memory state store" Oct 2 19:43:15.177888 kubelet[2916]: I1002 19:43:15.177771 2916 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 19:43:15.177888 kubelet[2916]: I1002 19:43:15.177787 2916 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 19:43:15.177888 kubelet[2916]: I1002 19:43:15.177795 2916 policy_none.go:49] "None policy: Start" Oct 2 19:43:15.179927 kubelet[2916]: I1002 19:43:15.179901 2916 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 19:43:15.179927 kubelet[2916]: I1002 19:43:15.179935 2916 state_mem.go:35] "Initializing new in-memory state store" Oct 2 19:43:15.180143 kubelet[2916]: I1002 19:43:15.180129 2916 state_mem.go:75] "Updated machine memory state" Oct 2 19:43:15.186042 kubelet[2916]: I1002 19:43:15.186011 2916 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 19:43:15.186177 kubelet[2916]: I1002 19:43:15.186087 2916 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 19:43:15.185000 audit[2916]: AVC avc: denied { mac_admin } for pid=2916 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:15.185000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 19:43:15.185000 audit[2916]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00070d200 a1=c000eaa948 a2=c00070d1d0 a3=25 items=0 ppid=1 pid=2916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:15.185000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 19:43:15.197783 kubelet[2916]: I1002 19:43:15.197750 2916 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 19:43:15.306034 kubelet[2916]: I1002 19:43:15.305984 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:15.306212 kubelet[2916]: I1002 19:43:15.306089 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:15.306212 kubelet[2916]: I1002 19:43:15.306133 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:15.342131 kubelet[2916]: E1002 19:43:15.342094 2916 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-22-231\" already exists" pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:15.367298 kubelet[2916]: I1002 19:43:15.367263 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/43b6802bc0bbb41c408c3c95b8b2c340-kubeconfig\") pod \"kube-scheduler-ip-172-31-22-231\" (UID: \"43b6802bc0bbb41c408c3c95b8b2c340\") " pod="kube-system/kube-scheduler-ip-172-31-22-231" Oct 2 19:43:15.367563 kubelet[2916]: I1002 19:43:15.367546 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3a6fa83bed3cecb71e4bce75adf2ab94-k8s-certs\") pod \"kube-apiserver-ip-172-31-22-231\" (UID: \"3a6fa83bed3cecb71e4bce75adf2ab94\") " pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:15.367685 kubelet[2916]: I1002 19:43:15.367673 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:15.367821 kubelet[2916]: I1002 19:43:15.367805 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-kubeconfig\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:15.367899 kubelet[2916]: I1002 19:43:15.367890 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3a6fa83bed3cecb71e4bce75adf2ab94-ca-certs\") pod \"kube-apiserver-ip-172-31-22-231\" (UID: \"3a6fa83bed3cecb71e4bce75adf2ab94\") " pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:15.367948 kubelet[2916]: I1002 19:43:15.367930 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3a6fa83bed3cecb71e4bce75adf2ab94-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-22-231\" (UID: \"3a6fa83bed3cecb71e4bce75adf2ab94\") " pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:15.367994 kubelet[2916]: I1002 19:43:15.367987 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-ca-certs\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:15.368039 kubelet[2916]: I1002 19:43:15.368018 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-k8s-certs\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:15.368083 kubelet[2916]: I1002 19:43:15.368072 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/c3d669cc51be5ba167759079020f2cdc-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-22-231\" (UID: \"c3d669cc51be5ba167759079020f2cdc\") " pod="kube-system/kube-controller-manager-ip-172-31-22-231" Oct 2 19:43:15.777365 sudo[2927]: pam_unix(sudo:session): session closed for user root Oct 2 19:43:15.776000 audit[2927]: USER_END pid=2927 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:15.777000 audit[2927]: CRED_DISP pid=2927 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:15.896868 kubelet[2916]: I1002 19:43:15.896825 2916 apiserver.go:52] "Watching apiserver" Oct 2 19:43:15.958879 kubelet[2916]: I1002 19:43:15.958841 2916 desired_state_of_world_populator.go:153] "Finished populating initial desired state of world" Oct 2 19:43:15.971773 kubelet[2916]: I1002 19:43:15.971706 2916 reconciler.go:41] "Reconciler: start to sync state" Oct 2 19:43:16.157574 kubelet[2916]: E1002 19:43:16.157542 2916 kubelet.go:1856] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-22-231\" already exists" pod="kube-system/kube-apiserver-ip-172-31-22-231" Oct 2 19:43:16.238362 kubelet[2916]: I1002 19:43:16.238321 2916 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-22-231" podStartSLOduration=1.237674276 podCreationTimestamp="2023-10-02 19:43:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:43:16.216014485 +0000 UTC m=+1.480321881" watchObservedRunningTime="2023-10-02 19:43:16.237674276 +0000 UTC m=+1.501981677" Oct 2 19:43:16.240000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521043 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 19:43:16.240000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010c2e80 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:16.240000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:16.263375 kubelet[2916]: I1002 19:43:16.263342 2916 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-22-231" podStartSLOduration=3.263296935 podCreationTimestamp="2023-10-02 19:43:13 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:43:16.240407255 +0000 UTC m=+1.504714655" watchObservedRunningTime="2023-10-02 19:43:16.263296935 +0000 UTC m=+1.527604340" Oct 2 19:43:16.286324 kubelet[2916]: I1002 19:43:16.286273 2916 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-22-231" podStartSLOduration=1.286221293 podCreationTimestamp="2023-10-02 19:43:15 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:43:16.26415298 +0000 UTC m=+1.528460385" watchObservedRunningTime="2023-10-02 19:43:16.286221293 +0000 UTC m=+1.550528694" Oct 2 19:43:18.154662 sudo[1896]: pam_unix(sudo:session): session closed for user root Oct 2 19:43:18.154000 audit[1896]: USER_END pid=1896 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:18.154000 audit[1896]: CRED_DISP pid=1896 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 19:43:18.180146 sshd[1893]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:18.181000 audit[1893]: USER_END pid=1893 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:18.182000 audit[1893]: CRED_DISP pid=1893 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:18.184555 systemd-logind[1624]: Session 7 logged out. Waiting for processes to exit. Oct 2 19:43:18.184605 systemd[1]: sshd@6-172.31.22.231:22-139.178.89.65:53184.service: Deactivated successfully. Oct 2 19:43:18.185698 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 19:43:18.184000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.22.231:22-139.178.89.65:53184 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:18.185909 systemd[1]: session-7.scope: Consumed 4.782s CPU time. Oct 2 19:43:18.187046 systemd-logind[1624]: Removed session 7. Oct 2 19:43:28.608514 kernel: kauditd_printk_skb: 273 callbacks suppressed Oct 2 19:43:28.608705 kernel: audit: type=1400 audit(1696275808.604:985): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.604000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.604000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011d1fc0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.621708 kernel: audit: type=1300 audit(1696275808.604:985): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0011d1fc0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.628805 kernel: audit: type=1327 audit(1696275808.604:985): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.604000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.635332 kernel: audit: type=1400 audit(1696275808.609:986): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.609000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.643585 kernel: audit: type=1300 audit(1696275808.609:986): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001318100 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.609000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001318100 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.609000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.624000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.656698 kernel: audit: type=1327 audit(1696275808.609:986): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.656859 kernel: audit: type=1400 audit(1696275808.624:987): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.656897 kernel: audit: type=1300 audit(1696275808.624:987): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001318580 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.624000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001318580 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.624000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.671657 kernel: audit: type=1327 audit(1696275808.624:987): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.671803 kernel: audit: type=1400 audit(1696275808.624:988): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.624000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:43:28.624000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013185c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:43:28.624000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:43:28.959016 kubelet[2916]: I1002 19:43:28.958893 2916 kuberuntime_manager.go:1460] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 19:43:28.959614 kubelet[2916]: I1002 19:43:28.959528 2916 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 19:43:28.959685 env[1632]: time="2023-10-02T19:43:28.959291264Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 19:43:29.180858 kubelet[2916]: I1002 19:43:29.180821 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:29.188248 systemd[1]: Created slice kubepods-besteffort-pod33c51ccb_82f5_4fe7_93ad_809ef9a5eddc.slice. Oct 2 19:43:29.190584 kubelet[2916]: W1002 19:43:29.190448 2916 reflector.go:533] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:43:29.190877 kubelet[2916]: E1002 19:43:29.190861 2916 reflector.go:148] object-"kube-system"/"kube-proxy": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:43:29.196170 kubelet[2916]: W1002 19:43:29.190822 2916 reflector.go:533] object-"kube-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:43:29.196377 kubelet[2916]: E1002 19:43:29.196354 2916 reflector.go:148] object-"kube-system"/"kube-root-ca.crt": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:43:29.210739 kubelet[2916]: I1002 19:43:29.210632 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:29.217742 systemd[1]: Created slice kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice. Oct 2 19:43:29.270038 kubelet[2916]: I1002 19:43:29.269995 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-kube-proxy\") pod \"kube-proxy-7wd7q\" (UID: \"33c51ccb-82f5-4fe7-93ad-809ef9a5eddc\") " pod="kube-system/kube-proxy-7wd7q" Oct 2 19:43:29.270314 kubelet[2916]: I1002 19:43:29.270287 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-xtables-lock\") pod \"kube-proxy-7wd7q\" (UID: \"33c51ccb-82f5-4fe7-93ad-809ef9a5eddc\") " pod="kube-system/kube-proxy-7wd7q" Oct 2 19:43:29.270893 kubelet[2916]: I1002 19:43:29.270877 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-lib-modules\") pod \"kube-proxy-7wd7q\" (UID: \"33c51ccb-82f5-4fe7-93ad-809ef9a5eddc\") " pod="kube-system/kube-proxy-7wd7q" Oct 2 19:43:29.271037 kubelet[2916]: I1002 19:43:29.271027 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f5n9c\" (UniqueName: \"kubernetes.io/projected/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-kube-api-access-f5n9c\") pod \"kube-proxy-7wd7q\" (UID: \"33c51ccb-82f5-4fe7-93ad-809ef9a5eddc\") " pod="kube-system/kube-proxy-7wd7q" Oct 2 19:43:29.372115 kubelet[2916]: I1002 19:43:29.372077 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-xtables-lock\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372319 kubelet[2916]: I1002 19:43:29.372136 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qsdzw\" (UniqueName: \"kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-kube-api-access-qsdzw\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372319 kubelet[2916]: I1002 19:43:29.372197 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/eb418464-399b-4ba7-9d10-7a02ece3f894-clustermesh-secrets\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372319 kubelet[2916]: I1002 19:43:29.372223 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-cgroup\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372319 kubelet[2916]: I1002 19:43:29.372253 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-net\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372319 kubelet[2916]: I1002 19:43:29.372281 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-hubble-tls\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372618 kubelet[2916]: I1002 19:43:29.372309 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-config-path\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372618 kubelet[2916]: I1002 19:43:29.372342 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-bpf-maps\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372618 kubelet[2916]: I1002 19:43:29.372400 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-hostproc\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372618 kubelet[2916]: I1002 19:43:29.372459 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-etc-cni-netd\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372618 kubelet[2916]: I1002 19:43:29.372504 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-kernel\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372618 kubelet[2916]: I1002 19:43:29.372553 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-run\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372862 kubelet[2916]: I1002 19:43:29.372582 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cni-path\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.372862 kubelet[2916]: I1002 19:43:29.372613 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-lib-modules\") pod \"cilium-82kj7\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " pod="kube-system/cilium-82kj7" Oct 2 19:43:29.931014 kubelet[2916]: I1002 19:43:29.930966 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:43:29.949067 systemd[1]: Created slice kubepods-besteffort-podbcb7690e_3c51_4068_9c7e_c1c3818d2e98.slice. Oct 2 19:43:30.078268 kubelet[2916]: I1002 19:43:30.078218 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-cilium-config-path\") pod \"cilium-operator-574c4bb98d-4fd9b\" (UID: \"bcb7690e-3c51-4068-9c7e-c1c3818d2e98\") " pod="kube-system/cilium-operator-574c4bb98d-4fd9b" Oct 2 19:43:30.078907 kubelet[2916]: I1002 19:43:30.078290 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gvgtl\" (UniqueName: \"kubernetes.io/projected/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-kube-api-access-gvgtl\") pod \"cilium-operator-574c4bb98d-4fd9b\" (UID: \"bcb7690e-3c51-4068-9c7e-c1c3818d2e98\") " pod="kube-system/cilium-operator-574c4bb98d-4fd9b" Oct 2 19:43:30.373980 kubelet[2916]: E1002 19:43:30.373902 2916 configmap.go:199] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.374175 kubelet[2916]: E1002 19:43:30.374056 2916 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-kube-proxy podName:33c51ccb-82f5-4fe7-93ad-809ef9a5eddc nodeName:}" failed. No retries permitted until 2023-10-02 19:43:30.874028135 +0000 UTC m=+16.138335540 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-kube-proxy") pod "kube-proxy-7wd7q" (UID: "33c51ccb-82f5-4fe7-93ad-809ef9a5eddc") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.383321 kubelet[2916]: E1002 19:43:30.383272 2916 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.383321 kubelet[2916]: E1002 19:43:30.383318 2916 projected.go:198] Error preparing data for projected volume kube-api-access-f5n9c for pod kube-system/kube-proxy-7wd7q: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.383597 kubelet[2916]: E1002 19:43:30.383409 2916 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-kube-api-access-f5n9c podName:33c51ccb-82f5-4fe7-93ad-809ef9a5eddc nodeName:}" failed. No retries permitted until 2023-10-02 19:43:30.883383699 +0000 UTC m=+16.147691096 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-f5n9c" (UniqueName: "kubernetes.io/projected/33c51ccb-82f5-4fe7-93ad-809ef9a5eddc-kube-api-access-f5n9c") pod "kube-proxy-7wd7q" (UID: "33c51ccb-82f5-4fe7-93ad-809ef9a5eddc") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.489774 kubelet[2916]: E1002 19:43:30.489728 2916 projected.go:292] Couldn't get configMap kube-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.489774 kubelet[2916]: E1002 19:43:30.489776 2916 projected.go:198] Error preparing data for projected volume kube-api-access-qsdzw for pod kube-system/cilium-82kj7: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.490000 kubelet[2916]: E1002 19:43:30.489852 2916 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-kube-api-access-qsdzw podName:eb418464-399b-4ba7-9d10-7a02ece3f894 nodeName:}" failed. No retries permitted until 2023-10-02 19:43:30.989830668 +0000 UTC m=+16.254138067 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-qsdzw" (UniqueName: "kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-kube-api-access-qsdzw") pod "cilium-82kj7" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:43:30.868313 env[1632]: time="2023-10-02T19:43:30.868265186Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-4fd9b,Uid:bcb7690e-3c51-4068-9c7e-c1c3818d2e98,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:30.909628 env[1632]: time="2023-10-02T19:43:30.909523853Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:30.909628 env[1632]: time="2023-10-02T19:43:30.909577096Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:30.909628 env[1632]: time="2023-10-02T19:43:30.909592058Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:30.910641 env[1632]: time="2023-10-02T19:43:30.910085687Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368 pid=2990 runtime=io.containerd.runc.v2 Oct 2 19:43:30.944530 systemd[1]: Started cri-containerd-e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368.scope. Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.958000 audit: BPF prog-id=115 op=LOAD Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2990 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376163333136633031633437336631366233386330646462393935 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2990 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376163333136633031633437336631366233386330646462393935 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit: BPF prog-id=116 op=LOAD Oct 2 19:43:30.959000 audit[3002]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0003113b0 items=0 ppid=2990 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376163333136633031633437336631366233386330646462393935 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit: BPF prog-id=117 op=LOAD Oct 2 19:43:30.959000 audit[3002]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c0003113f8 items=0 ppid=2990 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376163333136633031633437336631366233386330646462393935 Oct 2 19:43:30.959000 audit: BPF prog-id=117 op=UNLOAD Oct 2 19:43:30.959000 audit: BPF prog-id=116 op=UNLOAD Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { perfmon } for pid=3002 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit[3002]: AVC avc: denied { bpf } for pid=3002 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:30.959000 audit: BPF prog-id=118 op=LOAD Oct 2 19:43:30.959000 audit[3002]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000311808 items=0 ppid=2990 pid=3002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:30.959000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535376163333136633031633437336631366233386330646462393935 Oct 2 19:43:30.998234 env[1632]: time="2023-10-02T19:43:30.998169053Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7wd7q,Uid:33c51ccb-82f5-4fe7-93ad-809ef9a5eddc,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:31.013975 env[1632]: time="2023-10-02T19:43:31.013938281Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-574c4bb98d-4fd9b,Uid:bcb7690e-3c51-4068-9c7e-c1c3818d2e98,Namespace:kube-system,Attempt:0,} returns sandbox id \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\"" Oct 2 19:43:31.016958 env[1632]: time="2023-10-02T19:43:31.016920162Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 19:43:31.028003 env[1632]: time="2023-10-02T19:43:31.027896934Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:31.028278 env[1632]: time="2023-10-02T19:43:31.028165671Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:31.028407 env[1632]: time="2023-10-02T19:43:31.028382858Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:31.028978 env[1632]: time="2023-10-02T19:43:31.028925586Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/927ef283ff162f6f2c76cf3710d4d8f248572f324af7633d05d0ca55c9251af6 pid=3035 runtime=io.containerd.runc.v2 Oct 2 19:43:31.045949 systemd[1]: Started cri-containerd-927ef283ff162f6f2c76cf3710d4d8f248572f324af7633d05d0ca55c9251af6.scope. Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.067000 audit: BPF prog-id=119 op=LOAD Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932376566323833666631363266366632633736636633373130643464 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932376566323833666631363266366632633736636633373130643464 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit: BPF prog-id=120 op=LOAD Oct 2 19:43:31.068000 audit[3045]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000302340 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932376566323833666631363266366632633736636633373130643464 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit: BPF prog-id=121 op=LOAD Oct 2 19:43:31.068000 audit[3045]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000302388 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932376566323833666631363266366632633736636633373130643464 Oct 2 19:43:31.068000 audit: BPF prog-id=121 op=UNLOAD Oct 2 19:43:31.068000 audit: BPF prog-id=120 op=UNLOAD Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { perfmon } for pid=3045 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit[3045]: AVC avc: denied { bpf } for pid=3045 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.068000 audit: BPF prog-id=122 op=LOAD Oct 2 19:43:31.068000 audit[3045]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000302798 items=0 ppid=3035 pid=3045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3932376566323833666631363266366632633736636633373130643464 Oct 2 19:43:31.097184 env[1632]: time="2023-10-02T19:43:31.097017531Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-7wd7q,Uid:33c51ccb-82f5-4fe7-93ad-809ef9a5eddc,Namespace:kube-system,Attempt:0,} returns sandbox id \"927ef283ff162f6f2c76cf3710d4d8f248572f324af7633d05d0ca55c9251af6\"" Oct 2 19:43:31.101709 env[1632]: time="2023-10-02T19:43:31.101669083Z" level=info msg="CreateContainer within sandbox \"927ef283ff162f6f2c76cf3710d4d8f248572f324af7633d05d0ca55c9251af6\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 19:43:31.123980 env[1632]: time="2023-10-02T19:43:31.123884865Z" level=info msg="CreateContainer within sandbox \"927ef283ff162f6f2c76cf3710d4d8f248572f324af7633d05d0ca55c9251af6\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"c200fde36539fccf8f4d2ada925f61aa51170f15116395a99ea586e6362bfe4d\"" Oct 2 19:43:31.125242 env[1632]: time="2023-10-02T19:43:31.125210117Z" level=info msg="StartContainer for \"c200fde36539fccf8f4d2ada925f61aa51170f15116395a99ea586e6362bfe4d\"" Oct 2 19:43:31.148769 systemd[1]: Started cri-containerd-c200fde36539fccf8f4d2ada925f61aa51170f15116395a99ea586e6362bfe4d.scope. Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3035 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332303066646533363533396663636638663464326164613932356636 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit: BPF prog-id=123 op=LOAD Oct 2 19:43:31.178000 audit[3075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000212b20 items=0 ppid=3035 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332303066646533363533396663636638663464326164613932356636 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit: BPF prog-id=124 op=LOAD Oct 2 19:43:31.178000 audit[3075]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000212b68 items=0 ppid=3035 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332303066646533363533396663636638663464326164613932356636 Oct 2 19:43:31.178000 audit: BPF prog-id=124 op=UNLOAD Oct 2 19:43:31.178000 audit: BPF prog-id=123 op=UNLOAD Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { perfmon } for pid=3075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit[3075]: AVC avc: denied { bpf } for pid=3075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.178000 audit: BPF prog-id=125 op=LOAD Oct 2 19:43:31.178000 audit[3075]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000212bf8 items=0 ppid=3035 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.178000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332303066646533363533396663636638663464326164613932356636 Oct 2 19:43:31.228213 env[1632]: time="2023-10-02T19:43:31.228173653Z" level=info msg="StartContainer for \"c200fde36539fccf8f4d2ada925f61aa51170f15116395a99ea586e6362bfe4d\" returns successfully" Oct 2 19:43:31.326353 env[1632]: time="2023-10-02T19:43:31.326303301Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-82kj7,Uid:eb418464-399b-4ba7-9d10-7a02ece3f894,Namespace:kube-system,Attempt:0,}" Oct 2 19:43:31.353299 env[1632]: time="2023-10-02T19:43:31.353175255Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:43:31.353299 env[1632]: time="2023-10-02T19:43:31.353253493Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:43:31.353909 env[1632]: time="2023-10-02T19:43:31.353849904Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:43:31.354294 env[1632]: time="2023-10-02T19:43:31.354244781Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92 pid=3109 runtime=io.containerd.runc.v2 Oct 2 19:43:31.382118 systemd[1]: Started cri-containerd-5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92.scope. Oct 2 19:43:31.405000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.406000 audit: BPF prog-id=126 op=LOAD Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3109 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396130366131373130626132373232386266333531356535316366 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3109 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396130366131373130626132373232386266333531356535316366 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit: BPF prog-id=127 op=LOAD Oct 2 19:43:31.407000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003b06f0 items=0 ppid=3109 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396130366131373130626132373232386266333531356535316366 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit: BPF prog-id=128 op=LOAD Oct 2 19:43:31.407000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003b0738 items=0 ppid=3109 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396130366131373130626132373232386266333531356535316366 Oct 2 19:43:31.407000 audit: BPF prog-id=128 op=UNLOAD Oct 2 19:43:31.407000 audit: BPF prog-id=127 op=UNLOAD Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { perfmon } for pid=3120 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit[3120]: AVC avc: denied { bpf } for pid=3120 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:31.407000 audit: BPF prog-id=129 op=LOAD Oct 2 19:43:31.407000 audit[3120]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003b0b48 items=0 ppid=3109 pid=3120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563396130366131373130626132373232386266333531356535316366 Oct 2 19:43:31.446775 env[1632]: time="2023-10-02T19:43:31.446674268Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-82kj7,Uid:eb418464-399b-4ba7-9d10-7a02ece3f894,Namespace:kube-system,Attempt:0,} returns sandbox id \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\"" Oct 2 19:43:31.562000 audit[3166]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.562000 audit[3166]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeecb07050 a2=0 a3=7ffeecb0703c items=0 ppid=3086 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.562000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:43:31.565000 audit[3167]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=3167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.565000 audit[3167]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed4517690 a2=0 a3=7ffed451767c items=0 ppid=3086 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:43:31.567000 audit[3168]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=3168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.567000 audit[3168]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc88ed15f0 a2=0 a3=7ffc88ed15dc items=0 ppid=3086 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:43:31.569000 audit[3169]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=3169 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.569000 audit[3169]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeed4844b0 a2=0 a3=7ffeed48449c items=0 ppid=3086 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 19:43:31.577000 audit[3170]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=3170 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.577000 audit[3170]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff313917c0 a2=0 a3=7fff313917ac items=0 ppid=3086 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.577000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 19:43:31.587000 audit[3171]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=3171 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.587000 audit[3171]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd56f10b90 a2=0 a3=7ffd56f10b7c items=0 ppid=3086 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.587000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 19:43:31.673000 audit[3172]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3172 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.673000 audit[3172]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcb592c300 a2=0 a3=7ffcb592c2ec items=0 ppid=3086 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.673000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:43:31.686000 audit[3174]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.686000 audit[3174]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffeea72c930 a2=0 a3=7ffeea72c91c items=0 ppid=3086 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.686000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 19:43:31.693000 audit[3177]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.693000 audit[3177]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe21908c30 a2=0 a3=7ffe21908c1c items=0 ppid=3086 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.693000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 19:43:31.695000 audit[3178]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.695000 audit[3178]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc11f81ae0 a2=0 a3=7ffc11f81acc items=0 ppid=3086 pid=3178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.695000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:43:31.722000 audit[3180]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.722000 audit[3180]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff636ab5a0 a2=0 a3=7fff636ab58c items=0 ppid=3086 pid=3180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.722000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:43:31.736000 audit[3181]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3181 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.736000 audit[3181]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1adab920 a2=0 a3=7ffc1adab90c items=0 ppid=3086 pid=3181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.736000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:43:31.742000 audit[3183]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.742000 audit[3183]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc9316bb00 a2=0 a3=7ffc9316baec items=0 ppid=3086 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:43:31.746000 audit[3186]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.746000 audit[3186]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc0b20ade0 a2=0 a3=7ffc0b20adcc items=0 ppid=3086 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.746000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 19:43:31.748000 audit[3187]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.748000 audit[3187]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff414a35b0 a2=0 a3=7fff414a359c items=0 ppid=3086 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.748000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:43:31.751000 audit[3189]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.751000 audit[3189]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc3cd8730 a2=0 a3=7fffc3cd871c items=0 ppid=3086 pid=3189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.751000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:43:31.752000 audit[3190]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3190 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.752000 audit[3190]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff1ae66730 a2=0 a3=7fff1ae6671c items=0 ppid=3086 pid=3190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.752000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:43:31.756000 audit[3192]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.756000 audit[3192]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe6c699b60 a2=0 a3=7ffe6c699b4c items=0 ppid=3086 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.756000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:43:31.763000 audit[3195]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.763000 audit[3195]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff1d7d3590 a2=0 a3=7fff1d7d357c items=0 ppid=3086 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.763000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:43:31.769000 audit[3198]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.769000 audit[3198]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb9fe3570 a2=0 a3=7fffb9fe355c items=0 ppid=3086 pid=3198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.769000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:43:31.771000 audit[3199]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3199 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.771000 audit[3199]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe010de860 a2=0 a3=7ffe010de84c items=0 ppid=3086 pid=3199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:43:31.775000 audit[3201]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.775000 audit[3201]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe681f6d60 a2=0 a3=7ffe681f6d4c items=0 ppid=3086 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.775000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:43:31.779000 audit[3204]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3204 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.779000 audit[3204]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd4d32d4c0 a2=0 a3=7ffd4d32d4ac items=0 ppid=3086 pid=3204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.779000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:43:31.788000 audit[3209]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3209 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.788000 audit[3209]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1fbfed30 a2=0 a3=7ffe1fbfed1c items=0 ppid=3086 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.788000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:43:31.792000 audit[3211]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3211 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 19:43:31.792000 audit[3211]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc3d23a750 a2=0 a3=7ffc3d23a73c items=0 ppid=3086 pid=3211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.792000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:43:31.810000 audit[3213]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:43:31.810000 audit[3213]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7fff8613a300 a2=0 a3=7fff8613a2ec items=0 ppid=3086 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.810000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:43:31.819000 audit[3213]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3213 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 19:43:31.819000 audit[3213]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7fff8613a300 a2=0 a3=7fff8613a2ec items=0 ppid=3086 pid=3213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.819000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:43:31.821000 audit[3219]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.821000 audit[3219]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffd148fe4d0 a2=0 a3=7ffd148fe4bc items=0 ppid=3086 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.821000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 19:43:31.824000 audit[3221]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.824000 audit[3221]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcf236af70 a2=0 a3=7ffcf236af5c items=0 ppid=3086 pid=3221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.824000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 19:43:31.828000 audit[3224]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.828000 audit[3224]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd4cf48ff0 a2=0 a3=7ffd4cf48fdc items=0 ppid=3086 pid=3224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.828000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 19:43:31.830000 audit[3225]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.830000 audit[3225]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe72d5bfd0 a2=0 a3=7ffe72d5bfbc items=0 ppid=3086 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.830000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 19:43:31.833000 audit[3227]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3227 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.833000 audit[3227]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffda5672b90 a2=0 a3=7ffda5672b7c items=0 ppid=3086 pid=3227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 19:43:31.834000 audit[3228]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.834000 audit[3228]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee7684fa0 a2=0 a3=7ffee7684f8c items=0 ppid=3086 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.834000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 19:43:31.837000 audit[3230]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3230 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.837000 audit[3230]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffbb18a790 a2=0 a3=7fffbb18a77c items=0 ppid=3086 pid=3230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.837000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 19:43:31.841000 audit[3233]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.841000 audit[3233]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd1982c4a0 a2=0 a3=7ffd1982c48c items=0 ppid=3086 pid=3233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.841000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 19:43:31.843000 audit[3234]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.843000 audit[3234]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9222f130 a2=0 a3=7ffe9222f11c items=0 ppid=3086 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.843000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 19:43:31.846000 audit[3236]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3236 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.846000 audit[3236]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffd771d4a0 a2=0 a3=7fffd771d48c items=0 ppid=3086 pid=3236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.846000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 19:43:31.847000 audit[3237]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.847000 audit[3237]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd345a4440 a2=0 a3=7ffd345a442c items=0 ppid=3086 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.847000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 19:43:31.850000 audit[3239]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.850000 audit[3239]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffefd7a49f0 a2=0 a3=7ffefd7a49dc items=0 ppid=3086 pid=3239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.850000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 19:43:31.854000 audit[3242]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.854000 audit[3242]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffecca6b5f0 a2=0 a3=7ffecca6b5dc items=0 ppid=3086 pid=3242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 19:43:31.859000 audit[3245]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.859000 audit[3245]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe7ccef7a0 a2=0 a3=7ffe7ccef78c items=0 ppid=3086 pid=3245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.859000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 19:43:31.860000 audit[3246]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.860000 audit[3246]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcf46d5ee0 a2=0 a3=7ffcf46d5ecc items=0 ppid=3086 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 19:43:31.863000 audit[3248]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3248 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.863000 audit[3248]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc17b2e230 a2=0 a3=7ffc17b2e21c items=0 ppid=3086 pid=3248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.863000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:43:31.868000 audit[3251]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.868000 audit[3251]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd0b98f770 a2=0 a3=7ffd0b98f75c items=0 ppid=3086 pid=3251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 19:43:31.870000 audit[3252]: NETFILTER_CFG table=filter:82 family=10 entries=1 op=nft_register_chain pid=3252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.870000 audit[3252]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffed392c360 a2=0 a3=7ffed392c34c items=0 ppid=3086 pid=3252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.870000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 19:43:31.872000 audit[3254]: NETFILTER_CFG table=filter:83 family=10 entries=1 op=nft_register_rule pid=3254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.872000 audit[3254]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffce4be2090 a2=0 a3=7ffce4be207c items=0 ppid=3086 pid=3254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:43:31.876000 audit[3257]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_rule pid=3257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.876000 audit[3257]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd37840670 a2=0 a3=7ffd3784065c items=0 ppid=3086 pid=3257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.876000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 19:43:31.877000 audit[3258]: NETFILTER_CFG table=nat:85 family=10 entries=1 op=nft_register_chain pid=3258 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.877000 audit[3258]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff1b5972e0 a2=0 a3=7fff1b5972cc items=0 ppid=3086 pid=3258 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.877000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 19:43:31.880000 audit[3260]: NETFILTER_CFG table=nat:86 family=10 entries=2 op=nft_register_chain pid=3260 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 19:43:31.880000 audit[3260]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffee6d27bd0 a2=0 a3=7ffee6d27bbc items=0 ppid=3086 pid=3260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.880000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 19:43:31.885000 audit[3262]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:43:31.885000 audit[3262]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffea75f85a0 a2=0 a3=7ffea75f858c items=0 ppid=3086 pid=3262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.885000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:43:31.886000 audit[3262]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3262 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 19:43:31.886000 audit[3262]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffea75f85a0 a2=0 a3=7ffea75f858c items=0 ppid=3086 pid=3262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:31.886000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 19:43:32.198317 kubelet[2916]: I1002 19:43:32.198024 2916 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-7wd7q" podStartSLOduration=3.197975257 podCreationTimestamp="2023-10-02 19:43:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 19:43:32.197624382 +0000 UTC m=+17.461931787" watchObservedRunningTime="2023-10-02 19:43:32.197975257 +0000 UTC m=+17.462282661" Oct 2 19:43:32.351227 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount283956190.mount: Deactivated successfully. Oct 2 19:43:33.391370 env[1632]: time="2023-10-02T19:43:33.391216723Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:33.394751 env[1632]: time="2023-10-02T19:43:33.394712139Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:33.397635 env[1632]: time="2023-10-02T19:43:33.397596692Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:33.398414 env[1632]: time="2023-10-02T19:43:33.398374902Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 19:43:33.402152 env[1632]: time="2023-10-02T19:43:33.402110258Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 19:43:33.410405 env[1632]: time="2023-10-02T19:43:33.410362267Z" level=info msg="CreateContainer within sandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 19:43:33.434934 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4282136771.mount: Deactivated successfully. Oct 2 19:43:33.453446 env[1632]: time="2023-10-02T19:43:33.453394947Z" level=info msg="CreateContainer within sandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\"" Oct 2 19:43:33.454691 env[1632]: time="2023-10-02T19:43:33.454639486Z" level=info msg="StartContainer for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\"" Oct 2 19:43:33.515150 systemd[1]: Started cri-containerd-f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee.scope. Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.534000 audit: BPF prog-id=130 op=LOAD Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2990 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:33.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634386461333963653065656464326564656465663037386261356430 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2990 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:33.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634386461333963653065656464326564656465663037386261356430 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.536000 audit: BPF prog-id=131 op=LOAD Oct 2 19:43:33.536000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0000255b0 items=0 ppid=2990 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:33.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634386461333963653065656464326564656465663037386261356430 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.537000 audit: BPF prog-id=132 op=LOAD Oct 2 19:43:33.537000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0000255f8 items=0 ppid=2990 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:33.537000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634386461333963653065656464326564656465663037386261356430 Oct 2 19:43:33.538000 audit: BPF prog-id=132 op=UNLOAD Oct 2 19:43:33.539000 audit: BPF prog-id=131 op=UNLOAD Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { perfmon } for pid=3271 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit[3271]: AVC avc: denied { bpf } for pid=3271 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:43:33.539000 audit: BPF prog-id=133 op=LOAD Oct 2 19:43:33.539000 audit[3271]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c000025a08 items=0 ppid=2990 pid=3271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:33.539000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634386461333963653065656464326564656465663037386261356430 Oct 2 19:43:33.565453 env[1632]: time="2023-10-02T19:43:33.565376996Z" level=info msg="StartContainer for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" returns successfully" Oct 2 19:43:33.629589 kernel: kauditd_printk_skb: 426 callbacks suppressed Oct 2 19:43:33.629945 kernel: audit: type=1400 audit(1696275813.621:1118): avc: denied { map_create } for pid=3282 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c887 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c887 tclass=bpf permissive=0 Oct 2 19:43:33.621000 audit[3282]: AVC avc: denied { map_create } for pid=3282 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c887 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c887 tclass=bpf permissive=0 Oct 2 19:43:33.621000 audit[3282]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00064f7d0 a2=48 a3=c00064f7c0 items=0 ppid=2990 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c887 key=(null) Oct 2 19:43:33.641852 kernel: audit: type=1300 audit(1696275813.621:1118): arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c00064f7d0 a2=48 a3=c00064f7c0 items=0 ppid=2990 pid=3282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c262,c887 key=(null) Oct 2 19:43:33.621000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:43:33.651557 kernel: audit: type=1327 audit(1696275813.621:1118): proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 19:43:34.432157 systemd[1]: run-containerd-runc-k8s.io-f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee-runc.TRpQIi.mount: Deactivated successfully. Oct 2 19:43:40.322603 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2809703028.mount: Deactivated successfully. Oct 2 19:43:44.435814 env[1632]: time="2023-10-02T19:43:44.435723579Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:44.439723 env[1632]: time="2023-10-02T19:43:44.439677345Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:44.442046 env[1632]: time="2023-10-02T19:43:44.442007494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 19:43:44.442636 env[1632]: time="2023-10-02T19:43:44.442599936Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 19:43:44.447674 env[1632]: time="2023-10-02T19:43:44.447636271Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:43:44.471108 env[1632]: time="2023-10-02T19:43:44.471057224Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\"" Oct 2 19:43:44.471653 env[1632]: time="2023-10-02T19:43:44.471569835Z" level=info msg="StartContainer for \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\"" Oct 2 19:43:44.505689 systemd[1]: Started cri-containerd-173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804.scope. Oct 2 19:43:44.522730 systemd[1]: run-containerd-runc-k8s.io-173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804-runc.kJQ7E2.mount: Deactivated successfully. Oct 2 19:43:44.531940 systemd[1]: cri-containerd-173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804.scope: Deactivated successfully. Oct 2 19:43:44.635262 env[1632]: time="2023-10-02T19:43:44.635195497Z" level=info msg="shim disconnected" id=173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804 Oct 2 19:43:44.635262 env[1632]: time="2023-10-02T19:43:44.635251541Z" level=warning msg="cleaning up after shim disconnected" id=173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804 namespace=k8s.io Oct 2 19:43:44.635262 env[1632]: time="2023-10-02T19:43:44.635265323Z" level=info msg="cleaning up dead shim" Oct 2 19:43:44.646737 env[1632]: time="2023-10-02T19:43:44.646681349Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:44Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3328 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:44Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:44.647691 env[1632]: time="2023-10-02T19:43:44.647554524Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:43:44.648284 env[1632]: time="2023-10-02T19:43:44.648055080Z" level=error msg="Failed to pipe stderr of container \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\"" error="reading from a closed fifo" Oct 2 19:43:44.650215 env[1632]: time="2023-10-02T19:43:44.650168848Z" level=error msg="Failed to pipe stdout of container \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\"" error="reading from a closed fifo" Oct 2 19:43:44.652244 env[1632]: time="2023-10-02T19:43:44.652186233Z" level=error msg="StartContainer for \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:44.652573 kubelet[2916]: E1002 19:43:44.652547 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804" Oct 2 19:43:44.652950 kubelet[2916]: E1002 19:43:44.652694 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:44.652950 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:44.652950 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:43:44.654805 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qsdzw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:44.654805 kubelet[2916]: E1002 19:43:44.652742 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:43:45.277729 env[1632]: time="2023-10-02T19:43:45.276034174Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:43:45.299371 env[1632]: time="2023-10-02T19:43:45.299216238Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\"" Oct 2 19:43:45.300898 kubelet[2916]: I1002 19:43:45.300656 2916 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-574c4bb98d-4fd9b" podStartSLOduration=13.91700092 podCreationTimestamp="2023-10-02 19:43:29 +0000 UTC" firstStartedPulling="2023-10-02 19:43:31.015676882 +0000 UTC m=+16.279984267" lastFinishedPulling="2023-10-02 19:43:33.399283738 +0000 UTC m=+18.663591124" observedRunningTime="2023-10-02 19:43:34.326001723 +0000 UTC m=+19.590309123" watchObservedRunningTime="2023-10-02 19:43:45.300607777 +0000 UTC m=+30.564915182" Oct 2 19:43:45.301732 env[1632]: time="2023-10-02T19:43:45.301693906Z" level=info msg="StartContainer for \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\"" Oct 2 19:43:45.328218 systemd[1]: Started cri-containerd-2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66.scope. Oct 2 19:43:45.344001 systemd[1]: cri-containerd-2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66.scope: Deactivated successfully. Oct 2 19:43:45.361321 env[1632]: time="2023-10-02T19:43:45.361211727Z" level=info msg="shim disconnected" id=2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66 Oct 2 19:43:45.361321 env[1632]: time="2023-10-02T19:43:45.361319122Z" level=warning msg="cleaning up after shim disconnected" id=2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66 namespace=k8s.io Oct 2 19:43:45.362017 env[1632]: time="2023-10-02T19:43:45.361334540Z" level=info msg="cleaning up dead shim" Oct 2 19:43:45.372949 env[1632]: time="2023-10-02T19:43:45.372816668Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:43:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3365 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:43:45Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:43:45.373316 env[1632]: time="2023-10-02T19:43:45.373179918Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:43:45.373618 env[1632]: time="2023-10-02T19:43:45.373571869Z" level=error msg="Failed to pipe stderr of container \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\"" error="reading from a closed fifo" Oct 2 19:43:45.373740 env[1632]: time="2023-10-02T19:43:45.373699324Z" level=error msg="Failed to pipe stdout of container \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\"" error="reading from a closed fifo" Oct 2 19:43:45.375805 env[1632]: time="2023-10-02T19:43:45.375761512Z" level=error msg="StartContainer for \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:43:45.376030 kubelet[2916]: E1002 19:43:45.376007 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66" Oct 2 19:43:45.376189 kubelet[2916]: E1002 19:43:45.376169 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:43:45.376189 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:43:45.376189 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:43:45.376189 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qsdzw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:43:45.376507 kubelet[2916]: E1002 19:43:45.376219 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:43:45.457117 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804-rootfs.mount: Deactivated successfully. Oct 2 19:43:46.277892 kubelet[2916]: I1002 19:43:46.277864 2916 scope.go:115] "RemoveContainer" containerID="173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804" Oct 2 19:43:46.279863 kubelet[2916]: I1002 19:43:46.279840 2916 scope.go:115] "RemoveContainer" containerID="173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804" Oct 2 19:43:46.282120 env[1632]: time="2023-10-02T19:43:46.282065880Z" level=info msg="RemoveContainer for \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\"" Oct 2 19:43:46.283239 env[1632]: time="2023-10-02T19:43:46.282967180Z" level=info msg="RemoveContainer for \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\"" Oct 2 19:43:46.283239 env[1632]: time="2023-10-02T19:43:46.283156418Z" level=error msg="RemoveContainer for \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\" failed" error="failed to set removing state for container \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\": container is already in removing state" Oct 2 19:43:46.283586 kubelet[2916]: E1002 19:43:46.283556 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\": container is already in removing state" containerID="173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804" Oct 2 19:43:46.283732 kubelet[2916]: I1002 19:43:46.283710 2916 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804} err="rpc error: code = Unknown desc = failed to set removing state for container \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\": container is already in removing state" Oct 2 19:43:46.289455 env[1632]: time="2023-10-02T19:43:46.289414738Z" level=info msg="RemoveContainer for \"173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804\" returns successfully" Oct 2 19:43:46.290179 kubelet[2916]: E1002 19:43:46.290156 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:43:47.282722 kubelet[2916]: E1002 19:43:47.282690 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:43:47.741583 kubelet[2916]: W1002 19:43:47.741415 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice/cri-containerd-173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804.scope WatchSource:0}: container "173db380a88a052b727409833c70234596cc83a9a6280122ff2c27abd21bd804" in namespace "k8s.io": not found Oct 2 19:43:50.851099 kubelet[2916]: W1002 19:43:50.851005 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice/cri-containerd-2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66.scope WatchSource:0}: task 2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66 not found: not found Oct 2 19:43:59.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.231:22-139.178.89.65:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:59.163858 systemd[1]: Started sshd@7-172.31.22.231:22-139.178.89.65:46560.service. Oct 2 19:43:59.172496 kernel: audit: type=1130 audit(1696275839.162:1119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.231:22-139.178.89.65:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:43:59.373000 audit[3379]: USER_ACCT pid=3379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.383545 kernel: audit: type=1101 audit(1696275839.373:1120): pid=3379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.383614 sshd[3379]: Accepted publickey for core from 139.178.89.65 port 46560 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:43:59.384000 audit[3379]: CRED_ACQ pid=3379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.386891 sshd[3379]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:43:59.400612 kernel: audit: type=1103 audit(1696275839.384:1121): pid=3379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.410773 kernel: audit: type=1006 audit(1696275839.384:1122): pid=3379 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 19:43:59.384000 audit[3379]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4a243680 a2=3 a3=0 items=0 ppid=1 pid=3379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:59.419682 kernel: audit: type=1300 audit(1696275839.384:1122): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4a243680 a2=3 a3=0 items=0 ppid=1 pid=3379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:43:59.384000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:59.423786 kernel: audit: type=1327 audit(1696275839.384:1122): proctitle=737368643A20636F7265205B707269765D Oct 2 19:43:59.424344 systemd-logind[1624]: New session 8 of user core. Oct 2 19:43:59.425156 systemd[1]: Started session-8.scope. Oct 2 19:43:59.442000 audit[3379]: USER_START pid=3379 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.451616 kernel: audit: type=1105 audit(1696275839.442:1123): pid=3379 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.451000 audit[3381]: CRED_ACQ pid=3381 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.461624 kernel: audit: type=1103 audit(1696275839.451:1124): pid=3381 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.841122 sshd[3379]: pam_unix(sshd:session): session closed for user core Oct 2 19:43:59.841000 audit[3379]: USER_END pid=3379 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.847064 systemd-logind[1624]: Session 8 logged out. Waiting for processes to exit. Oct 2 19:43:59.849009 systemd[1]: sshd@7-172.31.22.231:22-139.178.89.65:46560.service: Deactivated successfully. Oct 2 19:43:59.850155 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 19:43:59.851612 kernel: audit: type=1106 audit(1696275839.841:1125): pid=3379 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.841000 audit[3379]: CRED_DISP pid=3379 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.852840 systemd-logind[1624]: Removed session 8. Oct 2 19:43:59.858801 kernel: audit: type=1104 audit(1696275839.841:1126): pid=3379 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:43:59.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.22.231:22-139.178.89.65:46560 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:00.023305 env[1632]: time="2023-10-02T19:44:00.018972039Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:44:00.046772 env[1632]: time="2023-10-02T19:44:00.046713752Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\"" Oct 2 19:44:00.047753 env[1632]: time="2023-10-02T19:44:00.047717352Z" level=info msg="StartContainer for \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\"" Oct 2 19:44:00.081791 systemd[1]: run-containerd-runc-k8s.io-9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf-runc.ZKM4PI.mount: Deactivated successfully. Oct 2 19:44:00.088566 systemd[1]: Started cri-containerd-9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf.scope. Oct 2 19:44:00.103641 systemd[1]: cri-containerd-9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf.scope: Deactivated successfully. Oct 2 19:44:00.131284 env[1632]: time="2023-10-02T19:44:00.131225947Z" level=info msg="shim disconnected" id=9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf Oct 2 19:44:00.131284 env[1632]: time="2023-10-02T19:44:00.131288045Z" level=warning msg="cleaning up after shim disconnected" id=9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf namespace=k8s.io Oct 2 19:44:00.131756 env[1632]: time="2023-10-02T19:44:00.131300187Z" level=info msg="cleaning up dead shim" Oct 2 19:44:00.143269 env[1632]: time="2023-10-02T19:44:00.143209176Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3415 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:44:00Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:44:00.143724 env[1632]: time="2023-10-02T19:44:00.143510677Z" level=error msg="copy shim log" error="read /proc/self/fd/57: file already closed" Oct 2 19:44:00.144440 env[1632]: time="2023-10-02T19:44:00.144391478Z" level=error msg="Failed to pipe stdout of container \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\"" error="reading from a closed fifo" Oct 2 19:44:00.144644 env[1632]: time="2023-10-02T19:44:00.144416881Z" level=error msg="Failed to pipe stderr of container \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\"" error="reading from a closed fifo" Oct 2 19:44:00.146359 env[1632]: time="2023-10-02T19:44:00.146310682Z" level=error msg="StartContainer for \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:44:00.146591 kubelet[2916]: E1002 19:44:00.146569 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf" Oct 2 19:44:00.147041 kubelet[2916]: E1002 19:44:00.146695 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:44:00.147041 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:44:00.147041 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:44:00.147041 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qsdzw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:44:00.147041 kubelet[2916]: E1002 19:44:00.146745 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:44:00.319310 kubelet[2916]: I1002 19:44:00.319285 2916 scope.go:115] "RemoveContainer" containerID="2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66" Oct 2 19:44:00.319754 kubelet[2916]: I1002 19:44:00.319721 2916 scope.go:115] "RemoveContainer" containerID="2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66" Oct 2 19:44:00.324578 env[1632]: time="2023-10-02T19:44:00.324531911Z" level=info msg="RemoveContainer for \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\"" Oct 2 19:44:00.330515 env[1632]: time="2023-10-02T19:44:00.326007215Z" level=info msg="RemoveContainer for \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\"" Oct 2 19:44:00.330515 env[1632]: time="2023-10-02T19:44:00.326139976Z" level=error msg="RemoveContainer for \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\" failed" error="failed to set removing state for container \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\": container is already in removing state" Oct 2 19:44:00.330745 kubelet[2916]: E1002 19:44:00.326323 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\": container is already in removing state" containerID="2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66" Oct 2 19:44:00.330745 kubelet[2916]: E1002 19:44:00.326362 2916 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66": container is already in removing state; Skipping pod "cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)" Oct 2 19:44:00.330745 kubelet[2916]: E1002 19:44:00.326778 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:44:00.334663 env[1632]: time="2023-10-02T19:44:00.334598720Z" level=info msg="RemoveContainer for \"2b0761706ddf52b330ca17d7632e0af5a46e42bea49a7d4270461a7fbf86cc66\" returns successfully" Oct 2 19:44:01.037340 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf-rootfs.mount: Deactivated successfully. Oct 2 19:44:03.238051 kubelet[2916]: W1002 19:44:03.238006 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice/cri-containerd-9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf.scope WatchSource:0}: task 9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf not found: not found Oct 2 19:44:09.212000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:09.215256 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:09.215504 kernel: audit: type=1400 audit(1696275849.212:1128): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:09.212000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:09.227394 kernel: audit: type=1400 audit(1696275849.212:1129): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:09.227540 kernel: audit: type=1300 audit(1696275849.212:1129): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027e2bd0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:09.212000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027e2bd0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:09.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:09.242648 kernel: audit: type=1327 audit(1696275849.212:1129): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:09.212000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028aefe0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:09.254673 kernel: audit: type=1300 audit(1696275849.212:1128): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028aefe0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:09.254836 kernel: audit: type=1327 audit(1696275849.212:1128): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:09.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:09.868000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.231:22-139.178.89.65:36504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:09.869977 systemd[1]: Started sshd@8-172.31.22.231:22-139.178.89.65:36504.service. Oct 2 19:44:09.875632 kernel: audit: type=1130 audit(1696275849.868:1130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.231:22-139.178.89.65:36504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:10.051000 audit[3432]: USER_ACCT pid=3432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.059331 sshd[3432]: Accepted publickey for core from 139.178.89.65 port 36504 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:44:10.063857 kernel: audit: type=1101 audit(1696275850.051:1131): pid=3432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.063901 kernel: audit: type=1103 audit(1696275850.057:1132): pid=3432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.057000 audit[3432]: CRED_ACQ pid=3432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.060028 sshd[3432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:10.071201 kernel: audit: type=1006 audit(1696275850.057:1133): pid=3432 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Oct 2 19:44:10.057000 audit[3432]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9988cf10 a2=3 a3=0 items=0 ppid=1 pid=3432 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:10.057000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:10.072659 systemd-logind[1624]: New session 9 of user core. Oct 2 19:44:10.073390 systemd[1]: Started session-9.scope. Oct 2 19:44:10.080000 audit[3432]: USER_START pid=3432 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.083000 audit[3434]: CRED_ACQ pid=3434 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.314296 sshd[3432]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:10.331000 audit[3432]: USER_END pid=3432 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.332000 audit[3432]: CRED_DISP pid=3432 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:10.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.22.231:22-139.178.89.65:36504 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:10.339804 systemd-logind[1624]: Session 9 logged out. Waiting for processes to exit. Oct 2 19:44:10.340047 systemd[1]: sshd@8-172.31.22.231:22-139.178.89.65:36504.service: Deactivated successfully. Oct 2 19:44:10.342628 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 19:44:10.349648 systemd-logind[1624]: Removed session 9. Oct 2 19:44:11.322000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:11.322000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008d4e9f0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:44:11.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:44:11.327000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:11.327000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:11.327000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008ceb3e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:44:11.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:44:11.327000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00c5ccdc0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:44:11.327000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:44:11.335000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:11.335000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c008d4ea50 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:44:11.335000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:44:11.419000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:11.419000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c008f22540 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:44:11.419000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:44:11.419000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:11.419000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c785620 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:44:11.419000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:44:14.003977 kubelet[2916]: E1002 19:44:14.003948 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:44:20.342419 systemd[1]: Started sshd@9-172.31.22.231:22-139.178.89.65:42252.service. Oct 2 19:44:20.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.231:22-139.178.89.65:42252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:20.344176 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:44:20.344252 kernel: audit: type=1130 audit(1696275860.342:1145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.231:22-139.178.89.65:42252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:20.508000 audit[3446]: USER_ACCT pid=3446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.515436 sshd[3446]: Accepted publickey for core from 139.178.89.65 port 42252 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:44:20.515979 kernel: audit: type=1101 audit(1696275860.508:1146): pid=3446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.515000 audit[3446]: CRED_ACQ pid=3446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.516490 sshd[3446]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:20.526671 kernel: audit: type=1103 audit(1696275860.515:1147): pid=3446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.526784 kernel: audit: type=1006 audit(1696275860.515:1148): pid=3446 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 19:44:20.526815 kernel: audit: type=1300 audit(1696275860.515:1148): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce2a4bb10 a2=3 a3=0 items=0 ppid=1 pid=3446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:20.515000 audit[3446]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffce2a4bb10 a2=3 a3=0 items=0 ppid=1 pid=3446 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:20.529027 systemd[1]: Started session-10.scope. Oct 2 19:44:20.531151 systemd-logind[1624]: New session 10 of user core. Oct 2 19:44:20.515000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:20.535537 kernel: audit: type=1327 audit(1696275860.515:1148): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:20.537000 audit[3446]: USER_START pid=3446 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.546520 kernel: audit: type=1105 audit(1696275860.537:1149): pid=3446 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.546000 audit[3448]: CRED_ACQ pid=3448 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.552517 kernel: audit: type=1103 audit(1696275860.546:1150): pid=3448 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.738685 sshd[3446]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:20.740000 audit[3446]: USER_END pid=3446 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.746886 systemd[1]: sshd@9-172.31.22.231:22-139.178.89.65:42252.service: Deactivated successfully. Oct 2 19:44:20.741000 audit[3446]: CRED_DISP pid=3446 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.747944 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 19:44:20.749722 systemd-logind[1624]: Session 10 logged out. Waiting for processes to exit. Oct 2 19:44:20.751060 systemd-logind[1624]: Removed session 10. Oct 2 19:44:20.754325 kernel: audit: type=1106 audit(1696275860.740:1151): pid=3446 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.754417 kernel: audit: type=1104 audit(1696275860.741:1152): pid=3446 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:20.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.22.231:22-139.178.89.65:42252 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:27.007550 env[1632]: time="2023-10-02T19:44:27.007504059Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:44:27.030316 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3421330827.mount: Deactivated successfully. Oct 2 19:44:27.042456 env[1632]: time="2023-10-02T19:44:27.042400689Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\"" Oct 2 19:44:27.047414 env[1632]: time="2023-10-02T19:44:27.044972927Z" level=info msg="StartContainer for \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\"" Oct 2 19:44:27.086497 systemd[1]: Started cri-containerd-53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684.scope. Oct 2 19:44:27.126688 systemd[1]: cri-containerd-53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684.scope: Deactivated successfully. Oct 2 19:44:27.156153 env[1632]: time="2023-10-02T19:44:27.154672541Z" level=info msg="shim disconnected" id=53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684 Oct 2 19:44:27.156153 env[1632]: time="2023-10-02T19:44:27.156130502Z" level=warning msg="cleaning up after shim disconnected" id=53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684 namespace=k8s.io Oct 2 19:44:27.156153 env[1632]: time="2023-10-02T19:44:27.156157834Z" level=info msg="cleaning up dead shim" Oct 2 19:44:27.168909 env[1632]: time="2023-10-02T19:44:27.168848538Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:44:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3483 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:44:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:44:27.169276 env[1632]: time="2023-10-02T19:44:27.169212752Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:44:27.172516 env[1632]: time="2023-10-02T19:44:27.172449413Z" level=error msg="Failed to pipe stderr of container \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\"" error="reading from a closed fifo" Oct 2 19:44:27.172720 env[1632]: time="2023-10-02T19:44:27.172649301Z" level=error msg="Failed to pipe stdout of container \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\"" error="reading from a closed fifo" Oct 2 19:44:27.174745 env[1632]: time="2023-10-02T19:44:27.174667257Z" level=error msg="StartContainer for \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:44:27.175006 kubelet[2916]: E1002 19:44:27.174976 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684" Oct 2 19:44:27.175398 kubelet[2916]: E1002 19:44:27.175109 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:44:27.175398 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:44:27.175398 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:44:27.175398 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qsdzw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:44:27.175398 kubelet[2916]: E1002 19:44:27.175162 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:44:27.396027 kubelet[2916]: I1002 19:44:27.395989 2916 scope.go:115] "RemoveContainer" containerID="9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf" Oct 2 19:44:27.397559 kubelet[2916]: I1002 19:44:27.397536 2916 scope.go:115] "RemoveContainer" containerID="9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf" Oct 2 19:44:27.399242 env[1632]: time="2023-10-02T19:44:27.399203119Z" level=info msg="RemoveContainer for \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\"" Oct 2 19:44:27.400916 env[1632]: time="2023-10-02T19:44:27.400884212Z" level=info msg="RemoveContainer for \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\"" Oct 2 19:44:27.401185 env[1632]: time="2023-10-02T19:44:27.401149057Z" level=error msg="RemoveContainer for \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\" failed" error="failed to set removing state for container \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\": container is already in removing state" Oct 2 19:44:27.401436 kubelet[2916]: E1002 19:44:27.401418 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\": container is already in removing state" containerID="9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf" Oct 2 19:44:27.401603 kubelet[2916]: E1002 19:44:27.401593 2916 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf": container is already in removing state; Skipping pod "cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)" Oct 2 19:44:27.402050 kubelet[2916]: E1002 19:44:27.402035 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:44:27.412960 env[1632]: time="2023-10-02T19:44:27.411687498Z" level=info msg="RemoveContainer for \"9896e2b68c155043e8d20a5bb5b9b03b392fea055be765210b02cefdd9bd75bf\" returns successfully" Oct 2 19:44:28.025748 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684-rootfs.mount: Deactivated successfully. Oct 2 19:44:28.609625 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:28.609775 kernel: audit: type=1400 audit(1696275868.607:1154): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.607000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.607000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013b2da0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.633008 kernel: audit: type=1300 audit(1696275868.607:1154): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013b2da0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.633168 kernel: audit: type=1327 audit(1696275868.607:1154): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:28.607000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:28.624000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.652099 kernel: audit: type=1400 audit(1696275868.624:1155): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.652270 kernel: audit: type=1300 audit(1696275868.624:1155): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf39a0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.624000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001bf39a0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.624000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:28.671549 kernel: audit: type=1327 audit(1696275868.624:1155): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.681107 kernel: audit: type=1400 audit(1696275868.626:1156): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.681489 kernel: audit: type=1300 audit(1696275868.626:1156): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013b2fe0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013b2fe0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:28.697759 kernel: audit: type=1327 audit(1696275868.626:1156): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:28.697935 kernel: audit: type=1400 audit(1696275868.626:1157): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:44:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013b3020 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:44:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:44:30.263460 kubelet[2916]: W1002 19:44:30.263410 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice/cri-containerd-53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684.scope WatchSource:0}: task 53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684 not found: not found Oct 2 19:44:30.769362 systemd[1]: Started sshd@10-172.31.22.231:22-139.178.89.65:37680.service. Oct 2 19:44:30.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.22.231:22-139.178.89.65:37680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:30.948000 audit[3497]: USER_ACCT pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:30.951575 sshd[3497]: Accepted publickey for core from 139.178.89.65 port 37680 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:44:30.954000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:30.954000 audit[3497]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5f08b210 a2=3 a3=0 items=0 ppid=1 pid=3497 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:30.954000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:30.957229 sshd[3497]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:30.971463 systemd-logind[1624]: New session 11 of user core. Oct 2 19:44:30.972596 systemd[1]: Started session-11.scope. Oct 2 19:44:30.981000 audit[3497]: USER_START pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:30.984000 audit[3499]: CRED_ACQ pid=3499 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:31.225174 sshd[3497]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:31.226000 audit[3497]: USER_END pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:31.226000 audit[3497]: CRED_DISP pid=3497 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:31.229260 systemd[1]: sshd@10-172.31.22.231:22-139.178.89.65:37680.service: Deactivated successfully. Oct 2 19:44:31.229000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.22.231:22-139.178.89.65:37680 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:31.230244 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 19:44:31.231311 systemd-logind[1624]: Session 11 logged out. Waiting for processes to exit. Oct 2 19:44:31.232405 systemd-logind[1624]: Removed session 11. Oct 2 19:44:41.260990 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:44:41.261454 kernel: audit: type=1130 audit(1696275881.257:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.231:22-139.178.89.65:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:41.257000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.231:22-139.178.89.65:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:41.257777 systemd[1]: Started sshd@11-172.31.22.231:22-139.178.89.65:40316.service. Oct 2 19:44:41.446000 audit[3512]: USER_ACCT pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.472901 sshd[3512]: Accepted publickey for core from 139.178.89.65 port 40316 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:44:41.474696 kernel: audit: type=1101 audit(1696275881.446:1168): pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.481000 audit[3512]: CRED_ACQ pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.482675 sshd[3512]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:41.491407 kernel: audit: type=1103 audit(1696275881.481:1169): pid=3512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.491651 kernel: audit: type=1006 audit(1696275881.481:1170): pid=3512 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 19:44:41.481000 audit[3512]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c7ef4a0 a2=3 a3=0 items=0 ppid=1 pid=3512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:41.481000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:41.501437 kernel: audit: type=1300 audit(1696275881.481:1170): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3c7ef4a0 a2=3 a3=0 items=0 ppid=1 pid=3512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:41.501580 kernel: audit: type=1327 audit(1696275881.481:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:41.504607 systemd-logind[1624]: New session 12 of user core. Oct 2 19:44:41.505417 systemd[1]: Started session-12.scope. Oct 2 19:44:41.510000 audit[3512]: USER_START pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.517665 kernel: audit: type=1105 audit(1696275881.510:1171): pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.517000 audit[3514]: CRED_ACQ pid=3514 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.523517 kernel: audit: type=1103 audit(1696275881.517:1172): pid=3514 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.724529 sshd[3512]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:41.727000 audit[3512]: USER_END pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.730130 systemd[1]: sshd@11-172.31.22.231:22-139.178.89.65:40316.service: Deactivated successfully. Oct 2 19:44:41.731173 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 19:44:41.733361 systemd-logind[1624]: Session 12 logged out. Waiting for processes to exit. Oct 2 19:44:41.734671 systemd-logind[1624]: Removed session 12. Oct 2 19:44:41.727000 audit[3512]: CRED_DISP pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.736510 kernel: audit: type=1106 audit(1696275881.727:1173): pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.736575 kernel: audit: type=1104 audit(1696275881.727:1174): pid=3512 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:41.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.22.231:22-139.178.89.65:40316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:43.003620 kubelet[2916]: E1002 19:44:43.003587 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:44:51.753600 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:44:51.753779 kernel: audit: type=1130 audit(1696275891.750:1176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.231:22-139.178.89.65:56384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:51.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.231:22-139.178.89.65:56384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:51.748937 systemd[1]: Started sshd@12-172.31.22.231:22-139.178.89.65:56384.service. Oct 2 19:44:51.913000 audit[3524]: USER_ACCT pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.920817 sshd[3524]: Accepted publickey for core from 139.178.89.65 port 56384 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:44:51.928972 kernel: audit: type=1101 audit(1696275891.913:1177): pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.929155 kernel: audit: type=1103 audit(1696275891.920:1178): pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.920000 audit[3524]: CRED_ACQ pid=3524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.922049 sshd[3524]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:44:51.934517 kernel: audit: type=1006 audit(1696275891.921:1179): pid=3524 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 19:44:51.930306 systemd[1]: Started session-13.scope. Oct 2 19:44:51.932553 systemd-logind[1624]: New session 13 of user core. Oct 2 19:44:51.921000 audit[3524]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc42d248e0 a2=3 a3=0 items=0 ppid=1 pid=3524 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:51.944168 kernel: audit: type=1300 audit(1696275891.921:1179): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc42d248e0 a2=3 a3=0 items=0 ppid=1 pid=3524 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:44:51.944287 kernel: audit: type=1327 audit(1696275891.921:1179): proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:51.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:44:51.944000 audit[3524]: USER_START pid=3524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.956579 kernel: audit: type=1105 audit(1696275891.944:1180): pid=3524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.956718 kernel: audit: type=1103 audit(1696275891.948:1181): pid=3526 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:51.948000 audit[3526]: CRED_ACQ pid=3526 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:52.153662 sshd[3524]: pam_unix(sshd:session): session closed for user core Oct 2 19:44:52.155000 audit[3524]: USER_END pid=3524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:52.164041 kernel: audit: type=1106 audit(1696275892.155:1182): pid=3524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:52.155000 audit[3524]: CRED_DISP pid=3524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:52.165996 systemd[1]: sshd@12-172.31.22.231:22-139.178.89.65:56384.service: Deactivated successfully. Oct 2 19:44:52.167069 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 19:44:52.173511 kernel: audit: type=1104 audit(1696275892.155:1183): pid=3524 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:44:52.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.22.231:22-139.178.89.65:56384 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:44:52.173826 systemd-logind[1624]: Session 13 logged out. Waiting for processes to exit. Oct 2 19:44:52.176647 systemd-logind[1624]: Removed session 13. Oct 2 19:44:58.003395 kubelet[2916]: E1002 19:44:58.003352 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:45:02.188576 systemd[1]: Started sshd@13-172.31.22.231:22-139.178.89.65:47316.service. Oct 2 19:45:02.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.231:22-139.178.89.65:47316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:02.195475 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:02.195653 kernel: audit: type=1130 audit(1696275902.188:1185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.231:22-139.178.89.65:47316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:02.384000 audit[3538]: USER_ACCT pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.384960 sshd[3538]: Accepted publickey for core from 139.178.89.65 port 47316 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:02.394523 kernel: audit: type=1101 audit(1696275902.384:1186): pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.394649 kernel: audit: type=1103 audit(1696275902.393:1187): pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.393000 audit[3538]: CRED_ACQ pid=3538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.395071 sshd[3538]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:02.412151 kernel: audit: type=1006 audit(1696275902.393:1188): pid=3538 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 19:45:02.412271 kernel: audit: type=1300 audit(1696275902.393:1188): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff73eafc00 a2=3 a3=0 items=0 ppid=1 pid=3538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:02.393000 audit[3538]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff73eafc00 a2=3 a3=0 items=0 ppid=1 pid=3538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:02.411269 systemd[1]: Started session-14.scope. Oct 2 19:45:02.415266 systemd-logind[1624]: New session 14 of user core. Oct 2 19:45:02.420585 kernel: audit: type=1327 audit(1696275902.393:1188): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:02.393000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:02.436598 kernel: audit: type=1105 audit(1696275902.426:1189): pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.426000 audit[3538]: USER_START pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.438000 audit[3540]: CRED_ACQ pid=3540 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.447510 kernel: audit: type=1103 audit(1696275902.438:1190): pid=3540 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.706933 sshd[3538]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:02.714000 audit[3538]: USER_END pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.723244 systemd[1]: sshd@13-172.31.22.231:22-139.178.89.65:47316.service: Deactivated successfully. Oct 2 19:45:02.724248 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 19:45:02.715000 audit[3538]: CRED_DISP pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.742659 systemd-logind[1624]: Session 14 logged out. Waiting for processes to exit. Oct 2 19:45:02.747018 systemd-logind[1624]: Removed session 14. Oct 2 19:45:02.751258 kernel: audit: type=1106 audit(1696275902.714:1191): pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.751389 kernel: audit: type=1104 audit(1696275902.715:1192): pid=3538 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:02.723000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.22.231:22-139.178.89.65:47316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:09.214000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:09.216046 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:09.216146 kernel: audit: type=1400 audit(1696275909.214:1194): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:09.214000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009d51a0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:09.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:09.242712 kernel: audit: type=1300 audit(1696275909.214:1194): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009d51a0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:09.242916 kernel: audit: type=1327 audit(1696275909.214:1194): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:09.242967 kernel: audit: type=1400 audit(1696275909.215:1195): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:09.215000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:09.215000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d37c40 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:09.256512 kernel: audit: type=1300 audit(1696275909.215:1195): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d37c40 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:09.256653 kernel: audit: type=1327 audit(1696275909.215:1195): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:09.215000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:11.025540 env[1632]: time="2023-10-02T19:45:11.021613261Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 19:45:11.050284 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4240505901.mount: Deactivated successfully. Oct 2 19:45:11.060457 env[1632]: time="2023-10-02T19:45:11.060313534Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\"" Oct 2 19:45:11.061539 env[1632]: time="2023-10-02T19:45:11.061501621Z" level=info msg="StartContainer for \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\"" Oct 2 19:45:11.099047 systemd[1]: Started cri-containerd-9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9.scope. Oct 2 19:45:11.122648 systemd[1]: cri-containerd-9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9.scope: Deactivated successfully. Oct 2 19:45:11.153789 env[1632]: time="2023-10-02T19:45:11.153618438Z" level=info msg="shim disconnected" id=9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9 Oct 2 19:45:11.153789 env[1632]: time="2023-10-02T19:45:11.153778497Z" level=warning msg="cleaning up after shim disconnected" id=9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9 namespace=k8s.io Oct 2 19:45:11.153789 env[1632]: time="2023-10-02T19:45:11.153793169Z" level=info msg="cleaning up dead shim" Oct 2 19:45:11.168724 env[1632]: time="2023-10-02T19:45:11.168616560Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:45:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3576 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:45:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:45:11.169147 env[1632]: time="2023-10-02T19:45:11.169070175Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:45:11.169706 env[1632]: time="2023-10-02T19:45:11.169547031Z" level=error msg="Failed to pipe stderr of container \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\"" error="reading from a closed fifo" Oct 2 19:45:11.170008 env[1632]: time="2023-10-02T19:45:11.169911816Z" level=error msg="Failed to pipe stdout of container \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\"" error="reading from a closed fifo" Oct 2 19:45:11.172348 env[1632]: time="2023-10-02T19:45:11.172300094Z" level=error msg="StartContainer for \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:45:11.172693 kubelet[2916]: E1002 19:45:11.172667 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9" Oct 2 19:45:11.173173 kubelet[2916]: E1002 19:45:11.172853 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:45:11.173173 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:45:11.173173 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:45:11.173173 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qsdzw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:45:11.173173 kubelet[2916]: E1002 19:45:11.172909 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:45:11.325000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.325000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004785c80 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.350363 kernel: audit: type=1400 audit(1696275911.325:1196): avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.350601 kernel: audit: type=1300 audit(1696275911.325:1196): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004785c80 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.325000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.326000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.364818 kernel: audit: type=1327 audit(1696275911.325:1196): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.364941 kernel: audit: type=1400 audit(1696275911.326:1197): avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.326000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004986ea0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.326000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.326000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.326000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00d0f41e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.326000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.334000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.334000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004785da0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.425000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.425000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c00d0f4240 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.425000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.425000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:11.425000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c003632360 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:45:11.425000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:45:11.516062 kubelet[2916]: I1002 19:45:11.516026 2916 scope.go:115] "RemoveContainer" containerID="53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684" Oct 2 19:45:11.519056 kubelet[2916]: I1002 19:45:11.517236 2916 scope.go:115] "RemoveContainer" containerID="53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684" Oct 2 19:45:11.519226 env[1632]: time="2023-10-02T19:45:11.519102011Z" level=info msg="RemoveContainer for \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\"" Oct 2 19:45:11.520968 env[1632]: time="2023-10-02T19:45:11.520149479Z" level=info msg="RemoveContainer for \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\"" Oct 2 19:45:11.520968 env[1632]: time="2023-10-02T19:45:11.520282379Z" level=error msg="RemoveContainer for \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\" failed" error="failed to set removing state for container \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\": container is already in removing state" Oct 2 19:45:11.521152 kubelet[2916]: E1002 19:45:11.520500 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\": container is already in removing state" containerID="53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684" Oct 2 19:45:11.521152 kubelet[2916]: E1002 19:45:11.520561 2916 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684": container is already in removing state; Skipping pod "cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)" Oct 2 19:45:11.521152 kubelet[2916]: E1002 19:45:11.521081 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:45:11.526000 env[1632]: time="2023-10-02T19:45:11.525950044Z" level=info msg="RemoveContainer for \"53ef5c7d0f6001fd98620358f6177f0b2b35e59da1649ff90c6f1a4368be7684\" returns successfully" Oct 2 19:45:12.044288 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9-rootfs.mount: Deactivated successfully. Oct 2 19:45:12.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.231:22-139.178.89.65:52162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:12.741651 systemd[1]: Started sshd@14-172.31.22.231:22-139.178.89.65:52162.service. Oct 2 19:45:12.954000 audit[3590]: USER_ACCT pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:12.955377 sshd[3590]: Accepted publickey for core from 139.178.89.65 port 52162 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:12.956000 audit[3590]: CRED_ACQ pid=3590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:12.956000 audit[3590]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffccedbfb30 a2=3 a3=0 items=0 ppid=1 pid=3590 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:12.956000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:12.957297 sshd[3590]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:12.964254 systemd[1]: Started session-15.scope. Oct 2 19:45:12.965419 systemd-logind[1624]: New session 15 of user core. Oct 2 19:45:12.973000 audit[3590]: USER_START pid=3590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:12.975000 audit[3592]: CRED_ACQ pid=3592 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:13.193667 sshd[3590]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:13.194000 audit[3590]: USER_END pid=3590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:13.195000 audit[3590]: CRED_DISP pid=3590 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:13.197302 systemd[1]: sshd@14-172.31.22.231:22-139.178.89.65:52162.service: Deactivated successfully. Oct 2 19:45:13.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.22.231:22-139.178.89.65:52162 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:13.198225 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 19:45:13.199250 systemd-logind[1624]: Session 15 logged out. Waiting for processes to exit. Oct 2 19:45:13.200407 systemd-logind[1624]: Removed session 15. Oct 2 19:45:14.260151 kubelet[2916]: W1002 19:45:14.260102 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice/cri-containerd-9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9.scope WatchSource:0}: task 9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9 not found: not found Oct 2 19:45:15.054740 kubelet[2916]: E1002 19:45:15.054709 2916 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 19:45:15.251259 kubelet[2916]: E1002 19:45:15.251216 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:20.253070 kubelet[2916]: E1002 19:45:20.252975 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:23.234087 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:45:23.234228 kernel: audit: type=1130 audit(1696275923.220:1211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.231:22-139.178.89.65:39690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:23.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.231:22-139.178.89.65:39690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:23.222044 systemd[1]: Started sshd@15-172.31.22.231:22-139.178.89.65:39690.service. Oct 2 19:45:23.388000 audit[3605]: USER_ACCT pid=3605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.397186 sshd[3605]: Accepted publickey for core from 139.178.89.65 port 39690 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:23.397542 kernel: audit: type=1101 audit(1696275923.388:1212): pid=3605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.396000 audit[3605]: CRED_ACQ pid=3605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.398133 sshd[3605]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:23.405037 systemd[1]: Started session-16.scope. Oct 2 19:45:23.407874 kernel: audit: type=1103 audit(1696275923.396:1213): pid=3605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.407976 kernel: audit: type=1006 audit(1696275923.396:1214): pid=3605 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 19:45:23.408006 kernel: audit: type=1300 audit(1696275923.396:1214): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7565fe10 a2=3 a3=0 items=0 ppid=1 pid=3605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:23.396000 audit[3605]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7565fe10 a2=3 a3=0 items=0 ppid=1 pid=3605 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:23.407049 systemd-logind[1624]: New session 16 of user core. Oct 2 19:45:23.396000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:23.414000 audit[3605]: USER_START pid=3605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.424265 kernel: audit: type=1327 audit(1696275923.396:1214): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:23.424375 kernel: audit: type=1105 audit(1696275923.414:1215): pid=3605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.424410 kernel: audit: type=1103 audit(1696275923.416:1216): pid=3607 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.416000 audit[3607]: CRED_ACQ pid=3607 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.608373 sshd[3605]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:23.608000 audit[3605]: USER_END pid=3605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.617607 kernel: audit: type=1106 audit(1696275923.608:1217): pid=3605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.617722 kernel: audit: type=1104 audit(1696275923.615:1218): pid=3605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.615000 audit[3605]: CRED_DISP pid=3605 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:23.621467 systemd[1]: sshd@15-172.31.22.231:22-139.178.89.65:39690.service: Deactivated successfully. Oct 2 19:45:23.622447 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 19:45:23.616000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.22.231:22-139.178.89.65:39690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:23.623712 systemd-logind[1624]: Session 16 logged out. Waiting for processes to exit. Oct 2 19:45:23.625016 systemd-logind[1624]: Removed session 16. Oct 2 19:45:25.254156 kubelet[2916]: E1002 19:45:25.254122 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:26.003628 kubelet[2916]: E1002 19:45:26.003594 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:45:28.611518 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:28.611691 kernel: audit: type=1400 audit(1696275928.607:1220): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.607000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.607000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001145b60 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.626228 kernel: audit: type=1300 audit(1696275928.607:1220): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001145b60 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.626360 kernel: audit: type=1327 audit(1696275928.607:1220): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:28.607000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:28.623000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.639057 kernel: audit: type=1400 audit(1696275928.623:1221): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.639208 kernel: audit: type=1300 audit(1696275928.623:1221): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129c440 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.623000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129c440 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.654678 kernel: audit: type=1327 audit(1696275928.623:1221): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:28.623000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.656504 kernel: audit: type=1400 audit(1696275928.626:1222): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129c560 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.670105 kernel: audit: type=1300 audit(1696275928.626:1222): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129c560 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.670249 kernel: audit: type=1327 audit(1696275928.626:1222): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.683660 kernel: audit: type=1400 audit(1696275928.626:1223): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:45:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129c580 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:45:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:45:30.255177 kubelet[2916]: E1002 19:45:30.255144 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:30.768663 update_engine[1625]: I1002 19:45:30.768389 1625 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 19:45:30.768663 update_engine[1625]: I1002 19:45:30.768458 1625 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 19:45:30.773318 update_engine[1625]: I1002 19:45:30.773237 1625 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 19:45:30.773810 update_engine[1625]: I1002 19:45:30.773784 1625 omaha_request_params.cc:62] Current group set to lts Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777279 1625 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777297 1625 update_attempter.cc:638] Scheduling an action processor start. Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777318 1625 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777357 1625 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777451 1625 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777457 1625 omaha_request_action.cc:269] Request: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: Oct 2 19:45:30.777529 update_engine[1625]: I1002 19:45:30.777463 1625 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 19:45:30.787794 update_engine[1625]: I1002 19:45:30.787753 1625 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 19:45:30.789137 update_engine[1625]: I1002 19:45:30.789110 1625 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 19:45:30.803618 locksmithd[1696]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 19:45:31.963222 update_engine[1625]: I1002 19:45:31.963167 1625 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 19:45:31.963696 update_engine[1625]: I1002 19:45:31.963511 1625 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 19:45:31.963749 update_engine[1625]: I1002 19:45:31.963704 1625 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 19:45:32.282535 update_engine[1625]: I1002 19:45:32.282198 1625 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 19:45:32.283859 update_engine[1625]: I1002 19:45:32.283794 1625 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 19:45:32.283859 update_engine[1625]: I1002 19:45:32.283845 1625 omaha_request_action.cc:619] Omaha request response: Oct 2 19:45:32.283859 update_engine[1625]: Oct 2 19:45:32.295083 update_engine[1625]: I1002 19:45:32.295039 1625 omaha_request_action.cc:409] No update. Oct 2 19:45:32.295083 update_engine[1625]: I1002 19:45:32.295079 1625 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 19:45:32.295083 update_engine[1625]: I1002 19:45:32.295085 1625 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 19:45:32.295083 update_engine[1625]: I1002 19:45:32.295090 1625 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 19:45:32.295083 update_engine[1625]: I1002 19:45:32.295094 1625 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 19:45:32.295393 update_engine[1625]: I1002 19:45:32.295099 1625 update_attempter.cc:302] Processing Done. Oct 2 19:45:32.295393 update_engine[1625]: I1002 19:45:32.295117 1625 update_attempter.cc:338] No update. Oct 2 19:45:32.295393 update_engine[1625]: I1002 19:45:32.295131 1625 update_check_scheduler.cc:74] Next update check in 41m57s Oct 2 19:45:32.295533 locksmithd[1696]: LastCheckedTime=1696275932 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 19:45:33.640654 systemd[1]: Started sshd@16-172.31.22.231:22-139.178.89.65:44426.service. Oct 2 19:45:33.651678 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:45:33.651907 kernel: audit: type=1130 audit(1696275933.640:1224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.231:22-139.178.89.65:44426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:33.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.231:22-139.178.89.65:44426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:33.821000 audit[3621]: USER_ACCT pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.832408 sshd[3621]: Accepted publickey for core from 139.178.89.65 port 44426 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:33.833056 kernel: audit: type=1101 audit(1696275933.821:1225): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.831000 audit[3621]: CRED_ACQ pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.834228 sshd[3621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:33.850641 kernel: audit: type=1103 audit(1696275933.831:1226): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.850781 kernel: audit: type=1006 audit(1696275933.832:1227): pid=3621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 19:45:33.853794 systemd[1]: Started session-17.scope. Oct 2 19:45:33.856507 systemd-logind[1624]: New session 17 of user core. Oct 2 19:45:33.832000 audit[3621]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffecbf2e00 a2=3 a3=0 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:33.868165 kernel: audit: type=1300 audit(1696275933.832:1227): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffecbf2e00 a2=3 a3=0 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:33.868370 kernel: audit: type=1327 audit(1696275933.832:1227): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:33.832000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:33.866000 audit[3621]: USER_START pid=3621 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.878732 kernel: audit: type=1105 audit(1696275933.866:1228): pid=3621 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.878980 kernel: audit: type=1103 audit(1696275933.870:1229): pid=3623 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:33.870000 audit[3623]: CRED_ACQ pid=3623 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.100652 sshd[3621]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:34.101000 audit[3621]: USER_END pid=3621 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.107028 systemd[1]: sshd@16-172.31.22.231:22-139.178.89.65:44426.service: Deactivated successfully. Oct 2 19:45:34.108048 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 19:45:34.101000 audit[3621]: CRED_DISP pid=3621 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.109907 systemd-logind[1624]: Session 17 logged out. Waiting for processes to exit. Oct 2 19:45:34.112124 systemd-logind[1624]: Removed session 17. Oct 2 19:45:34.117410 kernel: audit: type=1106 audit(1696275934.101:1230): pid=3621 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.117664 kernel: audit: type=1104 audit(1696275934.101:1231): pid=3621 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.22.231:22-139.178.89.65:44426 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:34.128873 systemd[1]: Started sshd@17-172.31.22.231:22-139.178.89.65:44432.service. Oct 2 19:45:34.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.231:22-139.178.89.65:44432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:34.331000 audit[3633]: USER_ACCT pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.333201 sshd[3633]: Accepted publickey for core from 139.178.89.65 port 44432 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:34.333000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.333000 audit[3633]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde6731240 a2=3 a3=0 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:34.333000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:34.335638 sshd[3633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:34.343672 systemd[1]: Started session-18.scope. Oct 2 19:45:34.345550 systemd-logind[1624]: New session 18 of user core. Oct 2 19:45:34.353000 audit[3633]: USER_START pid=3633 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:34.357000 audit[3635]: CRED_ACQ pid=3635 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:35.256492 kubelet[2916]: E1002 19:45:35.256434 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:35.841236 sshd[3633]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:35.845000 audit[3633]: USER_END pid=3633 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:35.845000 audit[3633]: CRED_DISP pid=3633 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:35.855939 systemd-logind[1624]: Session 18 logged out. Waiting for processes to exit. Oct 2 19:45:35.856156 systemd[1]: sshd@17-172.31.22.231:22-139.178.89.65:44432.service: Deactivated successfully. Oct 2 19:45:35.854000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.22.231:22-139.178.89.65:44432 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:35.857287 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 19:45:35.858905 systemd-logind[1624]: Removed session 18. Oct 2 19:45:35.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.22.231:22-139.178.89.65:41628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:35.870036 systemd[1]: Started sshd@18-172.31.22.231:22-139.178.89.65:41628.service. Oct 2 19:45:36.049000 audit[3643]: USER_ACCT pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:36.071567 sshd[3643]: Accepted publickey for core from 139.178.89.65 port 41628 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:36.070000 audit[3643]: CRED_ACQ pid=3643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:36.070000 audit[3643]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc93020a70 a2=3 a3=0 items=0 ppid=1 pid=3643 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:36.070000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:36.072749 sshd[3643]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:36.078292 systemd[1]: Started session-19.scope. Oct 2 19:45:36.079389 systemd-logind[1624]: New session 19 of user core. Oct 2 19:45:36.084000 audit[3643]: USER_START pid=3643 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:36.085000 audit[3645]: CRED_ACQ pid=3645 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:36.330174 sshd[3643]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:36.330000 audit[3643]: USER_END pid=3643 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:36.331000 audit[3643]: CRED_DISP pid=3643 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:36.334366 systemd[1]: sshd@18-172.31.22.231:22-139.178.89.65:41628.service: Deactivated successfully. Oct 2 19:45:36.333000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.22.231:22-139.178.89.65:41628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:36.335373 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 19:45:36.336356 systemd-logind[1624]: Session 19 logged out. Waiting for processes to exit. Oct 2 19:45:36.337339 systemd-logind[1624]: Removed session 19. Oct 2 19:45:40.003779 kubelet[2916]: E1002 19:45:40.003715 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:45:40.257947 kubelet[2916]: E1002 19:45:40.257776 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:45.259534 kubelet[2916]: E1002 19:45:45.259505 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:46.363506 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 19:45:46.363764 kernel: audit: type=1130 audit(1696275946.356:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.231:22-139.178.89.65:57542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:46.356000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.231:22-139.178.89.65:57542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:46.357661 systemd[1]: Started sshd@19-172.31.22.231:22-139.178.89.65:57542.service. Oct 2 19:45:46.521000 audit[3657]: USER_ACCT pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.533506 kernel: audit: type=1101 audit(1696275946.521:1252): pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.533724 sshd[3657]: Accepted publickey for core from 139.178.89.65 port 57542 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:46.532000 audit[3657]: CRED_ACQ pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.534932 sshd[3657]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:46.541730 kernel: audit: type=1103 audit(1696275946.532:1253): pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.541846 kernel: audit: type=1006 audit(1696275946.532:1254): pid=3657 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 19:45:46.544054 systemd[1]: Started session-20.scope. Oct 2 19:45:46.545585 systemd-logind[1624]: New session 20 of user core. Oct 2 19:45:46.546865 kernel: audit: type=1300 audit(1696275946.532:1254): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb5df8090 a2=3 a3=0 items=0 ppid=1 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:46.532000 audit[3657]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb5df8090 a2=3 a3=0 items=0 ppid=1 pid=3657 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:46.556308 kernel: audit: type=1327 audit(1696275946.532:1254): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:46.556421 kernel: audit: type=1105 audit(1696275946.553:1255): pid=3657 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:46.553000 audit[3657]: USER_START pid=3657 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.555000 audit[3659]: CRED_ACQ pid=3659 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.563506 kernel: audit: type=1103 audit(1696275946.555:1256): pid=3659 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.741996 sshd[3657]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:46.743000 audit[3657]: USER_END pid=3657 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.744000 audit[3657]: CRED_DISP pid=3657 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.753733 systemd[1]: sshd@19-172.31.22.231:22-139.178.89.65:57542.service: Deactivated successfully. Oct 2 19:45:46.754946 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 19:45:46.756912 systemd-logind[1624]: Session 20 logged out. Waiting for processes to exit. Oct 2 19:45:46.758139 kernel: audit: type=1106 audit(1696275946.743:1257): pid=3657 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.758209 kernel: audit: type=1104 audit(1696275946.744:1258): pid=3657 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:46.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.22.231:22-139.178.89.65:57542 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:46.758565 systemd-logind[1624]: Removed session 20. Oct 2 19:45:50.260918 kubelet[2916]: E1002 19:45:50.260882 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:55.003621 kubelet[2916]: E1002 19:45:55.003586 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:45:55.263496 kubelet[2916]: E1002 19:45:55.263272 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:45:56.769566 systemd[1]: Started sshd@20-172.31.22.231:22-139.178.89.65:50574.service. Oct 2 19:45:56.778089 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:45:56.778210 kernel: audit: type=1130 audit(1696275956.768:1260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.231:22-139.178.89.65:50574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:56.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.231:22-139.178.89.65:50574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:45:56.938522 kernel: audit: type=1101 audit(1696275956.930:1261): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.930000 audit[3669]: USER_ACCT pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.938750 sshd[3669]: Accepted publickey for core from 139.178.89.65 port 50574 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:45:56.937000 audit[3669]: CRED_ACQ pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.939582 sshd[3669]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:45:56.948201 systemd[1]: Started session-21.scope. Oct 2 19:45:56.950463 kernel: audit: type=1103 audit(1696275956.937:1262): pid=3669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.950623 kernel: audit: type=1006 audit(1696275956.937:1263): pid=3669 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 19:45:56.950666 kernel: audit: type=1300 audit(1696275956.937:1263): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec42976c0 a2=3 a3=0 items=0 ppid=1 pid=3669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:56.937000 audit[3669]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec42976c0 a2=3 a3=0 items=0 ppid=1 pid=3669 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:45:56.950850 systemd-logind[1624]: New session 21 of user core. Oct 2 19:45:56.937000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:56.961042 kernel: audit: type=1327 audit(1696275956.937:1263): proctitle=737368643A20636F7265205B707269765D Oct 2 19:45:56.961146 kernel: audit: type=1105 audit(1696275956.958:1264): pid=3669 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.958000 audit[3669]: USER_START pid=3669 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.968557 kernel: audit: type=1103 audit(1696275956.960:1265): pid=3671 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:56.960000 audit[3671]: CRED_ACQ pid=3671 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:57.182596 sshd[3669]: pam_unix(sshd:session): session closed for user core Oct 2 19:45:57.182000 audit[3669]: USER_END pid=3669 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:57.196870 kernel: audit: type=1106 audit(1696275957.182:1266): pid=3669 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:57.196990 kernel: audit: type=1104 audit(1696275957.182:1267): pid=3669 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:57.182000 audit[3669]: CRED_DISP pid=3669 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:45:57.192212 systemd-logind[1624]: Session 21 logged out. Waiting for processes to exit. Oct 2 19:45:57.194052 systemd[1]: sshd@20-172.31.22.231:22-139.178.89.65:50574.service: Deactivated successfully. Oct 2 19:45:57.195087 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 19:45:57.197291 systemd-logind[1624]: Removed session 21. Oct 2 19:45:57.190000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.22.231:22-139.178.89.65:50574 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:00.264504 kubelet[2916]: E1002 19:46:00.264461 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:05.265912 kubelet[2916]: E1002 19:46:05.265870 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:07.003061 kubelet[2916]: E1002 19:46:07.003023 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:46:07.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.231:22-139.178.89.65:47634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:07.210168 systemd[1]: Started sshd@21-172.31.22.231:22-139.178.89.65:47634.service. Oct 2 19:46:07.211755 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:07.211823 kernel: audit: type=1130 audit(1696275967.208:1269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.231:22-139.178.89.65:47634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:07.378000 audit[3683]: USER_ACCT pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.386227 sshd[3683]: Accepted publickey for core from 139.178.89.65 port 47634 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:46:07.386763 kernel: audit: type=1101 audit(1696275967.378:1270): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.385000 audit[3683]: CRED_ACQ pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.387407 sshd[3683]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:07.394414 systemd[1]: Started session-22.scope. Oct 2 19:46:07.403342 kernel: audit: type=1103 audit(1696275967.385:1271): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.403450 kernel: audit: type=1006 audit(1696275967.385:1272): pid=3683 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 19:46:07.385000 audit[3683]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb2454d20 a2=3 a3=0 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:07.403605 systemd-logind[1624]: New session 22 of user core. Oct 2 19:46:07.385000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:07.416688 kernel: audit: type=1300 audit(1696275967.385:1272): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb2454d20 a2=3 a3=0 items=0 ppid=1 pid=3683 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:07.416803 kernel: audit: type=1327 audit(1696275967.385:1272): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:07.416841 kernel: audit: type=1105 audit(1696275967.413:1273): pid=3683 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.413000 audit[3683]: USER_START pid=3683 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.416000 audit[3685]: CRED_ACQ pid=3685 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.432542 kernel: audit: type=1103 audit(1696275967.416:1274): pid=3685 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.631670 sshd[3683]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:07.631000 audit[3683]: USER_END pid=3683 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.640563 kernel: audit: type=1106 audit(1696275967.631:1275): pid=3683 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.633000 audit[3683]: CRED_DISP pid=3683 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.641525 systemd-logind[1624]: Session 22 logged out. Waiting for processes to exit. Oct 2 19:46:07.643265 systemd[1]: sshd@21-172.31.22.231:22-139.178.89.65:47634.service: Deactivated successfully. Oct 2 19:46:07.647561 kernel: audit: type=1104 audit(1696275967.633:1276): pid=3683 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:07.644221 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 19:46:07.646503 systemd-logind[1624]: Removed session 22. Oct 2 19:46:07.642000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.22.231:22-139.178.89.65:47634 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:09.213000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:09.213000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001ba2e40 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:46:09.213000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:09.220000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:09.220000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00283b000 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:46:09.220000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:10.267553 kubelet[2916]: E1002 19:46:10.267520 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:11.326000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:11.326000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0095b7170 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:46:11.326000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:46:11.332000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:11.332000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:11.332000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0095b71a0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:46:11.332000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:46:11.332000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c003dfb080 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:46:11.332000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:46:11.336000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:11.336000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0095b7230 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:46:11.336000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:46:11.424000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:11.424000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:11.424000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00b65f580 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:46:11.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:46:11.424000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004919920 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:46:11.424000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:46:15.269426 kubelet[2916]: E1002 19:46:15.269387 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:17.666290 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 19:46:17.666440 kernel: audit: type=1130 audit(1696275977.659:1286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.231:22-139.178.89.65:43134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:17.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.231:22-139.178.89.65:43134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:17.660803 systemd[1]: Started sshd@22-172.31.22.231:22-139.178.89.65:43134.service. Oct 2 19:46:17.850672 kernel: audit: type=1101 audit(1696275977.838:1287): pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.838000 audit[3697]: USER_ACCT pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.852642 sshd[3697]: Accepted publickey for core from 139.178.89.65 port 43134 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:46:17.851000 audit[3697]: CRED_ACQ pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.854081 sshd[3697]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:17.862777 kernel: audit: type=1103 audit(1696275977.851:1288): pid=3697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.870638 kernel: audit: type=1006 audit(1696275977.851:1289): pid=3697 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 19:46:17.866782 systemd[1]: Started session-23.scope. Oct 2 19:46:17.870257 systemd-logind[1624]: New session 23 of user core. Oct 2 19:46:17.883911 kernel: audit: type=1300 audit(1696275977.851:1289): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1b72c0e0 a2=3 a3=0 items=0 ppid=1 pid=3697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:17.851000 audit[3697]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd1b72c0e0 a2=3 a3=0 items=0 ppid=1 pid=3697 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:17.851000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:17.884000 audit[3697]: USER_START pid=3697 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.896377 kernel: audit: type=1327 audit(1696275977.851:1289): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:17.896601 kernel: audit: type=1105 audit(1696275977.884:1290): pid=3697 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.896682 kernel: audit: type=1103 audit(1696275977.888:1291): pid=3699 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:17.888000 audit[3699]: CRED_ACQ pid=3699 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:18.135544 sshd[3697]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:18.135000 audit[3697]: USER_END pid=3697 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:18.151939 kernel: audit: type=1106 audit(1696275978.135:1292): pid=3697 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:18.152062 kernel: audit: type=1104 audit(1696275978.135:1293): pid=3697 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:18.135000 audit[3697]: CRED_DISP pid=3697 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:18.145030 systemd-logind[1624]: Session 23 logged out. Waiting for processes to exit. Oct 2 19:46:18.146846 systemd[1]: sshd@22-172.31.22.231:22-139.178.89.65:43134.service: Deactivated successfully. Oct 2 19:46:18.149894 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 19:46:18.151877 systemd-logind[1624]: Removed session 23. Oct 2 19:46:18.142000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.22.231:22-139.178.89.65:43134 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:20.271106 kubelet[2916]: E1002 19:46:20.271077 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:22.002740 kubelet[2916]: E1002 19:46:22.002689 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:46:25.272046 kubelet[2916]: E1002 19:46:25.272009 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:28.170630 systemd[1]: Started sshd@23-172.31.22.231:22-139.178.89.65:57206.service. Oct 2 19:46:28.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.231:22-139.178.89.65:57206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:28.174588 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:28.174682 kernel: audit: type=1130 audit(1696275988.169:1295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.231:22-139.178.89.65:57206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:28.336000 audit[3709]: USER_ACCT pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.344610 kernel: audit: type=1101 audit(1696275988.336:1296): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.344667 sshd[3709]: Accepted publickey for core from 139.178.89.65 port 57206 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:46:28.343000 audit[3709]: CRED_ACQ pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.345106 sshd[3709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:28.352910 kernel: audit: type=1103 audit(1696275988.343:1297): pid=3709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.353018 kernel: audit: type=1006 audit(1696275988.343:1298): pid=3709 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 19:46:28.352512 systemd[1]: Started session-24.scope. Oct 2 19:46:28.354522 systemd-logind[1624]: New session 24 of user core. Oct 2 19:46:28.343000 audit[3709]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb5084a60 a2=3 a3=0 items=0 ppid=1 pid=3709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:28.365419 kernel: audit: type=1300 audit(1696275988.343:1298): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb5084a60 a2=3 a3=0 items=0 ppid=1 pid=3709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:28.365567 kernel: audit: type=1327 audit(1696275988.343:1298): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:28.343000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:28.369709 kernel: audit: type=1105 audit(1696275988.361:1299): pid=3709 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.361000 audit[3709]: USER_START pid=3709 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.363000 audit[3711]: CRED_ACQ pid=3711 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.376561 kernel: audit: type=1103 audit(1696275988.363:1300): pid=3711 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.558363 sshd[3709]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:28.559000 audit[3709]: USER_END pid=3709 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.559000 audit[3709]: CRED_DISP pid=3709 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.571368 systemd-logind[1624]: Session 24 logged out. Waiting for processes to exit. Oct 2 19:46:28.574306 systemd[1]: sshd@23-172.31.22.231:22-139.178.89.65:57206.service: Deactivated successfully. Oct 2 19:46:28.575708 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 19:46:28.576526 kernel: audit: type=1106 audit(1696275988.559:1301): pid=3709 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.576566 kernel: audit: type=1104 audit(1696275988.559:1302): pid=3709 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:28.573000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.22.231:22-139.178.89.65:57206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:28.578197 systemd-logind[1624]: Removed session 24. Oct 2 19:46:28.611000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:28.611000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028aeae0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:46:28.611000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:28.624000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:28.624000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0023ab620 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:46:28.624000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0028aec00 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:46:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:28.627000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:46:28.627000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0023ab640 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:46:28.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:46:30.273597 kubelet[2916]: E1002 19:46:30.273564 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:34.005703 env[1632]: time="2023-10-02T19:46:34.005647996Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 19:46:34.028250 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1078255123.mount: Deactivated successfully. Oct 2 19:46:34.032579 env[1632]: time="2023-10-02T19:46:34.032496192Z" level=info msg="CreateContainer within sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\"" Oct 2 19:46:34.033809 env[1632]: time="2023-10-02T19:46:34.033757215Z" level=info msg="StartContainer for \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\"" Oct 2 19:46:34.082837 systemd[1]: Started cri-containerd-29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b.scope. Oct 2 19:46:34.098401 systemd[1]: cri-containerd-29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b.scope: Deactivated successfully. Oct 2 19:46:34.126286 env[1632]: time="2023-10-02T19:46:34.126220942Z" level=info msg="shim disconnected" id=29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b Oct 2 19:46:34.126286 env[1632]: time="2023-10-02T19:46:34.126287869Z" level=warning msg="cleaning up after shim disconnected" id=29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b namespace=k8s.io Oct 2 19:46:34.126286 env[1632]: time="2023-10-02T19:46:34.126299705Z" level=info msg="cleaning up dead shim" Oct 2 19:46:34.146798 env[1632]: time="2023-10-02T19:46:34.146745020Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:46:34Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3747 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:46:34Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:46:34.147173 env[1632]: time="2023-10-02T19:46:34.147109676Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 19:46:34.147416 env[1632]: time="2023-10-02T19:46:34.147369563Z" level=error msg="Failed to pipe stderr of container \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\"" error="reading from a closed fifo" Oct 2 19:46:34.148890 env[1632]: time="2023-10-02T19:46:34.148796746Z" level=error msg="Failed to pipe stdout of container \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\"" error="reading from a closed fifo" Oct 2 19:46:34.153747 env[1632]: time="2023-10-02T19:46:34.153675543Z" level=error msg="StartContainer for \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:46:34.154137 kubelet[2916]: E1002 19:46:34.154070 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b" Oct 2 19:46:34.154886 kubelet[2916]: E1002 19:46:34.154203 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:46:34.154886 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:46:34.154886 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:46:34.154886 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-qsdzw,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:46:34.154886 kubelet[2916]: E1002 19:46:34.154249 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:46:34.720932 kubelet[2916]: I1002 19:46:34.720902 2916 scope.go:115] "RemoveContainer" containerID="9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9" Oct 2 19:46:34.726136 kubelet[2916]: I1002 19:46:34.721938 2916 scope.go:115] "RemoveContainer" containerID="9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9" Oct 2 19:46:34.729717 env[1632]: time="2023-10-02T19:46:34.726563248Z" level=info msg="RemoveContainer for \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\"" Oct 2 19:46:34.732923 env[1632]: time="2023-10-02T19:46:34.732188120Z" level=info msg="RemoveContainer for \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\"" Oct 2 19:46:34.733078 env[1632]: time="2023-10-02T19:46:34.732984079Z" level=error msg="RemoveContainer for \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\" failed" error="rpc error: code = NotFound desc = get container info: container \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\" in namespace \"k8s.io\": not found" Oct 2 19:46:34.733543 kubelet[2916]: E1002 19:46:34.733248 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\" in namespace \"k8s.io\": not found" containerID="9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9" Oct 2 19:46:34.733543 kubelet[2916]: E1002 19:46:34.733291 2916 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9" in namespace "k8s.io": not found; Skipping pod "cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)" Oct 2 19:46:34.734099 kubelet[2916]: E1002 19:46:34.733898 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:46:34.735634 env[1632]: time="2023-10-02T19:46:34.735285266Z" level=info msg="RemoveContainer for \"9b0537875959441610a14754f6095341d23413e760a37c3e5b0c767e0d2169e9\" returns successfully" Oct 2 19:46:35.017934 systemd[1]: run-containerd-runc-k8s.io-29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b-runc.QPHlEM.mount: Deactivated successfully. Oct 2 19:46:35.018069 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b-rootfs.mount: Deactivated successfully. Oct 2 19:46:35.275027 kubelet[2916]: E1002 19:46:35.274911 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:37.231540 kubelet[2916]: W1002 19:46:37.231390 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice/cri-containerd-29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b.scope WatchSource:0}: task 29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b not found: not found Oct 2 19:46:38.592183 systemd[1]: Started sshd@24-172.31.22.231:22-139.178.89.65:38818.service. Oct 2 19:46:38.594850 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 19:46:38.594971 kernel: audit: type=1130 audit(1696275998.591:1308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.231:22-139.178.89.65:38818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:38.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.231:22-139.178.89.65:38818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:38.797000 audit[3760]: USER_ACCT pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.799404 sshd[3760]: Accepted publickey for core from 139.178.89.65 port 38818 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:46:38.805594 kernel: audit: type=1101 audit(1696275998.797:1309): pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.804000 audit[3760]: CRED_ACQ pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.806839 sshd[3760]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:38.813805 systemd[1]: Started session-25.scope. Oct 2 19:46:38.816251 kernel: audit: type=1103 audit(1696275998.804:1310): pid=3760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.816342 kernel: audit: type=1006 audit(1696275998.804:1311): pid=3760 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 19:46:38.816144 systemd-logind[1624]: New session 25 of user core. Oct 2 19:46:38.804000 audit[3760]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfea05390 a2=3 a3=0 items=0 ppid=1 pid=3760 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:38.804000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:38.826893 kernel: audit: type=1300 audit(1696275998.804:1311): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcfea05390 a2=3 a3=0 items=0 ppid=1 pid=3760 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:38.826977 kernel: audit: type=1327 audit(1696275998.804:1311): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:38.825000 audit[3760]: USER_START pid=3760 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.831000 audit[3762]: CRED_ACQ pid=3762 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.841913 kernel: audit: type=1105 audit(1696275998.825:1312): pid=3760 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:38.842042 kernel: audit: type=1103 audit(1696275998.831:1313): pid=3762 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:39.088662 sshd[3760]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:39.089000 audit[3760]: USER_END pid=3760 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:39.093543 systemd[1]: sshd@24-172.31.22.231:22-139.178.89.65:38818.service: Deactivated successfully. Oct 2 19:46:39.094622 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 19:46:39.096572 systemd-logind[1624]: Session 25 logged out. Waiting for processes to exit. Oct 2 19:46:39.098208 systemd-logind[1624]: Removed session 25. Oct 2 19:46:39.100510 kernel: audit: type=1106 audit(1696275999.089:1314): pid=3760 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:39.100598 kernel: audit: type=1104 audit(1696275999.089:1315): pid=3760 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:39.089000 audit[3760]: CRED_DISP pid=3760 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:39.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.22.231:22-139.178.89.65:38818 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:40.276285 kubelet[2916]: E1002 19:46:40.276199 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:45.277997 kubelet[2916]: E1002 19:46:45.277962 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:48.003948 kubelet[2916]: E1002 19:46:48.003914 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:46:49.126195 systemd[1]: Started sshd@25-172.31.22.231:22-139.178.89.65:37980.service. Oct 2 19:46:49.140564 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:49.140793 kernel: audit: type=1130 audit(1696276009.127:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.22.231:22-139.178.89.65:37980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:49.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.22.231:22-139.178.89.65:37980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:49.303000 audit[3772]: USER_ACCT pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.316374 sshd[3772]: Accepted publickey for core from 139.178.89.65 port 37980 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:46:49.316950 kernel: audit: type=1101 audit(1696276009.303:1318): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.318000 audit[3772]: CRED_ACQ pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.319879 sshd[3772]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:49.330068 systemd[1]: Started session-26.scope. Oct 2 19:46:49.332814 kernel: audit: type=1103 audit(1696276009.318:1319): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.333234 kernel: audit: type=1006 audit(1696276009.318:1320): pid=3772 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 19:46:49.333291 kernel: audit: type=1300 audit(1696276009.318:1320): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc49d91690 a2=3 a3=0 items=0 ppid=1 pid=3772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:49.318000 audit[3772]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc49d91690 a2=3 a3=0 items=0 ppid=1 pid=3772 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:49.333600 systemd-logind[1624]: New session 26 of user core. Oct 2 19:46:49.318000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:49.345210 kernel: audit: type=1327 audit(1696276009.318:1320): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:49.344000 audit[3772]: USER_START pid=3772 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.347000 audit[3774]: CRED_ACQ pid=3774 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.364860 kernel: audit: type=1105 audit(1696276009.344:1321): pid=3772 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.365006 kernel: audit: type=1103 audit(1696276009.347:1322): pid=3774 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.543587 sshd[3772]: pam_unix(sshd:session): session closed for user core Oct 2 19:46:49.544000 audit[3772]: USER_END pid=3772 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.544000 audit[3772]: CRED_DISP pid=3772 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.554024 systemd[1]: sshd@25-172.31.22.231:22-139.178.89.65:37980.service: Deactivated successfully. Oct 2 19:46:49.555061 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 19:46:49.558684 systemd-logind[1624]: Session 26 logged out. Waiting for processes to exit. Oct 2 19:46:49.559942 kernel: audit: type=1106 audit(1696276009.544:1323): pid=3772 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.560053 kernel: audit: type=1104 audit(1696276009.544:1324): pid=3772 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:49.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.22.231:22-139.178.89.65:37980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:49.561311 systemd-logind[1624]: Removed session 26. Oct 2 19:46:50.279692 kubelet[2916]: E1002 19:46:50.279655 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:55.283744 kubelet[2916]: E1002 19:46:55.282877 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:46:59.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.231:22-139.178.89.65:41154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:59.570810 systemd[1]: Started sshd@26-172.31.22.231:22-139.178.89.65:41154.service. Oct 2 19:46:59.575500 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:46:59.575599 kernel: audit: type=1130 audit(1696276019.570:1326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.231:22-139.178.89.65:41154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:46:59.734000 audit[3785]: USER_ACCT pid=3785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.741917 sshd[3785]: Accepted publickey for core from 139.178.89.65 port 41154 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:46:59.741000 audit[3785]: CRED_ACQ pid=3785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.742679 sshd[3785]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:46:59.749317 kernel: audit: type=1101 audit(1696276019.734:1327): pid=3785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.749777 kernel: audit: type=1103 audit(1696276019.741:1328): pid=3785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.749851 kernel: audit: type=1006 audit(1696276019.741:1329): pid=3785 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 19:46:59.752055 systemd[1]: Started session-27.scope. Oct 2 19:46:59.755821 kernel: audit: type=1300 audit(1696276019.741:1329): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4adf6bd0 a2=3 a3=0 items=0 ppid=1 pid=3785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:59.741000 audit[3785]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4adf6bd0 a2=3 a3=0 items=0 ppid=1 pid=3785 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:46:59.754969 systemd-logind[1624]: New session 27 of user core. Oct 2 19:46:59.741000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:59.766890 kernel: audit: type=1327 audit(1696276019.741:1329): proctitle=737368643A20636F7265205B707269765D Oct 2 19:46:59.766976 kernel: audit: type=1105 audit(1696276019.762:1330): pid=3785 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.762000 audit[3785]: USER_START pid=3785 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.765000 audit[3787]: CRED_ACQ pid=3787 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.780510 kernel: audit: type=1103 audit(1696276019.765:1331): pid=3787 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.996252 sshd[3785]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:00.009645 kernel: audit: type=1106 audit(1696276019.999:1332): pid=3785 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:46:59.999000 audit[3785]: USER_END pid=3785 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:00.000000 audit[3785]: CRED_DISP pid=3785 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:00.010879 systemd[1]: sshd@26-172.31.22.231:22-139.178.89.65:41154.service: Deactivated successfully. Oct 2 19:47:00.012900 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 19:47:00.022005 kernel: audit: type=1104 audit(1696276020.000:1333): pid=3785 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:00.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.22.231:22-139.178.89.65:41154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:00.020420 systemd-logind[1624]: Session 27 logged out. Waiting for processes to exit. Oct 2 19:47:00.024615 systemd-logind[1624]: Removed session 27. Oct 2 19:47:00.285127 kubelet[2916]: E1002 19:47:00.284873 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:01.003464 kubelet[2916]: E1002 19:47:01.003426 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-82kj7_kube-system(eb418464-399b-4ba7-9d10-7a02ece3f894)\"" pod="kube-system/cilium-82kj7" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 Oct 2 19:47:05.286784 kubelet[2916]: E1002 19:47:05.286755 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:09.215000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:09.217911 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 19:47:09.218018 kernel: audit: type=1400 audit(1696276029.215:1335): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:09.215000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010c41b0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:09.249154 kernel: audit: type=1300 audit(1696276029.215:1335): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0010c41b0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:09.249306 kernel: audit: type=1327 audit(1696276029.215:1335): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:09.215000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:09.223000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:09.281948 kernel: audit: type=1400 audit(1696276029.223:1336): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:09.282100 kernel: audit: type=1300 audit(1696276029.223:1336): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d8f8c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:09.223000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d8f8c0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:09.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:09.306613 kernel: audit: type=1327 audit(1696276029.223:1336): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:10.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.22.231:22-139.178.89.65:48696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:10.023909 systemd[1]: Started sshd@27-172.31.22.231:22-139.178.89.65:48696.service. Oct 2 19:47:10.039637 kernel: audit: type=1130 audit(1696276030.024:1337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.22.231:22-139.178.89.65:48696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:10.272000 audit[3800]: USER_ACCT pid=3800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.284152 kernel: audit: type=1101 audit(1696276030.272:1338): pid=3800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.284681 sshd[3800]: Accepted publickey for core from 139.178.89.65 port 48696 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:47:10.283000 audit[3800]: CRED_ACQ pid=3800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.287039 sshd[3800]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:10.296565 kubelet[2916]: E1002 19:47:10.296512 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:10.303792 kernel: audit: type=1103 audit(1696276030.283:1339): pid=3800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.304937 kernel: audit: type=1006 audit(1696276030.283:1340): pid=3800 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Oct 2 19:47:10.283000 audit[3800]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd69e9e170 a2=3 a3=0 items=0 ppid=1 pid=3800 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:10.283000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:47:10.304222 systemd[1]: Started session-28.scope. Oct 2 19:47:10.305894 systemd-logind[1624]: New session 28 of user core. Oct 2 19:47:10.325000 audit[3800]: USER_START pid=3800 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.328000 audit[3802]: CRED_ACQ pid=3802 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.593771 sshd[3800]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:10.596000 audit[3800]: USER_END pid=3800 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.596000 audit[3800]: CRED_DISP pid=3800 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.599001 systemd[1]: sshd@27-172.31.22.231:22-139.178.89.65:48696.service: Deactivated successfully. Oct 2 19:47:10.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.22.231:22-139.178.89.65:48696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:10.600629 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 19:47:10.602319 systemd-logind[1624]: Session 28 logged out. Waiting for processes to exit. Oct 2 19:47:10.603735 systemd-logind[1624]: Removed session 28. Oct 2 19:47:10.621297 systemd[1]: Started sshd@28-172.31.22.231:22-139.178.89.65:48710.service. Oct 2 19:47:10.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.22.231:22-139.178.89.65:48710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:10.795000 audit[3813]: USER_ACCT pid=3813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.796335 sshd[3813]: Accepted publickey for core from 139.178.89.65 port 48710 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:47:10.797000 audit[3813]: CRED_ACQ pid=3813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.797000 audit[3813]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7ee2e020 a2=3 a3=0 items=0 ppid=1 pid=3813 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:10.797000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:47:10.798495 sshd[3813]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:10.810292 systemd[1]: Started session-29.scope. Oct 2 19:47:10.811091 systemd-logind[1624]: New session 29 of user core. Oct 2 19:47:10.818000 audit[3813]: USER_START pid=3813 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:10.820000 audit[3816]: CRED_ACQ pid=3816 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:11.328000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:11.328000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0012cf800 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:47:11.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:47:11.334000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:11.334000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:11.334000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c0012cfc80 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:47:11.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:47:11.334000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c5a3e20 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:47:11.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:47:11.339000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:11.339000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0012cfe00 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:47:11.339000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:47:11.426000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:11.426000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00136d740 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:47:11.426000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:47:11.427000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:11.427000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00c785920 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:47:11.427000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:47:12.674059 env[1632]: time="2023-10-02T19:47:12.674014356Z" level=info msg="StopPodSandbox for \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\"" Oct 2 19:47:12.675093 env[1632]: time="2023-10-02T19:47:12.675039773Z" level=info msg="Container to stop \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:47:12.678120 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92-shm.mount: Deactivated successfully. Oct 2 19:47:12.698000 audit: BPF prog-id=126 op=UNLOAD Oct 2 19:47:12.698570 systemd[1]: cri-containerd-5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92.scope: Deactivated successfully. Oct 2 19:47:12.703000 audit: BPF prog-id=129 op=UNLOAD Oct 2 19:47:12.735642 env[1632]: time="2023-10-02T19:47:12.735591762Z" level=info msg="StopContainer for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" with timeout 30 (s)" Oct 2 19:47:12.736261 env[1632]: time="2023-10-02T19:47:12.736224594Z" level=info msg="Stop container \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" with signal terminated" Oct 2 19:47:12.771000 audit: BPF prog-id=130 op=UNLOAD Oct 2 19:47:12.770598 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92-rootfs.mount: Deactivated successfully. Oct 2 19:47:12.771517 systemd[1]: cri-containerd-f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee.scope: Deactivated successfully. Oct 2 19:47:12.775000 audit: BPF prog-id=133 op=UNLOAD Oct 2 19:47:12.789982 env[1632]: time="2023-10-02T19:47:12.789925337Z" level=info msg="shim disconnected" id=5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92 Oct 2 19:47:12.790408 env[1632]: time="2023-10-02T19:47:12.790381813Z" level=warning msg="cleaning up after shim disconnected" id=5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92 namespace=k8s.io Oct 2 19:47:12.790863 env[1632]: time="2023-10-02T19:47:12.790835327Z" level=info msg="cleaning up dead shim" Oct 2 19:47:12.836650 env[1632]: time="2023-10-02T19:47:12.836535661Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3852 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:47:12Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Oct 2 19:47:12.836907 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee-rootfs.mount: Deactivated successfully. Oct 2 19:47:12.837399 env[1632]: time="2023-10-02T19:47:12.837366616Z" level=info msg="TearDown network for sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" successfully" Oct 2 19:47:12.837644 env[1632]: time="2023-10-02T19:47:12.837618650Z" level=info msg="StopPodSandbox for \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" returns successfully" Oct 2 19:47:12.850931 env[1632]: time="2023-10-02T19:47:12.850869993Z" level=info msg="shim disconnected" id=f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee Oct 2 19:47:12.850931 env[1632]: time="2023-10-02T19:47:12.850928229Z" level=warning msg="cleaning up after shim disconnected" id=f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee namespace=k8s.io Oct 2 19:47:12.850931 env[1632]: time="2023-10-02T19:47:12.850940250Z" level=info msg="cleaning up dead shim" Oct 2 19:47:12.864998 env[1632]: time="2023-10-02T19:47:12.864950281Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3871 runtime=io.containerd.runc.v2\n" Oct 2 19:47:12.868575 env[1632]: time="2023-10-02T19:47:12.868464252Z" level=info msg="StopContainer for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" returns successfully" Oct 2 19:47:12.869765 env[1632]: time="2023-10-02T19:47:12.869716175Z" level=info msg="StopPodSandbox for \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\"" Oct 2 19:47:12.872617 env[1632]: time="2023-10-02T19:47:12.869795875Z" level=info msg="Container to stop \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:47:12.872247 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368-shm.mount: Deactivated successfully. Oct 2 19:47:12.880983 systemd[1]: cri-containerd-e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368.scope: Deactivated successfully. Oct 2 19:47:12.880000 audit: BPF prog-id=115 op=UNLOAD Oct 2 19:47:12.884000 audit: BPF prog-id=118 op=UNLOAD Oct 2 19:47:12.916314 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368-rootfs.mount: Deactivated successfully. Oct 2 19:47:12.934402 env[1632]: time="2023-10-02T19:47:12.933415456Z" level=info msg="shim disconnected" id=e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368 Oct 2 19:47:12.934777 env[1632]: time="2023-10-02T19:47:12.934745856Z" level=warning msg="cleaning up after shim disconnected" id=e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368 namespace=k8s.io Oct 2 19:47:12.934879 env[1632]: time="2023-10-02T19:47:12.934862707Z" level=info msg="cleaning up dead shim" Oct 2 19:47:12.946151 env[1632]: time="2023-10-02T19:47:12.946095045Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3904 runtime=io.containerd.runc.v2\n" Oct 2 19:47:12.946506 env[1632]: time="2023-10-02T19:47:12.946450303Z" level=info msg="TearDown network for sandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" successfully" Oct 2 19:47:12.946605 env[1632]: time="2023-10-02T19:47:12.946511249Z" level=info msg="StopPodSandbox for \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" returns successfully" Oct 2 19:47:12.986215 kubelet[2916]: I1002 19:47:12.986171 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-kernel\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.986972 kubelet[2916]: I1002 19:47:12.986952 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-net\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987106 kubelet[2916]: I1002 19:47:12.987093 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-bpf-maps\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987206 kubelet[2916]: I1002 19:47:12.987195 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-etc-cni-netd\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987302 kubelet[2916]: I1002 19:47:12.987293 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-hostproc\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987590 kubelet[2916]: I1002 19:47:12.987559 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-hubble-tls\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987709 kubelet[2916]: I1002 19:47:12.987596 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cni-path\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987709 kubelet[2916]: I1002 19:47:12.987623 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-lib-modules\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987709 kubelet[2916]: I1002 19:47:12.987655 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/eb418464-399b-4ba7-9d10-7a02ece3f894-clustermesh-secrets\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987709 kubelet[2916]: I1002 19:47:12.987681 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-cgroup\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.987709 kubelet[2916]: I1002 19:47:12.987711 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-xtables-lock\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987741 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-qsdzw\" (UniqueName: \"kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-kube-api-access-qsdzw\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987770 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-config-path\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987795 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-run\") pod \"eb418464-399b-4ba7-9d10-7a02ece3f894\" (UID: \"eb418464-399b-4ba7-9d10-7a02ece3f894\") " Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987868 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987913 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987938 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987961 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.987982 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988076 kubelet[2916]: I1002 19:47:12.988004 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-hostproc" (OuterVolumeSpecName: "hostproc") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988607 kubelet[2916]: I1002 19:47:12.988458 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988607 kubelet[2916]: I1002 19:47:12.988524 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cni-path" (OuterVolumeSpecName: "cni-path") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.988607 kubelet[2916]: I1002 19:47:12.988550 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.989985 kubelet[2916]: I1002 19:47:12.989954 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:47:12.990597 kubelet[2916]: W1002 19:47:12.990554 2916 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/eb418464-399b-4ba7-9d10-7a02ece3f894/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:47:12.993212 kubelet[2916]: I1002 19:47:12.993173 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:47:12.999656 kubelet[2916]: I1002 19:47:12.999617 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/eb418464-399b-4ba7-9d10-7a02ece3f894-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:47:12.999931 kubelet[2916]: I1002 19:47:12.999617 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:47:13.010756 kubelet[2916]: I1002 19:47:13.010714 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-kube-api-access-qsdzw" (OuterVolumeSpecName: "kube-api-access-qsdzw") pod "eb418464-399b-4ba7-9d10-7a02ece3f894" (UID: "eb418464-399b-4ba7-9d10-7a02ece3f894"). InnerVolumeSpecName "kube-api-access-qsdzw". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093154 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-gvgtl\" (UniqueName: \"kubernetes.io/projected/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-kube-api-access-gvgtl\") pod \"bcb7690e-3c51-4068-9c7e-c1c3818d2e98\" (UID: \"bcb7690e-3c51-4068-9c7e-c1c3818d2e98\") " Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093323 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-cilium-config-path\") pod \"bcb7690e-3c51-4068-9c7e-c1c3818d2e98\" (UID: \"bcb7690e-3c51-4068-9c7e-c1c3818d2e98\") " Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093391 2916 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-xtables-lock\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093410 2916 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-qsdzw\" (UniqueName: \"kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-kube-api-access-qsdzw\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093427 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-config-path\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093448 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-run\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093460 2916 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-net\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093473 2916 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-bpf-maps\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093501 2916 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-etc-cni-netd\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093514 2916 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-host-proc-sys-kernel\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093526 2916 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-hostproc\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093538 2916 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-lib-modules\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093702 2916 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/eb418464-399b-4ba7-9d10-7a02ece3f894-hubble-tls\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093726 2916 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cni-path\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093750 2916 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/eb418464-399b-4ba7-9d10-7a02ece3f894-clustermesh-secrets\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.093779 kubelet[2916]: I1002 19:47:13.093765 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/eb418464-399b-4ba7-9d10-7a02ece3f894-cilium-cgroup\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.095030 kubelet[2916]: W1002 19:47:13.094179 2916 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/bcb7690e-3c51-4068-9c7e-c1c3818d2e98/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:47:13.104688 kubelet[2916]: I1002 19:47:13.104643 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-kube-api-access-gvgtl" (OuterVolumeSpecName: "kube-api-access-gvgtl") pod "bcb7690e-3c51-4068-9c7e-c1c3818d2e98" (UID: "bcb7690e-3c51-4068-9c7e-c1c3818d2e98"). InnerVolumeSpecName "kube-api-access-gvgtl". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:47:13.105653 kubelet[2916]: I1002 19:47:13.105599 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "bcb7690e-3c51-4068-9c7e-c1c3818d2e98" (UID: "bcb7690e-3c51-4068-9c7e-c1c3818d2e98"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:47:13.194911 kubelet[2916]: I1002 19:47:13.194789 2916 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-gvgtl\" (UniqueName: \"kubernetes.io/projected/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-kube-api-access-gvgtl\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.194911 kubelet[2916]: I1002 19:47:13.194830 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/bcb7690e-3c51-4068-9c7e-c1c3818d2e98-cilium-config-path\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:47:13.677578 systemd[1]: var-lib-kubelet-pods-eb418464\x2d399b\x2d4ba7\x2d9d10\x2d7a02ece3f894-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dqsdzw.mount: Deactivated successfully. Oct 2 19:47:13.677713 systemd[1]: var-lib-kubelet-pods-bcb7690e\x2d3c51\x2d4068\x2d9c7e\x2dc1c3818d2e98-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dgvgtl.mount: Deactivated successfully. Oct 2 19:47:13.677806 systemd[1]: var-lib-kubelet-pods-eb418464\x2d399b\x2d4ba7\x2d9d10\x2d7a02ece3f894-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:47:13.677955 systemd[1]: var-lib-kubelet-pods-eb418464\x2d399b\x2d4ba7\x2d9d10\x2d7a02ece3f894-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:47:13.830986 kubelet[2916]: I1002 19:47:13.830951 2916 scope.go:115] "RemoveContainer" containerID="f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee" Oct 2 19:47:13.843350 env[1632]: time="2023-10-02T19:47:13.843305798Z" level=info msg="RemoveContainer for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\"" Oct 2 19:47:13.843732 systemd[1]: Removed slice kubepods-besteffort-podbcb7690e_3c51_4068_9c7e_c1c3818d2e98.slice. Oct 2 19:47:13.862435 systemd[1]: Removed slice kubepods-burstable-podeb418464_399b_4ba7_9d10_7a02ece3f894.slice. Oct 2 19:47:13.864712 env[1632]: time="2023-10-02T19:47:13.864665243Z" level=info msg="RemoveContainer for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" returns successfully" Oct 2 19:47:13.865501 kubelet[2916]: I1002 19:47:13.865446 2916 scope.go:115] "RemoveContainer" containerID="f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee" Oct 2 19:47:13.866650 env[1632]: time="2023-10-02T19:47:13.866546127Z" level=error msg="ContainerStatus for \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\": not found" Oct 2 19:47:13.867532 kubelet[2916]: E1002 19:47:13.866938 2916 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\": not found" containerID="f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee" Oct 2 19:47:13.867532 kubelet[2916]: I1002 19:47:13.866981 2916 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee} err="failed to get container status \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\": rpc error: code = NotFound desc = an error occurred when try to find container \"f48da39ce0eedd2ededef078ba5d0059d1cedcc6d6723fe7365234225f55e4ee\": not found" Oct 2 19:47:13.867532 kubelet[2916]: I1002 19:47:13.866996 2916 scope.go:115] "RemoveContainer" containerID="29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b" Oct 2 19:47:13.871265 env[1632]: time="2023-10-02T19:47:13.870847275Z" level=info msg="RemoveContainer for \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\"" Oct 2 19:47:13.877515 env[1632]: time="2023-10-02T19:47:13.875162145Z" level=info msg="RemoveContainer for \"29a7757b0f5f136ea4f88cc15483b40c7301862463ea09e381df522c3809be4b\" returns successfully" Oct 2 19:47:14.618863 sshd[3813]: pam_unix(sshd:session): session closed for user core Oct 2 19:47:14.622757 kernel: kauditd_printk_skb: 39 callbacks suppressed Oct 2 19:47:14.622879 kernel: audit: type=1106 audit(1696276034.620:1364): pid=3813 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.620000 audit[3813]: USER_END pid=3813 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.623617 systemd[1]: sshd@28-172.31.22.231:22-139.178.89.65:48710.service: Deactivated successfully. Oct 2 19:47:14.624604 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 19:47:14.626931 systemd-logind[1624]: Session 29 logged out. Waiting for processes to exit. Oct 2 19:47:14.628448 systemd-logind[1624]: Removed session 29. Oct 2 19:47:14.620000 audit[3813]: CRED_DISP pid=3813 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.635051 kernel: audit: type=1104 audit(1696276034.620:1365): pid=3813 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.635289 kernel: audit: type=1131 audit(1696276034.622:1366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.22.231:22-139.178.89.65:48710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:14.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.22.231:22-139.178.89.65:48710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:14.646449 systemd[1]: Started sshd@29-172.31.22.231:22-139.178.89.65:48720.service. Oct 2 19:47:14.655679 kernel: audit: type=1130 audit(1696276034.646:1367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.231:22-139.178.89.65:48720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:14.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.231:22-139.178.89.65:48720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:47:14.810000 audit[3923]: USER_ACCT pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.811955 sshd[3923]: Accepted publickey for core from 139.178.89.65 port 48720 ssh2: RSA SHA256:2tpfHuF3vLKbRg5mH6Od9mbM0lpjrGjQfzRVUhbm/E8 Oct 2 19:47:14.820547 kernel: audit: type=1101 audit(1696276034.810:1368): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.820000 audit[3923]: CRED_ACQ pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.821315 sshd[3923]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 19:47:14.832374 systemd[1]: Started session-30.scope. Oct 2 19:47:14.840001 kernel: audit: type=1103 audit(1696276034.820:1369): pid=3923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.840176 kernel: audit: type=1006 audit(1696276034.820:1370): pid=3923 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 19:47:14.842358 kernel: audit: type=1300 audit(1696276034.820:1370): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde99d4c80 a2=3 a3=0 items=0 ppid=1 pid=3923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:14.820000 audit[3923]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde99d4c80 a2=3 a3=0 items=0 ppid=1 pid=3923 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:14.835522 systemd-logind[1624]: New session 30 of user core. Oct 2 19:47:14.820000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 19:47:14.853069 kernel: audit: type=1327 audit(1696276034.820:1370): proctitle=737368643A20636F7265205B707269765D Oct 2 19:47:14.857000 audit[3923]: USER_START pid=3923 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.869000 audit[3925]: CRED_ACQ pid=3925 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:14.872905 kernel: audit: type=1105 audit(1696276034.857:1371): pid=3923 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:47:15.006435 kubelet[2916]: I1002 19:47:15.006406 2916 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=bcb7690e-3c51-4068-9c7e-c1c3818d2e98 path="/var/lib/kubelet/pods/bcb7690e-3c51-4068-9c7e-c1c3818d2e98/volumes" Oct 2 19:47:15.008130 kubelet[2916]: I1002 19:47:15.008105 2916 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=eb418464-399b-4ba7-9d10-7a02ece3f894 path="/var/lib/kubelet/pods/eb418464-399b-4ba7-9d10-7a02ece3f894/volumes" Oct 2 19:47:15.062262 env[1632]: time="2023-10-02T19:47:15.062218855Z" level=info msg="StopPodSandbox for \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\"" Oct 2 19:47:15.062739 env[1632]: time="2023-10-02T19:47:15.062328306Z" level=info msg="TearDown network for sandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" successfully" Oct 2 19:47:15.062739 env[1632]: time="2023-10-02T19:47:15.062371535Z" level=info msg="StopPodSandbox for \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" returns successfully" Oct 2 19:47:15.062840 env[1632]: time="2023-10-02T19:47:15.062804046Z" level=info msg="RemovePodSandbox for \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\"" Oct 2 19:47:15.062895 env[1632]: time="2023-10-02T19:47:15.062835715Z" level=info msg="Forcibly stopping sandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\"" Oct 2 19:47:15.062958 env[1632]: time="2023-10-02T19:47:15.062929494Z" level=info msg="TearDown network for sandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" successfully" Oct 2 19:47:15.066953 env[1632]: time="2023-10-02T19:47:15.066909723Z" level=info msg="RemovePodSandbox \"e57ac316c01c473f16b38c0ddb995981a2cee986eb9935a24464a9e827f50368\" returns successfully" Oct 2 19:47:15.067596 env[1632]: time="2023-10-02T19:47:15.067562111Z" level=info msg="StopPodSandbox for \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\"" Oct 2 19:47:15.067721 env[1632]: time="2023-10-02T19:47:15.067657693Z" level=info msg="TearDown network for sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" successfully" Oct 2 19:47:15.067721 env[1632]: time="2023-10-02T19:47:15.067704685Z" level=info msg="StopPodSandbox for \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" returns successfully" Oct 2 19:47:15.068275 env[1632]: time="2023-10-02T19:47:15.068245173Z" level=info msg="RemovePodSandbox for \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\"" Oct 2 19:47:15.068375 env[1632]: time="2023-10-02T19:47:15.068281131Z" level=info msg="Forcibly stopping sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\"" Oct 2 19:47:15.068427 env[1632]: time="2023-10-02T19:47:15.068368021Z" level=info msg="TearDown network for sandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" successfully" Oct 2 19:47:15.076247 env[1632]: time="2023-10-02T19:47:15.076189006Z" level=info msg="RemovePodSandbox \"5c9a06a1710ba27228bf3515e51cfe67d56d95b8fc9c6afea4a99d010098be92\" returns successfully" Oct 2 19:47:15.298328 kubelet[2916]: E1002 19:47:15.298304 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:16.169965 kubelet[2916]: I1002 19:47:16.169928 2916 topology_manager.go:212] "Topology Admit Handler" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170013 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170025 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170146 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="bcb7690e-3c51-4068-9c7e-c1c3818d2e98" containerName="cilium-operator" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170157 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170167 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170215 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170226 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170239 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170249 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="bcb7690e-3c51-4068-9c7e-c1c3818d2e98" containerName="cilium-operator" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170258 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170298 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: E1002 19:47:16.170309 2916 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170332 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.170594 kubelet[2916]: I1002 19:47:16.170342 2916 memory_manager.go:346] "RemoveStaleState removing state" podUID="eb418464-399b-4ba7-9d10-7a02ece3f894" containerName="mount-cgroup" Oct 2 19:47:16.179355 systemd[1]: Created slice kubepods-burstable-podd332616d_b3da_42d1_85ab_ffbd98a5ebcf.slice. Oct 2 19:47:16.192864 kubelet[2916]: W1002 19:47:16.192832 2916 reflector.go:533] object-"kube-system"/"cilium-clustermesh": failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193290 kubelet[2916]: E1002 19:47:16.193273 2916 reflector.go:148] object-"kube-system"/"cilium-clustermesh": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-clustermesh" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193428 kubelet[2916]: W1002 19:47:16.193154 2916 reflector.go:533] object-"kube-system"/"cilium-config": failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193548 kubelet[2916]: E1002 19:47:16.193536 2916 reflector.go:148] object-"kube-system"/"cilium-config": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps "cilium-config" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193713 kubelet[2916]: W1002 19:47:16.193197 2916 reflector.go:533] object-"kube-system"/"cilium-ipsec-keys": failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193809 kubelet[2916]: E1002 19:47:16.193800 2916 reflector.go:148] object-"kube-system"/"cilium-ipsec-keys": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "cilium-ipsec-keys" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193873 kubelet[2916]: W1002 19:47:16.193240 2916 reflector.go:533] object-"kube-system"/"hubble-server-certs": failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.193961 kubelet[2916]: E1002 19:47:16.193952 2916 reflector.go:148] object-"kube-system"/"hubble-server-certs": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets "hubble-server-certs" is forbidden: User "system:node:ip-172-31-22-231" cannot list resource "secrets" in API group "" in the namespace "kube-system": no relationship found between node 'ip-172-31-22-231' and this object Oct 2 19:47:16.316082 kubelet[2916]: I1002 19:47:16.315958 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-run\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316348 kubelet[2916]: I1002 19:47:16.316322 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-config-path\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316430 kubelet[2916]: I1002 19:47:16.316362 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hubble-tls\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316430 kubelet[2916]: I1002 19:47:16.316403 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4zjw6\" (UniqueName: \"kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-kube-api-access-4zjw6\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316571 kubelet[2916]: I1002 19:47:16.316431 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-bpf-maps\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316571 kubelet[2916]: I1002 19:47:16.316463 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-cgroup\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316571 kubelet[2916]: I1002 19:47:16.316516 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cni-path\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316571 kubelet[2916]: I1002 19:47:16.316553 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-xtables-lock\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316753 kubelet[2916]: I1002 19:47:16.316584 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-clustermesh-secrets\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316753 kubelet[2916]: I1002 19:47:16.316614 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-ipsec-secrets\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316753 kubelet[2916]: I1002 19:47:16.316650 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-net\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316753 kubelet[2916]: I1002 19:47:16.316679 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-kernel\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316753 kubelet[2916]: I1002 19:47:16.316710 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-etc-cni-netd\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.316753 kubelet[2916]: I1002 19:47:16.316740 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-lib-modules\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:16.317031 kubelet[2916]: I1002 19:47:16.316771 2916 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hostproc\") pod \"cilium-nx5t2\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " pod="kube-system/cilium-nx5t2" Oct 2 19:47:17.418115 kubelet[2916]: E1002 19:47:17.418073 2916 projected.go:267] Couldn't get secret kube-system/hubble-server-certs: failed to sync secret cache: timed out waiting for the condition Oct 2 19:47:17.418115 kubelet[2916]: E1002 19:47:17.418121 2916 projected.go:198] Error preparing data for projected volume hubble-tls for pod kube-system/cilium-nx5t2: failed to sync secret cache: timed out waiting for the condition Oct 2 19:47:17.418658 kubelet[2916]: E1002 19:47:17.418197 2916 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hubble-tls podName:d332616d-b3da-42d1-85ab-ffbd98a5ebcf nodeName:}" failed. No retries permitted until 2023-10-02 19:47:17.91817394 +0000 UTC m=+243.182481321 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "hubble-tls" (UniqueName: "kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hubble-tls") pod "cilium-nx5t2" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf") : failed to sync secret cache: timed out waiting for the condition Oct 2 19:47:17.418658 kubelet[2916]: E1002 19:47:17.418361 2916 configmap.go:199] Couldn't get configMap kube-system/cilium-config: failed to sync configmap cache: timed out waiting for the condition Oct 2 19:47:17.418658 kubelet[2916]: E1002 19:47:17.418406 2916 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-config-path podName:d332616d-b3da-42d1-85ab-ffbd98a5ebcf nodeName:}" failed. No retries permitted until 2023-10-02 19:47:17.918391983 +0000 UTC m=+243.182699380 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "cilium-config-path" (UniqueName: "kubernetes.io/configmap/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-config-path") pod "cilium-nx5t2" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf") : failed to sync configmap cache: timed out waiting for the condition Oct 2 19:47:17.990084 env[1632]: time="2023-10-02T19:47:17.990036064Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-nx5t2,Uid:d332616d-b3da-42d1-85ab-ffbd98a5ebcf,Namespace:kube-system,Attempt:0,}" Oct 2 19:47:18.015424 env[1632]: time="2023-10-02T19:47:18.015338788Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 19:47:18.015634 env[1632]: time="2023-10-02T19:47:18.015425074Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 19:47:18.015634 env[1632]: time="2023-10-02T19:47:18.015511661Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 19:47:18.015743 env[1632]: time="2023-10-02T19:47:18.015710597Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2 pid=3944 runtime=io.containerd.runc.v2 Oct 2 19:47:18.051888 systemd[1]: Started cri-containerd-0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2.scope. Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.065000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.066000 audit: BPF prog-id=134 op=LOAD Oct 2 19:47:18.066000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.066000 audit[3953]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3944 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:18.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323038366336316230643665303163383932663864363736376162 Oct 2 19:47:18.066000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.066000 audit[3953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3944 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:18.066000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323038366336316230643665303163383932663864363736376162 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit: BPF prog-id=135 op=LOAD Oct 2 19:47:18.067000 audit[3953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003caa50 items=0 ppid=3944 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:18.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323038366336316230643665303163383932663864363736376162 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit: BPF prog-id=136 op=LOAD Oct 2 19:47:18.067000 audit[3953]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003caa98 items=0 ppid=3944 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:18.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323038366336316230643665303163383932663864363736376162 Oct 2 19:47:18.067000 audit: BPF prog-id=136 op=UNLOAD Oct 2 19:47:18.067000 audit: BPF prog-id=135 op=UNLOAD Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { perfmon } for pid=3953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit[3953]: AVC avc: denied { bpf } for pid=3953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:47:18.067000 audit: BPF prog-id=137 op=LOAD Oct 2 19:47:18.067000 audit[3953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003caea8 items=0 ppid=3944 pid=3953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:47:18.067000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062323038366336316230643665303163383932663864363736376162 Oct 2 19:47:18.084476 env[1632]: time="2023-10-02T19:47:18.084433885Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-nx5t2,Uid:d332616d-b3da-42d1-85ab-ffbd98a5ebcf,Namespace:kube-system,Attempt:0,} returns sandbox id \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\"" Oct 2 19:47:18.089603 env[1632]: time="2023-10-02T19:47:18.089564265Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 19:47:18.109044 env[1632]: time="2023-10-02T19:47:18.109004410Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\"" Oct 2 19:47:18.110149 env[1632]: time="2023-10-02T19:47:18.110119474Z" level=info msg="StartContainer for \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\"" Oct 2 19:47:18.132717 systemd[1]: Started cri-containerd-5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e.scope. Oct 2 19:47:18.150138 systemd[1]: cri-containerd-5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e.scope: Deactivated successfully. Oct 2 19:47:18.188621 env[1632]: time="2023-10-02T19:47:18.188561703Z" level=info msg="shim disconnected" id=5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e Oct 2 19:47:18.188621 env[1632]: time="2023-10-02T19:47:18.188619604Z" level=warning msg="cleaning up after shim disconnected" id=5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e namespace=k8s.io Oct 2 19:47:18.189019 env[1632]: time="2023-10-02T19:47:18.188727114Z" level=info msg="cleaning up dead shim" Oct 2 19:47:18.201223 env[1632]: time="2023-10-02T19:47:18.201166275Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4005 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:47:18Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:47:18.201546 env[1632]: time="2023-10-02T19:47:18.201449831Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:47:18.202107 env[1632]: time="2023-10-02T19:47:18.202063775Z" level=error msg="Failed to pipe stdout of container \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\"" error="reading from a closed fifo" Oct 2 19:47:18.202569 env[1632]: time="2023-10-02T19:47:18.202532368Z" level=error msg="Failed to pipe stderr of container \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\"" error="reading from a closed fifo" Oct 2 19:47:18.204421 env[1632]: time="2023-10-02T19:47:18.204371126Z" level=error msg="StartContainer for \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:47:18.204694 kubelet[2916]: E1002 19:47:18.204673 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e" Oct 2 19:47:18.207086 kubelet[2916]: E1002 19:47:18.205033 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:47:18.207086 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:47:18.207086 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:47:18.207086 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-4zjw6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:47:18.207086 kubelet[2916]: E1002 19:47:18.205084 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:47:18.891949 env[1632]: time="2023-10-02T19:47:18.891903626Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 19:47:18.930328 env[1632]: time="2023-10-02T19:47:18.930262988Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\"" Oct 2 19:47:18.935133 env[1632]: time="2023-10-02T19:47:18.935049741Z" level=info msg="StartContainer for \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\"" Oct 2 19:47:18.941660 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3162509950.mount: Deactivated successfully. Oct 2 19:47:18.993502 systemd[1]: run-containerd-runc-k8s.io-a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a-runc.Y20sSt.mount: Deactivated successfully. Oct 2 19:47:18.998336 systemd[1]: Started cri-containerd-a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a.scope. Oct 2 19:47:19.023090 systemd[1]: cri-containerd-a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a.scope: Deactivated successfully. Oct 2 19:47:19.033148 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a-rootfs.mount: Deactivated successfully. Oct 2 19:47:19.046791 env[1632]: time="2023-10-02T19:47:19.046724202Z" level=info msg="shim disconnected" id=a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a Oct 2 19:47:19.046791 env[1632]: time="2023-10-02T19:47:19.046790037Z" level=warning msg="cleaning up after shim disconnected" id=a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a namespace=k8s.io Oct 2 19:47:19.047740 env[1632]: time="2023-10-02T19:47:19.046801903Z" level=info msg="cleaning up dead shim" Oct 2 19:47:19.088105 env[1632]: time="2023-10-02T19:47:19.088051965Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:19Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4041 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:47:19Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:47:19.088389 env[1632]: time="2023-10-02T19:47:19.088330293Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:47:19.088643 env[1632]: time="2023-10-02T19:47:19.088596468Z" level=error msg="Failed to pipe stdout of container \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\"" error="reading from a closed fifo" Oct 2 19:47:19.088829 env[1632]: time="2023-10-02T19:47:19.088771064Z" level=error msg="Failed to pipe stderr of container \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\"" error="reading from a closed fifo" Oct 2 19:47:19.093044 env[1632]: time="2023-10-02T19:47:19.092982221Z" level=error msg="StartContainer for \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:47:19.093658 kubelet[2916]: E1002 19:47:19.093635 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a" Oct 2 19:47:19.094074 kubelet[2916]: E1002 19:47:19.093806 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:47:19.094074 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:47:19.094074 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:47:19.094074 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-4zjw6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:47:19.094074 kubelet[2916]: E1002 19:47:19.093853 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:47:19.901794 kubelet[2916]: I1002 19:47:19.900320 2916 scope.go:115] "RemoveContainer" containerID="5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e" Oct 2 19:47:19.901794 kubelet[2916]: I1002 19:47:19.900932 2916 scope.go:115] "RemoveContainer" containerID="5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e" Oct 2 19:47:19.915719 env[1632]: time="2023-10-02T19:47:19.915662217Z" level=info msg="RemoveContainer for \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\"" Oct 2 19:47:19.916235 env[1632]: time="2023-10-02T19:47:19.916202632Z" level=info msg="RemoveContainer for \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\"" Oct 2 19:47:19.916655 env[1632]: time="2023-10-02T19:47:19.916598564Z" level=error msg="RemoveContainer for \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\" failed" error="failed to set removing state for container \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\": container is already in removing state" Oct 2 19:47:19.917106 kubelet[2916]: E1002 19:47:19.917028 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\": container is already in removing state" containerID="5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e" Oct 2 19:47:19.917106 kubelet[2916]: I1002 19:47:19.917092 2916 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e} err="rpc error: code = Unknown desc = failed to set removing state for container \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\": container is already in removing state" Oct 2 19:47:19.929553 env[1632]: time="2023-10-02T19:47:19.929504399Z" level=info msg="RemoveContainer for \"5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e\" returns successfully" Oct 2 19:47:19.930916 kubelet[2916]: E1002 19:47:19.930656 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:47:20.300302 kubelet[2916]: E1002 19:47:20.300220 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:21.295390 kubelet[2916]: W1002 19:47:21.295352 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd332616d_b3da_42d1_85ab_ffbd98a5ebcf.slice/cri-containerd-5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e.scope WatchSource:0}: container "5b171e59dd814332e4b4c353d8b7815c2a8d2cba9484b5f9e46ac9950794743e" in namespace "k8s.io": not found Oct 2 19:47:24.039505 amazon-ssm-agent[1612]: 2023-10-02 19:47:24 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 19:47:24.140946 amazon-ssm-agent[1612]: 2023-10-02 19:47:24 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0045c971f2f501441 is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0045c971f2f501441 because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 19:47:24.140946 amazon-ssm-agent[1612]: status code: 400, request id: 5ccf2d84-c096-4125-a515-23581f68e3f5 Oct 2 19:47:24.403333 kubelet[2916]: W1002 19:47:24.403227 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd332616d_b3da_42d1_85ab_ffbd98a5ebcf.slice/cri-containerd-a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a.scope WatchSource:0}: task a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a not found: not found Oct 2 19:47:25.302508 kubelet[2916]: E1002 19:47:25.302456 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:28.614000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.617024 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 19:47:28.617152 kernel: audit: type=1400 audit(1696276048.614:1391): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.614000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00283aec0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.634637 kernel: audit: type=1300 audit(1696276048.614:1391): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00283aec0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.634858 kernel: audit: type=1327 audit(1696276048.614:1391): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:28.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:28.641507 kernel: audit: type=1400 audit(1696276048.626:1392): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00283aee0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.655931 kernel: audit: type=1300 audit(1696276048.626:1392): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00283aee0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.656131 kernel: audit: type=1327 audit(1696276048.626:1392): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:28.629000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.669670 kernel: audit: type=1400 audit(1696276048.629:1393): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.669806 kernel: audit: type=1300 audit(1696276048.629:1393): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001cfb940 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.629000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001cfb940 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.629000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:28.691421 kernel: audit: type=1327 audit(1696276048.629:1393): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:28.691703 kernel: audit: type=1400 audit(1696276048.629:1394): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.629000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:47:28.629000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00283b000 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:47:28.629000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:47:30.303381 kubelet[2916]: E1002 19:47:30.303341 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:32.006840 env[1632]: time="2023-10-02T19:47:32.006762114Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 19:47:32.023472 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2721382207.mount: Deactivated successfully. Oct 2 19:47:32.036679 env[1632]: time="2023-10-02T19:47:32.036503939Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\"" Oct 2 19:47:32.037412 env[1632]: time="2023-10-02T19:47:32.037369792Z" level=info msg="StartContainer for \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\"" Oct 2 19:47:32.079507 systemd[1]: Started cri-containerd-aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12.scope. Oct 2 19:47:32.123613 systemd[1]: cri-containerd-aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12.scope: Deactivated successfully. Oct 2 19:47:32.155943 env[1632]: time="2023-10-02T19:47:32.155881913Z" level=info msg="shim disconnected" id=aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12 Oct 2 19:47:32.155943 env[1632]: time="2023-10-02T19:47:32.155941050Z" level=warning msg="cleaning up after shim disconnected" id=aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12 namespace=k8s.io Oct 2 19:47:32.155943 env[1632]: time="2023-10-02T19:47:32.155952798Z" level=info msg="cleaning up dead shim" Oct 2 19:47:32.171540 env[1632]: time="2023-10-02T19:47:32.171430997Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:47:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4080 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:47:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:47:32.172085 env[1632]: time="2023-10-02T19:47:32.172020115Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:47:32.172390 env[1632]: time="2023-10-02T19:47:32.172302999Z" level=error msg="Failed to pipe stderr of container \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\"" error="reading from a closed fifo" Oct 2 19:47:32.172618 env[1632]: time="2023-10-02T19:47:32.172402244Z" level=error msg="Failed to pipe stdout of container \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\"" error="reading from a closed fifo" Oct 2 19:47:32.174820 env[1632]: time="2023-10-02T19:47:32.174768276Z" level=error msg="StartContainer for \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:47:32.175328 kubelet[2916]: E1002 19:47:32.175300 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12" Oct 2 19:47:32.176317 kubelet[2916]: E1002 19:47:32.175493 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:47:32.176317 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:47:32.176317 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:47:32.176317 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-4zjw6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:47:32.176317 kubelet[2916]: E1002 19:47:32.175542 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:47:32.944272 kubelet[2916]: I1002 19:47:32.944238 2916 scope.go:115] "RemoveContainer" containerID="a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a" Oct 2 19:47:32.944707 kubelet[2916]: I1002 19:47:32.944665 2916 scope.go:115] "RemoveContainer" containerID="a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a" Oct 2 19:47:32.946782 env[1632]: time="2023-10-02T19:47:32.946741069Z" level=info msg="RemoveContainer for \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\"" Oct 2 19:47:32.948042 env[1632]: time="2023-10-02T19:47:32.948001691Z" level=info msg="RemoveContainer for \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\"" Oct 2 19:47:32.948432 env[1632]: time="2023-10-02T19:47:32.948389934Z" level=error msg="RemoveContainer for \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\" failed" error="failed to set removing state for container \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\": container is already in removing state" Oct 2 19:47:32.948841 kubelet[2916]: E1002 19:47:32.948820 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\": container is already in removing state" containerID="a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a" Oct 2 19:47:32.948949 kubelet[2916]: E1002 19:47:32.948862 2916 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a": container is already in removing state; Skipping pod "cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)" Oct 2 19:47:32.949404 kubelet[2916]: E1002 19:47:32.949224 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:47:32.953888 env[1632]: time="2023-10-02T19:47:32.953827870Z" level=info msg="RemoveContainer for \"a6a0a46caa0640870a2ec74658d9b487f6bf6271d5f4bcc8e5f21f3a45d7ef7a\" returns successfully" Oct 2 19:47:33.019641 systemd[1]: run-containerd-runc-k8s.io-aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12-runc.efrHTH.mount: Deactivated successfully. Oct 2 19:47:33.020109 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12-rootfs.mount: Deactivated successfully. Oct 2 19:47:35.263292 kubelet[2916]: W1002 19:47:35.263240 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd332616d_b3da_42d1_85ab_ffbd98a5ebcf.slice/cri-containerd-aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12.scope WatchSource:0}: task aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12 not found: not found Oct 2 19:47:35.304075 kubelet[2916]: E1002 19:47:35.304044 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:40.305926 kubelet[2916]: E1002 19:47:40.305892 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:45.306654 kubelet[2916]: E1002 19:47:45.306618 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:47.006465 kubelet[2916]: E1002 19:47:47.003507 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:47:50.308090 kubelet[2916]: E1002 19:47:50.308062 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:47:55.310131 kubelet[2916]: E1002 19:47:55.310099 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:00.312087 kubelet[2916]: E1002 19:48:00.312059 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:01.007947 env[1632]: time="2023-10-02T19:48:01.007906348Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 19:48:01.057835 env[1632]: time="2023-10-02T19:48:01.057784485Z" level=info msg="CreateContainer within sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\"" Oct 2 19:48:01.059858 env[1632]: time="2023-10-02T19:48:01.058919364Z" level=info msg="StartContainer for \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\"" Oct 2 19:48:01.111450 systemd[1]: run-containerd-runc-k8s.io-cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def-runc.N90PN6.mount: Deactivated successfully. Oct 2 19:48:01.114658 systemd[1]: Started cri-containerd-cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def.scope. Oct 2 19:48:01.136558 systemd[1]: cri-containerd-cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def.scope: Deactivated successfully. Oct 2 19:48:01.155111 env[1632]: time="2023-10-02T19:48:01.155048954Z" level=info msg="shim disconnected" id=cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def Oct 2 19:48:01.155111 env[1632]: time="2023-10-02T19:48:01.155111239Z" level=warning msg="cleaning up after shim disconnected" id=cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def namespace=k8s.io Oct 2 19:48:01.155111 env[1632]: time="2023-10-02T19:48:01.155123969Z" level=info msg="cleaning up dead shim" Oct 2 19:48:01.168066 env[1632]: time="2023-10-02T19:48:01.167964989Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:01Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4118 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T19:48:01Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 19:48:01.169115 env[1632]: time="2023-10-02T19:48:01.168857165Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 19:48:01.173611 env[1632]: time="2023-10-02T19:48:01.173541115Z" level=error msg="Failed to pipe stdout of container \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\"" error="reading from a closed fifo" Oct 2 19:48:01.173859 env[1632]: time="2023-10-02T19:48:01.173766125Z" level=error msg="Failed to pipe stderr of container \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\"" error="reading from a closed fifo" Oct 2 19:48:01.175603 env[1632]: time="2023-10-02T19:48:01.175549042Z" level=error msg="StartContainer for \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 19:48:01.175930 kubelet[2916]: E1002 19:48:01.175901 2916 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def" Oct 2 19:48:01.176086 kubelet[2916]: E1002 19:48:01.176070 2916 kuberuntime_manager.go:1212] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 19:48:01.176086 kubelet[2916]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 19:48:01.176086 kubelet[2916]: rm /hostbin/cilium-mount Oct 2 19:48:01.176086 kubelet[2916]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-4zjw6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},} start failed in pod cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 19:48:01.176340 kubelet[2916]: E1002 19:48:01.176149 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:48:02.027952 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def-rootfs.mount: Deactivated successfully. Oct 2 19:48:02.047249 kubelet[2916]: I1002 19:48:02.046537 2916 scope.go:115] "RemoveContainer" containerID="aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12" Oct 2 19:48:02.047249 kubelet[2916]: I1002 19:48:02.046989 2916 scope.go:115] "RemoveContainer" containerID="aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12" Oct 2 19:48:02.063737 env[1632]: time="2023-10-02T19:48:02.063661306Z" level=info msg="RemoveContainer for \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\"" Oct 2 19:48:02.079015 env[1632]: time="2023-10-02T19:48:02.078943196Z" level=info msg="RemoveContainer for \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\"" Oct 2 19:48:02.084303 env[1632]: time="2023-10-02T19:48:02.080445457Z" level=error msg="RemoveContainer for \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\" failed" error="failed to set removing state for container \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\": container is already in removing state" Oct 2 19:48:02.092991 env[1632]: time="2023-10-02T19:48:02.092042345Z" level=info msg="RemoveContainer for \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\" returns successfully" Oct 2 19:48:02.093500 kubelet[2916]: E1002 19:48:02.093467 2916 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12\": container is already in removing state" containerID="aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12" Oct 2 19:48:02.093690 kubelet[2916]: E1002 19:48:02.093678 2916 kuberuntime_container.go:817] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "aac6f11cb0ed56ed3b17b91197830e6b154b9316733259f7c174cbbfeb58da12": container is already in removing state; Skipping pod "cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)" Oct 2 19:48:02.096002 kubelet[2916]: E1002 19:48:02.095185 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:48:04.261603 kubelet[2916]: W1002 19:48:04.261559 2916 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-podd332616d_b3da_42d1_85ab_ffbd98a5ebcf.slice/cri-containerd-cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def.scope WatchSource:0}: task cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def not found: not found Oct 2 19:48:05.315471 kubelet[2916]: E1002 19:48:05.315437 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:09.216000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:09.218638 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 19:48:09.218750 kernel: audit: type=1400 audit(1696276089.216:1395): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:09.216000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e31aa0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:09.233842 kernel: audit: type=1300 audit(1696276089.216:1395): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000e31aa0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:09.233996 kernel: audit: type=1327 audit(1696276089.216:1395): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:09.216000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:09.223000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:09.250323 kernel: audit: type=1400 audit(1696276089.223:1396): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:09.250469 kernel: audit: type=1300 audit(1696276089.223:1396): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f17040 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:09.223000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f17040 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:09.223000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:09.272991 kernel: audit: type=1327 audit(1696276089.223:1396): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:10.316650 kubelet[2916]: E1002 19:48:10.316618 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:11.328000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.328000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c01151b6e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.345467 kernel: audit: type=1400 audit(1696276091.328:1397): avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521012 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.345618 kernel: audit: type=1300 audit(1696276091.328:1397): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c01151b6e0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.345655 kernel: audit: type=1327 audit(1696276091.328:1397): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:11.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:11.334000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.358453 kernel: audit: type=1400 audit(1696276091.334:1398): avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.334000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0115f8720 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:11.334000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.334000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c011534ce0 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.334000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:11.339000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521018 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.339000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0115f8780 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.339000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:11.428000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.428000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c01151ba10 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.428000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:11.428000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:11.428000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c011552b60 a2=fc6 a3=0 items=0 ppid=2363 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c253,c957 key=(null) Oct 2 19:48:11.428000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32322E323331002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 19:48:15.318264 kubelet[2916]: E1002 19:48:15.318235 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:17.003156 kubelet[2916]: E1002 19:48:17.003116 2916 pod_workers.go:1294] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-nx5t2_kube-system(d332616d-b3da-42d1-85ab-ffbd98a5ebcf)\"" pod="kube-system/cilium-nx5t2" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf Oct 2 19:48:17.921828 env[1632]: time="2023-10-02T19:48:17.921580822Z" level=info msg="StopPodSandbox for \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\"" Oct 2 19:48:17.921828 env[1632]: time="2023-10-02T19:48:17.921679756Z" level=info msg="Container to stop \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 19:48:17.926824 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2-shm.mount: Deactivated successfully. Oct 2 19:48:17.934000 audit: BPF prog-id=134 op=UNLOAD Oct 2 19:48:17.936054 systemd[1]: cri-containerd-0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2.scope: Deactivated successfully. Oct 2 19:48:17.939052 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 19:48:17.939154 kernel: audit: type=1334 audit(1696276097.934:1403): prog-id=134 op=UNLOAD Oct 2 19:48:17.941000 audit: BPF prog-id=137 op=UNLOAD Oct 2 19:48:17.944505 kernel: audit: type=1334 audit(1696276097.941:1404): prog-id=137 op=UNLOAD Oct 2 19:48:17.978780 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2-rootfs.mount: Deactivated successfully. Oct 2 19:48:18.001556 env[1632]: time="2023-10-02T19:48:18.001495068Z" level=info msg="shim disconnected" id=0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2 Oct 2 19:48:18.001866 env[1632]: time="2023-10-02T19:48:18.001842352Z" level=warning msg="cleaning up after shim disconnected" id=0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2 namespace=k8s.io Oct 2 19:48:18.001993 env[1632]: time="2023-10-02T19:48:18.001976460Z" level=info msg="cleaning up dead shim" Oct 2 19:48:18.011797 env[1632]: time="2023-10-02T19:48:18.011750102Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4152 runtime=io.containerd.runc.v2\n" Oct 2 19:48:18.012125 env[1632]: time="2023-10-02T19:48:18.012088103Z" level=info msg="TearDown network for sandbox \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" successfully" Oct 2 19:48:18.012230 env[1632]: time="2023-10-02T19:48:18.012123849Z" level=info msg="StopPodSandbox for \"0b2086c61b0d6e01c892f8d6767ab60996430c5af8a46cdad11b3a279a688fa2\" returns successfully" Oct 2 19:48:18.016424 sshd[3923]: pam_unix(sshd:session): session closed for user core Oct 2 19:48:18.015000 audit[3923]: USER_END pid=3923 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:48:18.026133 systemd[1]: sshd@29-172.31.22.231:22-139.178.89.65:48720.service: Deactivated successfully. Oct 2 19:48:18.026492 kernel: audit: type=1106 audit(1696276098.015:1405): pid=3923 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:48:18.028228 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 19:48:18.016000 audit[3923]: CRED_DISP pid=3923 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:48:18.028457 systemd[1]: session-30.scope: Consumed 1.219s CPU time. Oct 2 19:48:18.035507 kernel: audit: type=1104 audit(1696276098.016:1406): pid=3923 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 19:48:18.036590 systemd-logind[1624]: Session 30 logged out. Waiting for processes to exit. Oct 2 19:48:18.024000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.231:22-139.178.89.65:48720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:18.043385 systemd-logind[1624]: Removed session 30. Oct 2 19:48:18.045523 kernel: audit: type=1131 audit(1696276098.024:1407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.22.231:22-139.178.89.65:48720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 19:48:18.111978 kubelet[2916]: I1002 19:48:18.111941 2916 scope.go:115] "RemoveContainer" containerID="cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def" Oct 2 19:48:18.114208 env[1632]: time="2023-10-02T19:48:18.112985369Z" level=info msg="RemoveContainer for \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\"" Oct 2 19:48:18.117136 env[1632]: time="2023-10-02T19:48:18.117087677Z" level=info msg="RemoveContainer for \"cec2afcd7ee74edfff7ba99adf5d97ce4a0e7d09a636875ee5e590a762342def\" returns successfully" Oct 2 19:48:18.137777 kubelet[2916]: I1002 19:48:18.137738 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hubble-tls\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137793 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hostproc\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137824 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-4zjw6\" (UniqueName: \"kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-kube-api-access-4zjw6\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137849 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cni-path\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137877 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-clustermesh-secrets\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137900 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-bpf-maps\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137923 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-cgroup\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137946 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-etc-cni-netd\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.137980 kubelet[2916]: I1002 19:48:18.137970 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-net\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138001 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-ipsec-secrets\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138030 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-kernel\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138060 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-lib-modules\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138090 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-run\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138126 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-config-path\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138154 2916 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-xtables-lock\") pod \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\" (UID: \"d332616d-b3da-42d1-85ab-ffbd98a5ebcf\") " Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138220 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.138341 kubelet[2916]: I1002 19:48:18.138255 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hostproc" (OuterVolumeSpecName: "hostproc") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139059 kubelet[2916]: I1002 19:48:18.139030 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cni-path" (OuterVolumeSpecName: "cni-path") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139304 kubelet[2916]: I1002 19:48:18.139276 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139391 kubelet[2916]: I1002 19:48:18.139318 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139391 kubelet[2916]: I1002 19:48:18.139340 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139391 kubelet[2916]: I1002 19:48:18.139364 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139620 kubelet[2916]: I1002 19:48:18.139593 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139701 kubelet[2916]: I1002 19:48:18.139632 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139701 kubelet[2916]: I1002 19:48:18.139655 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 19:48:18.139827 kubelet[2916]: W1002 19:48:18.139794 2916 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/d332616d-b3da-42d1-85ab-ffbd98a5ebcf/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 19:48:18.142716 kubelet[2916]: I1002 19:48:18.142678 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 19:48:18.145798 systemd[1]: var-lib-kubelet-pods-d332616d\x2db3da\x2d42d1\x2d85ab\x2dffbd98a5ebcf-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 19:48:18.147356 kubelet[2916]: I1002 19:48:18.147322 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:48:18.150277 systemd[1]: var-lib-kubelet-pods-d332616d\x2db3da\x2d42d1\x2d85ab\x2dffbd98a5ebcf-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d4zjw6.mount: Deactivated successfully. Oct 2 19:48:18.151740 kubelet[2916]: I1002 19:48:18.151705 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-kube-api-access-4zjw6" (OuterVolumeSpecName: "kube-api-access-4zjw6") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "kube-api-access-4zjw6". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 19:48:18.156584 systemd[1]: var-lib-kubelet-pods-d332616d\x2db3da\x2d42d1\x2d85ab\x2dffbd98a5ebcf-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 19:48:18.157932 kubelet[2916]: I1002 19:48:18.157895 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:48:18.158106 kubelet[2916]: I1002 19:48:18.158069 2916 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "d332616d-b3da-42d1-85ab-ffbd98a5ebcf" (UID: "d332616d-b3da-42d1-85ab-ffbd98a5ebcf"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.238975 2916 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-clustermesh-secrets\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239018 2916 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-bpf-maps\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239033 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-cgroup\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239046 2916 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cni-path\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239061 2916 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-etc-cni-netd\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239075 2916 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-net\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239089 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-ipsec-secrets\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239104 2916 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-host-proc-sys-kernel\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239116 2916 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-lib-modules\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239130 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-run\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239146 2916 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-cilium-config-path\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239160 2916 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-xtables-lock\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239172 2916 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hubble-tls\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239185 2916 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-hostproc\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.241543 kubelet[2916]: I1002 19:48:18.239198 2916 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-4zjw6\" (UniqueName: \"kubernetes.io/projected/d332616d-b3da-42d1-85ab-ffbd98a5ebcf-kube-api-access-4zjw6\") on node \"ip-172-31-22-231\" DevicePath \"\"" Oct 2 19:48:18.419045 systemd[1]: Removed slice kubepods-burstable-podd332616d_b3da_42d1_85ab_ffbd98a5ebcf.slice. Oct 2 19:48:18.926384 systemd[1]: var-lib-kubelet-pods-d332616d\x2db3da\x2d42d1\x2d85ab\x2dffbd98a5ebcf-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 19:48:19.005328 kubelet[2916]: I1002 19:48:19.005290 2916 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID=d332616d-b3da-42d1-85ab-ffbd98a5ebcf path="/var/lib/kubelet/pods/d332616d-b3da-42d1-85ab-ffbd98a5ebcf/volumes" Oct 2 19:48:20.319668 kubelet[2916]: E1002 19:48:20.319581 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:25.320316 kubelet[2916]: E1002 19:48:25.320286 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:28.613000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.613000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129dcc0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.634491 kernel: audit: type=1400 audit(1696276108.613:1408): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.634632 kernel: audit: type=1300 audit(1696276108.613:1408): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129dcc0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.634668 kernel: audit: type=1327 audit(1696276108.613:1408): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.613000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.626000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.649161 kernel: audit: type=1400 audit(1696276108.626:1409): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.649546 kernel: audit: type=1300 audit(1696276108.626:1409): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129dde0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.626000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129dde0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.626000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.665742 kernel: audit: type=1327 audit(1696276108.626:1409): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.665901 kernel: audit: type=1400 audit(1696276108.630:1410): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.630000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.630000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129dfa0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.680247 kernel: audit: type=1300 audit(1696276108.630:1410): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00129dfa0 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.680392 kernel: audit: type=1327 audit(1696276108.630:1410): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.630000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:28.631000 audit[2482]: AVC avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.693134 kernel: audit: type=1400 audit(1696276108.631:1411): avc: denied { watch } for pid=2482 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:28.631000 audit[2482]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00240e000 a2=fc6 a3=0 items=0 ppid=2356 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:28.631000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:30.323518 kubelet[2916]: E1002 19:48:30.323282 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:31.568206 systemd[1]: cri-containerd-988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88.scope: Deactivated successfully. Oct 2 19:48:31.568717 systemd[1]: cri-containerd-988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88.scope: Consumed 5.008s CPU time. Oct 2 19:48:31.571000 audit: BPF prog-id=85 op=UNLOAD Oct 2 19:48:31.571000 audit: BPF prog-id=100 op=UNLOAD Oct 2 19:48:31.609230 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88-rootfs.mount: Deactivated successfully. Oct 2 19:48:31.643676 env[1632]: time="2023-10-02T19:48:31.643582453Z" level=info msg="shim disconnected" id=988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88 Oct 2 19:48:31.643676 env[1632]: time="2023-10-02T19:48:31.643671755Z" level=warning msg="cleaning up after shim disconnected" id=988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88 namespace=k8s.io Oct 2 19:48:31.643676 env[1632]: time="2023-10-02T19:48:31.643684098Z" level=info msg="cleaning up dead shim" Oct 2 19:48:31.656751 env[1632]: time="2023-10-02T19:48:31.656702090Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4185 runtime=io.containerd.runc.v2\n" Oct 2 19:48:32.145744 kubelet[2916]: I1002 19:48:32.144250 2916 scope.go:115] "RemoveContainer" containerID="988e17c892b2e063557142d354a0a3a8ee9de03e0599346a6e767d86fc5e1d88" Oct 2 19:48:32.150435 env[1632]: time="2023-10-02T19:48:32.150388172Z" level=info msg="CreateContainer within sandbox \"84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 19:48:32.168843 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3107727454.mount: Deactivated successfully. Oct 2 19:48:32.181980 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3560019762.mount: Deactivated successfully. Oct 2 19:48:32.186356 env[1632]: time="2023-10-02T19:48:32.186229759Z" level=info msg="CreateContainer within sandbox \"84362f228fe931729ec99d52ec326ebeda4069e164e3c53548a41c60252c8d7e\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"11a4034a13f40a1bdcc8729e7161c555c7f1a84ec95d794b04d6b5223047fbe3\"" Oct 2 19:48:32.187168 env[1632]: time="2023-10-02T19:48:32.187096378Z" level=info msg="StartContainer for \"11a4034a13f40a1bdcc8729e7161c555c7f1a84ec95d794b04d6b5223047fbe3\"" Oct 2 19:48:32.218345 systemd[1]: Started cri-containerd-11a4034a13f40a1bdcc8729e7161c555c7f1a84ec95d794b04d6b5223047fbe3.scope. Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.244000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.245000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.245000 audit: BPF prog-id=138 op=LOAD Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2356 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131613430333461313366343061316264636338373239653731363163 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2356 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131613430333461313366343061316264636338373239653731363163 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit: BPF prog-id=139 op=LOAD Oct 2 19:48:32.247000 audit[4205]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00039c0c0 items=0 ppid=2356 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131613430333461313366343061316264636338373239653731363163 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit: BPF prog-id=140 op=LOAD Oct 2 19:48:32.247000 audit[4205]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00039c108 items=0 ppid=2356 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131613430333461313366343061316264636338373239653731363163 Oct 2 19:48:32.247000 audit: BPF prog-id=140 op=UNLOAD Oct 2 19:48:32.247000 audit: BPF prog-id=139 op=UNLOAD Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { perfmon } for pid=4205 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit[4205]: AVC avc: denied { bpf } for pid=4205 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:32.247000 audit: BPF prog-id=141 op=LOAD Oct 2 19:48:32.247000 audit[4205]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039c518 items=0 ppid=2356 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:32.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131613430333461313366343061316264636338373239653731363163 Oct 2 19:48:32.316327 env[1632]: time="2023-10-02T19:48:32.316273103Z" level=info msg="StartContainer for \"11a4034a13f40a1bdcc8729e7161c555c7f1a84ec95d794b04d6b5223047fbe3\" returns successfully" Oct 2 19:48:34.705566 kernel: kauditd_printk_skb: 61 callbacks suppressed Oct 2 19:48:34.705716 kernel: audit: type=1400 audit(1696276114.701:1432): avc: denied { watch } for pid=4216 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:34.701000 audit[4216]: AVC avc: denied { watch } for pid=4216 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521016 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:34.703000 audit[4216]: AVC avc: denied { watch } for pid=4216 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:34.718285 kernel: audit: type=1400 audit(1696276114.703:1433): avc: denied { watch } for pid=4216 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 19:48:34.718353 kernel: audit: type=1300 audit(1696276114.703:1433): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007fc680 a2=fc6 a3=0 items=0 ppid=2356 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:34.703000 audit[4216]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0007fc680 a2=fc6 a3=0 items=0 ppid=2356 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:34.703000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:34.733259 kernel: audit: type=1327 audit(1696276114.703:1433): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:34.733398 kernel: audit: type=1300 audit(1696276114.701:1432): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001178000 a2=fc6 a3=0 items=0 ppid=2356 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:34.701000 audit[4216]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001178000 a2=fc6 a3=0 items=0 ppid=2356 pid=4216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c752,c873 key=(null) Oct 2 19:48:34.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:34.746449 kernel: audit: type=1327 audit(1696276114.701:1432): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 19:48:35.326029 kubelet[2916]: E1002 19:48:35.325997 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:36.350549 systemd[1]: cri-containerd-d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711.scope: Deactivated successfully. Oct 2 19:48:36.350918 systemd[1]: cri-containerd-d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711.scope: Consumed 2.767s CPU time. Oct 2 19:48:36.363595 kernel: audit: type=1334 audit(1696276116.356:1434): prog-id=93 op=UNLOAD Oct 2 19:48:36.364762 kernel: audit: type=1334 audit(1696276116.356:1435): prog-id=95 op=UNLOAD Oct 2 19:48:36.356000 audit: BPF prog-id=93 op=UNLOAD Oct 2 19:48:36.356000 audit: BPF prog-id=95 op=UNLOAD Oct 2 19:48:36.410069 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711-rootfs.mount: Deactivated successfully. Oct 2 19:48:36.443314 env[1632]: time="2023-10-02T19:48:36.443231609Z" level=info msg="shim disconnected" id=d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711 Oct 2 19:48:36.443314 env[1632]: time="2023-10-02T19:48:36.443313694Z" level=warning msg="cleaning up after shim disconnected" id=d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711 namespace=k8s.io Oct 2 19:48:36.444683 env[1632]: time="2023-10-02T19:48:36.443327954Z" level=info msg="cleaning up dead shim" Oct 2 19:48:36.456398 env[1632]: time="2023-10-02T19:48:36.456315765Z" level=warning msg="cleanup warnings time=\"2023-10-02T19:48:36Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4244 runtime=io.containerd.runc.v2\n" Oct 2 19:48:37.163945 kubelet[2916]: I1002 19:48:37.163916 2916 scope.go:115] "RemoveContainer" containerID="d1ef15a2699557369b231f67031e835f22f1a17e106e84e62cb4332cb46f6711" Oct 2 19:48:37.166681 env[1632]: time="2023-10-02T19:48:37.166609226Z" level=info msg="CreateContainer within sandbox \"637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 19:48:37.180737 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3244519436.mount: Deactivated successfully. Oct 2 19:48:37.189636 env[1632]: time="2023-10-02T19:48:37.189583722Z" level=info msg="CreateContainer within sandbox \"637c1ce1f6c38f7cfc3a720962e48a83f23ed89d9bf25fdf612d3a2965fdb61d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"8987613aa87c93c01ca439d66a08dda255c8d70264fdf43e24e3d7f911bebf85\"" Oct 2 19:48:37.190313 env[1632]: time="2023-10-02T19:48:37.190282362Z" level=info msg="StartContainer for \"8987613aa87c93c01ca439d66a08dda255c8d70264fdf43e24e3d7f911bebf85\"" Oct 2 19:48:37.218115 systemd[1]: Started cri-containerd-8987613aa87c93c01ca439d66a08dda255c8d70264fdf43e24e3d7f911bebf85.scope. Oct 2 19:48:37.247779 kernel: audit: type=1400 audit(1696276117.238:1436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247922 kernel: audit: type=1400 audit(1696276117.238:1437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.238000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit: BPF prog-id=142 op=LOAD Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000149c48 a2=10 a3=1c items=0 ppid=2352 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:37.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839383736313361613837633933633031636134333964363661303864 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001496b0 a2=3c a3=8 items=0 ppid=2352 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:37.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839383736313361613837633933633031636134333964363661303864 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.247000 audit: BPF prog-id=143 op=LOAD Oct 2 19:48:37.247000 audit[4265]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001499d8 a2=78 a3=c0003ae150 items=0 ppid=2352 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:37.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839383736313361613837633933633031636134333964363661303864 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit: BPF prog-id=144 op=LOAD Oct 2 19:48:37.248000 audit[4265]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000149770 a2=78 a3=c0003ae198 items=0 ppid=2352 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:37.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839383736313361613837633933633031636134333964363661303864 Oct 2 19:48:37.248000 audit: BPF prog-id=144 op=UNLOAD Oct 2 19:48:37.248000 audit: BPF prog-id=143 op=UNLOAD Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { perfmon } for pid=4265 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit[4265]: AVC avc: denied { bpf } for pid=4265 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 19:48:37.248000 audit: BPF prog-id=145 op=LOAD Oct 2 19:48:37.248000 audit[4265]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000149c30 a2=78 a3=c0003ae5a8 items=0 ppid=2352 pid=4265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 19:48:37.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839383736313361613837633933633031636134333964363661303864 Oct 2 19:48:37.285771 env[1632]: time="2023-10-02T19:48:37.285712748Z" level=info msg="StartContainer for \"8987613aa87c93c01ca439d66a08dda255c8d70264fdf43e24e3d7f911bebf85\" returns successfully" Oct 2 19:48:40.327203 kubelet[2916]: E1002 19:48:40.327175 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:40.914387 kubelet[2916]: E1002 19:48:40.914353 2916 controller.go:193] "Failed to update lease" err="Put \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 19:48:45.329175 kubelet[2916]: E1002 19:48:45.329125 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:50.330798 kubelet[2916]: E1002 19:48:50.330757 2916 kubelet.go:2760] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 19:48:50.914917 kubelet[2916]: E1002 19:48:50.914604 2916 controller.go:193] "Failed to update lease" err="Put \"https://172.31.22.231:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-22-231?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)"