Oct 2 20:05:19.235561 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:05:19.235595 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.235611 kernel: BIOS-provided physical RAM map: Oct 2 20:05:19.235628 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 20:05:19.235639 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 20:05:19.235650 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 20:05:19.235666 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 20:05:19.235677 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 20:05:19.235689 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 20:05:19.235700 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 20:05:19.235712 kernel: NX (Execute Disable) protection: active Oct 2 20:05:19.235723 kernel: SMBIOS 2.7 present. Oct 2 20:05:19.235734 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 20:05:19.235746 kernel: Hypervisor detected: KVM Oct 2 20:05:19.235763 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 20:05:19.235776 kernel: kvm-clock: cpu 0, msr 65f8a001, primary cpu clock Oct 2 20:05:19.235788 kernel: kvm-clock: using sched offset of 6296453328 cycles Oct 2 20:05:19.235801 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 20:05:19.235814 kernel: tsc: Detected 2499.994 MHz processor Oct 2 20:05:19.235827 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:05:19.235842 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:05:19.235855 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 20:05:19.235868 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:05:19.235880 kernel: Using GB pages for direct mapping Oct 2 20:05:19.235893 kernel: ACPI: Early table checksum verification disabled Oct 2 20:05:19.235906 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 20:05:19.235918 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 20:05:19.235931 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 20:05:19.235944 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 20:05:19.235959 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 20:05:19.235972 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:19.235984 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 20:05:19.235997 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 20:05:19.236009 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 20:05:19.236022 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 20:05:19.236034 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 20:05:19.236047 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:19.236062 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 20:05:19.236075 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 20:05:19.236128 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 20:05:19.236147 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 20:05:19.236161 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 20:05:19.236174 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 20:05:19.236188 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 20:05:19.236204 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 20:05:19.248283 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 20:05:19.248312 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 20:05:19.248336 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:05:19.248351 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:05:19.248365 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 20:05:19.248379 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 20:05:19.248393 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 20:05:19.248418 kernel: Zone ranges: Oct 2 20:05:19.248432 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:05:19.248447 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 20:05:19.248461 kernel: Normal empty Oct 2 20:05:19.248475 kernel: Movable zone start for each node Oct 2 20:05:19.248488 kernel: Early memory node ranges Oct 2 20:05:19.248502 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 20:05:19.248516 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 20:05:19.248528 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 20:05:19.248542 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:05:19.248554 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 20:05:19.248567 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 20:05:19.248580 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 20:05:19.248591 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 20:05:19.248603 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 20:05:19.248614 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 20:05:19.248626 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:05:19.248637 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 20:05:19.248657 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 20:05:19.248672 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:05:19.248683 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 20:05:19.248695 kernel: TSC deadline timer available Oct 2 20:05:19.248706 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:05:19.248718 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 20:05:19.248730 kernel: Booting paravirtualized kernel on KVM Oct 2 20:05:19.248743 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:05:19.248757 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:05:19.248775 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:05:19.248789 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:05:19.248802 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:05:19.248816 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 20:05:19.248829 kernel: kvm-guest: PV spinlocks enabled Oct 2 20:05:19.248843 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:05:19.248857 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 20:05:19.248872 kernel: Policy zone: DMA32 Oct 2 20:05:19.248888 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.248905 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:05:19.248919 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:05:19.248933 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:05:19.248947 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:05:19.248961 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 20:05:19.248975 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:05:19.248989 kernel: Kernel/User page tables isolation: enabled Oct 2 20:05:19.249002 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:05:19.249019 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:05:19.249033 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:05:19.249048 kernel: rcu: RCU event tracing is enabled. Oct 2 20:05:19.249062 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:05:19.249076 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:05:19.249090 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:05:19.249104 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:05:19.249118 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:05:19.249132 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 20:05:19.249149 kernel: random: crng init done Oct 2 20:05:19.249163 kernel: Console: colour VGA+ 80x25 Oct 2 20:05:19.249176 kernel: printk: console [ttyS0] enabled Oct 2 20:05:19.249189 kernel: ACPI: Core revision 20210730 Oct 2 20:05:19.249203 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 20:05:19.249228 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:05:19.252288 kernel: x2apic enabled Oct 2 20:05:19.252305 kernel: Switched APIC routing to physical x2apic. Oct 2 20:05:19.252321 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 20:05:19.252397 kernel: Calibrating delay loop (skipped) preset value.. 4999.98 BogoMIPS (lpj=2499994) Oct 2 20:05:19.252412 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:05:19.252426 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:05:19.252440 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:05:19.252463 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:05:19.252480 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:05:19.252494 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:05:19.252509 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:05:19.252524 kernel: RETBleed: Vulnerable Oct 2 20:05:19.252538 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:05:19.252552 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:19.252566 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:19.252578 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:05:19.252593 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:05:19.252609 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:05:19.252623 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:05:19.252637 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 20:05:19.252650 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 20:05:19.252663 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:05:19.252679 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:05:19.252693 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:05:19.252706 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 20:05:19.252720 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:05:19.252733 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 20:05:19.252746 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 20:05:19.252760 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 20:05:19.252773 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 20:05:19.252786 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 20:05:19.252799 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 20:05:19.252813 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 20:05:19.252827 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:05:19.252842 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:05:19.252856 kernel: LSM: Security Framework initializing Oct 2 20:05:19.252869 kernel: SELinux: Initializing. Oct 2 20:05:19.252882 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.252896 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.252910 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:05:19.252923 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:05:19.252938 kernel: signal: max sigframe size: 3632 Oct 2 20:05:19.252951 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:05:19.252964 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:05:19.252981 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:05:19.252994 kernel: x86: Booting SMP configuration: Oct 2 20:05:19.253007 kernel: .... node #0, CPUs: #1 Oct 2 20:05:19.253021 kernel: kvm-clock: cpu 1, msr 65f8a041, secondary cpu clock Oct 2 20:05:19.253035 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 20:05:19.253049 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 20:05:19.253064 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:05:19.253077 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:05:19.253091 kernel: smpboot: Max logical packages: 1 Oct 2 20:05:19.253107 kernel: smpboot: Total of 2 processors activated (9999.97 BogoMIPS) Oct 2 20:05:19.253121 kernel: devtmpfs: initialized Oct 2 20:05:19.253135 kernel: x86/mm: Memory block size: 128MB Oct 2 20:05:19.253149 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:05:19.253163 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.253176 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:05:19.253191 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:05:19.253204 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:05:19.253266 kernel: audit: type=2000 audit(1696277117.902:1): state=initialized audit_enabled=0 res=1 Oct 2 20:05:19.253283 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:05:19.253297 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:05:19.253310 kernel: cpuidle: using governor menu Oct 2 20:05:19.253324 kernel: ACPI: bus type PCI registered Oct 2 20:05:19.253338 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:05:19.253352 kernel: dca service started, version 1.12.1 Oct 2 20:05:19.253366 kernel: PCI: Using configuration type 1 for base access Oct 2 20:05:19.253380 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:05:19.253393 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:05:19.253422 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:05:19.253537 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:05:19.253552 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:05:19.253568 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:05:19.253581 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:05:19.253594 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:05:19.253608 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:05:19.253622 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:05:19.253637 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 20:05:19.253656 kernel: ACPI: Interpreter enabled Oct 2 20:05:19.253671 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:05:19.253685 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:05:19.253700 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:05:19.253715 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 20:05:19.253730 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:05:19.253939 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:05:19.254069 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 20:05:19.254091 kernel: acpiphp: Slot [3] registered Oct 2 20:05:19.254106 kernel: acpiphp: Slot [4] registered Oct 2 20:05:19.254121 kernel: acpiphp: Slot [5] registered Oct 2 20:05:19.254136 kernel: acpiphp: Slot [6] registered Oct 2 20:05:19.254151 kernel: acpiphp: Slot [7] registered Oct 2 20:05:19.254166 kernel: acpiphp: Slot [8] registered Oct 2 20:05:19.254180 kernel: acpiphp: Slot [9] registered Oct 2 20:05:19.254195 kernel: acpiphp: Slot [10] registered Oct 2 20:05:19.254210 kernel: acpiphp: Slot [11] registered Oct 2 20:05:19.256251 kernel: acpiphp: Slot [12] registered Oct 2 20:05:19.256270 kernel: acpiphp: Slot [13] registered Oct 2 20:05:19.256285 kernel: acpiphp: Slot [14] registered Oct 2 20:05:19.256300 kernel: acpiphp: Slot [15] registered Oct 2 20:05:19.256315 kernel: acpiphp: Slot [16] registered Oct 2 20:05:19.256330 kernel: acpiphp: Slot [17] registered Oct 2 20:05:19.256344 kernel: acpiphp: Slot [18] registered Oct 2 20:05:19.256359 kernel: acpiphp: Slot [19] registered Oct 2 20:05:19.256374 kernel: acpiphp: Slot [20] registered Oct 2 20:05:19.256392 kernel: acpiphp: Slot [21] registered Oct 2 20:05:19.256407 kernel: acpiphp: Slot [22] registered Oct 2 20:05:19.256421 kernel: acpiphp: Slot [23] registered Oct 2 20:05:19.256435 kernel: acpiphp: Slot [24] registered Oct 2 20:05:19.256450 kernel: acpiphp: Slot [25] registered Oct 2 20:05:19.256464 kernel: acpiphp: Slot [26] registered Oct 2 20:05:19.256479 kernel: acpiphp: Slot [27] registered Oct 2 20:05:19.256493 kernel: acpiphp: Slot [28] registered Oct 2 20:05:19.256508 kernel: acpiphp: Slot [29] registered Oct 2 20:05:19.256522 kernel: acpiphp: Slot [30] registered Oct 2 20:05:19.256539 kernel: acpiphp: Slot [31] registered Oct 2 20:05:19.256554 kernel: PCI host bridge to bus 0000:00 Oct 2 20:05:19.256699 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 20:05:19.256815 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 20:05:19.256930 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 20:05:19.257043 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 20:05:19.257154 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:05:19.259351 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 20:05:19.259576 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 20:05:19.259742 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 20:05:19.259872 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 20:05:19.260000 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 20:05:19.260127 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 20:05:19.260283 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 20:05:19.260483 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 20:05:19.260610 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 20:05:19.260735 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 20:05:19.260858 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 20:05:19.260994 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 20:05:19.261120 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 20:05:19.264343 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 20:05:19.264501 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 20:05:19.264636 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 20:05:19.264762 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 20:05:19.264894 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 20:05:19.265020 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 20:05:19.265040 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 20:05:19.265059 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 20:05:19.265074 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 20:05:19.265090 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 20:05:19.265105 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 20:05:19.265121 kernel: iommu: Default domain type: Translated Oct 2 20:05:19.265136 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:05:19.265270 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 20:05:19.265395 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 20:05:19.265521 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 20:05:19.265543 kernel: vgaarb: loaded Oct 2 20:05:19.265559 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:05:19.265575 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:05:19.265590 kernel: PTP clock support registered Oct 2 20:05:19.265605 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:05:19.265619 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 20:05:19.265634 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 20:05:19.265648 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 20:05:19.265662 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 20:05:19.265679 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 20:05:19.265693 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 20:05:19.265708 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:05:19.265723 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:05:19.265738 kernel: pnp: PnP ACPI init Oct 2 20:05:19.265753 kernel: pnp: PnP ACPI: found 5 devices Oct 2 20:05:19.265768 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:05:19.265783 kernel: NET: Registered PF_INET protocol family Oct 2 20:05:19.265798 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.265816 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 20:05:19.265831 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.265846 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:05:19.265861 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.265876 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 20:05:19.265890 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.265905 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.265920 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:05:19.265935 kernel: NET: Registered PF_XDP protocol family Oct 2 20:05:19.266055 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 20:05:19.266169 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 20:05:19.274477 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 20:05:19.274756 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 20:05:19.274897 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 20:05:19.275042 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 20:05:19.275072 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:05:19.275107 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:05:19.275122 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 20:05:19.275136 kernel: clocksource: Switched to clocksource tsc Oct 2 20:05:19.275150 kernel: Initialise system trusted keyrings Oct 2 20:05:19.275165 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 20:05:19.275179 kernel: Key type asymmetric registered Oct 2 20:05:19.275194 kernel: Asymmetric key parser 'x509' registered Oct 2 20:05:19.275208 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:05:19.275234 kernel: io scheduler mq-deadline registered Oct 2 20:05:19.275253 kernel: io scheduler kyber registered Oct 2 20:05:19.275267 kernel: io scheduler bfq registered Oct 2 20:05:19.275282 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:05:19.275296 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:05:19.275307 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:05:19.275320 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 20:05:19.275335 kernel: i8042: Warning: Keylock active Oct 2 20:05:19.275349 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 20:05:19.275363 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 20:05:19.279447 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 20:05:19.279585 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 20:05:19.279703 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T20:05:18 UTC (1696277118) Oct 2 20:05:19.279813 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 20:05:19.279831 kernel: intel_pstate: CPU model not supported Oct 2 20:05:19.279846 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:05:19.279861 kernel: Segment Routing with IPv6 Oct 2 20:05:19.279875 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:05:19.279895 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:05:19.279909 kernel: Key type dns_resolver registered Oct 2 20:05:19.279925 kernel: IPI shorthand broadcast: enabled Oct 2 20:05:19.279940 kernel: sched_clock: Marking stable (453811629, 375579328)->(983841349, -154450392) Oct 2 20:05:19.279955 kernel: registered taskstats version 1 Oct 2 20:05:19.279969 kernel: Loading compiled-in X.509 certificates Oct 2 20:05:19.279984 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:05:19.279999 kernel: Key type .fscrypt registered Oct 2 20:05:19.280013 kernel: Key type fscrypt-provisioning registered Oct 2 20:05:19.280030 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:05:19.280044 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:05:19.280059 kernel: ima: No architecture policies found Oct 2 20:05:19.280074 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:05:19.280089 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:05:19.280103 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:05:19.280118 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:05:19.280132 kernel: Run /init as init process Oct 2 20:05:19.280146 kernel: with arguments: Oct 2 20:05:19.280163 kernel: /init Oct 2 20:05:19.280177 kernel: with environment: Oct 2 20:05:19.280191 kernel: HOME=/ Oct 2 20:05:19.280205 kernel: TERM=linux Oct 2 20:05:19.281263 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:05:19.281288 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:19.281307 systemd[1]: Detected virtualization amazon. Oct 2 20:05:19.281325 systemd[1]: Detected architecture x86-64. Oct 2 20:05:19.281340 systemd[1]: Running in initrd. Oct 2 20:05:19.281354 systemd[1]: No hostname configured, using default hostname. Oct 2 20:05:19.281369 systemd[1]: Hostname set to . Oct 2 20:05:19.281402 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:19.281417 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 20:05:19.281435 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:05:19.281450 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:19.281465 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:19.281480 systemd[1]: Reached target paths.target. Oct 2 20:05:19.281496 systemd[1]: Reached target slices.target. Oct 2 20:05:19.281512 systemd[1]: Reached target swap.target. Oct 2 20:05:19.281528 systemd[1]: Reached target timers.target. Oct 2 20:05:19.281544 systemd[1]: Listening on iscsid.socket. Oct 2 20:05:19.281567 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:05:19.281584 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:05:19.281601 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:05:19.281618 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:05:19.281635 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:19.281651 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:19.281668 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:19.281685 systemd[1]: Reached target sockets.target. Oct 2 20:05:19.281704 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:19.281721 systemd[1]: Finished network-cleanup.service. Oct 2 20:05:19.281737 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:05:19.281754 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:19.281771 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:19.281787 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:19.281804 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:05:19.281820 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:19.281838 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:05:19.281857 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:05:19.281874 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:05:19.281890 kernel: Bridge firewalling registered Oct 2 20:05:19.281907 kernel: SCSI subsystem initialized Oct 2 20:05:19.281929 systemd-journald[185]: Journal started Oct 2 20:05:19.282013 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2de0ab10ca425edc043d0f0fcfc77d) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:19.201740 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 20:05:19.402093 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:05:19.402126 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:05:19.402157 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:05:19.251843 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 20:05:19.408121 systemd[1]: Started systemd-journald.service. Oct 2 20:05:19.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.302803 systemd-resolved[187]: Positive Trust Anchors: Oct 2 20:05:19.414693 kernel: audit: type=1130 audit(1696277119.407:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.302820 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:19.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.302871 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:19.310472 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 20:05:19.438440 kernel: audit: type=1130 audit(1696277119.414:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.438476 kernel: audit: type=1130 audit(1696277119.432:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.319368 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 20:05:19.408724 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:19.415024 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:19.456921 kernel: audit: type=1130 audit(1696277119.440:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.456955 kernel: audit: type=1130 audit(1696277119.443:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.438766 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:05:19.441381 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:05:19.443877 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:19.460238 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:05:19.462551 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:19.475485 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:19.475000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.482320 kernel: audit: type=1130 audit(1696277119.475:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.497384 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:05:19.506830 kernel: audit: type=1130 audit(1696277119.498:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.498000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.499374 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:05:19.526066 dracut-cmdline[208]: dracut-dracut-053 Oct 2 20:05:19.536846 dracut-cmdline[208]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.628373 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:05:19.652249 kernel: iscsi: registered transport (tcp) Oct 2 20:05:19.688008 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:05:19.688085 kernel: QLogic iSCSI HBA Driver Oct 2 20:05:19.727812 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:05:19.737252 kernel: audit: type=1130 audit(1696277119.730:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.735597 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:05:19.813264 kernel: raid6: avx512x4 gen() 14047 MB/s Oct 2 20:05:19.831257 kernel: raid6: avx512x4 xor() 3335 MB/s Oct 2 20:05:19.850531 kernel: raid6: avx512x2 gen() 4473 MB/s Oct 2 20:05:19.870408 kernel: raid6: avx512x2 xor() 7218 MB/s Oct 2 20:05:19.888267 kernel: raid6: avx512x1 gen() 12256 MB/s Oct 2 20:05:19.907462 kernel: raid6: avx512x1 xor() 10238 MB/s Oct 2 20:05:19.930323 kernel: raid6: avx2x4 gen() 5707 MB/s Oct 2 20:05:19.958264 kernel: raid6: avx2x4 xor() 3578 MB/s Oct 2 20:05:19.975253 kernel: raid6: avx2x2 gen() 16248 MB/s Oct 2 20:05:19.993289 kernel: raid6: avx2x2 xor() 14926 MB/s Oct 2 20:05:20.010249 kernel: raid6: avx2x1 gen() 13204 MB/s Oct 2 20:05:20.027250 kernel: raid6: avx2x1 xor() 15644 MB/s Oct 2 20:05:20.044251 kernel: raid6: sse2x4 gen() 9288 MB/s Oct 2 20:05:20.061249 kernel: raid6: sse2x4 xor() 5924 MB/s Oct 2 20:05:20.079755 kernel: raid6: sse2x2 gen() 7957 MB/s Oct 2 20:05:20.096253 kernel: raid6: sse2x2 xor() 4787 MB/s Oct 2 20:05:20.115257 kernel: raid6: sse2x1 gen() 3730 MB/s Oct 2 20:05:20.133299 kernel: raid6: sse2x1 xor() 2905 MB/s Oct 2 20:05:20.133416 kernel: raid6: using algorithm avx2x2 gen() 16248 MB/s Oct 2 20:05:20.133436 kernel: raid6: .... xor() 14926 MB/s, rmw enabled Oct 2 20:05:20.134751 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:05:20.153271 kernel: xor: automatically using best checksumming function avx Oct 2 20:05:20.280255 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:05:20.316700 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:05:20.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.320473 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:20.337371 kernel: audit: type=1130 audit(1696277120.319:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.319000 audit: BPF prog-id=7 op=LOAD Oct 2 20:05:20.319000 audit: BPF prog-id=8 op=LOAD Oct 2 20:05:20.347796 systemd-udevd[385]: Using default interface naming scheme 'v252'. Oct 2 20:05:20.354913 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:20.355000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.357102 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:05:20.380984 dracut-pre-trigger[389]: rd.md=0: removing MD RAID activation Oct 2 20:05:20.413742 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:05:20.414000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.415670 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:20.462823 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:20.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.531526 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 20:05:20.531849 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 20:05:20.535238 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 20:05:20.543480 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:05:20.543540 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:ef:d3:4c:35:4d Oct 2 20:05:20.571190 (udev-worker)[438]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:20.588201 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 20:05:20.588536 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 20:05:20.592595 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:05:20.592661 kernel: AES CTR mode by8 optimization enabled Oct 2 20:05:20.595233 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 20:05:20.598237 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 20:05:20.598289 kernel: GPT:9289727 != 16777215 Oct 2 20:05:20.598309 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 20:05:20.598333 kernel: GPT:9289727 != 16777215 Oct 2 20:05:20.598397 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 20:05:20.598420 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.667238 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (437) Oct 2 20:05:20.702809 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:05:20.794398 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:20.809062 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:05:20.811974 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:05:20.819875 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:05:20.831897 systemd[1]: Starting disk-uuid.service... Oct 2 20:05:20.841672 disk-uuid[584]: Primary Header is updated. Oct 2 20:05:20.841672 disk-uuid[584]: Secondary Entries is updated. Oct 2 20:05:20.841672 disk-uuid[584]: Secondary Header is updated. Oct 2 20:05:20.849237 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.856246 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:21.862977 disk-uuid[585]: The operation has completed successfully. Oct 2 20:05:21.864568 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:22.035921 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:05:22.036000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.036000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.036133 systemd[1]: Finished disk-uuid.service. Oct 2 20:05:22.047270 systemd[1]: Starting verity-setup.service... Oct 2 20:05:22.071265 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:05:22.169210 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:05:22.176768 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:05:22.179956 systemd[1]: Finished verity-setup.service. Oct 2 20:05:22.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.312244 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:05:22.313212 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:05:22.314692 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:05:22.315705 systemd[1]: Starting ignition-setup.service... Oct 2 20:05:22.320192 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:05:22.339255 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:22.339322 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:22.339340 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:22.383244 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:22.397090 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:05:22.405805 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:05:22.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.407000 audit: BPF prog-id=9 op=LOAD Oct 2 20:05:22.408586 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:22.419060 systemd[1]: Finished ignition-setup.service. Oct 2 20:05:22.419000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.421598 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:05:22.441068 systemd-networkd[1095]: lo: Link UP Oct 2 20:05:22.441081 systemd-networkd[1095]: lo: Gained carrier Oct 2 20:05:22.443235 systemd-networkd[1095]: Enumeration completed Oct 2 20:05:22.443547 systemd-networkd[1095]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:22.443816 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:22.453241 systemd[1]: Reached target network.target. Oct 2 20:05:22.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.458204 systemd-networkd[1095]: eth0: Link UP Oct 2 20:05:22.458226 systemd-networkd[1095]: eth0: Gained carrier Oct 2 20:05:22.460120 systemd[1]: Starting iscsiuio.service... Oct 2 20:05:22.480846 systemd[1]: Started iscsiuio.service. Oct 2 20:05:22.483000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.484447 systemd[1]: Starting iscsid.service... Oct 2 20:05:22.492377 iscsid[1102]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:22.492377 iscsid[1102]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Oct 2 20:05:22.492377 iscsid[1102]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:05:22.492377 iscsid[1102]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:05:22.492377 iscsid[1102]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:05:22.492377 iscsid[1102]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:22.492377 iscsid[1102]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:05:22.486492 systemd-networkd[1095]: eth0: DHCPv4 address 172.31.27.142/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:22.511000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.506672 systemd[1]: Started iscsid.service. Oct 2 20:05:22.516923 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:05:22.534366 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:05:22.535000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.536388 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:05:22.537497 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:22.540252 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:22.545592 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:05:22.556728 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:05:22.557000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.586942 ignition[1097]: Ignition 2.14.0 Oct 2 20:05:23.587211 ignition[1097]: Stage: fetch-offline Oct 2 20:05:23.587541 ignition[1097]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.587590 ignition[1097]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.620853 ignition[1097]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.621192 ignition[1097]: Ignition finished successfully Oct 2 20:05:23.626985 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:05:23.637381 kernel: kauditd_printk_skb: 16 callbacks suppressed Oct 2 20:05:23.637507 kernel: audit: type=1130 audit(1696277123.628:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.630786 systemd[1]: Starting ignition-fetch.service... Oct 2 20:05:23.645523 ignition[1121]: Ignition 2.14.0 Oct 2 20:05:23.645601 ignition[1121]: Stage: fetch Oct 2 20:05:23.645801 ignition[1121]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.645830 ignition[1121]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.656037 ignition[1121]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.658572 ignition[1121]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.673834 ignition[1121]: INFO : PUT result: OK Oct 2 20:05:23.677171 ignition[1121]: DEBUG : parsed url from cmdline: "" Oct 2 20:05:23.677171 ignition[1121]: INFO : no config URL provided Oct 2 20:05:23.677171 ignition[1121]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:05:23.677171 ignition[1121]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 20:05:23.686669 ignition[1121]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.686669 ignition[1121]: INFO : PUT result: OK Oct 2 20:05:23.686669 ignition[1121]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 20:05:23.686669 ignition[1121]: INFO : GET result: OK Oct 2 20:05:23.686669 ignition[1121]: DEBUG : parsing config with SHA512: b42dc7b4508cbdb0f0b591c703f0d6578c4a61358803bd20409b0ae51b62a6b10c906efc6798ac8021e80c2f178d9ddfebf23f6f9c7f5868dfb17f397d69289b Oct 2 20:05:23.730862 unknown[1121]: fetched base config from "system" Oct 2 20:05:23.730877 unknown[1121]: fetched base config from "system" Oct 2 20:05:23.731944 ignition[1121]: fetch: fetch complete Oct 2 20:05:23.730886 unknown[1121]: fetched user config from "aws" Oct 2 20:05:23.731952 ignition[1121]: fetch: fetch passed Oct 2 20:05:23.732013 ignition[1121]: Ignition finished successfully Oct 2 20:05:23.739667 systemd[1]: Finished ignition-fetch.service. Oct 2 20:05:23.748399 kernel: audit: type=1130 audit(1696277123.740:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.741734 systemd[1]: Starting ignition-kargs.service... Oct 2 20:05:23.762199 ignition[1127]: Ignition 2.14.0 Oct 2 20:05:23.762223 ignition[1127]: Stage: kargs Oct 2 20:05:23.762503 ignition[1127]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.762536 ignition[1127]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.772042 ignition[1127]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.773831 ignition[1127]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.775449 ignition[1127]: INFO : PUT result: OK Oct 2 20:05:23.778804 ignition[1127]: kargs: kargs passed Oct 2 20:05:23.778870 ignition[1127]: Ignition finished successfully Oct 2 20:05:23.781276 systemd[1]: Finished ignition-kargs.service. Oct 2 20:05:23.788648 kernel: audit: type=1130 audit(1696277123.781:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.783028 systemd[1]: Starting ignition-disks.service... Oct 2 20:05:23.795059 ignition[1133]: Ignition 2.14.0 Oct 2 20:05:23.795073 ignition[1133]: Stage: disks Oct 2 20:05:23.795291 ignition[1133]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.795322 ignition[1133]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.805990 ignition[1133]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.807576 ignition[1133]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.809993 ignition[1133]: INFO : PUT result: OK Oct 2 20:05:23.813282 ignition[1133]: disks: disks passed Oct 2 20:05:23.814365 ignition[1133]: Ignition finished successfully Oct 2 20:05:23.816400 systemd[1]: Finished ignition-disks.service. Oct 2 20:05:23.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.816894 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:05:23.826180 kernel: audit: type=1130 audit(1696277123.816:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.823825 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:23.825248 systemd[1]: Reached target local-fs.target. Oct 2 20:05:23.827256 systemd[1]: Reached target sysinit.target. Oct 2 20:05:23.829585 systemd[1]: Reached target basic.target. Oct 2 20:05:23.833078 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:05:23.886060 systemd-fsck[1141]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 20:05:23.893343 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:05:23.899435 systemd[1]: Mounting sysroot.mount... Oct 2 20:05:23.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.910263 kernel: audit: type=1130 audit(1696277123.895:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.923744 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:05:23.925130 systemd[1]: Mounted sysroot.mount. Oct 2 20:05:23.929339 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:05:23.935723 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:05:23.939393 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:05:23.939635 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:05:23.939675 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:05:23.956809 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:05:23.975284 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:23.978848 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:05:23.997288 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1158) Oct 2 20:05:24.002255 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:24.002319 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:24.002332 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:24.002343 initrd-setup-root[1163]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:05:24.014408 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:24.017073 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:24.023660 initrd-setup-root[1189]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:05:24.043033 initrd-setup-root[1197]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:05:24.049175 initrd-setup-root[1205]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:05:24.256370 systemd-networkd[1095]: eth0: Gained IPv6LL Oct 2 20:05:24.310462 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:05:24.319071 kernel: audit: type=1130 audit(1696277124.310:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.310000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.311618 systemd[1]: Starting ignition-mount.service... Oct 2 20:05:24.322208 systemd[1]: Starting sysroot-boot.service... Oct 2 20:05:24.326971 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:24.328589 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:24.344633 ignition[1224]: INFO : Ignition 2.14.0 Oct 2 20:05:24.344633 ignition[1224]: INFO : Stage: mount Oct 2 20:05:24.346960 ignition[1224]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:24.346960 ignition[1224]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:24.365877 ignition[1224]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:24.365877 ignition[1224]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:24.369398 ignition[1224]: INFO : PUT result: OK Oct 2 20:05:24.372521 systemd[1]: Finished sysroot-boot.service. Oct 2 20:05:24.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.381247 kernel: audit: type=1130 audit(1696277124.374:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.383489 ignition[1224]: INFO : mount: mount passed Oct 2 20:05:24.384760 ignition[1224]: INFO : Ignition finished successfully Oct 2 20:05:24.386454 systemd[1]: Finished ignition-mount.service. Oct 2 20:05:24.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.389881 systemd[1]: Starting ignition-files.service... Oct 2 20:05:24.410060 kernel: audit: type=1130 audit(1696277124.388:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.418537 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:24.433238 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1233) Oct 2 20:05:24.436860 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:24.436931 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:24.436950 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:24.444239 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:24.446629 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:24.465919 ignition[1252]: INFO : Ignition 2.14.0 Oct 2 20:05:24.465919 ignition[1252]: INFO : Stage: files Oct 2 20:05:24.468137 ignition[1252]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:24.468137 ignition[1252]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:24.482359 ignition[1252]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:24.484331 ignition[1252]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:24.486636 ignition[1252]: INFO : PUT result: OK Oct 2 20:05:24.513312 ignition[1252]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:05:24.522823 ignition[1252]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:05:24.522823 ignition[1252]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:05:24.541837 ignition[1252]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:05:24.543903 ignition[1252]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:05:24.546066 unknown[1252]: wrote ssh authorized keys file for user: core Oct 2 20:05:24.547728 ignition[1252]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:05:24.547728 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:05:24.547728 ignition[1252]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.3.0/cni-plugins-linux-amd64-v1.3.0.tgz: attempt #1 Oct 2 20:05:24.900886 ignition[1252]: INFO : GET result: OK Oct 2 20:05:25.143504 ignition[1252]: DEBUG : file matches expected sum of: 5d0324ca8a3c90c680b6e1fddb245a2255582fa15949ba1f3c6bb7323df9d3af754dae98d6e40ac9ccafb2999c932df2c4288d418949a4915d928eb23c090540 Oct 2 20:05:25.143504 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.3.0.tgz" Oct 2 20:05:25.143504 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:05:25.143504 ignition[1252]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.27.0/crictl-v1.27.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:25.420120 ignition[1252]: INFO : GET result: OK Oct 2 20:05:25.774426 ignition[1252]: DEBUG : file matches expected sum of: aa622325bf05520939f9e020d7a28ab48ac23e2fae6f47d5a4e52174c88c1ebc31b464853e4fd65bd8f5331f330a6ca96fd370d247d3eeaed042da4ee2d1219a Oct 2 20:05:25.777629 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.27.0-linux-amd64.tar.gz" Oct 2 20:05:25.777629 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:25.777629 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:25.777629 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:25.777629 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:25.791314 ignition[1252]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2975167749" Oct 2 20:05:25.795967 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1252) Oct 2 20:05:25.795999 ignition[1252]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2975167749": device or resource busy Oct 2 20:05:25.795999 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2975167749", trying btrfs: device or resource busy Oct 2 20:05:25.795999 ignition[1252]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2975167749" Oct 2 20:05:25.805025 ignition[1252]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2975167749" Oct 2 20:05:25.810419 ignition[1252]: INFO : op(3): [started] unmounting "/mnt/oem2975167749" Oct 2 20:05:25.811677 systemd[1]: mnt-oem2975167749.mount: Deactivated successfully. Oct 2 20:05:25.813675 ignition[1252]: INFO : op(3): [finished] unmounting "/mnt/oem2975167749" Oct 2 20:05:25.813675 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:25.813675 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:25.813675 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:05:25.903498 ignition[1252]: INFO : GET result: OK Oct 2 20:05:27.227442 ignition[1252]: DEBUG : file matches expected sum of: f4daad200c8378dfdc6cb69af28eaca4215f2b4a2dbdf75f29f9210171cb5683bc873fc000319022e6b3ad61175475d77190734713ba9136644394e8a8faafa1 Oct 2 20:05:27.230752 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:27.230752 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:27.230752 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:05:27.280032 ignition[1252]: INFO : GET result: OK Oct 2 20:05:29.616313 ignition[1252]: DEBUG : file matches expected sum of: ce6ba764274162d38ac1c44e1fb1f0f835346f3afc5b508bb755b1b7d7170910f5812b0a1941b32e29d950e905bbd08ae761c87befad921db4d44969c8562e75 Oct 2 20:05:29.619494 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:29.619494 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:29.619494 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.28.1/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:05:29.683064 ignition[1252]: INFO : GET result: OK Oct 2 20:05:30.592201 ignition[1252]: DEBUG : file matches expected sum of: 33cf3f6e37bcee4dff7ce14ab933c605d07353d4e31446dd2b52c3f05e0b150b60e531f6069f112d8a76331322a72b593537531e62104cfc7c70cb03d46f76b3 Oct 2 20:05:30.595893 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:30.595893 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:30.595893 ignition[1252]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:30.684638 ignition[1252]: INFO : GET result: OK Oct 2 20:05:30.856992 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:30.856992 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:30.861834 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:30.861834 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:30.866561 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:30.869317 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:30.871852 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:30.889668 ignition[1252]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3067762554" Oct 2 20:05:30.893624 ignition[1252]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3067762554": device or resource busy Oct 2 20:05:30.893624 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3067762554", trying btrfs: device or resource busy Oct 2 20:05:30.893624 ignition[1252]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3067762554" Oct 2 20:05:30.901178 ignition[1252]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3067762554" Oct 2 20:05:30.904118 ignition[1252]: INFO : op(6): [started] unmounting "/mnt/oem3067762554" Oct 2 20:05:30.907327 ignition[1252]: INFO : op(6): [finished] unmounting "/mnt/oem3067762554" Oct 2 20:05:30.911752 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:30.911752 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:30.911752 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:30.908970 systemd[1]: mnt-oem3067762554.mount: Deactivated successfully. Oct 2 20:05:30.924302 ignition[1252]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2995744039" Oct 2 20:05:30.926056 ignition[1252]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2995744039": device or resource busy Oct 2 20:05:30.926056 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2995744039", trying btrfs: device or resource busy Oct 2 20:05:30.926056 ignition[1252]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2995744039" Oct 2 20:05:30.932932 ignition[1252]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2995744039" Oct 2 20:05:30.932932 ignition[1252]: INFO : op(9): [started] unmounting "/mnt/oem2995744039" Oct 2 20:05:30.932932 ignition[1252]: INFO : op(9): [finished] unmounting "/mnt/oem2995744039" Oct 2 20:05:30.932932 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:30.932932 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:30.932932 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:30.958286 ignition[1252]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem786252282" Oct 2 20:05:30.960264 ignition[1252]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem786252282": device or resource busy Oct 2 20:05:30.960264 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem786252282", trying btrfs: device or resource busy Oct 2 20:05:30.960264 ignition[1252]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem786252282" Oct 2 20:05:30.977007 ignition[1252]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem786252282" Oct 2 20:05:30.979607 ignition[1252]: INFO : op(c): [started] unmounting "/mnt/oem786252282" Oct 2 20:05:30.980178 systemd[1]: mnt-oem786252282.mount: Deactivated successfully. Oct 2 20:05:30.988157 ignition[1252]: INFO : op(c): [finished] unmounting "/mnt/oem786252282" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 20:05:30.990514 ignition[1252]: INFO : files: op(18): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:31.045868 kernel: audit: type=1130 audit(1696277131.034:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(18): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(19): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(19): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(1a): [started] setting preset to enabled for "nvidia.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(1a): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(1b): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(1b): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(1c): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: op(1c): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:31.045964 ignition[1252]: INFO : files: files passed Oct 2 20:05:31.045964 ignition[1252]: INFO : Ignition finished successfully Oct 2 20:05:31.027885 systemd[1]: Finished ignition-files.service. Oct 2 20:05:31.071423 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:05:31.074658 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:05:31.076456 systemd[1]: Starting ignition-quench.service... Oct 2 20:05:31.111203 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:05:31.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.111321 systemd[1]: Finished ignition-quench.service. Oct 2 20:05:31.133774 kernel: audit: type=1130 audit(1696277131.111:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.133813 kernel: audit: type=1131 audit(1696277131.111:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.136930 initrd-setup-root-after-ignition[1277]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:05:31.138420 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:05:31.155461 kernel: audit: type=1130 audit(1696277131.146:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.146481 systemd[1]: Reached target ignition-complete.target. Oct 2 20:05:31.156602 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:05:31.180516 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:05:31.180752 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:05:31.197252 kernel: audit: type=1130 audit(1696277131.182:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.197291 kernel: audit: type=1131 audit(1696277131.188:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.188000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.195055 systemd[1]: Reached target initrd-fs.target. Oct 2 20:05:31.197566 systemd[1]: Reached target initrd.target. Oct 2 20:05:31.201624 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:05:31.206354 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:05:31.228328 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:05:31.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.231750 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:05:31.236286 kernel: audit: type=1130 audit(1696277131.230:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.249424 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:05:31.251671 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:05:31.254019 systemd[1]: Stopped target timers.target. Oct 2 20:05:31.256013 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:05:31.257445 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:05:31.259000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.262397 systemd[1]: Stopped target initrd.target. Oct 2 20:05:31.266631 kernel: audit: type=1131 audit(1696277131.259:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.264983 systemd[1]: Stopped target basic.target. Oct 2 20:05:31.267728 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:05:31.270210 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:05:31.274858 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:05:31.278355 systemd[1]: Stopped target remote-fs.target. Oct 2 20:05:31.287413 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:05:31.291196 systemd[1]: Stopped target sysinit.target. Oct 2 20:05:31.294144 systemd[1]: Stopped target local-fs.target. Oct 2 20:05:31.298194 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:05:31.301838 systemd[1]: Stopped target swap.target. Oct 2 20:05:31.306350 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:05:31.306547 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:05:31.313493 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:05:31.312000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.322883 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:05:31.327409 kernel: audit: type=1131 audit(1696277131.312:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.327505 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:05:31.329000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.329995 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:05:31.330256 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:05:31.340084 kernel: audit: type=1131 audit(1696277131.329:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.340000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.340312 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:05:31.341670 systemd[1]: Stopped ignition-files.service. Oct 2 20:05:31.344000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.345530 systemd[1]: Stopping ignition-mount.service... Oct 2 20:05:31.350000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.348322 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:05:31.348453 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:05:31.351291 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:05:31.354701 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:05:31.365000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.354837 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:05:31.361036 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:05:31.361404 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:05:31.377236 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:05:31.377683 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:05:31.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.395260 ignition[1290]: INFO : Ignition 2.14.0 Oct 2 20:05:31.395260 ignition[1290]: INFO : Stage: umount Oct 2 20:05:31.398719 ignition[1290]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:31.398719 ignition[1290]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:31.416576 ignition[1290]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:31.419323 ignition[1290]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:31.421814 ignition[1290]: INFO : PUT result: OK Oct 2 20:05:31.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.419951 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:05:31.420067 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:05:31.427737 ignition[1290]: INFO : umount: umount passed Oct 2 20:05:31.429862 ignition[1290]: INFO : Ignition finished successfully Oct 2 20:05:31.430115 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:05:31.430415 systemd[1]: Stopped ignition-mount.service. Oct 2 20:05:31.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.434804 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:05:31.434862 systemd[1]: Stopped ignition-disks.service. Oct 2 20:05:31.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.440407 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:05:31.440465 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:05:31.443000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.445513 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:05:31.445582 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:05:31.447000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.452000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.448579 systemd[1]: Stopped target network.target. Oct 2 20:05:31.450819 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:05:31.450879 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:05:31.453654 systemd[1]: Stopped target paths.target. Oct 2 20:05:31.454872 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:05:31.458490 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:05:31.460906 systemd[1]: Stopped target slices.target. Oct 2 20:05:31.462904 systemd[1]: Stopped target sockets.target. Oct 2 20:05:31.465643 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:05:31.465684 systemd[1]: Closed iscsid.socket. Oct 2 20:05:31.468579 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:05:31.468610 systemd[1]: Closed iscsiuio.socket. Oct 2 20:05:31.471413 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:05:31.474000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.471471 systemd[1]: Stopped ignition-setup.service. Oct 2 20:05:31.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.475300 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:05:31.475353 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:05:31.477447 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:05:31.481445 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:05:31.483270 systemd-networkd[1095]: eth0: DHCPv6 lease lost Oct 2 20:05:31.493713 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:05:31.494954 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:05:31.502000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.502749 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:05:31.502914 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:05:31.505000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.506579 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:05:31.506624 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:05:31.512000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:05:31.512000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:05:31.509302 systemd[1]: Stopping network-cleanup.service... Oct 2 20:05:31.515546 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:05:31.517348 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:05:31.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.522626 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:05:31.522713 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:05:31.535000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.537000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.536047 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:05:31.536106 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:05:31.539819 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:05:31.543920 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:05:31.545370 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:05:31.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.548743 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:05:31.548799 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:05:31.551649 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:05:31.551711 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:05:31.556374 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:05:31.556431 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:05:31.558000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.558611 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:05:31.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.560000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.558651 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:05:31.560766 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:05:31.560808 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:05:31.561677 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:05:31.571056 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:05:31.571139 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:05:31.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.575387 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:05:31.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.575482 systemd[1]: Stopped network-cleanup.service. Oct 2 20:05:31.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.577699 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:05:31.577782 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:05:31.580314 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:05:31.591901 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:05:31.613162 systemd[1]: Switching root. Oct 2 20:05:31.641959 systemd-journald[185]: Journal stopped Oct 2 20:05:37.733019 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 20:05:37.733112 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:05:37.733134 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:05:37.733342 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:05:37.733366 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:05:37.733385 kernel: SELinux: policy capability open_perms=1 Oct 2 20:05:37.733402 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:05:37.733425 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:05:37.739336 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:05:37.739379 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:05:37.739398 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:05:37.739415 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:05:37.739441 systemd[1]: Successfully loaded SELinux policy in 101.706ms. Oct 2 20:05:37.739470 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 10.099ms. Oct 2 20:05:37.739498 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:37.739522 systemd[1]: Detected virtualization amazon. Oct 2 20:05:37.739539 systemd[1]: Detected architecture x86-64. Oct 2 20:05:37.739561 systemd[1]: Detected first boot. Oct 2 20:05:37.739581 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:37.740852 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:05:37.740888 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:37.740914 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:37.740939 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:37.740969 kernel: kauditd_printk_skb: 37 callbacks suppressed Oct 2 20:05:37.740993 kernel: audit: type=1334 audit(1696277137.355:82): prog-id=12 op=LOAD Oct 2 20:05:37.741014 kernel: audit: type=1334 audit(1696277137.355:83): prog-id=3 op=UNLOAD Oct 2 20:05:37.741036 kernel: audit: type=1334 audit(1696277137.356:84): prog-id=13 op=LOAD Oct 2 20:05:37.741056 kernel: audit: type=1334 audit(1696277137.359:85): prog-id=14 op=LOAD Oct 2 20:05:37.741078 kernel: audit: type=1334 audit(1696277137.359:86): prog-id=4 op=UNLOAD Oct 2 20:05:37.741100 kernel: audit: type=1334 audit(1696277137.359:87): prog-id=5 op=UNLOAD Oct 2 20:05:37.741123 kernel: audit: type=1131 audit(1696277137.362:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.741150 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:05:37.741173 systemd[1]: Stopped iscsiuio.service. Oct 2 20:05:37.741197 kernel: audit: type=1131 audit(1696277137.374:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.741235 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:05:37.741254 systemd[1]: Stopped iscsid.service. Oct 2 20:05:37.741271 kernel: audit: type=1334 audit(1696277137.382:90): prog-id=12 op=UNLOAD Oct 2 20:05:37.741289 kernel: audit: type=1131 audit(1696277137.385:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.741306 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:05:37.741342 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:05:37.741362 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:05:37.741380 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:05:37.741397 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:05:37.741416 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 20:05:37.741434 systemd[1]: Created slice system-getty.slice. Oct 2 20:05:37.741454 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:05:37.741477 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:05:37.741497 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:05:37.741516 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:05:37.741535 systemd[1]: Created slice user.slice. Oct 2 20:05:37.741556 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:37.741576 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:05:37.741595 systemd[1]: Set up automount boot.automount. Oct 2 20:05:37.741614 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:05:37.741632 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:05:37.741656 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:05:37.741692 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:05:37.741713 systemd[1]: Reached target integritysetup.target. Oct 2 20:05:37.741732 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:37.741751 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:37.741770 systemd[1]: Reached target slices.target. Oct 2 20:05:37.741790 systemd[1]: Reached target swap.target. Oct 2 20:05:37.741808 systemd[1]: Reached target torcx.target. Oct 2 20:05:37.741828 systemd[1]: Reached target veritysetup.target. Oct 2 20:05:37.741846 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:05:37.741869 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:05:37.741889 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:37.741907 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:37.741927 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:37.741950 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:05:37.741976 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:05:37.741998 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:05:37.742017 systemd[1]: Mounting media.mount... Oct 2 20:05:37.742036 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:37.742055 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:05:37.742073 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:05:37.742093 systemd[1]: Mounting tmp.mount... Oct 2 20:05:37.742115 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:05:37.742135 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:05:37.742158 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:37.742177 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:05:37.742197 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:05:37.742233 systemd[1]: Starting modprobe@drm.service... Oct 2 20:05:37.742251 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:05:37.742408 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:05:37.742476 systemd[1]: Starting modprobe@loop.service... Oct 2 20:05:37.742500 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:05:37.742525 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:05:37.742544 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:05:37.742564 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:05:37.742584 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:05:37.742602 systemd[1]: Stopped systemd-journald.service. Oct 2 20:05:37.742621 kernel: loop: module loaded Oct 2 20:05:37.742642 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:37.742661 kernel: fuse: init (API version 7.34) Oct 2 20:05:37.742680 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:37.742699 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:05:37.742721 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:05:37.742740 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:37.742760 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:05:37.742780 systemd[1]: Stopped verity-setup.service. Oct 2 20:05:37.742800 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:37.742819 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:05:37.742840 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:05:37.742860 systemd[1]: Mounted media.mount. Oct 2 20:05:37.742881 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:05:37.742902 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:05:37.742921 systemd[1]: Mounted tmp.mount. Oct 2 20:05:37.742941 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:37.742962 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:05:37.742981 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:05:37.743004 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:05:37.743023 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:05:37.743043 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:05:37.743063 systemd[1]: Finished modprobe@drm.service. Oct 2 20:05:37.743082 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:05:37.743102 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:05:37.743121 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:05:37.743142 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:05:37.743164 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:05:37.743182 systemd[1]: Finished modprobe@loop.service. Oct 2 20:05:37.743201 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:37.745273 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:05:37.745311 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:05:37.745332 systemd[1]: Reached target network-pre.target. Oct 2 20:05:37.745362 systemd-journald[1399]: Journal started Oct 2 20:05:37.745436 systemd-journald[1399]: Runtime Journal (/run/log/journal/ec2de0ab10ca425edc043d0f0fcfc77d) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:32.504000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:05:32.682000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:32.682000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:32.682000 audit: BPF prog-id=10 op=LOAD Oct 2 20:05:32.682000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:05:32.682000 audit: BPF prog-id=11 op=LOAD Oct 2 20:05:32.682000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:05:37.355000 audit: BPF prog-id=12 op=LOAD Oct 2 20:05:37.355000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:05:37.356000 audit: BPF prog-id=13 op=LOAD Oct 2 20:05:37.359000 audit: BPF prog-id=14 op=LOAD Oct 2 20:05:37.359000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:05:37.359000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:05:37.362000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.374000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.382000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:05:37.385000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.394000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.394000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.603000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.630000 audit: BPF prog-id=15 op=LOAD Oct 2 20:05:37.630000 audit: BPF prog-id=16 op=LOAD Oct 2 20:05:37.754687 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:05:37.630000 audit: BPF prog-id=17 op=LOAD Oct 2 20:05:37.630000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:05:37.631000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:05:37.663000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.702000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.702000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.707000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.714000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.724000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:05:37.724000 audit[1399]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7fffc7b44d30 a2=4000 a3=7fffc7b44dcc items=0 ppid=1 pid=1399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:37.724000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:05:37.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.727000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:32.888933 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:37.350620 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:05:32.889787 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:37.362686 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:05:32.889833 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:32.889878 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:05:32.889895 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:05:32.889996 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:05:32.890017 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:05:32.890385 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:05:32.890443 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:32.890464 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:32.891453 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:05:37.757276 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:05:32.891506 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:05:32.891534 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:05:32.891558 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:05:32.891585 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:05:32.891607 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:05:36.508682 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.508960 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.509079 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.509328 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.509378 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:05:36.509500 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:05:37.766910 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:05:37.770242 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:05:37.776343 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:05:37.783749 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:05:37.786248 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:05:37.792506 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:37.796911 systemd[1]: Started systemd-journald.service. Oct 2 20:05:37.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.798782 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:05:37.800838 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:05:37.805853 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:05:37.815147 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:05:37.816595 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:05:37.816000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.829364 systemd-journald[1399]: Time spent on flushing to /var/log/journal/ec2de0ab10ca425edc043d0f0fcfc77d is 67.707ms for 1199 entries. Oct 2 20:05:37.829364 systemd-journald[1399]: System Journal (/var/log/journal/ec2de0ab10ca425edc043d0f0fcfc77d) is 8.0M, max 195.6M, 187.6M free. Oct 2 20:05:37.947546 systemd-journald[1399]: Received client request to flush runtime journal. Oct 2 20:05:37.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.838128 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:37.873492 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:05:37.949066 udevadm[1439]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Oct 2 20:05:37.876352 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:05:37.894648 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:37.897607 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:05:37.949199 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:05:37.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.990397 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:05:37.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.776000 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:05:38.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.777000 audit: BPF prog-id=18 op=LOAD Oct 2 20:05:38.778000 audit: BPF prog-id=19 op=LOAD Oct 2 20:05:38.778000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:05:38.778000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:05:38.779087 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:38.801987 systemd-udevd[1441]: Using default interface naming scheme 'v252'. Oct 2 20:05:38.881395 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:38.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.884000 audit: BPF prog-id=20 op=LOAD Oct 2 20:05:38.885656 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:38.930000 audit: BPF prog-id=21 op=LOAD Oct 2 20:05:38.930000 audit: BPF prog-id=22 op=LOAD Oct 2 20:05:38.931000 audit: BPF prog-id=23 op=LOAD Oct 2 20:05:38.932642 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:05:38.974453 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:05:38.999983 systemd[1]: Started systemd-userdbd.service. Oct 2 20:05:39.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.023122 (udev-worker)[1454]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:39.077239 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Oct 2 20:05:39.095249 kernel: ACPI: button: Power Button [PWRF] Oct 2 20:05:39.099282 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input3 Oct 2 20:05:39.109245 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 20:05:39.156152 systemd-networkd[1447]: lo: Link UP Oct 2 20:05:39.156793 systemd-networkd[1447]: lo: Gained carrier Oct 2 20:05:39.158189 systemd-networkd[1447]: Enumeration completed Oct 2 20:05:39.158544 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:39.158679 systemd-networkd[1447]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:39.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.161663 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:05:39.124000 audit[1456]: AVC avc: denied { confidentiality } for pid=1456 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:05:39.166475 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:05:39.166080 systemd-networkd[1447]: eth0: Link UP Oct 2 20:05:39.166794 systemd-networkd[1447]: eth0: Gained carrier Oct 2 20:05:39.179458 systemd-networkd[1447]: eth0: DHCPv4 address 172.31.27.142/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:39.124000 audit[1456]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=56051fa39560 a1=32194 a2=7efd41888bc5 a3=5 items=106 ppid=1441 pid=1456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:39.124000 audit: CWD cwd="/" Oct 2 20:05:39.124000 audit: PATH item=0 name=(null) inode=14838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=1 name=(null) inode=14849 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=2 name=(null) inode=14838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=3 name=(null) inode=14850 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=4 name=(null) inode=14838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=5 name=(null) inode=14851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=6 name=(null) inode=14851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=7 name=(null) inode=14852 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=8 name=(null) inode=14851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=9 name=(null) inode=14853 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=10 name=(null) inode=14851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=11 name=(null) inode=14854 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=12 name=(null) inode=14851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=13 name=(null) inode=14855 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=14 name=(null) inode=14851 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=15 name=(null) inode=14856 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=16 name=(null) inode=14838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=17 name=(null) inode=14857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=18 name=(null) inode=14857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=19 name=(null) inode=14858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=20 name=(null) inode=14857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=21 name=(null) inode=14859 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=22 name=(null) inode=14857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=23 name=(null) inode=14860 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=24 name=(null) inode=14857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=25 name=(null) inode=14861 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=26 name=(null) inode=14857 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=27 name=(null) inode=14862 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=28 name=(null) inode=14838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=29 name=(null) inode=14863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=30 name=(null) inode=14863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=31 name=(null) inode=14864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=32 name=(null) inode=14863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=33 name=(null) inode=14865 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=34 name=(null) inode=14863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=35 name=(null) inode=14866 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=36 name=(null) inode=14863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=37 name=(null) inode=14867 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=38 name=(null) inode=14863 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=39 name=(null) inode=14868 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=40 name=(null) inode=14838 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=41 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=42 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=43 name=(null) inode=14870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=44 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=45 name=(null) inode=14871 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=46 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=47 name=(null) inode=14872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=48 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=49 name=(null) inode=14873 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=50 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=51 name=(null) inode=14874 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=52 name=(null) inode=1042 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=53 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=54 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=55 name=(null) inode=14876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=56 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=57 name=(null) inode=14877 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=58 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=59 name=(null) inode=14878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=60 name=(null) inode=14878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=61 name=(null) inode=14879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=62 name=(null) inode=14878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=63 name=(null) inode=14880 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=64 name=(null) inode=14878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=65 name=(null) inode=14881 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=66 name=(null) inode=14878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=67 name=(null) inode=14882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=68 name=(null) inode=14878 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=69 name=(null) inode=14883 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=70 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=71 name=(null) inode=14884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=72 name=(null) inode=14884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=73 name=(null) inode=14885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=74 name=(null) inode=14884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=75 name=(null) inode=14886 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=76 name=(null) inode=14884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=77 name=(null) inode=14887 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=78 name=(null) inode=14884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=79 name=(null) inode=14888 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=80 name=(null) inode=14884 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=81 name=(null) inode=14889 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=82 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=83 name=(null) inode=14890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=84 name=(null) inode=14890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=85 name=(null) inode=14891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=86 name=(null) inode=14890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=87 name=(null) inode=14892 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=88 name=(null) inode=14890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=89 name=(null) inode=14893 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=90 name=(null) inode=14890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=91 name=(null) inode=14894 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=92 name=(null) inode=14890 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=93 name=(null) inode=14895 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=94 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=95 name=(null) inode=14896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=96 name=(null) inode=14896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=97 name=(null) inode=14897 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=98 name=(null) inode=14896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=99 name=(null) inode=14898 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=100 name=(null) inode=14896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=101 name=(null) inode=14899 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=102 name=(null) inode=14896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=103 name=(null) inode=14900 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=104 name=(null) inode=14896 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PATH item=105 name=(null) inode=14901 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.124000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:05:39.212382 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 20:05:39.240498 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input4 Oct 2 20:05:39.252638 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:05:39.326248 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1443) Oct 2 20:05:39.451008 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:39.499670 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:05:39.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.502479 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:05:39.557157 lvm[1555]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:39.590033 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:05:39.591000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.591764 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:39.595412 systemd[1]: Starting lvm2-activation.service... Oct 2 20:05:39.607755 lvm[1556]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:39.645738 systemd[1]: Finished lvm2-activation.service. Oct 2 20:05:39.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.647143 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:39.648997 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:05:39.649037 systemd[1]: Reached target local-fs.target. Oct 2 20:05:39.651241 systemd[1]: Reached target machines.target. Oct 2 20:05:39.654063 systemd[1]: Starting ldconfig.service... Oct 2 20:05:39.656100 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.656184 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:39.658011 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:05:39.660763 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:05:39.665287 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:05:39.666756 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.666832 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.668495 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:05:39.703486 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1558 (bootctl) Oct 2 20:05:39.705913 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:05:39.709325 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:05:39.711000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.739396 systemd-tmpfiles[1561]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:05:39.799267 systemd-tmpfiles[1561]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:05:39.830047 systemd-tmpfiles[1561]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:05:39.862121 systemd-fsck[1566]: fsck.fat 4.2 (2021-01-31) Oct 2 20:05:39.862121 systemd-fsck[1566]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 20:05:39.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.866486 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:05:39.872182 systemd[1]: Mounting boot.mount... Oct 2 20:05:39.897238 systemd[1]: Mounted boot.mount. Oct 2 20:05:39.947162 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:05:39.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.081161 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:05:40.084410 systemd[1]: Starting audit-rules.service... Oct 2 20:05:40.087859 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:05:40.094000 audit: BPF prog-id=24 op=LOAD Oct 2 20:05:40.091264 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:05:40.096663 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:40.099000 audit: BPF prog-id=25 op=LOAD Oct 2 20:05:40.101385 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:05:40.107806 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:05:40.122493 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:05:40.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.124078 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:05:40.127000 audit[1585]: SYSTEM_BOOT pid=1585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.142301 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:05:40.143000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.248593 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:05:40.250000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.280975 systemd-resolved[1583]: Positive Trust Anchors: Oct 2 20:05:40.280991 systemd-resolved[1583]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:40.281362 systemd-resolved[1583]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:40.291065 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:05:40.293156 systemd[1]: Reached target time-set.target. Oct 2 20:05:40.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.294000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:05:40.294000 audit[1600]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcdc902140 a2=420 a3=0 items=0 ppid=1580 pid=1600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:40.294000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:05:40.295491 augenrules[1600]: No rules Oct 2 20:05:40.296560 systemd[1]: Finished audit-rules.service. Oct 2 20:05:40.327487 systemd-resolved[1583]: Defaulting to hostname 'linux'. Oct 2 20:05:40.330975 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:40.332324 systemd[1]: Reached target network.target. Oct 2 20:05:40.333455 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:40.362059 systemd-timesyncd[1584]: Contacted time server 173.11.101.155:123 (0.flatcar.pool.ntp.org). Oct 2 20:05:40.362150 systemd-timesyncd[1584]: Initial clock synchronization to Mon 2023-10-02 20:05:40.615651 UTC. Oct 2 20:05:41.167963 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:05:41.169444 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:05:41.217414 systemd-networkd[1447]: eth0: Gained IPv6LL Oct 2 20:05:41.225479 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:05:41.227616 systemd[1]: Reached target network-online.target. Oct 2 20:05:41.259187 ldconfig[1557]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:05:41.304342 systemd[1]: Finished ldconfig.service. Oct 2 20:05:41.306992 systemd[1]: Starting systemd-update-done.service... Oct 2 20:05:41.326305 systemd[1]: Finished systemd-update-done.service. Oct 2 20:05:41.327699 systemd[1]: Reached target sysinit.target. Oct 2 20:05:41.328985 systemd[1]: Started motdgen.path. Oct 2 20:05:41.330471 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:05:41.332487 systemd[1]: Started logrotate.timer. Oct 2 20:05:41.333981 systemd[1]: Started mdadm.timer. Oct 2 20:05:41.335281 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:05:41.337389 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:05:41.337436 systemd[1]: Reached target paths.target. Oct 2 20:05:41.338420 systemd[1]: Reached target timers.target. Oct 2 20:05:41.344996 systemd[1]: Listening on dbus.socket. Oct 2 20:05:41.347796 systemd[1]: Starting docker.socket... Oct 2 20:05:41.354370 systemd[1]: Listening on sshd.socket. Oct 2 20:05:41.355954 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:41.356807 systemd[1]: Listening on docker.socket. Oct 2 20:05:41.358797 systemd[1]: Reached target sockets.target. Oct 2 20:05:41.360677 systemd[1]: Reached target basic.target. Oct 2 20:05:41.361665 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:41.361699 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:41.363269 systemd[1]: Started amazon-ssm-agent.service. Oct 2 20:05:41.367426 systemd[1]: Starting containerd.service... Oct 2 20:05:41.381643 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 20:05:41.388755 systemd[1]: Starting dbus.service... Oct 2 20:05:41.391779 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:05:41.395258 systemd[1]: Starting extend-filesystems.service... Oct 2 20:05:41.401577 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:05:41.406959 systemd[1]: Starting motdgen.service... Oct 2 20:05:41.410759 systemd[1]: Started nvidia.service. Oct 2 20:05:41.421309 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:05:41.425102 systemd[1]: Starting prepare-critools.service... Oct 2 20:05:41.429276 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:05:41.432319 systemd[1]: Starting sshd-keygen.service... Oct 2 20:05:41.442476 systemd[1]: Starting systemd-logind.service... Oct 2 20:05:41.443525 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:41.443605 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:05:41.444570 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:05:41.450453 systemd[1]: Starting update-engine.service... Oct 2 20:05:41.454872 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:05:41.551771 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:05:41.579539 jq[1626]: true Oct 2 20:05:41.551995 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:05:41.582182 jq[1616]: false Oct 2 20:05:41.581691 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:05:41.582009 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:05:41.635667 tar[1629]: ./ Oct 2 20:05:41.642207 tar[1628]: crictl Oct 2 20:05:41.643994 tar[1629]: ./loopback Oct 2 20:05:41.699703 extend-filesystems[1617]: Found nvme0n1 Oct 2 20:05:41.699703 extend-filesystems[1617]: Found nvme0n1p1 Oct 2 20:05:41.709596 extend-filesystems[1617]: Found nvme0n1p2 Oct 2 20:05:41.709596 extend-filesystems[1617]: Found nvme0n1p3 Oct 2 20:05:41.709596 extend-filesystems[1617]: Found usr Oct 2 20:05:41.709596 extend-filesystems[1617]: Found nvme0n1p4 Oct 2 20:05:41.709596 extend-filesystems[1617]: Found nvme0n1p6 Oct 2 20:05:41.709596 extend-filesystems[1617]: Found nvme0n1p7 Oct 2 20:05:41.709596 extend-filesystems[1617]: Found nvme0n1p9 Oct 2 20:05:41.709596 extend-filesystems[1617]: Checking size of /dev/nvme0n1p9 Oct 2 20:05:41.722678 jq[1638]: true Oct 2 20:05:41.741087 dbus-daemon[1615]: [system] SELinux support is enabled Oct 2 20:05:41.746412 systemd[1]: Started dbus.service. Oct 2 20:05:41.754992 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:05:41.755037 systemd[1]: Reached target system-config.target. Oct 2 20:05:41.759556 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:05:41.759584 systemd[1]: Reached target user-config.target. Oct 2 20:05:41.771771 extend-filesystems[1617]: Resized partition /dev/nvme0n1p9 Oct 2 20:05:41.788637 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:05:41.788857 systemd[1]: Finished motdgen.service. Oct 2 20:05:41.802433 extend-filesystems[1668]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 20:05:41.807903 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 20:05:41.829008 update_engine[1625]: I1002 20:05:41.827589 1625 main.cc:92] Flatcar Update Engine starting Oct 2 20:05:41.847905 dbus-daemon[1615]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.2' (uid=244 pid=1447 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:41.862208 update_engine[1625]: I1002 20:05:41.862159 1625 update_check_scheduler.cc:74] Next update check in 6m25s Oct 2 20:05:41.862393 systemd[1]: Starting systemd-hostnamed.service... Oct 2 20:05:41.863822 systemd[1]: Started update-engine.service. Oct 2 20:05:41.867297 systemd[1]: Started locksmithd.service. Oct 2 20:05:41.876403 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 20:05:41.920571 extend-filesystems[1668]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 20:05:41.920571 extend-filesystems[1668]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 20:05:41.920571 extend-filesystems[1668]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 20:05:41.923019 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:05:41.950528 bash[1679]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:41.950723 extend-filesystems[1617]: Resized filesystem in /dev/nvme0n1p9 Oct 2 20:05:41.952001 amazon-ssm-agent[1612]: 2023/10/02 20:05:41 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 20:05:41.952001 amazon-ssm-agent[1612]: Initializing new seelog logger Oct 2 20:05:41.952001 amazon-ssm-agent[1612]: New Seelog Logger Creation Complete Oct 2 20:05:41.952001 amazon-ssm-agent[1612]: 2023/10/02 20:05:41 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:41.952001 amazon-ssm-agent[1612]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:41.952001 amazon-ssm-agent[1612]: 2023/10/02 20:05:41 processing appconfig overrides Oct 2 20:05:41.923264 systemd[1]: Finished extend-filesystems.service. Oct 2 20:05:41.942366 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:05:41.971166 systemd-logind[1624]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 20:05:41.973344 systemd-logind[1624]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 20:05:41.973468 systemd-logind[1624]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:05:41.979293 systemd-logind[1624]: New seat seat0. Oct 2 20:05:42.022775 tar[1629]: ./bandwidth Oct 2 20:05:42.023876 env[1630]: time="2023-10-02T20:05:42.023679247Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:05:42.216804 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:05:42.254546 systemd[1]: Started systemd-logind.service. Oct 2 20:05:42.258994 env[1630]: time="2023-10-02T20:05:42.258717802Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:05:42.260860 env[1630]: time="2023-10-02T20:05:42.260824209Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.275046 env[1630]: time="2023-10-02T20:05:42.274987770Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:42.279535 env[1630]: time="2023-10-02T20:05:42.279486258Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.280663 env[1630]: time="2023-10-02T20:05:42.280619971Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:42.281490 env[1630]: time="2023-10-02T20:05:42.281442732Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.281789 env[1630]: time="2023-10-02T20:05:42.281763535Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:05:42.281882 env[1630]: time="2023-10-02T20:05:42.281868092Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.282110 env[1630]: time="2023-10-02T20:05:42.282090839Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.282966 env[1630]: time="2023-10-02T20:05:42.282941722Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.285799 env[1630]: time="2023-10-02T20:05:42.285760327Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:42.286884 env[1630]: time="2023-10-02T20:05:42.286856511Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:05:42.287086 env[1630]: time="2023-10-02T20:05:42.287065842Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:05:42.289530 env[1630]: time="2023-10-02T20:05:42.289503296Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:05:42.308037 env[1630]: time="2023-10-02T20:05:42.307956472Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:05:42.308587 env[1630]: time="2023-10-02T20:05:42.308558694Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:05:42.308764 env[1630]: time="2023-10-02T20:05:42.308741475Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:05:42.308916 env[1630]: time="2023-10-02T20:05:42.308900001Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.309047 env[1630]: time="2023-10-02T20:05:42.309032453Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.309123 env[1630]: time="2023-10-02T20:05:42.309109986Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.309194 env[1630]: time="2023-10-02T20:05:42.309178761Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.309289 env[1630]: time="2023-10-02T20:05:42.309274062Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.309914 env[1630]: time="2023-10-02T20:05:42.309887864Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.310087 env[1630]: time="2023-10-02T20:05:42.310068543Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.310456 env[1630]: time="2023-10-02T20:05:42.310431422Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.310950 env[1630]: time="2023-10-02T20:05:42.310922417Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:05:42.311193 env[1630]: time="2023-10-02T20:05:42.311173773Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:05:42.311448 env[1630]: time="2023-10-02T20:05:42.311429252Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:05:42.312109 env[1630]: time="2023-10-02T20:05:42.312087366Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.312423 env[1630]: time="2023-10-02T20:05:42.312400682Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.313213 env[1630]: time="2023-10-02T20:05:42.313188079Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:05:42.313811 env[1630]: time="2023-10-02T20:05:42.313713444Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.314368 env[1630]: time="2023-10-02T20:05:42.314276546Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.314827 env[1630]: time="2023-10-02T20:05:42.314803547Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.315473 env[1630]: time="2023-10-02T20:05:42.315448597Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.315772 env[1630]: time="2023-10-02T20:05:42.315750124Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.315956 env[1630]: time="2023-10-02T20:05:42.315936548Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.316483 env[1630]: time="2023-10-02T20:05:42.316459459Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.316608 env[1630]: time="2023-10-02T20:05:42.316592063Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.316801 env[1630]: time="2023-10-02T20:05:42.316712958Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:05:42.317245 env[1630]: time="2023-10-02T20:05:42.317212514Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.317381 env[1630]: time="2023-10-02T20:05:42.317363656Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.317493 env[1630]: time="2023-10-02T20:05:42.317476336Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.317658 env[1630]: time="2023-10-02T20:05:42.317641278Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:05:42.317931 env[1630]: time="2023-10-02T20:05:42.317906276Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:05:42.319517 env[1630]: time="2023-10-02T20:05:42.319491629Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:05:42.321344 env[1630]: time="2023-10-02T20:05:42.321315259Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:05:42.322518 env[1630]: time="2023-10-02T20:05:42.322477841Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.323480 env[1630]: time="2023-10-02T20:05:42.323342374Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:05:42.328383 env[1630]: time="2023-10-02T20:05:42.328310771Z" level=info msg="Connect containerd service" Oct 2 20:05:42.332312 env[1630]: time="2023-10-02T20:05:42.332275356Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:05:42.333705 env[1630]: time="2023-10-02T20:05:42.333630833Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:05:42.337396 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 20:05:42.337596 systemd[1]: Started systemd-hostnamed.service. Oct 2 20:05:42.343525 dbus-daemon[1615]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1682 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:42.344756 env[1630]: time="2023-10-02T20:05:42.344714587Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:05:42.344944 env[1630]: time="2023-10-02T20:05:42.344923534Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:05:42.345203 env[1630]: time="2023-10-02T20:05:42.345054924Z" level=info msg="containerd successfully booted in 0.356222s" Oct 2 20:05:42.345864 systemd[1]: Started containerd.service. Oct 2 20:05:42.350780 systemd[1]: Starting polkit.service... Oct 2 20:05:42.372220 tar[1629]: ./ptp Oct 2 20:05:42.382391 env[1630]: time="2023-10-02T20:05:42.336214733Z" level=info msg="Start subscribing containerd event" Oct 2 20:05:42.382859 env[1630]: time="2023-10-02T20:05:42.382833480Z" level=info msg="Start recovering state" Oct 2 20:05:42.384391 env[1630]: time="2023-10-02T20:05:42.384362424Z" level=info msg="Start event monitor" Oct 2 20:05:42.384552 env[1630]: time="2023-10-02T20:05:42.384527246Z" level=info msg="Start snapshots syncer" Oct 2 20:05:42.384628 env[1630]: time="2023-10-02T20:05:42.384616047Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:05:42.384706 env[1630]: time="2023-10-02T20:05:42.384681028Z" level=info msg="Start streaming server" Oct 2 20:05:42.402195 polkitd[1722]: Started polkitd version 121 Oct 2 20:05:42.433622 polkitd[1722]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 20:05:42.447386 polkitd[1722]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 20:05:42.449891 polkitd[1722]: Finished loading, compiling and executing 2 rules Oct 2 20:05:42.450759 dbus-daemon[1615]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 20:05:42.450964 systemd[1]: Started polkit.service. Oct 2 20:05:42.456518 polkitd[1722]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 20:05:42.491568 systemd-hostnamed[1682]: Hostname set to (transient) Oct 2 20:05:42.491691 systemd-resolved[1583]: System hostname changed to 'ip-172-31-27-142'. Oct 2 20:05:42.647294 tar[1629]: ./vlan Oct 2 20:05:42.719632 amazon-ssm-agent[1612]: 2023-10-02 20:05:42 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0775110cae063bc1f is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0775110cae063bc1f because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:05:42.719632 amazon-ssm-agent[1612]: status code: 400, request id: 23b69c8f-6271-49ef-937c-ba8fb7317f0b Oct 2 20:05:42.719632 amazon-ssm-agent[1612]: 2023-10-02 20:05:42 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 20:05:42.772759 coreos-metadata[1614]: Oct 02 20:05:42.764 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 20:05:42.773776 coreos-metadata[1614]: Oct 02 20:05:42.773 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 20:05:42.773965 coreos-metadata[1614]: Oct 02 20:05:42.773 INFO Fetch successful Oct 2 20:05:42.782342 coreos-metadata[1614]: Oct 02 20:05:42.774 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 20:05:42.782624 coreos-metadata[1614]: Oct 02 20:05:42.782 INFO Fetch successful Oct 2 20:05:42.785972 unknown[1614]: wrote ssh authorized keys file for user: core Oct 2 20:05:42.824432 update-ssh-keys[1790]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:42.825086 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 20:05:42.876542 tar[1629]: ./host-device Oct 2 20:05:43.056080 tar[1629]: ./tuning Oct 2 20:05:43.111148 tar[1629]: ./vrf Oct 2 20:05:43.197183 tar[1629]: ./sbr Oct 2 20:05:43.293928 tar[1629]: ./tap Oct 2 20:05:43.416205 tar[1629]: ./dhcp Oct 2 20:05:43.523959 systemd[1]: Finished prepare-critools.service. Oct 2 20:05:43.617850 tar[1629]: ./static Oct 2 20:05:43.660254 tar[1629]: ./firewall Oct 2 20:05:43.724006 tar[1629]: ./macvlan Oct 2 20:05:43.784160 tar[1629]: ./dummy Oct 2 20:05:43.862619 tar[1629]: ./bridge Oct 2 20:05:43.922461 tar[1629]: ./ipvlan Oct 2 20:05:43.981176 tar[1629]: ./portmap Oct 2 20:05:44.033524 tar[1629]: ./host-local Oct 2 20:05:44.131891 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:05:44.210411 locksmithd[1683]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:05:44.574609 sshd_keygen[1680]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:05:44.633468 systemd[1]: Finished sshd-keygen.service. Oct 2 20:05:44.636801 systemd[1]: Starting issuegen.service... Oct 2 20:05:44.643897 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:05:44.644113 systemd[1]: Finished issuegen.service. Oct 2 20:05:44.647130 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:05:44.658334 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:05:44.662178 systemd[1]: Started getty@tty1.service. Oct 2 20:05:44.665578 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:05:44.667133 systemd[1]: Reached target getty.target. Oct 2 20:05:44.668430 systemd[1]: Reached target multi-user.target. Oct 2 20:05:44.672173 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:05:44.684148 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:05:44.684351 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:05:44.685843 systemd[1]: Startup finished in 771ms (kernel) + 13.559s (initrd) + 12.295s (userspace) = 26.626s. Oct 2 20:05:49.763902 systemd[1]: Created slice system-sshd.slice. Oct 2 20:05:49.765834 systemd[1]: Started sshd@0-172.31.27.142:22-139.178.89.65:57644.service. Oct 2 20:05:49.948397 sshd[1824]: Accepted publickey for core from 139.178.89.65 port 57644 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:49.950909 sshd[1824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:49.966004 systemd[1]: Created slice user-500.slice. Oct 2 20:05:49.968511 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:05:49.981696 systemd-logind[1624]: New session 1 of user core. Oct 2 20:05:50.001762 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:05:50.011133 systemd[1]: Starting user@500.service... Oct 2 20:05:50.025669 (systemd)[1827]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.142767 systemd[1827]: Queued start job for default target default.target. Oct 2 20:05:50.143418 systemd[1827]: Reached target paths.target. Oct 2 20:05:50.143866 systemd[1827]: Reached target sockets.target. Oct 2 20:05:50.143888 systemd[1827]: Reached target timers.target. Oct 2 20:05:50.143905 systemd[1827]: Reached target basic.target. Oct 2 20:05:50.144032 systemd[1]: Started user@500.service. Oct 2 20:05:50.146567 systemd[1]: Started session-1.scope. Oct 2 20:05:50.147968 systemd[1827]: Reached target default.target. Oct 2 20:05:50.148432 systemd[1827]: Startup finished in 100ms. Oct 2 20:05:50.295371 systemd[1]: Started sshd@1-172.31.27.142:22-139.178.89.65:57650.service. Oct 2 20:05:50.472850 sshd[1836]: Accepted publickey for core from 139.178.89.65 port 57650 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:50.474579 sshd[1836]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.484354 systemd-logind[1624]: New session 2 of user core. Oct 2 20:05:50.484817 systemd[1]: Started session-2.scope. Oct 2 20:05:50.624204 sshd[1836]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:50.628034 systemd-logind[1624]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:05:50.628253 systemd[1]: sshd@1-172.31.27.142:22-139.178.89.65:57650.service: Deactivated successfully. Oct 2 20:05:50.629192 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:05:50.629998 systemd-logind[1624]: Removed session 2. Oct 2 20:05:50.651071 systemd[1]: Started sshd@2-172.31.27.142:22-139.178.89.65:57656.service. Oct 2 20:05:50.818026 sshd[1842]: Accepted publickey for core from 139.178.89.65 port 57656 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:50.819548 sshd[1842]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.825107 systemd[1]: Started session-3.scope. Oct 2 20:05:50.825999 systemd-logind[1624]: New session 3 of user core. Oct 2 20:05:50.949842 sshd[1842]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:50.953391 systemd[1]: sshd@2-172.31.27.142:22-139.178.89.65:57656.service: Deactivated successfully. Oct 2 20:05:50.954268 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:05:50.955027 systemd-logind[1624]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:05:50.956190 systemd-logind[1624]: Removed session 3. Oct 2 20:05:50.975736 systemd[1]: Started sshd@3-172.31.27.142:22-139.178.89.65:57670.service. Oct 2 20:05:51.144320 sshd[1848]: Accepted publickey for core from 139.178.89.65 port 57670 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.145992 sshd[1848]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.150290 systemd-logind[1624]: New session 4 of user core. Oct 2 20:05:51.151539 systemd[1]: Started session-4.scope. Oct 2 20:05:51.281081 sshd[1848]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:51.284210 systemd[1]: sshd@3-172.31.27.142:22-139.178.89.65:57670.service: Deactivated successfully. Oct 2 20:05:51.285078 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:05:51.285768 systemd-logind[1624]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:05:51.286632 systemd-logind[1624]: Removed session 4. Oct 2 20:05:51.306108 systemd[1]: Started sshd@4-172.31.27.142:22-139.178.89.65:57672.service. Oct 2 20:05:51.467408 sshd[1854]: Accepted publickey for core from 139.178.89.65 port 57672 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.468833 sshd[1854]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.473285 systemd-logind[1624]: New session 5 of user core. Oct 2 20:05:51.474264 systemd[1]: Started session-5.scope. Oct 2 20:05:51.615691 sudo[1857]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:05:51.616757 sudo[1857]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:51.625472 dbus-daemon[1615]: \xd0}ҹ\u0006V: received setenforce notice (enforcing=860757328) Oct 2 20:05:51.627459 sudo[1857]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:51.650628 sshd[1854]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:51.654077 systemd[1]: sshd@4-172.31.27.142:22-139.178.89.65:57672.service: Deactivated successfully. Oct 2 20:05:51.655150 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:05:51.655879 systemd-logind[1624]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:05:51.656853 systemd-logind[1624]: Removed session 5. Oct 2 20:05:51.677185 systemd[1]: Started sshd@5-172.31.27.142:22-139.178.89.65:57688.service. Oct 2 20:05:51.844992 sshd[1861]: Accepted publickey for core from 139.178.89.65 port 57688 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.846542 sshd[1861]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.852663 systemd-logind[1624]: New session 6 of user core. Oct 2 20:05:51.853211 systemd[1]: Started session-6.scope. Oct 2 20:05:51.960367 sudo[1865]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:05:51.960652 sudo[1865]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:51.964637 sudo[1865]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:51.970651 sudo[1864]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:05:51.970946 sudo[1864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:51.982324 systemd[1]: Stopping audit-rules.service... Oct 2 20:05:51.982000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:51.985405 kernel: kauditd_printk_skb: 177 callbacks suppressed Oct 2 20:05:51.985585 kernel: audit: type=1305 audit(1696277151.982:156): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:51.985626 auditctl[1868]: No rules Oct 2 20:05:51.986146 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:05:51.986441 systemd[1]: Stopped audit-rules.service. Oct 2 20:05:51.996112 kernel: audit: type=1300 audit(1696277151.982:156): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd6d037490 a2=420 a3=0 items=0 ppid=1 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:51.982000 audit[1868]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd6d037490 a2=420 a3=0 items=0 ppid=1 pid=1868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:51.982000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:51.997432 systemd[1]: Starting audit-rules.service... Oct 2 20:05:51.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.008255 kernel: audit: type=1327 audit(1696277151.982:156): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:52.009577 kernel: audit: type=1131 audit(1696277151.984:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.028585 augenrules[1885]: No rules Oct 2 20:05:52.029215 systemd[1]: Finished audit-rules.service. Oct 2 20:05:52.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.030532 sudo[1864]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:52.029000 audit[1864]: USER_END pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.040125 kernel: audit: type=1130 audit(1696277152.029:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.040261 kernel: audit: type=1106 audit(1696277152.029:159): pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.040292 kernel: audit: type=1104 audit(1696277152.029:160): pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.029000 audit[1864]: CRED_DISP pid=1864 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.057236 sshd[1861]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:52.058000 audit[1861]: USER_END pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.061710 systemd[1]: sshd@5-172.31.27.142:22-139.178.89.65:57688.service: Deactivated successfully. Oct 2 20:05:52.062711 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:05:52.064695 systemd-logind[1624]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:05:52.065870 systemd-logind[1624]: Removed session 6. Oct 2 20:05:52.058000 audit[1861]: CRED_DISP pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.072662 kernel: audit: type=1106 audit(1696277152.058:161): pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.072788 kernel: audit: type=1104 audit(1696277152.058:162): pid=1861 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.072820 kernel: audit: type=1131 audit(1696277152.058:163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.142:22-139.178.89.65:57688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.27.142:22-139.178.89.65:57688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.081976 systemd[1]: Started sshd@6-172.31.27.142:22-139.178.89.65:57690.service. Oct 2 20:05:52.080000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.142:22-139.178.89.65:57690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.247000 audit[1891]: USER_ACCT pid=1891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.248636 sshd[1891]: Accepted publickey for core from 139.178.89.65 port 57690 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:52.249000 audit[1891]: CRED_ACQ pid=1891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.249000 audit[1891]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdda4d4410 a2=3 a3=0 items=0 ppid=1 pid=1891 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.249000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:05:52.250999 sshd[1891]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:52.255781 systemd-logind[1624]: New session 7 of user core. Oct 2 20:05:52.256334 systemd[1]: Started session-7.scope. Oct 2 20:05:52.260000 audit[1891]: USER_START pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.262000 audit[1893]: CRED_ACQ pid=1893 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.359000 audit[1894]: USER_ACCT pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.360517 sudo[1894]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:05:52.361000 audit[1894]: CRED_REFR pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.362901 sudo[1894]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:52.367000 audit[1894]: USER_START pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.962269 systemd[1]: Starting docker.service... Oct 2 20:05:53.005536 env[1909]: time="2023-10-02T20:05:53.005490651Z" level=info msg="Starting up" Oct 2 20:05:53.007149 env[1909]: time="2023-10-02T20:05:53.007109570Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:53.007149 env[1909]: time="2023-10-02T20:05:53.007135874Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:53.007862 env[1909]: time="2023-10-02T20:05:53.007165902Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:53.007862 env[1909]: time="2023-10-02T20:05:53.007180022Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:53.009516 env[1909]: time="2023-10-02T20:05:53.009479490Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:53.009516 env[1909]: time="2023-10-02T20:05:53.009507346Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:53.009634 env[1909]: time="2023-10-02T20:05:53.009529074Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:53.009634 env[1909]: time="2023-10-02T20:05:53.009541808Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:53.016994 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1279854330-merged.mount: Deactivated successfully. Oct 2 20:05:53.058200 env[1909]: time="2023-10-02T20:05:53.058153293Z" level=info msg="Loading containers: start." Oct 2 20:05:53.148000 audit[1939]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1939 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.148000 audit[1939]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe37ebbe90 a2=0 a3=7ffe37ebbe7c items=0 ppid=1909 pid=1939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.148000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:05:53.151000 audit[1941]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1941 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.151000 audit[1941]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe0f036e00 a2=0 a3=7ffe0f036dec items=0 ppid=1909 pid=1941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.151000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:05:53.154000 audit[1943]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1943 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.154000 audit[1943]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd295a6f40 a2=0 a3=7ffd295a6f2c items=0 ppid=1909 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.154000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:53.156000 audit[1945]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1945 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.156000 audit[1945]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fffa513f710 a2=0 a3=7fffa513f6fc items=0 ppid=1909 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.156000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:53.158000 audit[1947]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1947 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.158000 audit[1947]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe9c7357b0 a2=0 a3=7ffe9c73579c items=0 ppid=1909 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.158000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:05:53.176000 audit[1952]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.176000 audit[1952]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2ee06dd0 a2=0 a3=7fff2ee06dbc items=0 ppid=1909 pid=1952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.176000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:05:53.185000 audit[1954]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.185000 audit[1954]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe4e37e070 a2=0 a3=7ffe4e37e05c items=0 ppid=1909 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.185000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:05:53.188000 audit[1956]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1956 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.188000 audit[1956]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff002e37a0 a2=0 a3=7fff002e378c items=0 ppid=1909 pid=1956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.188000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:05:53.190000 audit[1958]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1958 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.190000 audit[1958]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffc6c95f1c0 a2=0 a3=7ffc6c95f1ac items=0 ppid=1909 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.190000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.202000 audit[1962]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1962 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.202000 audit[1962]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd91cd08b0 a2=0 a3=7ffd91cd089c items=0 ppid=1909 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.202000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.203000 audit[1963]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.203000 audit[1963]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe622e1b50 a2=0 a3=7ffe622e1b3c items=0 ppid=1909 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.203000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.224436 kernel: Initializing XFRM netlink socket Oct 2 20:05:53.278874 env[1909]: time="2023-10-02T20:05:53.278835264Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:05:53.281038 (udev-worker)[1919]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:53.338000 audit[1971]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1971 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.338000 audit[1971]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffda18d16a0 a2=0 a3=7ffda18d168c items=0 ppid=1909 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.338000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:05:53.401000 audit[1974]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1974 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.401000 audit[1974]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd897125b0 a2=0 a3=7ffd8971259c items=0 ppid=1909 pid=1974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.401000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:05:53.405000 audit[1977]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1977 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.405000 audit[1977]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcbd53b010 a2=0 a3=7ffcbd53affc items=0 ppid=1909 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.405000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:53.408000 audit[1979]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1979 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.408000 audit[1979]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff3cf48be0 a2=0 a3=7fff3cf48bcc items=0 ppid=1909 pid=1979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.408000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:53.410000 audit[1981]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1981 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.410000 audit[1981]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe198ff430 a2=0 a3=7ffe198ff41c items=0 ppid=1909 pid=1981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.410000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:05:53.413000 audit[1983]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1983 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.413000 audit[1983]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc431de990 a2=0 a3=7ffc431de97c items=0 ppid=1909 pid=1983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.413000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:05:53.415000 audit[1985]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1985 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.415000 audit[1985]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe1b0f6840 a2=0 a3=7ffe1b0f682c items=0 ppid=1909 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.415000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:05:53.424000 audit[1988]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.424000 audit[1988]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffde6e69200 a2=0 a3=7ffde6e691ec items=0 ppid=1909 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.424000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:05:53.427000 audit[1990]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.427000 audit[1990]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fffe1876810 a2=0 a3=7fffe18767fc items=0 ppid=1909 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.427000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:53.429000 audit[1992]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.429000 audit[1992]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffd78bc97d0 a2=0 a3=7ffd78bc97bc items=0 ppid=1909 pid=1992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.429000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:53.432000 audit[1994]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1994 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.432000 audit[1994]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffa8a143d0 a2=0 a3=7fffa8a143bc items=0 ppid=1909 pid=1994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.432000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:05:53.433983 systemd-networkd[1447]: docker0: Link UP Oct 2 20:05:53.444000 audit[1998]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1998 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.444000 audit[1998]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff5dae15b0 a2=0 a3=7fff5dae159c items=0 ppid=1909 pid=1998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.444000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.445000 audit[1999]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.445000 audit[1999]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd2afece80 a2=0 a3=7ffd2afece6c items=0 ppid=1909 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.445000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.447351 env[1909]: time="2023-10-02T20:05:53.447314678Z" level=info msg="Loading containers: done." Oct 2 20:05:53.466578 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2826897852-merged.mount: Deactivated successfully. Oct 2 20:05:53.483256 env[1909]: time="2023-10-02T20:05:53.483195191Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:05:53.483597 env[1909]: time="2023-10-02T20:05:53.483440676Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:05:53.483677 env[1909]: time="2023-10-02T20:05:53.483642265Z" level=info msg="Daemon has completed initialization" Oct 2 20:05:53.504459 systemd[1]: Started docker.service. Oct 2 20:05:53.503000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:53.516079 env[1909]: time="2023-10-02T20:05:53.516012724Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:05:53.536555 systemd[1]: Reloading. Oct 2 20:05:53.664809 /usr/lib/systemd/system-generators/torcx-generator[2045]: time="2023-10-02T20:05:53Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:53.664848 /usr/lib/systemd/system-generators/torcx-generator[2045]: time="2023-10-02T20:05:53Z" level=info msg="torcx already run" Oct 2 20:05:53.756385 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:53.756409 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:53.777135 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.866000 audit: BPF prog-id=34 op=LOAD Oct 2 20:05:53.866000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.870000 audit: BPF prog-id=35 op=LOAD Oct 2 20:05:53.870000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit: BPF prog-id=36 op=LOAD Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.871000 audit: BPF prog-id=37 op=LOAD Oct 2 20:05:53.871000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:05:53.871000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.872000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit: BPF prog-id=38 op=LOAD Oct 2 20:05:53.873000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit: BPF prog-id=39 op=LOAD Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.873000 audit: BPF prog-id=40 op=LOAD Oct 2 20:05:53.873000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:05:53.873000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit: BPF prog-id=41 op=LOAD Oct 2 20:05:53.875000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit: BPF prog-id=42 op=LOAD Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.875000 audit: BPF prog-id=43 op=LOAD Oct 2 20:05:53.875000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:05:53.875000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit: BPF prog-id=44 op=LOAD Oct 2 20:05:53.878000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.879000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.879000 audit: BPF prog-id=45 op=LOAD Oct 2 20:05:53.879000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.883000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.885000 audit: BPF prog-id=46 op=LOAD Oct 2 20:05:53.885000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit: BPF prog-id=47 op=LOAD Oct 2 20:05:53.886000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit: BPF prog-id=48 op=LOAD Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.886000 audit: BPF prog-id=49 op=LOAD Oct 2 20:05:53.886000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:05:53.886000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit: BPF prog-id=50 op=LOAD Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:53.887000 audit: BPF prog-id=51 op=LOAD Oct 2 20:05:53.887000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:05:53.887000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:05:53.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:53.905061 systemd[1]: Started kubelet.service. Oct 2 20:05:53.995196 kubelet[2097]: E1002 20:05:53.995136 2097 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:05:53.998832 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:05:53.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:05:53.999026 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:05:54.320997 env[1630]: time="2023-10-02T20:05:54.320861569Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\"" Oct 2 20:05:54.950422 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount478663402.mount: Deactivated successfully. Oct 2 20:05:57.650292 env[1630]: time="2023-10-02T20:05:57.650202499Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:57.656122 env[1630]: time="2023-10-02T20:05:57.656072443Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:57.660290 env[1630]: time="2023-10-02T20:05:57.660237484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:57.662609 env[1630]: time="2023-10-02T20:05:57.662571190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:6beea2e5531a0606613594fd3ed92d71bbdcef99dd3237522049a0b32cad736c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:05:57.663191 env[1630]: time="2023-10-02T20:05:57.663152881Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.28.2\" returns image reference \"sha256:cdcab12b2dd16cce4efc5dd43c082469364f19ad978e922d110b74a42eff7cce\"" Oct 2 20:05:57.677203 env[1630]: time="2023-10-02T20:05:57.677164256Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\"" Oct 2 20:06:00.496422 env[1630]: time="2023-10-02T20:06:00.496366991Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.499337 env[1630]: time="2023-10-02T20:06:00.499291745Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.511368 env[1630]: time="2023-10-02T20:06:00.511321775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.515234 env[1630]: time="2023-10-02T20:06:00.515177101Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:6a42ce14d716205a99763f3c732c0a8f0ea041bdbbea7d2dfffcc53dafd7cac4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.518417 env[1630]: time="2023-10-02T20:06:00.517817389Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.28.2\" returns image reference \"sha256:55f13c92defb1eb854040a76e366da866bdcb1cc31fd97b2cde94433c8bf3f57\"" Oct 2 20:06:00.544071 env[1630]: time="2023-10-02T20:06:00.544024716Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\"" Oct 2 20:06:02.610629 env[1630]: time="2023-10-02T20:06:02.610570704Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:02.615023 env[1630]: time="2023-10-02T20:06:02.614970173Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:02.622945 env[1630]: time="2023-10-02T20:06:02.622898374Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:02.633445 env[1630]: time="2023-10-02T20:06:02.633357867Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:6511193f8114a2f011790619698efe12a8119ed9a17e2e36f4c1c759ccf173ab,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:02.637197 env[1630]: time="2023-10-02T20:06:02.636769301Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.28.2\" returns image reference \"sha256:7a5d9d67a13f6ae031989bc2969ec55b06437725f397e6eb75b1dccac465a7b8\"" Oct 2 20:06:02.664384 env[1630]: time="2023-10-02T20:06:02.664340490Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\"" Oct 2 20:06:04.078536 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 20:06:04.078789 kernel: audit: type=1130 audit(1696277164.070:406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.070000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.070109 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1150055394.mount: Deactivated successfully. Oct 2 20:06:04.071751 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:06:04.072076 systemd[1]: Stopped kubelet.service. Oct 2 20:06:04.077813 systemd[1]: Started kubelet.service. Oct 2 20:06:04.089105 kernel: audit: type=1131 audit(1696277164.070:407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.070000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.074000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.095333 kernel: audit: type=1130 audit(1696277164.074:408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.201105 kubelet[2131]: E1002 20:06:04.200303 2131 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:06:04.213000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:04.214508 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:04.214689 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:04.221339 kernel: audit: type=1131 audit(1696277164.213:409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:04.881114 env[1630]: time="2023-10-02T20:06:04.881060749Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.883747 env[1630]: time="2023-10-02T20:06:04.883702802Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.886053 env[1630]: time="2023-10-02T20:06:04.886009788Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.28.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.887985 env[1630]: time="2023-10-02T20:06:04.887949133Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:41c8f92d1cd571e0e36af431f35c78379f84f5daf5b85d43014a9940d697afcf,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.888353 env[1630]: time="2023-10-02T20:06:04.888318498Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.28.2\" returns image reference \"sha256:c120fed2beb84b861c2382ce81ab046c0ae612e91264ef7c9e61df5900fa0bb0\"" Oct 2 20:06:04.900352 env[1630]: time="2023-10-02T20:06:04.900310011Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:06:05.377654 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4003081930.mount: Deactivated successfully. Oct 2 20:06:05.388101 env[1630]: time="2023-10-02T20:06:05.388039296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.390915 env[1630]: time="2023-10-02T20:06:05.390855184Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.393115 env[1630]: time="2023-10-02T20:06:05.393077210Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.395491 env[1630]: time="2023-10-02T20:06:05.395456042Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:05.395967 env[1630]: time="2023-10-02T20:06:05.395907593Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:06:05.407289 env[1630]: time="2023-10-02T20:06:05.407248834Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\"" Oct 2 20:06:12.478424 env[1630]: time="2023-10-02T20:06:12.478368364Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.481555 env[1630]: time="2023-10-02T20:06:12.481507711Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.484061 env[1630]: time="2023-10-02T20:06:12.484018640Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.9-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.486559 env[1630]: time="2023-10-02T20:06:12.486517053Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:e013d0d5e4e25d00c61a7ff839927a1f36479678f11e49502b53a5e0b14f10c3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:12.487354 env[1630]: time="2023-10-02T20:06:12.487318947Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.9-0\" returns image reference \"sha256:73deb9a3f702532592a4167455f8bf2e5f5d900bcc959ba2fd2d35c321de1af9\"" Oct 2 20:06:12.504714 env[1630]: time="2023-10-02T20:06:12.504661547Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\"" Oct 2 20:06:12.528554 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 20:06:12.534560 kernel: audit: type=1131 audit(1696277172.528:410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:12.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:12.549000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:06:12.549000 audit: BPF prog-id=39 op=UNLOAD Oct 2 20:06:12.553894 kernel: audit: type=1334 audit(1696277172.549:411): prog-id=40 op=UNLOAD Oct 2 20:06:12.554163 kernel: audit: type=1334 audit(1696277172.549:412): prog-id=39 op=UNLOAD Oct 2 20:06:12.554265 kernel: audit: type=1334 audit(1696277172.549:413): prog-id=38 op=UNLOAD Oct 2 20:06:12.549000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:06:13.119497 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2433646763.mount: Deactivated successfully. Oct 2 20:06:13.902731 env[1630]: time="2023-10-02T20:06:13.902678903Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.905683 env[1630]: time="2023-10-02T20:06:13.905638495Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.908274 env[1630]: time="2023-10-02T20:06:13.908236439Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.10.1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.910047 env[1630]: time="2023-10-02T20:06:13.910006252Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:a0ead06651cf580044aeb0a0feba63591858fb2e43ade8c9dea45a6a89ae7e5e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:13.910614 env[1630]: time="2023-10-02T20:06:13.910579995Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.10.1\" returns image reference \"sha256:ead0a4a53df89fd173874b46093b6e62d8c72967bbf606d672c9e8c9b601a4fc\"" Oct 2 20:06:14.240829 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:06:14.241169 systemd[1]: Stopped kubelet.service. Oct 2 20:06:14.239000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:14.254442 kernel: audit: type=1130 audit(1696277174.239:414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:14.254574 kernel: audit: type=1131 audit(1696277174.240:415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:14.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:14.249923 systemd[1]: Started kubelet.service. Oct 2 20:06:14.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:14.278246 kernel: audit: type=1130 audit(1696277174.248:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:14.380677 kubelet[2176]: E1002 20:06:14.380630 2176 run.go:74] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Oct 2 20:06:14.383571 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:14.383741 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:14.382000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:14.389393 kernel: audit: type=1131 audit(1696277174.382:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:16.747847 systemd[1]: Stopped kubelet.service. Oct 2 20:06:16.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.757359 kernel: audit: type=1130 audit(1696277176.747:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.757427 kernel: audit: type=1131 audit(1696277176.749:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.749000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:16.770704 systemd[1]: Reloading. Oct 2 20:06:16.888616 /usr/lib/systemd/system-generators/torcx-generator[2245]: time="2023-10-02T20:06:16Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:16.888658 /usr/lib/systemd/system-generators/torcx-generator[2245]: time="2023-10-02T20:06:16Z" level=info msg="torcx already run" Oct 2 20:06:17.063678 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:17.063706 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:17.099456 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.269000 audit: BPF prog-id=52 op=LOAD Oct 2 20:06:17.269000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit: BPF prog-id=53 op=LOAD Oct 2 20:06:17.272000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit: BPF prog-id=54 op=LOAD Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.273000 audit: BPF prog-id=55 op=LOAD Oct 2 20:06:17.273000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:06:17.273000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit: BPF prog-id=56 op=LOAD Oct 2 20:06:17.275000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit: BPF prog-id=57 op=LOAD Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.275000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.276000 audit: BPF prog-id=58 op=LOAD Oct 2 20:06:17.276000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:06:17.276000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.288000 audit: BPF prog-id=59 op=LOAD Oct 2 20:06:17.288000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.291000 audit: BPF prog-id=60 op=LOAD Oct 2 20:06:17.291000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.293000 audit: BPF prog-id=61 op=LOAD Oct 2 20:06:17.293000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:06:17.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit: BPF prog-id=62 op=LOAD Oct 2 20:06:17.296000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.296000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit: BPF prog-id=63 op=LOAD Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.297000 audit: BPF prog-id=64 op=LOAD Oct 2 20:06:17.297000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:06:17.297000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit: BPF prog-id=65 op=LOAD Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.302000 audit: BPF prog-id=66 op=LOAD Oct 2 20:06:17.302000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:06:17.302000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:06:17.328000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:17.329027 systemd[1]: Started kubelet.service. Oct 2 20:06:17.388231 kubelet[2298]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:17.388231 kubelet[2298]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:17.388231 kubelet[2298]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:17.388796 kubelet[2298]: I1002 20:06:17.388300 2298 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:17.655834 kubelet[2298]: I1002 20:06:17.655807 2298 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:06:17.656038 kubelet[2298]: I1002 20:06:17.656029 2298 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:17.656356 kubelet[2298]: I1002 20:06:17.656342 2298 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:06:17.662075 kubelet[2298]: I1002 20:06:17.662048 2298 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:17.664167 kubelet[2298]: E1002 20:06:17.664143 2298 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.27.142:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.669363 kubelet[2298]: I1002 20:06:17.669346 2298 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:17.674125 kubelet[2298]: I1002 20:06:17.669708 2298 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:17.674125 kubelet[2298]: I1002 20:06:17.669857 2298 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:06:17.674125 kubelet[2298]: I1002 20:06:17.669875 2298 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:06:17.674125 kubelet[2298]: I1002 20:06:17.669883 2298 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:06:17.674125 kubelet[2298]: I1002 20:06:17.669983 2298 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:17.674125 kubelet[2298]: I1002 20:06:17.670074 2298 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:06:17.684412 kernel: kauditd_printk_skb: 173 callbacks suppressed Oct 2 20:06:17.684474 kernel: audit: type=1400 audit(1696277177.675:593): avc: denied { mac_admin } for pid=2298 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.684509 kernel: audit: type=1401 audit(1696277177.675:593): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.675000 audit[2298]: AVC avc: denied { mac_admin } for pid=2298 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.675000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.670090 2298 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.670427 2298 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.670449 2298 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:17.684731 kubelet[2298]: W1002 20:06:17.671979 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.27.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-142&limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.684731 kubelet[2298]: E1002 20:06:17.672037 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.27.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-142&limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.672565 2298 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:17.684731 kubelet[2298]: W1002 20:06:17.672929 2298 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.673683 2298 server.go:1232] "Started kubelet" Oct 2 20:06:17.684731 kubelet[2298]: W1002 20:06:17.673791 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.27.142:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.684731 kubelet[2298]: E1002 20:06:17.673841 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.27.142:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.676542 2298 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:17.684731 kubelet[2298]: I1002 20:06:17.678437 2298 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:06:17.685196 kernel: audit: type=1300 audit(1696277177.675:593): arch=c000003e syscall=188 success=no exit=-22 a0=c000d483f0 a1=c000b42ac8 a2=c000d483c0 a3=25 items=0 ppid=1 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.675000 audit[2298]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d483f0 a1=c000b42ac8 a2=c000d483c0 a3=25 items=0 ppid=1 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.687678 kubelet[2298]: I1002 20:06:17.687653 2298 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:06:17.688047 kubelet[2298]: I1002 20:06:17.688034 2298 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:06:17.689530 kubelet[2298]: I1002 20:06:17.689515 2298 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:17.689689 kubelet[2298]: I1002 20:06:17.689678 2298 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:17.689849 kubelet[2298]: I1002 20:06:17.689840 2298 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:17.675000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.698352 kubelet[2298]: E1002 20:06:17.694775 2298 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-27-142.178a631b17d6ddf5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-27-142", UID:"ip-172-31-27-142", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-27-142"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 673637365, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 673637365, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-27-142"}': 'Post "https://172.31.27.142:6443/api/v1/namespaces/default/events": dial tcp 172.31.27.142:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:17.698352 kubelet[2298]: E1002 20:06:17.695619 2298 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:17.698352 kubelet[2298]: E1002 20:06:17.695647 2298 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:17.700636 kernel: audit: type=1327 audit(1696277177.675:593): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.689000 audit[2298]: AVC avc: denied { mac_admin } for pid=2298 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.705587 kernel: audit: type=1400 audit(1696277177.689:594): avc: denied { mac_admin } for pid=2298 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.705802 kubelet[2298]: I1002 20:06:17.705783 2298 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:06:17.708589 kubelet[2298]: E1002 20:06:17.708566 2298 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-142?timeout=10s\": dial tcp 172.31.27.142:6443: connect: connection refused" interval="200ms" Oct 2 20:06:17.709156 kubelet[2298]: I1002 20:06:17.708831 2298 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:06:17.689000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.689000 audit[2298]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d58da0 a1=c000b42d08 a2=c000d490e0 a3=25 items=0 ppid=1 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.714861 kubelet[2298]: I1002 20:06:17.714840 2298 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:06:17.720419 kernel: audit: type=1401 audit(1696277177.689:594): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.720841 kernel: audit: type=1300 audit(1696277177.689:594): arch=c000003e syscall=188 success=no exit=-22 a0=c000d58da0 a1=c000b42d08 a2=c000d490e0 a3=25 items=0 ppid=1 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.720900 kernel: audit: type=1327 audit(1696277177.689:594): proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.689000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.722283 kubelet[2298]: W1002 20:06:17.722235 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.27.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.722441 kubelet[2298]: E1002 20:06:17.722430 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.27.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.711000 audit[2308]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.731539 kernel: audit: type=1325 audit(1696277177.711:595): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.732077 kernel: audit: type=1300 audit(1696277177.711:595): arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff75cbf460 a2=0 a3=7fff75cbf44c items=0 ppid=2298 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.711000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff75cbf460 a2=0 a3=7fff75cbf44c items=0 ppid=2298 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.711000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:17.713000 audit[2309]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.713000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc6478410 a2=0 a3=7fffc64783fc items=0 ppid=2298 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.713000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:17.715000 audit[2311]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.715000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe2ef9b5f0 a2=0 a3=7ffe2ef9b5dc items=0 ppid=2298 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.715000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:17.718000 audit[2313]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.718000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdd4513de0 a2=0 a3=7ffdd4513dcc items=0 ppid=2298 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.718000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:17.759000 audit[2319]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.759000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffc3b6857f0 a2=0 a3=7ffc3b6857dc items=0 ppid=2298 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.759000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:06:17.761614 kubelet[2298]: I1002 20:06:17.761587 2298 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:06:17.763000 audit[2321]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=2321 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.763000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff4aa8efd0 a2=0 a3=7fff4aa8efbc items=0 ppid=2298 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.763000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:17.764855 kubelet[2298]: I1002 20:06:17.764597 2298 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:06:17.765364 kubelet[2298]: I1002 20:06:17.765338 2298 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:06:17.765502 kubelet[2298]: I1002 20:06:17.765491 2298 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:06:17.765000 audit[2322]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.765000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc538759a0 a2=0 a3=7ffc5387598c items=0 ppid=2298 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.765000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:17.766427 kubelet[2298]: E1002 20:06:17.766410 2298 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:06:17.767000 audit[2324]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=2324 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.767000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd978e9d0 a2=0 a3=7fffd978e9bc items=0 ppid=2298 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.767000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:17.768160 kubelet[2298]: W1002 20:06:17.768117 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.27.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.769793 kubelet[2298]: E1002 20:06:17.769513 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.27.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:17.770126 kubelet[2298]: I1002 20:06:17.770106 2298 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:06:17.770126 kubelet[2298]: I1002 20:06:17.770125 2298 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:17.770277 kubelet[2298]: I1002 20:06:17.770142 2298 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:17.770000 audit[2325]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2325 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.770000 audit[2325]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffddcee5dd0 a2=0 a3=7ffddcee5dbc items=0 ppid=2298 pid=2325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.770000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:17.772000 audit[2326]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.772000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fff786cdc70 a2=0 a3=7fff786cdc5c items=0 ppid=2298 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.772000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:17.773000 audit[2327]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:17.773000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdcc4a66c0 a2=0 a3=7ffdcc4a66ac items=0 ppid=2298 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:17.773000 audit[2328]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:17.773000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe7b9c95f0 a2=0 a3=7ffe7b9c95dc items=0 ppid=2298 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.773000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:17.788013 kubelet[2298]: I1002 20:06:17.787979 2298 policy_none.go:49] "None policy: Start" Oct 2 20:06:17.791410 kubelet[2298]: I1002 20:06:17.791388 2298 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:06:17.791574 kubelet[2298]: I1002 20:06:17.791423 2298 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:17.803344 systemd[1]: Created slice kubepods.slice. Oct 2 20:06:17.811475 kubelet[2298]: I1002 20:06:17.811455 2298 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-142" Oct 2 20:06:17.813630 kubelet[2298]: E1002 20:06:17.813613 2298 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.142:6443/api/v1/nodes\": dial tcp 172.31.27.142:6443: connect: connection refused" node="ip-172-31-27-142" Oct 2 20:06:17.820334 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:06:17.830232 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:06:17.842571 kubelet[2298]: I1002 20:06:17.842468 2298 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:17.841000 audit[2298]: AVC avc: denied { mac_admin } for pid=2298 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:17.841000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:17.841000 audit[2298]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ef0270 a1=c000ecfe30 a2=c000ef0240 a3=25 items=0 ppid=1 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:17.841000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:17.843146 kubelet[2298]: I1002 20:06:17.842618 2298 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:17.843146 kubelet[2298]: I1002 20:06:17.842933 2298 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:17.845599 kubelet[2298]: E1002 20:06:17.845525 2298 eviction_manager.go:258] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-27-142\" not found" Oct 2 20:06:17.867591 kubelet[2298]: I1002 20:06:17.867550 2298 topology_manager.go:215] "Topology Admit Handler" podUID="d303ea11e123407e639689269f91f587" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-27-142" Oct 2 20:06:17.869644 kubelet[2298]: I1002 20:06:17.869617 2298 topology_manager.go:215] "Topology Admit Handler" podUID="11cd54295aae7a21002ba96d89a50650" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:17.871018 kubelet[2298]: I1002 20:06:17.870998 2298 topology_manager.go:215] "Topology Admit Handler" podUID="e69636e5758608bd775394981f3fac2e" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-27-142" Oct 2 20:06:17.878689 systemd[1]: Created slice kubepods-burstable-podd303ea11e123407e639689269f91f587.slice. Oct 2 20:06:17.890081 systemd[1]: Created slice kubepods-burstable-pod11cd54295aae7a21002ba96d89a50650.slice. Oct 2 20:06:17.902972 systemd[1]: Created slice kubepods-burstable-pode69636e5758608bd775394981f3fac2e.slice. Oct 2 20:06:17.910298 kubelet[2298]: E1002 20:06:17.910212 2298 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-142?timeout=10s\": dial tcp 172.31.27.142:6443: connect: connection refused" interval="400ms" Oct 2 20:06:17.916361 kubelet[2298]: I1002 20:06:17.916330 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:17.916361 kubelet[2298]: I1002 20:06:17.916377 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:17.916587 kubelet[2298]: I1002 20:06:17.916418 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:17.916587 kubelet[2298]: I1002 20:06:17.916446 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e69636e5758608bd775394981f3fac2e-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-142\" (UID: \"e69636e5758608bd775394981f3fac2e\") " pod="kube-system/kube-scheduler-ip-172-31-27-142" Oct 2 20:06:17.916587 kubelet[2298]: I1002 20:06:17.916492 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d303ea11e123407e639689269f91f587-ca-certs\") pod \"kube-apiserver-ip-172-31-27-142\" (UID: \"d303ea11e123407e639689269f91f587\") " pod="kube-system/kube-apiserver-ip-172-31-27-142" Oct 2 20:06:17.916587 kubelet[2298]: I1002 20:06:17.916520 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d303ea11e123407e639689269f91f587-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-142\" (UID: \"d303ea11e123407e639689269f91f587\") " pod="kube-system/kube-apiserver-ip-172-31-27-142" Oct 2 20:06:17.916587 kubelet[2298]: I1002 20:06:17.916554 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d303ea11e123407e639689269f91f587-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-142\" (UID: \"d303ea11e123407e639689269f91f587\") " pod="kube-system/kube-apiserver-ip-172-31-27-142" Oct 2 20:06:17.916800 kubelet[2298]: I1002 20:06:17.916587 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:17.916800 kubelet[2298]: I1002 20:06:17.916621 2298 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:18.016319 kubelet[2298]: I1002 20:06:18.016273 2298 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-142" Oct 2 20:06:18.017066 kubelet[2298]: E1002 20:06:18.017037 2298 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.142:6443/api/v1/nodes\": dial tcp 172.31.27.142:6443: connect: connection refused" node="ip-172-31-27-142" Oct 2 20:06:18.187672 env[1630]: time="2023-10-02T20:06:18.187541638Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-142,Uid:d303ea11e123407e639689269f91f587,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:18.199599 env[1630]: time="2023-10-02T20:06:18.199550263Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-142,Uid:11cd54295aae7a21002ba96d89a50650,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:18.208022 env[1630]: time="2023-10-02T20:06:18.207980252Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-142,Uid:e69636e5758608bd775394981f3fac2e,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:18.311002 kubelet[2298]: E1002 20:06:18.310969 2298 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-142?timeout=10s\": dial tcp 172.31.27.142:6443: connect: connection refused" interval="800ms" Oct 2 20:06:18.419907 kubelet[2298]: I1002 20:06:18.419572 2298 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-142" Oct 2 20:06:18.419907 kubelet[2298]: E1002 20:06:18.419863 2298 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.142:6443/api/v1/nodes\": dial tcp 172.31.27.142:6443: connect: connection refused" node="ip-172-31-27-142" Oct 2 20:06:18.448195 kubelet[2298]: E1002 20:06:18.447400 2298 event.go:289] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-27-142.178a631b17d6ddf5", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-27-142", UID:"ip-172-31-27-142", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-27-142"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 673637365, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 17, 673637365, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"kubelet", ReportingInstance:"ip-172-31-27-142"}': 'Post "https://172.31.27.142:6443/api/v1/namespaces/default/events": dial tcp 172.31.27.142:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:18.579766 kubelet[2298]: W1002 20:06:18.579690 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.27.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.579766 kubelet[2298]: E1002 20:06:18.579735 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.27.142:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.633746 kubelet[2298]: W1002 20:06:18.633708 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.27.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.633746 kubelet[2298]: E1002 20:06:18.633751 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.27.142:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.702519 kubelet[2298]: W1002 20:06:18.702385 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.27.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-142&limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.702519 kubelet[2298]: E1002 20:06:18.702461 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.27.142:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-27-142&limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.718025 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2290916703.mount: Deactivated successfully. Oct 2 20:06:18.731547 env[1630]: time="2023-10-02T20:06:18.731430321Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.733492 env[1630]: time="2023-10-02T20:06:18.733446965Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.739167 env[1630]: time="2023-10-02T20:06:18.739115757Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.741094 env[1630]: time="2023-10-02T20:06:18.741056453Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.746743 env[1630]: time="2023-10-02T20:06:18.746699587Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.748835 env[1630]: time="2023-10-02T20:06:18.748794682Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.749666 env[1630]: time="2023-10-02T20:06:18.749629707Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.750661 env[1630]: time="2023-10-02T20:06:18.750632775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.753200 env[1630]: time="2023-10-02T20:06:18.753166149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.753999 env[1630]: time="2023-10-02T20:06:18.753965362Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.754718 env[1630]: time="2023-10-02T20:06:18.754688916Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.764767 env[1630]: time="2023-10-02T20:06:18.764648682Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:18.797225 env[1630]: time="2023-10-02T20:06:18.796853110Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:18.797225 env[1630]: time="2023-10-02T20:06:18.796910582Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:18.797225 env[1630]: time="2023-10-02T20:06:18.796926277Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:18.797602 env[1630]: time="2023-10-02T20:06:18.797238588Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d93e9520ffca2494c34842c11c86f6fe75cd6e52bd10b6bb108ae85eba8f80dd pid=2337 runtime=io.containerd.runc.v2 Oct 2 20:06:18.824443 systemd[1]: Started cri-containerd-d93e9520ffca2494c34842c11c86f6fe75cd6e52bd10b6bb108ae85eba8f80dd.scope. Oct 2 20:06:18.836052 env[1630]: time="2023-10-02T20:06:18.835888630Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:18.836423 env[1630]: time="2023-10-02T20:06:18.836377519Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:18.836599 env[1630]: time="2023-10-02T20:06:18.836566946Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:18.837016 env[1630]: time="2023-10-02T20:06:18.836973097Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69 pid=2359 runtime=io.containerd.runc.v2 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.857000 audit: BPF prog-id=67 op=LOAD Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2337 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336539353230666663613234393463333438343263313163383666 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2337 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336539353230666663613234393463333438343263313163383666 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.858000 audit: BPF prog-id=68 op=LOAD Oct 2 20:06:18.858000 audit[2351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024650 items=0 ppid=2337 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336539353230666663613234393463333438343263313163383666 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit: BPF prog-id=69 op=LOAD Oct 2 20:06:18.859000 audit[2351]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024698 items=0 ppid=2337 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336539353230666663613234393463333438343263313163383666 Oct 2 20:06:18.859000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:06:18.859000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { perfmon } for pid=2351 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit[2351]: AVC avc: denied { bpf } for pid=2351 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.859000 audit: BPF prog-id=70 op=LOAD Oct 2 20:06:18.859000 audit[2351]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000024aa8 items=0 ppid=2337 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6439336539353230666663613234393463333438343263313163383666 Oct 2 20:06:18.870138 env[1630]: time="2023-10-02T20:06:18.866662095Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:18.870138 env[1630]: time="2023-10-02T20:06:18.866710555Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:18.870138 env[1630]: time="2023-10-02T20:06:18.866727672Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:18.875560 env[1630]: time="2023-10-02T20:06:18.872666828Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc pid=2386 runtime=io.containerd.runc.v2 Oct 2 20:06:18.894267 kubelet[2298]: W1002 20:06:18.894166 2298 reflector.go:535] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.27.142:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.894500 kubelet[2298]: E1002 20:06:18.894470 2298 reflector.go:147] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.27.142:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:18.896160 systemd[1]: Started cri-containerd-6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69.scope. Oct 2 20:06:18.931139 systemd[1]: Started cri-containerd-35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc.scope. Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.961000 audit: BPF prog-id=71 op=LOAD Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2359 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664653533333039646638353332653135393136356138303464633461 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2359 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664653533333039646638353332653135393136356138303464633461 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit: BPF prog-id=72 op=LOAD Oct 2 20:06:18.962000 audit[2383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002891d0 items=0 ppid=2359 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664653533333039646638353332653135393136356138303464633461 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit: BPF prog-id=73 op=LOAD Oct 2 20:06:18.962000 audit[2383]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000289218 items=0 ppid=2359 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664653533333039646638353332653135393136356138303464633461 Oct 2 20:06:18.962000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:06:18.962000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { perfmon } for pid=2383 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit[2383]: AVC avc: denied { bpf } for pid=2383 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.962000 audit: BPF prog-id=74 op=LOAD Oct 2 20:06:18.962000 audit[2383]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000289628 items=0 ppid=2359 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.962000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664653533333039646638353332653135393136356138303464633461 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.976000 audit: BPF prog-id=75 op=LOAD Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2386 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653730366263373664306132626337636564393165643138353933 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2386 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653730366263373664306132626337636564393165643138353933 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit: BPF prog-id=76 op=LOAD Oct 2 20:06:18.977000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dd9c0 items=0 ppid=2386 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653730366263373664306132626337636564393165643138353933 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit: BPF prog-id=77 op=LOAD Oct 2 20:06:18.977000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dda08 items=0 ppid=2386 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653730366263373664306132626337636564393165643138353933 Oct 2 20:06:18.977000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:06:18.977000 audit: BPF prog-id=76 op=UNLOAD Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { perfmon } for pid=2403 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit[2403]: AVC avc: denied { bpf } for pid=2403 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:18.977000 audit: BPF prog-id=78 op=LOAD Oct 2 20:06:18.977000 audit[2403]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001dde18 items=0 ppid=2386 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:18.977000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335653730366263373664306132626337636564393165643138353933 Oct 2 20:06:18.994973 env[1630]: time="2023-10-02T20:06:18.994921650Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-27-142,Uid:d303ea11e123407e639689269f91f587,Namespace:kube-system,Attempt:0,} returns sandbox id \"d93e9520ffca2494c34842c11c86f6fe75cd6e52bd10b6bb108ae85eba8f80dd\"" Oct 2 20:06:19.021637 env[1630]: time="2023-10-02T20:06:19.021567499Z" level=info msg="CreateContainer within sandbox \"d93e9520ffca2494c34842c11c86f6fe75cd6e52bd10b6bb108ae85eba8f80dd\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:06:19.057129 env[1630]: time="2023-10-02T20:06:19.057077475Z" level=info msg="CreateContainer within sandbox \"d93e9520ffca2494c34842c11c86f6fe75cd6e52bd10b6bb108ae85eba8f80dd\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"405965fcd2c255e9f26b0daefb9005df5df63ff353276f76a87e3c227e1b43f0\"" Oct 2 20:06:19.058561 env[1630]: time="2023-10-02T20:06:19.058525385Z" level=info msg="StartContainer for \"405965fcd2c255e9f26b0daefb9005df5df63ff353276f76a87e3c227e1b43f0\"" Oct 2 20:06:19.066707 env[1630]: time="2023-10-02T20:06:19.066668467Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-27-142,Uid:11cd54295aae7a21002ba96d89a50650,Namespace:kube-system,Attempt:0,} returns sandbox id \"6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69\"" Oct 2 20:06:19.079513 env[1630]: time="2023-10-02T20:06:19.079464573Z" level=info msg="CreateContainer within sandbox \"6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:06:19.110432 env[1630]: time="2023-10-02T20:06:19.109617282Z" level=info msg="CreateContainer within sandbox \"6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f\"" Oct 2 20:06:19.111621 kubelet[2298]: E1002 20:06:19.111587 2298 controller.go:146] "Failed to ensure lease exists, will retry" err="Get \"https://172.31.27.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-142?timeout=10s\": dial tcp 172.31.27.142:6443: connect: connection refused" interval="1.6s" Oct 2 20:06:19.111970 env[1630]: time="2023-10-02T20:06:19.111932281Z" level=info msg="StartContainer for \"3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f\"" Oct 2 20:06:19.112287 env[1630]: time="2023-10-02T20:06:19.112255115Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-27-142,Uid:e69636e5758608bd775394981f3fac2e,Namespace:kube-system,Attempt:0,} returns sandbox id \"35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc\"" Oct 2 20:06:19.115404 env[1630]: time="2023-10-02T20:06:19.115368813Z" level=info msg="CreateContainer within sandbox \"35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:06:19.120174 systemd[1]: Started cri-containerd-405965fcd2c255e9f26b0daefb9005df5df63ff353276f76a87e3c227e1b43f0.scope. Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.138000 audit: BPF prog-id=79 op=LOAD Oct 2 20:06:19.140000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.140000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2337 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353936356663643263323535653966323662306461656662393030 Oct 2 20:06:19.140000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.140000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2337 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.140000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353936356663643263323535653966323662306461656662393030 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit: BPF prog-id=80 op=LOAD Oct 2 20:06:19.141000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000024e90 items=0 ppid=2337 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.141000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353936356663643263323535653966323662306461656662393030 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.141000 audit: BPF prog-id=81 op=LOAD Oct 2 20:06:19.141000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024ed8 items=0 ppid=2337 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.141000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353936356663643263323535653966323662306461656662393030 Oct 2 20:06:19.142000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:06:19.143000 audit: BPF prog-id=80 op=UNLOAD Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { perfmon } for pid=2460 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit[2460]: AVC avc: denied { bpf } for pid=2460 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.143000 audit: BPF prog-id=82 op=LOAD Oct 2 20:06:19.143000 audit[2460]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000252e8 items=0 ppid=2337 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.143000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430353936356663643263323535653966323662306461656662393030 Oct 2 20:06:19.160924 env[1630]: time="2023-10-02T20:06:19.160846973Z" level=info msg="CreateContainer within sandbox \"35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce\"" Oct 2 20:06:19.165563 systemd[1]: Started cri-containerd-3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f.scope. Oct 2 20:06:19.169552 env[1630]: time="2023-10-02T20:06:19.169509471Z" level=info msg="StartContainer for \"1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce\"" Oct 2 20:06:19.207253 systemd[1]: Started cri-containerd-1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce.scope. Oct 2 20:06:19.226394 kubelet[2298]: I1002 20:06:19.225673 2298 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-142" Oct 2 20:06:19.226394 kubelet[2298]: E1002 20:06:19.226352 2298 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.27.142:6443/api/v1/nodes\": dial tcp 172.31.27.142:6443: connect: connection refused" node="ip-172-31-27-142" Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.254000 audit: BPF prog-id=83 op=LOAD Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2386 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163383931363136613930343533656431653230323364363630666534 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2386 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163383931363136613930343533656431653230323364363630666534 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.256000 audit: BPF prog-id=84 op=LOAD Oct 2 20:06:19.256000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cea60 items=0 ppid=2386 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.256000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163383931363136613930343533656431653230323364363630666534 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.257000 audit: BPF prog-id=85 op=LOAD Oct 2 20:06:19.257000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ceaa8 items=0 ppid=2386 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.257000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163383931363136613930343533656431653230323364363630666534 Oct 2 20:06:19.257000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:06:19.258000 audit: BPF prog-id=84 op=UNLOAD Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { perfmon } for pid=2505 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit[2505]: AVC avc: denied { bpf } for pid=2505 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.258000 audit: BPF prog-id=86 op=LOAD Oct 2 20:06:19.258000 audit[2505]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ceeb8 items=0 ppid=2386 pid=2505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163383931363136613930343533656431653230323364363630666534 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.266000 audit: BPF prog-id=87 op=LOAD Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2359 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323433386432363438646636353035383134336235303262636462 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2359 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323433386432363438646636353035383134336235303262636462 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit: BPF prog-id=88 op=LOAD Oct 2 20:06:19.268000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003ac910 items=0 ppid=2359 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323433386432363438646636353035383134336235303262636462 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.268000 audit: BPF prog-id=89 op=LOAD Oct 2 20:06:19.268000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003ac958 items=0 ppid=2359 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.268000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323433386432363438646636353035383134336235303262636462 Oct 2 20:06:19.269000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:06:19.269000 audit: BPF prog-id=88 op=UNLOAD Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { perfmon } for pid=2488 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit[2488]: AVC avc: denied { bpf } for pid=2488 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:19.269000 audit: BPF prog-id=90 op=LOAD Oct 2 20:06:19.269000 audit[2488]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003acd68 items=0 ppid=2359 pid=2488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:19.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364323433386432363438646636353035383134336235303262636462 Oct 2 20:06:19.287465 env[1630]: time="2023-10-02T20:06:19.277861900Z" level=info msg="StartContainer for \"405965fcd2c255e9f26b0daefb9005df5df63ff353276f76a87e3c227e1b43f0\" returns successfully" Oct 2 20:06:19.338228 env[1630]: time="2023-10-02T20:06:19.338053605Z" level=info msg="StartContainer for \"3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f\" returns successfully" Oct 2 20:06:19.383649 env[1630]: time="2023-10-02T20:06:19.383595823Z" level=info msg="StartContainer for \"1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce\" returns successfully" Oct 2 20:06:19.716698 kubelet[2298]: E1002 20:06:19.716671 2298 certificate_manager.go:562] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.27.142:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.27.142:6443: connect: connection refused Oct 2 20:06:20.828569 kubelet[2298]: I1002 20:06:20.828540 2298 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-142" Oct 2 20:06:20.916000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:20.916000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006f8ae0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:20.916000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:20.916000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:20.916000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000438580 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:20.916000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:22.377000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:22.377000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c006fe3c20 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:06:22.377000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:22.379000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:22.379000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c0058d6b60 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:06:22.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:22.379000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:22.379000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005f6f650 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:06:22.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:22.391000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:22.391000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c005f6fe00 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:06:22.391000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:22.400000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:22.400000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c006c680a0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:06:22.400000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:22.401000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:22.401000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=64 a1=c00418d770 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:06:22.401000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:22.631435 kubelet[2298]: E1002 20:06:22.631315 2298 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-27-142\" not found" node="ip-172-31-27-142" Oct 2 20:06:22.675384 kubelet[2298]: I1002 20:06:22.675343 2298 apiserver.go:52] "Watching apiserver" Oct 2 20:06:22.689887 kubelet[2298]: I1002 20:06:22.689848 2298 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-27-142" Oct 2 20:06:22.710024 kubelet[2298]: I1002 20:06:22.709983 2298 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:06:25.445434 systemd[1]: Reloading. Oct 2 20:06:25.561032 /usr/lib/systemd/system-generators/torcx-generator[2591]: time="2023-10-02T20:06:25Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:25.561640 /usr/lib/systemd/system-generators/torcx-generator[2591]: time="2023-10-02T20:06:25Z" level=info msg="torcx already run" Oct 2 20:06:25.654556 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:25.654579 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:25.674467 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:25.794066 kernel: kauditd_printk_skb: 404 callbacks suppressed Oct 2 20:06:25.794232 kernel: audit: type=1400 audit(1696277185.782:724): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794282 kernel: audit: type=1400 audit(1696277185.782:725): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.801593 kernel: audit: type=1400 audit(1696277185.782:726): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.801666 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:25.803874 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:06:25.803961 kernel: audit: backlog limit exceeded Oct 2 20:06:25.810320 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Oct 2 20:06:25.810443 kernel: audit: type=1400 audit(1696277185.782:727): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.810476 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.815792 kernel: audit: type=1400 audit(1696277185.782:728): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.787000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.787000 audit: BPF prog-id=91 op=LOAD Oct 2 20:06:25.788000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit: BPF prog-id=92 op=LOAD Oct 2 20:06:25.792000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit: BPF prog-id=93 op=LOAD Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.793000 audit: BPF prog-id=94 op=LOAD Oct 2 20:06:25.793000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:06:25.793000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.794000 audit: BPF prog-id=95 op=LOAD Oct 2 20:06:25.795000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.796000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.799000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.799000 audit: BPF prog-id=96 op=LOAD Oct 2 20:06:25.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.818000 audit: BPF prog-id=100 op=LOAD Oct 2 20:06:25.819000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit: BPF prog-id=101 op=LOAD Oct 2 20:06:25.820000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.820000 audit: BPF prog-id=102 op=LOAD Oct 2 20:06:25.820000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.821000 audit: BPF prog-id=103 op=LOAD Oct 2 20:06:25.821000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.823000 audit: BPF prog-id=104 op=LOAD Oct 2 20:06:25.823000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit: BPF prog-id=105 op=LOAD Oct 2 20:06:25.824000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit: BPF prog-id=106 op=LOAD Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.824000 audit: BPF prog-id=107 op=LOAD Oct 2 20:06:25.824000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:06:25.824000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.825000 audit: BPF prog-id=108 op=LOAD Oct 2 20:06:25.825000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit: BPF prog-id=109 op=LOAD Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.826000 audit: BPF prog-id=110 op=LOAD Oct 2 20:06:25.826000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:06:25.826000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:25.827000 audit: BPF prog-id=111 op=LOAD Oct 2 20:06:25.827000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:06:25.848210 systemd[1]: Stopping kubelet.service... Oct 2 20:06:25.868576 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:06:25.868830 systemd[1]: Stopped kubelet.service. Oct 2 20:06:25.867000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:25.871130 systemd[1]: Started kubelet.service. Oct 2 20:06:25.870000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:25.978420 kubelet[2644]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:25.978420 kubelet[2644]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:25.978420 kubelet[2644]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:25.978420 kubelet[2644]: I1002 20:06:25.978244 2644 server.go:203] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:25.990790 kubelet[2644]: I1002 20:06:25.990657 2644 server.go:467] "Kubelet version" kubeletVersion="v1.28.1" Oct 2 20:06:25.990790 kubelet[2644]: I1002 20:06:25.990688 2644 server.go:469] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:25.989000 audit[2654]: USER_ACCT pid=2654 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:25.991392 kubelet[2644]: I1002 20:06:25.990998 2644 server.go:895] "Client rotation is on, will bootstrap in background" Oct 2 20:06:25.990000 audit[2654]: CRED_REFR pid=2654 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:25.991611 sudo[2654]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:06:25.992353 sudo[2654]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:06:25.994917 kubelet[2644]: I1002 20:06:25.994576 2644 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:06:25.993000 audit[2654]: USER_START pid=2654 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:25.998951 kubelet[2644]: I1002 20:06:25.998433 2644 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:26.006273 kubelet[2644]: I1002 20:06:26.003862 2644 server.go:725] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:26.006273 kubelet[2644]: I1002 20:06:26.004172 2644 container_manager_linux.go:265] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:26.006273 kubelet[2644]: I1002 20:06:26.004427 2644 container_manager_linux.go:270] "Creating Container Manager object based on Node Config" nodeConfig={"RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null} Oct 2 20:06:26.006273 kubelet[2644]: I1002 20:06:26.004451 2644 topology_manager.go:138] "Creating topology manager with none policy" Oct 2 20:06:26.006273 kubelet[2644]: I1002 20:06:26.004464 2644 container_manager_linux.go:301] "Creating device plugin manager" Oct 2 20:06:26.006273 kubelet[2644]: I1002 20:06:26.004507 2644 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:26.006686 kubelet[2644]: I1002 20:06:26.004723 2644 kubelet.go:393] "Attempting to sync node with API server" Oct 2 20:06:26.014271 kubelet[2644]: I1002 20:06:26.014236 2644 kubelet.go:298] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:26.014413 kubelet[2644]: I1002 20:06:26.014367 2644 kubelet.go:309] "Adding apiserver pod source" Oct 2 20:06:26.014413 kubelet[2644]: I1002 20:06:26.014391 2644 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:26.027486 kubelet[2644]: I1002 20:06:26.027453 2644 kuberuntime_manager.go:257] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:26.029553 kubelet[2644]: I1002 20:06:26.029526 2644 server.go:1232] "Started kubelet" Oct 2 20:06:26.033000 audit[2644]: AVC avc: denied { mac_admin } for pid=2644 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.033000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:26.033000 audit[2644]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00057fce0 a1=c0005c93b0 a2=c00057fcb0 a3=25 items=0 ppid=1 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:26.033000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:26.035455 kubelet[2644]: I1002 20:06:26.035098 2644 kubelet.go:1386] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:26.035455 kubelet[2644]: I1002 20:06:26.035158 2644 kubelet.go:1390] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:26.035455 kubelet[2644]: I1002 20:06:26.035196 2644 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:26.033000 audit[2644]: AVC avc: denied { mac_admin } for pid=2644 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.033000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:26.033000 audit[2644]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005fd200 a1=c0005c93c8 a2=c00057fd70 a3=25 items=0 ppid=1 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:26.033000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:26.036739 kubelet[2644]: I1002 20:06:26.036715 2644 apiserver.go:52] "Watching apiserver" Oct 2 20:06:26.043075 kubelet[2644]: E1002 20:06:26.043044 2644 cri_stats_provider.go:448] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:26.043075 kubelet[2644]: E1002 20:06:26.043083 2644 kubelet.go:1431] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:26.052012 kubelet[2644]: I1002 20:06:26.051917 2644 server.go:162] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:26.056151 kubelet[2644]: I1002 20:06:26.056116 2644 volume_manager.go:291] "Starting Kubelet Volume Manager" Oct 2 20:06:26.060014 kubelet[2644]: I1002 20:06:26.059979 2644 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:06:26.065134 kubelet[2644]: I1002 20:06:26.061537 2644 server.go:462] "Adding debug handlers to kubelet server" Oct 2 20:06:26.069472 kubelet[2644]: I1002 20:06:26.061592 2644 ratelimit.go:65] "Setting rate limiting for podresources endpoint" qps=100 burstTokens=10 Oct 2 20:06:26.071788 kubelet[2644]: I1002 20:06:26.071762 2644 reconciler_new.go:29] "Reconciler: start to sync state" Oct 2 20:06:26.073825 kubelet[2644]: I1002 20:06:26.073802 2644 server.go:233] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Oct 2 20:06:26.106601 kubelet[2644]: I1002 20:06:26.106571 2644 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Oct 2 20:06:26.107871 kubelet[2644]: I1002 20:06:26.107841 2644 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Oct 2 20:06:26.108003 kubelet[2644]: I1002 20:06:26.107882 2644 status_manager.go:217] "Starting to sync pod status with apiserver" Oct 2 20:06:26.108003 kubelet[2644]: I1002 20:06:26.107907 2644 kubelet.go:2303] "Starting kubelet main sync loop" Oct 2 20:06:26.108003 kubelet[2644]: E1002 20:06:26.107966 2644 kubelet.go:2327] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Oct 2 20:06:26.162608 kubelet[2644]: I1002 20:06:26.162583 2644 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-27-142" Oct 2 20:06:26.179164 kubelet[2644]: I1002 20:06:26.179114 2644 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-27-142" Oct 2 20:06:26.179337 kubelet[2644]: I1002 20:06:26.179201 2644 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-27-142" Oct 2 20:06:26.208735 kubelet[2644]: E1002 20:06:26.208697 2644 kubelet.go:2327] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Oct 2 20:06:26.212544 kubelet[2644]: I1002 20:06:26.212517 2644 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:06:26.212544 kubelet[2644]: I1002 20:06:26.212544 2644 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:26.212732 kubelet[2644]: I1002 20:06:26.212562 2644 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:26.212732 kubelet[2644]: I1002 20:06:26.212729 2644 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:06:26.212814 kubelet[2644]: I1002 20:06:26.212756 2644 state_mem.go:96] "Updated CPUSet assignments" assignments={} Oct 2 20:06:26.212814 kubelet[2644]: I1002 20:06:26.212765 2644 policy_none.go:49] "None policy: Start" Oct 2 20:06:26.213492 kubelet[2644]: I1002 20:06:26.213472 2644 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:06:26.213604 kubelet[2644]: I1002 20:06:26.213500 2644 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:26.213691 kubelet[2644]: I1002 20:06:26.213679 2644 state_mem.go:75] "Updated machine memory state" Oct 2 20:06:26.222360 kubelet[2644]: I1002 20:06:26.222327 2644 manager.go:471] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:26.222492 kubelet[2644]: I1002 20:06:26.222396 2644 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:26.221000 audit[2644]: AVC avc: denied { mac_admin } for pid=2644 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:26.221000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:26.221000 audit[2644]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001197350 a1=c0011a1fc8 a2=c001197320 a3=25 items=0 ppid=1 pid=2644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:26.221000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:26.223397 kubelet[2644]: I1002 20:06:26.222936 2644 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:26.409872 kubelet[2644]: I1002 20:06:26.409827 2644 topology_manager.go:215] "Topology Admit Handler" podUID="d303ea11e123407e639689269f91f587" podNamespace="kube-system" podName="kube-apiserver-ip-172-31-27-142" Oct 2 20:06:26.410164 kubelet[2644]: I1002 20:06:26.410150 2644 topology_manager.go:215] "Topology Admit Handler" podUID="11cd54295aae7a21002ba96d89a50650" podNamespace="kube-system" podName="kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:26.410326 kubelet[2644]: I1002 20:06:26.410314 2644 topology_manager.go:215] "Topology Admit Handler" podUID="e69636e5758608bd775394981f3fac2e" podNamespace="kube-system" podName="kube-scheduler-ip-172-31-27-142" Oct 2 20:06:26.466131 kubelet[2644]: I1002 20:06:26.466106 2644 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:06:26.476534 kubelet[2644]: I1002 20:06:26.476502 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-ca-certs\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:26.476769 kubelet[2644]: I1002 20:06:26.476756 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:26.476974 kubelet[2644]: I1002 20:06:26.476961 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-k8s-certs\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:26.477100 kubelet[2644]: I1002 20:06:26.477091 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-kubeconfig\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:26.477333 kubelet[2644]: I1002 20:06:26.477317 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/11cd54295aae7a21002ba96d89a50650-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-27-142\" (UID: \"11cd54295aae7a21002ba96d89a50650\") " pod="kube-system/kube-controller-manager-ip-172-31-27-142" Oct 2 20:06:26.477471 kubelet[2644]: I1002 20:06:26.477462 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/e69636e5758608bd775394981f3fac2e-kubeconfig\") pod \"kube-scheduler-ip-172-31-27-142\" (UID: \"e69636e5758608bd775394981f3fac2e\") " pod="kube-system/kube-scheduler-ip-172-31-27-142" Oct 2 20:06:26.477597 kubelet[2644]: I1002 20:06:26.477586 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d303ea11e123407e639689269f91f587-ca-certs\") pod \"kube-apiserver-ip-172-31-27-142\" (UID: \"d303ea11e123407e639689269f91f587\") " pod="kube-system/kube-apiserver-ip-172-31-27-142" Oct 2 20:06:26.477712 kubelet[2644]: I1002 20:06:26.477703 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d303ea11e123407e639689269f91f587-k8s-certs\") pod \"kube-apiserver-ip-172-31-27-142\" (UID: \"d303ea11e123407e639689269f91f587\") " pod="kube-system/kube-apiserver-ip-172-31-27-142" Oct 2 20:06:26.477944 kubelet[2644]: I1002 20:06:26.477929 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d303ea11e123407e639689269f91f587-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-27-142\" (UID: \"d303ea11e123407e639689269f91f587\") " pod="kube-system/kube-apiserver-ip-172-31-27-142" Oct 2 20:06:26.916874 sudo[2654]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:26.915000 audit[2654]: USER_END pid=2654 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:26.915000 audit[2654]: CRED_DISP pid=2654 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:27.060909 update_engine[1625]: I1002 20:06:27.060855 1625 update_attempter.cc:505] Updating boot flags... Oct 2 20:06:27.457883 kubelet[2644]: I1002 20:06:27.456882 2644 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-27-142" podStartSLOduration=1.456790595 podCreationTimestamp="2023-10-02 20:06:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:27.343328513 +0000 UTC m=+1.462212148" watchObservedRunningTime="2023-10-02 20:06:27.456790595 +0000 UTC m=+1.575674236" Oct 2 20:06:27.518271 kubelet[2644]: I1002 20:06:27.518241 2644 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-27-142" podStartSLOduration=1.518164034 podCreationTimestamp="2023-10-02 20:06:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:27.457261929 +0000 UTC m=+1.576145570" watchObservedRunningTime="2023-10-02 20:06:27.518164034 +0000 UTC m=+1.637047680" Oct 2 20:06:27.605735 kubelet[2644]: I1002 20:06:27.605302 2644 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-27-142" podStartSLOduration=1.605253188 podCreationTimestamp="2023-10-02 20:06:26 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:27.521724954 +0000 UTC m=+1.640608599" watchObservedRunningTime="2023-10-02 20:06:27.605253188 +0000 UTC m=+1.724136826" Oct 2 20:06:28.805714 sudo[1894]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:28.804000 audit[1894]: USER_END pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:28.804000 audit[1894]: CRED_DISP pid=1894 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:28.830826 sshd[1891]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:28.831000 audit[1891]: USER_END pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:28.831000 audit[1891]: CRED_DISP pid=1891 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:28.834184 systemd[1]: sshd@6-172.31.27.142:22-139.178.89.65:57690.service: Deactivated successfully. Oct 2 20:06:28.835795 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:06:28.836104 systemd[1]: session-7.scope: Consumed 4.312s CPU time. Oct 2 20:06:28.833000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.27.142:22-139.178.89.65:57690 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:28.836980 systemd-logind[1624]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:06:28.838025 systemd-logind[1624]: Removed session 7. Oct 2 20:06:36.682000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:36.685789 kernel: kauditd_printk_skb: 326 callbacks suppressed Oct 2 20:06:36.685931 kernel: audit: type=1400 audit(1696277196.682:949): avc: denied { watch } for pid=2516 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521021 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:36.708071 kernel: audit: type=1300 audit(1696277196.682:949): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f66f40 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:36.682000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f66f40 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:36.682000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:36.715244 kernel: audit: type=1327 audit(1696277196.682:949): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:38.200000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.207241 kernel: audit: type=1400 audit(1696277198.200:950): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.200000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ef4260 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:38.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:38.223842 kernel: audit: type=1300 audit(1696277198.200:950): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ef4260 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:38.224075 kernel: audit: type=1327 audit(1696277198.200:950): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:38.224122 kernel: audit: type=1400 audit(1696277198.206:951): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.206000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.206000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ef43a0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:38.237146 kernel: audit: type=1300 audit(1696277198.206:951): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ef43a0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:38.237299 kernel: audit: type=1327 audit(1696277198.206:951): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:38.206000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:38.212000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.249780 kernel: audit: type=1400 audit(1696277198.212:952): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.212000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ef44e0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:38.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:38.216000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:38.216000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0013569e0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:06:38.216000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:39.333698 kubelet[2644]: I1002 20:06:39.333659 2644 kuberuntime_manager.go:1463] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:06:39.334166 env[1630]: time="2023-10-02T20:06:39.334078216Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:06:39.334717 kubelet[2644]: I1002 20:06:39.334306 2644 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:06:40.030128 kubelet[2644]: I1002 20:06:40.030086 2644 topology_manager.go:215] "Topology Admit Handler" podUID="b3543590-9d10-4a80-8ce5-6232af6db3f5" podNamespace="kube-system" podName="kube-proxy-xkdmb" Oct 2 20:06:40.042107 systemd[1]: Created slice kubepods-besteffort-podb3543590_9d10_4a80_8ce5_6232af6db3f5.slice. Oct 2 20:06:40.052676 kubelet[2644]: I1002 20:06:40.052643 2644 topology_manager.go:215] "Topology Admit Handler" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" podNamespace="kube-system" podName="cilium-s29m8" Oct 2 20:06:40.071003 systemd[1]: Created slice kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice. Oct 2 20:06:40.081919 kubelet[2644]: I1002 20:06:40.081882 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-kernel\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082099 kubelet[2644]: I1002 20:06:40.081935 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hostproc\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082099 kubelet[2644]: I1002 20:06:40.081965 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/b3543590-9d10-4a80-8ce5-6232af6db3f5-lib-modules\") pod \"kube-proxy-xkdmb\" (UID: \"b3543590-9d10-4a80-8ce5-6232af6db3f5\") " pod="kube-system/kube-proxy-xkdmb" Oct 2 20:06:40.082099 kubelet[2644]: I1002 20:06:40.081990 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hubble-tls\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082099 kubelet[2644]: I1002 20:06:40.082017 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-bpf-maps\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082099 kubelet[2644]: I1002 20:06:40.082040 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cni-path\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082099 kubelet[2644]: I1002 20:06:40.082066 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/b3543590-9d10-4a80-8ce5-6232af6db3f5-kube-proxy\") pod \"kube-proxy-xkdmb\" (UID: \"b3543590-9d10-4a80-8ce5-6232af6db3f5\") " pod="kube-system/kube-proxy-xkdmb" Oct 2 20:06:40.082439 kubelet[2644]: I1002 20:06:40.082094 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2lp9x\" (UniqueName: \"kubernetes.io/projected/b3543590-9d10-4a80-8ce5-6232af6db3f5-kube-api-access-2lp9x\") pod \"kube-proxy-xkdmb\" (UID: \"b3543590-9d10-4a80-8ce5-6232af6db3f5\") " pod="kube-system/kube-proxy-xkdmb" Oct 2 20:06:40.082439 kubelet[2644]: I1002 20:06:40.082126 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-net\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082439 kubelet[2644]: I1002 20:06:40.082157 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-cgroup\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082439 kubelet[2644]: I1002 20:06:40.082190 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jgf7x\" (UniqueName: \"kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-kube-api-access-jgf7x\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082439 kubelet[2644]: I1002 20:06:40.082238 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-lib-modules\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082704 kubelet[2644]: I1002 20:06:40.082329 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-xtables-lock\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082704 kubelet[2644]: I1002 20:06:40.082369 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-config-path\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082704 kubelet[2644]: I1002 20:06:40.082427 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/b3543590-9d10-4a80-8ce5-6232af6db3f5-xtables-lock\") pod \"kube-proxy-xkdmb\" (UID: \"b3543590-9d10-4a80-8ce5-6232af6db3f5\") " pod="kube-system/kube-proxy-xkdmb" Oct 2 20:06:40.082704 kubelet[2644]: I1002 20:06:40.082456 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-run\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082704 kubelet[2644]: I1002 20:06:40.082488 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ed9f18b0-a321-47f8-8ae8-73c1e4161687-clustermesh-secrets\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.082704 kubelet[2644]: I1002 20:06:40.082518 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-etc-cni-netd\") pod \"cilium-s29m8\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " pod="kube-system/cilium-s29m8" Oct 2 20:06:40.194418 kubelet[2644]: I1002 20:06:40.194384 2644 topology_manager.go:215] "Topology Admit Handler" podUID="3d349b9a-5f5f-4211-8542-bbf84845acd2" podNamespace="kube-system" podName="cilium-operator-6bc8ccdb58-qdw7p" Oct 2 20:06:40.235354 systemd[1]: Created slice kubepods-besteffort-pod3d349b9a_5f5f_4211_8542_bbf84845acd2.slice. Oct 2 20:06:40.353660 env[1630]: time="2023-10-02T20:06:40.353597328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xkdmb,Uid:b3543590-9d10-4a80-8ce5-6232af6db3f5,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:40.382691 env[1630]: time="2023-10-02T20:06:40.382598151Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-s29m8,Uid:ed9f18b0-a321-47f8-8ae8-73c1e4161687,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:40.390926 env[1630]: time="2023-10-02T20:06:40.390783156Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:40.390926 env[1630]: time="2023-10-02T20:06:40.390831503Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:40.390926 env[1630]: time="2023-10-02T20:06:40.390848176Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:40.392060 env[1630]: time="2023-10-02T20:06:40.391001601Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ff704853b24f03f03ec6a60d3fb93d1ff739aec782b3863cc01ce2bae80fba09 pid=2986 runtime=io.containerd.runc.v2 Oct 2 20:06:40.395284 kubelet[2644]: I1002 20:06:40.394120 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3d349b9a-5f5f-4211-8542-bbf84845acd2-cilium-config-path\") pod \"cilium-operator-6bc8ccdb58-qdw7p\" (UID: \"3d349b9a-5f5f-4211-8542-bbf84845acd2\") " pod="kube-system/cilium-operator-6bc8ccdb58-qdw7p" Oct 2 20:06:40.395284 kubelet[2644]: I1002 20:06:40.394256 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f9h7m\" (UniqueName: \"kubernetes.io/projected/3d349b9a-5f5f-4211-8542-bbf84845acd2-kube-api-access-f9h7m\") pod \"cilium-operator-6bc8ccdb58-qdw7p\" (UID: \"3d349b9a-5f5f-4211-8542-bbf84845acd2\") " pod="kube-system/cilium-operator-6bc8ccdb58-qdw7p" Oct 2 20:06:40.415940 systemd[1]: Started cri-containerd-ff704853b24f03f03ec6a60d3fb93d1ff739aec782b3863cc01ce2bae80fba09.scope. Oct 2 20:06:40.434479 env[1630]: time="2023-10-02T20:06:40.432324058Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:40.434764 env[1630]: time="2023-10-02T20:06:40.434619570Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:40.434764 env[1630]: time="2023-10-02T20:06:40.434667703Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:40.435630 env[1630]: time="2023-10-02T20:06:40.435559139Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608 pid=3014 runtime=io.containerd.runc.v2 Oct 2 20:06:40.455441 systemd[1]: Started cri-containerd-1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608.scope. Oct 2 20:06:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.468000 audit: BPF prog-id=112 op=LOAD Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2986 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373034383533623234663033663033656336613630643366623933 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2986 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373034383533623234663033663033656336613630643366623933 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit: BPF prog-id=113 op=LOAD Oct 2 20:06:40.469000 audit[2996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000185d80 items=0 ppid=2986 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373034383533623234663033663033656336613630643366623933 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.469000 audit: BPF prog-id=114 op=LOAD Oct 2 20:06:40.469000 audit[2996]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000185dc8 items=0 ppid=2986 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.469000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373034383533623234663033663033656336613630643366623933 Oct 2 20:06:40.469000 audit: BPF prog-id=114 op=UNLOAD Oct 2 20:06:40.469000 audit: BPF prog-id=113 op=UNLOAD Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { perfmon } for pid=2996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit[2996]: AVC avc: denied { bpf } for pid=2996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.470000 audit: BPF prog-id=115 op=LOAD Oct 2 20:06:40.470000 audit[2996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c21d8 items=0 ppid=2986 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666373034383533623234663033663033656336613630643366623933 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.490000 audit: BPF prog-id=116 op=LOAD Oct 2 20:06:40.491000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.491000 audit[3023]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3014 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343761313231323962353263323964303062316663643334383936 Oct 2 20:06:40.491000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.491000 audit[3023]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3014 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343761313231323962353263323964303062316663643334383936 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit: BPF prog-id=117 op=LOAD Oct 2 20:06:40.492000 audit[3023]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00037c720 items=0 ppid=3014 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343761313231323962353263323964303062316663643334383936 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit: BPF prog-id=118 op=LOAD Oct 2 20:06:40.492000 audit[3023]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00037c768 items=0 ppid=3014 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343761313231323962353263323964303062316663643334383936 Oct 2 20:06:40.492000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:06:40.492000 audit: BPF prog-id=117 op=UNLOAD Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { perfmon } for pid=3023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit[3023]: AVC avc: denied { bpf } for pid=3023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.492000 audit: BPF prog-id=119 op=LOAD Oct 2 20:06:40.492000 audit[3023]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00037cb78 items=0 ppid=3014 pid=3023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139343761313231323962353263323964303062316663643334383936 Oct 2 20:06:40.527127 env[1630]: time="2023-10-02T20:06:40.526900757Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-xkdmb,Uid:b3543590-9d10-4a80-8ce5-6232af6db3f5,Namespace:kube-system,Attempt:0,} returns sandbox id \"ff704853b24f03f03ec6a60d3fb93d1ff739aec782b3863cc01ce2bae80fba09\"" Oct 2 20:06:40.552715 env[1630]: time="2023-10-02T20:06:40.552477817Z" level=info msg="CreateContainer within sandbox \"ff704853b24f03f03ec6a60d3fb93d1ff739aec782b3863cc01ce2bae80fba09\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:06:40.554777 env[1630]: time="2023-10-02T20:06:40.554388181Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-qdw7p,Uid:3d349b9a-5f5f-4211-8542-bbf84845acd2,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:40.561527 env[1630]: time="2023-10-02T20:06:40.561482232Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-s29m8,Uid:ed9f18b0-a321-47f8-8ae8-73c1e4161687,Namespace:kube-system,Attempt:0,} returns sandbox id \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\"" Oct 2 20:06:40.567325 env[1630]: time="2023-10-02T20:06:40.566751872Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:06:40.586536 env[1630]: time="2023-10-02T20:06:40.586484536Z" level=info msg="CreateContainer within sandbox \"ff704853b24f03f03ec6a60d3fb93d1ff739aec782b3863cc01ce2bae80fba09\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"39a7a4855757f40290ae2aa6f74659ae06f055417f3d56638621d275d6c1d7a7\"" Oct 2 20:06:40.590374 env[1630]: time="2023-10-02T20:06:40.589954469Z" level=info msg="StartContainer for \"39a7a4855757f40290ae2aa6f74659ae06f055417f3d56638621d275d6c1d7a7\"" Oct 2 20:06:40.597984 env[1630]: time="2023-10-02T20:06:40.597319362Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:40.597984 env[1630]: time="2023-10-02T20:06:40.597758496Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:40.597984 env[1630]: time="2023-10-02T20:06:40.597776801Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:40.598336 env[1630]: time="2023-10-02T20:06:40.598052915Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022 pid=3071 runtime=io.containerd.runc.v2 Oct 2 20:06:40.638871 systemd[1]: Started cri-containerd-39a7a4855757f40290ae2aa6f74659ae06f055417f3d56638621d275d6c1d7a7.scope. Oct 2 20:06:40.668181 systemd[1]: Started cri-containerd-445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022.scope. Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.695000 audit: BPF prog-id=120 op=LOAD Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3071 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434356439623066323534313266323466613635623235653339363864 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3071 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434356439623066323534313266323466613635623235653339363864 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit: BPF prog-id=121 op=LOAD Oct 2 20:06:40.700000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c000388340 items=0 ppid=3071 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434356439623066323534313266323466613635623235653339363864 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.700000 audit: BPF prog-id=122 op=LOAD Oct 2 20:06:40.700000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000388388 items=0 ppid=3071 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434356439623066323534313266323466613635623235653339363864 Oct 2 20:06:40.700000 audit: BPF prog-id=122 op=UNLOAD Oct 2 20:06:40.700000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { perfmon } for pid=3084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit[3084]: AVC avc: denied { bpf } for pid=3084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.701000 audit: BPF prog-id=123 op=LOAD Oct 2 20:06:40.701000 audit[3084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000388798 items=0 ppid=3071 pid=3084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3434356439623066323534313266323466613635623235653339363864 Oct 2 20:06:40.723000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.723000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2986 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613761343835353735376634303239306165326161366637343635 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.724000 audit: BPF prog-id=124 op=LOAD Oct 2 20:06:40.724000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003ae160 items=0 ppid=2986 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.724000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613761343835353735376634303239306165326161366637343635 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.725000 audit: BPF prog-id=125 op=LOAD Oct 2 20:06:40.725000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003ae1a8 items=0 ppid=2986 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613761343835353735376634303239306165326161366637343635 Oct 2 20:06:40.725000 audit: BPF prog-id=125 op=UNLOAD Oct 2 20:06:40.725000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { perfmon } for pid=3091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit[3091]: AVC avc: denied { bpf } for pid=3091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:40.726000 audit: BPF prog-id=126 op=LOAD Oct 2 20:06:40.726000 audit[3091]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003ae238 items=0 ppid=2986 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:40.726000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613761343835353735376634303239306165326161366637343635 Oct 2 20:06:40.765437 env[1630]: time="2023-10-02T20:06:40.765284746Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-6bc8ccdb58-qdw7p,Uid:3d349b9a-5f5f-4211-8542-bbf84845acd2,Namespace:kube-system,Attempt:0,} returns sandbox id \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\"" Oct 2 20:06:40.770558 env[1630]: time="2023-10-02T20:06:40.770491777Z" level=info msg="StartContainer for \"39a7a4855757f40290ae2aa6f74659ae06f055417f3d56638621d275d6c1d7a7\" returns successfully" Oct 2 20:06:41.004000 audit[3162]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=3162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.004000 audit[3162]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa35c0bf0 a2=0 a3=7fffa35c0bdc items=0 ppid=3114 pid=3162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.004000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:41.009000 audit[3163]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=3163 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.009000 audit[3163]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc815fee60 a2=0 a3=7ffc815fee4c items=0 ppid=3114 pid=3163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.009000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:41.014000 audit[3164]: NETFILTER_CFG table=mangle:40 family=2 entries=1 op=nft_register_chain pid=3164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.014000 audit[3164]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd3205520 a2=0 a3=7fffd320550c items=0 ppid=3114 pid=3164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.014000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:41.017000 audit[3165]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=3165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.017000 audit[3165]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff119c20d0 a2=0 a3=7fff119c20bc items=0 ppid=3114 pid=3165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.017000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:41.019000 audit[3166]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=3166 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.019000 audit[3166]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcef8c6320 a2=0 a3=7ffcef8c630c items=0 ppid=3114 pid=3166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.019000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:41.020000 audit[3167]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=3167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.020000 audit[3167]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd0d03040 a2=0 a3=7fffd0d0302c items=0 ppid=3114 pid=3167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.020000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:41.109000 audit[3168]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=3168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.109000 audit[3168]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffc372fc80 a2=0 a3=7fffc372fc6c items=0 ppid=3114 pid=3168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.109000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:41.113000 audit[3170]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=3170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.113000 audit[3170]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffa1d4e650 a2=0 a3=7fffa1d4e63c items=0 ppid=3114 pid=3170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.113000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:06:41.118000 audit[3173]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=3173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.118000 audit[3173]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffed5c79850 a2=0 a3=7ffed5c7983c items=0 ppid=3114 pid=3173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.118000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:06:41.119000 audit[3174]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=3174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.119000 audit[3174]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe91013550 a2=0 a3=7ffe9101353c items=0 ppid=3114 pid=3174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.119000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:41.122000 audit[3176]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=3176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.122000 audit[3176]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffeac1ccb0 a2=0 a3=7fffeac1cc9c items=0 ppid=3114 pid=3176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.122000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:41.123000 audit[3177]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=3177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.123000 audit[3177]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe24e04670 a2=0 a3=7ffe24e0465c items=0 ppid=3114 pid=3177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.123000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:41.127000 audit[3179]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=3179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.127000 audit[3179]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe0176a690 a2=0 a3=7ffe0176a67c items=0 ppid=3114 pid=3179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.127000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:41.134000 audit[3182]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=3182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.134000 audit[3182]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe7b501ec0 a2=0 a3=7ffe7b501eac items=0 ppid=3114 pid=3182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.134000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:06:41.135000 audit[3183]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=3183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.135000 audit[3183]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca9cf9430 a2=0 a3=7ffca9cf941c items=0 ppid=3114 pid=3183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.135000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:41.143000 audit[3185]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=3185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.143000 audit[3185]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc3a641c80 a2=0 a3=7ffc3a641c6c items=0 ppid=3114 pid=3185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.143000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:41.146000 audit[3186]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=3186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.146000 audit[3186]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd1e1bb910 a2=0 a3=7ffd1e1bb8fc items=0 ppid=3114 pid=3186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.146000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:41.150000 audit[3188]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=3188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.150000 audit[3188]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd52cea360 a2=0 a3=7ffd52cea34c items=0 ppid=3114 pid=3188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.150000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:41.154000 audit[3191]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=3191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.154000 audit[3191]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdc1b4ad90 a2=0 a3=7ffdc1b4ad7c items=0 ppid=3114 pid=3191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:41.159000 audit[3194]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=3194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.159000 audit[3194]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffdb55a7b50 a2=0 a3=7ffdb55a7b3c items=0 ppid=3114 pid=3194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.159000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:41.161000 audit[3195]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=3195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.161000 audit[3195]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffed63bd070 a2=0 a3=7ffed63bd05c items=0 ppid=3114 pid=3195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.161000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:41.164000 audit[3197]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=3197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.164000 audit[3197]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc12a3baa0 a2=0 a3=7ffc12a3ba8c items=0 ppid=3114 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:41.168000 audit[3200]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=3200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.168000 audit[3200]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdeb8fe790 a2=0 a3=7ffdeb8fe77c items=0 ppid=3114 pid=3200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:41.170000 audit[3201]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=3201 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.170000 audit[3201]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe1aeb19f0 a2=0 a3=7ffe1aeb19dc items=0 ppid=3114 pid=3201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:41.173000 audit[3203]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=3203 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:41.173000 audit[3203]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffda962ada0 a2=0 a3=7ffda962ad8c items=0 ppid=3114 pid=3203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.173000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:41.225000 audit[3209]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=3209 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:41.225000 audit[3209]: SYSCALL arch=c000003e syscall=46 success=yes exit=4956 a0=3 a1=7ffc3b67c8a0 a2=0 a3=7ffc3b67c88c items=0 ppid=3114 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:41.240000 audit[3209]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=3209 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:41.240000 audit[3209]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc3b67c8a0 a2=0 a3=7ffc3b67c88c items=0 ppid=3114 pid=3209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:41.244000 audit[3214]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=3214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.244000 audit[3214]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fff32f6de60 a2=0 a3=7fff32f6de4c items=0 ppid=3114 pid=3214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.244000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:41.252000 audit[3216]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=3216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.252000 audit[3216]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff1a7766c0 a2=0 a3=7fff1a7766ac items=0 ppid=3114 pid=3216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.252000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:06:41.284000 audit[3219]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=3219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.284000 audit[3219]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd462cf500 a2=0 a3=7ffd462cf4ec items=0 ppid=3114 pid=3219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.284000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:06:41.325000 audit[3220]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=3220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.325000 audit[3220]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe7ef70cb0 a2=0 a3=7ffe7ef70c9c items=0 ppid=3114 pid=3220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.325000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:41.341000 audit[3222]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=3222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.341000 audit[3222]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd6f025d40 a2=0 a3=7ffd6f025d2c items=0 ppid=3114 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.341000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:41.344000 audit[3223]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=3223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.344000 audit[3223]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe0c8edf60 a2=0 a3=7ffe0c8edf4c items=0 ppid=3114 pid=3223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.344000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:41.348000 audit[3225]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=3225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.348000 audit[3225]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc41a84c10 a2=0 a3=7ffc41a84bfc items=0 ppid=3114 pid=3225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.348000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:06:41.373000 audit[3228]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=3228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.373000 audit[3228]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fffcb45b9d0 a2=0 a3=7fffcb45b9bc items=0 ppid=3114 pid=3228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.373000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:41.378000 audit[3229]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=3229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.378000 audit[3229]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef2855930 a2=0 a3=7ffef285591c items=0 ppid=3114 pid=3229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.378000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:41.382000 audit[3231]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=3231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.382000 audit[3231]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff1c035230 a2=0 a3=7fff1c03521c items=0 ppid=3114 pid=3231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.382000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:41.383000 audit[3232]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=3232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.383000 audit[3232]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd303d3b20 a2=0 a3=7ffd303d3b0c items=0 ppid=3114 pid=3232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:41.386000 audit[3234]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=3234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.386000 audit[3234]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffa0647500 a2=0 a3=7fffa06474ec items=0 ppid=3114 pid=3234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.386000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:41.390000 audit[3237]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=3237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.390000 audit[3237]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff1ac08630 a2=0 a3=7fff1ac0861c items=0 ppid=3114 pid=3237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:41.394000 audit[3240]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=3240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.394000 audit[3240]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc07e9e2d0 a2=0 a3=7ffc07e9e2bc items=0 ppid=3114 pid=3240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.394000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:06:41.396000 audit[3241]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=3241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.396000 audit[3241]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcb8bb73f0 a2=0 a3=7ffcb8bb73dc items=0 ppid=3114 pid=3241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.396000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:41.398000 audit[3243]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=3243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.398000 audit[3243]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffcf13d1b20 a2=0 a3=7ffcf13d1b0c items=0 ppid=3114 pid=3243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.398000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:41.403000 audit[3246]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=3246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.403000 audit[3246]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcf97181f0 a2=0 a3=7ffcf97181dc items=0 ppid=3114 pid=3246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.403000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:41.404000 audit[3247]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=3247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.404000 audit[3247]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff63af6250 a2=0 a3=7fff63af623c items=0 ppid=3114 pid=3247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.404000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:41.407000 audit[3249]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=3249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.407000 audit[3249]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc173b8d60 a2=0 a3=7ffc173b8d4c items=0 ppid=3114 pid=3249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.407000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:41.409000 audit[3250]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3250 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.409000 audit[3250]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc03008a20 a2=0 a3=7ffc03008a0c items=0 ppid=3114 pid=3250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.409000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:41.412000 audit[3252]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=3252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.412000 audit[3252]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd077fa500 a2=0 a3=7ffd077fa4ec items=0 ppid=3114 pid=3252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.412000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:41.416000 audit[3255]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=3255 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:41.416000 audit[3255]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffc6d928fc0 a2=0 a3=7ffc6d928fac items=0 ppid=3114 pid=3255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.416000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:41.424000 audit[3257]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=3257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:41.424000 audit[3257]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffc6fa74640 a2=0 a3=7ffc6fa7462c items=0 ppid=3114 pid=3257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.424000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:41.425000 audit[3257]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=3257 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:41.425000 audit[3257]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffc6fa74640 a2=0 a3=7ffc6fa7462c items=0 ppid=3114 pid=3257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:41.425000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:46.133583 kubelet[2644]: I1002 20:06:46.133546 2644 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-xkdmb" podStartSLOduration=6.133354147 podCreationTimestamp="2023-10-02 20:06:40 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:41.257267807 +0000 UTC m=+15.376151450" watchObservedRunningTime="2023-10-02 20:06:46.133354147 +0000 UTC m=+20.252237790" Oct 2 20:06:47.256850 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount834004470.mount: Deactivated successfully. Oct 2 20:06:51.082775 env[1630]: time="2023-10-02T20:06:51.082719370Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:51.085591 env[1630]: time="2023-10-02T20:06:51.085548356Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:51.087936 env[1630]: time="2023-10-02T20:06:51.087801389Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:51.088748 env[1630]: time="2023-10-02T20:06:51.088603997Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:06:51.098817 env[1630]: time="2023-10-02T20:06:51.098767176Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:06:51.100494 env[1630]: time="2023-10-02T20:06:51.100455980Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:06:51.120757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount338782980.mount: Deactivated successfully. Oct 2 20:06:51.141395 env[1630]: time="2023-10-02T20:06:51.141338357Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\"" Oct 2 20:06:51.143810 env[1630]: time="2023-10-02T20:06:51.143719299Z" level=info msg="StartContainer for \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\"" Oct 2 20:06:51.196837 systemd[1]: Started cri-containerd-ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2.scope. Oct 2 20:06:51.209615 systemd[1]: cri-containerd-ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2.scope: Deactivated successfully. Oct 2 20:06:51.551577 env[1630]: time="2023-10-02T20:06:51.551514355Z" level=info msg="shim disconnected" id=ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2 Oct 2 20:06:51.551577 env[1630]: time="2023-10-02T20:06:51.551573205Z" level=warning msg="cleaning up after shim disconnected" id=ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2 namespace=k8s.io Oct 2 20:06:51.551577 env[1630]: time="2023-10-02T20:06:51.551585994Z" level=info msg="cleaning up dead shim" Oct 2 20:06:51.562988 env[1630]: time="2023-10-02T20:06:51.562933572Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3282 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:51Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:51.563387 env[1630]: time="2023-10-02T20:06:51.563258417Z" level=error msg="copy shim log" error="read /proc/self/fd/51: file already closed" Oct 2 20:06:51.563695 env[1630]: time="2023-10-02T20:06:51.563649266Z" level=error msg="Failed to pipe stdout of container \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\"" error="reading from a closed fifo" Oct 2 20:06:51.564020 env[1630]: time="2023-10-02T20:06:51.563801725Z" level=error msg="Failed to pipe stderr of container \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\"" error="reading from a closed fifo" Oct 2 20:06:51.565993 env[1630]: time="2023-10-02T20:06:51.565938221Z" level=error msg="StartContainer for \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:51.566259 kubelet[2644]: E1002 20:06:51.566231 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2" Oct 2 20:06:51.568665 kubelet[2644]: E1002 20:06:51.567264 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:51.568665 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:51.568665 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:06:51.569666 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jgf7x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:51.569666 kubelet[2644]: E1002 20:06:51.567327 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:06:52.126558 systemd[1]: run-containerd-runc-k8s.io-ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2-runc.st5vmn.mount: Deactivated successfully. Oct 2 20:06:52.126714 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2-rootfs.mount: Deactivated successfully. Oct 2 20:06:52.460746 env[1630]: time="2023-10-02T20:06:52.452812828Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:06:52.492175 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount78484461.mount: Deactivated successfully. Oct 2 20:06:52.524088 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4019533577.mount: Deactivated successfully. Oct 2 20:06:52.574368 env[1630]: time="2023-10-02T20:06:52.574313967Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\"" Oct 2 20:06:52.582114 env[1630]: time="2023-10-02T20:06:52.582068242Z" level=info msg="StartContainer for \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\"" Oct 2 20:06:52.651183 systemd[1]: Started cri-containerd-eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b.scope. Oct 2 20:06:52.684815 systemd[1]: cri-containerd-eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b.scope: Deactivated successfully. Oct 2 20:06:52.744775 env[1630]: time="2023-10-02T20:06:52.744571955Z" level=info msg="shim disconnected" id=eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b Oct 2 20:06:52.744775 env[1630]: time="2023-10-02T20:06:52.744708758Z" level=warning msg="cleaning up after shim disconnected" id=eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b namespace=k8s.io Oct 2 20:06:52.744775 env[1630]: time="2023-10-02T20:06:52.744724112Z" level=info msg="cleaning up dead shim" Oct 2 20:06:52.757519 env[1630]: time="2023-10-02T20:06:52.757465024Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:52Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3318 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:52Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:52.758264 env[1630]: time="2023-10-02T20:06:52.758099222Z" level=error msg="copy shim log" error="read /proc/self/fd/61: file already closed" Oct 2 20:06:52.758829 env[1630]: time="2023-10-02T20:06:52.758782761Z" level=error msg="Failed to pipe stderr of container \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\"" error="reading from a closed fifo" Oct 2 20:06:52.759444 env[1630]: time="2023-10-02T20:06:52.759206383Z" level=error msg="Failed to pipe stdout of container \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\"" error="reading from a closed fifo" Oct 2 20:06:52.761530 env[1630]: time="2023-10-02T20:06:52.761487576Z" level=error msg="StartContainer for \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:52.761763 kubelet[2644]: E1002 20:06:52.761731 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b" Oct 2 20:06:52.762120 kubelet[2644]: E1002 20:06:52.761862 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:52.762120 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:52.762120 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:06:52.762120 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jgf7x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:52.762120 kubelet[2644]: E1002 20:06:52.761916 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:06:53.452576 kubelet[2644]: I1002 20:06:53.452551 2644 scope.go:117] "RemoveContainer" containerID="ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2" Oct 2 20:06:53.453996 kubelet[2644]: I1002 20:06:53.453971 2644 scope.go:117] "RemoveContainer" containerID="ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2" Oct 2 20:06:53.476149 env[1630]: time="2023-10-02T20:06:53.476108422Z" level=info msg="RemoveContainer for \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\"" Oct 2 20:06:53.490916 env[1630]: time="2023-10-02T20:06:53.490871818Z" level=info msg="RemoveContainer for \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\"" Oct 2 20:06:53.491315 env[1630]: time="2023-10-02T20:06:53.491246058Z" level=error msg="RemoveContainer for \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\" failed" error="rpc error: code = NotFound desc = get container info: container \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\" in namespace \"k8s.io\": not found" Oct 2 20:06:53.492477 kubelet[2644]: E1002 20:06:53.492455 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\" in namespace \"k8s.io\": not found" containerID="ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2" Oct 2 20:06:53.492656 kubelet[2644]: E1002 20:06:53.492644 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2" in namespace "k8s.io": not found; Skipping pod "cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)" Oct 2 20:06:53.493188 kubelet[2644]: E1002 20:06:53.493174 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:06:53.501530 env[1630]: time="2023-10-02T20:06:53.499211272Z" level=info msg="RemoveContainer for \"ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2\" returns successfully" Oct 2 20:06:53.652728 env[1630]: time="2023-10-02T20:06:53.652678313Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:53.655552 env[1630]: time="2023-10-02T20:06:53.655508520Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:53.658077 env[1630]: time="2023-10-02T20:06:53.658036906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:53.658710 env[1630]: time="2023-10-02T20:06:53.658674109Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:06:53.663064 env[1630]: time="2023-10-02T20:06:53.662880294Z" level=info msg="CreateContainer within sandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:06:53.678264 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3325314682.mount: Deactivated successfully. Oct 2 20:06:53.692159 env[1630]: time="2023-10-02T20:06:53.692106551Z" level=info msg="CreateContainer within sandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\"" Oct 2 20:06:53.695325 env[1630]: time="2023-10-02T20:06:53.693708861Z" level=info msg="StartContainer for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\"" Oct 2 20:06:53.725304 systemd[1]: Started cri-containerd-a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d.scope. Oct 2 20:06:53.759694 kernel: kauditd_printk_skb: 372 callbacks suppressed Oct 2 20:06:53.759953 kernel: audit: type=1400 audit(1696277213.745:1065): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.760023 kernel: audit: type=1400 audit(1696277213.745:1066): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.773790 kernel: audit: type=1400 audit(1696277213.745:1067): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.774010 kernel: audit: type=1400 audit(1696277213.745:1068): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.778707 kernel: audit: type=1400 audit(1696277213.745:1069): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.778853 kernel: audit: type=1400 audit(1696277213.745:1070): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.798933 kernel: audit: type=1400 audit(1696277213.745:1071): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.799146 kernel: audit: type=1400 audit(1696277213.745:1072): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.752000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.819658 kernel: audit: type=1400 audit(1696277213.745:1073): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.819856 kernel: audit: type=1400 audit(1696277213.752:1074): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.752000 audit: BPF prog-id=127 op=LOAD Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3071 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:53.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139343936303630643835653731643262613261303739643438346335 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3071 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:53.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139343936303630643835653731643262613261303739643438346335 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.754000 audit: BPF prog-id=128 op=LOAD Oct 2 20:06:53.754000 audit[3337]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c4090 items=0 ppid=3071 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:53.754000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139343936303630643835653731643262613261303739643438346335 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit: BPF prog-id=129 op=LOAD Oct 2 20:06:53.758000 audit[3337]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c40d8 items=0 ppid=3071 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:53.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139343936303630643835653731643262613261303739643438346335 Oct 2 20:06:53.758000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:06:53.758000 audit: BPF prog-id=128 op=UNLOAD Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { perfmon } for pid=3337 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit[3337]: AVC avc: denied { bpf } for pid=3337 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:53.758000 audit: BPF prog-id=130 op=LOAD Oct 2 20:06:53.758000 audit[3337]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c44e8 items=0 ppid=3071 pid=3337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:53.758000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139343936303630643835653731643262613261303739643438346335 Oct 2 20:06:53.834096 env[1630]: time="2023-10-02T20:06:53.834047005Z" level=info msg="StartContainer for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" returns successfully" Oct 2 20:06:53.864000 audit[3348]: AVC avc: denied { map_create } for pid=3348 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c215,c997 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c215,c997 tclass=bpf permissive=0 Oct 2 20:06:53.864000 audit[3348]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0006177d0 a2=48 a3=c0006177c0 items=0 ppid=3071 pid=3348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c215,c997 key=(null) Oct 2 20:06:53.864000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:06:54.464282 kubelet[2644]: E1002 20:06:54.463820 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:06:54.676076 kubelet[2644]: W1002 20:06:54.676033 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice/cri-containerd-ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2.scope WatchSource:0}: container "ed4aa6c27ed7ff063e4ff27a41d741e659f0ad5bd620c034e0c7fe24720035f2" in namespace "k8s.io": not found Oct 2 20:06:54.739622 kubelet[2644]: I1002 20:06:54.739504 2644 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-6bc8ccdb58-qdw7p" podStartSLOduration=1.847950069 podCreationTimestamp="2023-10-02 20:06:40 +0000 UTC" firstStartedPulling="2023-10-02 20:06:40.767665234 +0000 UTC m=+14.886548859" lastFinishedPulling="2023-10-02 20:06:53.6591685 +0000 UTC m=+27.778052128" observedRunningTime="2023-10-02 20:06:54.674126293 +0000 UTC m=+28.793009937" watchObservedRunningTime="2023-10-02 20:06:54.739453338 +0000 UTC m=+28.858336982" Oct 2 20:06:57.790783 kubelet[2644]: W1002 20:06:57.790736 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice/cri-containerd-eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b.scope WatchSource:0}: task eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b not found: not found Oct 2 20:07:08.118842 env[1630]: time="2023-10-02T20:07:08.117717104Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:07:08.147209 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount978695157.mount: Deactivated successfully. Oct 2 20:07:08.159367 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount48677816.mount: Deactivated successfully. Oct 2 20:07:08.166455 env[1630]: time="2023-10-02T20:07:08.166402811Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\"" Oct 2 20:07:08.168676 env[1630]: time="2023-10-02T20:07:08.167433550Z" level=info msg="StartContainer for \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\"" Oct 2 20:07:08.225278 systemd[1]: Started cri-containerd-c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096.scope. Oct 2 20:07:08.245039 systemd[1]: cri-containerd-c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096.scope: Deactivated successfully. Oct 2 20:07:08.382611 env[1630]: time="2023-10-02T20:07:08.382491144Z" level=info msg="shim disconnected" id=c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096 Oct 2 20:07:08.382919 env[1630]: time="2023-10-02T20:07:08.382895662Z" level=warning msg="cleaning up after shim disconnected" id=c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096 namespace=k8s.io Oct 2 20:07:08.383034 env[1630]: time="2023-10-02T20:07:08.383017687Z" level=info msg="cleaning up dead shim" Oct 2 20:07:08.411207 env[1630]: time="2023-10-02T20:07:08.411105247Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3392 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:08Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:08.411555 env[1630]: time="2023-10-02T20:07:08.411492357Z" level=error msg="copy shim log" error="read /proc/self/fd/96: file already closed" Oct 2 20:07:08.411814 env[1630]: time="2023-10-02T20:07:08.411766550Z" level=error msg="Failed to pipe stdout of container \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\"" error="reading from a closed fifo" Oct 2 20:07:08.413337 env[1630]: time="2023-10-02T20:07:08.413288810Z" level=error msg="Failed to pipe stderr of container \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\"" error="reading from a closed fifo" Oct 2 20:07:08.415434 env[1630]: time="2023-10-02T20:07:08.415377508Z" level=error msg="StartContainer for \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:08.416304 kubelet[2644]: E1002 20:07:08.416278 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096" Oct 2 20:07:08.418054 kubelet[2644]: E1002 20:07:08.416397 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:08.418054 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:08.418054 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:07:08.418054 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jgf7x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:08.418054 kubelet[2644]: E1002 20:07:08.416450 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:07:08.501257 kubelet[2644]: I1002 20:07:08.500832 2644 scope.go:117] "RemoveContainer" containerID="eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b" Oct 2 20:07:08.501257 kubelet[2644]: I1002 20:07:08.501209 2644 scope.go:117] "RemoveContainer" containerID="eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b" Oct 2 20:07:08.502887 env[1630]: time="2023-10-02T20:07:08.502849277Z" level=info msg="RemoveContainer for \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\"" Oct 2 20:07:08.505038 env[1630]: time="2023-10-02T20:07:08.504327827Z" level=info msg="RemoveContainer for \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\"" Oct 2 20:07:08.505038 env[1630]: time="2023-10-02T20:07:08.504467031Z" level=error msg="RemoveContainer for \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\" failed" error="failed to set removing state for container \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\": container is already in removing state" Oct 2 20:07:08.505483 kubelet[2644]: E1002 20:07:08.504645 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\": container is already in removing state" containerID="eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b" Oct 2 20:07:08.505483 kubelet[2644]: E1002 20:07:08.504683 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b": container is already in removing state; Skipping pod "cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)" Oct 2 20:07:08.512345 kubelet[2644]: E1002 20:07:08.506558 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:07:08.517830 env[1630]: time="2023-10-02T20:07:08.517787173Z" level=info msg="RemoveContainer for \"eae86ad8849ddf38d236b006c2e835ca06e8f723b3bf117a4939a281f39c098b\" returns successfully" Oct 2 20:07:09.145292 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096-rootfs.mount: Deactivated successfully. Oct 2 20:07:11.492494 kubelet[2644]: W1002 20:07:11.492457 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice/cri-containerd-c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096.scope WatchSource:0}: task c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096 not found: not found Oct 2 20:07:15.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.142:22-139.178.89.65:41578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:15.086392 systemd[1]: Started sshd@7-172.31.27.142:22-139.178.89.65:41578.service. Oct 2 20:07:15.088888 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:07:15.088965 kernel: audit: type=1130 audit(1696277235.085:1084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.142:22-139.178.89.65:41578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:15.300000 audit[3408]: USER_ACCT pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.301593 sshd[3408]: Accepted publickey for core from 139.178.89.65 port 41578 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:15.306000 audit[3408]: CRED_ACQ pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.308691 sshd[3408]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:15.314185 kernel: audit: type=1101 audit(1696277235.300:1085): pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.314312 kernel: audit: type=1103 audit(1696277235.306:1086): pid=3408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.314345 kernel: audit: type=1006 audit(1696277235.306:1087): pid=3408 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:07:15.316012 systemd[1]: Started session-8.scope. Oct 2 20:07:15.317973 kernel: audit: type=1300 audit(1696277235.306:1087): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcd71e350 a2=3 a3=0 items=0 ppid=1 pid=3408 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:15.306000 audit[3408]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcd71e350 a2=3 a3=0 items=0 ppid=1 pid=3408 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:15.318395 systemd-logind[1624]: New session 8 of user core. Oct 2 20:07:15.325154 kernel: audit: type=1327 audit(1696277235.306:1087): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:15.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:15.324000 audit[3408]: USER_START pid=3408 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.333540 kernel: audit: type=1105 audit(1696277235.324:1088): pid=3408 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.333666 kernel: audit: type=1103 audit(1696277235.327:1089): pid=3410 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.327000 audit[3410]: CRED_ACQ pid=3410 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.566741 sshd[3408]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:15.567000 audit[3408]: USER_END pid=3408 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.567000 audit[3408]: CRED_DISP pid=3408 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.575573 systemd[1]: sshd@7-172.31.27.142:22-139.178.89.65:41578.service: Deactivated successfully. Oct 2 20:07:15.576530 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:07:15.578431 systemd-logind[1624]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:07:15.579693 systemd-logind[1624]: Removed session 8. Oct 2 20:07:15.580143 kernel: audit: type=1106 audit(1696277235.567:1090): pid=3408 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.580190 kernel: audit: type=1104 audit(1696277235.567:1091): pid=3408 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:15.574000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.27.142:22-139.178.89.65:41578 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:20.108931 kubelet[2644]: E1002 20:07:20.108898 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:07:20.917000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.919894 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:20.920003 kernel: audit: type=1400 audit(1696277240.917:1094): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.917000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.931241 kernel: audit: type=1400 audit(1696277240.917:1093): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:20.931479 kernel: audit: type=1300 audit(1696277240.917:1093): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d7b440 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:20.917000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d7b440 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:20.917000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:20.945209 kernel: audit: type=1327 audit(1696277240.917:1093): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:20.945341 kernel: audit: type=1300 audit(1696277240.917:1094): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc6c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:20.917000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0012cc6c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:20.917000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:20.962186 kernel: audit: type=1327 audit(1696277240.917:1094): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:22.378000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.378000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.399609 kernel: audit: type=1400 audit(1696277242.378:1095): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.399754 kernel: audit: type=1400 audit(1696277242.378:1096): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.399801 kernel: audit: type=1300 audit(1696277242.378:1096): arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00838e380 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.378000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c00838e380 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:22.379000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.379000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006719a10 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:22.378000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006e32870 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.378000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:22.396000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.415330 kernel: audit: type=1327 audit(1696277242.378:1096): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:22.396000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006e328d0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:22.399000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.399000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c0081d8880 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:22.399000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:22.399000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4e a1=c006719b90 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:07:22.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:25.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.142:22-139.178.89.65:33646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:25.596017 systemd[1]: Started sshd@8-172.31.27.142:22-139.178.89.65:33646.service. Oct 2 20:07:25.771000 audit[3421]: USER_ACCT pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:25.771811 sshd[3421]: Accepted publickey for core from 139.178.89.65 port 33646 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:25.772000 audit[3421]: CRED_ACQ pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:25.773000 audit[3421]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdf83f6d00 a2=3 a3=0 items=0 ppid=1 pid=3421 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:25.773000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:25.773741 sshd[3421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:25.781249 systemd[1]: Started session-9.scope. Oct 2 20:07:25.781751 systemd-logind[1624]: New session 9 of user core. Oct 2 20:07:25.789000 audit[3421]: USER_START pid=3421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:25.791000 audit[3423]: CRED_ACQ pid=3423 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:26.017647 sshd[3421]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:26.021251 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 20:07:26.021366 kernel: audit: type=1106 audit(1696277246.019:1107): pid=3421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:26.019000 audit[3421]: USER_END pid=3421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:26.019000 audit[3421]: CRED_DISP pid=3421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:26.030773 systemd-logind[1624]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:07:26.034258 kernel: audit: type=1104 audit(1696277246.019:1108): pid=3421 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:26.032575 systemd[1]: sshd@8-172.31.27.142:22-139.178.89.65:33646.service: Deactivated successfully. Oct 2 20:07:26.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.142:22-139.178.89.65:33646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:26.033649 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:07:26.035739 systemd-logind[1624]: Removed session 9. Oct 2 20:07:26.040282 kernel: audit: type=1131 audit(1696277246.027:1109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.27.142:22-139.178.89.65:33646 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:32.114440 env[1630]: time="2023-10-02T20:07:32.114390514Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:07:32.157083 env[1630]: time="2023-10-02T20:07:32.151509887Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\"" Oct 2 20:07:32.157083 env[1630]: time="2023-10-02T20:07:32.152910734Z" level=info msg="StartContainer for \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\"" Oct 2 20:07:32.200738 systemd[1]: Started cri-containerd-7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979.scope. Oct 2 20:07:32.234836 systemd[1]: cri-containerd-7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979.scope: Deactivated successfully. Oct 2 20:07:32.247879 env[1630]: time="2023-10-02T20:07:32.247817369Z" level=info msg="shim disconnected" id=7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979 Oct 2 20:07:32.247879 env[1630]: time="2023-10-02T20:07:32.247878088Z" level=warning msg="cleaning up after shim disconnected" id=7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979 namespace=k8s.io Oct 2 20:07:32.248196 env[1630]: time="2023-10-02T20:07:32.247889428Z" level=info msg="cleaning up dead shim" Oct 2 20:07:32.261720 env[1630]: time="2023-10-02T20:07:32.261672222Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3462 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:32.262017 env[1630]: time="2023-10-02T20:07:32.261952962Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:07:32.262305 env[1630]: time="2023-10-02T20:07:32.262267091Z" level=error msg="Failed to pipe stdout of container \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\"" error="reading from a closed fifo" Oct 2 20:07:32.267958 env[1630]: time="2023-10-02T20:07:32.267890396Z" level=error msg="Failed to pipe stderr of container \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\"" error="reading from a closed fifo" Oct 2 20:07:32.271488 env[1630]: time="2023-10-02T20:07:32.271388620Z" level=error msg="StartContainer for \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:32.271900 kubelet[2644]: E1002 20:07:32.271731 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979" Oct 2 20:07:32.276606 kubelet[2644]: E1002 20:07:32.272014 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:32.276606 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:32.276606 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:07:32.276606 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jgf7x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:32.276606 kubelet[2644]: E1002 20:07:32.272112 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:07:32.560707 kubelet[2644]: I1002 20:07:32.560592 2644 scope.go:117] "RemoveContainer" containerID="c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096" Oct 2 20:07:32.563855 kubelet[2644]: I1002 20:07:32.563818 2644 scope.go:117] "RemoveContainer" containerID="c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096" Oct 2 20:07:32.572995 env[1630]: time="2023-10-02T20:07:32.572955175Z" level=info msg="RemoveContainer for \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\"" Oct 2 20:07:32.590244 env[1630]: time="2023-10-02T20:07:32.588526632Z" level=info msg="RemoveContainer for \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\" returns successfully" Oct 2 20:07:32.590244 env[1630]: time="2023-10-02T20:07:32.590147861Z" level=error msg="ContainerStatus for \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\": not found" Oct 2 20:07:32.591492 kubelet[2644]: E1002 20:07:32.590671 2644 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096\": not found" containerID="c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096" Oct 2 20:07:32.591492 kubelet[2644]: E1002 20:07:32.590727 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": failed to get container status "c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096": rpc error: code = NotFound desc = an error occurred when try to find container "c09093eb911917cad8a38f38e9c74fdc89a5eb91a806463645c08a99f3c45096": not found; Skipping pod "cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)" Oct 2 20:07:32.591492 kubelet[2644]: E1002 20:07:32.591123 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:07:33.144074 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979-rootfs.mount: Deactivated successfully. Oct 2 20:07:35.353373 kubelet[2644]: W1002 20:07:35.353333 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice/cri-containerd-7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979.scope WatchSource:0}: task 7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979 not found: not found Oct 2 20:07:36.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.142:22-139.178.89.65:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:36.055755 systemd[1]: Started sshd@9-172.31.27.142:22-139.178.89.65:35706.service. Oct 2 20:07:36.067923 kernel: audit: type=1130 audit(1696277256.054:1110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.142:22-139.178.89.65:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:36.259000 audit[3476]: USER_ACCT pid=3476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.266510 kernel: audit: type=1101 audit(1696277256.259:1111): pid=3476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.266589 sshd[3476]: Accepted publickey for core from 139.178.89.65 port 35706 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:36.265000 audit[3476]: CRED_ACQ pid=3476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.267654 sshd[3476]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:36.274733 systemd[1]: Started session-10.scope. Oct 2 20:07:36.276798 kernel: audit: type=1103 audit(1696277256.265:1112): pid=3476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.276879 kernel: audit: type=1006 audit(1696277256.265:1113): pid=3476 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:07:36.277785 kernel: audit: type=1300 audit(1696277256.265:1113): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda3b0e630 a2=3 a3=0 items=0 ppid=1 pid=3476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.265000 audit[3476]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda3b0e630 a2=3 a3=0 items=0 ppid=1 pid=3476 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:36.277138 systemd-logind[1624]: New session 10 of user core. Oct 2 20:07:36.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:36.286248 kernel: audit: type=1327 audit(1696277256.265:1113): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:36.282000 audit[3476]: USER_START pid=3476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.285000 audit[3478]: CRED_ACQ pid=3478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.300301 kernel: audit: type=1105 audit(1696277256.282:1114): pid=3476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.300405 kernel: audit: type=1103 audit(1696277256.285:1115): pid=3478 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.473336 sshd[3476]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:36.473000 audit[3476]: USER_END pid=3476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.477403 systemd[1]: sshd@9-172.31.27.142:22-139.178.89.65:35706.service: Deactivated successfully. Oct 2 20:07:36.478428 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:07:36.480539 systemd-logind[1624]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:07:36.481766 systemd-logind[1624]: Removed session 10. Oct 2 20:07:36.482292 kernel: audit: type=1106 audit(1696277256.473:1116): pid=3476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.482362 kernel: audit: type=1104 audit(1696277256.474:1117): pid=3476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.474000 audit[3476]: CRED_DISP pid=3476 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:36.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.27.142:22-139.178.89.65:35706 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:38.200000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.200000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000dcb1e0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:38.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:38.209000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.209000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000dcb360 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:38.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:38.213000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.213000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ef52a0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:38.213000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:38.217000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:38.217000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000ef52e0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:07:38.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:46.513979 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:07:46.514477 kernel: audit: type=1130 audit(1696277266.504:1123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.142:22-139.178.89.65:56724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:46.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.142:22-139.178.89.65:56724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:46.504403 systemd[1]: Started sshd@10-172.31.27.142:22-139.178.89.65:56724.service. Oct 2 20:07:46.686000 audit[3490]: USER_ACCT pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.695853 sshd[3490]: Accepted publickey for core from 139.178.89.65 port 56724 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:46.696282 kernel: audit: type=1101 audit(1696277266.686:1124): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.695000 audit[3490]: CRED_ACQ pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.697247 sshd[3490]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:46.708196 systemd[1]: Started session-11.scope. Oct 2 20:07:46.709730 kernel: audit: type=1103 audit(1696277266.695:1125): pid=3490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.709804 kernel: audit: type=1006 audit(1696277266.695:1126): pid=3490 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:07:46.695000 audit[3490]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8004ad80 a2=3 a3=0 items=0 ppid=1 pid=3490 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:46.710067 systemd-logind[1624]: New session 11 of user core. Oct 2 20:07:46.718497 kernel: audit: type=1300 audit(1696277266.695:1126): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc8004ad80 a2=3 a3=0 items=0 ppid=1 pid=3490 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:46.695000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:46.721087 kernel: audit: type=1327 audit(1696277266.695:1126): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:46.720000 audit[3490]: USER_START pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.730290 kernel: audit: type=1105 audit(1696277266.720:1127): pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.729000 audit[3492]: CRED_ACQ pid=3492 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.737306 kernel: audit: type=1103 audit(1696277266.729:1128): pid=3492 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.925870 sshd[3490]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:46.926000 audit[3490]: USER_END pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.929570 systemd[1]: sshd@10-172.31.27.142:22-139.178.89.65:56724.service: Deactivated successfully. Oct 2 20:07:46.930508 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:07:46.932161 systemd-logind[1624]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:07:46.933421 systemd-logind[1624]: Removed session 11. Oct 2 20:07:46.926000 audit[3490]: CRED_DISP pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.940467 kernel: audit: type=1106 audit(1696277266.926:1129): pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.940552 kernel: audit: type=1104 audit(1696277266.926:1130): pid=3490 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:46.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.27.142:22-139.178.89.65:56724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:47.111454 kubelet[2644]: E1002 20:07:47.109067 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:07:56.957017 systemd[1]: Started sshd@11-172.31.27.142:22-139.178.89.65:46164.service. Oct 2 20:07:56.964800 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:56.964909 kernel: audit: type=1130 audit(1696277276.957:1132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.142:22-139.178.89.65:46164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:56.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.142:22-139.178.89.65:46164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:57.129000 audit[3503]: USER_ACCT pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.137455 kernel: audit: type=1101 audit(1696277277.129:1133): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.137514 sshd[3503]: Accepted publickey for core from 139.178.89.65 port 46164 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:57.136000 audit[3503]: CRED_ACQ pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.138775 sshd[3503]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:57.149166 kernel: audit: type=1103 audit(1696277277.136:1134): pid=3503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.149252 kernel: audit: type=1006 audit(1696277277.136:1135): pid=3503 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:07:57.136000 audit[3503]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe746b5280 a2=3 a3=0 items=0 ppid=1 pid=3503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:57.154730 systemd[1]: Started session-12.scope. Oct 2 20:07:57.157589 kernel: audit: type=1300 audit(1696277277.136:1135): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe746b5280 a2=3 a3=0 items=0 ppid=1 pid=3503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:57.157748 kernel: audit: type=1327 audit(1696277277.136:1135): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:57.136000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:57.156822 systemd-logind[1624]: New session 12 of user core. Oct 2 20:07:57.165000 audit[3503]: USER_START pid=3503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.171000 audit[3505]: CRED_ACQ pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.178529 kernel: audit: type=1105 audit(1696277277.165:1136): pid=3503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.178662 kernel: audit: type=1103 audit(1696277277.171:1137): pid=3505 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.366800 sshd[3503]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:57.367000 audit[3503]: USER_END pid=3503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.370970 systemd[1]: sshd@11-172.31.27.142:22-139.178.89.65:46164.service: Deactivated successfully. Oct 2 20:07:57.372001 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:07:57.373897 systemd-logind[1624]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:07:57.375493 systemd-logind[1624]: Removed session 12. Oct 2 20:07:57.367000 audit[3503]: CRED_DISP pid=3503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.381117 kernel: audit: type=1106 audit(1696277277.367:1138): pid=3503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.381280 kernel: audit: type=1104 audit(1696277277.367:1139): pid=3503 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:57.370000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.27.142:22-139.178.89.65:46164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:59.109428 kubelet[2644]: E1002 20:07:59.109269 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:08:07.404438 systemd[1]: Started sshd@12-172.31.27.142:22-139.178.89.65:43550.service. Oct 2 20:08:07.413935 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:07.414160 kernel: audit: type=1130 audit(1696277287.407:1141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.142:22-139.178.89.65:43550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:07.407000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.142:22-139.178.89.65:43550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:07.597000 audit[3516]: USER_ACCT pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.606161 sshd[3516]: Accepted publickey for core from 139.178.89.65 port 43550 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:07.606518 kernel: audit: type=1101 audit(1696277287.597:1142): pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.606564 kernel: audit: type=1103 audit(1696277287.604:1143): pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.604000 audit[3516]: CRED_ACQ pid=3516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.614444 sshd[3516]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:07.604000 audit[3516]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00cb5cf0 a2=3 a3=0 items=0 ppid=1 pid=3516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:07.638601 kernel: audit: type=1006 audit(1696277287.604:1144): pid=3516 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:08:07.638740 kernel: audit: type=1300 audit(1696277287.604:1144): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe00cb5cf0 a2=3 a3=0 items=0 ppid=1 pid=3516 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:07.643500 kernel: audit: type=1327 audit(1696277287.604:1144): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:07.604000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:07.638125 systemd[1]: Started session-13.scope. Oct 2 20:08:07.646811 systemd-logind[1624]: New session 13 of user core. Oct 2 20:08:07.658000 audit[3516]: USER_START pid=3516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.667245 kernel: audit: type=1105 audit(1696277287.658:1145): pid=3516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.668000 audit[3518]: CRED_ACQ pid=3518 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.677353 kernel: audit: type=1103 audit(1696277287.668:1146): pid=3518 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.863088 sshd[3516]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:07.863000 audit[3516]: USER_END pid=3516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.866695 systemd[1]: sshd@12-172.31.27.142:22-139.178.89.65:43550.service: Deactivated successfully. Oct 2 20:08:07.868166 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:08:07.870532 systemd-logind[1624]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:08:07.872362 systemd-logind[1624]: Removed session 13. Oct 2 20:08:07.863000 audit[3516]: CRED_DISP pid=3516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.878529 kernel: audit: type=1106 audit(1696277287.863:1147): pid=3516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.878673 kernel: audit: type=1104 audit(1696277287.863:1148): pid=3516 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:07.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.27.142:22-139.178.89.65:43550 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:14.112959 env[1630]: time="2023-10-02T20:08:14.112750294Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:08:14.129076 env[1630]: time="2023-10-02T20:08:14.128710598Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\"" Oct 2 20:08:14.131199 env[1630]: time="2023-10-02T20:08:14.130000993Z" level=info msg="StartContainer for \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\"" Oct 2 20:08:14.171866 systemd[1]: Started cri-containerd-1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e.scope. Oct 2 20:08:14.188006 systemd[1]: cri-containerd-1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e.scope: Deactivated successfully. Oct 2 20:08:14.217970 env[1630]: time="2023-10-02T20:08:14.217914349Z" level=info msg="shim disconnected" id=1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e Oct 2 20:08:14.217970 env[1630]: time="2023-10-02T20:08:14.217967605Z" level=warning msg="cleaning up after shim disconnected" id=1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e namespace=k8s.io Oct 2 20:08:14.217970 env[1630]: time="2023-10-02T20:08:14.217980890Z" level=info msg="cleaning up dead shim" Oct 2 20:08:14.232103 env[1630]: time="2023-10-02T20:08:14.232049324Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3557 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:14Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:14.232407 env[1630]: time="2023-10-02T20:08:14.232349015Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:08:14.232689 env[1630]: time="2023-10-02T20:08:14.232641252Z" level=error msg="Failed to pipe stderr of container \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\"" error="reading from a closed fifo" Oct 2 20:08:14.232850 env[1630]: time="2023-10-02T20:08:14.232817374Z" level=error msg="Failed to pipe stdout of container \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\"" error="reading from a closed fifo" Oct 2 20:08:14.235107 env[1630]: time="2023-10-02T20:08:14.235067186Z" level=error msg="StartContainer for \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:14.235865 kubelet[2644]: E1002 20:08:14.235653 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e" Oct 2 20:08:14.235865 kubelet[2644]: E1002 20:08:14.235796 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:14.235865 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:14.235865 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:08:14.235865 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jgf7x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:14.235865 kubelet[2644]: E1002 20:08:14.235839 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:08:14.669863 kubelet[2644]: I1002 20:08:14.669837 2644 scope.go:117] "RemoveContainer" containerID="7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979" Oct 2 20:08:14.670197 kubelet[2644]: I1002 20:08:14.670179 2644 scope.go:117] "RemoveContainer" containerID="7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979" Oct 2 20:08:14.673470 env[1630]: time="2023-10-02T20:08:14.673417383Z" level=info msg="RemoveContainer for \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\"" Oct 2 20:08:14.680258 env[1630]: time="2023-10-02T20:08:14.677866028Z" level=info msg="RemoveContainer for \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\"" Oct 2 20:08:14.680258 env[1630]: time="2023-10-02T20:08:14.678124102Z" level=error msg="RemoveContainer for \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\" failed" error="failed to set removing state for container \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\": container is already in removing state" Oct 2 20:08:14.680711 kubelet[2644]: E1002 20:08:14.678458 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\": container is already in removing state" containerID="7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979" Oct 2 20:08:14.680711 kubelet[2644]: E1002 20:08:14.678501 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979": container is already in removing state; Skipping pod "cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)" Oct 2 20:08:14.680711 kubelet[2644]: E1002 20:08:14.679106 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:08:14.698278 env[1630]: time="2023-10-02T20:08:14.689648578Z" level=info msg="RemoveContainer for \"7b6341f58f4b54545efd2bbf9fa1439dc35d1f39f00779f76b99d73e9f30a979\" returns successfully" Oct 2 20:08:15.124325 systemd[1]: run-containerd-runc-k8s.io-1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e-runc.PuOWCr.mount: Deactivated successfully. Oct 2 20:08:15.124486 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e-rootfs.mount: Deactivated successfully. Oct 2 20:08:17.327789 kubelet[2644]: W1002 20:08:17.327740 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice/cri-containerd-1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e.scope WatchSource:0}: task 1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e not found: not found Oct 2 20:08:17.891246 systemd[1]: Started sshd@13-172.31.27.142:22-139.178.89.65:52692.service. Oct 2 20:08:17.900662 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:17.900795 kernel: audit: type=1130 audit(1696277297.892:1150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.142:22-139.178.89.65:52692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:17.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.142:22-139.178.89.65:52692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:18.060000 audit[3570]: USER_ACCT pid=3570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.071286 kernel: audit: type=1101 audit(1696277298.060:1151): pid=3570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.071449 sshd[3570]: Accepted publickey for core from 139.178.89.65 port 52692 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:18.071000 audit[3570]: CRED_ACQ pid=3570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.073323 sshd[3570]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:18.083199 kernel: audit: type=1103 audit(1696277298.071:1152): pid=3570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.083360 kernel: audit: type=1006 audit(1696277298.071:1153): pid=3570 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:08:18.071000 audit[3570]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff485a6c20 a2=3 a3=0 items=0 ppid=1 pid=3570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:18.071000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:18.091364 systemd[1]: Started session-14.scope. Oct 2 20:08:18.094037 kernel: audit: type=1300 audit(1696277298.071:1153): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff485a6c20 a2=3 a3=0 items=0 ppid=1 pid=3570 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:18.094133 kernel: audit: type=1327 audit(1696277298.071:1153): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:18.093468 systemd-logind[1624]: New session 14 of user core. Oct 2 20:08:18.102000 audit[3570]: USER_START pid=3570 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.114803 kernel: audit: type=1105 audit(1696277298.102:1154): pid=3570 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.114943 kernel: audit: type=1103 audit(1696277298.102:1155): pid=3572 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.102000 audit[3572]: CRED_ACQ pid=3572 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.309589 sshd[3570]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:18.310000 audit[3570]: USER_END pid=3570 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.313000 audit[3570]: CRED_DISP pid=3570 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.320180 systemd[1]: sshd@13-172.31.27.142:22-139.178.89.65:52692.service: Deactivated successfully. Oct 2 20:08:18.321131 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:08:18.322998 systemd-logind[1624]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:08:18.324728 kernel: audit: type=1106 audit(1696277298.310:1156): pid=3570 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.324818 kernel: audit: type=1104 audit(1696277298.313:1157): pid=3570 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:18.319000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.27.142:22-139.178.89.65:52692 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:18.324482 systemd-logind[1624]: Removed session 14. Oct 2 20:08:20.918000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:20.918000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:20.918000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0022f6ea0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:20.918000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027028e0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:20.918000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:20.918000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:22.379000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:22.379000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:22.379000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=51 a1=c007def4a0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:08:22.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:22.379000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c005a825d0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:08:22.379000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:22.380000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:22.380000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c005bca750 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:08:22.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:22.396000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:22.396000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c005bca870 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:08:22.396000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:22.402000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:22.402000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c007e406c0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:08:22.402000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:22.404000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:22.404000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c005bca8a0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:08:22.404000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:26.091324 kubelet[2644]: E1002 20:08:26.091274 2644 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:08:26.260874 kubelet[2644]: E1002 20:08:26.260836 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:27.114830 kubelet[2644]: E1002 20:08:27.114777 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:08:28.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.142:22-139.178.89.65:47242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:28.335710 systemd[1]: Started sshd@14-172.31.27.142:22-139.178.89.65:47242.service. Oct 2 20:08:28.337257 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:08:28.337297 kernel: audit: type=1130 audit(1696277308.335:1167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.142:22-139.178.89.65:47242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:28.518000 audit[3585]: USER_ACCT pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.532404 kernel: audit: type=1101 audit(1696277308.518:1168): pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.532451 sshd[3585]: Accepted publickey for core from 139.178.89.65 port 47242 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:28.532000 audit[3585]: CRED_ACQ pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.533802 sshd[3585]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:28.553378 kernel: audit: type=1103 audit(1696277308.532:1169): pid=3585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.553733 kernel: audit: type=1006 audit(1696277308.532:1170): pid=3585 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Oct 2 20:08:28.553797 kernel: audit: type=1300 audit(1696277308.532:1170): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff10a87a80 a2=3 a3=0 items=0 ppid=1 pid=3585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:28.532000 audit[3585]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff10a87a80 a2=3 a3=0 items=0 ppid=1 pid=3585 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:28.552643 systemd[1]: Started session-15.scope. Oct 2 20:08:28.555322 systemd-logind[1624]: New session 15 of user core. Oct 2 20:08:28.532000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:28.568073 kernel: audit: type=1327 audit(1696277308.532:1170): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:28.574000 audit[3585]: USER_START pid=3585 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.587325 kernel: audit: type=1105 audit(1696277308.574:1171): pid=3585 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.587519 kernel: audit: type=1103 audit(1696277308.579:1172): pid=3587 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.579000 audit[3587]: CRED_ACQ pid=3587 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.781322 sshd[3585]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:28.782000 audit[3585]: USER_END pid=3585 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.785804 systemd[1]: sshd@14-172.31.27.142:22-139.178.89.65:47242.service: Deactivated successfully. Oct 2 20:08:28.787003 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:08:28.788960 systemd-logind[1624]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:08:28.783000 audit[3585]: CRED_DISP pid=3585 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.790558 systemd-logind[1624]: Removed session 15. Oct 2 20:08:28.796024 kernel: audit: type=1106 audit(1696277308.782:1173): pid=3585 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.796136 kernel: audit: type=1104 audit(1696277308.783:1174): pid=3585 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:28.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.27.142:22-139.178.89.65:47242 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:31.261908 kubelet[2644]: E1002 20:08:31.261881 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:36.267185 kubelet[2644]: E1002 20:08:36.267116 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:38.201000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.204199 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:38.204270 kernel: audit: type=1400 audit(1696277318.201:1176): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.201000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001578100 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.219058 kernel: audit: type=1300 audit(1696277318.201:1176): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001578100 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.219265 kernel: audit: type=1327 audit(1696277318.201:1176): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.201000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.210000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.232318 kernel: audit: type=1400 audit(1696277318.210:1177): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.232457 kernel: audit: type=1300 audit(1696277318.210:1177): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002703e00 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.210000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002703e00 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.210000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.255364 kernel: audit: type=1327 audit(1696277318.210:1177): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.255483 kernel: audit: type=1400 audit(1696277318.214:1178): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.214000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.214000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001578220 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.270533 kernel: audit: type=1300 audit(1696277318.214:1178): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001578220 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.270699 kernel: audit: type=1327 audit(1696277318.214:1178): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.218000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.299320 kernel: audit: type=1400 audit(1696277318.218:1179): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:38.218000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001578500 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:08:38.218000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:38.807000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.142:22-139.178.89.65:40434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:38.808675 systemd[1]: Started sshd@15-172.31.27.142:22-139.178.89.65:40434.service. Oct 2 20:08:38.969000 audit[3597]: USER_ACCT pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:38.970835 sshd[3597]: Accepted publickey for core from 139.178.89.65 port 40434 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:38.970000 audit[3597]: CRED_ACQ pid=3597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:38.970000 audit[3597]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe0c48b310 a2=3 a3=0 items=0 ppid=1 pid=3597 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:38.970000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:38.972531 sshd[3597]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:38.980001 systemd[1]: Started session-16.scope. Oct 2 20:08:38.980522 systemd-logind[1624]: New session 16 of user core. Oct 2 20:08:38.987000 audit[3597]: USER_START pid=3597 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:38.989000 audit[3599]: CRED_ACQ pid=3599 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:39.257641 sshd[3597]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:39.258000 audit[3597]: USER_END pid=3597 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:39.259000 audit[3597]: CRED_DISP pid=3597 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:39.264425 systemd[1]: sshd@15-172.31.27.142:22-139.178.89.65:40434.service: Deactivated successfully. Oct 2 20:08:39.263000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.27.142:22-139.178.89.65:40434 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:39.265544 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:08:39.266382 systemd-logind[1624]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:08:39.268413 systemd-logind[1624]: Removed session 16. Oct 2 20:08:41.270511 kubelet[2644]: E1002 20:08:41.270468 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:42.109633 kubelet[2644]: E1002 20:08:42.109599 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:08:46.272138 kubelet[2644]: E1002 20:08:46.272109 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:49.291576 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:08:49.291712 kernel: audit: type=1130 audit(1696277329.288:1189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.142:22-139.178.89.65:38864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:49.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.142:22-139.178.89.65:38864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:49.288812 systemd[1]: Started sshd@16-172.31.27.142:22-139.178.89.65:38864.service. Oct 2 20:08:49.465000 audit[3612]: USER_ACCT pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.478054 sshd[3612]: Accepted publickey for core from 139.178.89.65 port 38864 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:49.478423 kernel: audit: type=1101 audit(1696277329.465:1190): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.477000 audit[3612]: CRED_ACQ pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.478886 sshd[3612]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:49.487371 systemd[1]: Started session-17.scope. Oct 2 20:08:49.489166 systemd-logind[1624]: New session 17 of user core. Oct 2 20:08:49.490349 kernel: audit: type=1103 audit(1696277329.477:1191): pid=3612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.490508 kernel: audit: type=1006 audit(1696277329.477:1192): pid=3612 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:08:49.477000 audit[3612]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc806ac990 a2=3 a3=0 items=0 ppid=1 pid=3612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:49.477000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:49.501970 kernel: audit: type=1300 audit(1696277329.477:1192): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc806ac990 a2=3 a3=0 items=0 ppid=1 pid=3612 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:49.502145 kernel: audit: type=1327 audit(1696277329.477:1192): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:49.502192 kernel: audit: type=1105 audit(1696277329.499:1193): pid=3612 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.499000 audit[3612]: USER_START pid=3612 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.501000 audit[3614]: CRED_ACQ pid=3614 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.516725 kernel: audit: type=1103 audit(1696277329.501:1194): pid=3614 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.754340 sshd[3612]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:49.754000 audit[3612]: USER_END pid=3612 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.765502 kernel: audit: type=1106 audit(1696277329.754:1195): pid=3612 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.754000 audit[3612]: CRED_DISP pid=3612 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.767178 systemd-logind[1624]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:08:49.769769 systemd[1]: sshd@16-172.31.27.142:22-139.178.89.65:38864.service: Deactivated successfully. Oct 2 20:08:49.773390 kernel: audit: type=1104 audit(1696277329.754:1196): pid=3612 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.770807 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:08:49.773507 systemd-logind[1624]: Removed session 17. Oct 2 20:08:49.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.27.142:22-139.178.89.65:38864 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:49.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.142:22-139.178.89.65:38872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:49.784594 systemd[1]: Started sshd@17-172.31.27.142:22-139.178.89.65:38872.service. Oct 2 20:08:49.968000 audit[3625]: USER_ACCT pid=3625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.969663 sshd[3625]: Accepted publickey for core from 139.178.89.65 port 38872 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:49.970000 audit[3625]: CRED_ACQ pid=3625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.970000 audit[3625]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc03efd5c0 a2=3 a3=0 items=0 ppid=1 pid=3625 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:49.970000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:49.971976 sshd[3625]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:49.980904 systemd[1]: Started session-18.scope. Oct 2 20:08:49.981636 systemd-logind[1624]: New session 18 of user core. Oct 2 20:08:49.989000 audit[3625]: USER_START pid=3625 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:49.992000 audit[3627]: CRED_ACQ pid=3627 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.273963 kubelet[2644]: E1002 20:08:51.273934 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:51.347585 sshd[3625]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:51.349000 audit[3625]: USER_END pid=3625 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.349000 audit[3625]: CRED_DISP pid=3625 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.358559 systemd[1]: sshd@17-172.31.27.142:22-139.178.89.65:38872.service: Deactivated successfully. Oct 2 20:08:51.359546 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:08:51.358000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.27.142:22-139.178.89.65:38872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:51.361595 systemd-logind[1624]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:08:51.363451 systemd-logind[1624]: Removed session 18. Oct 2 20:08:51.375563 systemd[1]: Started sshd@18-172.31.27.142:22-139.178.89.65:38874.service. Oct 2 20:08:51.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.142:22-139.178.89.65:38874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:51.569000 audit[3634]: USER_ACCT pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.570756 sshd[3634]: Accepted publickey for core from 139.178.89.65 port 38874 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:51.570000 audit[3634]: CRED_ACQ pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.571000 audit[3634]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5898b8c0 a2=3 a3=0 items=0 ppid=1 pid=3634 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:51.571000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:51.571837 sshd[3634]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:51.577637 systemd[1]: Started session-19.scope. Oct 2 20:08:51.578760 systemd-logind[1624]: New session 19 of user core. Oct 2 20:08:51.584000 audit[3634]: USER_START pid=3634 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.586000 audit[3636]: CRED_ACQ pid=3636 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.790840 sshd[3634]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:51.792000 audit[3634]: USER_END pid=3634 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.792000 audit[3634]: CRED_DISP pid=3634 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:51.795364 systemd[1]: sshd@18-172.31.27.142:22-139.178.89.65:38874.service: Deactivated successfully. Oct 2 20:08:51.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.27.142:22-139.178.89.65:38874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:51.796408 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:08:51.797129 systemd-logind[1624]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:08:51.798137 systemd-logind[1624]: Removed session 19. Oct 2 20:08:56.109946 kubelet[2644]: E1002 20:08:56.109907 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:08:56.274891 kubelet[2644]: E1002 20:08:56.274854 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:01.276008 kubelet[2644]: E1002 20:09:01.275968 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:01.824963 systemd[1]: Started sshd@19-172.31.27.142:22-139.178.89.65:35334.service. Oct 2 20:09:01.838670 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:09:01.838817 kernel: audit: type=1130 audit(1696277341.824:1216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.142:22-139.178.89.65:35334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:01.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.142:22-139.178.89.65:35334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:02.016000 audit[3648]: USER_ACCT pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.019178 sshd[3648]: Accepted publickey for core from 139.178.89.65 port 35334 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:02.028258 kernel: audit: type=1101 audit(1696277342.016:1217): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.027000 audit[3648]: CRED_ACQ pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.029369 sshd[3648]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:02.043995 systemd[1]: Started session-20.scope. Oct 2 20:09:02.044675 kernel: audit: type=1103 audit(1696277342.027:1218): pid=3648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.044736 kernel: audit: type=1006 audit(1696277342.027:1219): pid=3648 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:09:02.027000 audit[3648]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed9045c50 a2=3 a3=0 items=0 ppid=1 pid=3648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:02.046243 systemd-logind[1624]: New session 20 of user core. Oct 2 20:09:02.058315 kernel: audit: type=1300 audit(1696277342.027:1219): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed9045c50 a2=3 a3=0 items=0 ppid=1 pid=3648 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:02.060333 kernel: audit: type=1327 audit(1696277342.027:1219): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:02.027000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:02.067000 audit[3648]: USER_START pid=3648 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.069000 audit[3650]: CRED_ACQ pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.082079 kernel: audit: type=1105 audit(1696277342.067:1220): pid=3648 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.082201 kernel: audit: type=1103 audit(1696277342.069:1221): pid=3650 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.353109 sshd[3648]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:02.353000 audit[3648]: USER_END pid=3648 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.356539 systemd[1]: sshd@19-172.31.27.142:22-139.178.89.65:35334.service: Deactivated successfully. Oct 2 20:09:02.357542 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:09:02.365209 systemd-logind[1624]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:09:02.370192 systemd-logind[1624]: Removed session 20. Oct 2 20:09:02.377240 kernel: audit: type=1106 audit(1696277342.353:1222): pid=3648 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.353000 audit[3648]: CRED_DISP pid=3648 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.395395 kernel: audit: type=1104 audit(1696277342.353:1223): pid=3648 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:02.355000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.27.142:22-139.178.89.65:35334 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.276885 kubelet[2644]: E1002 20:09:06.276840 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:08.109143 kubelet[2644]: E1002 20:09:08.109088 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:09:11.278816 kubelet[2644]: E1002 20:09:11.278782 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:12.388451 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:12.388600 kernel: audit: type=1130 audit(1696277352.380:1225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.142:22-139.178.89.65:43842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:12.380000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.142:22-139.178.89.65:43842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:12.380962 systemd[1]: Started sshd@20-172.31.27.142:22-139.178.89.65:43842.service. Oct 2 20:09:12.555000 audit[3662]: USER_ACCT pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.561772 sshd[3662]: Accepted publickey for core from 139.178.89.65 port 43842 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:12.561000 audit[3662]: CRED_ACQ pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.562356 sshd[3662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:12.568911 kernel: audit: type=1101 audit(1696277352.555:1226): pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.569028 kernel: audit: type=1103 audit(1696277352.561:1227): pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.569067 kernel: audit: type=1006 audit(1696277352.561:1228): pid=3662 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:09:12.570664 systemd[1]: Started session-21.scope. Oct 2 20:09:12.572652 systemd-logind[1624]: New session 21 of user core. Oct 2 20:09:12.574021 kernel: audit: type=1300 audit(1696277352.561:1228): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc04aeeb0 a2=3 a3=0 items=0 ppid=1 pid=3662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:12.561000 audit[3662]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdc04aeeb0 a2=3 a3=0 items=0 ppid=1 pid=3662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:12.561000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:12.580000 audit[3662]: USER_START pid=3662 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.598357 kernel: audit: type=1327 audit(1696277352.561:1228): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:12.598515 kernel: audit: type=1105 audit(1696277352.580:1229): pid=3662 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.598547 kernel: audit: type=1103 audit(1696277352.582:1230): pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.582000 audit[3664]: CRED_ACQ pid=3664 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.789417 sshd[3662]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:12.791000 audit[3662]: USER_END pid=3662 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.794884 systemd-logind[1624]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:09:12.800245 kernel: audit: type=1106 audit(1696277352.791:1231): pid=3662 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.796936 systemd[1]: sshd@20-172.31.27.142:22-139.178.89.65:43842.service: Deactivated successfully. Oct 2 20:09:12.797886 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:09:12.800683 systemd-logind[1624]: Removed session 21. Oct 2 20:09:12.791000 audit[3662]: CRED_DISP pid=3662 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:12.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.27.142:22-139.178.89.65:43842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:12.808273 kernel: audit: type=1104 audit(1696277352.791:1232): pid=3662 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:16.280273 kubelet[2644]: E1002 20:09:16.280242 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:20.919000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:20.921905 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:20.921978 kernel: audit: type=1400 audit(1696277360.919:1234): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:20.919000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:20.933926 kernel: audit: type=1400 audit(1696277360.919:1235): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:20.934041 kernel: audit: type=1300 audit(1696277360.919:1235): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b695c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:20.919000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b695c0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:20.919000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:20.947455 kernel: audit: type=1327 audit(1696277360.919:1235): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:20.947581 kernel: audit: type=1300 audit(1696277360.919:1234): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d44ea0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:20.919000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d44ea0 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:20.919000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:20.961499 kernel: audit: type=1327 audit(1696277360.919:1234): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:21.109507 kubelet[2644]: E1002 20:09:21.109465 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:09:21.281724 kubelet[2644]: E1002 20:09:21.281623 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:22.380000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.380000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.403929 kernel: audit: type=1400 audit(1696277362.380:1237): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.404094 kernel: audit: type=1400 audit(1696277362.380:1236): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.404138 kernel: audit: type=1300 audit(1696277362.380:1236): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0086f4810 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.380000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0086f4810 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.417431 kernel: audit: type=1327 audit(1696277362.380:1236): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.380000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.380000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0086f4900 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.380000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00a90d100 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.380000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.395000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.395000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0085df770 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.395000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.403000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.403000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00a90d2a0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.403000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:22.403000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0086f4ab0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:09:22.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:22.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.142:22-139.178.89.65:38274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:22.816356 systemd[1]: Started sshd@21-172.31.27.142:22-139.178.89.65:38274.service. Oct 2 20:09:22.977000 audit[3675]: USER_ACCT pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:22.979503 sshd[3675]: Accepted publickey for core from 139.178.89.65 port 38274 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:22.979000 audit[3675]: CRED_ACQ pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:22.979000 audit[3675]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea3d931b0 a2=3 a3=0 items=0 ppid=1 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:22.979000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:22.981210 sshd[3675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:22.987262 systemd[1]: Started session-22.scope. Oct 2 20:09:22.987758 systemd-logind[1624]: New session 22 of user core. Oct 2 20:09:22.992000 audit[3675]: USER_START pid=3675 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:22.994000 audit[3677]: CRED_ACQ pid=3677 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:23.205706 sshd[3675]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:23.207000 audit[3675]: USER_END pid=3675 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:23.207000 audit[3675]: CRED_DISP pid=3675 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:23.210378 systemd[1]: sshd@21-172.31.27.142:22-139.178.89.65:38274.service: Deactivated successfully. Oct 2 20:09:23.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.27.142:22-139.178.89.65:38274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:23.211469 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:09:23.212237 systemd-logind[1624]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:09:23.213179 systemd-logind[1624]: Removed session 22. Oct 2 20:09:26.283402 kubelet[2644]: E1002 20:09:26.283343 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:31.284808 kubelet[2644]: E1002 20:09:31.284773 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:33.237242 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:09:33.237370 kernel: audit: type=1130 audit(1696277373.232:1251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.142:22-139.178.89.65:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:33.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.142:22-139.178.89.65:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:33.233856 systemd[1]: Started sshd@22-172.31.27.142:22-139.178.89.65:42802.service. Oct 2 20:09:33.414000 audit[3689]: USER_ACCT pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.423003 sshd[3689]: Accepted publickey for core from 139.178.89.65 port 42802 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:33.423823 kernel: audit: type=1101 audit(1696277373.414:1252): pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.423735 sshd[3689]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:33.421000 audit[3689]: CRED_ACQ pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.436028 kernel: audit: type=1103 audit(1696277373.421:1253): pid=3689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.439061 kernel: audit: type=1006 audit(1696277373.421:1254): pid=3689 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:09:33.421000 audit[3689]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2dcff580 a2=3 a3=0 items=0 ppid=1 pid=3689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:33.445527 systemd-logind[1624]: New session 23 of user core. Oct 2 20:09:33.448725 kernel: audit: type=1300 audit(1696277373.421:1254): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe2dcff580 a2=3 a3=0 items=0 ppid=1 pid=3689 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:33.447519 systemd[1]: Started session-23.scope. Oct 2 20:09:33.421000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:33.452328 kernel: audit: type=1327 audit(1696277373.421:1254): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:33.457000 audit[3689]: USER_START pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.468238 kernel: audit: type=1105 audit(1696277373.457:1255): pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.468377 kernel: audit: type=1103 audit(1696277373.459:1256): pid=3691 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.459000 audit[3691]: CRED_ACQ pid=3691 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.693738 sshd[3689]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:33.694000 audit[3689]: USER_END pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.702266 systemd[1]: sshd@22-172.31.27.142:22-139.178.89.65:42802.service: Deactivated successfully. Oct 2 20:09:33.706048 kernel: audit: type=1106 audit(1696277373.694:1257): pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.706117 kernel: audit: type=1104 audit(1696277373.694:1258): pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.694000 audit[3689]: CRED_DISP pid=3689 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:33.703200 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:09:33.706796 systemd-logind[1624]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:09:33.708708 systemd-logind[1624]: Removed session 23. Oct 2 20:09:33.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.27.142:22-139.178.89.65:42802 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:35.112003 env[1630]: time="2023-10-02T20:09:35.111949253Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:09:35.132126 env[1630]: time="2023-10-02T20:09:35.132075864Z" level=info msg="CreateContainer within sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\"" Oct 2 20:09:35.133173 env[1630]: time="2023-10-02T20:09:35.133129944Z" level=info msg="StartContainer for \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\"" Oct 2 20:09:35.174229 systemd[1]: Started cri-containerd-39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149.scope. Oct 2 20:09:35.189898 systemd[1]: cri-containerd-39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149.scope: Deactivated successfully. Oct 2 20:09:35.196495 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149-rootfs.mount: Deactivated successfully. Oct 2 20:09:35.229353 env[1630]: time="2023-10-02T20:09:35.229191596Z" level=info msg="shim disconnected" id=39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149 Oct 2 20:09:35.229353 env[1630]: time="2023-10-02T20:09:35.229352281Z" level=warning msg="cleaning up after shim disconnected" id=39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149 namespace=k8s.io Oct 2 20:09:35.229874 env[1630]: time="2023-10-02T20:09:35.229365129Z" level=info msg="cleaning up dead shim" Oct 2 20:09:35.240662 env[1630]: time="2023-10-02T20:09:35.240602536Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3724 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:35.240949 env[1630]: time="2023-10-02T20:09:35.240884899Z" level=error msg="copy shim log" error="read /proc/self/fd/50: file already closed" Oct 2 20:09:35.242031 env[1630]: time="2023-10-02T20:09:35.241952048Z" level=error msg="Failed to pipe stdout of container \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\"" error="reading from a closed fifo" Oct 2 20:09:35.243354 env[1630]: time="2023-10-02T20:09:35.243311021Z" level=error msg="Failed to pipe stderr of container \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\"" error="reading from a closed fifo" Oct 2 20:09:35.249140 env[1630]: time="2023-10-02T20:09:35.249051916Z" level=error msg="StartContainer for \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:35.249767 kubelet[2644]: E1002 20:09:35.249741 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149" Oct 2 20:09:35.250286 kubelet[2644]: E1002 20:09:35.249973 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:35.250286 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:35.250286 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:09:35.250286 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-jgf7x,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:35.250286 kubelet[2644]: E1002 20:09:35.250033 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:09:35.878419 kubelet[2644]: I1002 20:09:35.878391 2644 scope.go:117] "RemoveContainer" containerID="1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e" Oct 2 20:09:35.878592 kubelet[2644]: I1002 20:09:35.878506 2644 scope.go:117] "RemoveContainer" containerID="1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e" Oct 2 20:09:35.879877 env[1630]: time="2023-10-02T20:09:35.879841205Z" level=info msg="RemoveContainer for \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\"" Oct 2 20:09:35.880679 env[1630]: time="2023-10-02T20:09:35.880302157Z" level=info msg="RemoveContainer for \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\"" Oct 2 20:09:35.880885 env[1630]: time="2023-10-02T20:09:35.880851439Z" level=error msg="RemoveContainer for \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\" failed" error="failed to set removing state for container \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\": container is already in removing state" Oct 2 20:09:35.881151 kubelet[2644]: E1002 20:09:35.881115 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\": container is already in removing state" containerID="1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e" Oct 2 20:09:35.881151 kubelet[2644]: E1002 20:09:35.881150 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e": container is already in removing state; Skipping pod "cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)" Oct 2 20:09:35.881707 kubelet[2644]: E1002 20:09:35.881550 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:09:35.885066 env[1630]: time="2023-10-02T20:09:35.885023177Z" level=info msg="RemoveContainer for \"1c444910b4f373b529a277035dd390fc190ec73f53aca69e17bb59d96c080d5e\" returns successfully" Oct 2 20:09:36.286208 kubelet[2644]: E1002 20:09:36.286108 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:38.201000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.201000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001356b20 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:38.201000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:38.211000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.211000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001356b40 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:38.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:38.214000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.214000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001356c60 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:38.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:38.219000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:38.219000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d7b760 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:09:38.219000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:38.336935 kubelet[2644]: W1002 20:09:38.336891 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice/cri-containerd-39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149.scope WatchSource:0}: task 39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149 not found: not found Oct 2 20:09:41.287042 kubelet[2644]: E1002 20:09:41.286998 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:43.720390 systemd[1]: Started sshd@23-172.31.27.142:22-139.178.89.65:34894.service. Oct 2 20:09:43.729557 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:09:43.729688 kernel: audit: type=1130 audit(1696277383.719:1264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.142:22-139.178.89.65:34894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:43.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.142:22-139.178.89.65:34894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:43.901000 audit[3741]: USER_ACCT pid=3741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.902881 sshd[3741]: Accepted publickey for core from 139.178.89.65 port 34894 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:43.908000 audit[3741]: CRED_ACQ pid=3741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.909624 sshd[3741]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:43.915532 kernel: audit: type=1101 audit(1696277383.901:1265): pid=3741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.915638 kernel: audit: type=1103 audit(1696277383.908:1266): pid=3741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.915672 kernel: audit: type=1006 audit(1696277383.908:1267): pid=3741 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:09:43.917391 systemd[1]: Started session-24.scope. Oct 2 20:09:43.919404 kernel: audit: type=1300 audit(1696277383.908:1267): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe70e2da80 a2=3 a3=0 items=0 ppid=1 pid=3741 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:43.908000 audit[3741]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe70e2da80 a2=3 a3=0 items=0 ppid=1 pid=3741 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:43.919790 systemd-logind[1624]: New session 24 of user core. Oct 2 20:09:43.908000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:43.929133 kernel: audit: type=1327 audit(1696277383.908:1267): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:43.929244 kernel: audit: type=1105 audit(1696277383.925:1268): pid=3741 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.925000 audit[3741]: USER_START pid=3741 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.941334 kernel: audit: type=1103 audit(1696277383.927:1269): pid=3743 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:43.927000 audit[3743]: CRED_ACQ pid=3743 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:44.151879 sshd[3741]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:44.152000 audit[3741]: USER_END pid=3741 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:44.156433 systemd[1]: sshd@23-172.31.27.142:22-139.178.89.65:34894.service: Deactivated successfully. Oct 2 20:09:44.157673 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:09:44.161248 kernel: audit: type=1106 audit(1696277384.152:1270): pid=3741 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:44.152000 audit[3741]: CRED_DISP pid=3741 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:44.162376 systemd-logind[1624]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:09:44.165018 systemd-logind[1624]: Removed session 24. Oct 2 20:09:44.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.27.142:22-139.178.89.65:34894 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:44.168700 kernel: audit: type=1104 audit(1696277384.152:1271): pid=3741 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:46.288530 kubelet[2644]: E1002 20:09:46.288497 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:51.109416 kubelet[2644]: E1002 20:09:51.109386 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:09:51.289205 kubelet[2644]: E1002 20:09:51.289165 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:54.205055 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:54.205209 kernel: audit: type=1130 audit(1696277394.187:1273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.142:22-139.178.89.65:44590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.142:22-139.178.89.65:44590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:54.188169 systemd[1]: Started sshd@24-172.31.27.142:22-139.178.89.65:44590.service. Oct 2 20:09:54.377000 audit[3753]: USER_ACCT pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.379078 sshd[3753]: Accepted publickey for core from 139.178.89.65 port 44590 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:54.389410 kernel: audit: type=1101 audit(1696277394.377:1274): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.389518 kernel: audit: type=1103 audit(1696277394.386:1275): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.386000 audit[3753]: CRED_ACQ pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.388770 sshd[3753]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:54.398740 systemd[1]: Started session-25.scope. Oct 2 20:09:54.399991 kernel: audit: type=1006 audit(1696277394.386:1276): pid=3753 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:09:54.400042 kernel: audit: type=1300 audit(1696277394.386:1276): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc35a2820 a2=3 a3=0 items=0 ppid=1 pid=3753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:54.386000 audit[3753]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc35a2820 a2=3 a3=0 items=0 ppid=1 pid=3753 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:54.401736 systemd-logind[1624]: New session 25 of user core. Oct 2 20:09:54.408625 kernel: audit: type=1327 audit(1696277394.386:1276): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:54.386000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:54.412000 audit[3753]: USER_START pid=3753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.422293 kernel: audit: type=1105 audit(1696277394.412:1277): pid=3753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.421000 audit[3755]: CRED_ACQ pid=3755 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.430250 kernel: audit: type=1103 audit(1696277394.421:1278): pid=3755 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.637867 sshd[3753]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:54.639000 audit[3753]: USER_END pid=3753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.643936 systemd[1]: sshd@24-172.31.27.142:22-139.178.89.65:44590.service: Deactivated successfully. Oct 2 20:09:54.645259 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:09:54.647475 systemd-logind[1624]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:09:54.639000 audit[3753]: CRED_DISP pid=3753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.649198 systemd-logind[1624]: Removed session 25. Oct 2 20:09:54.657742 kernel: audit: type=1106 audit(1696277394.639:1279): pid=3753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.657913 kernel: audit: type=1104 audit(1696277394.639:1280): pid=3753 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:54.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.27.142:22-139.178.89.65:44590 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:56.290723 kubelet[2644]: E1002 20:09:56.290695 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:01.292096 kubelet[2644]: E1002 20:10:01.292045 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:04.109728 kubelet[2644]: E1002 20:10:04.109451 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:10:04.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.142:22-139.178.89.65:41316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:04.668028 systemd[1]: Started sshd@25-172.31.27.142:22-139.178.89.65:41316.service. Oct 2 20:10:04.670292 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:04.670370 kernel: audit: type=1130 audit(1696277404.667:1282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.142:22-139.178.89.65:41316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:04.878000 audit[3765]: USER_ACCT pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.889700 sshd[3765]: Accepted publickey for core from 139.178.89.65 port 41316 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:04.898908 kernel: audit: type=1101 audit(1696277404.878:1283): pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.899035 kernel: audit: type=1103 audit(1696277404.888:1284): pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.888000 audit[3765]: CRED_ACQ pid=3765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.890698 sshd[3765]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:04.923683 kernel: audit: type=1006 audit(1696277404.888:1285): pid=3765 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:10:04.923816 kernel: audit: type=1300 audit(1696277404.888:1285): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2c5d4a40 a2=3 a3=0 items=0 ppid=1 pid=3765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:04.888000 audit[3765]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd2c5d4a40 a2=3 a3=0 items=0 ppid=1 pid=3765 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:04.923175 systemd[1]: Started session-26.scope. Oct 2 20:10:04.925748 systemd-logind[1624]: New session 26 of user core. Oct 2 20:10:04.933326 kernel: audit: type=1327 audit(1696277404.888:1285): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:04.888000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:04.945000 audit[3765]: USER_START pid=3765 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.950000 audit[3767]: CRED_ACQ pid=3767 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.963306 kernel: audit: type=1105 audit(1696277404.945:1286): pid=3765 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:04.963435 kernel: audit: type=1103 audit(1696277404.950:1287): pid=3767 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:05.219753 sshd[3765]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:05.224000 audit[3765]: USER_END pid=3765 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:05.224000 audit[3765]: CRED_DISP pid=3765 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:05.232913 systemd[1]: sshd@25-172.31.27.142:22-139.178.89.65:41316.service: Deactivated successfully. Oct 2 20:10:05.234057 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:10:05.236423 systemd-logind[1624]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:10:05.238500 kernel: audit: type=1106 audit(1696277405.224:1288): pid=3765 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:05.238698 kernel: audit: type=1104 audit(1696277405.224:1289): pid=3765 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:05.237997 systemd-logind[1624]: Removed session 26. Oct 2 20:10:05.231000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.27.142:22-139.178.89.65:41316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:06.293213 kubelet[2644]: E1002 20:10:06.293181 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:11.294235 kubelet[2644]: E1002 20:10:11.294130 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:15.243051 systemd[1]: Started sshd@26-172.31.27.142:22-139.178.89.65:48016.service. Oct 2 20:10:15.242000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.142:22-139.178.89.65:48016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:15.245663 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:15.245786 kernel: audit: type=1130 audit(1696277415.242:1291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.142:22-139.178.89.65:48016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:15.419000 audit[3781]: USER_ACCT pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.421304 sshd[3781]: Accepted publickey for core from 139.178.89.65 port 48016 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:15.426000 audit[3781]: CRED_ACQ pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.428410 sshd[3781]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:15.435178 kernel: audit: type=1101 audit(1696277415.419:1292): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.435326 kernel: audit: type=1103 audit(1696277415.426:1293): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.435362 kernel: audit: type=1006 audit(1696277415.426:1294): pid=3781 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:10:15.438256 systemd[1]: Started session-27.scope. Oct 2 20:10:15.440336 systemd-logind[1624]: New session 27 of user core. Oct 2 20:10:15.426000 audit[3781]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8d2eb6c0 a2=3 a3=0 items=0 ppid=1 pid=3781 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:15.449992 kernel: audit: type=1300 audit(1696277415.426:1294): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8d2eb6c0 a2=3 a3=0 items=0 ppid=1 pid=3781 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:15.426000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:15.449000 audit[3781]: USER_START pid=3781 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.460962 kernel: audit: type=1327 audit(1696277415.426:1294): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:15.461100 kernel: audit: type=1105 audit(1696277415.449:1295): pid=3781 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.461147 kernel: audit: type=1103 audit(1696277415.449:1296): pid=3784 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.449000 audit[3784]: CRED_ACQ pid=3784 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.662424 sshd[3781]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:15.662000 audit[3781]: USER_END pid=3781 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.666231 systemd[1]: sshd@26-172.31.27.142:22-139.178.89.65:48016.service: Deactivated successfully. Oct 2 20:10:15.667793 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:10:15.670053 systemd-logind[1624]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:10:15.662000 audit[3781]: CRED_DISP pid=3781 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.672046 systemd-logind[1624]: Removed session 27. Oct 2 20:10:15.678403 kernel: audit: type=1106 audit(1696277415.662:1297): pid=3781 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.678623 kernel: audit: type=1104 audit(1696277415.662:1298): pid=3781 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:15.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.27.142:22-139.178.89.65:48016 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:16.295544 kubelet[2644]: E1002 20:10:16.295514 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:17.109488 kubelet[2644]: E1002 20:10:17.109444 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-s29m8_kube-system(ed9f18b0-a321-47f8-8ae8-73c1e4161687)\"" pod="kube-system/cilium-s29m8" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" Oct 2 20:10:20.920000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.922936 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:20.923038 kernel: audit: type=1400 audit(1696277420.920:1300): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.920000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.934543 kernel: audit: type=1400 audit(1696277420.920:1301): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:20.934676 kernel: audit: type=1300 audit(1696277420.920:1301): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00142d350 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:20.920000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00142d350 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:20.920000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:20.948630 kernel: audit: type=1327 audit(1696277420.920:1301): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:20.948829 kernel: audit: type=1300 audit(1696277420.920:1300): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001441440 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:20.920000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001441440 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:20.920000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:20.965073 kernel: audit: type=1327 audit(1696277420.920:1300): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:21.296655 kubelet[2644]: E1002 20:10:21.296540 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:22.381000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.381000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.395637 kernel: audit: type=1400 audit(1696277422.381:1303): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.395763 kernel: audit: type=1400 audit(1696277422.381:1302): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.395808 kernel: audit: type=1300 audit(1696277422.381:1302): arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0074ae300 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.381000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0074ae300 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:22.409029 kernel: audit: type=1327 audit(1696277422.381:1302): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:22.382000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.382000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c006fda600 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:22.381000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0074547e0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.381000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:22.399000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.399000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c007454810 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:22.403000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.403000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c00f0f8ce0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:22.405000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:22.405000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4f a1=c0074ae4b0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:10:22.405000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:25.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.142:22-139.178.89.65:47642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:25.689844 systemd[1]: Started sshd@27-172.31.27.142:22-139.178.89.65:47642.service. Oct 2 20:10:25.873000 audit[3794]: USER_ACCT pid=3794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:25.873599 sshd[3794]: Accepted publickey for core from 139.178.89.65 port 47642 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:25.873000 audit[3794]: CRED_ACQ pid=3794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:25.874000 audit[3794]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe426dcef0 a2=3 a3=0 items=0 ppid=1 pid=3794 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:25.874000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:25.875815 sshd[3794]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:25.886638 systemd[1]: Started session-28.scope. Oct 2 20:10:25.887522 systemd-logind[1624]: New session 28 of user core. Oct 2 20:10:25.895000 audit[3794]: USER_START pid=3794 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:25.897000 audit[3796]: CRED_ACQ pid=3796 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.149291 sshd[3794]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:26.157248 kernel: kauditd_printk_skb: 22 callbacks suppressed Oct 2 20:10:26.157374 kernel: audit: type=1106 audit(1696277426.150:1314): pid=3794 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.150000 audit[3794]: USER_END pid=3794 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.154188 systemd[1]: sshd@27-172.31.27.142:22-139.178.89.65:47642.service: Deactivated successfully. Oct 2 20:10:26.155206 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:10:26.159238 systemd-logind[1624]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:10:26.150000 audit[3794]: CRED_DISP pid=3794 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.161153 systemd-logind[1624]: Removed session 28. Oct 2 20:10:26.166070 kernel: audit: type=1104 audit(1696277426.150:1315): pid=3794 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.166167 kernel: audit: type=1131 audit(1696277426.152:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.142:22-139.178.89.65:47642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.27.142:22-139.178.89.65:47642 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.178124 systemd[1]: Started sshd@28-172.31.27.142:22-139.178.89.65:48650.service. Oct 2 20:10:26.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.142:22-139.178.89.65:48650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.184258 kernel: audit: type=1130 audit(1696277426.177:1317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.142:22-139.178.89.65:48650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:26.297955 kubelet[2644]: E1002 20:10:26.297929 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:26.350000 audit[3809]: USER_ACCT pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.358405 kernel: audit: type=1101 audit(1696277426.350:1318): pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.358482 sshd[3809]: Accepted publickey for core from 139.178.89.65 port 48650 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:26.359878 sshd[3809]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:26.358000 audit[3809]: CRED_ACQ pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.370321 kernel: audit: type=1103 audit(1696277426.358:1319): pid=3809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.370425 kernel: audit: type=1006 audit(1696277426.358:1320): pid=3809 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Oct 2 20:10:26.382793 kernel: audit: type=1300 audit(1696277426.358:1320): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72bcbba0 a2=3 a3=0 items=0 ppid=1 pid=3809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:26.382913 kernel: audit: type=1327 audit(1696277426.358:1320): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:26.358000 audit[3809]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72bcbba0 a2=3 a3=0 items=0 ppid=1 pid=3809 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:26.358000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:26.382368 systemd-logind[1624]: New session 29 of user core. Oct 2 20:10:26.383697 systemd[1]: Started session-29.scope. Oct 2 20:10:26.391000 audit[3809]: USER_START pid=3809 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.393000 audit[3812]: CRED_ACQ pid=3812 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:26.401324 kernel: audit: type=1105 audit(1696277426.391:1321): pid=3809 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:27.969346 env[1630]: time="2023-10-02T20:10:27.969299575Z" level=info msg="StopPodSandbox for \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\"" Oct 2 20:10:27.970029 env[1630]: time="2023-10-02T20:10:27.969382092Z" level=info msg="Container to stop \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:27.973677 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608-shm.mount: Deactivated successfully. Oct 2 20:10:27.988610 systemd[1]: cri-containerd-1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608.scope: Deactivated successfully. Oct 2 20:10:27.988000 audit: BPF prog-id=116 op=UNLOAD Oct 2 20:10:27.992000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:10:28.008615 env[1630]: time="2023-10-02T20:10:28.008176134Z" level=info msg="StopContainer for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" with timeout 30 (s)" Oct 2 20:10:28.009530 env[1630]: time="2023-10-02T20:10:28.009498559Z" level=info msg="Stop container \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" with signal terminated" Oct 2 20:10:28.032534 systemd[1]: cri-containerd-a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d.scope: Deactivated successfully. Oct 2 20:10:28.032000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:10:28.037000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:10:28.043034 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608-rootfs.mount: Deactivated successfully. Oct 2 20:10:28.055077 env[1630]: time="2023-10-02T20:10:28.054882983Z" level=info msg="shim disconnected" id=1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608 Oct 2 20:10:28.055394 env[1630]: time="2023-10-02T20:10:28.055369825Z" level=warning msg="cleaning up after shim disconnected" id=1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608 namespace=k8s.io Oct 2 20:10:28.055486 env[1630]: time="2023-10-02T20:10:28.055471148Z" level=info msg="cleaning up dead shim" Oct 2 20:10:28.073637 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d-rootfs.mount: Deactivated successfully. Oct 2 20:10:28.083787 env[1630]: time="2023-10-02T20:10:28.083724256Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3852 runtime=io.containerd.runc.v2\n" Oct 2 20:10:28.084135 env[1630]: time="2023-10-02T20:10:28.084094097Z" level=info msg="TearDown network for sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" successfully" Oct 2 20:10:28.084135 env[1630]: time="2023-10-02T20:10:28.084123365Z" level=info msg="StopPodSandbox for \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" returns successfully" Oct 2 20:10:28.094297 env[1630]: time="2023-10-02T20:10:28.094184957Z" level=info msg="shim disconnected" id=a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d Oct 2 20:10:28.094497 env[1630]: time="2023-10-02T20:10:28.094353762Z" level=warning msg="cleaning up after shim disconnected" id=a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d namespace=k8s.io Oct 2 20:10:28.094497 env[1630]: time="2023-10-02T20:10:28.094370037Z" level=info msg="cleaning up dead shim" Oct 2 20:10:28.104664 env[1630]: time="2023-10-02T20:10:28.104616521Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3870 runtime=io.containerd.runc.v2\n" Oct 2 20:10:28.107367 env[1630]: time="2023-10-02T20:10:28.107319231Z" level=info msg="StopContainer for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" returns successfully" Oct 2 20:10:28.107962 env[1630]: time="2023-10-02T20:10:28.107923271Z" level=info msg="StopPodSandbox for \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\"" Oct 2 20:10:28.108079 env[1630]: time="2023-10-02T20:10:28.107983985Z" level=info msg="Container to stop \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:28.110240 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022-shm.mount: Deactivated successfully. Oct 2 20:10:28.125200 systemd[1]: cri-containerd-445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022.scope: Deactivated successfully. Oct 2 20:10:28.125000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:10:28.129000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:10:28.149426 kubelet[2644]: I1002 20:10:28.148054 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.149426 kubelet[2644]: I1002 20:10:28.148232 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-kernel\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.149426 kubelet[2644]: I1002 20:10:28.148313 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-cgroup\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.149426 kubelet[2644]: I1002 20:10:28.148415 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.149426 kubelet[2644]: I1002 20:10:28.149021 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-jgf7x\" (UniqueName: \"kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-kube-api-access-jgf7x\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.150337 kubelet[2644]: I1002 20:10:28.150008 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-bpf-maps\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.150337 kubelet[2644]: I1002 20:10:28.150049 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-run\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.150337 kubelet[2644]: I1002 20:10:28.150080 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cni-path\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150689 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-etc-cni-netd\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150730 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hubble-tls\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150757 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-lib-modules\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150767 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150785 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-xtables-lock\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150818 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-config-path\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150849 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ed9f18b0-a321-47f8-8ae8-73c1e4161687-clustermesh-secrets\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150884 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hostproc\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150911 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-net\") pod \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\" (UID: \"ed9f18b0-a321-47f8-8ae8-73c1e4161687\") " Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150962 2644 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-etc-cni-netd\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150981 2644 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-kernel\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150996 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-cgroup\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.151019 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.151045 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.151068 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.151372 kubelet[2644]: I1002 20:10:28.150132 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.152769 kubelet[2644]: I1002 20:10:28.150153 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.152769 kubelet[2644]: I1002 20:10:28.150170 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cni-path" (OuterVolumeSpecName: "cni-path") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.153525 kubelet[2644]: I1002 20:10:28.153499 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hostproc" (OuterVolumeSpecName: "hostproc") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:28.158367 kubelet[2644]: I1002 20:10:28.158132 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:28.163202 systemd[1]: var-lib-kubelet-pods-ed9f18b0\x2da321\x2d47f8\x2d8ae8\x2d73c1e4161687-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:10:28.166961 kubelet[2644]: I1002 20:10:28.166921 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:28.167778 kubelet[2644]: I1002 20:10:28.167743 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ed9f18b0-a321-47f8-8ae8-73c1e4161687-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:28.168523 kubelet[2644]: I1002 20:10:28.168445 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-kube-api-access-jgf7x" (OuterVolumeSpecName: "kube-api-access-jgf7x") pod "ed9f18b0-a321-47f8-8ae8-73c1e4161687" (UID: "ed9f18b0-a321-47f8-8ae8-73c1e4161687"). InnerVolumeSpecName "kube-api-access-jgf7x". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:28.197624 env[1630]: time="2023-10-02T20:10:28.197571335Z" level=info msg="shim disconnected" id=445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022 Oct 2 20:10:28.197624 env[1630]: time="2023-10-02T20:10:28.197619600Z" level=warning msg="cleaning up after shim disconnected" id=445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022 namespace=k8s.io Oct 2 20:10:28.197985 env[1630]: time="2023-10-02T20:10:28.197632679Z" level=info msg="cleaning up dead shim" Oct 2 20:10:28.208465 env[1630]: time="2023-10-02T20:10:28.208413415Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3904 runtime=io.containerd.runc.v2\n" Oct 2 20:10:28.208951 env[1630]: time="2023-10-02T20:10:28.208775574Z" level=info msg="TearDown network for sandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" successfully" Oct 2 20:10:28.208951 env[1630]: time="2023-10-02T20:10:28.208867235Z" level=info msg="StopPodSandbox for \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" returns successfully" Oct 2 20:10:28.251703 kubelet[2644]: I1002 20:10:28.251588 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-run\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.251703 kubelet[2644]: I1002 20:10:28.251622 2644 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cni-path\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.251703 kubelet[2644]: I1002 20:10:28.251642 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/ed9f18b0-a321-47f8-8ae8-73c1e4161687-cilium-config-path\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.251703 kubelet[2644]: I1002 20:10:28.251656 2644 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/ed9f18b0-a321-47f8-8ae8-73c1e4161687-clustermesh-secrets\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.251703 kubelet[2644]: I1002 20:10:28.251669 2644 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hubble-tls\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.251703 kubelet[2644]: I1002 20:10:28.251682 2644 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-lib-modules\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.253304 kubelet[2644]: I1002 20:10:28.253281 2644 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-xtables-lock\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.253490 kubelet[2644]: I1002 20:10:28.253478 2644 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-hostproc\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.253613 kubelet[2644]: I1002 20:10:28.253603 2644 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-host-proc-sys-net\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.253718 kubelet[2644]: I1002 20:10:28.253710 2644 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-jgf7x\" (UniqueName: \"kubernetes.io/projected/ed9f18b0-a321-47f8-8ae8-73c1e4161687-kube-api-access-jgf7x\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.253819 kubelet[2644]: I1002 20:10:28.253809 2644 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/ed9f18b0-a321-47f8-8ae8-73c1e4161687-bpf-maps\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.354920 kubelet[2644]: I1002 20:10:28.354871 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f9h7m\" (UniqueName: \"kubernetes.io/projected/3d349b9a-5f5f-4211-8542-bbf84845acd2-kube-api-access-f9h7m\") pod \"3d349b9a-5f5f-4211-8542-bbf84845acd2\" (UID: \"3d349b9a-5f5f-4211-8542-bbf84845acd2\") " Oct 2 20:10:28.355108 kubelet[2644]: I1002 20:10:28.354937 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3d349b9a-5f5f-4211-8542-bbf84845acd2-cilium-config-path\") pod \"3d349b9a-5f5f-4211-8542-bbf84845acd2\" (UID: \"3d349b9a-5f5f-4211-8542-bbf84845acd2\") " Oct 2 20:10:28.358134 kubelet[2644]: I1002 20:10:28.358093 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/3d349b9a-5f5f-4211-8542-bbf84845acd2-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "3d349b9a-5f5f-4211-8542-bbf84845acd2" (UID: "3d349b9a-5f5f-4211-8542-bbf84845acd2"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:28.359641 kubelet[2644]: I1002 20:10:28.359610 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/3d349b9a-5f5f-4211-8542-bbf84845acd2-kube-api-access-f9h7m" (OuterVolumeSpecName: "kube-api-access-f9h7m") pod "3d349b9a-5f5f-4211-8542-bbf84845acd2" (UID: "3d349b9a-5f5f-4211-8542-bbf84845acd2"). InnerVolumeSpecName "kube-api-access-f9h7m". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:28.456136 kubelet[2644]: I1002 20:10:28.456086 2644 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-f9h7m\" (UniqueName: \"kubernetes.io/projected/3d349b9a-5f5f-4211-8542-bbf84845acd2-kube-api-access-f9h7m\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.456136 kubelet[2644]: I1002 20:10:28.456128 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/3d349b9a-5f5f-4211-8542-bbf84845acd2-cilium-config-path\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:10:28.973325 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022-rootfs.mount: Deactivated successfully. Oct 2 20:10:28.973449 systemd[1]: var-lib-kubelet-pods-3d349b9a\x2d5f5f\x2d4211\x2d8542\x2dbbf84845acd2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df9h7m.mount: Deactivated successfully. Oct 2 20:10:28.973621 systemd[1]: var-lib-kubelet-pods-ed9f18b0\x2da321\x2d47f8\x2d8ae8\x2d73c1e4161687-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2djgf7x.mount: Deactivated successfully. Oct 2 20:10:28.973699 systemd[1]: var-lib-kubelet-pods-ed9f18b0\x2da321\x2d47f8\x2d8ae8\x2d73c1e4161687-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:29.013308 kubelet[2644]: I1002 20:10:29.013281 2644 scope.go:117] "RemoveContainer" containerID="a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d" Oct 2 20:10:29.015253 env[1630]: time="2023-10-02T20:10:29.015184229Z" level=info msg="RemoveContainer for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\"" Oct 2 20:10:29.020876 systemd[1]: Removed slice kubepods-besteffort-pod3d349b9a_5f5f_4211_8542_bbf84845acd2.slice. Oct 2 20:10:29.026616 env[1630]: time="2023-10-02T20:10:29.026149190Z" level=info msg="RemoveContainer for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" returns successfully" Oct 2 20:10:29.027910 kubelet[2644]: I1002 20:10:29.027885 2644 scope.go:117] "RemoveContainer" containerID="a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d" Oct 2 20:10:29.028503 env[1630]: time="2023-10-02T20:10:29.028433217Z" level=error msg="ContainerStatus for \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\": not found" Oct 2 20:10:29.028810 kubelet[2644]: E1002 20:10:29.028790 2644 remote_runtime.go:432] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\": not found" containerID="a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d" Oct 2 20:10:29.028990 kubelet[2644]: I1002 20:10:29.028976 2644 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d"} err="failed to get container status \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\": rpc error: code = NotFound desc = an error occurred when try to find container \"a9496060d85e71d2ba2a079d484c5c5b325f8958174cfb41a0b362884fb41c9d\": not found" Oct 2 20:10:29.029112 kubelet[2644]: I1002 20:10:29.029091 2644 scope.go:117] "RemoveContainer" containerID="39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149" Oct 2 20:10:29.033164 env[1630]: time="2023-10-02T20:10:29.032063259Z" level=info msg="RemoveContainer for \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\"" Oct 2 20:10:29.034589 systemd[1]: Removed slice kubepods-burstable-poded9f18b0_a321_47f8_8ae8_73c1e4161687.slice. Oct 2 20:10:29.037907 env[1630]: time="2023-10-02T20:10:29.037845482Z" level=info msg="RemoveContainer for \"39aabf283c7da579c1e87d3b71795075e47b234e2fb2956da2636c9f8a258149\" returns successfully" Oct 2 20:10:29.970797 sshd[3809]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:29.971000 audit[3809]: USER_END pid=3809 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:29.972000 audit[3809]: CRED_DISP pid=3809 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:29.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.27.142:22-139.178.89.65:48650 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:29.979175 systemd-logind[1624]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:10:29.979418 systemd[1]: sshd@28-172.31.27.142:22-139.178.89.65:48650.service: Deactivated successfully. Oct 2 20:10:29.980576 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:10:29.983280 systemd-logind[1624]: Removed session 29. Oct 2 20:10:29.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.142:22-139.178.89.65:48656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:29.995895 systemd[1]: Started sshd@29-172.31.27.142:22-139.178.89.65:48656.service. Oct 2 20:10:30.113635 kubelet[2644]: I1002 20:10:30.113533 2644 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="3d349b9a-5f5f-4211-8542-bbf84845acd2" path="/var/lib/kubelet/pods/3d349b9a-5f5f-4211-8542-bbf84845acd2/volumes" Oct 2 20:10:30.114793 kubelet[2644]: I1002 20:10:30.114744 2644 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" path="/var/lib/kubelet/pods/ed9f18b0-a321-47f8-8ae8-73c1e4161687/volumes" Oct 2 20:10:30.166000 audit[3919]: USER_ACCT pid=3919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:30.166779 sshd[3919]: Accepted publickey for core from 139.178.89.65 port 48656 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:30.167000 audit[3919]: CRED_ACQ pid=3919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:30.167000 audit[3919]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffee9ae680 a2=3 a3=0 items=0 ppid=1 pid=3919 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:30.167000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:30.168634 sshd[3919]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:30.174637 systemd-logind[1624]: New session 30 of user core. Oct 2 20:10:30.175717 systemd[1]: Started session-30.scope. Oct 2 20:10:30.201000 audit[3919]: USER_START pid=3919 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:30.202000 audit[3921]: CRED_ACQ pid=3921 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:30.907765 kubelet[2644]: I1002 20:10:30.907723 2644 topology_manager.go:215] "Topology Admit Handler" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" podNamespace="kube-system" podName="cilium-lgqlg" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907789 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907802 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907812 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907823 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="3d349b9a-5f5f-4211-8542-bbf84845acd2" containerName="cilium-operator" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907831 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: I1002 20:10:30.907859 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: I1002 20:10:30.907868 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="3d349b9a-5f5f-4211-8542-bbf84845acd2" containerName="cilium-operator" Oct 2 20:10:30.908021 kubelet[2644]: I1002 20:10:30.907876 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: I1002 20:10:30.907883 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907905 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: E1002 20:10:30.907915 2644 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: I1002 20:10:30.907938 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908021 kubelet[2644]: I1002 20:10:30.908018 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.908598 kubelet[2644]: I1002 20:10:30.908032 2644 memory_manager.go:346] "RemoveStaleState removing state" podUID="ed9f18b0-a321-47f8-8ae8-73c1e4161687" containerName="mount-cgroup" Oct 2 20:10:30.916042 systemd[1]: Created slice kubepods-burstable-pod4e37dc66_6ee6_4c3b_a5cc_6fcdd99cbe0d.slice. Oct 2 20:10:30.978830 kubelet[2644]: I1002 20:10:30.978784 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-net\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.979081 kubelet[2644]: I1002 20:10:30.979068 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mczg6\" (UniqueName: \"kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-kube-api-access-mczg6\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.979383 kubelet[2644]: I1002 20:10:30.979199 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-xtables-lock\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.979548 kubelet[2644]: I1002 20:10:30.979534 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-config-path\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.979779 kubelet[2644]: I1002 20:10:30.979764 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cni-path\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.979979 kubelet[2644]: I1002 20:10:30.979965 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-cgroup\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.980298 kubelet[2644]: I1002 20:10:30.980280 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-etc-cni-netd\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.980700 kubelet[2644]: I1002 20:10:30.980683 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-kernel\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.980871 kubelet[2644]: I1002 20:10:30.980858 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-run\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.980997 kubelet[2644]: I1002 20:10:30.980986 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-bpf-maps\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.981160 kubelet[2644]: I1002 20:10:30.981121 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-lib-modules\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.981296 kubelet[2644]: I1002 20:10:30.981283 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hostproc\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.981783 kubelet[2644]: I1002 20:10:30.981767 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-clustermesh-secrets\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.983798 kubelet[2644]: I1002 20:10:30.983779 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-ipsec-secrets\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:30.983974 kubelet[2644]: I1002 20:10:30.983958 2644 reconciler_common.go:258] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hubble-tls\") pod \"cilium-lgqlg\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " pod="kube-system/cilium-lgqlg" Oct 2 20:10:31.221131 env[1630]: time="2023-10-02T20:10:31.221019168Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lgqlg,Uid:4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d,Namespace:kube-system,Attempt:0,}" Oct 2 20:10:31.246102 env[1630]: time="2023-10-02T20:10:31.246014836Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:10:31.246102 env[1630]: time="2023-10-02T20:10:31.246062522Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:10:31.246102 env[1630]: time="2023-10-02T20:10:31.246077666Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:10:31.246786 env[1630]: time="2023-10-02T20:10:31.246721890Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c pid=3938 runtime=io.containerd.runc.v2 Oct 2 20:10:31.266987 systemd[1]: Started cri-containerd-7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c.scope. Oct 2 20:10:31.292294 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:10:31.292504 kernel: audit: type=1400 audit(1696277431.289:1338): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.300966 kernel: audit: type=1400 audit(1696277431.289:1339): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.306828 kubelet[2644]: E1002 20:10:31.302065 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:31.307439 kernel: audit: type=1400 audit(1696277431.289:1340): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.313331 kernel: audit: type=1400 audit(1696277431.289:1341): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.325375 kernel: audit: type=1400 audit(1696277431.289:1342): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.325495 kernel: audit: type=1400 audit(1696277431.289:1343): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.326394 kernel: audit: type=1400 audit(1696277431.289:1344): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.337701 kernel: audit: type=1400 audit(1696277431.289:1345): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.337862 kernel: audit: type=1400 audit(1696277431.289:1346): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.289000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.290000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.347205 kernel: audit: type=1400 audit(1696277431.290:1347): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.290000 audit: BPF prog-id=131 op=LOAD Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3938 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763616131376137346264666330656366333265373563363032353535 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3938 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763616131376137346264666330656366333265373563363032353535 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.297000 audit: BPF prog-id=132 op=LOAD Oct 2 20:10:31.297000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000299990 items=0 ppid=3938 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.297000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763616131376137346264666330656366333265373563363032353535 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.320000 audit: BPF prog-id=133 op=LOAD Oct 2 20:10:31.320000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002999d8 items=0 ppid=3938 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763616131376137346264666330656366333265373563363032353535 Oct 2 20:10:31.331000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:10:31.331000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { perfmon } for pid=3948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit[3948]: AVC avc: denied { bpf } for pid=3948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:31.331000 audit: BPF prog-id=134 op=LOAD Oct 2 20:10:31.331000 audit[3948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000299de8 items=0 ppid=3938 pid=3948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:31.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3763616131376137346264666330656366333265373563363032353535 Oct 2 20:10:31.376618 env[1630]: time="2023-10-02T20:10:31.376546285Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lgqlg,Uid:4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d,Namespace:kube-system,Attempt:0,} returns sandbox id \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\"" Oct 2 20:10:31.382161 env[1630]: time="2023-10-02T20:10:31.382083300Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:10:31.409174 env[1630]: time="2023-10-02T20:10:31.408148532Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\"" Oct 2 20:10:31.410056 env[1630]: time="2023-10-02T20:10:31.410020451Z" level=info msg="StartContainer for \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\"" Oct 2 20:10:31.433849 systemd[1]: Started cri-containerd-46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430.scope. Oct 2 20:10:31.449495 systemd[1]: cri-containerd-46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430.scope: Deactivated successfully. Oct 2 20:10:31.487982 env[1630]: time="2023-10-02T20:10:31.487870675Z" level=info msg="shim disconnected" id=46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430 Oct 2 20:10:31.488611 env[1630]: time="2023-10-02T20:10:31.488583828Z" level=warning msg="cleaning up after shim disconnected" id=46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430 namespace=k8s.io Oct 2 20:10:31.488781 env[1630]: time="2023-10-02T20:10:31.488764961Z" level=info msg="cleaning up dead shim" Oct 2 20:10:31.504483 env[1630]: time="2023-10-02T20:10:31.504429758Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:31Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3994 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:31Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:31.504789 env[1630]: time="2023-10-02T20:10:31.504727383Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 20:10:31.505142 env[1630]: time="2023-10-02T20:10:31.505090634Z" level=error msg="Failed to pipe stderr of container \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\"" error="reading from a closed fifo" Oct 2 20:10:31.505346 env[1630]: time="2023-10-02T20:10:31.505310521Z" level=error msg="Failed to pipe stdout of container \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\"" error="reading from a closed fifo" Oct 2 20:10:31.507527 env[1630]: time="2023-10-02T20:10:31.507481487Z" level=error msg="StartContainer for \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:31.507993 kubelet[2644]: E1002 20:10:31.507963 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430" Oct 2 20:10:31.508123 kubelet[2644]: E1002 20:10:31.508095 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:31.508123 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:31.508123 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:10:31.508123 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mczg6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:31.509028 kubelet[2644]: E1002 20:10:31.508151 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:10:32.033666 env[1630]: time="2023-10-02T20:10:32.033627725Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:10:32.049389 env[1630]: time="2023-10-02T20:10:32.049341309Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\"" Oct 2 20:10:32.054427 env[1630]: time="2023-10-02T20:10:32.052570324Z" level=info msg="StartContainer for \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\"" Oct 2 20:10:32.079439 systemd[1]: Started cri-containerd-28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa.scope. Oct 2 20:10:32.099544 systemd[1]: cri-containerd-28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa.scope: Deactivated successfully. Oct 2 20:10:32.109096 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa-rootfs.mount: Deactivated successfully. Oct 2 20:10:32.124011 env[1630]: time="2023-10-02T20:10:32.123950902Z" level=info msg="shim disconnected" id=28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa Oct 2 20:10:32.124011 env[1630]: time="2023-10-02T20:10:32.124007401Z" level=warning msg="cleaning up after shim disconnected" id=28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa namespace=k8s.io Oct 2 20:10:32.124011 env[1630]: time="2023-10-02T20:10:32.124021722Z" level=info msg="cleaning up dead shim" Oct 2 20:10:32.134001 env[1630]: time="2023-10-02T20:10:32.133941618Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4031 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:32Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:32.134373 env[1630]: time="2023-10-02T20:10:32.134305494Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 20:10:32.134715 env[1630]: time="2023-10-02T20:10:32.134673850Z" level=error msg="Failed to pipe stderr of container \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\"" error="reading from a closed fifo" Oct 2 20:10:32.134811 env[1630]: time="2023-10-02T20:10:32.134674322Z" level=error msg="Failed to pipe stdout of container \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\"" error="reading from a closed fifo" Oct 2 20:10:32.141249 env[1630]: time="2023-10-02T20:10:32.141170105Z" level=error msg="StartContainer for \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:32.142685 kubelet[2644]: E1002 20:10:32.142657 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa" Oct 2 20:10:32.142912 kubelet[2644]: E1002 20:10:32.142778 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:32.142912 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:32.142912 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:10:32.142912 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mczg6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:32.142912 kubelet[2644]: E1002 20:10:32.142826 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:10:33.033870 kubelet[2644]: I1002 20:10:33.033843 2644 scope.go:117] "RemoveContainer" containerID="46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430" Oct 2 20:10:33.034526 kubelet[2644]: I1002 20:10:33.034509 2644 scope.go:117] "RemoveContainer" containerID="46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430" Oct 2 20:10:33.036262 env[1630]: time="2023-10-02T20:10:33.036128456Z" level=info msg="RemoveContainer for \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\"" Oct 2 20:10:33.037046 env[1630]: time="2023-10-02T20:10:33.037015980Z" level=info msg="RemoveContainer for \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\"" Oct 2 20:10:33.037347 env[1630]: time="2023-10-02T20:10:33.037310188Z" level=error msg="RemoveContainer for \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\" failed" error="failed to set removing state for container \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\": container is already in removing state" Oct 2 20:10:33.037600 kubelet[2644]: E1002 20:10:33.037582 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\": container is already in removing state" containerID="46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430" Oct 2 20:10:33.037737 kubelet[2644]: E1002 20:10:33.037725 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430": container is already in removing state; Skipping pod "cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)" Oct 2 20:10:33.038862 kubelet[2644]: E1002 20:10:33.038844 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:10:33.044620 env[1630]: time="2023-10-02T20:10:33.044573066Z" level=info msg="RemoveContainer for \"46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430\" returns successfully" Oct 2 20:10:34.594912 kubelet[2644]: W1002 20:10:34.594868 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4e37dc66_6ee6_4c3b_a5cc_6fcdd99cbe0d.slice/cri-containerd-46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430.scope WatchSource:0}: container "46f16ebad31af39a1e146f9d14000410c2d09853cac55daa62ba5e2d583f0430" in namespace "k8s.io": not found Oct 2 20:10:36.302880 kubelet[2644]: E1002 20:10:36.302850 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:37.702421 kubelet[2644]: W1002 20:10:37.702360 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4e37dc66_6ee6_4c3b_a5cc_6fcdd99cbe0d.slice/cri-containerd-28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa.scope WatchSource:0}: task 28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa not found: not found Oct 2 20:10:38.202000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.225079 kernel: kauditd_printk_skb: 47 callbacks suppressed Oct 2 20:10:38.225191 kernel: audit: type=1400 audit(1696277438.202:1356): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.225243 kernel: audit: type=1300 audit(1696277438.202:1356): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c82f00 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.225278 kernel: audit: type=1327 audit(1696277438.202:1356): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.225312 kernel: audit: type=1400 audit(1696277438.209:1357): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.202000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c82f00 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.202000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.209000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.209000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c82f20 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.240389 kernel: audit: type=1300 audit(1696277438.209:1357): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c82f20 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.240610 kernel: audit: type=1327 audit(1696277438.209:1357): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.209000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.214000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.255437 kernel: audit: type=1400 audit(1696277438.214:1358): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.255654 kernel: audit: type=1300 audit(1696277438.214:1358): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c82f40 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.214000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c82f40 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.271918 kernel: audit: type=1327 audit(1696277438.214:1358): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:38.272273 kernel: audit: type=1400 audit(1696277438.217:1359): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.217000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:38.217000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b69480 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:10:38.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.304170 kubelet[2644]: E1002 20:10:41.304138 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:42.720175 amazon-ssm-agent[1612]: 2023-10-02 20:10:42 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 20:10:42.821355 amazon-ssm-agent[1612]: 2023-10-02 20:10:42 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0775110cae063bc1f is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0775110cae063bc1f because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:10:42.821355 amazon-ssm-agent[1612]: status code: 400, request id: 502b6a41-a815-4cda-b41b-31be8013a659 Oct 2 20:10:46.305562 kubelet[2644]: E1002 20:10:46.305511 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:47.112072 env[1630]: time="2023-10-02T20:10:47.112000835Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:10:47.134644 env[1630]: time="2023-10-02T20:10:47.134550438Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\"" Oct 2 20:10:47.135696 env[1630]: time="2023-10-02T20:10:47.135663547Z" level=info msg="StartContainer for \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\"" Oct 2 20:10:47.165805 systemd[1]: Started cri-containerd-dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b.scope. Oct 2 20:10:47.182365 systemd[1]: cri-containerd-dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b.scope: Deactivated successfully. Oct 2 20:10:47.187976 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b-rootfs.mount: Deactivated successfully. Oct 2 20:10:47.209042 env[1630]: time="2023-10-02T20:10:47.208982116Z" level=info msg="shim disconnected" id=dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b Oct 2 20:10:47.209042 env[1630]: time="2023-10-02T20:10:47.209039599Z" level=warning msg="cleaning up after shim disconnected" id=dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b namespace=k8s.io Oct 2 20:10:47.209042 env[1630]: time="2023-10-02T20:10:47.209051936Z" level=info msg="cleaning up dead shim" Oct 2 20:10:47.222401 env[1630]: time="2023-10-02T20:10:47.222348572Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4072 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:47Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:47.222767 env[1630]: time="2023-10-02T20:10:47.222706217Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 20:10:47.223008 env[1630]: time="2023-10-02T20:10:47.222961895Z" level=error msg="Failed to pipe stderr of container \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\"" error="reading from a closed fifo" Oct 2 20:10:47.223401 env[1630]: time="2023-10-02T20:10:47.223324673Z" level=error msg="Failed to pipe stdout of container \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\"" error="reading from a closed fifo" Oct 2 20:10:47.225962 env[1630]: time="2023-10-02T20:10:47.225918016Z" level=error msg="StartContainer for \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:47.226330 kubelet[2644]: E1002 20:10:47.226307 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b" Oct 2 20:10:47.226561 kubelet[2644]: E1002 20:10:47.226440 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:47.226561 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:47.226561 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:10:47.226561 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mczg6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:47.226561 kubelet[2644]: E1002 20:10:47.226520 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:10:48.072723 kubelet[2644]: I1002 20:10:48.071974 2644 scope.go:117] "RemoveContainer" containerID="28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa" Oct 2 20:10:48.072723 kubelet[2644]: I1002 20:10:48.072348 2644 scope.go:117] "RemoveContainer" containerID="28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa" Oct 2 20:10:48.087046 env[1630]: time="2023-10-02T20:10:48.079744339Z" level=info msg="RemoveContainer for \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\"" Oct 2 20:10:48.090364 env[1630]: time="2023-10-02T20:10:48.090327429Z" level=info msg="RemoveContainer for \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\"" Oct 2 20:10:48.090831 env[1630]: time="2023-10-02T20:10:48.090783018Z" level=error msg="RemoveContainer for \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\" failed" error="failed to set removing state for container \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\": container is already in removing state" Oct 2 20:10:48.092033 kubelet[2644]: E1002 20:10:48.091257 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\": container is already in removing state" containerID="28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa" Oct 2 20:10:48.092033 kubelet[2644]: E1002 20:10:48.091316 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa": container is already in removing state; Skipping pod "cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)" Oct 2 20:10:48.092033 kubelet[2644]: E1002 20:10:48.091679 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:10:48.095421 env[1630]: time="2023-10-02T20:10:48.095365668Z" level=info msg="RemoveContainer for \"28eb34cbd86c8acb1a3e06a427d84d86952e71ad25d55aac2ed7907e368028aa\" returns successfully" Oct 2 20:10:50.314996 kubelet[2644]: W1002 20:10:50.314952 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4e37dc66_6ee6_4c3b_a5cc_6fcdd99cbe0d.slice/cri-containerd-dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b.scope WatchSource:0}: task dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b not found: not found Oct 2 20:10:51.307146 kubelet[2644]: E1002 20:10:51.307114 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:56.308852 kubelet[2644]: E1002 20:10:56.308814 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:59.109088 kubelet[2644]: E1002 20:10:59.109052 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:11:01.310163 kubelet[2644]: E1002 20:11:01.310127 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:06.310922 kubelet[2644]: E1002 20:11:06.310877 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:11.113885 env[1630]: time="2023-10-02T20:11:11.113839802Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:11:11.148940 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2791572959.mount: Deactivated successfully. Oct 2 20:11:11.169291 env[1630]: time="2023-10-02T20:11:11.169186824Z" level=info msg="CreateContainer within sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\"" Oct 2 20:11:11.170685 env[1630]: time="2023-10-02T20:11:11.170506304Z" level=info msg="StartContainer for \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\"" Oct 2 20:11:11.214587 systemd[1]: Started cri-containerd-5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab.scope. Oct 2 20:11:11.235583 systemd[1]: cri-containerd-5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab.scope: Deactivated successfully. Oct 2 20:11:11.263278 env[1630]: time="2023-10-02T20:11:11.262914612Z" level=info msg="shim disconnected" id=5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab Oct 2 20:11:11.263278 env[1630]: time="2023-10-02T20:11:11.263240982Z" level=warning msg="cleaning up after shim disconnected" id=5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab namespace=k8s.io Oct 2 20:11:11.263278 env[1630]: time="2023-10-02T20:11:11.263276585Z" level=info msg="cleaning up dead shim" Oct 2 20:11:11.276004 env[1630]: time="2023-10-02T20:11:11.275861252Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:11Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4113 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:11Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:11.276497 env[1630]: time="2023-10-02T20:11:11.276428459Z" level=error msg="copy shim log" error="read /proc/self/fd/38: file already closed" Oct 2 20:11:11.277784 env[1630]: time="2023-10-02T20:11:11.277692638Z" level=error msg="Failed to pipe stdout of container \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\"" error="reading from a closed fifo" Oct 2 20:11:11.277912 env[1630]: time="2023-10-02T20:11:11.277817777Z" level=error msg="Failed to pipe stderr of container \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\"" error="reading from a closed fifo" Oct 2 20:11:11.280230 env[1630]: time="2023-10-02T20:11:11.280175126Z" level=error msg="StartContainer for \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:11.281068 kubelet[2644]: E1002 20:11:11.280512 2644 remote_runtime.go:343] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab" Oct 2 20:11:11.281068 kubelet[2644]: E1002 20:11:11.280616 2644 kuberuntime_manager.go:1209] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:11.281068 kubelet[2644]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:11.281068 kubelet[2644]: rm /hostbin/cilium-mount Oct 2 20:11:11.281068 kubelet[2644]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-mczg6,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,ResizePolicy:[]ContainerResizePolicy{},RestartPolicy:nil,} start failed in pod cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:11.281068 kubelet[2644]: E1002 20:11:11.280659 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:11:11.312463 kubelet[2644]: E1002 20:11:11.312396 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:12.133840 kubelet[2644]: I1002 20:11:12.133809 2644 scope.go:117] "RemoveContainer" containerID="dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b" Oct 2 20:11:12.141637 systemd[1]: run-containerd-runc-k8s.io-5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab-runc.fDwAte.mount: Deactivated successfully. Oct 2 20:11:12.141776 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab-rootfs.mount: Deactivated successfully. Oct 2 20:11:12.144927 kubelet[2644]: I1002 20:11:12.144891 2644 scope.go:117] "RemoveContainer" containerID="dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b" Oct 2 20:11:12.154258 env[1630]: time="2023-10-02T20:11:12.152654909Z" level=info msg="RemoveContainer for \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\"" Oct 2 20:11:12.160930 env[1630]: time="2023-10-02T20:11:12.160871288Z" level=info msg="RemoveContainer for \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\"" Oct 2 20:11:12.161211 env[1630]: time="2023-10-02T20:11:12.161136485Z" level=error msg="RemoveContainer for \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\" failed" error="failed to set removing state for container \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\": container is already in removing state" Oct 2 20:11:12.161492 kubelet[2644]: E1002 20:11:12.161470 2644 remote_runtime.go:385] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\": container is already in removing state" containerID="dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b" Oct 2 20:11:12.161592 kubelet[2644]: E1002 20:11:12.161520 2644 kuberuntime_container.go:820] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b": container is already in removing state; Skipping pod "cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)" Oct 2 20:11:12.161963 kubelet[2644]: E1002 20:11:12.161947 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:11:12.174463 env[1630]: time="2023-10-02T20:11:12.174393506Z" level=info msg="RemoveContainer for \"dc8095f49bdeca580ec86d56a731eee220f04f8c047feed7585d607dee86a08b\" returns successfully" Oct 2 20:11:14.370111 kubelet[2644]: W1002 20:11:14.370068 2644 manager.go:1159] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod4e37dc66_6ee6_4c3b_a5cc_6fcdd99cbe0d.slice/cri-containerd-5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab.scope WatchSource:0}: task 5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab not found: not found Oct 2 20:11:16.314330 kubelet[2644]: E1002 20:11:16.314301 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:20.926257 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:11:20.926425 kernel: audit: type=1400 audit(1696277480.922:1361): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.922000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.922000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.950085 kernel: audit: type=1400 audit(1696277480.922:1360): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:20.950253 kernel: audit: type=1300 audit(1696277480.922:1361): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00228d110 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:20.922000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00228d110 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:20.922000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:20.967526 kernel: audit: type=1327 audit(1696277480.922:1361): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:20.967689 kernel: audit: type=1300 audit(1696277480.922:1360): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013d7040 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:20.922000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013d7040 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:20.922000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:20.993439 kernel: audit: type=1327 audit(1696277480.922:1360): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:21.317319 kubelet[2644]: E1002 20:11:21.317190 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:22.383000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.392283 kernel: audit: type=1400 audit(1696277482.383:1362): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.383000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0086f5950 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.383000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:22.412440 kernel: audit: type=1300 audit(1696277482.383:1362): arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0086f5950 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.412627 kernel: audit: type=1327 audit(1696277482.383:1362): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:22.412666 kernel: audit: type=1400 audit(1696277482.383:1363): avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.383000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.383000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00a90c7c0 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.383000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:22.383000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=520990 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.383000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c0086f5a70 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.383000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:22.399000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=520996 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.399000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c004a11140 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.399000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:22.403000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.403000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00a78c840 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:22.403000 audit[2479]: AVC avc: denied { watch } for pid=2479 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:22.403000 audit[2479]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=50 a1=c00504e240 a2=fc6 a3=0 items=0 ppid=2337 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c380,c664 key=(null) Oct 2 20:11:22.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32372E313432002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:25.109106 kubelet[2644]: E1002 20:11:25.109071 2644 pod_workers.go:1300] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lgqlg_kube-system(4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d)\"" pod="kube-system/cilium-lgqlg" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" Oct 2 20:11:26.093892 env[1630]: time="2023-10-02T20:11:26.093850684Z" level=info msg="StopPodSandbox for \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\"" Oct 2 20:11:26.094484 env[1630]: time="2023-10-02T20:11:26.093958022Z" level=info msg="TearDown network for sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" successfully" Oct 2 20:11:26.094484 env[1630]: time="2023-10-02T20:11:26.094002641Z" level=info msg="StopPodSandbox for \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" returns successfully" Oct 2 20:11:26.094484 env[1630]: time="2023-10-02T20:11:26.094425977Z" level=info msg="RemovePodSandbox for \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\"" Oct 2 20:11:26.094759 env[1630]: time="2023-10-02T20:11:26.094460015Z" level=info msg="Forcibly stopping sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\"" Oct 2 20:11:26.094759 env[1630]: time="2023-10-02T20:11:26.094670427Z" level=info msg="TearDown network for sandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" successfully" Oct 2 20:11:26.103139 env[1630]: time="2023-10-02T20:11:26.103024428Z" level=info msg="RemovePodSandbox \"1947a12129b52c29d00b1fcd348962457664104c0f01e30f8fd181eec858e608\" returns successfully" Oct 2 20:11:26.104063 env[1630]: time="2023-10-02T20:11:26.104018753Z" level=info msg="StopPodSandbox for \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\"" Oct 2 20:11:26.104288 env[1630]: time="2023-10-02T20:11:26.104239305Z" level=info msg="TearDown network for sandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" successfully" Oct 2 20:11:26.104387 env[1630]: time="2023-10-02T20:11:26.104282967Z" level=info msg="StopPodSandbox for \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" returns successfully" Oct 2 20:11:26.104596 env[1630]: time="2023-10-02T20:11:26.104571188Z" level=info msg="RemovePodSandbox for \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\"" Oct 2 20:11:26.104749 env[1630]: time="2023-10-02T20:11:26.104598534Z" level=info msg="Forcibly stopping sandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\"" Oct 2 20:11:26.104749 env[1630]: time="2023-10-02T20:11:26.104740008Z" level=info msg="TearDown network for sandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" successfully" Oct 2 20:11:26.110288 env[1630]: time="2023-10-02T20:11:26.110207216Z" level=info msg="RemovePodSandbox \"445d9b0f25412f24fa65b25e3968d283a0cc23268d0e4e728c72385a2e0be022\" returns successfully" Oct 2 20:11:26.318091 kubelet[2644]: E1002 20:11:26.317996 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:31.327536 kubelet[2644]: E1002 20:11:31.327498 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:32.589109 env[1630]: time="2023-10-02T20:11:32.589052640Z" level=info msg="StopPodSandbox for \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\"" Oct 2 20:11:32.589646 env[1630]: time="2023-10-02T20:11:32.589154227Z" level=info msg="Container to stop \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:32.591865 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c-shm.mount: Deactivated successfully. Oct 2 20:11:32.640210 systemd[1]: cri-containerd-7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c.scope: Deactivated successfully. Oct 2 20:11:32.644399 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:11:32.644526 kernel: audit: type=1334 audit(1696277492.639:1368): prog-id=131 op=UNLOAD Oct 2 20:11:32.639000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:11:32.647000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:11:32.650236 kernel: audit: type=1334 audit(1696277492.647:1369): prog-id=134 op=UNLOAD Oct 2 20:11:32.696184 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c-rootfs.mount: Deactivated successfully. Oct 2 20:11:32.721916 env[1630]: time="2023-10-02T20:11:32.721856018Z" level=info msg="shim disconnected" id=7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c Oct 2 20:11:32.722443 env[1630]: time="2023-10-02T20:11:32.722419400Z" level=warning msg="cleaning up after shim disconnected" id=7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c namespace=k8s.io Oct 2 20:11:32.722555 env[1630]: time="2023-10-02T20:11:32.722539229Z" level=info msg="cleaning up dead shim" Oct 2 20:11:32.733543 env[1630]: time="2023-10-02T20:11:32.733493302Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4146 runtime=io.containerd.runc.v2\n" Oct 2 20:11:32.733880 env[1630]: time="2023-10-02T20:11:32.733848603Z" level=info msg="TearDown network for sandbox \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" successfully" Oct 2 20:11:32.733987 env[1630]: time="2023-10-02T20:11:32.733877637Z" level=info msg="StopPodSandbox for \"7caa17a74bdfc0ecf32e75c6025551f899529a6eda4c806b8b1f404da26f574c\" returns successfully" Oct 2 20:11:32.747003 sshd[3919]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:32.774614 kernel: audit: type=1106 audit(1696277492.751:1370): pid=3919 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:32.751000 audit[3919]: USER_END pid=3919 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:32.774332 systemd[1]: sshd@29-172.31.27.142:22-139.178.89.65:48656.service: Deactivated successfully. Oct 2 20:11:32.753000 audit[3919]: CRED_DISP pid=3919 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:32.776305 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:11:32.789280 kernel: audit: type=1104 audit(1696277492.753:1371): pid=3919 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:32.773000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.142:22-139.178.89.65:48656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:32.789916 systemd-logind[1624]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:11:32.791812 systemd-logind[1624]: Removed session 30. Oct 2 20:11:32.798722 kernel: audit: type=1131 audit(1696277492.773:1372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.27.142:22-139.178.89.65:48656 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:32.890534 kubelet[2644]: I1002 20:11:32.890497 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-cgroup\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.890534 kubelet[2644]: I1002 20:11:32.890549 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-bpf-maps\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890574 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-lib-modules\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890602 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-xtables-lock\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890633 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hubble-tls\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890662 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-net\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890699 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-config-path\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890729 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-run\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890754 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-etc-cni-netd\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.890948 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-ipsec-secrets\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891291 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mczg6\" (UniqueName: \"kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-kube-api-access-mczg6\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891372 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cni-path\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891405 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-clustermesh-secrets\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891432 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-kernel\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891457 2644 reconciler_common.go:172] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hostproc\") pod \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\" (UID: \"4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d\") " Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891526 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hostproc" (OuterVolumeSpecName: "hostproc") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891562 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.891634 kubelet[2644]: I1002 20:11:32.891583 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.892596 kubelet[2644]: I1002 20:11:32.891606 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.892596 kubelet[2644]: I1002 20:11:32.891628 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.895328 kubelet[2644]: I1002 20:11:32.893874 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.897648 kubelet[2644]: I1002 20:11:32.897608 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cni-path" (OuterVolumeSpecName: "cni-path") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.902149 systemd[1]: var-lib-kubelet-pods-4e37dc66\x2d6ee6\x2d4c3b\x2da5cc\x2d6fcdd99cbe0d-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:11:32.906818 kubelet[2644]: I1002 20:11:32.906778 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.907203 kubelet[2644]: I1002 20:11:32.907086 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.907611 kubelet[2644]: I1002 20:11:32.907456 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:32.907747 kubelet[2644]: I1002 20:11:32.907559 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:32.907926 kubelet[2644]: I1002 20:11:32.907587 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:32.911696 systemd[1]: var-lib-kubelet-pods-4e37dc66\x2d6ee6\x2d4c3b\x2da5cc\x2d6fcdd99cbe0d-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmczg6.mount: Deactivated successfully. Oct 2 20:11:32.915696 kubelet[2644]: I1002 20:11:32.915656 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:32.916005 kubelet[2644]: I1002 20:11:32.915940 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-kube-api-access-mczg6" (OuterVolumeSpecName: "kube-api-access-mczg6") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "kube-api-access-mczg6". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:32.919698 systemd[1]: var-lib-kubelet-pods-4e37dc66\x2d6ee6\x2d4c3b\x2da5cc\x2d6fcdd99cbe0d-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:32.919829 systemd[1]: var-lib-kubelet-pods-4e37dc66\x2d6ee6\x2d4c3b\x2da5cc\x2d6fcdd99cbe0d-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:32.923639 kubelet[2644]: I1002 20:11:32.923391 2644 operation_generator.go:878] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" (UID: "4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:32.992593 kubelet[2644]: I1002 20:11:32.992543 2644 reconciler_common.go:300] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-xtables-lock\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.992593 kubelet[2644]: I1002 20:11:32.992581 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-config-path\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.992593 kubelet[2644]: I1002 20:11:32.992597 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-run\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992611 2644 reconciler_common.go:300] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hubble-tls\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992624 2644 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-net\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992638 2644 reconciler_common.go:300] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-etc-cni-netd\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992650 2644 reconciler_common.go:300] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-host-proc-sys-kernel\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992662 2644 reconciler_common.go:300] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-hostproc\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992676 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-ipsec-secrets\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992690 2644 reconciler_common.go:300] "Volume detached for volume \"kube-api-access-mczg6\" (UniqueName: \"kubernetes.io/projected/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-kube-api-access-mczg6\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992703 2644 reconciler_common.go:300] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cni-path\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992838 2644 reconciler_common.go:300] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-clustermesh-secrets\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992894 2644 reconciler_common.go:300] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-cilium-cgroup\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992909 2644 reconciler_common.go:300] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-bpf-maps\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:32.993022 kubelet[2644]: I1002 20:11:32.992924 2644 reconciler_common.go:300] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d-lib-modules\") on node \"ip-172-31-27-142\" DevicePath \"\"" Oct 2 20:11:33.196449 kubelet[2644]: I1002 20:11:33.196351 2644 scope.go:117] "RemoveContainer" containerID="5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab" Oct 2 20:11:33.210482 env[1630]: time="2023-10-02T20:11:33.210435601Z" level=info msg="RemoveContainer for \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\"" Oct 2 20:11:33.217350 systemd[1]: Removed slice kubepods-burstable-pod4e37dc66_6ee6_4c3b_a5cc_6fcdd99cbe0d.slice. Oct 2 20:11:33.218807 env[1630]: time="2023-10-02T20:11:33.218393389Z" level=info msg="RemoveContainer for \"5352fa86118d01c376000b800af123c8e385567e43aec6c142977e786633cdab\" returns successfully" Oct 2 20:11:34.111593 kubelet[2644]: I1002 20:11:34.111481 2644 kubelet_volumes.go:161] "Cleaned up orphaned pod volumes dir" podUID="4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d" path="/var/lib/kubelet/pods/4e37dc66-6ee6-4c3b-a5cc-6fcdd99cbe0d/volumes" Oct 2 20:11:36.329105 kubelet[2644]: E1002 20:11:36.329074 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:38.211000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.211000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f4760 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.225246 kernel: audit: type=1400 audit(1696277498.211:1373): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.225394 kernel: audit: type=1300 audit(1696277498.211:1373): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f4760 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.225427 kernel: audit: type=1327 audit(1696277498.211:1373): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.211000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.214000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.238815 kernel: audit: type=1400 audit(1696277498.214:1374): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.239003 kernel: audit: type=1300 audit(1696277498.214:1374): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001441b60 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.214000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001441b60 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.252244 kernel: audit: type=1327 audit(1696277498.214:1374): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.252373 kernel: audit: type=1400 audit(1696277498.217:1375): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.217000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.217000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f4880 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.265083 kernel: audit: type=1300 audit(1696277498.217:1375): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014f4880 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.265209 kernel: audit: type=1327 audit(1696277498.217:1375): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:38.222000 audit[2516]: AVC avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.277496 kernel: audit: type=1400 audit(1696277498.222:1376): avc: denied { watch } for pid=2516 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:38.222000 audit[2516]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001441c80 a2=fc6 a3=0 items=0 ppid=2359 pid=2516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:38.222000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.329976 kubelet[2644]: E1002 20:11:41.329939 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:46.331170 kubelet[2644]: E1002 20:11:46.331128 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:47.917469 systemd[1]: cri-containerd-3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f.scope: Deactivated successfully. Oct 2 20:11:47.917857 systemd[1]: cri-containerd-3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f.scope: Consumed 4.307s CPU time. Oct 2 20:11:47.922000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:11:47.925060 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:11:47.925162 kernel: audit: type=1334 audit(1696277507.922:1377): prog-id=90 op=UNLOAD Oct 2 20:11:47.922000 audit: BPF prog-id=99 op=UNLOAD Oct 2 20:11:47.929611 kernel: audit: type=1334 audit(1696277507.922:1378): prog-id=99 op=UNLOAD Oct 2 20:11:47.953019 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f-rootfs.mount: Deactivated successfully. Oct 2 20:11:47.983751 env[1630]: time="2023-10-02T20:11:47.983628613Z" level=info msg="shim disconnected" id=3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f Oct 2 20:11:47.983751 env[1630]: time="2023-10-02T20:11:47.983745288Z" level=warning msg="cleaning up after shim disconnected" id=3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f namespace=k8s.io Oct 2 20:11:47.984878 env[1630]: time="2023-10-02T20:11:47.983762154Z" level=info msg="cleaning up dead shim" Oct 2 20:11:47.996973 env[1630]: time="2023-10-02T20:11:47.996925627Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4179 runtime=io.containerd.runc.v2\n" Oct 2 20:11:48.235180 kubelet[2644]: I1002 20:11:48.234011 2644 scope.go:117] "RemoveContainer" containerID="3d2438d2648df65058143b502bcdb061b56db18b78f6fe2ba531256a9130ea3f" Oct 2 20:11:48.239556 env[1630]: time="2023-10-02T20:11:48.239512634Z" level=info msg="CreateContainer within sandbox \"6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Oct 2 20:11:48.268992 env[1630]: time="2023-10-02T20:11:48.268933556Z" level=info msg="CreateContainer within sandbox \"6de53309df8532e159165a804dc4a26fd961e6bbb4b3425f7da3099ae8023f69\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"8409308df8d991d0a6b4e506e14e67cbf628aca79387db16c05333f82509b9af\"" Oct 2 20:11:48.269642 env[1630]: time="2023-10-02T20:11:48.269569183Z" level=info msg="StartContainer for \"8409308df8d991d0a6b4e506e14e67cbf628aca79387db16c05333f82509b9af\"" Oct 2 20:11:48.306609 systemd[1]: Started cri-containerd-8409308df8d991d0a6b4e506e14e67cbf628aca79387db16c05333f82509b9af.scope. Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341731 kernel: audit: type=1400 audit(1696277508.330:1379): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341990 kernel: audit: type=1400 audit(1696277508.330:1380): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.353132 kernel: audit: type=1400 audit(1696277508.330:1381): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.353733 kernel: audit: type=1400 audit(1696277508.330:1382): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.353825 kernel: audit: type=1400 audit(1696277508.330:1383): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.364794 kernel: audit: type=1400 audit(1696277508.330:1384): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.365177 kernel: audit: type=1400 audit(1696277508.330:1385): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.378244 kernel: audit: type=1400 audit(1696277508.330:1386): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.330000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit: BPF prog-id=135 op=LOAD Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2359 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:48.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834303933303864663864393931643061366234653530366531346536 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2359 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:48.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834303933303864663864393931643061366234653530366531346536 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.336000 audit: BPF prog-id=136 op=LOAD Oct 2 20:11:48.336000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000308530 items=0 ppid=2359 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:48.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834303933303864663864393931643061366234653530366531346536 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit: BPF prog-id=137 op=LOAD Oct 2 20:11:48.341000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000308578 items=0 ppid=2359 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:48.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834303933303864663864393931643061366234653530366531346536 Oct 2 20:11:48.341000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:11:48.341000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { perfmon } for pid=4199 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit[4199]: AVC avc: denied { bpf } for pid=4199 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:48.341000 audit: BPF prog-id=138 op=LOAD Oct 2 20:11:48.341000 audit[4199]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000308988 items=0 ppid=2359 pid=4199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:48.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3834303933303864663864393931643061366234653530366531346536 Oct 2 20:11:48.415572 env[1630]: time="2023-10-02T20:11:48.415520699Z" level=info msg="StartContainer for \"8409308df8d991d0a6b4e506e14e67cbf628aca79387db16c05333f82509b9af\" returns successfully" Oct 2 20:11:49.593000 audit[4211]: AVC avc: denied { watch } for pid=4211 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=520994 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:49.593000 audit[4211]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a0a690 a2=fc6 a3=0 items=0 ppid=2359 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:49.593000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:49.594000 audit[4211]: AVC avc: denied { watch } for pid=4211 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=520979 scontext=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:49.594000 audit[4211]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00024bf00 a2=fc6 a3=0 items=0 ppid=2359 pid=4211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c27,c936 key=(null) Oct 2 20:11:49.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:50.938790 systemd[1]: cri-containerd-1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce.scope: Deactivated successfully. Oct 2 20:11:50.939097 systemd[1]: cri-containerd-1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce.scope: Consumed 1.943s CPU time. Oct 2 20:11:50.941000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:11:50.941000 audit: BPF prog-id=108 op=UNLOAD Oct 2 20:11:50.998007 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce-rootfs.mount: Deactivated successfully. Oct 2 20:11:51.031079 env[1630]: time="2023-10-02T20:11:51.031023299Z" level=info msg="shim disconnected" id=1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce Oct 2 20:11:51.031079 env[1630]: time="2023-10-02T20:11:51.031081932Z" level=warning msg="cleaning up after shim disconnected" id=1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce namespace=k8s.io Oct 2 20:11:51.031724 env[1630]: time="2023-10-02T20:11:51.031094517Z" level=info msg="cleaning up dead shim" Oct 2 20:11:51.046719 env[1630]: time="2023-10-02T20:11:51.046662564Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4240 runtime=io.containerd.runc.v2\n" Oct 2 20:11:51.251078 kubelet[2644]: I1002 20:11:51.247865 2644 scope.go:117] "RemoveContainer" containerID="1c891616a90453ed1e2023d660fe479a37a466f70dca61438b6a2cfb75220bce" Oct 2 20:11:51.254338 env[1630]: time="2023-10-02T20:11:51.254296565Z" level=info msg="CreateContainer within sandbox \"35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Oct 2 20:11:51.272456 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1897656782.mount: Deactivated successfully. Oct 2 20:11:51.281334 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3624964354.mount: Deactivated successfully. Oct 2 20:11:51.286486 env[1630]: time="2023-10-02T20:11:51.286433159Z" level=info msg="CreateContainer within sandbox \"35e706bc76d0a2bc7ced91ed185936eb438cca98c0b98afd3225f293d05df1fc\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"cd98612d5f4b83a67ce1bdd936fda637738cc633fb0bd5ddab8f8a4963d91ec5\"" Oct 2 20:11:51.287176 env[1630]: time="2023-10-02T20:11:51.287143689Z" level=info msg="StartContainer for \"cd98612d5f4b83a67ce1bdd936fda637738cc633fb0bd5ddab8f8a4963d91ec5\"" Oct 2 20:11:51.308650 systemd[1]: Started cri-containerd-cd98612d5f4b83a67ce1bdd936fda637738cc633fb0bd5ddab8f8a4963d91ec5.scope. Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.322000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.323000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.323000 audit: BPF prog-id=139 op=LOAD Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2386 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:51.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393836313264356634623833613637636531626464393336666461 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2386 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:51.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393836313264356634623833613637636531626464393336666461 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit: BPF prog-id=140 op=LOAD Oct 2 20:11:51.324000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c0270 items=0 ppid=2386 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:51.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393836313264356634623833613637636531626464393336666461 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit: BPF prog-id=141 op=LOAD Oct 2 20:11:51.324000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c02b8 items=0 ppid=2386 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:51.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393836313264356634623833613637636531626464393336666461 Oct 2 20:11:51.324000 audit: BPF prog-id=141 op=UNLOAD Oct 2 20:11:51.324000 audit: BPF prog-id=140 op=UNLOAD Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { perfmon } for pid=4261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit[4261]: AVC avc: denied { bpf } for pid=4261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:11:51.324000 audit: BPF prog-id=142 op=LOAD Oct 2 20:11:51.324000 audit[4261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c06c8 items=0 ppid=2386 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:11:51.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364393836313264356634623833613637636531626464393336666461 Oct 2 20:11:51.335245 kubelet[2644]: E1002 20:11:51.331924 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:51.383816 env[1630]: time="2023-10-02T20:11:51.383756601Z" level=info msg="StartContainer for \"cd98612d5f4b83a67ce1bdd936fda637738cc633fb0bd5ddab8f8a4963d91ec5\" returns successfully" Oct 2 20:11:52.559868 kubelet[2644]: E1002 20:11:52.559830 2644 controller.go:193] "Failed to update lease" err="Put \"https://172.31.27.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-142?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:11:56.333006 kubelet[2644]: E1002 20:11:56.332972 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:01.334743 kubelet[2644]: E1002 20:12:01.334705 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:02.560832 kubelet[2644]: E1002 20:12:02.560558 2644 controller.go:193] "Failed to update lease" err="Put \"https://172.31.27.142:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-27-142?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Oct 2 20:12:06.335950 kubelet[2644]: E1002 20:12:06.335920 2644 kubelet.go:2855] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:07.069412 update_engine[1625]: I1002 20:12:07.069360 1625 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:12:07.069412 update_engine[1625]: I1002 20:12:07.069422 1625 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:12:07.072863 update_engine[1625]: I1002 20:12:07.072830 1625 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:12:07.073397 update_engine[1625]: I1002 20:12:07.073370 1625 omaha_request_params.cc:62] Current group set to lts Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077327 1625 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077343 1625 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077365 1625 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077406 1625 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077531 1625 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077538 1625 omaha_request_action.cc:269] Request: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: Oct 2 20:12:07.077644 update_engine[1625]: I1002 20:12:07.077543 1625 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:12:07.091341 update_engine[1625]: I1002 20:12:07.091305 1625 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:12:07.091571 update_engine[1625]: I1002 20:12:07.091547 1625 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:12:07.103078 locksmithd[1683]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0