Oct 2 20:05:19.110204 kernel: Linux version 5.15.132-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Oct 2 17:52:37 -00 2023 Oct 2 20:05:19.110240 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.110257 kernel: BIOS-provided physical RAM map: Oct 2 20:05:19.110268 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Oct 2 20:05:19.110279 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Oct 2 20:05:19.110291 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Oct 2 20:05:19.110307 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007d9e9fff] usable Oct 2 20:05:19.110320 kernel: BIOS-e820: [mem 0x000000007d9ea000-0x000000007fffffff] reserved Oct 2 20:05:19.110332 kernel: BIOS-e820: [mem 0x00000000e0000000-0x00000000e03fffff] reserved Oct 2 20:05:19.110344 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Oct 2 20:05:19.110355 kernel: NX (Execute Disable) protection: active Oct 2 20:05:19.110367 kernel: SMBIOS 2.7 present. Oct 2 20:05:19.110394 kernel: DMI: Amazon EC2 t3.small/, BIOS 1.0 10/16/2017 Oct 2 20:05:19.110405 kernel: Hypervisor detected: KVM Oct 2 20:05:19.110420 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Oct 2 20:05:19.110431 kernel: kvm-clock: cpu 0, msr 7af8a001, primary cpu clock Oct 2 20:05:19.110502 kernel: kvm-clock: using sched offset of 6244742731 cycles Oct 2 20:05:19.110514 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Oct 2 20:05:19.110526 kernel: tsc: Detected 2499.994 MHz processor Oct 2 20:05:19.110537 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Oct 2 20:05:19.110552 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Oct 2 20:05:19.110563 kernel: last_pfn = 0x7d9ea max_arch_pfn = 0x400000000 Oct 2 20:05:19.110575 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Oct 2 20:05:19.110585 kernel: Using GB pages for direct mapping Oct 2 20:05:19.110596 kernel: ACPI: Early table checksum verification disabled Oct 2 20:05:19.110607 kernel: ACPI: RSDP 0x00000000000F8F40 000014 (v00 AMAZON) Oct 2 20:05:19.110619 kernel: ACPI: RSDT 0x000000007D9EE350 000044 (v01 AMAZON AMZNRSDT 00000001 AMZN 00000001) Oct 2 20:05:19.110630 kernel: ACPI: FACP 0x000000007D9EFF80 000074 (v01 AMAZON AMZNFACP 00000001 AMZN 00000001) Oct 2 20:05:19.110845 kernel: ACPI: DSDT 0x000000007D9EE3A0 0010E9 (v01 AMAZON AMZNDSDT 00000001 AMZN 00000001) Oct 2 20:05:19.110868 kernel: ACPI: FACS 0x000000007D9EFF40 000040 Oct 2 20:05:19.110880 kernel: ACPI: SSDT 0x000000007D9EF6C0 00087A (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:19.110891 kernel: ACPI: APIC 0x000000007D9EF5D0 000076 (v01 AMAZON AMZNAPIC 00000001 AMZN 00000001) Oct 2 20:05:19.110902 kernel: ACPI: SRAT 0x000000007D9EF530 0000A0 (v01 AMAZON AMZNSRAT 00000001 AMZN 00000001) Oct 2 20:05:19.110913 kernel: ACPI: SLIT 0x000000007D9EF4C0 00006C (v01 AMAZON AMZNSLIT 00000001 AMZN 00000001) Oct 2 20:05:19.110925 kernel: ACPI: WAET 0x000000007D9EF490 000028 (v01 AMAZON AMZNWAET 00000001 AMZN 00000001) Oct 2 20:05:19.110936 kernel: ACPI: HPET 0x00000000000C9000 000038 (v01 AMAZON AMZNHPET 00000001 AMZN 00000001) Oct 2 20:05:19.110947 kernel: ACPI: SSDT 0x00000000000C9040 00007B (v01 AMAZON AMZNSSDT 00000001 AMZN 00000001) Oct 2 20:05:19.110963 kernel: ACPI: Reserving FACP table memory at [mem 0x7d9eff80-0x7d9efff3] Oct 2 20:05:19.110974 kernel: ACPI: Reserving DSDT table memory at [mem 0x7d9ee3a0-0x7d9ef488] Oct 2 20:05:19.110985 kernel: ACPI: Reserving FACS table memory at [mem 0x7d9eff40-0x7d9eff7f] Oct 2 20:05:19.111004 kernel: ACPI: Reserving SSDT table memory at [mem 0x7d9ef6c0-0x7d9eff39] Oct 2 20:05:19.111016 kernel: ACPI: Reserving APIC table memory at [mem 0x7d9ef5d0-0x7d9ef645] Oct 2 20:05:19.111030 kernel: ACPI: Reserving SRAT table memory at [mem 0x7d9ef530-0x7d9ef5cf] Oct 2 20:05:19.111043 kernel: ACPI: Reserving SLIT table memory at [mem 0x7d9ef4c0-0x7d9ef52b] Oct 2 20:05:19.111059 kernel: ACPI: Reserving WAET table memory at [mem 0x7d9ef490-0x7d9ef4b7] Oct 2 20:05:19.111072 kernel: ACPI: Reserving HPET table memory at [mem 0xc9000-0xc9037] Oct 2 20:05:19.111086 kernel: ACPI: Reserving SSDT table memory at [mem 0xc9040-0xc90ba] Oct 2 20:05:19.111097 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Oct 2 20:05:19.111108 kernel: SRAT: PXM 0 -> APIC 0x01 -> Node 0 Oct 2 20:05:19.111120 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x7fffffff] Oct 2 20:05:19.111131 kernel: NUMA: Initialized distance table, cnt=1 Oct 2 20:05:19.111141 kernel: NODE_DATA(0) allocated [mem 0x7d9e3000-0x7d9e8fff] Oct 2 20:05:19.111156 kernel: Zone ranges: Oct 2 20:05:19.111169 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Oct 2 20:05:19.111182 kernel: DMA32 [mem 0x0000000001000000-0x000000007d9e9fff] Oct 2 20:05:19.111195 kernel: Normal empty Oct 2 20:05:19.111207 kernel: Movable zone start for each node Oct 2 20:05:19.111220 kernel: Early memory node ranges Oct 2 20:05:19.111232 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Oct 2 20:05:19.111245 kernel: node 0: [mem 0x0000000000100000-0x000000007d9e9fff] Oct 2 20:05:19.111258 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007d9e9fff] Oct 2 20:05:19.111274 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Oct 2 20:05:19.111287 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Oct 2 20:05:19.111299 kernel: On node 0, zone DMA32: 9750 pages in unavailable ranges Oct 2 20:05:19.111312 kernel: ACPI: PM-Timer IO Port: 0xb008 Oct 2 20:05:19.111326 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Oct 2 20:05:19.111339 kernel: IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 Oct 2 20:05:19.111352 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Oct 2 20:05:19.111365 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Oct 2 20:05:19.111389 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Oct 2 20:05:19.111405 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Oct 2 20:05:19.111418 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Oct 2 20:05:19.111431 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Oct 2 20:05:19.111444 kernel: TSC deadline timer available Oct 2 20:05:19.111457 kernel: smpboot: Allowing 2 CPUs, 0 hotplug CPUs Oct 2 20:05:19.111470 kernel: [mem 0x80000000-0xdfffffff] available for PCI devices Oct 2 20:05:19.111483 kernel: Booting paravirtualized kernel on KVM Oct 2 20:05:19.111495 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Oct 2 20:05:19.111508 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:2 nr_node_ids:1 Oct 2 20:05:19.111523 kernel: percpu: Embedded 55 pages/cpu s185624 r8192 d31464 u1048576 Oct 2 20:05:19.111536 kernel: pcpu-alloc: s185624 r8192 d31464 u1048576 alloc=1*2097152 Oct 2 20:05:19.111548 kernel: pcpu-alloc: [0] 0 1 Oct 2 20:05:19.111561 kernel: kvm-guest: stealtime: cpu 0, msr 7b61c0c0 Oct 2 20:05:19.111573 kernel: kvm-guest: PV spinlocks enabled Oct 2 20:05:19.111586 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Oct 2 20:05:19.111598 kernel: Built 1 zonelists, mobility grouping on. Total pages: 506242 Oct 2 20:05:19.111610 kernel: Policy zone: DMA32 Oct 2 20:05:19.111625 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.111641 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Oct 2 20:05:19.111653 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Oct 2 20:05:19.111666 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Oct 2 20:05:19.111678 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Oct 2 20:05:19.111691 kernel: Memory: 1936476K/2057760K available (12294K kernel code, 2274K rwdata, 13692K rodata, 45372K init, 4176K bss, 121024K reserved, 0K cma-reserved) Oct 2 20:05:19.111703 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 Oct 2 20:05:19.111716 kernel: Kernel/User page tables isolation: enabled Oct 2 20:05:19.111729 kernel: ftrace: allocating 34453 entries in 135 pages Oct 2 20:05:19.111744 kernel: ftrace: allocated 135 pages with 4 groups Oct 2 20:05:19.111756 kernel: rcu: Hierarchical RCU implementation. Oct 2 20:05:19.111867 kernel: rcu: RCU event tracing is enabled. Oct 2 20:05:19.111883 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=2. Oct 2 20:05:19.111898 kernel: Rude variant of Tasks RCU enabled. Oct 2 20:05:19.111910 kernel: Tracing variant of Tasks RCU enabled. Oct 2 20:05:19.111924 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Oct 2 20:05:19.111937 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 Oct 2 20:05:19.111950 kernel: NR_IRQS: 33024, nr_irqs: 440, preallocated irqs: 16 Oct 2 20:05:19.111966 kernel: random: crng init done Oct 2 20:05:19.111979 kernel: Console: colour VGA+ 80x25 Oct 2 20:05:19.111992 kernel: printk: console [ttyS0] enabled Oct 2 20:05:19.112005 kernel: ACPI: Core revision 20210730 Oct 2 20:05:19.112017 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 30580167144 ns Oct 2 20:05:19.112030 kernel: APIC: Switch to symmetric I/O mode setup Oct 2 20:05:19.112043 kernel: x2apic enabled Oct 2 20:05:19.112056 kernel: Switched APIC routing to physical x2apic. Oct 2 20:05:19.112069 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 20:05:19.112085 kernel: Calibrating delay loop (skipped) preset value.. 4999.98 BogoMIPS (lpj=2499994) Oct 2 20:05:19.112098 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Oct 2 20:05:19.112110 kernel: Last level dTLB entries: 4KB 64, 2MB 0, 4MB 0, 1GB 4 Oct 2 20:05:19.112124 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Oct 2 20:05:19.112146 kernel: Spectre V2 : Mitigation: Retpolines Oct 2 20:05:19.112164 kernel: Spectre V2 : Spectre v2 / SpectreRSB mitigation: Filling RSB on context switch Oct 2 20:05:19.112177 kernel: Spectre V2 : Spectre v2 / SpectreRSB : Filling RSB on VMEXIT Oct 2 20:05:19.112192 kernel: RETBleed: WARNING: Spectre v2 mitigation leaves CPU vulnerable to RETBleed attacks, data leaks possible! Oct 2 20:05:19.112205 kernel: RETBleed: Vulnerable Oct 2 20:05:19.112218 kernel: Speculative Store Bypass: Vulnerable Oct 2 20:05:19.112232 kernel: MDS: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:19.112245 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Oct 2 20:05:19.112258 kernel: GDS: Unknown: Dependent on hypervisor status Oct 2 20:05:19.112271 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Oct 2 20:05:19.112287 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Oct 2 20:05:19.112301 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Oct 2 20:05:19.112315 kernel: x86/fpu: Supporting XSAVE feature 0x008: 'MPX bounds registers' Oct 2 20:05:19.112328 kernel: x86/fpu: Supporting XSAVE feature 0x010: 'MPX CSR' Oct 2 20:05:19.112341 kernel: x86/fpu: Supporting XSAVE feature 0x020: 'AVX-512 opmask' Oct 2 20:05:19.112357 kernel: x86/fpu: Supporting XSAVE feature 0x040: 'AVX-512 Hi256' Oct 2 20:05:19.112371 kernel: x86/fpu: Supporting XSAVE feature 0x080: 'AVX-512 ZMM_Hi256' Oct 2 20:05:19.112395 kernel: x86/fpu: Supporting XSAVE feature 0x200: 'Protection Keys User registers' Oct 2 20:05:19.112408 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Oct 2 20:05:19.112421 kernel: x86/fpu: xstate_offset[3]: 832, xstate_sizes[3]: 64 Oct 2 20:05:19.112434 kernel: x86/fpu: xstate_offset[4]: 896, xstate_sizes[4]: 64 Oct 2 20:05:19.112447 kernel: x86/fpu: xstate_offset[5]: 960, xstate_sizes[5]: 64 Oct 2 20:05:19.112461 kernel: x86/fpu: xstate_offset[6]: 1024, xstate_sizes[6]: 512 Oct 2 20:05:19.112474 kernel: x86/fpu: xstate_offset[7]: 1536, xstate_sizes[7]: 1024 Oct 2 20:05:19.112486 kernel: x86/fpu: xstate_offset[9]: 2560, xstate_sizes[9]: 8 Oct 2 20:05:19.112499 kernel: x86/fpu: Enabled xstate features 0x2ff, context size is 2568 bytes, using 'compacted' format. Oct 2 20:05:19.112512 kernel: Freeing SMP alternatives memory: 32K Oct 2 20:05:19.112528 kernel: pid_max: default: 32768 minimum: 301 Oct 2 20:05:19.112612 kernel: LSM: Security Framework initializing Oct 2 20:05:19.112628 kernel: SELinux: Initializing. Oct 2 20:05:19.112641 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.112654 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.112667 kernel: smpboot: CPU0: Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz (family: 0x6, model: 0x55, stepping: 0x7) Oct 2 20:05:19.112681 kernel: Performance Events: unsupported p6 CPU model 85 no PMU driver, software events only. Oct 2 20:05:19.112694 kernel: signal: max sigframe size: 3632 Oct 2 20:05:19.112708 kernel: rcu: Hierarchical SRCU implementation. Oct 2 20:05:19.112721 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Oct 2 20:05:19.112738 kernel: smp: Bringing up secondary CPUs ... Oct 2 20:05:19.112750 kernel: x86: Booting SMP configuration: Oct 2 20:05:19.112761 kernel: .... node #0, CPUs: #1 Oct 2 20:05:19.112773 kernel: kvm-clock: cpu 1, msr 7af8a041, secondary cpu clock Oct 2 20:05:19.112784 kernel: kvm-guest: stealtime: cpu 1, msr 7b71c0c0 Oct 2 20:05:19.112797 kernel: MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. Oct 2 20:05:19.112811 kernel: MMIO Stale Data CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/processor_mmio_stale_data.html for more details. Oct 2 20:05:19.112823 kernel: smp: Brought up 1 node, 2 CPUs Oct 2 20:05:19.112837 kernel: smpboot: Max logical packages: 1 Oct 2 20:05:19.112853 kernel: smpboot: Total of 2 processors activated (9999.97 BogoMIPS) Oct 2 20:05:19.113971 kernel: devtmpfs: initialized Oct 2 20:05:19.113987 kernel: x86/mm: Memory block size: 128MB Oct 2 20:05:19.114002 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Oct 2 20:05:19.114017 kernel: futex hash table entries: 512 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.114030 kernel: pinctrl core: initialized pinctrl subsystem Oct 2 20:05:19.114044 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Oct 2 20:05:19.114060 kernel: audit: initializing netlink subsys (disabled) Oct 2 20:05:19.114074 kernel: audit: type=2000 audit(1696277117.768:1): state=initialized audit_enabled=0 res=1 Oct 2 20:05:19.114094 kernel: thermal_sys: Registered thermal governor 'step_wise' Oct 2 20:05:19.114109 kernel: thermal_sys: Registered thermal governor 'user_space' Oct 2 20:05:19.114125 kernel: cpuidle: using governor menu Oct 2 20:05:19.114141 kernel: ACPI: bus type PCI registered Oct 2 20:05:19.114157 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Oct 2 20:05:19.114173 kernel: dca service started, version 1.12.1 Oct 2 20:05:19.114189 kernel: PCI: Using configuration type 1 for base access Oct 2 20:05:19.114206 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Oct 2 20:05:19.114221 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Oct 2 20:05:19.114238 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Oct 2 20:05:19.114253 kernel: ACPI: Added _OSI(Module Device) Oct 2 20:05:19.114267 kernel: ACPI: Added _OSI(Processor Device) Oct 2 20:05:19.114281 kernel: ACPI: Added _OSI(3.0 _SCP Extensions) Oct 2 20:05:19.114295 kernel: ACPI: Added _OSI(Processor Aggregator Device) Oct 2 20:05:19.114308 kernel: ACPI: Added _OSI(Linux-Dell-Video) Oct 2 20:05:19.114322 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Oct 2 20:05:19.114337 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Oct 2 20:05:19.114352 kernel: ACPI: 3 ACPI AML tables successfully acquired and loaded Oct 2 20:05:19.114370 kernel: ACPI: Interpreter enabled Oct 2 20:05:19.114397 kernel: ACPI: PM: (supports S0 S5) Oct 2 20:05:19.114412 kernel: ACPI: Using IOAPIC for interrupt routing Oct 2 20:05:19.114427 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Oct 2 20:05:19.114442 kernel: ACPI: Enabled 16 GPEs in block 00 to 0F Oct 2 20:05:19.114457 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Oct 2 20:05:19.114781 kernel: acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] Oct 2 20:05:19.114974 kernel: acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. Oct 2 20:05:19.115000 kernel: acpiphp: Slot [3] registered Oct 2 20:05:19.115088 kernel: acpiphp: Slot [4] registered Oct 2 20:05:19.115106 kernel: acpiphp: Slot [5] registered Oct 2 20:05:19.115122 kernel: acpiphp: Slot [6] registered Oct 2 20:05:19.115137 kernel: acpiphp: Slot [7] registered Oct 2 20:05:19.115153 kernel: acpiphp: Slot [8] registered Oct 2 20:05:19.115168 kernel: acpiphp: Slot [9] registered Oct 2 20:05:19.115182 kernel: acpiphp: Slot [10] registered Oct 2 20:05:19.115195 kernel: acpiphp: Slot [11] registered Oct 2 20:05:19.115215 kernel: acpiphp: Slot [12] registered Oct 2 20:05:19.115230 kernel: acpiphp: Slot [13] registered Oct 2 20:05:19.115246 kernel: acpiphp: Slot [14] registered Oct 2 20:05:19.115262 kernel: acpiphp: Slot [15] registered Oct 2 20:05:19.115277 kernel: acpiphp: Slot [16] registered Oct 2 20:05:19.115292 kernel: acpiphp: Slot [17] registered Oct 2 20:05:19.115308 kernel: acpiphp: Slot [18] registered Oct 2 20:05:19.115323 kernel: acpiphp: Slot [19] registered Oct 2 20:05:19.115339 kernel: acpiphp: Slot [20] registered Oct 2 20:05:19.115358 kernel: acpiphp: Slot [21] registered Oct 2 20:05:19.115373 kernel: acpiphp: Slot [22] registered Oct 2 20:05:19.115401 kernel: acpiphp: Slot [23] registered Oct 2 20:05:19.115416 kernel: acpiphp: Slot [24] registered Oct 2 20:05:19.115431 kernel: acpiphp: Slot [25] registered Oct 2 20:05:19.115446 kernel: acpiphp: Slot [26] registered Oct 2 20:05:19.115461 kernel: acpiphp: Slot [27] registered Oct 2 20:05:19.115476 kernel: acpiphp: Slot [28] registered Oct 2 20:05:19.115521 kernel: acpiphp: Slot [29] registered Oct 2 20:05:19.115535 kernel: acpiphp: Slot [30] registered Oct 2 20:05:19.115553 kernel: acpiphp: Slot [31] registered Oct 2 20:05:19.115567 kernel: PCI host bridge to bus 0000:00 Oct 2 20:05:19.115730 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Oct 2 20:05:19.115851 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Oct 2 20:05:19.115978 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Oct 2 20:05:19.116195 kernel: pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window] Oct 2 20:05:19.116320 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Oct 2 20:05:19.116679 kernel: pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 Oct 2 20:05:19.116901 kernel: pci 0000:00:01.0: [8086:7000] type 00 class 0x060100 Oct 2 20:05:19.117071 kernel: pci 0000:00:01.3: [8086:7113] type 00 class 0x000000 Oct 2 20:05:19.117263 kernel: pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI Oct 2 20:05:19.117410 kernel: pci 0000:00:01.3: quirk: [io 0xb100-0xb10f] claimed by PIIX4 SMB Oct 2 20:05:19.117545 kernel: pci 0000:00:01.3: PIIX4 devres E PIO at fff0-ffff Oct 2 20:05:19.117761 kernel: pci 0000:00:01.3: PIIX4 devres F MMIO at ffc00000-ffffffff Oct 2 20:05:19.117907 kernel: pci 0000:00:01.3: PIIX4 devres G PIO at fff0-ffff Oct 2 20:05:19.118084 kernel: pci 0000:00:01.3: PIIX4 devres H MMIO at ffc00000-ffffffff Oct 2 20:05:19.118222 kernel: pci 0000:00:01.3: PIIX4 devres I PIO at fff0-ffff Oct 2 20:05:19.118450 kernel: pci 0000:00:01.3: PIIX4 devres J PIO at fff0-ffff Oct 2 20:05:19.118583 kernel: pci 0000:00:01.3: quirk_piix4_acpi+0x0/0x170 took 14648 usecs Oct 2 20:05:19.118849 kernel: pci 0000:00:03.0: [1d0f:1111] type 00 class 0x030000 Oct 2 20:05:19.118988 kernel: pci 0000:00:03.0: reg 0x10: [mem 0xfe400000-0xfe7fffff pref] Oct 2 20:05:19.119119 kernel: pci 0000:00:03.0: reg 0x30: [mem 0xfebe0000-0xfebeffff pref] Oct 2 20:05:19.119241 kernel: pci 0000:00:03.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Oct 2 20:05:19.119371 kernel: pci 0000:00:04.0: [1d0f:8061] type 00 class 0x010802 Oct 2 20:05:19.119516 kernel: pci 0000:00:04.0: reg 0x10: [mem 0xfebf0000-0xfebf3fff] Oct 2 20:05:19.119645 kernel: pci 0000:00:05.0: [1d0f:ec20] type 00 class 0x020000 Oct 2 20:05:19.119773 kernel: pci 0000:00:05.0: reg 0x10: [mem 0xfebf4000-0xfebf7fff] Oct 2 20:05:19.119797 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Oct 2 20:05:19.119813 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Oct 2 20:05:19.119828 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Oct 2 20:05:19.119844 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Oct 2 20:05:19.119859 kernel: ACPI: PCI: Interrupt link LNKS configured for IRQ 9 Oct 2 20:05:19.119874 kernel: iommu: Default domain type: Translated Oct 2 20:05:19.119890 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Oct 2 20:05:19.120012 kernel: pci 0000:00:03.0: vgaarb: setting as boot VGA device Oct 2 20:05:19.120133 kernel: pci 0000:00:03.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Oct 2 20:05:19.120256 kernel: pci 0000:00:03.0: vgaarb: bridge control possible Oct 2 20:05:19.120274 kernel: vgaarb: loaded Oct 2 20:05:19.120290 kernel: pps_core: LinuxPPS API ver. 1 registered Oct 2 20:05:19.120305 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Oct 2 20:05:19.120320 kernel: PTP clock support registered Oct 2 20:05:19.120335 kernel: PCI: Using ACPI for IRQ routing Oct 2 20:05:19.120350 kernel: PCI: pci_cache_line_size set to 64 bytes Oct 2 20:05:19.120365 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Oct 2 20:05:19.120417 kernel: e820: reserve RAM buffer [mem 0x7d9ea000-0x7fffffff] Oct 2 20:05:19.120432 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0 Oct 2 20:05:19.120447 kernel: hpet0: 8 comparators, 32-bit 62.500000 MHz counter Oct 2 20:05:19.120461 kernel: clocksource: Switched to clocksource kvm-clock Oct 2 20:05:19.120476 kernel: VFS: Disk quotas dquot_6.6.0 Oct 2 20:05:19.120491 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Oct 2 20:05:19.120507 kernel: pnp: PnP ACPI init Oct 2 20:05:19.120521 kernel: pnp: PnP ACPI: found 5 devices Oct 2 20:05:19.120725 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Oct 2 20:05:19.120744 kernel: NET: Registered PF_INET protocol family Oct 2 20:05:19.120759 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.120774 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Oct 2 20:05:19.120789 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.120805 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Oct 2 20:05:19.120821 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Oct 2 20:05:19.120836 kernel: TCP: Hash tables configured (established 16384 bind 16384) Oct 2 20:05:19.120852 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.120868 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Oct 2 20:05:19.120886 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Oct 2 20:05:19.120901 kernel: NET: Registered PF_XDP protocol family Oct 2 20:05:19.121047 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Oct 2 20:05:19.121166 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Oct 2 20:05:19.121326 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Oct 2 20:05:19.121488 kernel: pci_bus 0000:00: resource 7 [mem 0x80000000-0xfebfffff window] Oct 2 20:05:19.121628 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Oct 2 20:05:19.121939 kernel: pci 0000:00:01.0: Activating ISA DMA hang workarounds Oct 2 20:05:19.121969 kernel: PCI: CLS 0 bytes, default 64 Oct 2 20:05:19.121985 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Oct 2 20:05:19.122001 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x240933eba6e, max_idle_ns: 440795246008 ns Oct 2 20:05:19.122017 kernel: clocksource: Switched to clocksource tsc Oct 2 20:05:19.122033 kernel: Initialise system trusted keyrings Oct 2 20:05:19.122049 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Oct 2 20:05:19.122064 kernel: Key type asymmetric registered Oct 2 20:05:19.122079 kernel: Asymmetric key parser 'x509' registered Oct 2 20:05:19.122097 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Oct 2 20:05:19.122113 kernel: io scheduler mq-deadline registered Oct 2 20:05:19.122128 kernel: io scheduler kyber registered Oct 2 20:05:19.122144 kernel: io scheduler bfq registered Oct 2 20:05:19.122159 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Oct 2 20:05:19.122174 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Oct 2 20:05:19.122190 kernel: 00:04: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Oct 2 20:05:19.122205 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Oct 2 20:05:19.122300 kernel: i8042: Warning: Keylock active Oct 2 20:05:19.122319 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Oct 2 20:05:19.122335 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Oct 2 20:05:19.122499 kernel: rtc_cmos 00:00: RTC can wake from S4 Oct 2 20:05:19.122624 kernel: rtc_cmos 00:00: registered as rtc0 Oct 2 20:05:19.122801 kernel: rtc_cmos 00:00: setting system clock to 2023-10-02T20:05:18 UTC (1696277118) Oct 2 20:05:19.122982 kernel: rtc_cmos 00:00: alarms up to one day, 114 bytes nvram Oct 2 20:05:19.123003 kernel: intel_pstate: CPU model not supported Oct 2 20:05:19.123019 kernel: NET: Registered PF_INET6 protocol family Oct 2 20:05:19.123038 kernel: Segment Routing with IPv6 Oct 2 20:05:19.123054 kernel: In-situ OAM (IOAM) with IPv6 Oct 2 20:05:19.123069 kernel: NET: Registered PF_PACKET protocol family Oct 2 20:05:19.123085 kernel: Key type dns_resolver registered Oct 2 20:05:19.123100 kernel: IPI shorthand broadcast: enabled Oct 2 20:05:19.123116 kernel: sched_clock: Marking stable (550215128, 330614999)->(1011965087, -131134960) Oct 2 20:05:19.123131 kernel: registered taskstats version 1 Oct 2 20:05:19.123146 kernel: Loading compiled-in X.509 certificates Oct 2 20:05:19.123162 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.132-flatcar: 6f9e51af8b3ef67eb6e93ecfe77d55665ad3d861' Oct 2 20:05:19.123180 kernel: Key type .fscrypt registered Oct 2 20:05:19.123196 kernel: Key type fscrypt-provisioning registered Oct 2 20:05:19.123211 kernel: ima: No TPM chip found, activating TPM-bypass! Oct 2 20:05:19.123227 kernel: ima: Allocated hash algorithm: sha1 Oct 2 20:05:19.123242 kernel: ima: No architecture policies found Oct 2 20:05:19.123317 kernel: Freeing unused kernel image (initmem) memory: 45372K Oct 2 20:05:19.123334 kernel: Write protecting the kernel read-only data: 28672k Oct 2 20:05:19.123349 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Oct 2 20:05:19.123364 kernel: Freeing unused kernel image (rodata/data gap) memory: 644K Oct 2 20:05:19.123393 kernel: Run /init as init process Oct 2 20:05:19.123405 kernel: with arguments: Oct 2 20:05:19.123471 kernel: /init Oct 2 20:05:19.123488 kernel: with environment: Oct 2 20:05:19.123501 kernel: HOME=/ Oct 2 20:05:19.123515 kernel: TERM=linux Oct 2 20:05:19.123565 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Oct 2 20:05:19.123584 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:19.123606 systemd[1]: Detected virtualization amazon. Oct 2 20:05:19.123657 systemd[1]: Detected architecture x86-64. Oct 2 20:05:19.123672 systemd[1]: Running in initrd. Oct 2 20:05:19.123688 systemd[1]: No hostname configured, using default hostname. Oct 2 20:05:19.123831 systemd[1]: Hostname set to . Oct 2 20:05:19.123963 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:19.123980 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Oct 2 20:05:19.124460 systemd[1]: Queued start job for default target initrd.target. Oct 2 20:05:19.124478 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:19.124496 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:19.124511 systemd[1]: Reached target paths.target. Oct 2 20:05:19.124526 systemd[1]: Reached target slices.target. Oct 2 20:05:19.124637 systemd[1]: Reached target swap.target. Oct 2 20:05:19.124653 systemd[1]: Reached target timers.target. Oct 2 20:05:19.124674 systemd[1]: Listening on iscsid.socket. Oct 2 20:05:19.124691 systemd[1]: Listening on iscsiuio.socket. Oct 2 20:05:19.124706 systemd[1]: Listening on systemd-journald-audit.socket. Oct 2 20:05:19.124722 systemd[1]: Listening on systemd-journald-dev-log.socket. Oct 2 20:05:19.124738 systemd[1]: Listening on systemd-journald.socket. Oct 2 20:05:19.124755 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:19.124772 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:19.124792 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:19.124810 systemd[1]: Reached target sockets.target. Oct 2 20:05:19.124827 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:19.124845 systemd[1]: Finished network-cleanup.service. Oct 2 20:05:19.124862 systemd[1]: Starting systemd-fsck-usr.service... Oct 2 20:05:19.124879 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:19.124897 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:19.124915 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:19.124929 systemd[1]: Starting systemd-vconsole-setup.service... Oct 2 20:05:19.124955 systemd-journald[185]: Journal started Oct 2 20:05:19.125040 systemd-journald[185]: Runtime Journal (/run/log/journal/ec2b2e55bdacf28fea8b2ed92529cc08) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:19.127400 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:19.130000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.135453 kernel: audit: type=1130 audit(1696277119.130:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.135568 systemd-modules-load[186]: Inserted module 'overlay' Oct 2 20:05:19.138394 systemd[1]: Started systemd-journald.service. Oct 2 20:05:19.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.144831 kernel: audit: type=1130 audit(1696277119.139:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.144756 systemd[1]: Finished systemd-fsck-usr.service. Oct 2 20:05:19.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.158461 kernel: audit: type=1130 audit(1696277119.150:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.162708 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Oct 2 20:05:19.381545 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Oct 2 20:05:19.381590 kernel: Bridge firewalling registered Oct 2 20:05:19.381611 kernel: SCSI subsystem initialized Oct 2 20:05:19.381627 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Oct 2 20:05:19.381645 kernel: device-mapper: uevent: version 1.0.3 Oct 2 20:05:19.381665 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Oct 2 20:05:19.381684 kernel: audit: type=1130 audit(1696277119.374:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.185990 systemd-modules-load[186]: Inserted module 'br_netfilter' Oct 2 20:05:19.393826 kernel: audit: type=1130 audit(1696277119.381:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.381000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.239895 systemd-resolved[187]: Positive Trust Anchors: Oct 2 20:05:19.414602 kernel: audit: type=1130 audit(1696277119.393:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.414644 kernel: audit: type=1130 audit(1696277119.413:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.413000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.239912 systemd-resolved[187]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:19.239962 systemd-resolved[187]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:19.243948 systemd-resolved[187]: Defaulting to hostname 'linux'. Oct 2 20:05:19.245793 systemd-modules-load[186]: Inserted module 'dm_multipath' Oct 2 20:05:19.373805 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:19.375023 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:19.381848 systemd[1]: Finished systemd-vconsole-setup.service. Oct 2 20:05:19.394293 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Oct 2 20:05:19.413807 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:19.447235 systemd[1]: Starting dracut-cmdline-ask.service... Oct 2 20:05:19.452510 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:19.470403 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:19.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.473261 systemd[1]: Finished dracut-cmdline-ask.service. Oct 2 20:05:19.488268 kernel: audit: type=1130 audit(1696277119.471:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.488307 kernel: audit: type=1130 audit(1696277119.478:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.482271 systemd[1]: Starting dracut-cmdline.service... Oct 2 20:05:19.497362 dracut-cmdline[207]: dracut-dracut-053 Oct 2 20:05:19.499976 dracut-cmdline[207]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 flatcar.first_boot=detected flatcar.oem.id=ec2 modprobe.blacklist=xen_fbfront net.ifnames=0 nvme_core.io_timeout=4294967295 verity.usrhash=96b0fdb9f11bf1422adc9955c78c8182df387766badfd0b94e08fb9688739ee1 Oct 2 20:05:19.602411 kernel: Loading iSCSI transport class v2.0-870. Oct 2 20:05:19.641404 kernel: iscsi: registered transport (tcp) Oct 2 20:05:19.664410 kernel: iscsi: registered transport (qla4xxx) Oct 2 20:05:19.664486 kernel: QLogic iSCSI HBA Driver Oct 2 20:05:19.704614 systemd[1]: Finished dracut-cmdline.service. Oct 2 20:05:19.706000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:19.708114 systemd[1]: Starting dracut-pre-udev.service... Oct 2 20:05:19.793459 kernel: raid6: avx512x4 gen() 4974 MB/s Oct 2 20:05:19.814440 kernel: raid6: avx512x4 xor() 2678 MB/s Oct 2 20:05:19.837436 kernel: raid6: avx512x2 gen() 6333 MB/s Oct 2 20:05:19.854433 kernel: raid6: avx512x2 xor() 16125 MB/s Oct 2 20:05:19.873506 kernel: raid6: avx512x1 gen() 12083 MB/s Oct 2 20:05:19.890434 kernel: raid6: avx512x1 xor() 15986 MB/s Oct 2 20:05:19.908440 kernel: raid6: avx2x4 gen() 9556 MB/s Oct 2 20:05:19.926431 kernel: raid6: avx2x4 xor() 5333 MB/s Oct 2 20:05:19.944442 kernel: raid6: avx2x2 gen() 14567 MB/s Oct 2 20:05:19.964864 kernel: raid6: avx2x2 xor() 13859 MB/s Oct 2 20:05:19.982431 kernel: raid6: avx2x1 gen() 11147 MB/s Oct 2 20:05:20.000664 kernel: raid6: avx2x1 xor() 11198 MB/s Oct 2 20:05:20.018436 kernel: raid6: sse2x4 gen() 5219 MB/s Oct 2 20:05:20.036425 kernel: raid6: sse2x4 xor() 4025 MB/s Oct 2 20:05:20.053421 kernel: raid6: sse2x2 gen() 8071 MB/s Oct 2 20:05:20.073621 kernel: raid6: sse2x2 xor() 3172 MB/s Oct 2 20:05:20.090427 kernel: raid6: sse2x1 gen() 6414 MB/s Oct 2 20:05:20.108858 kernel: raid6: sse2x1 xor() 3059 MB/s Oct 2 20:05:20.108960 kernel: raid6: using algorithm avx2x2 gen() 14567 MB/s Oct 2 20:05:20.109026 kernel: raid6: .... xor() 13859 MB/s, rmw enabled Oct 2 20:05:20.110615 kernel: raid6: using avx512x2 recovery algorithm Oct 2 20:05:20.133410 kernel: xor: automatically using best checksumming function avx Oct 2 20:05:20.301412 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Oct 2 20:05:20.319150 systemd[1]: Finished dracut-pre-udev.service. Oct 2 20:05:20.320000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.321000 audit: BPF prog-id=7 op=LOAD Oct 2 20:05:20.321000 audit: BPF prog-id=8 op=LOAD Oct 2 20:05:20.322451 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:20.349005 systemd-udevd[384]: Using default interface naming scheme 'v252'. Oct 2 20:05:20.364120 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:20.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.369685 systemd[1]: Starting dracut-pre-trigger.service... Oct 2 20:05:20.401679 dracut-pre-trigger[391]: rd.md=0: removing MD RAID activation Oct 2 20:05:20.440556 systemd[1]: Finished dracut-pre-trigger.service. Oct 2 20:05:20.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.443825 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:20.517258 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:20.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:20.582402 kernel: cryptd: max_cpu_qlen set to 1000 Oct 2 20:05:20.622734 kernel: AVX2 version of gcm_enc/dec engaged. Oct 2 20:05:20.628403 kernel: AES CTR mode by8 optimization enabled Oct 2 20:05:20.638623 kernel: ena 0000:00:05.0: ENA device version: 0.10 Oct 2 20:05:20.640163 kernel: ena 0000:00:05.0: ENA controller version: 0.0.1 implementation version 1 Oct 2 20:05:20.640827 kernel: ena 0000:00:05.0: LLQ is not supported Fallback to host mode policy. Oct 2 20:05:20.646397 kernel: ena 0000:00:05.0: Elastic Network Adapter (ENA) found at mem febf4000, mac addr 06:d7:1c:d4:c7:db Oct 2 20:05:20.655368 (udev-worker)[444]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:20.826664 kernel: nvme nvme0: pci function 0000:00:04.0 Oct 2 20:05:20.826906 kernel: ACPI: \_SB_.LNKD: Enabled at IRQ 11 Oct 2 20:05:20.826936 kernel: nvme nvme0: 2/0/0 default/read/poll queues Oct 2 20:05:20.827073 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Oct 2 20:05:20.827091 kernel: GPT:9289727 != 16777215 Oct 2 20:05:20.827106 kernel: GPT:Alternate GPT header not at the end of the disk. Oct 2 20:05:20.827122 kernel: GPT:9289727 != 16777215 Oct 2 20:05:20.827137 kernel: GPT: Use GNU Parted to correct GPT errors. Oct 2 20:05:20.827154 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.827171 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/nvme0n1p6 scanned by (udev-worker) (437) Oct 2 20:05:20.773297 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Oct 2 20:05:20.839446 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:20.863178 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Oct 2 20:05:20.867324 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Oct 2 20:05:20.881569 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Oct 2 20:05:20.891152 systemd[1]: Starting disk-uuid.service... Oct 2 20:05:20.898925 disk-uuid[584]: Primary Header is updated. Oct 2 20:05:20.898925 disk-uuid[584]: Secondary Entries is updated. Oct 2 20:05:20.898925 disk-uuid[584]: Secondary Header is updated. Oct 2 20:05:20.905403 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.913404 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:20.921399 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:21.918644 kernel: nvme0n1: p1 p2 p3 p4 p6 p7 p9 Oct 2 20:05:21.918715 disk-uuid[585]: The operation has completed successfully. Oct 2 20:05:22.063982 systemd[1]: disk-uuid.service: Deactivated successfully. Oct 2 20:05:22.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.064100 systemd[1]: Finished disk-uuid.service. Oct 2 20:05:22.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.087644 systemd[1]: Starting verity-setup.service... Oct 2 20:05:22.120403 kernel: device-mapper: verity: sha256 using implementation "sha256-generic" Oct 2 20:05:22.213974 systemd[1]: Found device dev-mapper-usr.device. Oct 2 20:05:22.218973 systemd[1]: Mounting sysusr-usr.mount... Oct 2 20:05:22.223952 systemd[1]: Finished verity-setup.service. Oct 2 20:05:22.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.345410 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Oct 2 20:05:22.345647 systemd[1]: Mounted sysusr-usr.mount. Oct 2 20:05:22.347646 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Oct 2 20:05:22.350811 systemd[1]: Starting ignition-setup.service... Oct 2 20:05:22.352420 systemd[1]: Starting parse-ip-for-networkd.service... Oct 2 20:05:22.378900 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:22.379151 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:22.379171 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:22.402434 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:22.419944 systemd[1]: mnt-oem.mount: Deactivated successfully. Oct 2 20:05:22.450665 systemd[1]: Finished ignition-setup.service. Oct 2 20:05:22.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.453658 systemd[1]: Starting ignition-fetch-offline.service... Oct 2 20:05:22.461245 systemd[1]: Finished parse-ip-for-networkd.service. Oct 2 20:05:22.463000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.463000 audit: BPF prog-id=9 op=LOAD Oct 2 20:05:22.464804 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:22.493233 systemd-networkd[1097]: lo: Link UP Oct 2 20:05:22.493245 systemd-networkd[1097]: lo: Gained carrier Oct 2 20:05:22.495890 systemd-networkd[1097]: Enumeration completed Oct 2 20:05:22.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.496198 systemd-networkd[1097]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:22.497244 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:22.499474 systemd-networkd[1097]: eth0: Link UP Oct 2 20:05:22.499480 systemd-networkd[1097]: eth0: Gained carrier Oct 2 20:05:22.500691 systemd[1]: Reached target network.target. Oct 2 20:05:22.517467 systemd[1]: Starting iscsiuio.service... Oct 2 20:05:22.523824 systemd-networkd[1097]: eth0: DHCPv4 address 172.31.28.145/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:22.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.528822 systemd[1]: Started iscsiuio.service. Oct 2 20:05:22.531334 systemd[1]: Starting iscsid.service... Oct 2 20:05:22.549140 iscsid[1102]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:22.549140 iscsid[1102]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Oct 2 20:05:22.549140 iscsid[1102]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Oct 2 20:05:22.549140 iscsid[1102]: If using hardware iscsi like qla4xxx this message can be ignored. Oct 2 20:05:22.549140 iscsid[1102]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Oct 2 20:05:22.549140 iscsid[1102]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Oct 2 20:05:22.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.551257 systemd[1]: Started iscsid.service. Oct 2 20:05:22.553857 systemd[1]: Starting dracut-initqueue.service... Oct 2 20:05:22.571784 systemd[1]: Finished dracut-initqueue.service. Oct 2 20:05:22.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:22.577388 systemd[1]: Reached target remote-fs-pre.target. Oct 2 20:05:22.580311 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:22.582817 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:22.586373 systemd[1]: Starting dracut-pre-mount.service... Oct 2 20:05:22.596505 systemd[1]: Finished dracut-pre-mount.service. Oct 2 20:05:22.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.307925 ignition[1093]: Ignition 2.14.0 Oct 2 20:05:23.307941 ignition[1093]: Stage: fetch-offline Oct 2 20:05:23.308075 ignition[1093]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.308116 ignition[1093]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.353254 ignition[1093]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.353597 ignition[1093]: Ignition finished successfully Oct 2 20:05:23.361895 systemd[1]: Finished ignition-fetch-offline.service. Oct 2 20:05:23.379626 kernel: kauditd_printk_skb: 18 callbacks suppressed Oct 2 20:05:23.379672 kernel: audit: type=1130 audit(1696277123.365:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.366970 systemd[1]: Starting ignition-fetch.service... Oct 2 20:05:23.385224 ignition[1121]: Ignition 2.14.0 Oct 2 20:05:23.385238 ignition[1121]: Stage: fetch Oct 2 20:05:23.385451 ignition[1121]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.385485 ignition[1121]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.397707 ignition[1121]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.399748 ignition[1121]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.423265 ignition[1121]: INFO : PUT result: OK Oct 2 20:05:23.426497 ignition[1121]: DEBUG : parsed url from cmdline: "" Oct 2 20:05:23.426497 ignition[1121]: INFO : no config URL provided Oct 2 20:05:23.426497 ignition[1121]: INFO : reading system config file "/usr/lib/ignition/user.ign" Oct 2 20:05:23.432094 ignition[1121]: INFO : no config at "/usr/lib/ignition/user.ign" Oct 2 20:05:23.432094 ignition[1121]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.432094 ignition[1121]: INFO : PUT result: OK Oct 2 20:05:23.432094 ignition[1121]: INFO : GET http://169.254.169.254/2019-10-01/user-data: attempt #1 Oct 2 20:05:23.437710 ignition[1121]: INFO : GET result: OK Oct 2 20:05:23.437710 ignition[1121]: DEBUG : parsing config with SHA512: 16ea5a0a70f3407bd009c7f701d1bf87f11428024c94a8ae1dc210061753bedfb079536240b53e1fd9964567d21f140a93cf99f1a4e08612086533928e369a65 Oct 2 20:05:23.462722 unknown[1121]: fetched base config from "system" Oct 2 20:05:23.462895 unknown[1121]: fetched base config from "system" Oct 2 20:05:23.464258 ignition[1121]: fetch: fetch complete Oct 2 20:05:23.462902 unknown[1121]: fetched user config from "aws" Oct 2 20:05:23.464267 ignition[1121]: fetch: fetch passed Oct 2 20:05:23.464318 ignition[1121]: Ignition finished successfully Oct 2 20:05:23.475072 systemd[1]: Finished ignition-fetch.service. Oct 2 20:05:23.476291 systemd[1]: Starting ignition-kargs.service... Oct 2 20:05:23.474000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.487408 kernel: audit: type=1130 audit(1696277123.474:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.501673 ignition[1127]: Ignition 2.14.0 Oct 2 20:05:23.501685 ignition[1127]: Stage: kargs Oct 2 20:05:23.501884 ignition[1127]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.501918 ignition[1127]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.512677 ignition[1127]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.514426 ignition[1127]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.516751 ignition[1127]: INFO : PUT result: OK Oct 2 20:05:23.520695 ignition[1127]: kargs: kargs passed Oct 2 20:05:23.520763 ignition[1127]: Ignition finished successfully Oct 2 20:05:23.523391 systemd[1]: Finished ignition-kargs.service. Oct 2 20:05:23.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.527275 systemd[1]: Starting ignition-disks.service... Oct 2 20:05:23.535851 kernel: audit: type=1130 audit(1696277123.524:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.542359 ignition[1133]: Ignition 2.14.0 Oct 2 20:05:23.542373 ignition[1133]: Stage: disks Oct 2 20:05:23.542603 ignition[1133]: reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:23.542637 ignition[1133]: parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:23.554458 ignition[1133]: no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:23.555861 ignition[1133]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:23.557735 ignition[1133]: INFO : PUT result: OK Oct 2 20:05:23.561558 ignition[1133]: disks: disks passed Oct 2 20:05:23.561624 ignition[1133]: Ignition finished successfully Oct 2 20:05:23.564824 systemd[1]: Finished ignition-disks.service. Oct 2 20:05:23.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.565043 systemd[1]: Reached target initrd-root-device.target. Oct 2 20:05:23.572513 kernel: audit: type=1130 audit(1696277123.564:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.573693 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:23.574870 systemd[1]: Reached target local-fs.target. Oct 2 20:05:23.577483 systemd[1]: Reached target sysinit.target. Oct 2 20:05:23.579539 systemd[1]: Reached target basic.target. Oct 2 20:05:23.585916 systemd[1]: Starting systemd-fsck-root.service... Oct 2 20:05:23.625985 systemd-fsck[1141]: ROOT: clean, 603/553520 files, 56012/553472 blocks Oct 2 20:05:23.631444 systemd[1]: Finished systemd-fsck-root.service. Oct 2 20:05:23.639437 kernel: audit: type=1130 audit(1696277123.632:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.632000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:23.635101 systemd[1]: Mounting sysroot.mount... Oct 2 20:05:23.652425 kernel: EXT4-fs (nvme0n1p9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Oct 2 20:05:23.654601 systemd[1]: Mounted sysroot.mount. Oct 2 20:05:23.657299 systemd[1]: Reached target initrd-root-fs.target. Oct 2 20:05:23.673166 systemd[1]: Mounting sysroot-usr.mount... Oct 2 20:05:23.679478 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Oct 2 20:05:23.679545 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Oct 2 20:05:23.679583 systemd[1]: Reached target ignition-diskful.target. Oct 2 20:05:23.682826 systemd[1]: Mounted sysroot-usr.mount. Oct 2 20:05:23.704157 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:23.716443 systemd[1]: Starting initrd-setup-root.service... Oct 2 20:05:23.746675 kernel: BTRFS: device label OEM devid 1 transid 14 /dev/nvme0n1p6 scanned by mount (1158) Oct 2 20:05:23.752979 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:23.753050 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:23.753062 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:23.755458 initrd-setup-root[1163]: cut: /sysroot/etc/passwd: No such file or directory Oct 2 20:05:23.761624 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:23.763805 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:23.779166 initrd-setup-root[1189]: cut: /sysroot/etc/group: No such file or directory Oct 2 20:05:23.785204 initrd-setup-root[1197]: cut: /sysroot/etc/shadow: No such file or directory Oct 2 20:05:23.791487 initrd-setup-root[1205]: cut: /sysroot/etc/gshadow: No such file or directory Oct 2 20:05:23.799615 systemd-networkd[1097]: eth0: Gained IPv6LL Oct 2 20:05:24.051582 systemd[1]: Finished initrd-setup-root.service. Oct 2 20:05:24.064098 kernel: audit: type=1130 audit(1696277124.051:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.053576 systemd[1]: Starting ignition-mount.service... Oct 2 20:05:24.065949 systemd[1]: Starting sysroot-boot.service... Oct 2 20:05:24.076965 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:24.078702 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Oct 2 20:05:24.101970 ignition[1224]: INFO : Ignition 2.14.0 Oct 2 20:05:24.101970 ignition[1224]: INFO : Stage: mount Oct 2 20:05:24.106823 ignition[1224]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:24.106823 ignition[1224]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:24.122635 systemd[1]: Finished sysroot-boot.service. Oct 2 20:05:24.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.127663 ignition[1224]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:24.132122 kernel: audit: type=1130 audit(1696277124.124:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.132150 ignition[1224]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:24.133821 ignition[1224]: INFO : PUT result: OK Oct 2 20:05:24.137227 ignition[1224]: INFO : mount: mount passed Oct 2 20:05:24.138648 ignition[1224]: INFO : Ignition finished successfully Oct 2 20:05:24.140732 systemd[1]: Finished ignition-mount.service. Oct 2 20:05:24.142653 systemd[1]: Starting ignition-files.service... Oct 2 20:05:24.149257 kernel: audit: type=1130 audit(1696277124.141:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:24.154005 systemd[1]: Mounting sysroot-usr-share-oem.mount... Oct 2 20:05:24.171397 kernel: BTRFS: device label OEM devid 1 transid 15 /dev/nvme0n1p6 scanned by mount (1233) Oct 2 20:05:24.177260 kernel: BTRFS info (device nvme0n1p6): using crc32c (crc32c-intel) checksum algorithm Oct 2 20:05:24.177805 kernel: BTRFS info (device nvme0n1p6): using free space tree Oct 2 20:05:24.177834 kernel: BTRFS info (device nvme0n1p6): has skinny extents Oct 2 20:05:24.189401 kernel: BTRFS info (device nvme0n1p6): enabling ssd optimizations Oct 2 20:05:24.192354 systemd[1]: Mounted sysroot-usr-share-oem.mount. Oct 2 20:05:24.207860 ignition[1252]: INFO : Ignition 2.14.0 Oct 2 20:05:24.207860 ignition[1252]: INFO : Stage: files Oct 2 20:05:24.210302 ignition[1252]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:24.210302 ignition[1252]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:24.221622 ignition[1252]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:24.223497 ignition[1252]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:24.225869 ignition[1252]: INFO : PUT result: OK Oct 2 20:05:24.229884 ignition[1252]: DEBUG : files: compiled without relabeling support, skipping Oct 2 20:05:24.236571 ignition[1252]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Oct 2 20:05:24.236571 ignition[1252]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Oct 2 20:05:24.255207 ignition[1252]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Oct 2 20:05:24.257122 ignition[1252]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Oct 2 20:05:24.259559 unknown[1252]: wrote ssh authorized keys file for user: core Oct 2 20:05:24.260957 ignition[1252]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Oct 2 20:05:24.260957 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:05:24.260957 ignition[1252]: INFO : GET https://github.com/containernetworking/plugins/releases/download/v1.1.1/cni-plugins-linux-amd64-v1.1.1.tgz: attempt #1 Oct 2 20:05:24.440610 ignition[1252]: INFO : GET result: OK Oct 2 20:05:24.712924 ignition[1252]: DEBUG : file matches expected sum of: 4d0ed0abb5951b9cf83cba938ef84bdc5b681f4ac869da8143974f6a53a3ff30c666389fa462b9d14d30af09bf03f6cdf77598c572f8fb3ea00cecdda467a48d Oct 2 20:05:24.716627 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/cni-plugins-linux-amd64-v1.1.1.tgz" Oct 2 20:05:24.716627 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:05:24.716627 ignition[1252]: INFO : GET https://github.com/kubernetes-sigs/cri-tools/releases/download/v1.26.0/crictl-v1.26.0-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:24.930614 ignition[1252]: INFO : GET result: OK Oct 2 20:05:25.045054 ignition[1252]: DEBUG : file matches expected sum of: a3a2c02a90b008686c20babaf272e703924db2a3e2a0d4e2a7c81d994cbc68c47458a4a354ecc243af095b390815c7f203348b9749351ae817bd52a522300449 Oct 2 20:05:25.048513 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/opt/crictl-v1.26.0-linux-amd64.tar.gz" Oct 2 20:05:25.048513 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:25.048513 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/etc/docker/daemon.json" Oct 2 20:05:25.048513 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:25.048513 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:25.064517 ignition[1252]: INFO : op(1): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem123135288" Oct 2 20:05:25.064517 ignition[1252]: CRITICAL : op(1): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem123135288": device or resource busy Oct 2 20:05:25.064517 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem123135288", trying btrfs: device or resource busy Oct 2 20:05:25.064517 ignition[1252]: INFO : op(2): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem123135288" Oct 2 20:05:25.075849 kernel: BTRFS info: devid 1 device path /dev/nvme0n1p6 changed to /dev/disk/by-label/OEM scanned by ignition (1252) Oct 2 20:05:25.075918 ignition[1252]: INFO : op(2): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem123135288" Oct 2 20:05:25.123400 ignition[1252]: INFO : op(3): [started] unmounting "/mnt/oem123135288" Oct 2 20:05:25.125107 ignition[1252]: INFO : op(3): [finished] unmounting "/mnt/oem123135288" Oct 2 20:05:25.126647 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/etc/eks/bootstrap.sh" Oct 2 20:05:25.125144 systemd[1]: mnt-oem123135288.mount: Deactivated successfully. Oct 2 20:05:25.130365 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:25.130365 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubeadm: attempt #1 Oct 2 20:05:25.235289 ignition[1252]: INFO : GET result: OK Oct 2 20:05:27.091362 ignition[1252]: DEBUG : file matches expected sum of: 1c324cd645a7bf93d19d24c87498d9a17878eb1cc927e2680200ffeab2f85051ddec47d85b79b8e774042dc6726299ad3d7caf52c060701f00deba30dc33f660 Oct 2 20:05:27.095502 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/opt/bin/kubeadm" Oct 2 20:05:27.095502 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:27.095502 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubelet: attempt #1 Oct 2 20:05:27.149350 ignition[1252]: INFO : GET result: OK Oct 2 20:05:29.196817 ignition[1252]: DEBUG : file matches expected sum of: 40daf2a9b9e666c14b10e627da931bd79978628b1f23ef6429c1cb4fcba261f86ccff440c0dbb0070ee760fe55772b4fd279c4582dfbb17fa30bc94b7f00126b Oct 2 20:05:29.200739 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/opt/bin/kubelet" Oct 2 20:05:29.200739 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:29.200739 ignition[1252]: INFO : GET https://storage.googleapis.com/kubernetes-release/release/v1.26.5/bin/linux/amd64/kubectl: attempt #1 Oct 2 20:05:29.252181 ignition[1252]: INFO : GET result: OK Oct 2 20:05:30.252154 ignition[1252]: DEBUG : file matches expected sum of: 97840854134909d75a1a2563628cc4ba632067369ce7fc8a8a1e90a387d32dd7bfd73f4f5b5a82ef842088e7470692951eb7fc869c5f297dd740f855672ee628 Oct 2 20:05:30.255562 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing file "/sysroot/opt/bin/kubectl" Oct 2 20:05:30.255562 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:30.255562 ignition[1252]: INFO : GET https://github.com/cilium/cilium-cli/releases/download/v0.12.12/cilium-linux-amd64.tar.gz: attempt #1 Oct 2 20:05:30.558080 ignition[1252]: INFO : GET result: OK Oct 2 20:05:30.921221 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/bin/cilium.tar.gz" Oct 2 20:05:30.921221 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(b): [started] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:30.927137 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(b): [finished] writing file "/sysroot/home/core/install.sh" Oct 2 20:05:30.927137 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(c): [started] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:30.934196 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(c): [finished] writing file "/sysroot/home/core/nginx.yaml" Oct 2 20:05:30.947394 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(d): [started] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:30.960968 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:30.971317 ignition[1252]: INFO : op(4): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3270218187" Oct 2 20:05:30.974324 ignition[1252]: CRITICAL : op(4): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3270218187": device or resource busy Oct 2 20:05:30.974324 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3270218187", trying btrfs: device or resource busy Oct 2 20:05:30.974324 ignition[1252]: INFO : op(5): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3270218187" Oct 2 20:05:30.997431 ignition[1252]: INFO : op(5): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3270218187" Oct 2 20:05:30.997431 ignition[1252]: INFO : op(6): [started] unmounting "/mnt/oem3270218187" Oct 2 20:05:30.997431 ignition[1252]: INFO : op(6): [finished] unmounting "/mnt/oem3270218187" Oct 2 20:05:30.997431 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(d): [finished] writing file "/sysroot/etc/systemd/system/nvidia.service" Oct 2 20:05:30.997431 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:30.997431 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:30.997049 systemd[1]: mnt-oem3270218187.mount: Deactivated successfully. Oct 2 20:05:31.023240 ignition[1252]: INFO : op(7): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2442899947" Oct 2 20:05:31.025551 ignition[1252]: CRITICAL : op(7): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2442899947": device or resource busy Oct 2 20:05:31.025551 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem2442899947", trying btrfs: device or resource busy Oct 2 20:05:31.025551 ignition[1252]: INFO : op(8): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2442899947" Oct 2 20:05:31.025551 ignition[1252]: INFO : op(8): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem2442899947" Oct 2 20:05:31.035701 ignition[1252]: INFO : op(9): [started] unmounting "/mnt/oem2442899947" Oct 2 20:05:31.035701 ignition[1252]: INFO : op(9): [finished] unmounting "/mnt/oem2442899947" Oct 2 20:05:31.035701 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/etc/amazon/ssm/seelog.xml" Oct 2 20:05:31.035701 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:31.035701 ignition[1252]: INFO : oem config not found in "/usr/share/oem", looking on oem partition Oct 2 20:05:31.034412 systemd[1]: mnt-oem2442899947.mount: Deactivated successfully. Oct 2 20:05:31.059326 ignition[1252]: INFO : op(a): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem466984766" Oct 2 20:05:31.061536 ignition[1252]: CRITICAL : op(a): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem466984766": device or resource busy Oct 2 20:05:31.061536 ignition[1252]: ERROR : failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem466984766", trying btrfs: device or resource busy Oct 2 20:05:31.061536 ignition[1252]: INFO : op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem466984766" Oct 2 20:05:31.068601 ignition[1252]: INFO : op(b): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem466984766" Oct 2 20:05:31.068601 ignition[1252]: INFO : op(c): [started] unmounting "/mnt/oem466984766" Oct 2 20:05:31.068601 ignition[1252]: INFO : op(c): [finished] unmounting "/mnt/oem466984766" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/amazon/ssm/amazon-ssm-agent.json" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(10): [started] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(10): [finished] processing unit "coreos-metadata-sshkeys@.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(11): [started] processing unit "amazon-ssm-agent.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(11): op(12): [started] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(11): op(12): [finished] writing unit "amazon-ssm-agent.service" at "/sysroot/etc/systemd/system/amazon-ssm-agent.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(11): [finished] processing unit "amazon-ssm-agent.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(13): [started] processing unit "nvidia.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(13): [finished] processing unit "nvidia.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(14): [started] processing unit "prepare-cni-plugins.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(14): op(15): [started] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(14): op(15): [finished] writing unit "prepare-cni-plugins.service" at "/sysroot/etc/systemd/system/prepare-cni-plugins.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(14): [finished] processing unit "prepare-cni-plugins.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(16): [started] processing unit "prepare-critools.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(16): op(17): [started] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(16): op(17): [finished] writing unit "prepare-critools.service" at "/sysroot/etc/systemd/system/prepare-critools.service" Oct 2 20:05:31.068601 ignition[1252]: INFO : files: op(16): [finished] processing unit "prepare-critools.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(18): [started] setting preset to enabled for "nvidia.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(18): [finished] setting preset to enabled for "nvidia.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(19): [started] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(19): [finished] setting preset to enabled for "prepare-cni-plugins.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(1a): [started] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(1a): [finished] setting preset to enabled for "prepare-critools.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(1b): [started] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(1b): [finished] setting preset to enabled for "coreos-metadata-sshkeys@.service " Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(1c): [started] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: op(1c): [finished] setting preset to enabled for "amazon-ssm-agent.service" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: createResultFile: createFiles: op(1d): [started] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: createResultFile: createFiles: op(1d): [finished] writing file "/sysroot/etc/.ignition-result.json" Oct 2 20:05:31.114133 ignition[1252]: INFO : files: files passed Oct 2 20:05:31.114133 ignition[1252]: INFO : Ignition finished successfully Oct 2 20:05:31.171457 kernel: audit: type=1130 audit(1696277131.118:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.171500 kernel: audit: type=1130 audit(1696277131.147:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.171513 kernel: audit: type=1131 audit(1696277131.147:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.147000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.147000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.115851 systemd[1]: Finished ignition-files.service. Oct 2 20:05:31.128973 systemd[1]: Starting initrd-setup-root-after-ignition.service... Oct 2 20:05:31.133939 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Oct 2 20:05:31.137806 systemd[1]: Starting ignition-quench.service... Oct 2 20:05:31.143462 systemd[1]: ignition-quench.service: Deactivated successfully. Oct 2 20:05:31.143634 systemd[1]: Finished ignition-quench.service. Oct 2 20:05:31.186226 initrd-setup-root-after-ignition[1277]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Oct 2 20:05:31.189602 systemd[1]: Finished initrd-setup-root-after-ignition.service. Oct 2 20:05:31.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.192310 systemd[1]: Reached target ignition-complete.target. Oct 2 20:05:31.199452 kernel: audit: type=1130 audit(1696277131.192:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.200632 systemd[1]: Starting initrd-parse-etc.service... Oct 2 20:05:31.216849 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Oct 2 20:05:31.216948 systemd[1]: Finished initrd-parse-etc.service. Oct 2 20:05:31.231531 kernel: audit: type=1130 audit(1696277131.220:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.231560 kernel: audit: type=1131 audit(1696277131.220:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.220498 systemd[1]: Reached target initrd-fs.target. Oct 2 20:05:31.233842 systemd[1]: Reached target initrd.target. Oct 2 20:05:31.235794 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Oct 2 20:05:31.238397 systemd[1]: Starting dracut-pre-pivot.service... Oct 2 20:05:31.263855 systemd[1]: Finished dracut-pre-pivot.service. Oct 2 20:05:31.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.268907 systemd[1]: Starting initrd-cleanup.service... Oct 2 20:05:31.274991 kernel: audit: type=1130 audit(1696277131.266:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.283524 systemd[1]: Stopped target nss-lookup.target. Oct 2 20:05:31.283762 systemd[1]: Stopped target remote-cryptsetup.target. Oct 2 20:05:31.287671 systemd[1]: Stopped target timers.target. Oct 2 20:05:31.289608 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Oct 2 20:05:31.290870 systemd[1]: Stopped dracut-pre-pivot.service. Oct 2 20:05:31.292000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.293061 systemd[1]: Stopped target initrd.target. Oct 2 20:05:31.299236 kernel: audit: type=1131 audit(1696277131.292:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.299342 systemd[1]: Stopped target basic.target. Oct 2 20:05:31.301544 systemd[1]: Stopped target ignition-complete.target. Oct 2 20:05:31.302915 systemd[1]: Stopped target ignition-diskful.target. Oct 2 20:05:31.305422 systemd[1]: Stopped target initrd-root-device.target. Oct 2 20:05:31.307837 systemd[1]: Stopped target remote-fs.target. Oct 2 20:05:31.308906 systemd[1]: Stopped target remote-fs-pre.target. Oct 2 20:05:31.310836 systemd[1]: Stopped target sysinit.target. Oct 2 20:05:31.315569 systemd[1]: Stopped target local-fs.target. Oct 2 20:05:31.317967 systemd[1]: Stopped target local-fs-pre.target. Oct 2 20:05:31.320473 systemd[1]: Stopped target swap.target. Oct 2 20:05:31.322266 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Oct 2 20:05:31.323886 systemd[1]: Stopped dracut-pre-mount.service. Oct 2 20:05:31.326290 systemd[1]: Stopped target cryptsetup.target. Oct 2 20:05:31.334188 kernel: audit: type=1131 audit(1696277131.326:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.326000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.333861 systemd[1]: dracut-initqueue.service: Deactivated successfully. Oct 2 20:05:31.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.345795 kernel: audit: type=1131 audit(1696277131.335:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.333986 systemd[1]: Stopped dracut-initqueue.service. Oct 2 20:05:31.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.335872 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Oct 2 20:05:31.336494 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Oct 2 20:05:31.346089 systemd[1]: ignition-files.service: Deactivated successfully. Oct 2 20:05:31.346197 systemd[1]: Stopped ignition-files.service. Oct 2 20:05:31.353000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.355980 systemd[1]: Stopping ignition-mount.service... Oct 2 20:05:31.358410 systemd[1]: Stopping iscsiuio.service... Oct 2 20:05:31.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.359252 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Oct 2 20:05:31.359367 systemd[1]: Stopped kmod-static-nodes.service. Oct 2 20:05:31.362876 systemd[1]: Stopping sysroot-boot.service... Oct 2 20:05:31.389840 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Oct 2 20:05:31.392148 systemd[1]: Stopped systemd-udev-trigger.service. Oct 2 20:05:31.400068 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Oct 2 20:05:31.401980 systemd[1]: Stopped dracut-pre-trigger.service. Oct 2 20:05:31.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.410622 ignition[1290]: INFO : Ignition 2.14.0 Oct 2 20:05:31.410622 ignition[1290]: INFO : Stage: umount Oct 2 20:05:31.410622 ignition[1290]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Oct 2 20:05:31.410622 ignition[1290]: DEBUG : parsing config with SHA512: 6629d8e825d60c9c9d4629d8547ef9a0b839d6b01b7f61a481a1f23308c924b8b0bbf10cae7f7fe3bcaf88b23d1a81baa7771c3670728d4d2a1e665216a1de7b Oct 2 20:05:31.423287 systemd[1]: iscsiuio.service: Deactivated successfully. Oct 2 20:05:31.423614 systemd[1]: Stopped iscsiuio.service. Oct 2 20:05:31.428196 ignition[1290]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/aws" Oct 2 20:05:31.432069 ignition[1290]: INFO : PUT http://169.254.169.254/latest/api/token: attempt #1 Oct 2 20:05:31.433309 systemd[1]: sysroot-boot.service: Deactivated successfully. Oct 2 20:05:31.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.433552 systemd[1]: Stopped sysroot-boot.service. Oct 2 20:05:31.438169 ignition[1290]: INFO : PUT result: OK Oct 2 20:05:31.445318 systemd[1]: initrd-cleanup.service: Deactivated successfully. Oct 2 20:05:31.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.445598 systemd[1]: Finished initrd-cleanup.service. Oct 2 20:05:31.449000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.449000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.450005 ignition[1290]: INFO : umount: umount passed Oct 2 20:05:31.450990 ignition[1290]: INFO : Ignition finished successfully Oct 2 20:05:31.453101 systemd[1]: ignition-mount.service: Deactivated successfully. Oct 2 20:05:31.454336 systemd[1]: Stopped ignition-mount.service. Oct 2 20:05:31.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.456971 systemd[1]: ignition-disks.service: Deactivated successfully. Oct 2 20:05:31.458307 systemd[1]: Stopped ignition-disks.service. Oct 2 20:05:31.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.460423 systemd[1]: ignition-kargs.service: Deactivated successfully. Oct 2 20:05:31.460499 systemd[1]: Stopped ignition-kargs.service. Oct 2 20:05:31.462000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.465207 systemd[1]: ignition-fetch.service: Deactivated successfully. Oct 2 20:05:31.465331 systemd[1]: Stopped ignition-fetch.service. Oct 2 20:05:31.467000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.468981 systemd[1]: Stopped target network.target. Oct 2 20:05:31.472000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.470677 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Oct 2 20:05:31.470754 systemd[1]: Stopped ignition-fetch-offline.service. Oct 2 20:05:31.472290 systemd[1]: Stopped target paths.target. Oct 2 20:05:31.473510 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Oct 2 20:05:31.478673 systemd[1]: Stopped systemd-ask-password-console.path. Oct 2 20:05:31.489609 systemd[1]: Stopped target slices.target. Oct 2 20:05:31.489716 systemd[1]: Stopped target sockets.target. Oct 2 20:05:31.505762 systemd[1]: iscsid.socket: Deactivated successfully. Oct 2 20:05:31.505826 systemd[1]: Closed iscsid.socket. Oct 2 20:05:31.512227 systemd[1]: iscsiuio.socket: Deactivated successfully. Oct 2 20:05:31.512289 systemd[1]: Closed iscsiuio.socket. Oct 2 20:05:31.516029 systemd[1]: ignition-setup.service: Deactivated successfully. Oct 2 20:05:31.518000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.517089 systemd[1]: Stopped ignition-setup.service. Oct 2 20:05:31.519499 systemd[1]: initrd-setup-root.service: Deactivated successfully. Oct 2 20:05:31.521000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.519572 systemd[1]: Stopped initrd-setup-root.service. Oct 2 20:05:31.523958 systemd[1]: Stopping systemd-networkd.service... Oct 2 20:05:31.525044 systemd[1]: Stopping systemd-resolved.service... Oct 2 20:05:31.528439 systemd-networkd[1097]: eth0: DHCPv6 lease lost Oct 2 20:05:31.529398 systemd[1]: systemd-networkd.service: Deactivated successfully. Oct 2 20:05:31.529702 systemd[1]: Stopped systemd-networkd.service. Oct 2 20:05:31.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.531633 systemd[1]: systemd-networkd.socket: Deactivated successfully. Oct 2 20:05:31.534000 audit: BPF prog-id=9 op=UNLOAD Oct 2 20:05:31.531668 systemd[1]: Closed systemd-networkd.socket. Oct 2 20:05:31.541215 systemd[1]: Stopping network-cleanup.service... Oct 2 20:05:31.541315 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Oct 2 20:05:31.541523 systemd[1]: Stopped parse-ip-for-networkd.service. Oct 2 20:05:31.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.547626 systemd[1]: systemd-sysctl.service: Deactivated successfully. Oct 2 20:05:31.549000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.547681 systemd[1]: Stopped systemd-sysctl.service. Oct 2 20:05:31.552000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.550937 systemd[1]: systemd-modules-load.service: Deactivated successfully. Oct 2 20:05:31.550995 systemd[1]: Stopped systemd-modules-load.service. Oct 2 20:05:31.553222 systemd[1]: Stopping systemd-udevd.service... Oct 2 20:05:31.557831 systemd[1]: systemd-resolved.service: Deactivated successfully. Oct 2 20:05:31.559712 systemd[1]: Stopped systemd-resolved.service. Oct 2 20:05:31.561000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.563184 systemd[1]: systemd-udevd.service: Deactivated successfully. Oct 2 20:05:31.564687 systemd[1]: Stopped systemd-udevd.service. Oct 2 20:05:31.566000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.567000 audit: BPF prog-id=6 op=UNLOAD Oct 2 20:05:31.567777 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Oct 2 20:05:31.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.567829 systemd[1]: Closed systemd-udevd-control.socket. Oct 2 20:05:31.575000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.576000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.568978 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Oct 2 20:05:31.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.582000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.569015 systemd[1]: Closed systemd-udevd-kernel.socket. Oct 2 20:05:31.570251 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Oct 2 20:05:31.570301 systemd[1]: Stopped dracut-pre-udev.service. Oct 2 20:05:31.589000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.589000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:31.574023 systemd[1]: dracut-cmdline.service: Deactivated successfully. Oct 2 20:05:31.574108 systemd[1]: Stopped dracut-cmdline.service. Oct 2 20:05:31.575412 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Oct 2 20:05:31.575457 systemd[1]: Stopped dracut-cmdline-ask.service. Oct 2 20:05:31.578432 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Oct 2 20:05:31.579585 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Oct 2 20:05:31.579637 systemd[1]: Stopped systemd-vconsole-setup.service. Oct 2 20:05:31.581265 systemd[1]: network-cleanup.service: Deactivated successfully. Oct 2 20:05:31.581356 systemd[1]: Stopped network-cleanup.service. Oct 2 20:05:31.588138 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Oct 2 20:05:31.588257 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Oct 2 20:05:31.590169 systemd[1]: Reached target initrd-switch-root.target. Oct 2 20:05:31.597358 systemd[1]: Starting initrd-switch-root.service... Oct 2 20:05:31.616527 systemd[1]: Switching root. Oct 2 20:05:31.647809 iscsid[1102]: iscsid shutting down. Oct 2 20:05:31.648746 systemd-journald[185]: Received SIGTERM from PID 1 (systemd). Oct 2 20:05:31.648795 systemd-journald[185]: Journal stopped Oct 2 20:05:38.023648 kernel: SELinux: Class mctp_socket not defined in policy. Oct 2 20:05:38.029601 kernel: SELinux: Class anon_inode not defined in policy. Oct 2 20:05:38.029640 kernel: SELinux: the above unknown classes and permissions will be allowed Oct 2 20:05:38.029670 kernel: SELinux: policy capability network_peer_controls=1 Oct 2 20:05:38.029697 kernel: SELinux: policy capability open_perms=1 Oct 2 20:05:38.029730 kernel: SELinux: policy capability extended_socket_class=1 Oct 2 20:05:38.029751 kernel: SELinux: policy capability always_check_network=0 Oct 2 20:05:38.029772 kernel: SELinux: policy capability cgroup_seclabel=1 Oct 2 20:05:38.029793 kernel: SELinux: policy capability nnp_nosuid_transition=1 Oct 2 20:05:38.029813 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Oct 2 20:05:38.029833 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Oct 2 20:05:38.029858 systemd[1]: Successfully loaded SELinux policy in 117.398ms. Oct 2 20:05:38.029896 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 22.016ms. Oct 2 20:05:38.029928 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Oct 2 20:05:38.029952 systemd[1]: Detected virtualization amazon. Oct 2 20:05:38.029974 systemd[1]: Detected architecture x86-64. Oct 2 20:05:38.029993 systemd[1]: Detected first boot. Oct 2 20:05:38.030015 systemd[1]: Initializing machine ID from VM UUID. Oct 2 20:05:38.030037 systemd[1]: Populated /etc with preset unit settings. Oct 2 20:05:38.030062 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:38.030087 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:38.030114 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:38.030142 kernel: kauditd_printk_skb: 38 callbacks suppressed Oct 2 20:05:38.030168 kernel: audit: type=1334 audit(1696277137.706:85): prog-id=12 op=LOAD Oct 2 20:05:38.030189 kernel: audit: type=1334 audit(1696277137.706:86): prog-id=3 op=UNLOAD Oct 2 20:05:38.030209 kernel: audit: type=1334 audit(1696277137.709:87): prog-id=13 op=LOAD Oct 2 20:05:38.030231 kernel: audit: type=1334 audit(1696277137.712:88): prog-id=14 op=LOAD Oct 2 20:05:38.030252 kernel: audit: type=1334 audit(1696277137.712:89): prog-id=4 op=UNLOAD Oct 2 20:05:38.030277 kernel: audit: type=1334 audit(1696277137.712:90): prog-id=5 op=UNLOAD Oct 2 20:05:38.030297 kernel: audit: type=1334 audit(1696277137.714:91): prog-id=15 op=LOAD Oct 2 20:05:38.030317 kernel: audit: type=1334 audit(1696277137.714:92): prog-id=12 op=UNLOAD Oct 2 20:05:38.030338 kernel: audit: type=1334 audit(1696277137.720:93): prog-id=16 op=LOAD Oct 2 20:05:38.030359 kernel: audit: type=1334 audit(1696277137.722:94): prog-id=17 op=LOAD Oct 2 20:05:38.030401 systemd[1]: iscsid.service: Deactivated successfully. Oct 2 20:05:38.030425 systemd[1]: Stopped iscsid.service. Oct 2 20:05:38.030447 systemd[1]: initrd-switch-root.service: Deactivated successfully. Oct 2 20:05:38.030470 systemd[1]: Stopped initrd-switch-root.service. Oct 2 20:05:38.030497 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Oct 2 20:05:38.030521 systemd[1]: Created slice system-addon\x2dconfig.slice. Oct 2 20:05:38.030544 systemd[1]: Created slice system-addon\x2drun.slice. Oct 2 20:05:38.030568 systemd[1]: Created slice system-coreos\x2dmetadata\x2dsshkeys.slice. Oct 2 20:05:38.030591 systemd[1]: Created slice system-getty.slice. Oct 2 20:05:38.030615 systemd[1]: Created slice system-modprobe.slice. Oct 2 20:05:38.030640 systemd[1]: Created slice system-serial\x2dgetty.slice. Oct 2 20:05:38.030666 systemd[1]: Created slice system-system\x2dcloudinit.slice. Oct 2 20:05:38.030689 systemd[1]: Created slice system-systemd\x2dfsck.slice. Oct 2 20:05:38.030713 systemd[1]: Created slice user.slice. Oct 2 20:05:38.030734 systemd[1]: Started systemd-ask-password-console.path. Oct 2 20:05:38.030758 systemd[1]: Started systemd-ask-password-wall.path. Oct 2 20:05:38.030780 systemd[1]: Set up automount boot.automount. Oct 2 20:05:38.030804 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Oct 2 20:05:38.030826 systemd[1]: Stopped target initrd-switch-root.target. Oct 2 20:05:38.030849 systemd[1]: Stopped target initrd-fs.target. Oct 2 20:05:38.030872 systemd[1]: Stopped target initrd-root-fs.target. Oct 2 20:05:38.030898 systemd[1]: Reached target integritysetup.target. Oct 2 20:05:38.030921 systemd[1]: Reached target remote-cryptsetup.target. Oct 2 20:05:38.030942 systemd[1]: Reached target remote-fs.target. Oct 2 20:05:38.030965 systemd[1]: Reached target slices.target. Oct 2 20:05:38.031054 systemd[1]: Reached target swap.target. Oct 2 20:05:38.031085 systemd[1]: Reached target torcx.target. Oct 2 20:05:38.031109 systemd[1]: Reached target veritysetup.target. Oct 2 20:05:38.031237 systemd[1]: Listening on systemd-coredump.socket. Oct 2 20:05:38.031269 systemd[1]: Listening on systemd-initctl.socket. Oct 2 20:05:38.031293 systemd[1]: Listening on systemd-networkd.socket. Oct 2 20:05:38.031315 systemd[1]: Listening on systemd-udevd-control.socket. Oct 2 20:05:38.031340 systemd[1]: Listening on systemd-udevd-kernel.socket. Oct 2 20:05:38.031362 systemd[1]: Listening on systemd-userdbd.socket. Oct 2 20:05:38.033480 systemd[1]: Mounting dev-hugepages.mount... Oct 2 20:05:38.033520 systemd[1]: Mounting dev-mqueue.mount... Oct 2 20:05:38.033540 systemd[1]: Mounting media.mount... Oct 2 20:05:38.033560 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:38.033578 systemd[1]: Mounting sys-kernel-debug.mount... Oct 2 20:05:38.033597 systemd[1]: Mounting sys-kernel-tracing.mount... Oct 2 20:05:38.033615 systemd[1]: Mounting tmp.mount... Oct 2 20:05:38.033634 systemd[1]: Starting flatcar-tmpfiles.service... Oct 2 20:05:38.033653 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Oct 2 20:05:38.033671 systemd[1]: Starting kmod-static-nodes.service... Oct 2 20:05:38.033694 systemd[1]: Starting modprobe@configfs.service... Oct 2 20:05:38.033713 systemd[1]: Starting modprobe@dm_mod.service... Oct 2 20:05:38.033732 systemd[1]: Starting modprobe@drm.service... Oct 2 20:05:38.033750 systemd[1]: Starting modprobe@efi_pstore.service... Oct 2 20:05:38.033768 systemd[1]: Starting modprobe@fuse.service... Oct 2 20:05:38.033786 systemd[1]: Starting modprobe@loop.service... Oct 2 20:05:38.033806 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Oct 2 20:05:38.033825 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Oct 2 20:05:38.033845 systemd[1]: Stopped systemd-fsck-root.service. Oct 2 20:05:38.033867 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Oct 2 20:05:38.033885 systemd[1]: Stopped systemd-fsck-usr.service. Oct 2 20:05:38.033904 systemd[1]: Stopped systemd-journald.service. Oct 2 20:05:38.033923 systemd[1]: Starting systemd-journald.service... Oct 2 20:05:38.033941 systemd[1]: Starting systemd-modules-load.service... Oct 2 20:05:38.033960 systemd[1]: Starting systemd-network-generator.service... Oct 2 20:05:38.033979 systemd[1]: Starting systemd-remount-fs.service... Oct 2 20:05:38.034015 systemd[1]: Starting systemd-udev-trigger.service... Oct 2 20:05:38.034036 systemd[1]: verity-setup.service: Deactivated successfully. Oct 2 20:05:38.034057 systemd[1]: Stopped verity-setup.service. Oct 2 20:05:38.034075 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Oct 2 20:05:38.034092 systemd[1]: Mounted dev-hugepages.mount. Oct 2 20:05:38.034109 systemd[1]: Mounted dev-mqueue.mount. Oct 2 20:05:38.034126 systemd[1]: Mounted media.mount. Oct 2 20:05:38.034145 systemd[1]: Mounted sys-kernel-debug.mount. Oct 2 20:05:38.034165 systemd[1]: Mounted sys-kernel-tracing.mount. Oct 2 20:05:38.034185 systemd[1]: Mounted tmp.mount. Oct 2 20:05:38.034202 systemd[1]: Finished kmod-static-nodes.service. Oct 2 20:05:38.034223 systemd[1]: modprobe@configfs.service: Deactivated successfully. Oct 2 20:05:38.034243 systemd[1]: Finished modprobe@configfs.service. Oct 2 20:05:38.034262 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Oct 2 20:05:38.034283 systemd[1]: Finished modprobe@dm_mod.service. Oct 2 20:05:38.034310 systemd-journald[1400]: Journal started Oct 2 20:05:38.034489 systemd-journald[1400]: Runtime Journal (/run/log/journal/ec2b2e55bdacf28fea8b2ed92529cc08) is 4.8M, max 38.7M, 33.9M free. Oct 2 20:05:32.391000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Oct 2 20:05:32.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:32.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Oct 2 20:05:32.618000 audit: BPF prog-id=10 op=LOAD Oct 2 20:05:32.618000 audit: BPF prog-id=10 op=UNLOAD Oct 2 20:05:32.618000 audit: BPF prog-id=11 op=LOAD Oct 2 20:05:32.618000 audit: BPF prog-id=11 op=UNLOAD Oct 2 20:05:37.706000 audit: BPF prog-id=12 op=LOAD Oct 2 20:05:37.706000 audit: BPF prog-id=3 op=UNLOAD Oct 2 20:05:37.709000 audit: BPF prog-id=13 op=LOAD Oct 2 20:05:37.712000 audit: BPF prog-id=14 op=LOAD Oct 2 20:05:37.712000 audit: BPF prog-id=4 op=UNLOAD Oct 2 20:05:37.712000 audit: BPF prog-id=5 op=UNLOAD Oct 2 20:05:37.714000 audit: BPF prog-id=15 op=LOAD Oct 2 20:05:37.714000 audit: BPF prog-id=12 op=UNLOAD Oct 2 20:05:37.720000 audit: BPF prog-id=16 op=LOAD Oct 2 20:05:37.722000 audit: BPF prog-id=17 op=LOAD Oct 2 20:05:37.722000 audit: BPF prog-id=13 op=UNLOAD Oct 2 20:05:37.722000 audit: BPF prog-id=14 op=UNLOAD Oct 2 20:05:37.726000 audit: BPF prog-id=18 op=LOAD Oct 2 20:05:37.726000 audit: BPF prog-id=15 op=UNLOAD Oct 2 20:05:37.726000 audit: BPF prog-id=19 op=LOAD Oct 2 20:05:37.726000 audit: BPF prog-id=20 op=LOAD Oct 2 20:05:37.726000 audit: BPF prog-id=16 op=UNLOAD Oct 2 20:05:37.726000 audit: BPF prog-id=17 op=UNLOAD Oct 2 20:05:37.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.730000 audit: BPF prog-id=18 op=UNLOAD Oct 2 20:05:37.731000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.737000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.956000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.959000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.959000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:37.960000 audit: BPF prog-id=21 op=LOAD Oct 2 20:05:37.960000 audit: BPF prog-id=22 op=LOAD Oct 2 20:05:37.960000 audit: BPF prog-id=23 op=LOAD Oct 2 20:05:37.960000 audit: BPF prog-id=19 op=UNLOAD Oct 2 20:05:37.960000 audit: BPF prog-id=20 op=UNLOAD Oct 2 20:05:37.993000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.018000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Oct 2 20:05:38.018000 audit[1400]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffd558a4160 a2=4000 a3=7ffd558a41fc items=0 ppid=1 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:38.018000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Oct 2 20:05:38.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.026000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.026000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.036417 systemd[1]: modprobe@drm.service: Deactivated successfully. Oct 2 20:05:38.033000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:32.903857 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:37.704340 systemd[1]: Queued start job for default target multi-user.target. Oct 2 20:05:38.039650 systemd[1]: Finished modprobe@drm.service. Oct 2 20:05:38.039683 kernel: fuse: init (API version 7.34) Oct 2 20:05:38.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:32.905777 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:37.726793 systemd[1]: systemd-journald.service: Deactivated successfully. Oct 2 20:05:32.905807 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:32.905853 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Oct 2 20:05:32.905869 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="skipped missing lower profile" missing profile=oem Oct 2 20:05:32.906032 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Oct 2 20:05:32.906057 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Oct 2 20:05:32.906334 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Oct 2 20:05:32.906438 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Oct 2 20:05:32.906461 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Oct 2 20:05:32.907229 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Oct 2 20:05:32.907272 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Oct 2 20:05:32.907292 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.0: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.0 Oct 2 20:05:32.907307 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Oct 2 20:05:32.907324 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.0: no such file or directory" path=/var/lib/torcx/store/3510.3.0 Oct 2 20:05:32.907339 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Oct 2 20:05:36.913501 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.914329 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.914693 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.915145 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Oct 2 20:05:36.915213 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Oct 2 20:05:36.915404 /usr/lib/systemd/system-generators/torcx-generator[1324]: time="2023-10-02T20:05:36Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Oct 2 20:05:38.042219 systemd[1]: Started systemd-journald.service. Oct 2 20:05:38.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.045000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.044608 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Oct 2 20:05:38.044791 systemd[1]: Finished modprobe@efi_pstore.service. Oct 2 20:05:38.046564 systemd[1]: modprobe@fuse.service: Deactivated successfully. Oct 2 20:05:38.046731 systemd[1]: Finished modprobe@fuse.service. Oct 2 20:05:38.048339 systemd[1]: Finished systemd-modules-load.service. Oct 2 20:05:38.052003 systemd[1]: Finished systemd-network-generator.service. Oct 2 20:05:38.053566 systemd[1]: Finished systemd-remount-fs.service. Oct 2 20:05:38.053000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.054000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.055650 systemd[1]: Reached target network-pre.target. Oct 2 20:05:38.058706 systemd[1]: Mounting sys-fs-fuse-connections.mount... Oct 2 20:05:38.061394 systemd[1]: Mounting sys-kernel-config.mount... Oct 2 20:05:38.065592 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Oct 2 20:05:38.067391 kernel: loop: module loaded Oct 2 20:05:38.068511 systemd[1]: Starting systemd-hwdb-update.service... Oct 2 20:05:38.071012 systemd[1]: Starting systemd-journal-flush.service... Oct 2 20:05:38.072200 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Oct 2 20:05:38.073883 systemd[1]: Starting systemd-random-seed.service... Oct 2 20:05:38.076877 systemd[1]: Starting systemd-sysctl.service... Oct 2 20:05:38.080527 systemd[1]: modprobe@loop.service: Deactivated successfully. Oct 2 20:05:38.081044 systemd[1]: Finished modprobe@loop.service. Oct 2 20:05:38.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.083077 systemd[1]: Mounted sys-fs-fuse-connections.mount. Oct 2 20:05:38.084582 systemd[1]: Mounted sys-kernel-config.mount. Oct 2 20:05:38.087985 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Oct 2 20:05:38.100918 systemd-journald[1400]: Time spent on flushing to /var/log/journal/ec2b2e55bdacf28fea8b2ed92529cc08 is 75.603ms for 1213 entries. Oct 2 20:05:38.100918 systemd-journald[1400]: System Journal (/var/log/journal/ec2b2e55bdacf28fea8b2ed92529cc08) is 8.0M, max 195.6M, 187.6M free. Oct 2 20:05:38.191307 systemd-journald[1400]: Received client request to flush runtime journal. Oct 2 20:05:38.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.194000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.109550 systemd[1]: Finished systemd-random-seed.service. Oct 2 20:05:38.111141 systemd[1]: Reached target first-boot-complete.target. Oct 2 20:05:38.126023 systemd[1]: Finished systemd-sysctl.service. Oct 2 20:05:38.193941 systemd[1]: Finished systemd-journal-flush.service. Oct 2 20:05:38.204893 systemd[1]: Finished systemd-udev-trigger.service. Oct 2 20:05:38.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.207611 systemd[1]: Starting systemd-udev-settle.service... Oct 2 20:05:38.209255 systemd[1]: Finished flatcar-tmpfiles.service. Oct 2 20:05:38.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.212207 systemd[1]: Starting systemd-sysusers.service... Oct 2 20:05:38.228783 udevadm[1440]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Oct 2 20:05:38.404259 systemd[1]: Finished systemd-sysusers.service. Oct 2 20:05:38.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.939431 systemd[1]: Finished systemd-hwdb-update.service. Oct 2 20:05:38.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:38.942000 audit: BPF prog-id=24 op=LOAD Oct 2 20:05:38.942000 audit: BPF prog-id=25 op=LOAD Oct 2 20:05:38.942000 audit: BPF prog-id=7 op=UNLOAD Oct 2 20:05:38.942000 audit: BPF prog-id=8 op=UNLOAD Oct 2 20:05:38.946040 systemd[1]: Starting systemd-udevd.service... Oct 2 20:05:38.981526 systemd-udevd[1443]: Using default interface naming scheme 'v252'. Oct 2 20:05:39.027528 systemd[1]: Started systemd-udevd.service. Oct 2 20:05:39.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.031000 audit: BPF prog-id=26 op=LOAD Oct 2 20:05:39.033736 systemd[1]: Starting systemd-networkd.service... Oct 2 20:05:39.046000 audit: BPF prog-id=27 op=LOAD Oct 2 20:05:39.046000 audit: BPF prog-id=28 op=LOAD Oct 2 20:05:39.046000 audit: BPF prog-id=29 op=LOAD Oct 2 20:05:39.048243 systemd[1]: Starting systemd-userdbd.service... Oct 2 20:05:39.109061 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Oct 2 20:05:39.110166 (udev-worker)[1448]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:39.119723 systemd[1]: Started systemd-userdbd.service. Oct 2 20:05:39.120000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.245169 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input3 Oct 2 20:05:39.241000 audit[1446]: AVC avc: denied { confidentiality } for pid=1446 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Oct 2 20:05:39.241000 audit[1446]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=556f47a6bb20 a1=32194 a2=7f1254a05bc5 a3=5 items=106 ppid=1443 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:39.241000 audit: CWD cwd="/" Oct 2 20:05:39.241000 audit: PATH item=0 name=(null) inode=13768 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=1 name=(null) inode=13769 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=2 name=(null) inode=13768 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=3 name=(null) inode=13770 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=4 name=(null) inode=13768 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=5 name=(null) inode=13771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=6 name=(null) inode=13771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=7 name=(null) inode=13772 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=8 name=(null) inode=13771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=9 name=(null) inode=13773 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=10 name=(null) inode=13771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=11 name=(null) inode=13774 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=12 name=(null) inode=13771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=13 name=(null) inode=13775 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=14 name=(null) inode=13771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=15 name=(null) inode=13776 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=16 name=(null) inode=13768 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=17 name=(null) inode=13777 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=18 name=(null) inode=13777 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=19 name=(null) inode=13778 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=20 name=(null) inode=13777 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=21 name=(null) inode=13779 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=22 name=(null) inode=13777 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=23 name=(null) inode=13780 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=24 name=(null) inode=13777 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=25 name=(null) inode=13781 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=26 name=(null) inode=13777 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=27 name=(null) inode=13782 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=28 name=(null) inode=13768 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=29 name=(null) inode=13783 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=30 name=(null) inode=13783 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=31 name=(null) inode=13784 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=32 name=(null) inode=13783 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=33 name=(null) inode=13785 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=34 name=(null) inode=13783 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=35 name=(null) inode=13786 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=36 name=(null) inode=13783 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.254799 kernel: ACPI: button: Power Button [PWRF] Oct 2 20:05:39.254887 kernel: input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input4 Oct 2 20:05:39.241000 audit: PATH item=37 name=(null) inode=13787 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=38 name=(null) inode=13783 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=39 name=(null) inode=13788 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=40 name=(null) inode=13768 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=41 name=(null) inode=13789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=42 name=(null) inode=13789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=43 name=(null) inode=13790 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=44 name=(null) inode=13789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=45 name=(null) inode=13791 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=46 name=(null) inode=13789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=47 name=(null) inode=13792 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=48 name=(null) inode=13789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=49 name=(null) inode=13793 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=50 name=(null) inode=13789 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=51 name=(null) inode=13794 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=52 name=(null) inode=40 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=53 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=54 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=55 name=(null) inode=13796 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=56 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=57 name=(null) inode=13797 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=58 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=59 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=60 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=61 name=(null) inode=13799 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=62 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=63 name=(null) inode=13800 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=64 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=65 name=(null) inode=13801 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=66 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=67 name=(null) inode=13802 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=68 name=(null) inode=13798 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=69 name=(null) inode=13803 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=70 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=71 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=72 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=73 name=(null) inode=13805 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=74 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=75 name=(null) inode=13806 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=76 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=77 name=(null) inode=13807 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=78 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=79 name=(null) inode=13808 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=80 name=(null) inode=13804 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=81 name=(null) inode=13809 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=82 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=83 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=84 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=85 name=(null) inode=13811 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=86 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=87 name=(null) inode=13812 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=88 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=89 name=(null) inode=13813 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=90 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=91 name=(null) inode=13814 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=92 name=(null) inode=13810 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=93 name=(null) inode=13815 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=94 name=(null) inode=13795 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=95 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=96 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=97 name=(null) inode=13817 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=98 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=99 name=(null) inode=13818 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=100 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=101 name=(null) inode=13819 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=102 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=103 name=(null) inode=13820 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=104 name=(null) inode=13816 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PATH item=105 name=(null) inode=13821 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Oct 2 20:05:39.241000 audit: PROCTITLE proctitle="(udev-worker)" Oct 2 20:05:39.290830 systemd-networkd[1456]: lo: Link UP Oct 2 20:05:39.290842 systemd-networkd[1456]: lo: Gained carrier Oct 2 20:05:39.292000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.291487 systemd-networkd[1456]: Enumeration completed Oct 2 20:05:39.291732 systemd[1]: Started systemd-networkd.service. Oct 2 20:05:39.292021 systemd-networkd[1456]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Oct 2 20:05:39.294942 systemd[1]: Starting systemd-networkd-wait-online.service... Oct 2 20:05:39.307405 kernel: ACPI: button: Sleep Button [SLPF] Oct 2 20:05:39.307516 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Oct 2 20:05:39.310034 systemd-networkd[1456]: eth0: Link UP Oct 2 20:05:39.310450 systemd-networkd[1456]: eth0: Gained carrier Oct 2 20:05:39.328881 systemd-networkd[1456]: eth0: DHCPv4 address 172.31.28.145/20, gateway 172.31.16.1 acquired from 172.31.16.1 Oct 2 20:05:39.332403 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input5 Oct 2 20:05:39.372404 kernel: piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 255 Oct 2 20:05:39.410646 kernel: mousedev: PS/2 mouse device common for all mice Oct 2 20:05:39.449402 kernel: BTRFS info: devid 1 device path /dev/disk/by-label/OEM changed to /dev/nvme0n1p6 scanned by (udev-worker) (1448) Oct 2 20:05:39.564020 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Oct 2 20:05:39.693756 systemd[1]: Finished systemd-udev-settle.service. Oct 2 20:05:39.695000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.697266 systemd[1]: Starting lvm2-activation-early.service... Oct 2 20:05:39.750215 lvm[1557]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:39.785967 systemd[1]: Finished lvm2-activation-early.service. Oct 2 20:05:39.788000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.789159 systemd[1]: Reached target cryptsetup.target. Oct 2 20:05:39.791798 systemd[1]: Starting lvm2-activation.service... Oct 2 20:05:39.797455 lvm[1558]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Oct 2 20:05:39.827716 systemd[1]: Finished lvm2-activation.service. Oct 2 20:05:39.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.828946 systemd[1]: Reached target local-fs-pre.target. Oct 2 20:05:39.830885 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Oct 2 20:05:39.830923 systemd[1]: Reached target local-fs.target. Oct 2 20:05:39.832062 systemd[1]: Reached target machines.target. Oct 2 20:05:39.834670 systemd[1]: Starting ldconfig.service... Oct 2 20:05:39.836673 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.836775 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:39.839043 systemd[1]: Starting systemd-boot-update.service... Oct 2 20:05:39.842998 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Oct 2 20:05:39.846679 systemd[1]: Starting systemd-machine-id-commit.service... Oct 2 20:05:39.848234 systemd[1]: systemd-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.848518 systemd[1]: ensure-sysext.service was skipped because no trigger condition checks were met. Oct 2 20:05:39.850405 systemd[1]: Starting systemd-tmpfiles-setup.service... Oct 2 20:05:39.862197 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1560 (bootctl) Oct 2 20:05:39.864600 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Oct 2 20:05:39.895571 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Oct 2 20:05:39.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:39.977563 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Oct 2 20:05:39.994620 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Oct 2 20:05:40.001811 systemd-tmpfiles[1563]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Oct 2 20:05:40.070532 systemd-fsck[1568]: fsck.fat 4.2 (2021-01-31) Oct 2 20:05:40.070532 systemd-fsck[1568]: /dev/nvme0n1p1: 789 files, 115069/258078 clusters Oct 2 20:05:40.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.073504 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Oct 2 20:05:40.077792 systemd[1]: Mounting boot.mount... Oct 2 20:05:40.113890 systemd[1]: Mounted boot.mount. Oct 2 20:05:40.157824 systemd[1]: Finished systemd-boot-update.service. Oct 2 20:05:40.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.303155 systemd[1]: Finished systemd-tmpfiles-setup.service. Oct 2 20:05:40.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.307078 systemd[1]: Starting audit-rules.service... Oct 2 20:05:40.315669 systemd[1]: Starting clean-ca-certificates.service... Oct 2 20:05:40.318541 systemd[1]: Starting systemd-journal-catalog-update.service... Oct 2 20:05:40.334000 audit: BPF prog-id=30 op=LOAD Oct 2 20:05:40.338000 audit: BPF prog-id=31 op=LOAD Oct 2 20:05:40.336047 systemd[1]: Starting systemd-resolved.service... Oct 2 20:05:40.341176 systemd[1]: Starting systemd-timesyncd.service... Oct 2 20:05:40.345071 systemd[1]: Starting systemd-update-utmp.service... Oct 2 20:05:40.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.357029 systemd[1]: Finished clean-ca-certificates.service. Oct 2 20:05:40.359394 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Oct 2 20:05:40.381000 audit[1587]: SYSTEM_BOOT pid=1587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.391201 systemd[1]: Finished systemd-update-utmp.service. Oct 2 20:05:40.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.533000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:40.533000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Oct 2 20:05:40.533000 audit[1602]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fffc57e89f0 a2=420 a3=0 items=0 ppid=1582 pid=1602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:40.533000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Oct 2 20:05:40.531476 systemd[1]: Finished systemd-journal-catalog-update.service. Oct 2 20:05:40.534996 augenrules[1602]: No rules Oct 2 20:05:40.534976 systemd[1]: Finished audit-rules.service. Oct 2 20:05:40.579419 systemd-resolved[1585]: Positive Trust Anchors: Oct 2 20:05:40.579443 systemd-resolved[1585]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Oct 2 20:05:40.579487 systemd-resolved[1585]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Oct 2 20:05:40.597065 systemd[1]: Started systemd-timesyncd.service. Oct 2 20:05:40.598663 systemd[1]: Reached target time-set.target. Oct 2 20:05:40.633784 systemd-resolved[1585]: Defaulting to hostname 'linux'. Oct 2 20:05:40.636851 systemd[1]: Started systemd-resolved.service. Oct 2 20:05:40.638241 systemd[1]: Reached target network.target. Oct 2 20:05:40.640443 systemd[1]: Reached target nss-lookup.target. Oct 2 20:05:40.803660 systemd-timesyncd[1586]: Contacted time server 173.255.255.133:123 (0.flatcar.pool.ntp.org). Oct 2 20:05:40.803748 systemd-timesyncd[1586]: Initial clock synchronization to Mon 2023-10-02 20:05:40.998193 UTC. Oct 2 20:05:40.886547 systemd-networkd[1456]: eth0: Gained IPv6LL Oct 2 20:05:40.889127 systemd[1]: Finished systemd-networkd-wait-online.service. Oct 2 20:05:40.890772 systemd[1]: Reached target network-online.target. Oct 2 20:05:41.657246 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Oct 2 20:05:41.658546 systemd[1]: Finished systemd-machine-id-commit.service. Oct 2 20:05:41.931874 ldconfig[1559]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Oct 2 20:05:41.938870 systemd[1]: Finished ldconfig.service. Oct 2 20:05:41.942681 systemd[1]: Starting systemd-update-done.service... Oct 2 20:05:41.952618 systemd[1]: Finished systemd-update-done.service. Oct 2 20:05:41.953970 systemd[1]: Reached target sysinit.target. Oct 2 20:05:41.955324 systemd[1]: Started motdgen.path. Oct 2 20:05:41.956535 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Oct 2 20:05:41.959012 systemd[1]: Started logrotate.timer. Oct 2 20:05:41.961750 systemd[1]: Started mdadm.timer. Oct 2 20:05:41.964593 systemd[1]: Started systemd-tmpfiles-clean.timer. Oct 2 20:05:41.966748 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Oct 2 20:05:41.966793 systemd[1]: Reached target paths.target. Oct 2 20:05:41.968135 systemd[1]: Reached target timers.target. Oct 2 20:05:41.973522 systemd[1]: Listening on dbus.socket. Oct 2 20:05:41.977981 systemd[1]: Starting docker.socket... Oct 2 20:05:41.993532 systemd[1]: Listening on sshd.socket. Oct 2 20:05:41.995135 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:41.996054 systemd[1]: Listening on docker.socket. Oct 2 20:05:41.997573 systemd[1]: Reached target sockets.target. Oct 2 20:05:41.999072 systemd[1]: Reached target basic.target. Oct 2 20:05:42.000808 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:42.000903 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Oct 2 20:05:42.003725 systemd[1]: Started amazon-ssm-agent.service. Oct 2 20:05:42.008454 systemd[1]: Starting containerd.service... Oct 2 20:05:42.018308 systemd[1]: Starting coreos-metadata-sshkeys@core.service... Oct 2 20:05:42.022390 systemd[1]: Starting dbus.service... Oct 2 20:05:42.027564 systemd[1]: Starting enable-oem-cloudinit.service... Oct 2 20:05:42.054729 systemd[1]: Starting extend-filesystems.service... Oct 2 20:05:42.056653 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Oct 2 20:05:42.060356 systemd[1]: Starting motdgen.service... Oct 2 20:05:42.063082 systemd[1]: Started nvidia.service. Oct 2 20:05:42.068634 systemd[1]: Starting prepare-cni-plugins.service... Oct 2 20:05:42.074494 systemd[1]: Starting prepare-critools.service... Oct 2 20:05:42.079231 systemd[1]: Starting ssh-key-proc-cmdline.service... Oct 2 20:05:42.083004 systemd[1]: Starting sshd-keygen.service... Oct 2 20:05:42.098844 systemd[1]: Starting systemd-logind.service... Oct 2 20:05:42.101274 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Oct 2 20:05:42.101341 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Oct 2 20:05:42.103104 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Oct 2 20:05:42.183846 jq[1635]: true Oct 2 20:05:42.184054 jq[1625]: false Oct 2 20:05:42.107307 systemd[1]: Starting update-engine.service... Oct 2 20:05:42.134666 systemd[1]: Starting update-ssh-keys-after-ignition.service... Oct 2 20:05:42.156148 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Oct 2 20:05:42.156524 systemd[1]: Finished ssh-key-proc-cmdline.service. Oct 2 20:05:42.162140 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Oct 2 20:05:42.162371 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Oct 2 20:05:42.203424 jq[1643]: true Oct 2 20:05:42.254444 tar[1639]: ./ Oct 2 20:05:42.254444 tar[1639]: ./macvlan Oct 2 20:05:42.276926 tar[1637]: crictl Oct 2 20:05:42.349722 systemd[1]: motdgen.service: Deactivated successfully. Oct 2 20:05:42.349954 systemd[1]: Finished motdgen.service. Oct 2 20:05:42.388979 extend-filesystems[1626]: Found nvme0n1 Oct 2 20:05:42.413970 dbus-daemon[1624]: [system] SELinux support is enabled Oct 2 20:05:42.414837 systemd[1]: Started dbus.service. Oct 2 20:05:42.420189 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Oct 2 20:05:42.420226 systemd[1]: Reached target system-config.target. Oct 2 20:05:42.421741 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Oct 2 20:05:42.421767 systemd[1]: Reached target user-config.target. Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p1 Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p2 Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p3 Oct 2 20:05:42.433663 extend-filesystems[1626]: Found usr Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p4 Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p6 Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p7 Oct 2 20:05:42.433663 extend-filesystems[1626]: Found nvme0n1p9 Oct 2 20:05:42.433663 extend-filesystems[1626]: Checking size of /dev/nvme0n1p9 Oct 2 20:05:42.482129 dbus-daemon[1624]: [system] Activating via systemd: service name='org.freedesktop.hostname1' unit='dbus-org.freedesktop.hostname1.service' requested by ':1.1' (uid=244 pid=1456 comm="/usr/lib/systemd/systemd-networkd" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:42.492781 systemd[1]: Starting systemd-hostnamed.service... Oct 2 20:05:42.512712 extend-filesystems[1626]: Resized partition /dev/nvme0n1p9 Oct 2 20:05:42.536451 amazon-ssm-agent[1621]: 2023/10/02 20:05:42 Failed to load instance info from vault. RegistrationKey does not exist. Oct 2 20:05:42.554108 amazon-ssm-agent[1621]: Initializing new seelog logger Oct 2 20:05:42.558552 amazon-ssm-agent[1621]: New Seelog Logger Creation Complete Oct 2 20:05:42.558806 amazon-ssm-agent[1621]: 2023/10/02 20:05:42 Found config file at /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:42.558885 amazon-ssm-agent[1621]: Applying config override from /etc/amazon/ssm/amazon-ssm-agent.json. Oct 2 20:05:42.559362 amazon-ssm-agent[1621]: 2023/10/02 20:05:42 processing appconfig overrides Oct 2 20:05:42.577333 extend-filesystems[1694]: resize2fs 1.46.5 (30-Dec-2021) Oct 2 20:05:42.578917 bash[1679]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:42.579424 systemd[1]: Finished update-ssh-keys-after-ignition.service. Oct 2 20:05:42.598419 kernel: EXT4-fs (nvme0n1p9): resizing filesystem from 553472 to 1489915 blocks Oct 2 20:05:42.625467 env[1641]: time="2023-10-02T20:05:42.625370778Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Oct 2 20:05:42.687847 kernel: EXT4-fs (nvme0n1p9): resized filesystem to 1489915 Oct 2 20:05:42.713976 update_engine[1634]: I1002 20:05:42.712134 1634 main.cc:92] Flatcar Update Engine starting Oct 2 20:05:42.798616 update_engine[1634]: I1002 20:05:42.720723 1634 update_check_scheduler.cc:74] Next update check in 3m54s Oct 2 20:05:42.720424 systemd[1]: Started update-engine.service. Oct 2 20:05:42.797184 systemd[1]: Started locksmithd.service. Oct 2 20:05:42.798173 systemd-logind[1633]: Watching system buttons on /dev/input/event1 (Power Button) Oct 2 20:05:42.798266 systemd-logind[1633]: Watching system buttons on /dev/input/event2 (Sleep Button) Oct 2 20:05:42.798296 systemd-logind[1633]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Oct 2 20:05:42.809929 systemd-logind[1633]: New seat seat0. Oct 2 20:05:42.813036 systemd[1]: Started systemd-logind.service. Oct 2 20:05:42.817898 extend-filesystems[1694]: Filesystem at /dev/nvme0n1p9 is mounted on /; on-line resizing required Oct 2 20:05:42.817898 extend-filesystems[1694]: old_desc_blocks = 1, new_desc_blocks = 1 Oct 2 20:05:42.817898 extend-filesystems[1694]: The filesystem on /dev/nvme0n1p9 is now 1489915 (4k) blocks long. Oct 2 20:05:42.816830 systemd[1]: extend-filesystems.service: Deactivated successfully. Oct 2 20:05:42.826734 extend-filesystems[1626]: Resized filesystem in /dev/nvme0n1p9 Oct 2 20:05:42.817061 systemd[1]: Finished extend-filesystems.service. Oct 2 20:05:42.882072 tar[1639]: ./static Oct 2 20:05:42.890887 systemd[1]: nvidia.service: Deactivated successfully. Oct 2 20:05:42.937323 env[1641]: time="2023-10-02T20:05:42.937263324Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Oct 2 20:05:42.937693 env[1641]: time="2023-10-02T20:05:42.937670564Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.944680 env[1641]: time="2023-10-02T20:05:42.944628486Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.132-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:42.945270 env[1641]: time="2023-10-02T20:05:42.945243348Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.958691 env[1641]: time="2023-10-02T20:05:42.958640901Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:42.964821 env[1641]: time="2023-10-02T20:05:42.964774555Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.964995 env[1641]: time="2023-10-02T20:05:42.964973826Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Oct 2 20:05:42.965065 env[1641]: time="2023-10-02T20:05:42.965051385Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.965266 env[1641]: time="2023-10-02T20:05:42.965250023Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.966855 env[1641]: time="2023-10-02T20:05:42.966820930Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Oct 2 20:05:42.967220 env[1641]: time="2023-10-02T20:05:42.967194271Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Oct 2 20:05:42.967307 env[1641]: time="2023-10-02T20:05:42.967291908Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Oct 2 20:05:42.967449 env[1641]: time="2023-10-02T20:05:42.967430363Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Oct 2 20:05:42.967526 env[1641]: time="2023-10-02T20:05:42.967512737Z" level=info msg="metadata content store policy set" policy=shared Oct 2 20:05:42.973602 dbus-daemon[1624]: [system] Successfully activated service 'org.freedesktop.hostname1' Oct 2 20:05:42.973793 systemd[1]: Started systemd-hostnamed.service. Oct 2 20:05:42.975700 dbus-daemon[1624]: [system] Activating via systemd: service name='org.freedesktop.PolicyKit1' unit='polkit.service' requested by ':1.6' (uid=0 pid=1686 comm="/usr/lib/systemd/systemd-hostnamed" label="system_u:system_r:kernel_t:s0") Oct 2 20:05:42.980740 systemd[1]: Starting polkit.service... Oct 2 20:05:42.985249 env[1641]: time="2023-10-02T20:05:42.985166702Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Oct 2 20:05:42.985557 env[1641]: time="2023-10-02T20:05:42.985264212Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Oct 2 20:05:42.985557 env[1641]: time="2023-10-02T20:05:42.985302810Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Oct 2 20:05:42.985669 env[1641]: time="2023-10-02T20:05:42.985561431Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985669 env[1641]: time="2023-10-02T20:05:42.985593164Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985669 env[1641]: time="2023-10-02T20:05:42.985614155Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985669 env[1641]: time="2023-10-02T20:05:42.985651920Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985922 env[1641]: time="2023-10-02T20:05:42.985675484Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985922 env[1641]: time="2023-10-02T20:05:42.985713755Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985922 env[1641]: time="2023-10-02T20:05:42.985736206Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985922 env[1641]: time="2023-10-02T20:05:42.985755381Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.985922 env[1641]: time="2023-10-02T20:05:42.985863674Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Oct 2 20:05:42.986115 env[1641]: time="2023-10-02T20:05:42.986050412Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Oct 2 20:05:42.986210 env[1641]: time="2023-10-02T20:05:42.986190648Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Oct 2 20:05:42.986814 env[1641]: time="2023-10-02T20:05:42.986787645Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Oct 2 20:05:42.986890 env[1641]: time="2023-10-02T20:05:42.986834022Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.986890 env[1641]: time="2023-10-02T20:05:42.986870670Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Oct 2 20:05:42.986979 env[1641]: time="2023-10-02T20:05:42.986961999Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987019 env[1641]: time="2023-10-02T20:05:42.986984236Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987094 env[1641]: time="2023-10-02T20:05:42.987075305Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987211 env[1641]: time="2023-10-02T20:05:42.987102102Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987211 env[1641]: time="2023-10-02T20:05:42.987196635Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987301 env[1641]: time="2023-10-02T20:05:42.987221027Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987301 env[1641]: time="2023-10-02T20:05:42.987238621Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987376 env[1641]: time="2023-10-02T20:05:42.987326532Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.987376 env[1641]: time="2023-10-02T20:05:42.987349628Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Oct 2 20:05:42.988103 env[1641]: time="2023-10-02T20:05:42.988079095Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.988170 env[1641]: time="2023-10-02T20:05:42.988113688Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.988170 env[1641]: time="2023-10-02T20:05:42.988150666Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.988267 env[1641]: time="2023-10-02T20:05:42.988170063Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Oct 2 20:05:42.988267 env[1641]: time="2023-10-02T20:05:42.988193776Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Oct 2 20:05:42.988352 env[1641]: time="2023-10-02T20:05:42.988275718Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Oct 2 20:05:42.988352 env[1641]: time="2023-10-02T20:05:42.988301998Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Oct 2 20:05:42.988446 env[1641]: time="2023-10-02T20:05:42.988361929Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Oct 2 20:05:42.989511 env[1641]: time="2023-10-02T20:05:42.989416166Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Oct 2 20:05:42.992834 env[1641]: time="2023-10-02T20:05:42.989525610Z" level=info msg="Connect containerd service" Oct 2 20:05:42.992834 env[1641]: time="2023-10-02T20:05:42.989587287Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Oct 2 20:05:42.994938 env[1641]: time="2023-10-02T20:05:42.994250802Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Oct 2 20:05:42.994938 env[1641]: time="2023-10-02T20:05:42.994612240Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Oct 2 20:05:42.994938 env[1641]: time="2023-10-02T20:05:42.994672247Z" level=info msg=serving... address=/run/containerd/containerd.sock Oct 2 20:05:42.994837 systemd[1]: Started containerd.service. Oct 2 20:05:42.995696 env[1641]: time="2023-10-02T20:05:42.995225250Z" level=info msg="containerd successfully booted in 0.392735s" Oct 2 20:05:42.995696 env[1641]: time="2023-10-02T20:05:42.995640317Z" level=info msg="Start subscribing containerd event" Oct 2 20:05:42.997041 env[1641]: time="2023-10-02T20:05:42.997011158Z" level=info msg="Start recovering state" Oct 2 20:05:42.997227 env[1641]: time="2023-10-02T20:05:42.997207630Z" level=info msg="Start event monitor" Oct 2 20:05:42.997326 env[1641]: time="2023-10-02T20:05:42.997312021Z" level=info msg="Start snapshots syncer" Oct 2 20:05:42.997425 env[1641]: time="2023-10-02T20:05:42.997390395Z" level=info msg="Start cni network conf syncer for default" Oct 2 20:05:42.997524 env[1641]: time="2023-10-02T20:05:42.997510462Z" level=info msg="Start streaming server" Oct 2 20:05:43.018807 polkitd[1738]: Started polkitd version 121 Oct 2 20:05:43.045114 polkitd[1738]: Loading rules from directory /etc/polkit-1/rules.d Oct 2 20:05:43.045201 polkitd[1738]: Loading rules from directory /usr/share/polkit-1/rules.d Oct 2 20:05:43.048442 polkitd[1738]: Finished loading, compiling and executing 2 rules Oct 2 20:05:43.049239 dbus-daemon[1624]: [system] Successfully activated service 'org.freedesktop.PolicyKit1' Oct 2 20:05:43.049466 systemd[1]: Started polkit.service. Oct 2 20:05:43.050302 polkitd[1738]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Oct 2 20:05:43.073246 systemd-hostnamed[1686]: Hostname set to (transient) Oct 2 20:05:43.073373 systemd-resolved[1585]: System hostname changed to 'ip-172-31-28-145'. Oct 2 20:05:43.117682 tar[1639]: ./vlan Oct 2 20:05:43.274538 tar[1639]: ./portmap Oct 2 20:05:43.291594 coreos-metadata[1623]: Oct 02 20:05:43.289 INFO Putting http://169.254.169.254/latest/api/token: Attempt #1 Oct 2 20:05:43.297716 coreos-metadata[1623]: Oct 02 20:05:43.297 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys: Attempt #1 Oct 2 20:05:43.298992 coreos-metadata[1623]: Oct 02 20:05:43.298 INFO Fetch successful Oct 2 20:05:43.299417 coreos-metadata[1623]: Oct 02 20:05:43.299 INFO Fetching http://169.254.169.254/2019-10-01/meta-data/public-keys/0/openssh-key: Attempt #1 Oct 2 20:05:43.300467 coreos-metadata[1623]: Oct 02 20:05:43.300 INFO Fetch successful Oct 2 20:05:43.304221 unknown[1623]: wrote ssh authorized keys file for user: core Oct 2 20:05:43.341166 amazon-ssm-agent[1621]: 2023-10-02 20:05:43 INFO Entering SSM Agent hibernate - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0a6c014b0d5baa06f is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0a6c014b0d5baa06f because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:05:43.341166 amazon-ssm-agent[1621]: status code: 400, request id: 6abf724e-378a-45b2-af24-ac3a2135c53f Oct 2 20:05:43.341166 amazon-ssm-agent[1621]: 2023-10-02 20:05:43 INFO Agent is in hibernate mode. Reducing logging. Logging will be reduced to one log per backoff period Oct 2 20:05:43.381707 update-ssh-keys[1794]: Updated "/home/core/.ssh/authorized_keys" Oct 2 20:05:43.382109 systemd[1]: Finished coreos-metadata-sshkeys@core.service. Oct 2 20:05:43.461766 tar[1639]: ./host-local Oct 2 20:05:43.543028 tar[1639]: ./vrf Oct 2 20:05:43.636383 tar[1639]: ./bridge Oct 2 20:05:43.760749 tar[1639]: ./tuning Oct 2 20:05:43.864100 tar[1639]: ./firewall Oct 2 20:05:43.935899 tar[1639]: ./host-device Oct 2 20:05:43.990418 tar[1639]: ./sbr Oct 2 20:05:44.074936 tar[1639]: ./loopback Oct 2 20:05:44.142240 systemd[1]: Finished prepare-critools.service. Oct 2 20:05:44.150268 tar[1639]: ./dhcp Oct 2 20:05:44.264855 tar[1639]: ./ptp Oct 2 20:05:44.315721 tar[1639]: ./ipvlan Oct 2 20:05:44.362462 tar[1639]: ./bandwidth Oct 2 20:05:44.467080 systemd[1]: Finished prepare-cni-plugins.service. Oct 2 20:05:44.517635 locksmithd[1715]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Oct 2 20:05:44.726499 sshd_keygen[1661]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Oct 2 20:05:44.756598 systemd[1]: Finished sshd-keygen.service. Oct 2 20:05:44.759366 systemd[1]: Starting issuegen.service... Oct 2 20:05:44.766655 systemd[1]: issuegen.service: Deactivated successfully. Oct 2 20:05:44.766823 systemd[1]: Finished issuegen.service. Oct 2 20:05:44.769385 systemd[1]: Starting systemd-user-sessions.service... Oct 2 20:05:44.777368 systemd[1]: Finished systemd-user-sessions.service. Oct 2 20:05:44.780281 systemd[1]: Started getty@tty1.service. Oct 2 20:05:44.782786 systemd[1]: Started serial-getty@ttyS0.service. Oct 2 20:05:44.784264 systemd[1]: Reached target getty.target. Oct 2 20:05:44.785499 systemd[1]: Reached target multi-user.target. Oct 2 20:05:44.788648 systemd[1]: Starting systemd-update-utmp-runlevel.service... Oct 2 20:05:44.799197 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Oct 2 20:05:44.799364 systemd[1]: Finished systemd-update-utmp-runlevel.service. Oct 2 20:05:44.801022 systemd[1]: Startup finished in 880ms (kernel) + 13.402s (initrd) + 12.552s (userspace) = 26.836s. Oct 2 20:05:49.924434 systemd[1]: Created slice system-sshd.slice. Oct 2 20:05:49.926801 systemd[1]: Started sshd@0-172.31.28.145:22-139.178.89.65:54486.service. Oct 2 20:05:50.288192 sshd[1831]: Accepted publickey for core from 139.178.89.65 port 54486 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:50.291848 sshd[1831]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.309526 systemd[1]: Created slice user-500.slice. Oct 2 20:05:50.312583 systemd[1]: Starting user-runtime-dir@500.service... Oct 2 20:05:50.317546 systemd-logind[1633]: New session 1 of user core. Oct 2 20:05:50.330678 systemd[1]: Finished user-runtime-dir@500.service. Oct 2 20:05:50.334133 systemd[1]: Starting user@500.service... Oct 2 20:05:50.343971 (systemd)[1834]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.465729 systemd[1834]: Queued start job for default target default.target. Oct 2 20:05:50.466377 systemd[1834]: Reached target paths.target. Oct 2 20:05:50.466426 systemd[1834]: Reached target sockets.target. Oct 2 20:05:50.466444 systemd[1834]: Reached target timers.target. Oct 2 20:05:50.466460 systemd[1834]: Reached target basic.target. Oct 2 20:05:50.466518 systemd[1834]: Reached target default.target. Oct 2 20:05:50.466560 systemd[1834]: Startup finished in 114ms. Oct 2 20:05:50.467203 systemd[1]: Started user@500.service. Oct 2 20:05:50.468313 systemd[1]: Started session-1.scope. Oct 2 20:05:50.621605 systemd[1]: Started sshd@1-172.31.28.145:22-139.178.89.65:54502.service. Oct 2 20:05:50.791371 sshd[1843]: Accepted publickey for core from 139.178.89.65 port 54502 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:50.794296 sshd[1843]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:50.802688 systemd-logind[1633]: New session 2 of user core. Oct 2 20:05:50.802893 systemd[1]: Started session-2.scope. Oct 2 20:05:50.939057 sshd[1843]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:50.944709 systemd[1]: sshd@1-172.31.28.145:22-139.178.89.65:54502.service: Deactivated successfully. Oct 2 20:05:50.945776 systemd[1]: session-2.scope: Deactivated successfully. Oct 2 20:05:50.946651 systemd-logind[1633]: Session 2 logged out. Waiting for processes to exit. Oct 2 20:05:50.947920 systemd-logind[1633]: Removed session 2. Oct 2 20:05:50.966947 systemd[1]: Started sshd@2-172.31.28.145:22-139.178.89.65:54512.service. Oct 2 20:05:51.132371 sshd[1849]: Accepted publickey for core from 139.178.89.65 port 54512 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.136232 sshd[1849]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.144278 systemd-logind[1633]: New session 3 of user core. Oct 2 20:05:51.145499 systemd[1]: Started session-3.scope. Oct 2 20:05:51.265406 sshd[1849]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:51.269130 systemd[1]: sshd@2-172.31.28.145:22-139.178.89.65:54512.service: Deactivated successfully. Oct 2 20:05:51.269980 systemd[1]: session-3.scope: Deactivated successfully. Oct 2 20:05:51.270859 systemd-logind[1633]: Session 3 logged out. Waiting for processes to exit. Oct 2 20:05:51.272213 systemd-logind[1633]: Removed session 3. Oct 2 20:05:51.290966 systemd[1]: Started sshd@3-172.31.28.145:22-139.178.89.65:54524.service. Oct 2 20:05:51.449724 sshd[1855]: Accepted publickey for core from 139.178.89.65 port 54524 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.451485 sshd[1855]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.458301 systemd[1]: Started session-4.scope. Oct 2 20:05:51.459065 systemd-logind[1633]: New session 4 of user core. Oct 2 20:05:51.584982 sshd[1855]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:51.588787 systemd[1]: sshd@3-172.31.28.145:22-139.178.89.65:54524.service: Deactivated successfully. Oct 2 20:05:51.590190 systemd[1]: session-4.scope: Deactivated successfully. Oct 2 20:05:51.591007 systemd-logind[1633]: Session 4 logged out. Waiting for processes to exit. Oct 2 20:05:51.591899 systemd-logind[1633]: Removed session 4. Oct 2 20:05:51.610794 systemd[1]: Started sshd@4-172.31.28.145:22-139.178.89.65:54534.service. Oct 2 20:05:51.772231 sshd[1861]: Accepted publickey for core from 139.178.89.65 port 54534 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:51.773682 sshd[1861]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:51.779778 systemd[1]: Started session-5.scope. Oct 2 20:05:51.780452 systemd-logind[1633]: New session 5 of user core. Oct 2 20:05:51.992586 sudo[1864]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Oct 2 20:05:51.992895 sudo[1864]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:52.001638 dbus-daemon[1624]: Э\xe6d6V: received setenforce notice (enforcing=-145090032) Oct 2 20:05:52.003784 sudo[1864]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:52.028246 sshd[1861]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:52.032582 systemd[1]: sshd@4-172.31.28.145:22-139.178.89.65:54534.service: Deactivated successfully. Oct 2 20:05:52.033738 systemd[1]: session-5.scope: Deactivated successfully. Oct 2 20:05:52.034438 systemd-logind[1633]: Session 5 logged out. Waiting for processes to exit. Oct 2 20:05:52.037796 systemd-logind[1633]: Removed session 5. Oct 2 20:05:52.060081 systemd[1]: Started sshd@5-172.31.28.145:22-139.178.89.65:54546.service. Oct 2 20:05:52.229617 sshd[1868]: Accepted publickey for core from 139.178.89.65 port 54546 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:52.231475 sshd[1868]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:52.239071 systemd[1]: Started session-6.scope. Oct 2 20:05:52.240007 systemd-logind[1633]: New session 6 of user core. Oct 2 20:05:52.352133 sudo[1872]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Oct 2 20:05:52.352512 sudo[1872]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:52.356897 sudo[1872]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:52.365841 sudo[1871]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Oct 2 20:05:52.366209 sudo[1871]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:52.384680 systemd[1]: Stopping audit-rules.service... Oct 2 20:05:52.385000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:52.388766 kernel: kauditd_printk_skb: 187 callbacks suppressed Oct 2 20:05:52.388862 kernel: audit: type=1305 audit(1696277152.385:169): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Oct 2 20:05:52.388896 auditctl[1875]: No rules Oct 2 20:05:52.389594 systemd[1]: audit-rules.service: Deactivated successfully. Oct 2 20:05:52.389806 systemd[1]: Stopped audit-rules.service. Oct 2 20:05:52.393188 systemd[1]: Starting audit-rules.service... Oct 2 20:05:52.385000 audit[1875]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe453770b0 a2=420 a3=0 items=0 ppid=1 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.409513 kernel: audit: type=1300 audit(1696277152.385:169): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe453770b0 a2=420 a3=0 items=0 ppid=1 pid=1875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.409677 kernel: audit: type=1327 audit(1696277152.385:169): proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:52.385000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Oct 2 20:05:52.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.416871 kernel: audit: type=1131 audit(1696277152.388:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.427809 augenrules[1892]: No rules Oct 2 20:05:52.427000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.428875 systemd[1]: Finished audit-rules.service. Oct 2 20:05:52.436045 sudo[1871]: pam_unix(sudo:session): session closed for user root Oct 2 20:05:52.439423 kernel: audit: type=1130 audit(1696277152.427:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.439520 kernel: audit: type=1106 audit(1696277152.434:172): pid=1871 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.434000 audit[1871]: USER_END pid=1871 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.434000 audit[1871]: CRED_DISP pid=1871 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.449417 kernel: audit: type=1104 audit(1696277152.434:173): pid=1871 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.461030 sshd[1868]: pam_unix(sshd:session): session closed for user core Oct 2 20:05:52.462000 audit[1868]: USER_END pid=1868 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.465191 systemd[1]: sshd@5-172.31.28.145:22-139.178.89.65:54546.service: Deactivated successfully. Oct 2 20:05:52.466474 systemd[1]: session-6.scope: Deactivated successfully. Oct 2 20:05:52.468689 systemd-logind[1633]: Session 6 logged out. Waiting for processes to exit. Oct 2 20:05:52.470293 systemd-logind[1633]: Removed session 6. Oct 2 20:05:52.462000 audit[1868]: CRED_DISP pid=1868 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.477644 kernel: audit: type=1106 audit(1696277152.462:174): pid=1868 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.477784 kernel: audit: type=1104 audit(1696277152.462:175): pid=1868 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.477824 kernel: audit: type=1131 audit(1696277152.465:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.145:22-139.178.89.65:54546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-172.31.28.145:22-139.178.89.65:54546 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.505632 systemd[1]: Started sshd@6-172.31.28.145:22-139.178.89.65:54558.service. Oct 2 20:05:52.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.145:22-139.178.89.65:54558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.677000 audit[1898]: USER_ACCT pid=1898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.679010 sshd[1898]: Accepted publickey for core from 139.178.89.65 port 54558 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:05:52.680000 audit[1898]: CRED_ACQ pid=1898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.680000 audit[1898]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcf600110 a2=3 a3=0 items=0 ppid=1 pid=1898 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:52.680000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:05:52.681013 sshd[1898]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:05:52.686779 systemd[1]: Started session-7.scope. Oct 2 20:05:52.687262 systemd-logind[1633]: New session 7 of user core. Oct 2 20:05:52.696000 audit[1898]: USER_START pid=1898 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.696000 audit[1900]: CRED_ACQ pid=1900 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:05:52.788000 audit[1901]: USER_ACCT pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.790219 sudo[1901]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Oct 2 20:05:52.788000 audit[1901]: CRED_REFR pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:52.790639 sudo[1901]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Oct 2 20:05:52.791000 audit[1901]: USER_START pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:05:53.424882 systemd[1]: Starting docker.service... Oct 2 20:05:53.469898 env[1916]: time="2023-10-02T20:05:53.469835023Z" level=info msg="Starting up" Oct 2 20:05:53.471289 env[1916]: time="2023-10-02T20:05:53.471248782Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:53.471289 env[1916]: time="2023-10-02T20:05:53.471271824Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:53.471462 env[1916]: time="2023-10-02T20:05:53.471294458Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:53.471462 env[1916]: time="2023-10-02T20:05:53.471309735Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:53.473335 env[1916]: time="2023-10-02T20:05:53.473298783Z" level=info msg="parsed scheme: \"unix\"" module=grpc Oct 2 20:05:53.473335 env[1916]: time="2023-10-02T20:05:53.473321848Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Oct 2 20:05:53.473919 env[1916]: time="2023-10-02T20:05:53.473342779Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Oct 2 20:05:53.473919 env[1916]: time="2023-10-02T20:05:53.473355089Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Oct 2 20:05:53.481051 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport633957060-merged.mount: Deactivated successfully. Oct 2 20:05:53.529864 env[1916]: time="2023-10-02T20:05:53.529817934Z" level=info msg="Loading containers: start." Oct 2 20:05:53.618000 audit[1946]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1946 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.618000 audit[1946]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffd779f8df0 a2=0 a3=7ffd779f8ddc items=0 ppid=1916 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.618000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Oct 2 20:05:53.620000 audit[1948]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1948 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.620000 audit[1948]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff0de1f780 a2=0 a3=7fff0de1f76c items=0 ppid=1916 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.620000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Oct 2 20:05:53.623000 audit[1950]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1950 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.623000 audit[1950]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffca2bac360 a2=0 a3=7ffca2bac34c items=0 ppid=1916 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:53.626000 audit[1952]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1952 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.626000 audit[1952]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc072c7520 a2=0 a3=7ffc072c750c items=0 ppid=1916 pid=1952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.626000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:53.629000 audit[1954]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1954 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.629000 audit[1954]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffebd80ccf0 a2=0 a3=7ffebd80ccdc items=0 ppid=1916 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.629000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Oct 2 20:05:53.646000 audit[1959]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1959 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.646000 audit[1959]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdac340c70 a2=0 a3=7ffdac340c5c items=0 ppid=1916 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.646000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Oct 2 20:05:53.658000 audit[1961]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1961 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.658000 audit[1961]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe49fde090 a2=0 a3=7ffe49fde07c items=0 ppid=1916 pid=1961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.658000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Oct 2 20:05:53.661000 audit[1963]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1963 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.661000 audit[1963]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffd1997e570 a2=0 a3=7ffd1997e55c items=0 ppid=1916 pid=1963 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.661000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Oct 2 20:05:53.664000 audit[1965]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1965 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.664000 audit[1965]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe392f9fe0 a2=0 a3=7ffe392f9fcc items=0 ppid=1916 pid=1965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.664000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.678000 audit[1969]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1969 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.678000 audit[1969]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe5c97ceb0 a2=0 a3=7ffe5c97ce9c items=0 ppid=1916 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.678000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.680000 audit[1970]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1970 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.680000 audit[1970]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcaa6556c0 a2=0 a3=7ffcaa6556ac items=0 ppid=1916 pid=1970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.680000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:53.695044 kernel: Initializing XFRM netlink socket Oct 2 20:05:53.850272 env[1916]: time="2023-10-02T20:05:53.850217272Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Oct 2 20:05:53.852568 (udev-worker)[1926]: Network interface NamePolicy= disabled on kernel command line. Oct 2 20:05:53.897000 audit[1978]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1978 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:53.897000 audit[1978]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffd9cf03a30 a2=0 a3=7ffd9cf03a1c items=0 ppid=1916 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:53.897000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Oct 2 20:05:54.013000 audit[1981]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1981 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.013000 audit[1981]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdb10cb2d0 a2=0 a3=7ffdb10cb2bc items=0 ppid=1916 pid=1981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.013000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Oct 2 20:05:54.027000 audit[1984]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1984 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.027000 audit[1984]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffef0c78780 a2=0 a3=7ffef0c7876c items=0 ppid=1916 pid=1984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.027000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:54.030000 audit[1986]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1986 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.030000 audit[1986]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffcd17ae060 a2=0 a3=7ffcd17ae04c items=0 ppid=1916 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.030000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Oct 2 20:05:54.033000 audit[1988]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1988 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.033000 audit[1988]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffd2c07dc90 a2=0 a3=7ffd2c07dc7c items=0 ppid=1916 pid=1988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.033000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Oct 2 20:05:54.036000 audit[1990]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1990 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.036000 audit[1990]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffde75a2ae0 a2=0 a3=7ffde75a2acc items=0 ppid=1916 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.036000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Oct 2 20:05:54.039000 audit[1992]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1992 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.039000 audit[1992]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc608d4100 a2=0 a3=7ffc608d40ec items=0 ppid=1916 pid=1992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.039000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Oct 2 20:05:54.053000 audit[1995]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1995 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.053000 audit[1995]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe57b785b0 a2=0 a3=7ffe57b7859c items=0 ppid=1916 pid=1995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.053000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Oct 2 20:05:54.057000 audit[1997]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1997 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.057000 audit[1997]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffcd795eae0 a2=0 a3=7ffcd795eacc items=0 ppid=1916 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.057000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Oct 2 20:05:54.060000 audit[1999]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1999 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.060000 audit[1999]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7fff69d518c0 a2=0 a3=7fff69d518ac items=0 ppid=1916 pid=1999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.060000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Oct 2 20:05:54.062000 audit[2001]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=2001 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.062000 audit[2001]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc9ab68ae0 a2=0 a3=7ffc9ab68acc items=0 ppid=1916 pid=2001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.062000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Oct 2 20:05:54.063747 systemd-networkd[1456]: docker0: Link UP Oct 2 20:05:54.077000 audit[2005]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=2005 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.077000 audit[2005]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd80d11e40 a2=0 a3=7ffd80d11e2c items=0 ppid=1916 pid=2005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.077000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:54.078000 audit[2006]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=2006 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:05:54.078000 audit[2006]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe3ab72e40 a2=0 a3=7ffe3ab72e2c items=0 ppid=1916 pid=2006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:05:54.078000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Oct 2 20:05:54.079859 env[1916]: time="2023-10-02T20:05:54.079824148Z" level=info msg="Loading containers: done." Oct 2 20:05:54.112226 env[1916]: time="2023-10-02T20:05:54.112172928Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Oct 2 20:05:54.113474 env[1916]: time="2023-10-02T20:05:54.113404805Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Oct 2 20:05:54.113571 env[1916]: time="2023-10-02T20:05:54.113549060Z" level=info msg="Daemon has completed initialization" Oct 2 20:05:54.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:54.149773 systemd[1]: Started docker.service. Oct 2 20:05:54.164264 env[1916]: time="2023-10-02T20:05:54.164190648Z" level=info msg="API listen on /run/docker.sock" Oct 2 20:05:54.191826 systemd[1]: Reloading. Oct 2 20:05:54.309849 /usr/lib/systemd/system-generators/torcx-generator[2054]: time="2023-10-02T20:05:54Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:05:54.309887 /usr/lib/systemd/system-generators/torcx-generator[2054]: time="2023-10-02T20:05:54Z" level=info msg="torcx already run" Oct 2 20:05:54.458581 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:05:54.458604 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:05:54.479159 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit: BPF prog-id=40 op=LOAD Oct 2 20:05:54.567000 audit: BPF prog-id=21 op=UNLOAD Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit: BPF prog-id=41 op=LOAD Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit: BPF prog-id=42 op=LOAD Oct 2 20:05:54.567000 audit: BPF prog-id=22 op=UNLOAD Oct 2 20:05:54.567000 audit: BPF prog-id=23 op=UNLOAD Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.568000 audit: BPF prog-id=43 op=LOAD Oct 2 20:05:54.568000 audit: BPF prog-id=26 op=UNLOAD Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit: BPF prog-id=44 op=LOAD Oct 2 20:05:54.572000 audit: BPF prog-id=32 op=UNLOAD Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit: BPF prog-id=45 op=LOAD Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.572000 audit: BPF prog-id=46 op=LOAD Oct 2 20:05:54.572000 audit: BPF prog-id=33 op=UNLOAD Oct 2 20:05:54.572000 audit: BPF prog-id=34 op=UNLOAD Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.575000 audit: BPF prog-id=47 op=LOAD Oct 2 20:05:54.575000 audit: BPF prog-id=31 op=UNLOAD Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit: BPF prog-id=48 op=LOAD Oct 2 20:05:54.576000 audit: BPF prog-id=27 op=UNLOAD Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit: BPF prog-id=49 op=LOAD Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit: BPF prog-id=50 op=LOAD Oct 2 20:05:54.577000 audit: BPF prog-id=28 op=UNLOAD Oct 2 20:05:54.577000 audit: BPF prog-id=29 op=UNLOAD Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.577000 audit: BPF prog-id=51 op=LOAD Oct 2 20:05:54.577000 audit: BPF prog-id=38 op=UNLOAD Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.578000 audit: BPF prog-id=52 op=LOAD Oct 2 20:05:54.579000 audit: BPF prog-id=30 op=UNLOAD Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit: BPF prog-id=53 op=LOAD Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.580000 audit: BPF prog-id=54 op=LOAD Oct 2 20:05:54.580000 audit: BPF prog-id=24 op=UNLOAD Oct 2 20:05:54.580000 audit: BPF prog-id=25 op=UNLOAD Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit: BPF prog-id=55 op=LOAD Oct 2 20:05:54.581000 audit: BPF prog-id=35 op=UNLOAD Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit: BPF prog-id=56 op=LOAD Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:05:54.581000 audit: BPF prog-id=57 op=LOAD Oct 2 20:05:54.581000 audit: BPF prog-id=36 op=UNLOAD Oct 2 20:05:54.581000 audit: BPF prog-id=37 op=UNLOAD Oct 2 20:05:54.597513 systemd[1]: Started kubelet.service. Oct 2 20:05:54.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:05:54.690436 kubelet[2105]: E1002 20:05:54.690354 2105 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:05:54.697000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:05:54.698911 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:05:54.699078 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:05:55.630071 env[1641]: time="2023-10-02T20:05:55.630027735Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\"" Oct 2 20:05:56.299317 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2790800002.mount: Deactivated successfully. Oct 2 20:06:00.489967 env[1641]: time="2023-10-02T20:06:00.489910845Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.507953 env[1641]: time="2023-10-02T20:06:00.507905115Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.522898 env[1641]: time="2023-10-02T20:06:00.522822636Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.542601 env[1641]: time="2023-10-02T20:06:00.542489561Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:5f354253b464a8802ce01ffdd1bb8d0d17785daca4b6c8b84df06e9949e21449,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:00.543129 env[1641]: time="2023-10-02T20:06:00.543088869Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.26.9\" returns image reference \"sha256:6c52a40ca2c2b6ae662714743a505c761236790f8bfce772fc577c3c965462d2\"" Oct 2 20:06:00.557361 env[1641]: time="2023-10-02T20:06:00.557329096Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\"" Oct 2 20:06:04.868398 env[1641]: time="2023-10-02T20:06:04.868341128Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.872352 env[1641]: time="2023-10-02T20:06:04.872308012Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.875413 env[1641]: time="2023-10-02T20:06:04.875354159Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.878112 env[1641]: time="2023-10-02T20:06:04.878067097Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:27bf12cdfcccc8893cd66e4573044ec46fb05964a02f67b3e1a59f66db7ee101,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:04.879136 env[1641]: time="2023-10-02T20:06:04.879095588Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.26.9\" returns image reference \"sha256:139e76b0f613cb0698b528828be26fb99b86eb7374a2372b3ff41657e2e24c7c\"" Oct 2 20:06:04.894452 env[1641]: time="2023-10-02T20:06:04.894390440Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\"" Oct 2 20:06:04.936163 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Oct 2 20:06:04.936477 systemd[1]: Stopped kubelet.service. Oct 2 20:06:04.945801 kernel: kauditd_printk_skb: 292 callbacks suppressed Oct 2 20:06:04.945961 kernel: audit: type=1130 audit(1696277164.936:419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.936000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.938931 systemd[1]: Started kubelet.service. Oct 2 20:06:04.952415 kernel: audit: type=1131 audit(1696277164.936:420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.936000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:04.965528 kernel: audit: type=1130 audit(1696277164.938:421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:05.026259 kubelet[2135]: E1002 20:06:05.026202 2135 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:06:05.031293 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:05.031455 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:05.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:05.037409 kernel: audit: type=1131 audit(1696277165.030:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:07.262967 env[1641]: time="2023-10-02T20:06:07.262895454Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:07.268205 env[1641]: time="2023-10-02T20:06:07.268062808Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:07.270666 env[1641]: time="2023-10-02T20:06:07.270615396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:07.273491 env[1641]: time="2023-10-02T20:06:07.273443992Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:cf0312a97893a0ff42b2863cdb43243afc6397c77f2f2036a73708069e9af315,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:07.274556 env[1641]: time="2023-10-02T20:06:07.274511234Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.26.9\" returns image reference \"sha256:93796172d009be2c7ea43f869773c64826626d7f09a926298e9a046781b30999\"" Oct 2 20:06:07.289111 env[1641]: time="2023-10-02T20:06:07.288981820Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\"" Oct 2 20:06:08.592278 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount382087229.mount: Deactivated successfully. Oct 2 20:06:09.266444 env[1641]: time="2023-10-02T20:06:09.266389250Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.272388 env[1641]: time="2023-10-02T20:06:09.272325762Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.275243 env[1641]: time="2023-10-02T20:06:09.275197888Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.26.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.277375 env[1641]: time="2023-10-02T20:06:09.277318740Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:d8c8e3e8fe630c3f2d84a22722d4891343196483ac4cc02c1ba9345b1bfc8a3d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.278005 env[1641]: time="2023-10-02T20:06:09.277967445Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.26.9\" returns image reference \"sha256:95433ef6ee1d55f93a09fe73299b8b95f623d791acd4da21a86bb749626df9ad\"" Oct 2 20:06:09.289020 env[1641]: time="2023-10-02T20:06:09.288982106Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\"" Oct 2 20:06:09.849678 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1160287483.mount: Deactivated successfully. Oct 2 20:06:09.864202 env[1641]: time="2023-10-02T20:06:09.864145399Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.869846 env[1641]: time="2023-10-02T20:06:09.869784873Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.872488 env[1641]: time="2023-10-02T20:06:09.872433653Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.874636 env[1641]: time="2023-10-02T20:06:09.874578321Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:7031c1b283388d2c2e09b57badb803c05ebed362dc88d84b480cc47f72a21097,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:09.875365 env[1641]: time="2023-10-02T20:06:09.875327782Z" level=info msg="PullImage \"registry.k8s.io/pause:3.9\" returns image reference \"sha256:e6f1816883972d4be47bd48879a08919b96afcd344132622e4d444987919323c\"" Oct 2 20:06:09.887056 env[1641]: time="2023-10-02T20:06:09.887009448Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\"" Oct 2 20:06:10.948511 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount175387421.mount: Deactivated successfully. Oct 2 20:06:13.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.089563 kernel: audit: type=1131 audit(1696277173.080:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:13.081659 systemd[1]: systemd-hostnamed.service: Deactivated successfully. Oct 2 20:06:13.113150 kernel: audit: type=1334 audit(1696277173.105:424): prog-id=57 op=UNLOAD Oct 2 20:06:13.113521 kernel: audit: type=1334 audit(1696277173.105:425): prog-id=56 op=UNLOAD Oct 2 20:06:13.105000 audit: BPF prog-id=57 op=UNLOAD Oct 2 20:06:13.105000 audit: BPF prog-id=56 op=UNLOAD Oct 2 20:06:13.105000 audit: BPF prog-id=55 op=UNLOAD Oct 2 20:06:13.117543 kernel: audit: type=1334 audit(1696277173.105:426): prog-id=55 op=UNLOAD Oct 2 20:06:15.204174 kernel: audit: type=1130 audit(1696277175.185:427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:15.204335 kernel: audit: type=1131 audit(1696277175.185:428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:15.204406 kernel: audit: type=1130 audit(1696277175.192:429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:15.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:15.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:15.192000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:15.186217 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Oct 2 20:06:15.186512 systemd[1]: Stopped kubelet.service. Oct 2 20:06:15.193425 systemd[1]: Started kubelet.service. Oct 2 20:06:15.329473 kubelet[2160]: E1002 20:06:15.329416 2160 run.go:74] "command failed" err="failed to validate kubelet flags: the container runtime endpoint address was not specified or empty, use --container-runtime-endpoint to set" Oct 2 20:06:15.332000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:15.339861 kernel: audit: type=1131 audit(1696277175.332:430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Oct 2 20:06:15.333105 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Oct 2 20:06:15.333291 systemd[1]: kubelet.service: Failed with result 'exit-code'. Oct 2 20:06:15.857965 env[1641]: time="2023-10-02T20:06:15.857902118Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:15.860774 env[1641]: time="2023-10-02T20:06:15.860715024Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:15.863537 env[1641]: time="2023-10-02T20:06:15.863481115Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.6-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:15.867589 env[1641]: time="2023-10-02T20:06:15.867528879Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:dd75ec974b0a2a6f6bb47001ba09207976e625db898d1b16735528c009cb171c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:15.868753 env[1641]: time="2023-10-02T20:06:15.868713374Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.6-0\" returns image reference \"sha256:fce326961ae2d51a5f726883fd59d2a8c2ccc3e45d3bb859882db58e422e59e7\"" Oct 2 20:06:15.891896 env[1641]: time="2023-10-02T20:06:15.891857546Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\"" Oct 2 20:06:16.486284 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3994497827.mount: Deactivated successfully. Oct 2 20:06:17.347594 env[1641]: time="2023-10-02T20:06:17.347545781Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:17.350651 env[1641]: time="2023-10-02T20:06:17.350602510Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:17.353210 env[1641]: time="2023-10-02T20:06:17.353155802Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.9.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:17.355651 env[1641]: time="2023-10-02T20:06:17.355598048Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:8e352a029d304ca7431c6507b56800636c321cb52289686a581ab70aaa8a2e2a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:17.356241 env[1641]: time="2023-10-02T20:06:17.356205945Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.9.3\" returns image reference \"sha256:5185b96f0becf59032b8e3646e99f84d9655dff3ac9e2605e0dc77f9c441ae4a\"" Oct 2 20:06:19.989305 systemd[1]: Stopped kubelet.service. Oct 2 20:06:19.989000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:19.989000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:20.000064 kernel: audit: type=1130 audit(1696277179.989:431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:20.000186 kernel: audit: type=1131 audit(1696277179.989:432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:20.012929 systemd[1]: Reloading. Oct 2 20:06:20.102134 /usr/lib/systemd/system-generators/torcx-generator[2248]: time="2023-10-02T20:06:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:20.102175 /usr/lib/systemd/system-generators/torcx-generator[2248]: time="2023-10-02T20:06:20Z" level=info msg="torcx already run" Oct 2 20:06:20.213088 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:20.213112 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:20.233869 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.330617 kernel: audit: type=1400 audit(1696277180.321:433): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.330743 kernel: audit: type=1400 audit(1696277180.321:434): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.330769 kernel: audit: type=1400 audit(1696277180.321:435): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.341464 kernel: audit: type=1400 audit(1696277180.321:436): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.341599 kernel: audit: type=1400 audit(1696277180.321:437): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.350496 kernel: audit: type=1400 audit(1696277180.321:438): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.350621 kernel: audit: type=1400 audit(1696277180.321:439): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354979 kernel: audit: type=1400 audit(1696277180.321:440): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.321000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit: BPF prog-id=58 op=LOAD Oct 2 20:06:20.325000 audit: BPF prog-id=40 op=UNLOAD Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.325000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit: BPF prog-id=59 op=LOAD Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit: BPF prog-id=60 op=LOAD Oct 2 20:06:20.345000 audit: BPF prog-id=41 op=UNLOAD Oct 2 20:06:20.345000 audit: BPF prog-id=42 op=UNLOAD Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit: BPF prog-id=61 op=LOAD Oct 2 20:06:20.354000 audit: BPF prog-id=43 op=UNLOAD Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit: BPF prog-id=62 op=LOAD Oct 2 20:06:20.360000 audit: BPF prog-id=44 op=UNLOAD Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit: BPF prog-id=63 op=LOAD Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.360000 audit: BPF prog-id=64 op=LOAD Oct 2 20:06:20.360000 audit: BPF prog-id=45 op=UNLOAD Oct 2 20:06:20.360000 audit: BPF prog-id=46 op=UNLOAD Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.362000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit: BPF prog-id=65 op=LOAD Oct 2 20:06:20.363000 audit: BPF prog-id=47 op=UNLOAD Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit: BPF prog-id=66 op=LOAD Oct 2 20:06:20.363000 audit: BPF prog-id=48 op=UNLOAD Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.363000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit: BPF prog-id=67 op=LOAD Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit: BPF prog-id=68 op=LOAD Oct 2 20:06:20.364000 audit: BPF prog-id=49 op=UNLOAD Oct 2 20:06:20.364000 audit: BPF prog-id=50 op=UNLOAD Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.364000 audit: BPF prog-id=69 op=LOAD Oct 2 20:06:20.365000 audit: BPF prog-id=51 op=UNLOAD Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.365000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.366000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.366000 audit: BPF prog-id=70 op=LOAD Oct 2 20:06:20.366000 audit: BPF prog-id=52 op=UNLOAD Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit: BPF prog-id=71 op=LOAD Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:20.367000 audit: BPF prog-id=72 op=LOAD Oct 2 20:06:20.367000 audit: BPF prog-id=53 op=UNLOAD Oct 2 20:06:20.367000 audit: BPF prog-id=54 op=UNLOAD Oct 2 20:06:20.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:20.389471 systemd[1]: Started kubelet.service. Oct 2 20:06:20.458223 kubelet[2301]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:20.458223 kubelet[2301]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:20.458712 kubelet[2301]: I1002 20:06:20.458308 2301 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:20.462069 kubelet[2301]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:20.462069 kubelet[2301]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:21.130476 kubelet[2301]: I1002 20:06:21.130440 2301 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:06:21.130476 kubelet[2301]: I1002 20:06:21.130468 2301 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:21.130784 kubelet[2301]: I1002 20:06:21.130757 2301 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:06:21.135569 kubelet[2301]: E1002 20:06:21.135543 2301 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.28.145:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.135800 kubelet[2301]: I1002 20:06:21.135784 2301 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:21.137964 kubelet[2301]: I1002 20:06:21.137929 2301 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:21.138187 kubelet[2301]: I1002 20:06:21.138171 2301 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:21.138287 kubelet[2301]: I1002 20:06:21.138266 2301 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:} {Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:06:21.138443 kubelet[2301]: I1002 20:06:21.138300 2301 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:06:21.138443 kubelet[2301]: I1002 20:06:21.138317 2301 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:06:21.138535 kubelet[2301]: I1002 20:06:21.138469 2301 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:21.146115 kubelet[2301]: I1002 20:06:21.146094 2301 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:06:21.146270 kubelet[2301]: I1002 20:06:21.146263 2301 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:21.146350 kubelet[2301]: I1002 20:06:21.146344 2301 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:06:21.146438 kubelet[2301]: I1002 20:06:21.146429 2301 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:21.147223 kubelet[2301]: I1002 20:06:21.147202 2301 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:21.147555 kubelet[2301]: W1002 20:06:21.147539 2301 probe.go:268] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Oct 2 20:06:21.148016 kubelet[2301]: I1002 20:06:21.147996 2301 server.go:1186] "Started kubelet" Oct 2 20:06:21.148210 kubelet[2301]: W1002 20:06:21.148166 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.28.145:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-145&limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.148278 kubelet[2301]: E1002 20:06:21.148227 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.145:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-145&limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.153097 kubelet[2301]: W1002 20:06:21.153051 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.28.145:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.153292 kubelet[2301]: E1002 20:06:21.153279 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.145:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.153571 kubelet[2301]: E1002 20:06:21.153439 2301 event.go:276] Unable to write event: '&v1.Event{TypeMeta:v1.TypeMeta{Kind:"", APIVersion:""}, ObjectMeta:v1.ObjectMeta{Name:"ip-172-31-28-145.178a631be6ecf7b2", GenerateName:"", Namespace:"default", SelfLink:"", UID:"", ResourceVersion:"", Generation:0, CreationTimestamp:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string(nil), Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, InvolvedObject:v1.ObjectReference{Kind:"Node", Namespace:"", Name:"ip-172-31-28-145", UID:"ip-172-31-28-145", APIVersion:"", ResourceVersion:"", FieldPath:""}, Reason:"Starting", Message:"Starting kubelet.", Source:v1.EventSource{Component:"kubelet", Host:"ip-172-31-28-145"}, FirstTimestamp:time.Date(2023, time.October, 2, 20, 6, 21, 147969458, time.Local), LastTimestamp:time.Date(2023, time.October, 2, 20, 6, 21, 147969458, time.Local), Count:1, Type:"Normal", EventTime:time.Date(1, time.January, 1, 0, 0, 0, 0, time.UTC), Series:(*v1.EventSeries)(nil), Action:"", Related:(*v1.ObjectReference)(nil), ReportingController:"", ReportingInstance:""}': 'Post "https://172.31.28.145:6443/api/v1/namespaces/default/events": dial tcp 172.31.28.145:6443: connect: connection refused'(may retry after sleeping) Oct 2 20:06:21.153916 kubelet[2301]: E1002 20:06:21.153900 2301 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:21.154029 kubelet[2301]: E1002 20:06:21.154020 2301 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:21.154955 kubelet[2301]: I1002 20:06:21.154937 2301 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:21.153000 audit[2301]: AVC avc: denied { mac_admin } for pid=2301 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:21.153000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:21.153000 audit[2301]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c273b0 a1=c0007e2d68 a2=c000c27380 a3=25 items=0 ppid=1 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.153000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:21.156021 kubelet[2301]: I1002 20:06:21.155052 2301 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:21.154000 audit[2301]: AVC avc: denied { mac_admin } for pid=2301 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:21.154000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:21.154000 audit[2301]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ceac80 a1=c0007e2e40 a2=c000c27440 a3=25 items=0 ppid=1 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.154000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:21.156347 kubelet[2301]: I1002 20:06:21.156084 2301 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:21.156347 kubelet[2301]: I1002 20:06:21.156203 2301 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:21.156849 kubelet[2301]: I1002 20:06:21.156827 2301 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:06:21.161299 kubelet[2301]: E1002 20:06:21.160831 2301 kubelet_node_status.go:458] "Error getting the current node from lister" err="node \"ip-172-31-28-145\" not found" Oct 2 20:06:21.161299 kubelet[2301]: I1002 20:06:21.161204 2301 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:06:21.161523 kubelet[2301]: I1002 20:06:21.161315 2301 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:06:21.159000 audit[2311]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.159000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff819a0ef0 a2=0 a3=7fff819a0edc items=0 ppid=2301 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.159000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:21.162118 kubelet[2301]: E1002 20:06:21.162093 2301 controller.go:146] failed to ensure lease exists, will retry in 200ms, error: Get "https://172.31.28.145:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-145?timeout=10s": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.162325 kubelet[2301]: W1002 20:06:21.162280 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.28.145:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.162417 kubelet[2301]: E1002 20:06:21.162329 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.28.145:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.163000 audit[2312]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.163000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4ecbe350 a2=0 a3=7fff4ecbe33c items=0 ppid=2301 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.163000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:21.167000 audit[2314]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.167000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffffb147530 a2=0 a3=7ffffb14751c items=0 ppid=2301 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:21.170000 audit[2316]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=2316 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.170000 audit[2316]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff7a34e460 a2=0 a3=7fff7a34e44c items=0 ppid=2301 pid=2316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Oct 2 20:06:21.188000 audit[2321]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.188000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffeb7fd0710 a2=0 a3=7ffeb7fd06fc items=0 ppid=2301 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.188000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Oct 2 20:06:21.192852 kubelet[2301]: I1002 20:06:21.192829 2301 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:06:21.193052 kubelet[2301]: I1002 20:06:21.193040 2301 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:21.193155 kubelet[2301]: I1002 20:06:21.193146 2301 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:21.192000 audit[2323]: NETFILTER_CFG table=nat:31 family=2 entries=1 op=nft_register_chain pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.192000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe83c32540 a2=0 a3=7ffe83c3252c items=0 ppid=2301 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.192000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:06:21.197035 kubelet[2301]: I1002 20:06:21.197010 2301 policy_none.go:49] "None policy: Start" Oct 2 20:06:21.199976 kubelet[2301]: I1002 20:06:21.199949 2301 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:06:21.200110 kubelet[2301]: I1002 20:06:21.199984 2301 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:21.200000 audit[2327]: NETFILTER_CFG table=nat:32 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.200000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd25f6a510 a2=0 a3=7ffd25f6a4fc items=0 ppid=2301 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.200000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:06:21.206706 systemd[1]: Created slice kubepods.slice. Oct 2 20:06:21.212631 systemd[1]: Created slice kubepods-burstable.slice. Oct 2 20:06:21.214000 audit[2331]: NETFILTER_CFG table=filter:33 family=2 entries=1 op=nft_register_rule pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.214000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7fff27e604e0 a2=0 a3=7fff27e604cc items=0 ppid=2301 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.214000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:06:21.216000 audit[2332]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.216000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffca1847bb0 a2=0 a3=7ffca1847b9c items=0 ppid=2301 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.216000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:06:21.219524 systemd[1]: Created slice kubepods-besteffort.slice. Oct 2 20:06:21.220000 audit[2333]: NETFILTER_CFG table=nat:35 family=2 entries=1 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.220000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd6d03de0 a2=0 a3=7ffcd6d03dcc items=0 ppid=2301 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.220000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:21.223000 audit[2335]: NETFILTER_CFG table=nat:36 family=2 entries=1 op=nft_register_rule pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.223000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fffd6971110 a2=0 a3=7fffd69710fc items=0 ppid=2301 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.223000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:06:21.226606 kubelet[2301]: I1002 20:06:21.226581 2301 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:21.228000 audit[2301]: AVC avc: denied { mac_admin } for pid=2301 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:21.228000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:21.228000 audit[2301]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011166c0 a1=c00111a5d0 a2=c001116690 a3=25 items=0 ppid=1 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.228000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:21.230169 kubelet[2301]: I1002 20:06:21.229548 2301 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:21.230169 kubelet[2301]: I1002 20:06:21.229795 2301 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:21.230928 kubelet[2301]: E1002 20:06:21.230915 2301 eviction_manager.go:261] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"ip-172-31-28-145\" not found" Oct 2 20:06:21.236000 audit[2337]: NETFILTER_CFG table=nat:37 family=2 entries=1 op=nft_register_rule pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.236000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc1d9526f0 a2=0 a3=7ffc1d9526dc items=0 ppid=2301 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.236000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:21.241000 audit[2339]: NETFILTER_CFG table=nat:38 family=2 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.241000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffded75fdc0 a2=0 a3=7ffded75fdac items=0 ppid=2301 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.241000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:06:21.244000 audit[2341]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.244000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffdc06bc00 a2=0 a3=7fffdc06bbec items=0 ppid=2301 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.244000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:06:21.247000 audit[2343]: NETFILTER_CFG table=nat:40 family=2 entries=1 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.247000 audit[2343]: SYSCALL arch=c000003e syscall=46 success=yes exit=540 a0=3 a1=7ffc68a8f680 a2=0 a3=7ffc68a8f66c items=0 ppid=2301 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.247000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:06:21.249727 kubelet[2301]: I1002 20:06:21.249710 2301 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:06:21.249000 audit[2344]: NETFILTER_CFG table=mangle:41 family=10 entries=2 op=nft_register_chain pid=2344 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.249000 audit[2344]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe5ffe7d50 a2=0 a3=7ffe5ffe7d3c items=0 ppid=2301 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.249000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Oct 2 20:06:21.250000 audit[2345]: NETFILTER_CFG table=mangle:42 family=2 entries=1 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.250000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc63d96c60 a2=0 a3=7ffc63d96c4c items=0 ppid=2301 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.250000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:21.250000 audit[2346]: NETFILTER_CFG table=nat:43 family=10 entries=2 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.250000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffe7419b310 a2=0 a3=7ffe7419b2fc items=0 ppid=2301 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.250000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D44524F50002D74006E6174 Oct 2 20:06:21.251000 audit[2347]: NETFILTER_CFG table=nat:44 family=2 entries=1 op=nft_register_chain pid=2347 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.251000 audit[2347]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff33aeab10 a2=0 a3=7fff33aeaafc items=0 ppid=2301 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.251000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:21.253000 audit[2350]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:21.253000 audit[2349]: NETFILTER_CFG table=nat:46 family=10 entries=1 op=nft_register_rule pid=2349 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.253000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff69f9f630 a2=0 a3=7fff69f9f61c items=0 ppid=2301 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.253000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D44524F50002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303038303030 Oct 2 20:06:21.253000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffeeca74870 a2=0 a3=7ffeeca7485c items=0 ppid=2301 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.253000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:21.254000 audit[2351]: NETFILTER_CFG table=filter:47 family=10 entries=2 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.254000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=132 a0=3 a1=7ffe62b2fc40 a2=0 a3=7ffe62b2fc2c items=0 ppid=2301 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.254000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Oct 2 20:06:21.257000 audit[2353]: NETFILTER_CFG table=filter:48 family=10 entries=1 op=nft_register_rule pid=2353 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.257000 audit[2353]: SYSCALL arch=c000003e syscall=46 success=yes exit=664 a0=3 a1=7ffce2cd08a0 a2=0 a3=7ffce2cd088c items=0 ppid=2301 pid=2353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.257000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206669726577616C6C20666F722064726F7070696E67206D61726B6564207061636B657473002D6D006D61726B Oct 2 20:06:21.258000 audit[2354]: NETFILTER_CFG table=nat:49 family=10 entries=1 op=nft_register_chain pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.258000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcdfa5bce0 a2=0 a3=7ffcdfa5bccc items=0 ppid=2301 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.258000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4D41524B2D4D415351002D74006E6174 Oct 2 20:06:21.259000 audit[2355]: NETFILTER_CFG table=nat:50 family=10 entries=1 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.259000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcd68a6d90 a2=0 a3=7ffcd68a6d7c items=0 ppid=2301 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Oct 2 20:06:21.263027 kubelet[2301]: I1002 20:06:21.263009 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-145" Oct 2 20:06:21.263742 kubelet[2301]: E1002 20:06:21.263725 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.145:6443/api/v1/nodes\": dial tcp 172.31.28.145:6443: connect: connection refused" node="ip-172-31-28-145" Oct 2 20:06:21.262000 audit[2357]: NETFILTER_CFG table=nat:51 family=10 entries=1 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.262000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc941b5510 a2=0 a3=7ffc941b54fc items=0 ppid=2301 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.262000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D4D41524B2D4D415351002D74006E6174002D6A004D41524B002D2D6F722D6D61726B0030783030303034303030 Oct 2 20:06:21.264000 audit[2359]: NETFILTER_CFG table=nat:52 family=10 entries=2 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.264000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe59b35800 a2=0 a3=7ffe59b357ec items=0 ppid=2301 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.264000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Oct 2 20:06:21.267000 audit[2361]: NETFILTER_CFG table=nat:53 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.267000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=364 a0=3 a1=7ffea48d80b0 a2=0 a3=7ffea48d809c items=0 ppid=2301 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.267000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D006D61726B0000002D2D6D61726B00307830303030343030302F30783030303034303030002D6A0052455455524E Oct 2 20:06:21.269000 audit[2363]: NETFILTER_CFG table=nat:54 family=10 entries=1 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.269000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=220 a0=3 a1=7fffe6495730 a2=0 a3=7fffe649571c items=0 ppid=2301 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.269000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6A004D41524B002D2D786F722D6D61726B0030783030303034303030 Oct 2 20:06:21.272000 audit[2365]: NETFILTER_CFG table=nat:55 family=10 entries=1 op=nft_register_rule pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.272000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=556 a0=3 a1=7ffd4c3b9c90 a2=0 a3=7ffd4c3b9c7c items=0 ppid=2301 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.272000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D41004B5542452D504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732073657276696365207472616666696320726571756972696E6720534E4154002D6A004D415351554552414445 Oct 2 20:06:21.274970 kubelet[2301]: I1002 20:06:21.274943 2301 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:06:21.274970 kubelet[2301]: I1002 20:06:21.274971 2301 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:06:21.275095 kubelet[2301]: I1002 20:06:21.274998 2301 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:06:21.275095 kubelet[2301]: E1002 20:06:21.275043 2301 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 20:06:21.276263 kubelet[2301]: W1002 20:06:21.276230 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.28.145:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.276355 kubelet[2301]: E1002 20:06:21.276274 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.145:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.275000 audit[2366]: NETFILTER_CFG table=mangle:56 family=10 entries=1 op=nft_register_chain pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.275000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc6f100a40 a2=0 a3=7ffc6f100a2c items=0 ppid=2301 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.275000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Oct 2 20:06:21.276000 audit[2367]: NETFILTER_CFG table=nat:57 family=10 entries=1 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.276000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffedabe8f20 a2=0 a3=7ffedabe8f0c items=0 ppid=2301 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.276000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Oct 2 20:06:21.277000 audit[2368]: NETFILTER_CFG table=filter:58 family=10 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:21.277000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca170c420 a2=0 a3=7ffca170c40c items=0 ppid=2301 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:21.277000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Oct 2 20:06:21.363146 kubelet[2301]: E1002 20:06:21.363097 2301 controller.go:146] failed to ensure lease exists, will retry in 400ms, error: Get "https://172.31.28.145:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-145?timeout=10s": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.375321 kubelet[2301]: I1002 20:06:21.375270 2301 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:21.377034 kubelet[2301]: I1002 20:06:21.377006 2301 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:21.379671 kubelet[2301]: I1002 20:06:21.379652 2301 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:21.388419 kubelet[2301]: I1002 20:06:21.381866 2301 status_manager.go:698] "Failed to get status for pod" podUID=189dbf149a9c9f4903ec3f9bb7007764 pod="kube-system/kube-apiserver-ip-172-31-28-145" err="Get \"https://172.31.28.145:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-28-145\": dial tcp 172.31.28.145:6443: connect: connection refused" Oct 2 20:06:21.390559 systemd[1]: Created slice kubepods-burstable-pod189dbf149a9c9f4903ec3f9bb7007764.slice. Oct 2 20:06:21.393988 kubelet[2301]: I1002 20:06:21.393962 2301 status_manager.go:698] "Failed to get status for pod" podUID=020e34206afea326d19b662b2fe91404 pod="kube-system/kube-scheduler-ip-172-31-28-145" err="Get \"https://172.31.28.145:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-28-145\": dial tcp 172.31.28.145:6443: connect: connection refused" Oct 2 20:06:21.395778 kubelet[2301]: I1002 20:06:21.395367 2301 status_manager.go:698] "Failed to get status for pod" podUID=5dbbcd474d4c7db17587f7b6eb970beb pod="kube-system/kube-controller-manager-ip-172-31-28-145" err="Get \"https://172.31.28.145:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-28-145\": dial tcp 172.31.28.145:6443: connect: connection refused" Oct 2 20:06:21.408284 systemd[1]: Created slice kubepods-burstable-pod020e34206afea326d19b662b2fe91404.slice. Oct 2 20:06:21.426820 systemd[1]: Created slice kubepods-burstable-pod5dbbcd474d4c7db17587f7b6eb970beb.slice. Oct 2 20:06:21.466400 kubelet[2301]: I1002 20:06:21.466345 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-145" Oct 2 20:06:21.466974 kubelet[2301]: E1002 20:06:21.466883 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.145:6443/api/v1/nodes\": dial tcp 172.31.28.145:6443: connect: connection refused" node="ip-172-31-28-145" Oct 2 20:06:21.563259 kubelet[2301]: I1002 20:06:21.563220 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/189dbf149a9c9f4903ec3f9bb7007764-ca-certs\") pod \"kube-apiserver-ip-172-31-28-145\" (UID: \"189dbf149a9c9f4903ec3f9bb7007764\") " pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:21.563259 kubelet[2301]: I1002 20:06:21.563273 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/189dbf149a9c9f4903ec3f9bb7007764-k8s-certs\") pod \"kube-apiserver-ip-172-31-28-145\" (UID: \"189dbf149a9c9f4903ec3f9bb7007764\") " pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:21.563501 kubelet[2301]: I1002 20:06:21.563309 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/189dbf149a9c9f4903ec3f9bb7007764-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-28-145\" (UID: \"189dbf149a9c9f4903ec3f9bb7007764\") " pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:21.563501 kubelet[2301]: I1002 20:06:21.563337 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-k8s-certs\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:21.563501 kubelet[2301]: I1002 20:06:21.563372 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:21.563501 kubelet[2301]: I1002 20:06:21.563430 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-kubeconfig\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:21.563501 kubelet[2301]: I1002 20:06:21.563468 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:21.563729 kubelet[2301]: I1002 20:06:21.563501 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/020e34206afea326d19b662b2fe91404-kubeconfig\") pod \"kube-scheduler-ip-172-31-28-145\" (UID: \"020e34206afea326d19b662b2fe91404\") " pod="kube-system/kube-scheduler-ip-172-31-28-145" Oct 2 20:06:21.563729 kubelet[2301]: I1002 20:06:21.563538 2301 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-ca-certs\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:21.704876 env[1641]: time="2023-10-02T20:06:21.704821358Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-28-145,Uid:189dbf149a9c9f4903ec3f9bb7007764,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:21.727036 env[1641]: time="2023-10-02T20:06:21.726979739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-28-145,Uid:020e34206afea326d19b662b2fe91404,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:21.742858 env[1641]: time="2023-10-02T20:06:21.742810739Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-28-145,Uid:5dbbcd474d4c7db17587f7b6eb970beb,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:21.764950 kubelet[2301]: E1002 20:06:21.764900 2301 controller.go:146] failed to ensure lease exists, will retry in 800ms, error: Get "https://172.31.28.145:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-145?timeout=10s": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:21.874981 kubelet[2301]: I1002 20:06:21.874945 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-145" Oct 2 20:06:21.875339 kubelet[2301]: E1002 20:06:21.875319 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.145:6443/api/v1/nodes\": dial tcp 172.31.28.145:6443: connect: connection refused" node="ip-172-31-28-145" Oct 2 20:06:22.222525 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3288854796.mount: Deactivated successfully. Oct 2 20:06:22.233760 env[1641]: time="2023-10-02T20:06:22.233709203Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.235338 env[1641]: time="2023-10-02T20:06:22.235293835Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.241337 env[1641]: time="2023-10-02T20:06:22.241277362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.242875 env[1641]: time="2023-10-02T20:06:22.242834112Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.245053 env[1641]: time="2023-10-02T20:06:22.245014459Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.248333 env[1641]: time="2023-10-02T20:06:22.248286316Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.251066 env[1641]: time="2023-10-02T20:06:22.251021284Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.252881 env[1641]: time="2023-10-02T20:06:22.252837327Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.254093 env[1641]: time="2023-10-02T20:06:22.254057917Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.259420 env[1641]: time="2023-10-02T20:06:22.259006336Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.267552 env[1641]: time="2023-10-02T20:06:22.266594163Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.274077 env[1641]: time="2023-10-02T20:06:22.274015819Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:22.299799 env[1641]: time="2023-10-02T20:06:22.299540568Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:22.299799 env[1641]: time="2023-10-02T20:06:22.299612155Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:22.299799 env[1641]: time="2023-10-02T20:06:22.299628977Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:22.307412 env[1641]: time="2023-10-02T20:06:22.299781923Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b043f33da93776e48511ad89e473c181a4f6a01fd602f9cde92b03b35d6a2e91 pid=2377 runtime=io.containerd.runc.v2 Oct 2 20:06:22.336304 systemd[1]: Started cri-containerd-b043f33da93776e48511ad89e473c181a4f6a01fd602f9cde92b03b35d6a2e91.scope. Oct 2 20:06:22.365427 env[1641]: time="2023-10-02T20:06:22.365310985Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:22.365715 env[1641]: time="2023-10-02T20:06:22.365686418Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:22.365954 env[1641]: time="2023-10-02T20:06:22.365924700Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:22.366568 env[1641]: time="2023-10-02T20:06:22.366510350Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5a420ffc4212b3b33f41a8392fad3adf44d33c6fc622a2379750bc336e3ff957 pid=2418 runtime=io.containerd.runc.v2 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.370000 audit: BPF prog-id=73 op=LOAD Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2377 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230343366333364613933373736653438353131616438396534373363 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2377 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230343366333364613933373736653438353131616438396534373363 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit: BPF prog-id=74 op=LOAD Oct 2 20:06:22.371000 audit[2388]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002ef160 items=0 ppid=2377 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230343366333364613933373736653438353131616438396534373363 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.371000 audit: BPF prog-id=75 op=LOAD Oct 2 20:06:22.371000 audit[2388]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002ef1a8 items=0 ppid=2377 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.371000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230343366333364613933373736653438353131616438396534373363 Oct 2 20:06:22.372000 audit: BPF prog-id=75 op=UNLOAD Oct 2 20:06:22.372000 audit: BPF prog-id=74 op=UNLOAD Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.372000 audit: BPF prog-id=76 op=LOAD Oct 2 20:06:22.372000 audit[2388]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002ef5b8 items=0 ppid=2377 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.372000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230343366333364613933373736653438353131616438396534373363 Oct 2 20:06:22.388314 env[1641]: time="2023-10-02T20:06:22.388057658Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:22.388314 env[1641]: time="2023-10-02T20:06:22.388170806Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:22.388314 env[1641]: time="2023-10-02T20:06:22.388257690Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:22.388593 env[1641]: time="2023-10-02T20:06:22.388450218Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ccb93d8d3d80d40af6606c6999db922ebe39590924796500c96af76545980b9c pid=2429 runtime=io.containerd.runc.v2 Oct 2 20:06:22.397151 kubelet[2301]: W1002 20:06:22.396913 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Node: Get "https://172.31.28.145:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-145&limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.397151 kubelet[2301]: E1002 20:06:22.397014 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Node: failed to list *v1.Node: Get "https://172.31.28.145:6443/api/v1/nodes?fieldSelector=metadata.name%3Dip-172-31-28-145&limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.432963 systemd[1]: Started cri-containerd-5a420ffc4212b3b33f41a8392fad3adf44d33c6fc622a2379750bc336e3ff957.scope. Oct 2 20:06:22.447085 systemd[1]: Started cri-containerd-ccb93d8d3d80d40af6606c6999db922ebe39590924796500c96af76545980b9c.scope. Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.485000 audit: BPF prog-id=77 op=LOAD Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2418 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561343230666663343231326233623333663431613833393266616433 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2418 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561343230666663343231326233623333663431613833393266616433 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.489000 audit: BPF prog-id=78 op=LOAD Oct 2 20:06:22.489000 audit[2440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00037f3b0 items=0 ppid=2418 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561343230666663343231326233623333663431613833393266616433 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit: BPF prog-id=79 op=LOAD Oct 2 20:06:22.490000 audit[2440]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00037f3f8 items=0 ppid=2418 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561343230666663343231326233623333663431613833393266616433 Oct 2 20:06:22.490000 audit: BPF prog-id=79 op=UNLOAD Oct 2 20:06:22.490000 audit: BPF prog-id=78 op=UNLOAD Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { perfmon } for pid=2440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit[2440]: AVC avc: denied { bpf } for pid=2440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.490000 audit: BPF prog-id=80 op=LOAD Oct 2 20:06:22.490000 audit[2440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00037f808 items=0 ppid=2418 pid=2440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.490000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561343230666663343231326233623333663431613833393266616433 Oct 2 20:06:22.495561 env[1641]: time="2023-10-02T20:06:22.495486804Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-ip-172-31-28-145,Uid:189dbf149a9c9f4903ec3f9bb7007764,Namespace:kube-system,Attempt:0,} returns sandbox id \"b043f33da93776e48511ad89e473c181a4f6a01fd602f9cde92b03b35d6a2e91\"" Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.502000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.503000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.503000 audit: BPF prog-id=81 op=LOAD Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2429 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363623933643864336438306434306166363630366336393939646239 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=2429 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363623933643864336438306434306166363630366336393939646239 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit: BPF prog-id=82 op=LOAD Oct 2 20:06:22.504000 audit[2442]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028a3e0 items=0 ppid=2429 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363623933643864336438306434306166363630366336393939646239 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit: BPF prog-id=83 op=LOAD Oct 2 20:06:22.504000 audit[2442]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028a428 items=0 ppid=2429 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363623933643864336438306434306166363630366336393939646239 Oct 2 20:06:22.504000 audit: BPF prog-id=83 op=UNLOAD Oct 2 20:06:22.504000 audit: BPF prog-id=82 op=UNLOAD Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { perfmon } for pid=2442 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit[2442]: AVC avc: denied { bpf } for pid=2442 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.504000 audit: BPF prog-id=84 op=LOAD Oct 2 20:06:22.504000 audit[2442]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028a838 items=0 ppid=2429 pid=2442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363623933643864336438306434306166363630366336393939646239 Oct 2 20:06:22.515463 env[1641]: time="2023-10-02T20:06:22.515414370Z" level=info msg="CreateContainer within sandbox \"b043f33da93776e48511ad89e473c181a4f6a01fd602f9cde92b03b35d6a2e91\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Oct 2 20:06:22.558871 env[1641]: time="2023-10-02T20:06:22.558804928Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-ip-172-31-28-145,Uid:020e34206afea326d19b662b2fe91404,Namespace:kube-system,Attempt:0,} returns sandbox id \"ccb93d8d3d80d40af6606c6999db922ebe39590924796500c96af76545980b9c\"" Oct 2 20:06:22.561201 env[1641]: time="2023-10-02T20:06:22.561147021Z" level=info msg="CreateContainer within sandbox \"b043f33da93776e48511ad89e473c181a4f6a01fd602f9cde92b03b35d6a2e91\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"0a02eb0093197a1a83da5bea47a69774f14aa05293c4bb4b0c5086aa14e513a8\"" Oct 2 20:06:22.562765 env[1641]: time="2023-10-02T20:06:22.562728167Z" level=info msg="CreateContainer within sandbox \"ccb93d8d3d80d40af6606c6999db922ebe39590924796500c96af76545980b9c\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Oct 2 20:06:22.563017 env[1641]: time="2023-10-02T20:06:22.562798745Z" level=info msg="StartContainer for \"0a02eb0093197a1a83da5bea47a69774f14aa05293c4bb4b0c5086aa14e513a8\"" Oct 2 20:06:22.566453 kubelet[2301]: E1002 20:06:22.566409 2301 controller.go:146] failed to ensure lease exists, will retry in 1.6s, error: Get "https://172.31.28.145:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/ip-172-31-28-145?timeout=10s": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.569357 kubelet[2301]: W1002 20:06:22.569227 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.Service: Get "https://172.31.28.145:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.569357 kubelet[2301]: E1002 20:06:22.569411 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.Service: failed to list *v1.Service: Get "https://172.31.28.145:6443/api/v1/services?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.583946 env[1641]: time="2023-10-02T20:06:22.583869227Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-ip-172-31-28-145,Uid:5dbbcd474d4c7db17587f7b6eb970beb,Namespace:kube-system,Attempt:0,} returns sandbox id \"5a420ffc4212b3b33f41a8392fad3adf44d33c6fc622a2379750bc336e3ff957\"" Oct 2 20:06:22.588542 env[1641]: time="2023-10-02T20:06:22.588488023Z" level=info msg="CreateContainer within sandbox \"5a420ffc4212b3b33f41a8392fad3adf44d33c6fc622a2379750bc336e3ff957\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Oct 2 20:06:22.593743 env[1641]: time="2023-10-02T20:06:22.593696244Z" level=info msg="CreateContainer within sandbox \"ccb93d8d3d80d40af6606c6999db922ebe39590924796500c96af76545980b9c\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c76683e8d1cbc9d055348bb4a15d0855caae30f461647e55d3da535960c8d4cb\"" Oct 2 20:06:22.594290 env[1641]: time="2023-10-02T20:06:22.594258942Z" level=info msg="StartContainer for \"c76683e8d1cbc9d055348bb4a15d0855caae30f461647e55d3da535960c8d4cb\"" Oct 2 20:06:22.597975 systemd[1]: Started cri-containerd-0a02eb0093197a1a83da5bea47a69774f14aa05293c4bb4b0c5086aa14e513a8.scope. Oct 2 20:06:22.608231 kubelet[2301]: W1002 20:06:22.606430 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.RuntimeClass: Get "https://172.31.28.145:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.608231 kubelet[2301]: E1002 20:06:22.606479 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get "https://172.31.28.145:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.632000 audit: BPF prog-id=85 op=LOAD Oct 2 20:06:22.637000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.637000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2377 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303265623030393331393761316138336461356265613437613639 Oct 2 20:06:22.637000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.637000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2377 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.637000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303265623030393331393761316138336461356265613437613639 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.638000 audit: BPF prog-id=86 op=LOAD Oct 2 20:06:22.638000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00035c940 items=0 ppid=2377 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.638000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303265623030393331393761316138336461356265613437613639 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.639000 audit: BPF prog-id=87 op=LOAD Oct 2 20:06:22.639000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00035c988 items=0 ppid=2377 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.639000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303265623030393331393761316138336461356265613437613639 Oct 2 20:06:22.640000 audit: BPF prog-id=87 op=UNLOAD Oct 2 20:06:22.640000 audit: BPF prog-id=86 op=UNLOAD Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.640000 audit: BPF prog-id=88 op=LOAD Oct 2 20:06:22.640000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00035cd98 items=0 ppid=2377 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.640000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3061303265623030393331393761316138336461356265613437613639 Oct 2 20:06:22.652407 env[1641]: time="2023-10-02T20:06:22.647263662Z" level=info msg="CreateContainer within sandbox \"5a420ffc4212b3b33f41a8392fad3adf44d33c6fc622a2379750bc336e3ff957\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"1f6add4d04a038e980d67bda02cb603bedff298a360324784e6116274f988a58\"" Oct 2 20:06:22.652407 env[1641]: time="2023-10-02T20:06:22.648019984Z" level=info msg="StartContainer for \"1f6add4d04a038e980d67bda02cb603bedff298a360324784e6116274f988a58\"" Oct 2 20:06:22.677166 kubelet[2301]: I1002 20:06:22.677136 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-145" Oct 2 20:06:22.679269 kubelet[2301]: E1002 20:06:22.677674 2301 kubelet_node_status.go:92] "Unable to register node with API server" err="Post \"https://172.31.28.145:6443/api/v1/nodes\": dial tcp 172.31.28.145:6443: connect: connection refused" node="ip-172-31-28-145" Oct 2 20:06:22.686735 systemd[1]: Started cri-containerd-c76683e8d1cbc9d055348bb4a15d0855caae30f461647e55d3da535960c8d4cb.scope. Oct 2 20:06:22.704994 env[1641]: time="2023-10-02T20:06:22.704946390Z" level=info msg="StartContainer for \"0a02eb0093197a1a83da5bea47a69774f14aa05293c4bb4b0c5086aa14e513a8\" returns successfully" Oct 2 20:06:22.721680 systemd[1]: Started cri-containerd-1f6add4d04a038e980d67bda02cb603bedff298a360324784e6116274f988a58.scope. Oct 2 20:06:22.731678 kubelet[2301]: W1002 20:06:22.731578 2301 reflector.go:424] vendor/k8s.io/client-go/informers/factory.go:150: failed to list *v1.CSIDriver: Get "https://172.31.28.145:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.731678 kubelet[2301]: E1002 20:06:22.731645 2301 reflector.go:140] vendor/k8s.io/client-go/informers/factory.go:150: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get "https://172.31.28.145:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.750000 audit: BPF prog-id=89 op=LOAD Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2429 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337363638336538643163626339643035353334386262346131356430 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2429 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337363638336538643163626339643035353334386262346131356430 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit: BPF prog-id=90 op=LOAD Oct 2 20:06:22.751000 audit[2539]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c0ca0 items=0 ppid=2429 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337363638336538643163626339643035353334386262346131356430 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit: BPF prog-id=91 op=LOAD Oct 2 20:06:22.751000 audit[2539]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c0ce8 items=0 ppid=2429 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337363638336538643163626339643035353334386262346131356430 Oct 2 20:06:22.751000 audit: BPF prog-id=91 op=UNLOAD Oct 2 20:06:22.751000 audit: BPF prog-id=90 op=UNLOAD Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { perfmon } for pid=2539 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit[2539]: AVC avc: denied { bpf } for pid=2539 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.751000 audit: BPF prog-id=92 op=LOAD Oct 2 20:06:22.751000 audit[2539]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c10f8 items=0 ppid=2429 pid=2539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6337363638336538643163626339643035353334386262346131356430 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit: BPF prog-id=93 op=LOAD Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2418 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166366164643464303461303338653938306436376264613032636236 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2418 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166366164643464303461303338653938306436376264613032636236 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.761000 audit: BPF prog-id=94 op=LOAD Oct 2 20:06:22.761000 audit[2542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000212a80 items=0 ppid=2418 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.761000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166366164643464303461303338653938306436376264613032636236 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit: BPF prog-id=95 op=LOAD Oct 2 20:06:22.762000 audit[2542]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000212ac8 items=0 ppid=2418 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166366164643464303461303338653938306436376264613032636236 Oct 2 20:06:22.762000 audit: BPF prog-id=95 op=UNLOAD Oct 2 20:06:22.762000 audit: BPF prog-id=94 op=UNLOAD Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { perfmon } for pid=2542 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit[2542]: AVC avc: denied { bpf } for pid=2542 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:22.762000 audit: BPF prog-id=96 op=LOAD Oct 2 20:06:22.762000 audit[2542]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000212ed8 items=0 ppid=2418 pid=2542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:22.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166366164643464303461303338653938306436376264613032636236 Oct 2 20:06:22.827411 env[1641]: time="2023-10-02T20:06:22.826683926Z" level=info msg="StartContainer for \"1f6add4d04a038e980d67bda02cb603bedff298a360324784e6116274f988a58\" returns successfully" Oct 2 20:06:22.832607 env[1641]: time="2023-10-02T20:06:22.832550860Z" level=info msg="StartContainer for \"c76683e8d1cbc9d055348bb4a15d0855caae30f461647e55d3da535960c8d4cb\" returns successfully" Oct 2 20:06:23.207242 systemd[1]: run-containerd-runc-k8s.io-b043f33da93776e48511ad89e473c181a4f6a01fd602f9cde92b03b35d6a2e91-runc.7FNk4K.mount: Deactivated successfully. Oct 2 20:06:23.211105 kubelet[2301]: E1002 20:06:23.210910 2301 certificate_manager.go:471] kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post "https://172.31.28.145:6443/apis/certificates.k8s.io/v1/certificatesigningrequests": dial tcp 172.31.28.145:6443: connect: connection refused Oct 2 20:06:23.286786 kubelet[2301]: I1002 20:06:23.286761 2301 status_manager.go:698] "Failed to get status for pod" podUID=020e34206afea326d19b662b2fe91404 pod="kube-system/kube-scheduler-ip-172-31-28-145" err="Get \"https://172.31.28.145:6443/api/v1/namespaces/kube-system/pods/kube-scheduler-ip-172-31-28-145\": dial tcp 172.31.28.145:6443: connect: connection refused" Oct 2 20:06:23.290594 kubelet[2301]: I1002 20:06:23.290570 2301 status_manager.go:698] "Failed to get status for pod" podUID=5dbbcd474d4c7db17587f7b6eb970beb pod="kube-system/kube-controller-manager-ip-172-31-28-145" err="Get \"https://172.31.28.145:6443/api/v1/namespaces/kube-system/pods/kube-controller-manager-ip-172-31-28-145\": dial tcp 172.31.28.145:6443: connect: connection refused" Oct 2 20:06:23.347568 kubelet[2301]: I1002 20:06:23.347528 2301 status_manager.go:698] "Failed to get status for pod" podUID=189dbf149a9c9f4903ec3f9bb7007764 pod="kube-system/kube-apiserver-ip-172-31-28-145" err="Get \"https://172.31.28.145:6443/api/v1/namespaces/kube-system/pods/kube-apiserver-ip-172-31-28-145\": dial tcp 172.31.28.145:6443: connect: connection refused" Oct 2 20:06:24.279929 kubelet[2301]: I1002 20:06:24.279906 2301 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-145" Oct 2 20:06:24.683000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:24.683000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000308c00 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:24.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:24.684000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:24.684000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00031c980 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:24.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:26.142982 kernel: kauditd_printk_skb: 624 callbacks suppressed Oct 2 20:06:26.143212 kernel: audit: type=1400 audit(1696277186.137:752): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.137000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.137000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003b06000 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.166162 kernel: audit: type=1300 audit(1696277186.137:752): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003b06000 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.167096 kernel: audit: type=1327 audit(1696277186.137:752): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.137000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.137000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.200362 kernel: audit: type=1400 audit(1696277186.137:753): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.137000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003f750e0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.230132 kernel: audit: type=1300 audit(1696277186.137:753): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003f750e0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.230267 kernel: audit: type=1327 audit(1696277186.137:753): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.137000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.137000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.236571 kernel: audit: type=1400 audit(1696277186.137:754): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.137000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003b06120 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.244455 kernel: audit: type=1300 audit(1696277186.137:754): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c003b06120 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.137000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.259242 kernel: audit: type=1327 audit(1696277186.137:754): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.259532 kernel: audit: type=1400 audit(1696277186.165:755): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.165000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.165000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=52 a1=c003a91d70 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.165000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.292000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.292000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003f478e0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.292000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.292000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:26.292000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003b07c80 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:06:26.292000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:06:26.407093 kubelet[2301]: E1002 20:06:26.406982 2301 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"ip-172-31-28-145\" not found" node="ip-172-31-28-145" Oct 2 20:06:26.438779 kubelet[2301]: I1002 20:06:26.438742 2301 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-28-145" Oct 2 20:06:27.156921 kubelet[2301]: I1002 20:06:27.156871 2301 apiserver.go:52] "Watching apiserver" Oct 2 20:06:27.161617 kubelet[2301]: I1002 20:06:27.161549 2301 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:06:27.202163 kubelet[2301]: I1002 20:06:27.202124 2301 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:06:27.970750 update_engine[1634]: I1002 20:06:27.970695 1634 update_attempter.cc:505] Updating boot flags... Oct 2 20:06:29.074307 systemd[1]: Reloading. Oct 2 20:06:29.229826 /usr/lib/systemd/system-generators/torcx-generator[2730]: time="2023-10-02T20:06:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.0 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.0 /var/lib/torcx/store]" Oct 2 20:06:29.229945 /usr/lib/systemd/system-generators/torcx-generator[2730]: time="2023-10-02T20:06:29Z" level=info msg="torcx already run" Oct 2 20:06:29.359081 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Oct 2 20:06:29.359105 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Oct 2 20:06:29.390924 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.529000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.530000 audit: BPF prog-id=97 op=LOAD Oct 2 20:06:29.531000 audit: BPF prog-id=77 op=UNLOAD Oct 2 20:06:29.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.532000 audit: BPF prog-id=98 op=LOAD Oct 2 20:06:29.533000 audit: BPF prog-id=85 op=UNLOAD Oct 2 20:06:29.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.534000 audit: BPF prog-id=99 op=LOAD Oct 2 20:06:29.535000 audit: BPF prog-id=58 op=UNLOAD Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.535000 audit: BPF prog-id=100 op=LOAD Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.536000 audit: BPF prog-id=101 op=LOAD Oct 2 20:06:29.536000 audit: BPF prog-id=59 op=UNLOAD Oct 2 20:06:29.536000 audit: BPF prog-id=60 op=UNLOAD Oct 2 20:06:29.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.537000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.538000 audit: BPF prog-id=102 op=LOAD Oct 2 20:06:29.538000 audit: BPF prog-id=61 op=UNLOAD Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.545000 audit: BPF prog-id=103 op=LOAD Oct 2 20:06:29.545000 audit: BPF prog-id=62 op=UNLOAD Oct 2 20:06:29.545000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.546000 audit: BPF prog-id=104 op=LOAD Oct 2 20:06:29.546000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.547000 audit: BPF prog-id=105 op=LOAD Oct 2 20:06:29.547000 audit: BPF prog-id=63 op=UNLOAD Oct 2 20:06:29.547000 audit: BPF prog-id=64 op=UNLOAD Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.551000 audit: BPF prog-id=106 op=LOAD Oct 2 20:06:29.551000 audit: BPF prog-id=65 op=UNLOAD Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.552000 audit: BPF prog-id=107 op=LOAD Oct 2 20:06:29.552000 audit: BPF prog-id=93 op=UNLOAD Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit: BPF prog-id=108 op=LOAD Oct 2 20:06:29.553000 audit: BPF prog-id=66 op=UNLOAD Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit: BPF prog-id=109 op=LOAD Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.553000 audit: BPF prog-id=110 op=LOAD Oct 2 20:06:29.553000 audit: BPF prog-id=67 op=UNLOAD Oct 2 20:06:29.554000 audit: BPF prog-id=68 op=UNLOAD Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.554000 audit: BPF prog-id=111 op=LOAD Oct 2 20:06:29.554000 audit: BPF prog-id=69 op=UNLOAD Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.555000 audit: BPF prog-id=112 op=LOAD Oct 2 20:06:29.555000 audit: BPF prog-id=73 op=UNLOAD Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.556000 audit: BPF prog-id=113 op=LOAD Oct 2 20:06:29.556000 audit: BPF prog-id=70 op=UNLOAD Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit: BPF prog-id=114 op=LOAD Oct 2 20:06:29.558000 audit: BPF prog-id=81 op=UNLOAD Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit: BPF prog-id=115 op=LOAD Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.558000 audit: BPF prog-id=116 op=LOAD Oct 2 20:06:29.559000 audit: BPF prog-id=71 op=UNLOAD Oct 2 20:06:29.559000 audit: BPF prog-id=72 op=UNLOAD Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.559000 audit: BPF prog-id=117 op=LOAD Oct 2 20:06:29.559000 audit: BPF prog-id=89 op=UNLOAD Oct 2 20:06:29.583251 systemd[1]: Stopping kubelet.service... Oct 2 20:06:29.585173 kubelet[2301]: I1002 20:06:29.585017 2301 dynamic_cafile_content.go:171] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:29.608956 systemd[1]: kubelet.service: Deactivated successfully. Oct 2 20:06:29.609211 systemd[1]: Stopped kubelet.service. Oct 2 20:06:29.607000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.613504 systemd[1]: Started kubelet.service. Oct 2 20:06:29.810222 kubelet[2783]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:29.810802 kubelet[2783]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:29.811068 kubelet[2783]: I1002 20:06:29.811031 2783 server.go:198] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Oct 2 20:06:29.818812 kubelet[2783]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.27. Image garbage collector will get sandbox image information from CRI. Oct 2 20:06:29.818964 kubelet[2783]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Oct 2 20:06:29.827303 kubelet[2783]: I1002 20:06:29.827273 2783 server.go:412] "Kubelet version" kubeletVersion="v1.26.5" Oct 2 20:06:29.831466 kubelet[2783]: I1002 20:06:29.831430 2783 server.go:414] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Oct 2 20:06:29.832910 kubelet[2783]: I1002 20:06:29.832885 2783 server.go:836] "Client rotation is on, will bootstrap in background" Oct 2 20:06:29.838000 audit[2798]: USER_ACCT pid=2798 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.839859 sudo[2798]: root : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/tar -xf /opt/bin/cilium.tar.gz -C /opt/bin Oct 2 20:06:29.838000 audit[2798]: CRED_REFR pid=2798 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.840195 sudo[2798]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=0) Oct 2 20:06:29.841000 audit[2798]: USER_START pid=2798 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:29.850741 kubelet[2783]: I1002 20:06:29.850711 2783 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Oct 2 20:06:29.857928 kubelet[2783]: I1002 20:06:29.857900 2783 server.go:659] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Oct 2 20:06:29.858327 kubelet[2783]: I1002 20:06:29.858314 2783 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Oct 2 20:06:29.861705 kubelet[2783]: I1002 20:06:29.861686 2783 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={RuntimeCgroupsName: SystemCgroupsName: KubeletCgroupsName: KubeletOOMScoreAdj:-999 ContainerRuntime: CgroupsPerQOS:true CgroupRoot:/ CgroupDriver:systemd KubeletRootDir:/var/lib/kubelet ProtectKernelDefaults:false NodeAllocatableConfig:{KubeReservedCgroupName: SystemReservedCgroupName: ReservedSystemCPUs: EnforceNodeAllocatable:map[pods:{}] KubeReserved:map[] SystemReserved:map[] HardEvictionThresholds:[{Signal:memory.available Operator:LessThan Value:{Quantity:100Mi Percentage:0} GracePeriod:0s MinReclaim:} {Signal:nodefs.available Operator:LessThan Value:{Quantity: Percentage:0.1} GracePeriod:0s MinReclaim:} {Signal:nodefs.inodesFree Operator:LessThan Value:{Quantity: Percentage:0.05} GracePeriod:0s MinReclaim:} {Signal:imagefs.available Operator:LessThan Value:{Quantity: Percentage:0.15} GracePeriod:0s MinReclaim:}]} QOSReserved:map[] CPUManagerPolicy:none CPUManagerPolicyOptions:map[] ExperimentalTopologyManagerScope:container CPUManagerReconcilePeriod:10s ExperimentalMemoryManagerPolicy:None ExperimentalMemoryManagerReservedMemory:[] ExperimentalPodPidsLimit:-1 EnforceCPULimits:true CPUCFSQuotaPeriod:100ms ExperimentalTopologyManagerPolicy:none ExperimentalTopologyManagerPolicyOptions:map[]} Oct 2 20:06:29.861942 kubelet[2783]: I1002 20:06:29.861929 2783 topology_manager.go:134] "Creating topology manager with policy per scope" topologyPolicyName="none" topologyScopeName="container" Oct 2 20:06:29.862041 kubelet[2783]: I1002 20:06:29.862033 2783 container_manager_linux.go:308] "Creating device plugin manager" Oct 2 20:06:29.862172 kubelet[2783]: I1002 20:06:29.862163 2783 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:29.862691 kubelet[2783]: I1002 20:06:29.862673 2783 dynamic_cafile_content.go:157] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Oct 2 20:06:29.875886 kubelet[2783]: I1002 20:06:29.875807 2783 kubelet.go:398] "Attempting to sync node with API server" Oct 2 20:06:29.876049 kubelet[2783]: I1002 20:06:29.876039 2783 kubelet.go:286] "Adding static pod path" path="/etc/kubernetes/manifests" Oct 2 20:06:29.876132 kubelet[2783]: I1002 20:06:29.876124 2783 kubelet.go:297] "Adding apiserver pod source" Oct 2 20:06:29.876262 kubelet[2783]: I1002 20:06:29.876202 2783 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Oct 2 20:06:29.893525 kubelet[2783]: I1002 20:06:29.893500 2783 kuberuntime_manager.go:244] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Oct 2 20:06:29.896331 kubelet[2783]: I1002 20:06:29.896302 2783 server.go:1186] "Started kubelet" Oct 2 20:06:29.906000 audit[2783]: AVC avc: denied { mac_admin } for pid=2783 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.906000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:29.906000 audit[2783]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d98690 a1=c000b457d0 a2=c000d98660 a3=25 items=0 ppid=1 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.906000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:29.920557 kubelet[2783]: I1002 20:06:29.908151 2783 kubelet.go:1341] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Oct 2 20:06:29.921000 audit[2783]: AVC avc: denied { mac_admin } for pid=2783 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:29.921000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:29.923710 kubelet[2783]: I1002 20:06:29.908204 2783 server.go:161] "Starting to listen" address="0.0.0.0" port=10250 Oct 2 20:06:29.924186 kubelet[2783]: E1002 20:06:29.911834 2783 cri_stats_provider.go:455] "Failed to get the info of the filesystem with mountpoint" err="unable to find data in memory cache" mountpoint="/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs" Oct 2 20:06:29.924307 kubelet[2783]: E1002 20:06:29.924294 2783 kubelet.go:1386] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Oct 2 20:06:29.921000 audit[2783]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000d9ecc0 a1=c000b45878 a2=c000d98ba0 a3=25 items=0 ppid=1 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:29.921000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:29.929177 kubelet[2783]: I1002 20:06:29.929159 2783 kubelet.go:1345] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Oct 2 20:06:29.930585 kubelet[2783]: I1002 20:06:29.930570 2783 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Oct 2 20:06:29.932351 kubelet[2783]: I1002 20:06:29.932336 2783 server.go:451] "Adding debug handlers to kubelet server" Oct 2 20:06:29.936001 kubelet[2783]: I1002 20:06:29.935978 2783 volume_manager.go:293] "Starting Kubelet Volume Manager" Oct 2 20:06:29.936438 kubelet[2783]: I1002 20:06:29.936425 2783 desired_state_of_world_populator.go:151] "Desired state populator starts to run" Oct 2 20:06:30.056101 kubelet[2783]: I1002 20:06:30.056077 2783 kubelet_node_status.go:70] "Attempting to register node" node="ip-172-31-28-145" Oct 2 20:06:30.179860 kubelet[2783]: I1002 20:06:30.179774 2783 cpu_manager.go:214] "Starting CPU manager" policy="none" Oct 2 20:06:30.181074 kubelet[2783]: I1002 20:06:30.181052 2783 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Oct 2 20:06:30.181214 kubelet[2783]: I1002 20:06:30.181203 2783 state_mem.go:36] "Initialized new in-memory state store" Oct 2 20:06:30.181914 kubelet[2783]: I1002 20:06:30.181899 2783 state_mem.go:88] "Updated default CPUSet" cpuSet="" Oct 2 20:06:30.182024 kubelet[2783]: I1002 20:06:30.182013 2783 state_mem.go:96] "Updated CPUSet assignments" assignments=map[] Oct 2 20:06:30.182104 kubelet[2783]: I1002 20:06:30.182096 2783 policy_none.go:49] "None policy: Start" Oct 2 20:06:30.184657 kubelet[2783]: I1002 20:06:30.184641 2783 memory_manager.go:169] "Starting memorymanager" policy="None" Oct 2 20:06:30.184784 kubelet[2783]: I1002 20:06:30.184774 2783 state_mem.go:35] "Initializing new in-memory state store" Oct 2 20:06:30.185678 kubelet[2783]: I1002 20:06:30.185664 2783 state_mem.go:75] "Updated machine memory state" Oct 2 20:06:30.192486 kubelet[2783]: I1002 20:06:30.192460 2783 kubelet_node_status.go:108] "Node was previously registered" node="ip-172-31-28-145" Oct 2 20:06:30.192744 kubelet[2783]: I1002 20:06:30.192732 2783 kubelet_node_status.go:73] "Successfully registered node" node="ip-172-31-28-145" Oct 2 20:06:30.197088 kubelet[2783]: I1002 20:06:30.197064 2783 manager.go:455] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Oct 2 20:06:30.195000 audit[2783]: AVC avc: denied { mac_admin } for pid=2783 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:30.195000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Oct 2 20:06:30.195000 audit[2783]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c153e0 a1=c000b6f968 a2=c000c15380 a3=25 items=0 ppid=1 pid=2783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/opt/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:30.195000 audit: PROCTITLE proctitle=2F6F70742F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Oct 2 20:06:30.198720 kubelet[2783]: I1002 20:06:30.198699 2783 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Oct 2 20:06:30.199194 kubelet[2783]: I1002 20:06:30.199178 2783 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Oct 2 20:06:30.297482 kubelet[2783]: I1002 20:06:30.297457 2783 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv4 Oct 2 20:06:30.328784 kubelet[2783]: I1002 20:06:30.328751 2783 kubelet_network_linux.go:63] "Initialized iptables rules." protocol=IPv6 Oct 2 20:06:30.328784 kubelet[2783]: I1002 20:06:30.328783 2783 status_manager.go:176] "Starting to sync pod status with apiserver" Oct 2 20:06:30.328982 kubelet[2783]: I1002 20:06:30.328804 2783 kubelet.go:2113] "Starting kubelet main sync loop" Oct 2 20:06:30.328982 kubelet[2783]: E1002 20:06:30.328868 2783 kubelet.go:2137] "Skipping pod synchronization" err="PLEG is not healthy: pleg has yet to be successful" Oct 2 20:06:30.429441 kubelet[2783]: I1002 20:06:30.429404 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:30.429814 kubelet[2783]: I1002 20:06:30.429800 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:30.432481 kubelet[2783]: I1002 20:06:30.430930 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:30.439115 kubelet[2783]: E1002 20:06:30.439084 2783 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-28-145\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:30.459537 kubelet[2783]: I1002 20:06:30.459501 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-ca-certs\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:30.459738 kubelet[2783]: I1002 20:06:30.459564 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-flexvolume-dir\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:30.459738 kubelet[2783]: I1002 20:06:30.459606 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-k8s-certs\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:30.459738 kubelet[2783]: I1002 20:06:30.459644 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-usr-share-ca-certificates\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:30.459738 kubelet[2783]: I1002 20:06:30.459674 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/020e34206afea326d19b662b2fe91404-kubeconfig\") pod \"kube-scheduler-ip-172-31-28-145\" (UID: \"020e34206afea326d19b662b2fe91404\") " pod="kube-system/kube-scheduler-ip-172-31-28-145" Oct 2 20:06:30.459738 kubelet[2783]: I1002 20:06:30.459721 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/189dbf149a9c9f4903ec3f9bb7007764-ca-certs\") pod \"kube-apiserver-ip-172-31-28-145\" (UID: \"189dbf149a9c9f4903ec3f9bb7007764\") " pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:30.460087 kubelet[2783]: I1002 20:06:30.459751 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/189dbf149a9c9f4903ec3f9bb7007764-k8s-certs\") pod \"kube-apiserver-ip-172-31-28-145\" (UID: \"189dbf149a9c9f4903ec3f9bb7007764\") " pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:30.460087 kubelet[2783]: I1002 20:06:30.459888 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/189dbf149a9c9f4903ec3f9bb7007764-usr-share-ca-certificates\") pod \"kube-apiserver-ip-172-31-28-145\" (UID: \"189dbf149a9c9f4903ec3f9bb7007764\") " pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:30.460087 kubelet[2783]: I1002 20:06:30.459930 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/5dbbcd474d4c7db17587f7b6eb970beb-kubeconfig\") pod \"kube-controller-manager-ip-172-31-28-145\" (UID: \"5dbbcd474d4c7db17587f7b6eb970beb\") " pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:30.889332 kubelet[2783]: I1002 20:06:30.889296 2783 apiserver.go:52] "Watching apiserver" Oct 2 20:06:30.890481 sudo[2798]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:30.889000 audit[2798]: USER_END pid=2798 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:30.889000 audit[2798]: CRED_DISP pid=2798 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:30.937125 kubelet[2783]: I1002 20:06:30.937088 2783 desired_state_of_world_populator.go:159] "Finished populating initial desired state of world" Oct 2 20:06:30.967316 kubelet[2783]: I1002 20:06:30.967279 2783 reconciler.go:41] "Reconciler: start to sync state" Oct 2 20:06:31.350370 kubelet[2783]: E1002 20:06:31.350331 2783 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-scheduler-ip-172-31-28-145\" already exists" pod="kube-system/kube-scheduler-ip-172-31-28-145" Oct 2 20:06:31.355194 kubelet[2783]: E1002 20:06:31.355160 2783 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-ip-172-31-28-145\" already exists" pod="kube-system/kube-controller-manager-ip-172-31-28-145" Oct 2 20:06:31.487668 kubelet[2783]: E1002 20:06:31.487629 2783 kubelet.go:1802] "Failed creating a mirror pod for" err="pods \"kube-apiserver-ip-172-31-28-145\" already exists" pod="kube-system/kube-apiserver-ip-172-31-28-145" Oct 2 20:06:32.290581 kubelet[2783]: I1002 20:06:32.290529 2783 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-scheduler-ip-172-31-28-145" podStartSLOduration=2.287904829 pod.CreationTimestamp="2023-10-02 20:06:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:31.89533378 +0000 UTC m=+2.265434536" watchObservedRunningTime="2023-10-02 20:06:32.287904829 +0000 UTC m=+2.658005579" Oct 2 20:06:32.291037 kubelet[2783]: I1002 20:06:32.290732 2783 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-controller-manager-ip-172-31-28-145" podStartSLOduration=3.290686018 pod.CreationTimestamp="2023-10-02 20:06:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:32.287708084 +0000 UTC m=+2.657808840" watchObservedRunningTime="2023-10-02 20:06:32.290686018 +0000 UTC m=+2.660786764" Oct 2 20:06:32.704273 sudo[1901]: pam_unix(sudo:session): session closed for user root Oct 2 20:06:32.703000 audit[1901]: USER_END pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:32.713401 kernel: kauditd_printk_skb: 271 callbacks suppressed Oct 2 20:06:32.713630 kernel: audit: type=1106 audit(1696277192.703:1012): pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:32.703000 audit[1901]: CRED_DISP pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:32.721411 kernel: audit: type=1104 audit(1696277192.703:1013): pid=1901 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Oct 2 20:06:32.743774 sshd[1898]: pam_unix(sshd:session): session closed for user core Oct 2 20:06:32.746000 audit[1898]: USER_END pid=1898 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:32.750602 systemd[1]: sshd@6-172.31.28.145:22-139.178.89.65:54558.service: Deactivated successfully. Oct 2 20:06:32.751917 systemd[1]: session-7.scope: Deactivated successfully. Oct 2 20:06:32.752278 systemd[1]: session-7.scope: Consumed 4.158s CPU time. Oct 2 20:06:32.754980 systemd-logind[1633]: Session 7 logged out. Waiting for processes to exit. Oct 2 20:06:32.756437 kernel: audit: type=1106 audit(1696277192.746:1014): pid=1898 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:32.756511 kernel: audit: type=1104 audit(1696277192.746:1015): pid=1898 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:32.746000 audit[1898]: CRED_DISP pid=1898 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:06:32.757068 systemd-logind[1633]: Removed session 7. Oct 2 20:06:32.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.145:22-139.178.89.65:54558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:32.768254 kernel: audit: type=1131 audit(1696277192.750:1016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-172.31.28.145:22-139.178.89.65:54558 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:06:33.087447 kubelet[2783]: I1002 20:06:33.087317 2783 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-apiserver-ip-172-31-28-145" podStartSLOduration=3.087270832 pod.CreationTimestamp="2023-10-02 20:06:30 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:32.688352992 +0000 UTC m=+3.058453746" watchObservedRunningTime="2023-10-02 20:06:33.087270832 +0000 UTC m=+3.457371582" Oct 2 20:06:40.873000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521299 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:40.886430 kernel: audit: type=1400 audit(1696277200.873:1017): avc: denied { watch } for pid=2573 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="nvme0n1p9" ino=521299 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Oct 2 20:06:40.886579 kernel: audit: type=1300 audit(1696277200.873:1017): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001395400 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:40.873000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001395400 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:40.873000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:40.895567 kernel: audit: type=1327 audit(1696277200.873:1017): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.674000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.674000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001289be0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:41.698940 kernel: audit: type=1400 audit(1696277201.674:1018): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.699074 kernel: audit: type=1300 audit(1696277201.674:1018): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001289be0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:41.699114 kernel: audit: type=1327 audit(1696277201.674:1018): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.674000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.691000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.710888 kernel: audit: type=1400 audit(1696277201.691:1019): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.711034 kernel: audit: type=1300 audit(1696277201.691:1019): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001289d20 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:41.691000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001289d20 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:41.691000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.724645 kernel: audit: type=1327 audit(1696277201.691:1019): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.724767 kernel: audit: type=1400 audit(1696277201.696:1020): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.696000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.696000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001289e80 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:41.696000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.698000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:06:41.698000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000056420 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:06:41.698000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:06:41.895367 kubelet[2783]: I1002 20:06:41.895334 2783 kuberuntime_manager.go:1114] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Oct 2 20:06:41.896237 env[1641]: time="2023-10-02T20:06:41.896200810Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Oct 2 20:06:41.896702 kubelet[2783]: I1002 20:06:41.896588 2783 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Oct 2 20:06:42.353251 kubelet[2783]: I1002 20:06:42.353205 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:42.361498 systemd[1]: Created slice kubepods-besteffort-pod2682ae8a_c9af_4f89_b96d_9b4f3556b38d.slice. Oct 2 20:06:42.363897 kubelet[2783]: I1002 20:06:42.363852 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:42.377121 systemd[1]: Created slice kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice. Oct 2 20:06:42.442301 kubelet[2783]: I1002 20:06:42.442270 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e06f8552-1bce-4a7d-889d-72b522d584ec-clustermesh-secrets\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.442556 kubelet[2783]: I1002 20:06:42.442544 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-hubble-tls\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.442672 kubelet[2783]: I1002 20:06:42.442663 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-run\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.442780 kubelet[2783]: I1002 20:06:42.442771 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2682ae8a-c9af-4f89-b96d-9b4f3556b38d-xtables-lock\") pod \"kube-proxy-8rhk5\" (UID: \"2682ae8a-c9af-4f89-b96d-9b4f3556b38d\") " pod="kube-system/kube-proxy-8rhk5" Oct 2 20:06:42.442891 kubelet[2783]: I1002 20:06:42.442883 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-etc-cni-netd\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443021 kubelet[2783]: I1002 20:06:42.442998 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/2682ae8a-c9af-4f89-b96d-9b4f3556b38d-kube-proxy\") pod \"kube-proxy-8rhk5\" (UID: \"2682ae8a-c9af-4f89-b96d-9b4f3556b38d\") " pod="kube-system/kube-proxy-8rhk5" Oct 2 20:06:42.443093 kubelet[2783]: I1002 20:06:42.443046 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xl256\" (UniqueName: \"kubernetes.io/projected/2682ae8a-c9af-4f89-b96d-9b4f3556b38d-kube-api-access-xl256\") pod \"kube-proxy-8rhk5\" (UID: \"2682ae8a-c9af-4f89-b96d-9b4f3556b38d\") " pod="kube-system/kube-proxy-8rhk5" Oct 2 20:06:42.443093 kubelet[2783]: I1002 20:06:42.443079 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-bpf-maps\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443192 kubelet[2783]: I1002 20:06:42.443112 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-hostproc\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443192 kubelet[2783]: I1002 20:06:42.443146 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-net\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443192 kubelet[2783]: I1002 20:06:42.443177 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2682ae8a-c9af-4f89-b96d-9b4f3556b38d-lib-modules\") pod \"kube-proxy-8rhk5\" (UID: \"2682ae8a-c9af-4f89-b96d-9b4f3556b38d\") " pod="kube-system/kube-proxy-8rhk5" Oct 2 20:06:42.443325 kubelet[2783]: I1002 20:06:42.443210 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-kernel\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443325 kubelet[2783]: I1002 20:06:42.443243 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-cgroup\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443325 kubelet[2783]: I1002 20:06:42.443273 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-lib-modules\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443325 kubelet[2783]: I1002 20:06:42.443304 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-config-path\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443508 kubelet[2783]: I1002 20:06:42.443338 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cni-path\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443508 kubelet[2783]: I1002 20:06:42.443369 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-xtables-lock\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.443508 kubelet[2783]: I1002 20:06:42.443410 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bd7q9\" (UniqueName: \"kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-kube-api-access-bd7q9\") pod \"cilium-lfbn8\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " pod="kube-system/cilium-lfbn8" Oct 2 20:06:42.793993 kubelet[2783]: I1002 20:06:42.793957 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:06:42.802717 systemd[1]: Created slice kubepods-besteffort-pod5ddcc158_862a_41f0_8c84_b756d422b337.slice. Oct 2 20:06:42.846966 kubelet[2783]: I1002 20:06:42.846927 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pq6b5\" (UniqueName: \"kubernetes.io/projected/5ddcc158-862a-41f0-8c84-b756d422b337-kube-api-access-pq6b5\") pod \"cilium-operator-f59cbd8c6-bnv72\" (UID: \"5ddcc158-862a-41f0-8c84-b756d422b337\") " pod="kube-system/cilium-operator-f59cbd8c6-bnv72" Oct 2 20:06:42.847145 kubelet[2783]: I1002 20:06:42.846991 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5ddcc158-862a-41f0-8c84-b756d422b337-cilium-config-path\") pod \"cilium-operator-f59cbd8c6-bnv72\" (UID: \"5ddcc158-862a-41f0-8c84-b756d422b337\") " pod="kube-system/cilium-operator-f59cbd8c6-bnv72" Oct 2 20:06:42.981768 env[1641]: time="2023-10-02T20:06:42.981717734Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lfbn8,Uid:e06f8552-1bce-4a7d-889d-72b522d584ec,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:43.037820 env[1641]: time="2023-10-02T20:06:43.033594696Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:43.037820 env[1641]: time="2023-10-02T20:06:43.033712916Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:43.037820 env[1641]: time="2023-10-02T20:06:43.033745886Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:43.037820 env[1641]: time="2023-10-02T20:06:43.034165147Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a pid=2881 runtime=io.containerd.runc.v2 Oct 2 20:06:43.074040 systemd[1]: Started cri-containerd-c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a.scope. Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.089000 audit: BPF prog-id=118 op=LOAD Oct 2 20:06:43.090000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.090000 audit[2891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2881 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346337343838643337643639653639336330393239623731613631 Oct 2 20:06:43.090000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.090000 audit[2891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2881 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.090000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346337343838643337643639653639336330393239623731613631 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit: BPF prog-id=119 op=LOAD Oct 2 20:06:43.091000 audit[2891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a04d0 items=0 ppid=2881 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346337343838643337643639653639336330393239623731613631 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.091000 audit: BPF prog-id=120 op=LOAD Oct 2 20:06:43.091000 audit[2891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a0518 items=0 ppid=2881 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.091000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346337343838643337643639653639336330393239623731613631 Oct 2 20:06:43.092000 audit: BPF prog-id=120 op=UNLOAD Oct 2 20:06:43.092000 audit: BPF prog-id=119 op=UNLOAD Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { perfmon } for pid=2891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit[2891]: AVC avc: denied { bpf } for pid=2891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.092000 audit: BPF prog-id=121 op=LOAD Oct 2 20:06:43.092000 audit[2891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a0928 items=0 ppid=2881 pid=2891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.092000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346337343838643337643639653639336330393239623731613631 Oct 2 20:06:43.111651 env[1641]: time="2023-10-02T20:06:43.111607361Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-lfbn8,Uid:e06f8552-1bce-4a7d-889d-72b522d584ec,Namespace:kube-system,Attempt:0,} returns sandbox id \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\"" Oct 2 20:06:43.114290 env[1641]: time="2023-10-02T20:06:43.114261635Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\"" Oct 2 20:06:43.272522 env[1641]: time="2023-10-02T20:06:43.272475089Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8rhk5,Uid:2682ae8a-c9af-4f89-b96d-9b4f3556b38d,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:43.296226 env[1641]: time="2023-10-02T20:06:43.296139843Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:43.296521 env[1641]: time="2023-10-02T20:06:43.296190922Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:43.296521 env[1641]: time="2023-10-02T20:06:43.296206468Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:43.296786 env[1641]: time="2023-10-02T20:06:43.296723106Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/528c899f9e69c2fc6c13c71b8ac3ddc29d0c7c7a6e6e02972c241e5f80acaeb7 pid=2922 runtime=io.containerd.runc.v2 Oct 2 20:06:43.313441 systemd[1]: Started cri-containerd-528c899f9e69c2fc6c13c71b8ac3ddc29d0c7c7a6e6e02972c241e5f80acaeb7.scope. Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.339000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.339000 audit: BPF prog-id=122 op=LOAD Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2922 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386338393966396536396332666336633133633731623861633364 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2922 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386338393966396536396332666336633133633731623861633364 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.340000 audit: BPF prog-id=123 op=LOAD Oct 2 20:06:43.340000 audit[2932]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028a360 items=0 ppid=2922 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.340000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386338393966396536396332666336633133633731623861633364 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit: BPF prog-id=124 op=LOAD Oct 2 20:06:43.341000 audit[2932]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028a3a8 items=0 ppid=2922 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386338393966396536396332666336633133633731623861633364 Oct 2 20:06:43.341000 audit: BPF prog-id=124 op=UNLOAD Oct 2 20:06:43.341000 audit: BPF prog-id=123 op=UNLOAD Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { perfmon } for pid=2932 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit[2932]: AVC avc: denied { bpf } for pid=2932 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.341000 audit: BPF prog-id=125 op=LOAD Oct 2 20:06:43.341000 audit[2932]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00028a7b8 items=0 ppid=2922 pid=2932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532386338393966396536396332666336633133633731623861633364 Oct 2 20:06:43.363108 env[1641]: time="2023-10-02T20:06:43.363063903Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-8rhk5,Uid:2682ae8a-c9af-4f89-b96d-9b4f3556b38d,Namespace:kube-system,Attempt:0,} returns sandbox id \"528c899f9e69c2fc6c13c71b8ac3ddc29d0c7c7a6e6e02972c241e5f80acaeb7\"" Oct 2 20:06:43.369172 env[1641]: time="2023-10-02T20:06:43.369122781Z" level=info msg="CreateContainer within sandbox \"528c899f9e69c2fc6c13c71b8ac3ddc29d0c7c7a6e6e02972c241e5f80acaeb7\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Oct 2 20:06:43.396477 env[1641]: time="2023-10-02T20:06:43.396422425Z" level=info msg="CreateContainer within sandbox \"528c899f9e69c2fc6c13c71b8ac3ddc29d0c7c7a6e6e02972c241e5f80acaeb7\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"15b799274e9b45d207ea84d92bcc965d55aefccc884c9bc1e6b88dd3921ebda2\"" Oct 2 20:06:43.399318 env[1641]: time="2023-10-02T20:06:43.397530581Z" level=info msg="StartContainer for \"15b799274e9b45d207ea84d92bcc965d55aefccc884c9bc1e6b88dd3921ebda2\"" Oct 2 20:06:43.425687 systemd[1]: Started cri-containerd-15b799274e9b45d207ea84d92bcc965d55aefccc884c9bc1e6b88dd3921ebda2.scope. Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2922 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623739393237346539623435643230376561383464393262636339 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit: BPF prog-id=126 op=LOAD Oct 2 20:06:43.457000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c00035cde0 items=0 ppid=2922 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623739393237346539623435643230376561383464393262636339 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.457000 audit: BPF prog-id=127 op=LOAD Oct 2 20:06:43.457000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c00035ce28 items=0 ppid=2922 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623739393237346539623435643230376561383464393262636339 Oct 2 20:06:43.458000 audit: BPF prog-id=127 op=UNLOAD Oct 2 20:06:43.458000 audit: BPF prog-id=126 op=UNLOAD Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { perfmon } for pid=2961 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit[2961]: AVC avc: denied { bpf } for pid=2961 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.458000 audit: BPF prog-id=128 op=LOAD Oct 2 20:06:43.458000 audit[2961]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c00035ceb8 items=0 ppid=2922 pid=2961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135623739393237346539623435643230376561383464393262636339 Oct 2 20:06:43.481068 env[1641]: time="2023-10-02T20:06:43.481026111Z" level=info msg="StartContainer for \"15b799274e9b45d207ea84d92bcc965d55aefccc884c9bc1e6b88dd3921ebda2\" returns successfully" Oct 2 20:06:43.713210 env[1641]: time="2023-10-02T20:06:43.713161579Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-bnv72,Uid:5ddcc158-862a-41f0-8c84-b756d422b337,Namespace:kube-system,Attempt:0,}" Oct 2 20:06:43.756293 env[1641]: time="2023-10-02T20:06:43.756157522Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:06:43.756293 env[1641]: time="2023-10-02T20:06:43.756262384Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:06:43.756778 env[1641]: time="2023-10-02T20:06:43.756279372Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:06:43.757097 env[1641]: time="2023-10-02T20:06:43.757057751Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131 pid=2999 runtime=io.containerd.runc.v2 Oct 2 20:06:43.811666 systemd[1]: Started cri-containerd-cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131.scope. Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.834000 audit: BPF prog-id=129 op=LOAD Oct 2 20:06:43.835000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.835000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2999 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366653134643338353033366239613537383136306331613837346335 Oct 2 20:06:43.835000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.835000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2999 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.835000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366653134643338353033366239613537383136306331613837346335 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.840000 audit: BPF prog-id=130 op=LOAD Oct 2 20:06:43.840000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000219980 items=0 ppid=2999 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366653134643338353033366239613537383136306331613837346335 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.844000 audit: BPF prog-id=131 op=LOAD Oct 2 20:06:43.844000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002199c8 items=0 ppid=2999 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.844000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366653134643338353033366239613537383136306331613837346335 Oct 2 20:06:43.849000 audit: BPF prog-id=131 op=UNLOAD Oct 2 20:06:43.849000 audit: BPF prog-id=130 op=UNLOAD Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { perfmon } for pid=3009 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit[3009]: AVC avc: denied { bpf } for pid=3009 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:43.849000 audit: BPF prog-id=132 op=LOAD Oct 2 20:06:43.849000 audit[3009]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000219dd8 items=0 ppid=2999 pid=3009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:43.849000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366653134643338353033366239613537383136306331613837346335 Oct 2 20:06:43.896016 env[1641]: time="2023-10-02T20:06:43.895966959Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-operator-f59cbd8c6-bnv72,Uid:5ddcc158-862a-41f0-8c84-b756d422b337,Namespace:kube-system,Attempt:0,} returns sandbox id \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\"" Oct 2 20:06:44.033000 audit[3054]: NETFILTER_CFG table=mangle:59 family=2 entries=1 op=nft_register_chain pid=3054 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.033000 audit[3054]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd9318c560 a2=0 a3=7ffd9318c54c items=0 ppid=2973 pid=3054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.033000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:44.037000 audit[3055]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_chain pid=3055 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.037000 audit[3055]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0e5c4440 a2=0 a3=7ffc0e5c442c items=0 ppid=2973 pid=3055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.037000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:44.051000 audit[3057]: NETFILTER_CFG table=mangle:61 family=10 entries=1 op=nft_register_chain pid=3057 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.051000 audit[3057]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe052ff8c0 a2=0 a3=7ffe052ff8ac items=0 ppid=2973 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.051000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Oct 2 20:06:44.054000 audit[3056]: NETFILTER_CFG table=filter:62 family=2 entries=1 op=nft_register_chain pid=3056 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.054000 audit[3056]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff4a1f91c0 a2=0 a3=7fff4a1f91ac items=0 ppid=2973 pid=3056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.054000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:44.055000 audit[3058]: NETFILTER_CFG table=nat:63 family=10 entries=1 op=nft_register_chain pid=3058 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.055000 audit[3058]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7c340380 a2=0 a3=7ffd7c34036c items=0 ppid=2973 pid=3058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.055000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Oct 2 20:06:44.057000 audit[3059]: NETFILTER_CFG table=filter:64 family=10 entries=1 op=nft_register_chain pid=3059 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.057000 audit[3059]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc3b54cd50 a2=0 a3=7ffc3b54cd3c items=0 ppid=2973 pid=3059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.057000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Oct 2 20:06:44.140000 audit[3060]: NETFILTER_CFG table=filter:65 family=2 entries=1 op=nft_register_chain pid=3060 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.140000 audit[3060]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffc7b09120 a2=0 a3=7fffc7b0910c items=0 ppid=2973 pid=3060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.140000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:44.144000 audit[3062]: NETFILTER_CFG table=filter:66 family=2 entries=1 op=nft_register_rule pid=3062 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.144000 audit[3062]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffcec1b2d0 a2=0 a3=7fffcec1b2bc items=0 ppid=2973 pid=3062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.144000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Oct 2 20:06:44.151000 audit[3065]: NETFILTER_CFG table=filter:67 family=2 entries=1 op=nft_register_rule pid=3065 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.151000 audit[3065]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe7e644220 a2=0 a3=7ffe7e64420c items=0 ppid=2973 pid=3065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.151000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Oct 2 20:06:44.154000 audit[3066]: NETFILTER_CFG table=filter:68 family=2 entries=1 op=nft_register_chain pid=3066 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.154000 audit[3066]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffc4d9a590 a2=0 a3=7fffc4d9a57c items=0 ppid=2973 pid=3066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.154000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:44.158000 audit[3068]: NETFILTER_CFG table=filter:69 family=2 entries=1 op=nft_register_rule pid=3068 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.158000 audit[3068]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd08306060 a2=0 a3=7ffd0830604c items=0 ppid=2973 pid=3068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.158000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:44.160000 audit[3069]: NETFILTER_CFG table=filter:70 family=2 entries=1 op=nft_register_chain pid=3069 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.160000 audit[3069]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe64136730 a2=0 a3=7ffe6413671c items=0 ppid=2973 pid=3069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.160000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:44.164000 audit[3071]: NETFILTER_CFG table=filter:71 family=2 entries=1 op=nft_register_rule pid=3071 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.164000 audit[3071]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fff96e65480 a2=0 a3=7fff96e6546c items=0 ppid=2973 pid=3071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.164000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:44.170000 audit[3074]: NETFILTER_CFG table=filter:72 family=2 entries=1 op=nft_register_rule pid=3074 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.170000 audit[3074]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc71516f20 a2=0 a3=7ffc71516f0c items=0 ppid=2973 pid=3074 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.170000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Oct 2 20:06:44.172000 audit[3075]: NETFILTER_CFG table=filter:73 family=2 entries=1 op=nft_register_chain pid=3075 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.172000 audit[3075]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe40e64ab0 a2=0 a3=7ffe40e64a9c items=0 ppid=2973 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.172000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:44.176000 audit[3077]: NETFILTER_CFG table=filter:74 family=2 entries=1 op=nft_register_rule pid=3077 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.176000 audit[3077]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcc9437b40 a2=0 a3=7ffcc9437b2c items=0 ppid=2973 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.176000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:44.178000 audit[3078]: NETFILTER_CFG table=filter:75 family=2 entries=1 op=nft_register_chain pid=3078 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.178000 audit[3078]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd79a7c9e0 a2=0 a3=7ffd79a7c9cc items=0 ppid=2973 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.178000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:44.181000 audit[3080]: NETFILTER_CFG table=filter:76 family=2 entries=1 op=nft_register_rule pid=3080 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.181000 audit[3080]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffec8469090 a2=0 a3=7ffec846907c items=0 ppid=2973 pid=3080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.181000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:44.189000 audit[3083]: NETFILTER_CFG table=filter:77 family=2 entries=1 op=nft_register_rule pid=3083 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.189000 audit[3083]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd13fde2b0 a2=0 a3=7ffd13fde29c items=0 ppid=2973 pid=3083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.189000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:44.193000 audit[3086]: NETFILTER_CFG table=filter:78 family=2 entries=1 op=nft_register_rule pid=3086 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.193000 audit[3086]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf84ac3b0 a2=0 a3=7ffcf84ac39c items=0 ppid=2973 pid=3086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.193000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:44.195000 audit[3087]: NETFILTER_CFG table=nat:79 family=2 entries=1 op=nft_register_chain pid=3087 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.195000 audit[3087]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff90534f60 a2=0 a3=7fff90534f4c items=0 ppid=2973 pid=3087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.195000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:44.200000 audit[3089]: NETFILTER_CFG table=nat:80 family=2 entries=1 op=nft_register_rule pid=3089 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.200000 audit[3089]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe50192d60 a2=0 a3=7ffe50192d4c items=0 ppid=2973 pid=3089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.200000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:44.204000 audit[3092]: NETFILTER_CFG table=nat:81 family=2 entries=1 op=nft_register_rule pid=3092 subj=system_u:system_r:kernel_t:s0 comm="iptables" Oct 2 20:06:44.204000 audit[3092]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc14cad410 a2=0 a3=7ffc14cad3fc items=0 ppid=2973 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.204000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:44.228000 audit[3096]: NETFILTER_CFG table=filter:82 family=2 entries=6 op=nft_register_rule pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:44.228000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=4028 a0=3 a1=7ffc75f1ce40 a2=0 a3=7ffc75f1ce2c items=0 ppid=2973 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.228000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:44.237000 audit[3096]: NETFILTER_CFG table=nat:83 family=2 entries=17 op=nft_register_chain pid=3096 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Oct 2 20:06:44.237000 audit[3096]: SYSCALL arch=c000003e syscall=46 success=yes exit=5340 a0=3 a1=7ffc75f1ce40 a2=0 a3=7ffc75f1ce2c items=0 ppid=2973 pid=3096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.237000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:44.243000 audit[3101]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=3101 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.243000 audit[3101]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdf964ad70 a2=0 a3=7ffdf964ad5c items=0 ppid=2973 pid=3101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.243000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Oct 2 20:06:44.248000 audit[3103]: NETFILTER_CFG table=filter:85 family=10 entries=2 op=nft_register_chain pid=3103 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.248000 audit[3103]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe44e7a1d0 a2=0 a3=7ffe44e7a1bc items=0 ppid=2973 pid=3103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.248000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Oct 2 20:06:44.253000 audit[3106]: NETFILTER_CFG table=filter:86 family=10 entries=2 op=nft_register_chain pid=3106 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.253000 audit[3106]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff41c1ad90 a2=0 a3=7fff41c1ad7c items=0 ppid=2973 pid=3106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.253000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Oct 2 20:06:44.255000 audit[3107]: NETFILTER_CFG table=filter:87 family=10 entries=1 op=nft_register_chain pid=3107 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.255000 audit[3107]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff3cbf6980 a2=0 a3=7fff3cbf696c items=0 ppid=2973 pid=3107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.255000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Oct 2 20:06:44.259000 audit[3109]: NETFILTER_CFG table=filter:88 family=10 entries=1 op=nft_register_rule pid=3109 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.259000 audit[3109]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffeda097720 a2=0 a3=7ffeda09770c items=0 ppid=2973 pid=3109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.259000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Oct 2 20:06:44.261000 audit[3110]: NETFILTER_CFG table=filter:89 family=10 entries=1 op=nft_register_chain pid=3110 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.261000 audit[3110]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe2c8e79d0 a2=0 a3=7ffe2c8e79bc items=0 ppid=2973 pid=3110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.261000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Oct 2 20:06:44.266000 audit[3112]: NETFILTER_CFG table=filter:90 family=10 entries=1 op=nft_register_rule pid=3112 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.266000 audit[3112]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd0e918f20 a2=0 a3=7ffd0e918f0c items=0 ppid=2973 pid=3112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.266000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Oct 2 20:06:44.271000 audit[3115]: NETFILTER_CFG table=filter:91 family=10 entries=2 op=nft_register_chain pid=3115 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.271000 audit[3115]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffeceeffd30 a2=0 a3=7ffeceeffd1c items=0 ppid=2973 pid=3115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.271000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Oct 2 20:06:44.273000 audit[3116]: NETFILTER_CFG table=filter:92 family=10 entries=1 op=nft_register_chain pid=3116 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.273000 audit[3116]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff54954fc0 a2=0 a3=7fff54954fac items=0 ppid=2973 pid=3116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.273000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Oct 2 20:06:44.282000 audit[3118]: NETFILTER_CFG table=filter:93 family=10 entries=1 op=nft_register_rule pid=3118 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.282000 audit[3118]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe46d83ec0 a2=0 a3=7ffe46d83eac items=0 ppid=2973 pid=3118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.282000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Oct 2 20:06:44.287000 audit[3119]: NETFILTER_CFG table=filter:94 family=10 entries=1 op=nft_register_chain pid=3119 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.287000 audit[3119]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc695536a0 a2=0 a3=7ffc6955368c items=0 ppid=2973 pid=3119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.287000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Oct 2 20:06:44.299000 audit[3121]: NETFILTER_CFG table=filter:95 family=10 entries=1 op=nft_register_rule pid=3121 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.299000 audit[3121]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcf12a2520 a2=0 a3=7ffcf12a250c items=0 ppid=2973 pid=3121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.299000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Oct 2 20:06:44.309000 audit[3124]: NETFILTER_CFG table=filter:96 family=10 entries=1 op=nft_register_rule pid=3124 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.309000 audit[3124]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd7f8a8850 a2=0 a3=7ffd7f8a883c items=0 ppid=2973 pid=3124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.309000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Oct 2 20:06:44.320000 audit[3127]: NETFILTER_CFG table=filter:97 family=10 entries=1 op=nft_register_rule pid=3127 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.320000 audit[3127]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd063aab90 a2=0 a3=7ffd063aab7c items=0 ppid=2973 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.320000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Oct 2 20:06:44.322000 audit[3128]: NETFILTER_CFG table=nat:98 family=10 entries=1 op=nft_register_chain pid=3128 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.322000 audit[3128]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcd8f7ef50 a2=0 a3=7ffcd8f7ef3c items=0 ppid=2973 pid=3128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.322000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Oct 2 20:06:44.326000 audit[3130]: NETFILTER_CFG table=nat:99 family=10 entries=2 op=nft_register_chain pid=3130 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.326000 audit[3130]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffd8777ba10 a2=0 a3=7ffd8777b9fc items=0 ppid=2973 pid=3130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.326000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:44.340000 audit[3133]: NETFILTER_CFG table=nat:100 family=10 entries=2 op=nft_register_chain pid=3133 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Oct 2 20:06:44.340000 audit[3133]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffccc1187f0 a2=0 a3=7ffccc1187dc items=0 ppid=2973 pid=3133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.340000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Oct 2 20:06:44.366000 audit[3137]: NETFILTER_CFG table=filter:101 family=10 entries=3 op=nft_register_rule pid=3137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:44.366000 audit[3137]: SYSCALL arch=c000003e syscall=46 success=yes exit=1916 a0=3 a1=7ffd362c6780 a2=0 a3=7ffd362c676c items=0 ppid=2973 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.366000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:44.367000 audit[3137]: NETFILTER_CFG table=nat:102 family=10 entries=10 op=nft_register_chain pid=3137 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Oct 2 20:06:44.367000 audit[3137]: SYSCALL arch=c000003e syscall=46 success=yes exit=1968 a0=3 a1=7ffd362c6780 a2=0 a3=7ffd362c676c items=0 ppid=2973 pid=3137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:44.367000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Oct 2 20:06:44.557161 systemd[1]: run-containerd-runc-k8s.io-cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131-runc.o9xHRy.mount: Deactivated successfully. Oct 2 20:06:49.801123 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount166891655.mount: Deactivated successfully. Oct 2 20:06:54.022978 env[1641]: time="2023-10-02T20:06:54.022809152Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:54.026905 env[1641]: time="2023-10-02T20:06:54.026853722Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:54.032900 env[1641]: time="2023-10-02T20:06:54.032851257Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/cilium@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:54.034602 env[1641]: time="2023-10-02T20:06:54.034559822Z" level=info msg="PullImage \"quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5\" returns image reference \"sha256:3e35b3e9f295e7748482d40ed499b0ff7961f1f128d479d8e6682b3245bba69b\"" Oct 2 20:06:54.041874 env[1641]: time="2023-10-02T20:06:54.041248125Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:06:54.042064 env[1641]: time="2023-10-02T20:06:54.042018738Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\"" Oct 2 20:06:54.071265 env[1641]: time="2023-10-02T20:06:54.071213268Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\"" Oct 2 20:06:54.072554 env[1641]: time="2023-10-02T20:06:54.072407642Z" level=info msg="StartContainer for \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\"" Oct 2 20:06:54.120820 systemd[1]: Started cri-containerd-c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2.scope. Oct 2 20:06:54.134055 systemd[1]: run-containerd-runc-k8s.io-c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2-runc.czmyOx.mount: Deactivated successfully. Oct 2 20:06:54.148967 systemd[1]: cri-containerd-c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2.scope: Deactivated successfully. Oct 2 20:06:54.368051 env[1641]: time="2023-10-02T20:06:54.367123584Z" level=info msg="shim disconnected" id=c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2 Oct 2 20:06:54.368051 env[1641]: time="2023-10-02T20:06:54.367186346Z" level=warning msg="cleaning up after shim disconnected" id=c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2 namespace=k8s.io Oct 2 20:06:54.368051 env[1641]: time="2023-10-02T20:06:54.367203377Z" level=info msg="cleaning up dead shim" Oct 2 20:06:54.378973 env[1641]: time="2023-10-02T20:06:54.378914765Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3164 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:54.379333 env[1641]: time="2023-10-02T20:06:54.379212655Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:06:54.379608 env[1641]: time="2023-10-02T20:06:54.379564007Z" level=error msg="Failed to pipe stderr of container \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\"" error="reading from a closed fifo" Oct 2 20:06:54.379691 env[1641]: time="2023-10-02T20:06:54.379644601Z" level=error msg="Failed to pipe stdout of container \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\"" error="reading from a closed fifo" Oct 2 20:06:54.382589 env[1641]: time="2023-10-02T20:06:54.382160870Z" level=error msg="StartContainer for \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:54.382972 kubelet[2783]: E1002 20:06:54.382945 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2" Oct 2 20:06:54.383360 kubelet[2783]: E1002 20:06:54.383150 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:54.383360 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:54.383360 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:06:54.383360 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bd7q9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:54.383849 kubelet[2783]: E1002 20:06:54.383222 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:06:54.441918 env[1641]: time="2023-10-02T20:06:54.441874450Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:06:54.454180 kubelet[2783]: I1002 20:06:54.454146 2783 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/kube-proxy-8rhk5" podStartSLOduration=12.454097457 pod.CreationTimestamp="2023-10-02 20:06:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:44.403490615 +0000 UTC m=+14.773591432" watchObservedRunningTime="2023-10-02 20:06:54.454097457 +0000 UTC m=+24.824198212" Oct 2 20:06:54.466735 env[1641]: time="2023-10-02T20:06:54.466683698Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\"" Oct 2 20:06:54.467454 env[1641]: time="2023-10-02T20:06:54.467340496Z" level=info msg="StartContainer for \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\"" Oct 2 20:06:54.490586 systemd[1]: Started cri-containerd-0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8.scope. Oct 2 20:06:54.505169 systemd[1]: cri-containerd-0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8.scope: Deactivated successfully. Oct 2 20:06:54.524770 env[1641]: time="2023-10-02T20:06:54.524710372Z" level=info msg="shim disconnected" id=0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8 Oct 2 20:06:54.524770 env[1641]: time="2023-10-02T20:06:54.524772830Z" level=warning msg="cleaning up after shim disconnected" id=0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8 namespace=k8s.io Oct 2 20:06:54.524770 env[1641]: time="2023-10-02T20:06:54.524785630Z" level=info msg="cleaning up dead shim" Oct 2 20:06:54.535928 env[1641]: time="2023-10-02T20:06:54.535876828Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:06:54Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3202 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:06:54Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:06:54.536208 env[1641]: time="2023-10-02T20:06:54.536151237Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:06:54.536445 env[1641]: time="2023-10-02T20:06:54.536401448Z" level=error msg="Failed to pipe stdout of container \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\"" error="reading from a closed fifo" Oct 2 20:06:54.536691 env[1641]: time="2023-10-02T20:06:54.536650247Z" level=error msg="Failed to pipe stderr of container \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\"" error="reading from a closed fifo" Oct 2 20:06:54.542366 env[1641]: time="2023-10-02T20:06:54.542286431Z" level=error msg="StartContainer for \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:06:54.542716 kubelet[2783]: E1002 20:06:54.542691 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8" Oct 2 20:06:54.542866 kubelet[2783]: E1002 20:06:54.542849 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:06:54.542866 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:06:54.542866 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:06:54.542866 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bd7q9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:06:54.543145 kubelet[2783]: E1002 20:06:54.542915 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:06:55.062782 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2-rootfs.mount: Deactivated successfully. Oct 2 20:06:55.466790 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4283283294.mount: Deactivated successfully. Oct 2 20:06:55.473278 kubelet[2783]: I1002 20:06:55.473251 2783 scope.go:115] "RemoveContainer" containerID="c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2" Oct 2 20:06:55.474065 kubelet[2783]: I1002 20:06:55.473671 2783 scope.go:115] "RemoveContainer" containerID="c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2" Oct 2 20:06:55.486449 env[1641]: time="2023-10-02T20:06:55.483111268Z" level=info msg="RemoveContainer for \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\"" Oct 2 20:06:55.486449 env[1641]: time="2023-10-02T20:06:55.484323449Z" level=info msg="RemoveContainer for \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\"" Oct 2 20:06:55.486449 env[1641]: time="2023-10-02T20:06:55.485149295Z" level=error msg="RemoveContainer for \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\" failed" error="failed to set removing state for container \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\": container is already in removing state" Oct 2 20:06:55.487236 kubelet[2783]: E1002 20:06:55.485423 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\": container is already in removing state" containerID="c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2" Oct 2 20:06:55.487236 kubelet[2783]: I1002 20:06:55.485480 2783 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2} err="rpc error: code = Unknown desc = failed to set removing state for container \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\": container is already in removing state" Oct 2 20:06:55.496627 env[1641]: time="2023-10-02T20:06:55.496580472Z" level=info msg="RemoveContainer for \"c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2\" returns successfully" Oct 2 20:06:55.497669 kubelet[2783]: E1002 20:06:55.497644 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:06:56.479042 kubelet[2783]: E1002 20:06:56.478695 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:06:56.481800 env[1641]: time="2023-10-02T20:06:56.481717427Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:56.488083 env[1641]: time="2023-10-02T20:06:56.488027780Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:56.493133 env[1641]: time="2023-10-02T20:06:56.493093396Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/cilium/operator-generic@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Oct 2 20:06:56.497696 env[1641]: time="2023-10-02T20:06:56.497646073Z" level=info msg="PullImage \"quay.io/cilium/operator-generic:v1.12.5@sha256:b296eb7f0f7656a5cc19724f40a8a7121b7fd725278b7d61dc91fe0b7ffd7c0e\" returns image reference \"sha256:ed355de9f59fe391dbe53f3c7c7a60baab3c3a9b7549aa54d10b87fff7dacf7c\"" Oct 2 20:06:56.505671 env[1641]: time="2023-10-02T20:06:56.505610894Z" level=info msg="CreateContainer within sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" for container &ContainerMetadata{Name:cilium-operator,Attempt:0,}" Oct 2 20:06:56.524447 env[1641]: time="2023-10-02T20:06:56.524395302Z" level=info msg="CreateContainer within sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" for &ContainerMetadata{Name:cilium-operator,Attempt:0,} returns container id \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\"" Oct 2 20:06:56.526412 env[1641]: time="2023-10-02T20:06:56.525150815Z" level=info msg="StartContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\"" Oct 2 20:06:56.557089 systemd[1]: Started cri-containerd-83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca.scope. Oct 2 20:06:56.580711 kernel: kauditd_printk_skb: 351 callbacks suppressed Oct 2 20:06:56.580871 kernel: audit: type=1400 audit(1696277216.568:1126): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580916 kernel: audit: type=1400 audit(1696277216.568:1127): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.591968 kernel: audit: type=1400 audit(1696277216.568:1128): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.592099 kernel: audit: type=1400 audit(1696277216.568:1129): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.599272 kernel: audit: type=1400 audit(1696277216.568:1130): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.612193 kernel: audit: type=1400 audit(1696277216.568:1131): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.612533 kernel: audit: type=1400 audit(1696277216.568:1132): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.612576 kernel: audit: type=1400 audit(1696277216.568:1133): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.617980 kernel: audit: type=1400 audit(1696277216.568:1134): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.618111 kernel: audit: type=1400 audit(1696277216.579:1135): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.579000 audit: BPF prog-id=133 op=LOAD Oct 2 20:06:56.579000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.579000 audit[3222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2999 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:56.579000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653432666137383163356634663563316332653532666531366339 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2999 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:56.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653432666137383163356634663563316332653532666531366339 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit: BPF prog-id=134 op=LOAD Oct 2 20:06:56.580000 audit[3222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000392420 items=0 ppid=2999 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:56.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653432666137383163356634663563316332653532666531366339 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit: BPF prog-id=135 op=LOAD Oct 2 20:06:56.580000 audit[3222]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000392468 items=0 ppid=2999 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:56.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653432666137383163356634663563316332653532666531366339 Oct 2 20:06:56.580000 audit: BPF prog-id=135 op=UNLOAD Oct 2 20:06:56.580000 audit: BPF prog-id=134 op=UNLOAD Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { perfmon } for pid=3222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit[3222]: AVC avc: denied { bpf } for pid=3222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:06:56.580000 audit: BPF prog-id=136 op=LOAD Oct 2 20:06:56.580000 audit[3222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000392878 items=0 ppid=2999 pid=3222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:06:56.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3833653432666137383163356634663563316332653532666531366339 Oct 2 20:06:56.631197 env[1641]: time="2023-10-02T20:06:56.631148031Z" level=info msg="StartContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" returns successfully" Oct 2 20:06:56.661000 audit[3232]: AVC avc: denied { map_create } for pid=3232 comm="cilium-operator" scontext=system_u:system_r:svirt_lxc_net_t:s0:c369,c404 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c369,c404 tclass=bpf permissive=0 Oct 2 20:06:56.661000 audit[3232]: SYSCALL arch=c000003e syscall=321 success=no exit=-13 a0=0 a1=c0003e57d0 a2=48 a3=c0003e57c0 items=0 ppid=2999 pid=3232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cilium-operator" exe="/usr/bin/cilium-operator-generic" subj=system_u:system_r:svirt_lxc_net_t:s0:c369,c404 key=(null) Oct 2 20:06:56.661000 audit: PROCTITLE proctitle=63696C69756D2D6F70657261746F722D67656E65726963002D2D636F6E6669672D6469723D2F746D702F63696C69756D2F636F6E6669672D6D6170002D2D64656275673D66616C7365 Oct 2 20:06:57.475038 kubelet[2783]: W1002 20:06:57.474987 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice/cri-containerd-c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2.scope WatchSource:0}: container "c9e72b01782a6c35ceaec7bfa93892cd5f6a0866b3887a05fb7de692348115d2" in namespace "k8s.io": not found Oct 2 20:07:00.585797 kubelet[2783]: W1002 20:07:00.585754 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice/cri-containerd-0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8.scope WatchSource:0}: task 0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8 not found: not found Oct 2 20:07:10.334188 env[1641]: time="2023-10-02T20:07:10.333887742Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:07:10.353459 env[1641]: time="2023-10-02T20:07:10.353279690Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\"" Oct 2 20:07:10.354769 env[1641]: time="2023-10-02T20:07:10.354733671Z" level=info msg="StartContainer for \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\"" Oct 2 20:07:10.390265 systemd[1]: Started cri-containerd-de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa.scope. Oct 2 20:07:10.405686 systemd[1]: cri-containerd-de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa.scope: Deactivated successfully. Oct 2 20:07:10.411731 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa-rootfs.mount: Deactivated successfully. Oct 2 20:07:10.433560 env[1641]: time="2023-10-02T20:07:10.433510110Z" level=info msg="shim disconnected" id=de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa Oct 2 20:07:10.433560 env[1641]: time="2023-10-02T20:07:10.433557813Z" level=warning msg="cleaning up after shim disconnected" id=de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa namespace=k8s.io Oct 2 20:07:10.433851 env[1641]: time="2023-10-02T20:07:10.433569170Z" level=info msg="cleaning up dead shim" Oct 2 20:07:10.451316 env[1641]: time="2023-10-02T20:07:10.451241549Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:10Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3277 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:10Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:10.452449 env[1641]: time="2023-10-02T20:07:10.452361074Z" level=error msg="copy shim log" error="read /proc/self/fd/99: file already closed" Oct 2 20:07:10.452719 env[1641]: time="2023-10-02T20:07:10.452682040Z" level=error msg="Failed to pipe stdout of container \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\"" error="reading from a closed fifo" Oct 2 20:07:10.452789 env[1641]: time="2023-10-02T20:07:10.452672155Z" level=error msg="Failed to pipe stderr of container \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\"" error="reading from a closed fifo" Oct 2 20:07:10.455482 env[1641]: time="2023-10-02T20:07:10.455427956Z" level=error msg="StartContainer for \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:10.455760 kubelet[2783]: E1002 20:07:10.455739 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa" Oct 2 20:07:10.456241 kubelet[2783]: E1002 20:07:10.455862 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:10.456241 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:10.456241 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:07:10.456241 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bd7q9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:10.456491 kubelet[2783]: E1002 20:07:10.455910 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:07:10.511074 kubelet[2783]: I1002 20:07:10.510522 2783 scope.go:115] "RemoveContainer" containerID="0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8" Oct 2 20:07:10.511074 kubelet[2783]: I1002 20:07:10.510874 2783 scope.go:115] "RemoveContainer" containerID="0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8" Oct 2 20:07:10.514262 env[1641]: time="2023-10-02T20:07:10.513489261Z" level=info msg="RemoveContainer for \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\"" Oct 2 20:07:10.514262 env[1641]: time="2023-10-02T20:07:10.514109435Z" level=info msg="RemoveContainer for \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\"" Oct 2 20:07:10.514262 env[1641]: time="2023-10-02T20:07:10.514202352Z" level=error msg="RemoveContainer for \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\" failed" error="failed to set removing state for container \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\": container is already in removing state" Oct 2 20:07:10.516804 kubelet[2783]: E1002 20:07:10.516095 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\": container is already in removing state" containerID="0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8" Oct 2 20:07:10.516804 kubelet[2783]: E1002 20:07:10.516158 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8": container is already in removing state; Skipping pod "cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)" Oct 2 20:07:10.516804 kubelet[2783]: E1002 20:07:10.516653 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:07:10.526391 env[1641]: time="2023-10-02T20:07:10.526328481Z" level=info msg="RemoveContainer for \"0a644083663696e208067b3447f471da3e12dc02429cfb395dae0523c2525fe8\" returns successfully" Oct 2 20:07:10.535460 kubelet[2783]: I1002 20:07:10.535429 2783 pod_startup_latency_tracker.go:102] "Observed pod startup duration" pod="kube-system/cilium-operator-f59cbd8c6-bnv72" podStartSLOduration=-9.22337200831942e+09 pod.CreationTimestamp="2023-10-02 20:06:42 +0000 UTC" firstStartedPulling="2023-10-02 20:06:43.897513035 +0000 UTC m=+14.267613770" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2023-10-02 20:06:57.539859885 +0000 UTC m=+27.909960637" watchObservedRunningTime="2023-10-02 20:07:10.53535575 +0000 UTC m=+40.905456508" Oct 2 20:07:13.542779 kubelet[2783]: W1002 20:07:13.542736 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice/cri-containerd-de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa.scope WatchSource:0}: task de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa not found: not found Oct 2 20:07:21.330409 kubelet[2783]: E1002 20:07:21.330352 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:07:24.685000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:24.687862 kernel: kauditd_printk_skb: 50 callbacks suppressed Oct 2 20:07:24.687969 kernel: audit: type=1400 audit(1696277244.685:1146): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:24.685000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:24.699511 kernel: audit: type=1400 audit(1696277244.685:1145): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:24.699637 kernel: audit: type=1300 audit(1696277244.685:1145): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00120b080 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:24.685000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00120b080 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:24.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:24.712852 kernel: audit: type=1327 audit(1696277244.685:1145): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:24.712975 kernel: audit: type=1300 audit(1696277244.685:1146): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00266c480 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:24.685000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00266c480 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:24.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:24.725793 kernel: audit: type=1327 audit(1696277244.685:1146): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:26.138000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.138000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.152750 kernel: audit: type=1400 audit(1696277246.138:1148): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.152905 kernel: audit: type=1400 audit(1696277246.138:1147): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.152940 kernel: audit: type=1300 audit(1696277246.138:1148): arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00e051220 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.138000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00e051220 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.138000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:26.166110 kernel: audit: type=1327 audit(1696277246.138:1148): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:26.139000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.139000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ac3e9f0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.139000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:26.138000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00ae5dfb0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.138000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:26.171000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.171000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00ae9e060 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.171000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:26.293000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.293000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:26.293000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=59 a1=c00ac3ecc0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.293000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:26.293000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=58 a1=c00e1eb820 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:07:26.293000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:07:32.150850 systemd[1]: Started sshd@7-172.31.28.145:22-139.178.89.65:33918.service. Oct 2 20:07:32.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.145:22-139.178.89.65:33918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:32.153334 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:07:32.153433 kernel: audit: type=1130 audit(1696277252.151:1153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.145:22-139.178.89.65:33918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:32.357000 audit[3297]: USER_ACCT pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.365283 sshd[3297]: Accepted publickey for core from 139.178.89.65 port 33918 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:32.365767 kernel: audit: type=1101 audit(1696277252.357:1154): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.365000 audit[3297]: CRED_ACQ pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.366338 sshd[3297]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:32.375096 kernel: audit: type=1103 audit(1696277252.365:1155): pid=3297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.379399 kernel: audit: type=1006 audit(1696277252.365:1156): pid=3297 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Oct 2 20:07:32.379520 kernel: audit: type=1300 audit(1696277252.365:1156): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb9146870 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:32.365000 audit[3297]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb9146870 a2=3 a3=0 items=0 ppid=1 pid=3297 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:32.365000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:32.387717 kernel: audit: type=1327 audit(1696277252.365:1156): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:32.391213 systemd-logind[1633]: New session 8 of user core. Oct 2 20:07:32.391867 systemd[1]: Started session-8.scope. Oct 2 20:07:32.397000 audit[3297]: USER_START pid=3297 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.406814 kernel: audit: type=1105 audit(1696277252.397:1157): pid=3297 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.407000 audit[3299]: CRED_ACQ pid=3299 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.417649 kernel: audit: type=1103 audit(1696277252.407:1158): pid=3299 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.834985 sshd[3297]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:32.838000 audit[3297]: USER_END pid=3297 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.842830 systemd[1]: sshd@7-172.31.28.145:22-139.178.89.65:33918.service: Deactivated successfully. Oct 2 20:07:32.843883 systemd[1]: session-8.scope: Deactivated successfully. Oct 2 20:07:32.845990 systemd-logind[1633]: Session 8 logged out. Waiting for processes to exit. Oct 2 20:07:32.838000 audit[3297]: CRED_DISP pid=3297 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.848774 systemd-logind[1633]: Removed session 8. Oct 2 20:07:32.853339 kernel: audit: type=1106 audit(1696277252.838:1159): pid=3297 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.853557 kernel: audit: type=1104 audit(1696277252.838:1160): pid=3297 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:32.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-172.31.28.145:22-139.178.89.65:33918 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:35.346132 env[1641]: time="2023-10-02T20:07:35.346083470Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:07:35.377763 env[1641]: time="2023-10-02T20:07:35.377665973Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\"" Oct 2 20:07:35.379723 env[1641]: time="2023-10-02T20:07:35.379685740Z" level=info msg="StartContainer for \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\"" Oct 2 20:07:35.415565 systemd[1]: Started cri-containerd-6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777.scope. Oct 2 20:07:35.430167 systemd[1]: cri-containerd-6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777.scope: Deactivated successfully. Oct 2 20:07:35.458731 env[1641]: time="2023-10-02T20:07:35.458665092Z" level=info msg="shim disconnected" id=6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777 Oct 2 20:07:35.458731 env[1641]: time="2023-10-02T20:07:35.458730016Z" level=warning msg="cleaning up after shim disconnected" id=6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777 namespace=k8s.io Oct 2 20:07:35.459128 env[1641]: time="2023-10-02T20:07:35.458741962Z" level=info msg="cleaning up dead shim" Oct 2 20:07:35.468226 env[1641]: time="2023-10-02T20:07:35.468163917Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:07:35Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3333 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:07:35Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:07:35.468548 env[1641]: time="2023-10-02T20:07:35.468479921Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:07:35.468770 env[1641]: time="2023-10-02T20:07:35.468725577Z" level=error msg="Failed to pipe stdout of container \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\"" error="reading from a closed fifo" Oct 2 20:07:35.469555 env[1641]: time="2023-10-02T20:07:35.469513488Z" level=error msg="Failed to pipe stderr of container \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\"" error="reading from a closed fifo" Oct 2 20:07:35.472105 env[1641]: time="2023-10-02T20:07:35.472058525Z" level=error msg="StartContainer for \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:07:35.472360 kubelet[2783]: E1002 20:07:35.472336 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777" Oct 2 20:07:35.472840 kubelet[2783]: E1002 20:07:35.472547 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:07:35.472840 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:07:35.472840 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:07:35.472840 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bd7q9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:07:35.473119 kubelet[2783]: E1002 20:07:35.472600 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:07:35.572939 kubelet[2783]: I1002 20:07:35.572877 2783 scope.go:115] "RemoveContainer" containerID="de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa" Oct 2 20:07:35.573573 kubelet[2783]: I1002 20:07:35.573549 2783 scope.go:115] "RemoveContainer" containerID="de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa" Oct 2 20:07:35.581400 env[1641]: time="2023-10-02T20:07:35.578633438Z" level=info msg="RemoveContainer for \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\"" Oct 2 20:07:35.581400 env[1641]: time="2023-10-02T20:07:35.580124462Z" level=info msg="RemoveContainer for \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\"" Oct 2 20:07:35.581400 env[1641]: time="2023-10-02T20:07:35.580265428Z" level=error msg="RemoveContainer for \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\" failed" error="failed to set removing state for container \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\": container is already in removing state" Oct 2 20:07:35.581694 kubelet[2783]: E1002 20:07:35.581163 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\": container is already in removing state" containerID="de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa" Oct 2 20:07:35.581694 kubelet[2783]: E1002 20:07:35.581309 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa": container is already in removing state; Skipping pod "cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)" Oct 2 20:07:35.582025 kubelet[2783]: E1002 20:07:35.582006 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:07:35.584075 env[1641]: time="2023-10-02T20:07:35.584037545Z" level=info msg="RemoveContainer for \"de3a033d064053cc6206f3c9aaaaab4af1c3988c4476f5cbbb834f13fdf3cdfa\" returns successfully" Oct 2 20:07:36.358443 systemd[1]: run-containerd-runc-k8s.io-6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777-runc.Cu5bsf.mount: Deactivated successfully. Oct 2 20:07:36.358568 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777-rootfs.mount: Deactivated successfully. Oct 2 20:07:38.571337 kubelet[2783]: W1002 20:07:38.571287 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice/cri-containerd-6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777.scope WatchSource:0}: task 6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777 not found: not found Oct 2 20:07:41.677000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.680602 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:07:41.681609 kernel: audit: type=1400 audit(1696277261.677:1162): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.677000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029df420 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.698314 kernel: audit: type=1300 audit(1696277261.677:1162): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029df420 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.698487 kernel: audit: type=1327 audit(1696277261.677:1162): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:41.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:41.710000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.719469 kernel: audit: type=1400 audit(1696277261.710:1163): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.719708 kernel: audit: type=1400 audit(1696277261.710:1164): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.710000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.710000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029de000 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.736275 kernel: audit: type=1300 audit(1696277261.710:1163): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029de000 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.710000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002828000 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.710000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:41.757358 kernel: audit: type=1300 audit(1696277261.710:1164): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002828000 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.757502 kernel: audit: type=1327 audit(1696277261.710:1164): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:41.757546 kernel: audit: type=1327 audit(1696277261.710:1163): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:41.710000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:41.715000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.772399 kernel: audit: type=1400 audit(1696277261.715:1165): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:07:41.715000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029de120 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:07:41.715000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:07:42.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.145:22-139.178.89.65:58320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:42.882981 systemd[1]: Started sshd@8-172.31.28.145:22-139.178.89.65:58320.service. Oct 2 20:07:43.061000 audit[3349]: USER_ACCT pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:43.062896 sshd[3349]: Accepted publickey for core from 139.178.89.65 port 58320 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:43.064000 audit[3349]: CRED_ACQ pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:43.064000 audit[3349]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc1b0d0c20 a2=3 a3=0 items=0 ppid=1 pid=3349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:43.064000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:43.067222 sshd[3349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:43.075890 systemd[1]: Started session-9.scope. Oct 2 20:07:43.077102 systemd-logind[1633]: New session 9 of user core. Oct 2 20:07:43.081000 audit[3349]: USER_START pid=3349 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:43.083000 audit[3351]: CRED_ACQ pid=3351 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:43.315055 sshd[3349]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:43.316000 audit[3349]: USER_END pid=3349 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:43.317000 audit[3349]: CRED_DISP pid=3349 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:43.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-172.31.28.145:22-139.178.89.65:58320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:43.319897 systemd[1]: sshd@8-172.31.28.145:22-139.178.89.65:58320.service: Deactivated successfully. Oct 2 20:07:43.320786 systemd[1]: session-9.scope: Deactivated successfully. Oct 2 20:07:43.322210 systemd-logind[1633]: Session 9 logged out. Waiting for processes to exit. Oct 2 20:07:43.323318 systemd-logind[1633]: Removed session 9. Oct 2 20:07:47.330702 kubelet[2783]: E1002 20:07:47.330657 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:07:53.345611 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:07:53.345746 kernel: audit: type=1130 audit(1696277273.342:1175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.145:22-139.178.89.65:36914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:53.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.145:22-139.178.89.65:36914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:53.343193 systemd[1]: Started sshd@9-172.31.28.145:22-139.178.89.65:36914.service. Oct 2 20:07:53.510000 audit[3364]: USER_ACCT pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.518196 sshd[3364]: Accepted publickey for core from 139.178.89.65 port 36914 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:07:53.518685 kernel: audit: type=1101 audit(1696277273.510:1176): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.517000 audit[3364]: CRED_ACQ pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.519214 sshd[3364]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:07:53.530257 kernel: audit: type=1103 audit(1696277273.517:1177): pid=3364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.530369 kernel: audit: type=1006 audit(1696277273.517:1178): pid=3364 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Oct 2 20:07:53.530425 kernel: audit: type=1300 audit(1696277273.517:1178): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff81caa330 a2=3 a3=0 items=0 ppid=1 pid=3364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:53.517000 audit[3364]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff81caa330 a2=3 a3=0 items=0 ppid=1 pid=3364 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:07:53.529771 systemd[1]: Started session-10.scope. Oct 2 20:07:53.532048 systemd-logind[1633]: New session 10 of user core. Oct 2 20:07:53.517000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:53.540333 kernel: audit: type=1327 audit(1696277273.517:1178): proctitle=737368643A20636F7265205B707269765D Oct 2 20:07:53.540000 audit[3364]: USER_START pid=3364 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.551448 kernel: audit: type=1105 audit(1696277273.540:1179): pid=3364 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.551699 kernel: audit: type=1103 audit(1696277273.543:1180): pid=3366 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.543000 audit[3366]: CRED_ACQ pid=3366 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.773302 sshd[3364]: pam_unix(sshd:session): session closed for user core Oct 2 20:07:53.773000 audit[3364]: USER_END pid=3364 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.786581 kernel: audit: type=1106 audit(1696277273.773:1181): pid=3364 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.773000 audit[3364]: CRED_DISP pid=3364 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.794348 systemd-logind[1633]: Session 10 logged out. Waiting for processes to exit. Oct 2 20:07:53.805217 kernel: audit: type=1104 audit(1696277273.773:1182): pid=3364 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:07:53.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-172.31.28.145:22-139.178.89.65:36914 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:07:53.803884 systemd[1]: sshd@9-172.31.28.145:22-139.178.89.65:36914.service: Deactivated successfully. Oct 2 20:07:53.804994 systemd[1]: session-10.scope: Deactivated successfully. Oct 2 20:07:53.806660 systemd-logind[1633]: Removed session 10. Oct 2 20:08:02.330205 kubelet[2783]: E1002 20:08:02.330162 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:08:03.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.145:22-139.178.89.65:35224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:03.799719 systemd[1]: Started sshd@10-172.31.28.145:22-139.178.89.65:35224.service. Oct 2 20:08:03.801115 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:03.801160 kernel: audit: type=1130 audit(1696277283.798:1184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.145:22-139.178.89.65:35224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:03.981409 kernel: audit: type=1101 audit(1696277283.970:1185): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.970000 audit[3377]: USER_ACCT pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.981653 sshd[3377]: Accepted publickey for core from 139.178.89.65 port 35224 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:03.983000 audit[3377]: CRED_ACQ pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:03.985660 sshd[3377]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:04.009555 kernel: audit: type=1103 audit(1696277283.983:1186): pid=3377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.009656 kernel: audit: type=1006 audit(1696277283.983:1187): pid=3377 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Oct 2 20:08:04.009790 kernel: audit: type=1300 audit(1696277283.983:1187): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd12e4e5c0 a2=3 a3=0 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:03.983000 audit[3377]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd12e4e5c0 a2=3 a3=0 items=0 ppid=1 pid=3377 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:04.011152 systemd-logind[1633]: New session 11 of user core. Oct 2 20:08:04.012941 systemd[1]: Started session-11.scope. Oct 2 20:08:03.983000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:04.018954 kernel: audit: type=1327 audit(1696277283.983:1187): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:04.019000 audit[3377]: USER_START pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.038404 kernel: audit: type=1105 audit(1696277284.019:1188): pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.022000 audit[3379]: CRED_ACQ pid=3379 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.046577 kernel: audit: type=1103 audit(1696277284.022:1189): pid=3379 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.280348 sshd[3377]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:04.280000 audit[3377]: USER_END pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.280000 audit[3377]: CRED_DISP pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.290065 systemd[1]: sshd@10-172.31.28.145:22-139.178.89.65:35224.service: Deactivated successfully. Oct 2 20:08:04.291037 systemd[1]: session-11.scope: Deactivated successfully. Oct 2 20:08:04.293232 systemd-logind[1633]: Session 11 logged out. Waiting for processes to exit. Oct 2 20:08:04.294689 kernel: audit: type=1106 audit(1696277284.280:1190): pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.294784 kernel: audit: type=1104 audit(1696277284.280:1191): pid=3377 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:04.288000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-172.31.28.145:22-139.178.89.65:35224 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:04.295680 systemd-logind[1633]: Removed session 11. Oct 2 20:08:14.310325 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:14.310593 kernel: audit: type=1130 audit(1696277294.307:1193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.145:22-139.178.89.65:48412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:14.307000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.145:22-139.178.89.65:48412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:14.308844 systemd[1]: Started sshd@11-172.31.28.145:22-139.178.89.65:48412.service. Oct 2 20:08:14.330210 kubelet[2783]: E1002 20:08:14.330180 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:08:14.474000 audit[3394]: USER_ACCT pid=3394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.482935 sshd[3394]: Accepted publickey for core from 139.178.89.65 port 48412 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:14.481000 audit[3394]: CRED_ACQ pid=3394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.483835 sshd[3394]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:14.489531 kernel: audit: type=1101 audit(1696277294.474:1194): pid=3394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.489624 kernel: audit: type=1103 audit(1696277294.481:1195): pid=3394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.496086 kernel: audit: type=1006 audit(1696277294.481:1196): pid=3394 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Oct 2 20:08:14.496190 kernel: audit: type=1300 audit(1696277294.481:1196): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6164c580 a2=3 a3=0 items=0 ppid=1 pid=3394 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:14.481000 audit[3394]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd6164c580 a2=3 a3=0 items=0 ppid=1 pid=3394 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:14.495688 systemd[1]: Started session-12.scope. Oct 2 20:08:14.498276 systemd-logind[1633]: New session 12 of user core. Oct 2 20:08:14.481000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:14.503455 kernel: audit: type=1327 audit(1696277294.481:1196): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:14.505000 audit[3394]: USER_START pid=3394 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.505000 audit[3396]: CRED_ACQ pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.519179 kernel: audit: type=1105 audit(1696277294.505:1197): pid=3394 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.519271 kernel: audit: type=1103 audit(1696277294.505:1198): pid=3396 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.735559 sshd[3394]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:14.736000 audit[3394]: USER_END pid=3394 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.738000 audit[3394]: CRED_DISP pid=3394 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.753111 systemd[1]: sshd@11-172.31.28.145:22-139.178.89.65:48412.service: Deactivated successfully. Oct 2 20:08:14.754080 systemd[1]: session-12.scope: Deactivated successfully. Oct 2 20:08:14.756275 systemd-logind[1633]: Session 12 logged out. Waiting for processes to exit. Oct 2 20:08:14.757389 kernel: audit: type=1106 audit(1696277294.736:1199): pid=3394 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.757478 kernel: audit: type=1104 audit(1696277294.738:1200): pid=3394 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:14.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-172.31.28.145:22-139.178.89.65:48412 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:14.757825 systemd-logind[1633]: Removed session 12. Oct 2 20:08:24.688000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:24.691926 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:24.692038 kernel: audit: type=1400 audit(1696277304.688:1202): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:24.688000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f1cba0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:24.705116 kernel: audit: type=1300 audit(1696277304.688:1202): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f1cba0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:24.705223 kernel: audit: type=1327 audit(1696277304.688:1202): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:24.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:24.689000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:24.718567 kernel: audit: type=1400 audit(1696277304.689:1203): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:24.718718 kernel: audit: type=1300 audit(1696277304.689:1203): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f08870 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:24.689000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f08870 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:24.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:24.731364 kernel: audit: type=1327 audit(1696277304.689:1203): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:24.763273 systemd[1]: Started sshd@12-172.31.28.145:22-139.178.89.65:58156.service. Oct 2 20:08:24.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.145:22-139.178.89.65:58156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:24.773411 kernel: audit: type=1130 audit(1696277304.763:1204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.145:22-139.178.89.65:58156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:24.929000 audit[3407]: USER_ACCT pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.930642 sshd[3407]: Accepted publickey for core from 139.178.89.65 port 58156 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:24.937542 kernel: audit: type=1101 audit(1696277304.929:1205): pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.937000 audit[3407]: CRED_ACQ pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.938190 sshd[3407]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:24.949964 kernel: audit: type=1103 audit(1696277304.937:1206): pid=3407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.950095 kernel: audit: type=1006 audit(1696277304.937:1207): pid=3407 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Oct 2 20:08:24.937000 audit[3407]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca6d91800 a2=3 a3=0 items=0 ppid=1 pid=3407 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:24.937000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:24.952495 systemd-logind[1633]: New session 13 of user core. Oct 2 20:08:24.953108 systemd[1]: Started session-13.scope. Oct 2 20:08:24.960000 audit[3407]: USER_START pid=3407 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:24.961000 audit[3409]: CRED_ACQ pid=3409 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:25.182134 sshd[3407]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:25.183000 audit[3407]: USER_END pid=3407 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:25.183000 audit[3407]: CRED_DISP pid=3407 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:25.185686 systemd[1]: sshd@12-172.31.28.145:22-139.178.89.65:58156.service: Deactivated successfully. Oct 2 20:08:25.186667 systemd[1]: session-13.scope: Deactivated successfully. Oct 2 20:08:25.185000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-172.31.28.145:22-139.178.89.65:58156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:25.187706 systemd-logind[1633]: Session 13 logged out. Waiting for processes to exit. Oct 2 20:08:25.188809 systemd-logind[1633]: Removed session 13. Oct 2 20:08:26.140000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:26.140000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b0bb2e0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:08:26.140000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:26.140000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:26.140000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00d1216b0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:08:26.140000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:26.141000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:26.141000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00d121800 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:08:26.141000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:26.173000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:26.173000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00d277590 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:08:26.173000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:26.295000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:26.295000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:26.295000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00d121920 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:08:26.295000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:26.295000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00b0f8160 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:08:26.295000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:08:27.334353 env[1641]: time="2023-10-02T20:08:27.333127910Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:4,}" Oct 2 20:08:27.362853 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3000904367.mount: Deactivated successfully. Oct 2 20:08:27.374616 env[1641]: time="2023-10-02T20:08:27.372645666Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:4,} returns container id \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\"" Oct 2 20:08:27.375423 env[1641]: time="2023-10-02T20:08:27.375353495Z" level=info msg="StartContainer for \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\"" Oct 2 20:08:27.425307 systemd[1]: Started cri-containerd-db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f.scope. Oct 2 20:08:27.453056 systemd[1]: cri-containerd-db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f.scope: Deactivated successfully. Oct 2 20:08:27.487071 env[1641]: time="2023-10-02T20:08:27.487013527Z" level=info msg="shim disconnected" id=db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f Oct 2 20:08:27.487523 env[1641]: time="2023-10-02T20:08:27.487237038Z" level=warning msg="cleaning up after shim disconnected" id=db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f namespace=k8s.io Oct 2 20:08:27.487523 env[1641]: time="2023-10-02T20:08:27.487256324Z" level=info msg="cleaning up dead shim" Oct 2 20:08:27.500319 env[1641]: time="2023-10-02T20:08:27.500260792Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:08:27Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3442 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:08:27Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:08:27.500619 env[1641]: time="2023-10-02T20:08:27.500559291Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:08:27.500854 env[1641]: time="2023-10-02T20:08:27.500808868Z" level=error msg="Failed to pipe stderr of container \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\"" error="reading from a closed fifo" Oct 2 20:08:27.501479 env[1641]: time="2023-10-02T20:08:27.501439982Z" level=error msg="Failed to pipe stdout of container \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\"" error="reading from a closed fifo" Oct 2 20:08:27.504009 env[1641]: time="2023-10-02T20:08:27.503953184Z" level=error msg="StartContainer for \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:08:27.504264 kubelet[2783]: E1002 20:08:27.504230 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f" Oct 2 20:08:27.504695 kubelet[2783]: E1002 20:08:27.504364 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:08:27.504695 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:08:27.504695 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:08:27.504695 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bd7q9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:08:27.505319 kubelet[2783]: E1002 20:08:27.504470 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:08:27.713460 kubelet[2783]: I1002 20:08:27.713322 2783 scope.go:115] "RemoveContainer" containerID="6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777" Oct 2 20:08:27.713718 kubelet[2783]: I1002 20:08:27.713691 2783 scope.go:115] "RemoveContainer" containerID="6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777" Oct 2 20:08:27.716032 env[1641]: time="2023-10-02T20:08:27.715988241Z" level=info msg="RemoveContainer for \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\"" Oct 2 20:08:27.716661 env[1641]: time="2023-10-02T20:08:27.716631390Z" level=info msg="RemoveContainer for \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\"" Oct 2 20:08:27.716891 env[1641]: time="2023-10-02T20:08:27.716849443Z" level=error msg="RemoveContainer for \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\" failed" error="failed to set removing state for container \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\": container is already in removing state" Oct 2 20:08:27.719034 kubelet[2783]: E1002 20:08:27.717126 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\": container is already in removing state" containerID="6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777" Oct 2 20:08:27.719034 kubelet[2783]: E1002 20:08:27.717161 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777": container is already in removing state; Skipping pod "cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)" Oct 2 20:08:27.719034 kubelet[2783]: E1002 20:08:27.717556 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:08:27.737276 env[1641]: time="2023-10-02T20:08:27.737228835Z" level=info msg="RemoveContainer for \"6b7e79b8737a7346cfdfd5e363907b1953041f5ebf83ed7c784dd7fe64cea777\" returns successfully" Oct 2 20:08:28.351507 systemd[1]: run-containerd-runc-k8s.io-db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f-runc.1IpRVg.mount: Deactivated successfully. Oct 2 20:08:28.351633 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f-rootfs.mount: Deactivated successfully. Oct 2 20:08:30.003874 kubelet[2783]: E1002 20:08:30.003833 2783 kubelet_node_status.go:452] "Node not becoming ready in time after startup" Oct 2 20:08:30.233318 kubelet[2783]: E1002 20:08:30.233288 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:30.594010 kubelet[2783]: W1002 20:08:30.593971 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice/cri-containerd-db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f.scope WatchSource:0}: task db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f not found: not found Oct 2 20:08:35.211039 systemd[1]: Started sshd@13-172.31.28.145:22-139.178.89.65:40488.service. Oct 2 20:08:35.230293 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:08:35.230463 kernel: audit: type=1130 audit(1696277315.221:1219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.145:22-139.178.89.65:40488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:35.221000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.145:22-139.178.89.65:40488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:35.234165 kubelet[2783]: E1002 20:08:35.234136 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:35.393000 audit[3457]: USER_ACCT pid=3457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.401333 sshd[3457]: Accepted publickey for core from 139.178.89.65 port 40488 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:35.401694 kernel: audit: type=1101 audit(1696277315.393:1220): pid=3457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.401000 audit[3457]: CRED_ACQ pid=3457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.402654 sshd[3457]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:35.413986 kernel: audit: type=1103 audit(1696277315.401:1221): pid=3457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.414127 kernel: audit: type=1006 audit(1696277315.401:1222): pid=3457 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Oct 2 20:08:35.414162 kernel: audit: type=1300 audit(1696277315.401:1222): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc65734860 a2=3 a3=0 items=0 ppid=1 pid=3457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:35.401000 audit[3457]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc65734860 a2=3 a3=0 items=0 ppid=1 pid=3457 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:35.412993 systemd[1]: Started session-14.scope. Oct 2 20:08:35.416421 systemd-logind[1633]: New session 14 of user core. Oct 2 20:08:35.401000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:35.423077 kernel: audit: type=1327 audit(1696277315.401:1222): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:35.424000 audit[3457]: USER_START pid=3457 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.429000 audit[3459]: CRED_ACQ pid=3459 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.438611 kernel: audit: type=1105 audit(1696277315.424:1223): pid=3457 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.438768 kernel: audit: type=1103 audit(1696277315.429:1224): pid=3459 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.632478 sshd[3457]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:35.635000 audit[3457]: USER_END pid=3457 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.639398 systemd[1]: sshd@13-172.31.28.145:22-139.178.89.65:40488.service: Deactivated successfully. Oct 2 20:08:35.640438 systemd[1]: session-14.scope: Deactivated successfully. Oct 2 20:08:35.642571 systemd-logind[1633]: Session 14 logged out. Waiting for processes to exit. Oct 2 20:08:35.635000 audit[3457]: CRED_DISP pid=3457 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.644165 systemd-logind[1633]: Removed session 14. Oct 2 20:08:35.649422 kernel: audit: type=1106 audit(1696277315.635:1225): pid=3457 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.649534 kernel: audit: type=1104 audit(1696277315.635:1226): pid=3457 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:35.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-172.31.28.145:22-139.178.89.65:40488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:40.235405 kubelet[2783]: E1002 20:08:40.235312 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:41.330374 kubelet[2783]: E1002 20:08:41.330327 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:08:41.677000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.680466 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:08:41.680560 kernel: audit: type=1400 audit(1696277321.677:1228): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.677000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e43980 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.694565 kernel: audit: type=1300 audit(1696277321.677:1228): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e43980 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.694702 kernel: audit: type=1327 audit(1696277321.677:1228): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:41.677000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:41.712000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.712000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ed6c40 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.727169 kernel: audit: type=1400 audit(1696277321.712:1229): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.727313 kernel: audit: type=1300 audit(1696277321.712:1229): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ed6c40 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.727357 kernel: audit: type=1327 audit(1696277321.712:1229): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:41.712000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:41.718000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.739753 kernel: audit: type=1400 audit(1696277321.718:1230): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.739879 kernel: audit: type=1300 audit(1696277321.718:1230): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e43dc0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.718000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e43dc0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:41.753637 kernel: audit: type=1327 audit(1696277321.718:1230): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:41.753841 kernel: audit: type=1400 audit(1696277321.718:1231): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.718000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:08:41.718000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e43ee0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:08:41.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:08:45.236330 kubelet[2783]: E1002 20:08:45.236284 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:45.662632 systemd[1]: Started sshd@14-172.31.28.145:22-139.178.89.65:45592.service. Oct 2 20:08:45.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.145:22-139.178.89.65:45592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:45.850000 audit[3471]: USER_ACCT pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.852260 sshd[3471]: Accepted publickey for core from 139.178.89.65 port 45592 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:45.851000 audit[3471]: CRED_ACQ pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.852000 audit[3471]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc70e0dc0 a2=3 a3=0 items=0 ppid=1 pid=3471 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:45.852000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:45.853843 sshd[3471]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:45.860758 systemd[1]: Started session-15.scope. Oct 2 20:08:45.861348 systemd-logind[1633]: New session 15 of user core. Oct 2 20:08:45.867000 audit[3471]: USER_START pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:45.870000 audit[3473]: CRED_ACQ pid=3473 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:46.067018 sshd[3471]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:46.067000 audit[3471]: USER_END pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:46.067000 audit[3471]: CRED_DISP pid=3471 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:46.070419 systemd[1]: sshd@14-172.31.28.145:22-139.178.89.65:45592.service: Deactivated successfully. Oct 2 20:08:46.069000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-172.31.28.145:22-139.178.89.65:45592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:46.071496 systemd[1]: session-15.scope: Deactivated successfully. Oct 2 20:08:46.072318 systemd-logind[1633]: Session 15 logged out. Waiting for processes to exit. Oct 2 20:08:46.073528 systemd-logind[1633]: Removed session 15. Oct 2 20:08:50.238191 kubelet[2783]: E1002 20:08:50.238158 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:52.330673 kubelet[2783]: E1002 20:08:52.330636 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:08:55.239114 kubelet[2783]: E1002 20:08:55.239071 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:08:56.099415 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:08:56.099571 kernel: audit: type=1130 audit(1696277336.094:1241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.145:22-139.178.89.65:56884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:56.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.145:22-139.178.89.65:56884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:56.095653 systemd[1]: Started sshd@15-172.31.28.145:22-139.178.89.65:56884.service. Oct 2 20:08:56.270000 audit[3483]: USER_ACCT pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.278531 kernel: audit: type=1101 audit(1696277336.270:1242): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.278582 sshd[3483]: Accepted publickey for core from 139.178.89.65 port 56884 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:08:56.277000 audit[3483]: CRED_ACQ pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.279750 sshd[3483]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:08:56.290080 systemd[1]: Started session-16.scope. Oct 2 20:08:56.290820 kernel: audit: type=1103 audit(1696277336.277:1243): pid=3483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.290966 kernel: audit: type=1006 audit(1696277336.277:1244): pid=3483 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Oct 2 20:08:56.292458 kernel: audit: type=1300 audit(1696277336.277:1244): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca2ce8e70 a2=3 a3=0 items=0 ppid=1 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:56.277000 audit[3483]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffca2ce8e70 a2=3 a3=0 items=0 ppid=1 pid=3483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:08:56.292726 systemd-logind[1633]: New session 16 of user core. Oct 2 20:08:56.277000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:56.302191 kernel: audit: type=1327 audit(1696277336.277:1244): proctitle=737368643A20636F7265205B707269765D Oct 2 20:08:56.302292 kernel: audit: type=1105 audit(1696277336.299:1245): pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.299000 audit[3483]: USER_START pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.299000 audit[3485]: CRED_ACQ pid=3485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.308480 kernel: audit: type=1103 audit(1696277336.299:1246): pid=3485 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.545295 sshd[3483]: pam_unix(sshd:session): session closed for user core Oct 2 20:08:56.547000 audit[3483]: USER_END pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.552518 systemd-logind[1633]: Session 16 logged out. Waiting for processes to exit. Oct 2 20:08:56.554350 systemd[1]: sshd@15-172.31.28.145:22-139.178.89.65:56884.service: Deactivated successfully. Oct 2 20:08:56.555797 systemd[1]: session-16.scope: Deactivated successfully. Oct 2 20:08:56.561043 systemd-logind[1633]: Removed session 16. Oct 2 20:08:56.561667 kernel: audit: type=1106 audit(1696277336.547:1247): pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.548000 audit[3483]: CRED_DISP pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:08:56.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-172.31.28.145:22-139.178.89.65:56884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:08:56.569458 kernel: audit: type=1104 audit(1696277336.548:1248): pid=3483 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:00.240297 kubelet[2783]: E1002 20:09:00.240265 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:05.241828 kubelet[2783]: E1002 20:09:05.241795 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:06.577847 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:06.577980 kernel: audit: type=1130 audit(1696277346.575:1250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.145:22-139.178.89.65:39100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.575000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.145:22-139.178.89.65:39100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:06.575400 systemd[1]: Started sshd@16-172.31.28.145:22-139.178.89.65:39100.service. Oct 2 20:09:06.765000 audit[3495]: USER_ACCT pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.780190 sshd[3495]: Accepted publickey for core from 139.178.89.65 port 39100 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:06.780550 kernel: audit: type=1101 audit(1696277346.765:1251): pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.779000 audit[3495]: CRED_ACQ pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.780750 sshd[3495]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:06.796726 systemd[1]: Started session-17.scope. Oct 2 20:09:06.797595 kernel: audit: type=1103 audit(1696277346.779:1252): pid=3495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.797742 kernel: audit: type=1006 audit(1696277346.779:1253): pid=3495 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Oct 2 20:09:06.799394 systemd-logind[1633]: New session 17 of user core. Oct 2 20:09:06.779000 audit[3495]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef92ddaf0 a2=3 a3=0 items=0 ppid=1 pid=3495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.779000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.808053 kernel: audit: type=1300 audit(1696277346.779:1253): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef92ddaf0 a2=3 a3=0 items=0 ppid=1 pid=3495 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:06.808143 kernel: audit: type=1327 audit(1696277346.779:1253): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:06.810683 kernel: audit: type=1105 audit(1696277346.806:1254): pid=3495 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.806000 audit[3495]: USER_START pid=3495 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.809000 audit[3497]: CRED_ACQ pid=3497 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:06.823920 kernel: audit: type=1103 audit(1696277346.809:1255): pid=3497 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.081869 sshd[3495]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:07.084000 audit[3495]: USER_END pid=3495 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.087044 systemd[1]: sshd@16-172.31.28.145:22-139.178.89.65:39100.service: Deactivated successfully. Oct 2 20:09:07.088162 systemd[1]: session-17.scope: Deactivated successfully. Oct 2 20:09:07.090200 systemd-logind[1633]: Session 17 logged out. Waiting for processes to exit. Oct 2 20:09:07.091676 systemd-logind[1633]: Removed session 17. Oct 2 20:09:07.084000 audit[3495]: CRED_DISP pid=3495 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.097984 kernel: audit: type=1106 audit(1696277347.084:1256): pid=3495 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.098103 kernel: audit: type=1104 audit(1696277347.084:1257): pid=3495 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.084000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-172.31.28.145:22-139.178.89.65:39100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:07.109409 systemd[1]: Started sshd@17-172.31.28.145:22-139.178.89.65:39102.service. Oct 2 20:09:07.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.28.145:22-139.178.89.65:39102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:07.283000 audit[3508]: USER_ACCT pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.284355 sshd[3508]: Accepted publickey for core from 139.178.89.65 port 39102 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:07.285000 audit[3508]: CRED_ACQ pid=3508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.285000 audit[3508]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff728097d0 a2=3 a3=0 items=0 ppid=1 pid=3508 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:07.285000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:07.287025 sshd[3508]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:07.293695 systemd[1]: Started session-18.scope. Oct 2 20:09:07.295265 systemd-logind[1633]: New session 18 of user core. Oct 2 20:09:07.302000 audit[3508]: USER_START pid=3508 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.306000 audit[3510]: CRED_ACQ pid=3510 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:07.331507 kubelet[2783]: E1002 20:09:07.331061 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:09:08.759268 sshd[3508]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:08.761000 audit[3508]: USER_END pid=3508 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.761000 audit[3508]: CRED_DISP pid=3508 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-172.31.28.145:22-139.178.89.65:39102 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:08.764171 systemd[1]: sshd@17-172.31.28.145:22-139.178.89.65:39102.service: Deactivated successfully. Oct 2 20:09:08.765367 systemd[1]: session-18.scope: Deactivated successfully. Oct 2 20:09:08.767291 systemd-logind[1633]: Session 18 logged out. Waiting for processes to exit. Oct 2 20:09:08.768969 systemd-logind[1633]: Removed session 18. Oct 2 20:09:08.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.28.145:22-139.178.89.65:39108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:08.785943 systemd[1]: Started sshd@18-172.31.28.145:22-139.178.89.65:39108.service. Oct 2 20:09:08.985000 audit[3518]: USER_ACCT pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.986789 sshd[3518]: Accepted publickey for core from 139.178.89.65 port 39108 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:08.989000 audit[3518]: CRED_ACQ pid=3518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:08.990000 audit[3518]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff08788190 a2=3 a3=0 items=0 ppid=1 pid=3518 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:08.990000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:08.991651 sshd[3518]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:09.006395 systemd[1]: Started session-19.scope. Oct 2 20:09:09.006955 systemd-logind[1633]: New session 19 of user core. Oct 2 20:09:09.012000 audit[3518]: USER_START pid=3518 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:09.017000 audit[3520]: CRED_ACQ pid=3520 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:09.246898 sshd[3518]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:09.248000 audit[3518]: USER_END pid=3518 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:09.248000 audit[3518]: CRED_DISP pid=3518 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:09.261783 systemd[1]: sshd@18-172.31.28.145:22-139.178.89.65:39108.service: Deactivated successfully. Oct 2 20:09:09.261000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-172.31.28.145:22-139.178.89.65:39108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:09.265091 systemd[1]: session-19.scope: Deactivated successfully. Oct 2 20:09:09.268612 systemd-logind[1633]: Session 19 logged out. Waiting for processes to exit. Oct 2 20:09:09.282689 systemd-logind[1633]: Removed session 19. Oct 2 20:09:10.243208 kubelet[2783]: E1002 20:09:10.243163 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:15.244488 kubelet[2783]: E1002 20:09:15.244456 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:19.273780 systemd[1]: Started sshd@19-172.31.28.145:22-139.178.89.65:44994.service. Oct 2 20:09:19.282775 kernel: kauditd_printk_skb: 23 callbacks suppressed Oct 2 20:09:19.282906 kernel: audit: type=1130 audit(1696277359.273:1277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.145:22-139.178.89.65:44994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:19.273000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.145:22-139.178.89.65:44994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:19.453000 audit[3532]: USER_ACCT pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.467820 sshd[3532]: Accepted publickey for core from 139.178.89.65 port 44994 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:19.466000 audit[3532]: CRED_ACQ pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.468290 sshd[3532]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:19.474650 kernel: audit: type=1101 audit(1696277359.453:1278): pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.474751 kernel: audit: type=1103 audit(1696277359.466:1279): pid=3532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.466000 audit[3532]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea1a6a1f0 a2=3 a3=0 items=0 ppid=1 pid=3532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:19.502847 kernel: audit: type=1006 audit(1696277359.466:1280): pid=3532 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Oct 2 20:09:19.502951 kernel: audit: type=1300 audit(1696277359.466:1280): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea1a6a1f0 a2=3 a3=0 items=0 ppid=1 pid=3532 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:19.502975 kernel: audit: type=1327 audit(1696277359.466:1280): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:19.466000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:19.495076 systemd[1]: Started session-20.scope. Oct 2 20:09:19.501761 systemd-logind[1633]: New session 20 of user core. Oct 2 20:09:19.512000 audit[3532]: USER_START pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.532528 kernel: audit: type=1105 audit(1696277359.512:1281): pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.536922 kernel: audit: type=1103 audit(1696277359.532:1282): pid=3534 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.532000 audit[3534]: CRED_ACQ pid=3534 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.745128 sshd[3532]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:19.745000 audit[3532]: USER_END pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.754403 kernel: audit: type=1106 audit(1696277359.745:1283): pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.754708 systemd[1]: sshd@19-172.31.28.145:22-139.178.89.65:44994.service: Deactivated successfully. Oct 2 20:09:19.755821 systemd[1]: session-20.scope: Deactivated successfully. Oct 2 20:09:19.745000 audit[3532]: CRED_DISP pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:19.757180 systemd-logind[1633]: Session 20 logged out. Waiting for processes to exit. Oct 2 20:09:19.758533 systemd-logind[1633]: Removed session 20. Oct 2 20:09:19.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-172.31.28.145:22-139.178.89.65:44994 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:19.768271 kernel: audit: type=1104 audit(1696277359.745:1284): pid=3532 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:20.246111 kubelet[2783]: E1002 20:09:20.246075 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:21.329811 kubelet[2783]: E1002 20:09:21.329770 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:09:24.692529 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:24.692701 kernel: audit: type=1400 audit(1696277364.688:1287): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:24.688000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:24.688000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:24.705187 kernel: audit: type=1400 audit(1696277364.688:1286): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:24.705320 kernel: audit: type=1300 audit(1696277364.688:1287): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00266c660 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:24.688000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00266c660 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:24.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:24.720227 kernel: audit: type=1327 audit(1696277364.688:1287): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:24.720470 kernel: audit: type=1300 audit(1696277364.688:1286): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002387fe0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:24.688000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002387fe0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:24.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:24.735047 kernel: audit: type=1327 audit(1696277364.688:1286): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:25.247422 kubelet[2783]: E1002 20:09:25.247389 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:26.139000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.139000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.158264 kernel: audit: type=1400 audit(1696277366.139:1288): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.158551 kernel: audit: type=1400 audit(1696277366.139:1289): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.158597 kernel: audit: type=1300 audit(1696277366.139:1288): arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c003dddb60 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.139000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c003dddb60 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.139000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a5311d0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.184087 kernel: audit: type=1300 audit(1696277366.139:1289): arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a5311d0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.139000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:26.139000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:26.140000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.140000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a5312f0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.140000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:26.170000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.170000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00a5313b0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.170000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:26.295000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.295000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:26.295000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c003dddcc0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.295000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00a5313e0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:09:26.295000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:26.295000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:09:29.776404 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:09:29.776591 kernel: audit: type=1130 audit(1696277369.773:1294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.145:22-139.178.89.65:56472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:29.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.145:22-139.178.89.65:56472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:29.774739 systemd[1]: Started sshd@20-172.31.28.145:22-139.178.89.65:56472.service. Oct 2 20:09:29.942000 audit[3544]: USER_ACCT pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.944117 sshd[3544]: Accepted publickey for core from 139.178.89.65 port 56472 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:29.950414 kernel: audit: type=1101 audit(1696277369.942:1295): pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.948000 audit[3544]: CRED_ACQ pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.950998 sshd[3544]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:29.956408 kernel: audit: type=1103 audit(1696277369.948:1296): pid=3544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.956563 kernel: audit: type=1006 audit(1696277369.948:1297): pid=3544 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Oct 2 20:09:29.948000 audit[3544]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff77db4140 a2=3 a3=0 items=0 ppid=1 pid=3544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:29.965761 kernel: audit: type=1300 audit(1696277369.948:1297): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff77db4140 a2=3 a3=0 items=0 ppid=1 pid=3544 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:29.948000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:29.967967 kernel: audit: type=1327 audit(1696277369.948:1297): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:29.972018 systemd-logind[1633]: New session 21 of user core. Oct 2 20:09:29.972629 systemd[1]: Started session-21.scope. Oct 2 20:09:29.976000 audit[3544]: USER_START pid=3544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.981000 audit[3546]: CRED_ACQ pid=3546 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.990123 kernel: audit: type=1105 audit(1696277369.976:1298): pid=3544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:29.990259 kernel: audit: type=1103 audit(1696277369.981:1299): pid=3546 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:30.215684 sshd[3544]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:30.217000 audit[3544]: USER_END pid=3544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:30.221228 systemd[1]: sshd@20-172.31.28.145:22-139.178.89.65:56472.service: Deactivated successfully. Oct 2 20:09:30.222652 systemd[1]: session-21.scope: Deactivated successfully. Oct 2 20:09:30.225114 systemd-logind[1633]: Session 21 logged out. Waiting for processes to exit. Oct 2 20:09:30.226507 systemd-logind[1633]: Removed session 21. Oct 2 20:09:30.230441 kernel: audit: type=1106 audit(1696277370.217:1300): pid=3544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:30.230540 kernel: audit: type=1104 audit(1696277370.217:1301): pid=3544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:30.217000 audit[3544]: CRED_DISP pid=3544 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:30.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-172.31.28.145:22-139.178.89.65:56472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:30.249034 kubelet[2783]: E1002 20:09:30.248971 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:32.330566 kubelet[2783]: E1002 20:09:32.330526 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:09:35.250450 kubelet[2783]: E1002 20:09:35.250418 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:36.973138 update_engine[1634]: I1002 20:09:36.973074 1634 prefs.cc:51] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Oct 2 20:09:36.973616 update_engine[1634]: I1002 20:09:36.973150 1634 prefs.cc:51] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Oct 2 20:09:36.975861 update_engine[1634]: I1002 20:09:36.975827 1634 prefs.cc:51] aleph-version not present in /var/lib/update_engine/prefs Oct 2 20:09:36.976538 update_engine[1634]: I1002 20:09:36.976511 1634 omaha_request_params.cc:62] Current group set to lts Oct 2 20:09:36.982585 update_engine[1634]: I1002 20:09:36.982448 1634 update_attempter.cc:495] Already updated boot flags. Skipping. Oct 2 20:09:36.982585 update_engine[1634]: I1002 20:09:36.982473 1634 update_attempter.cc:638] Scheduling an action processor start. Oct 2 20:09:36.982585 update_engine[1634]: I1002 20:09:36.982498 1634 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Oct 2 20:09:36.982585 update_engine[1634]: I1002 20:09:36.982551 1634 prefs.cc:51] previous-version not present in /var/lib/update_engine/prefs Oct 2 20:09:36.983518 update_engine[1634]: I1002 20:09:36.982646 1634 omaha_request_action.cc:268] Posting an Omaha request to https://public.update.flatcar-linux.net/v1/update/ Oct 2 20:09:36.983518 update_engine[1634]: I1002 20:09:36.982659 1634 omaha_request_action.cc:269] Request: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: Oct 2 20:09:36.983518 update_engine[1634]: I1002 20:09:36.982666 1634 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Oct 2 20:09:37.009472 update_engine[1634]: I1002 20:09:37.009428 1634 libcurl_http_fetcher.cc:174] Setting up curl options for HTTPS Oct 2 20:09:37.009719 update_engine[1634]: I1002 20:09:37.009685 1634 libcurl_http_fetcher.cc:449] Setting up timeout source: 1 seconds. Oct 2 20:09:37.025790 locksmithd[1715]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Oct 2 20:09:38.163604 update_engine[1634]: I1002 20:09:38.163549 1634 prefs.cc:51] update-server-cert-0-2 not present in /var/lib/update_engine/prefs Oct 2 20:09:38.164054 update_engine[1634]: I1002 20:09:38.163816 1634 prefs.cc:51] update-server-cert-0-1 not present in /var/lib/update_engine/prefs Oct 2 20:09:38.164054 update_engine[1634]: I1002 20:09:38.163983 1634 prefs.cc:51] update-server-cert-0-0 not present in /var/lib/update_engine/prefs Oct 2 20:09:38.491080 update_engine[1634]: I1002 20:09:38.491025 1634 libcurl_http_fetcher.cc:263] HTTP response code: 200 Oct 2 20:09:38.492764 update_engine[1634]: I1002 20:09:38.492727 1634 libcurl_http_fetcher.cc:320] Transfer completed (200), 314 bytes downloaded Oct 2 20:09:38.492764 update_engine[1634]: I1002 20:09:38.492754 1634 omaha_request_action.cc:619] Omaha request response: Oct 2 20:09:38.492764 update_engine[1634]: Oct 2 20:09:38.522215 update_engine[1634]: I1002 20:09:38.522156 1634 omaha_request_action.cc:409] No update. Oct 2 20:09:38.522215 update_engine[1634]: I1002 20:09:38.522208 1634 action_processor.cc:82] ActionProcessor::ActionComplete: finished OmahaRequestAction, starting OmahaResponseHandlerAction Oct 2 20:09:38.522215 update_engine[1634]: I1002 20:09:38.522215 1634 omaha_response_handler_action.cc:36] There are no updates. Aborting. Oct 2 20:09:38.522215 update_engine[1634]: I1002 20:09:38.522220 1634 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaResponseHandlerAction action failed. Aborting processing. Oct 2 20:09:38.522215 update_engine[1634]: I1002 20:09:38.522224 1634 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaResponseHandlerAction Oct 2 20:09:38.522215 update_engine[1634]: I1002 20:09:38.522229 1634 update_attempter.cc:302] Processing Done. Oct 2 20:09:38.522555 update_engine[1634]: I1002 20:09:38.522248 1634 update_attempter.cc:338] No update. Oct 2 20:09:38.522555 update_engine[1634]: I1002 20:09:38.522262 1634 update_check_scheduler.cc:74] Next update check in 45m59s Oct 2 20:09:38.524158 locksmithd[1715]: LastCheckedTime=1696277378 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Oct 2 20:09:40.251463 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:09:40.251651 kernel: audit: type=1130 audit(1696277380.241:1303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.145:22-139.178.89.65:49026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:40.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.145:22-139.178.89.65:49026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:40.243133 systemd[1]: Started sshd@21-172.31.28.145:22-139.178.89.65:49026.service. Oct 2 20:09:40.255178 kubelet[2783]: E1002 20:09:40.255152 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:40.411000 audit[3558]: USER_ACCT pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.413596 sshd[3558]: Accepted publickey for core from 139.178.89.65 port 49026 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:40.423937 kernel: audit: type=1101 audit(1696277380.411:1304): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.423000 audit[3558]: CRED_ACQ pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.425834 sshd[3558]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:40.438749 kernel: audit: type=1103 audit(1696277380.423:1305): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.438963 kernel: audit: type=1006 audit(1696277380.423:1306): pid=3558 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Oct 2 20:09:40.439117 kernel: audit: type=1300 audit(1696277380.423:1306): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff86cf0720 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:40.423000 audit[3558]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff86cf0720 a2=3 a3=0 items=0 ppid=1 pid=3558 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:40.437734 systemd[1]: Started session-22.scope. Oct 2 20:09:40.441737 systemd-logind[1633]: New session 22 of user core. Oct 2 20:09:40.452420 kernel: audit: type=1327 audit(1696277380.423:1306): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:40.423000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:40.457000 audit[3558]: USER_START pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.473503 kernel: audit: type=1105 audit(1696277380.457:1307): pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.475000 audit[3560]: CRED_ACQ pid=3560 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.483413 kernel: audit: type=1103 audit(1696277380.475:1308): pid=3560 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.695794 sshd[3558]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:40.696000 audit[3558]: USER_END pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.696000 audit[3558]: CRED_DISP pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.709709 kernel: audit: type=1106 audit(1696277380.696:1309): pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.710240 kernel: audit: type=1104 audit(1696277380.696:1310): pid=3558 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:40.710409 systemd[1]: sshd@21-172.31.28.145:22-139.178.89.65:49026.service: Deactivated successfully. Oct 2 20:09:40.711752 systemd[1]: session-22.scope: Deactivated successfully. Oct 2 20:09:40.709000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-172.31.28.145:22-139.178.89.65:49026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:40.712818 systemd-logind[1633]: Session 22 logged out. Waiting for processes to exit. Oct 2 20:09:40.714281 systemd-logind[1633]: Removed session 22. Oct 2 20:09:41.679000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:41.679000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00268eda0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:41.679000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:41.713000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:41.713000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00268eec0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:41.713000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:41.719000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:41.719000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00250d820 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:41.719000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:41.721000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:09:41.721000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00250d940 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:09:41.721000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:09:45.256946 kubelet[2783]: E1002 20:09:45.256893 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:45.331130 kubelet[2783]: E1002 20:09:45.331092 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 1m20s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:09:50.258650 kubelet[2783]: E1002 20:09:50.258609 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:50.726424 kernel: kauditd_printk_skb: 13 callbacks suppressed Oct 2 20:09:50.726561 kernel: audit: type=1130 audit(1696277390.723:1316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.145:22-139.178.89.65:59890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:50.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.145:22-139.178.89.65:59890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:50.724252 systemd[1]: Started sshd@22-172.31.28.145:22-139.178.89.65:59890.service. Oct 2 20:09:50.881000 audit[3572]: USER_ACCT pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.882987 sshd[3572]: Accepted publickey for core from 139.178.89.65 port 59890 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:09:50.890487 kernel: audit: type=1101 audit(1696277390.881:1317): pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.889000 audit[3572]: CRED_ACQ pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.891533 sshd[3572]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:09:50.901030 kernel: audit: type=1103 audit(1696277390.889:1318): pid=3572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.901165 kernel: audit: type=1006 audit(1696277390.889:1319): pid=3572 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Oct 2 20:09:50.900555 systemd[1]: Started session-23.scope. Oct 2 20:09:50.903631 systemd-logind[1633]: New session 23 of user core. Oct 2 20:09:50.889000 audit[3572]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc07152e00 a2=3 a3=0 items=0 ppid=1 pid=3572 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:50.916042 kernel: audit: type=1300 audit(1696277390.889:1319): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc07152e00 a2=3 a3=0 items=0 ppid=1 pid=3572 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:09:50.889000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:50.909000 audit[3572]: USER_START pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.926737 kernel: audit: type=1327 audit(1696277390.889:1319): proctitle=737368643A20636F7265205B707269765D Oct 2 20:09:50.926882 kernel: audit: type=1105 audit(1696277390.909:1320): pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.926917 kernel: audit: type=1103 audit(1696277390.914:1321): pid=3574 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:50.914000 audit[3574]: CRED_ACQ pid=3574 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:51.199617 sshd[3572]: pam_unix(sshd:session): session closed for user core Oct 2 20:09:51.199000 audit[3572]: USER_END pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:51.204173 systemd-logind[1633]: Session 23 logged out. Waiting for processes to exit. Oct 2 20:09:51.209504 kernel: audit: type=1106 audit(1696277391.199:1322): pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:51.209578 kernel: audit: type=1104 audit(1696277391.200:1323): pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:51.200000 audit[3572]: CRED_DISP pid=3572 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:09:51.205810 systemd[1]: sshd@22-172.31.28.145:22-139.178.89.65:59890.service: Deactivated successfully. Oct 2 20:09:51.206736 systemd[1]: session-23.scope: Deactivated successfully. Oct 2 20:09:51.208535 systemd-logind[1633]: Removed session 23. Oct 2 20:09:51.204000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-172.31.28.145:22-139.178.89.65:59890 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:09:55.259906 kubelet[2783]: E1002 20:09:55.259877 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:09:56.334139 env[1641]: time="2023-10-02T20:09:56.334088628Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:5,}" Oct 2 20:09:56.356159 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4165123848.mount: Deactivated successfully. Oct 2 20:09:56.380626 env[1641]: time="2023-10-02T20:09:56.380563719Z" level=info msg="CreateContainer within sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" for &ContainerMetadata{Name:mount-cgroup,Attempt:5,} returns container id \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\"" Oct 2 20:09:56.381921 env[1641]: time="2023-10-02T20:09:56.381880648Z" level=info msg="StartContainer for \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\"" Oct 2 20:09:56.420566 systemd[1]: Started cri-containerd-16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a.scope. Oct 2 20:09:56.437539 systemd[1]: cri-containerd-16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a.scope: Deactivated successfully. Oct 2 20:09:56.470374 env[1641]: time="2023-10-02T20:09:56.469942633Z" level=info msg="shim disconnected" id=16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a Oct 2 20:09:56.470374 env[1641]: time="2023-10-02T20:09:56.470370355Z" level=warning msg="cleaning up after shim disconnected" id=16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a namespace=k8s.io Oct 2 20:09:56.471226 env[1641]: time="2023-10-02T20:09:56.470403191Z" level=info msg="cleaning up dead shim" Oct 2 20:09:56.484709 env[1641]: time="2023-10-02T20:09:56.484650660Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:09:56Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3608 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:09:56Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:09:56.485010 env[1641]: time="2023-10-02T20:09:56.484942541Z" level=error msg="copy shim log" error="read /proc/self/fd/48: file already closed" Oct 2 20:09:56.485408 env[1641]: time="2023-10-02T20:09:56.485302490Z" level=error msg="Failed to pipe stdout of container \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\"" error="reading from a closed fifo" Oct 2 20:09:56.485751 env[1641]: time="2023-10-02T20:09:56.485617921Z" level=error msg="Failed to pipe stderr of container \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\"" error="reading from a closed fifo" Oct 2 20:09:56.488288 env[1641]: time="2023-10-02T20:09:56.488242175Z" level=error msg="StartContainer for \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:09:56.488553 kubelet[2783]: E1002 20:09:56.488529 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a" Oct 2 20:09:56.489026 kubelet[2783]: E1002 20:09:56.488658 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:09:56.489026 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:09:56.489026 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:09:56.489026 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-bd7q9,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:09:56.489201 kubelet[2783]: E1002 20:09:56.488711 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:09:56.914996 kubelet[2783]: I1002 20:09:56.914971 2783 scope.go:115] "RemoveContainer" containerID="db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f" Oct 2 20:09:56.915513 kubelet[2783]: I1002 20:09:56.915408 2783 scope.go:115] "RemoveContainer" containerID="db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f" Oct 2 20:09:56.917201 env[1641]: time="2023-10-02T20:09:56.917142326Z" level=info msg="RemoveContainer for \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\"" Oct 2 20:09:56.920965 env[1641]: time="2023-10-02T20:09:56.920893298Z" level=info msg="RemoveContainer for \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\"" Oct 2 20:09:56.921321 env[1641]: time="2023-10-02T20:09:56.921240729Z" level=error msg="RemoveContainer for \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\" failed" error="rpc error: code = NotFound desc = get container info: container \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\" in namespace \"k8s.io\": not found" Oct 2 20:09:56.922057 kubelet[2783]: E1002 20:09:56.922037 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = NotFound desc = get container info: container \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\" in namespace \"k8s.io\": not found" containerID="db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f" Oct 2 20:09:56.922171 kubelet[2783]: E1002 20:09:56.922078 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = NotFound desc = get container info: container "db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f" in namespace "k8s.io": not found; Skipping pod "cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)" Oct 2 20:09:56.922811 kubelet[2783]: E1002 20:09:56.922652 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:09:56.930400 env[1641]: time="2023-10-02T20:09:56.924867671Z" level=info msg="RemoveContainer for \"db54619288691fc2a95ca16bb267cd00a15e29268adb3e162fdaa4e86387926f\" returns successfully" Oct 2 20:09:57.355057 systemd[1]: run-containerd-runc-k8s.io-16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a-runc.KoMXY0.mount: Deactivated successfully. Oct 2 20:09:57.355329 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a-rootfs.mount: Deactivated successfully. Oct 2 20:09:59.575505 kubelet[2783]: W1002 20:09:59.575438 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice/cri-containerd-16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a.scope WatchSource:0}: task 16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a not found: not found Oct 2 20:10:00.261442 kubelet[2783]: E1002 20:10:00.261413 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:01.239645 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:01.239821 kernel: audit: type=1130 audit(1696277401.228:1325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.145:22-139.178.89.65:53048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:01.228000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.145:22-139.178.89.65:53048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:01.229880 systemd[1]: Started sshd@23-172.31.28.145:22-139.178.89.65:53048.service. Oct 2 20:10:01.420000 audit[3621]: USER_ACCT pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.431984 sshd[3621]: Accepted publickey for core from 139.178.89.65 port 53048 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:01.430000 audit[3621]: CRED_ACQ pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.432457 sshd[3621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:01.442219 kernel: audit: type=1101 audit(1696277401.420:1326): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.442358 kernel: audit: type=1103 audit(1696277401.430:1327): pid=3621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.444308 systemd[1]: Started session-24.scope. Oct 2 20:10:01.453142 kernel: audit: type=1006 audit(1696277401.430:1328): pid=3621 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Oct 2 20:10:01.448772 systemd-logind[1633]: New session 24 of user core. Oct 2 20:10:01.430000 audit[3621]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf04f1cc0 a2=3 a3=0 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:01.478918 kernel: audit: type=1300 audit(1696277401.430:1328): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcf04f1cc0 a2=3 a3=0 items=0 ppid=1 pid=3621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:01.479075 kernel: audit: type=1327 audit(1696277401.430:1328): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:01.430000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:01.460000 audit[3621]: USER_START pid=3621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.463000 audit[3623]: CRED_ACQ pid=3623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.504950 kernel: audit: type=1105 audit(1696277401.460:1329): pid=3621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.505124 kernel: audit: type=1103 audit(1696277401.463:1330): pid=3623 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.749329 sshd[3621]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:01.750000 audit[3621]: USER_END pid=3621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.763428 kernel: audit: type=1106 audit(1696277401.750:1331): pid=3621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.766593 systemd[1]: sshd@23-172.31.28.145:22-139.178.89.65:53048.service: Deactivated successfully. Oct 2 20:10:01.767880 systemd[1]: session-24.scope: Deactivated successfully. Oct 2 20:10:01.750000 audit[3621]: CRED_DISP pid=3621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:01.768732 systemd-logind[1633]: Session 24 logged out. Waiting for processes to exit. Oct 2 20:10:01.775311 systemd-logind[1633]: Removed session 24. Oct 2 20:10:01.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-172.31.28.145:22-139.178.89.65:53048 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:01.781456 kernel: audit: type=1104 audit(1696277401.750:1332): pid=3621 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:05.262845 kubelet[2783]: E1002 20:10:05.262763 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:08.330932 kubelet[2783]: E1002 20:10:08.330839 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:10:10.264188 kubelet[2783]: E1002 20:10:10.264137 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:11.781406 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:11.781518 kernel: audit: type=1130 audit(1696277411.776:1334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.145:22-139.178.89.65:35422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:11.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.145:22-139.178.89.65:35422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:11.777780 systemd[1]: Started sshd@24-172.31.28.145:22-139.178.89.65:35422.service. Oct 2 20:10:11.941000 audit[3633]: USER_ACCT pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.948947 sshd[3633]: Accepted publickey for core from 139.178.89.65 port 35422 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:11.949415 kernel: audit: type=1101 audit(1696277411.941:1335): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.948000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.950341 sshd[3633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:11.959786 kernel: audit: type=1103 audit(1696277411.948:1336): pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.960094 kernel: audit: type=1006 audit(1696277411.948:1337): pid=3633 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Oct 2 20:10:11.958868 systemd[1]: Started session-25.scope. Oct 2 20:10:11.966583 kernel: audit: type=1300 audit(1696277411.948:1337): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5f8087b0 a2=3 a3=0 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:11.948000 audit[3633]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff5f8087b0 a2=3 a3=0 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:11.960408 systemd-logind[1633]: New session 25 of user core. Oct 2 20:10:11.968412 kernel: audit: type=1327 audit(1696277411.948:1337): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:11.948000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:11.966000 audit[3633]: USER_START pid=3633 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.976411 kernel: audit: type=1105 audit(1696277411.966:1338): pid=3633 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.976579 kernel: audit: type=1103 audit(1696277411.969:1339): pid=3635 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:11.969000 audit[3635]: CRED_ACQ pid=3635 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:12.159129 sshd[3633]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:12.160000 audit[3633]: USER_END pid=3633 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:12.163943 systemd-logind[1633]: Session 25 logged out. Waiting for processes to exit. Oct 2 20:10:12.165830 systemd[1]: sshd@24-172.31.28.145:22-139.178.89.65:35422.service: Deactivated successfully. Oct 2 20:10:12.166779 systemd[1]: session-25.scope: Deactivated successfully. Oct 2 20:10:12.168405 systemd-logind[1633]: Removed session 25. Oct 2 20:10:12.174534 kernel: audit: type=1106 audit(1696277412.160:1340): pid=3633 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:12.174652 kernel: audit: type=1104 audit(1696277412.160:1341): pid=3633 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:12.160000 audit[3633]: CRED_DISP pid=3633 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:12.164000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-172.31.28.145:22-139.178.89.65:35422 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:15.265494 kubelet[2783]: E1002 20:10:15.265462 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:20.267440 kubelet[2783]: E1002 20:10:20.267408 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:20.331294 kubelet[2783]: E1002 20:10:20.331256 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:10:22.215304 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:22.215493 kernel: audit: type=1130 audit(1696277422.188:1343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.145:22-139.178.89.65:37880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.145:22-139.178.89.65:37880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:22.188792 systemd[1]: Started sshd@25-172.31.28.145:22-139.178.89.65:37880.service. Oct 2 20:10:22.386000 audit[3647]: USER_ACCT pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.397449 kernel: audit: type=1101 audit(1696277422.386:1344): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.397607 sshd[3647]: Accepted publickey for core from 139.178.89.65 port 37880 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:22.398000 audit[3647]: CRED_ACQ pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.408038 sshd[3647]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:22.408940 kernel: audit: type=1103 audit(1696277422.398:1345): pid=3647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.409159 kernel: audit: type=1006 audit(1696277422.398:1346): pid=3647 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Oct 2 20:10:22.398000 audit[3647]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc15e6ad70 a2=3 a3=0 items=0 ppid=1 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:22.422539 kernel: audit: type=1300 audit(1696277422.398:1346): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc15e6ad70 a2=3 a3=0 items=0 ppid=1 pid=3647 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:22.422731 kernel: audit: type=1327 audit(1696277422.398:1346): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:22.398000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:22.425094 systemd-logind[1633]: New session 26 of user core. Oct 2 20:10:22.425224 systemd[1]: Started session-26.scope. Oct 2 20:10:22.433000 audit[3647]: USER_START pid=3647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.452489 kernel: audit: type=1105 audit(1696277422.433:1347): pid=3647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.452751 kernel: audit: type=1103 audit(1696277422.433:1348): pid=3649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.433000 audit[3649]: CRED_ACQ pid=3649 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.674192 sshd[3647]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:22.675000 audit[3647]: USER_END pid=3647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.679403 systemd[1]: sshd@25-172.31.28.145:22-139.178.89.65:37880.service: Deactivated successfully. Oct 2 20:10:22.680574 systemd[1]: session-26.scope: Deactivated successfully. Oct 2 20:10:22.686300 kernel: audit: type=1106 audit(1696277422.675:1349): pid=3647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.686626 kernel: audit: type=1104 audit(1696277422.675:1350): pid=3647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.675000 audit[3647]: CRED_DISP pid=3647 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:22.685171 systemd-logind[1633]: Session 26 logged out. Waiting for processes to exit. Oct 2 20:10:22.688436 systemd-logind[1633]: Removed session 26. Oct 2 20:10:22.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-172.31.28.145:22-139.178.89.65:37880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:24.689000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:24.689000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ca2cf0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:24.689000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:24.692000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:24.692000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e0b2e0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:24.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:25.269048 kubelet[2783]: E1002 20:10:25.269006 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:26.140000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:26.140000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c011361a70 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:10:26.140000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:26.141000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:26.141000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c011361aa0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:10:26.141000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:26.142000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:26.142000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c00c0b6260 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:10:26.142000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:26.175000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:26.175000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c011323950 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:10:26.175000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:26.296000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:26.296000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:26.296000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00c0b6280 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:10:26.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:26.296000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=54 a1=c011323a70 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:10:26.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:10:30.270338 kubelet[2783]: E1002 20:10:30.270302 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:32.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.145:22-139.178.89.65:51484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:32.704276 systemd[1]: Started sshd@26-172.31.28.145:22-139.178.89.65:51484.service. Oct 2 20:10:32.705797 kernel: kauditd_printk_skb: 25 callbacks suppressed Oct 2 20:10:32.705858 kernel: audit: type=1130 audit(1696277432.703:1360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.145:22-139.178.89.65:51484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:32.910000 audit[3662]: USER_ACCT pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.912401 sshd[3662]: Accepted publickey for core from 139.178.89.65 port 51484 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:32.930419 kernel: audit: type=1101 audit(1696277432.910:1361): pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.930530 kernel: audit: type=1103 audit(1696277432.927:1362): pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.927000 audit[3662]: CRED_ACQ pid=3662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.929741 sshd[3662]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:32.938569 kernel: audit: type=1006 audit(1696277432.927:1363): pid=3662 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Oct 2 20:10:32.927000 audit[3662]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe508310d0 a2=3 a3=0 items=0 ppid=1 pid=3662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:32.946100 kernel: audit: type=1300 audit(1696277432.927:1363): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe508310d0 a2=3 a3=0 items=0 ppid=1 pid=3662 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:32.946214 kernel: audit: type=1327 audit(1696277432.927:1363): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:32.927000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:32.945699 systemd[1]: Started session-27.scope. Oct 2 20:10:32.947777 systemd-logind[1633]: New session 27 of user core. Oct 2 20:10:32.952000 audit[3662]: USER_START pid=3662 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.962256 kernel: audit: type=1105 audit(1696277432.952:1364): pid=3662 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.962387 kernel: audit: type=1103 audit(1696277432.960:1365): pid=3664 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:32.960000 audit[3664]: CRED_ACQ pid=3664 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:33.189321 sshd[3662]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:33.191000 audit[3662]: USER_END pid=3662 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:33.200780 kernel: audit: type=1106 audit(1696277433.191:1366): pid=3662 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:33.201035 kernel: audit: type=1104 audit(1696277433.191:1367): pid=3662 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:33.191000 audit[3662]: CRED_DISP pid=3662 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:33.198824 systemd[1]: sshd@26-172.31.28.145:22-139.178.89.65:51484.service: Deactivated successfully. Oct 2 20:10:33.199915 systemd[1]: session-27.scope: Deactivated successfully. Oct 2 20:10:33.202633 systemd-logind[1633]: Session 27 logged out. Waiting for processes to exit. Oct 2 20:10:33.203849 systemd-logind[1633]: Removed session 27. Oct 2 20:10:33.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-172.31.28.145:22-139.178.89.65:51484 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:33.330771 kubelet[2783]: E1002 20:10:33.330660 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 2m40s restarting failed container=mount-cgroup pod=cilium-lfbn8_kube-system(e06f8552-1bce-4a7d-889d-72b522d584ec)\"" pod="kube-system/cilium-lfbn8" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec Oct 2 20:10:35.271525 kubelet[2783]: E1002 20:10:35.271351 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:40.273840 kubelet[2783]: E1002 20:10:40.273807 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:41.680000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.682851 kernel: kauditd_printk_skb: 1 callbacks suppressed Oct 2 20:10:41.682983 kernel: audit: type=1400 audit(1696277441.680:1369): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.680000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00108bbe0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.708504 kernel: audit: type=1300 audit(1696277441.680:1369): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00108bbe0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.708668 kernel: audit: type=1327 audit(1696277441.680:1369): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.680000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.723470 kernel: audit: type=1400 audit(1696277441.720:1370): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.720000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.720000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc2fe0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.752503 kernel: audit: type=1300 audit(1696277441.720:1370): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc2fe0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.752950 kernel: audit: type=1327 audit(1696277441.720:1370): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.753098 kernel: audit: type=1400 audit(1696277441.720:1371): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.720000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.720000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc3120 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.770528 kernel: audit: type=1300 audit(1696277441.720:1371): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc3120 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.770881 kernel: audit: type=1327 audit(1696277441.720:1371): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:41.720000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.786587 kernel: audit: type=1400 audit(1696277441.720:1372): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:10:41.720000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000bf82a0 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:10:41.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:10:43.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.28.145:22-139.178.89.65:39380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:43.221218 systemd[1]: Started sshd@27-172.31.28.145:22-139.178.89.65:39380.service. Oct 2 20:10:43.344533 amazon-ssm-agent[1621]: 2023-10-02 20:10:43 INFO Backing off health check to every 600 seconds for 1800 seconds. Oct 2 20:10:43.389000 audit[3675]: USER_ACCT pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.390880 sshd[3675]: Accepted publickey for core from 139.178.89.65 port 39380 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:43.390000 audit[3675]: CRED_ACQ pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.390000 audit[3675]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcb26db2c0 a2=3 a3=0 items=0 ppid=1 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:43.390000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:43.392696 sshd[3675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:43.402548 systemd[1]: Started session-28.scope. Oct 2 20:10:43.404501 systemd-logind[1633]: New session 28 of user core. Oct 2 20:10:43.413000 audit[3675]: USER_START pid=3675 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.416000 audit[3680]: CRED_ACQ pid=3680 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.454358 amazon-ssm-agent[1621]: 2023-10-02 20:10:43 ERROR Health ping failed with error - AccessDeniedException: User: arn:aws:sts::075585003325:assumed-role/jenkins-test/i-0a6c014b0d5baa06f is not authorized to perform: ssm:UpdateInstanceInformation on resource: arn:aws:ec2:us-west-2:075585003325:instance/i-0a6c014b0d5baa06f because no identity-based policy allows the ssm:UpdateInstanceInformation action Oct 2 20:10:43.454358 amazon-ssm-agent[1621]: status code: 400, request id: 3c2712de-3f66-4eec-9006-01ac72dd2d32 Oct 2 20:10:43.624821 sshd[3675]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:43.625000 audit[3675]: USER_END pid=3675 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.626000 audit[3675]: CRED_DISP pid=3675 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.629424 systemd[1]: sshd@27-172.31.28.145:22-139.178.89.65:39380.service: Deactivated successfully. Oct 2 20:10:43.628000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-172.31.28.145:22-139.178.89.65:39380 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:43.630775 systemd[1]: session-28.scope: Deactivated successfully. Oct 2 20:10:43.632260 systemd-logind[1633]: Session 28 logged out. Waiting for processes to exit. Oct 2 20:10:43.633707 systemd-logind[1633]: Removed session 28. Oct 2 20:10:43.652000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.28.145:22-139.178.89.65:39396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:43.653817 systemd[1]: Started sshd@28-172.31.28.145:22-139.178.89.65:39396.service. Oct 2 20:10:43.828000 audit[3690]: USER_ACCT pid=3690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.830897 sshd[3690]: Accepted publickey for core from 139.178.89.65 port 39396 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:43.831000 audit[3690]: CRED_ACQ pid=3690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.831000 audit[3690]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6e2d3e40 a2=3 a3=0 items=0 ppid=1 pid=3690 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:43.831000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:43.834173 sshd[3690]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:43.854161 systemd[1]: Started session-29.scope. Oct 2 20:10:43.858308 systemd-logind[1633]: New session 29 of user core. Oct 2 20:10:43.870000 audit[3690]: USER_START pid=3690 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:43.872000 audit[3692]: CRED_ACQ pid=3692 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:45.277681 kubelet[2783]: E1002 20:10:45.276865 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:45.364655 env[1641]: time="2023-10-02T20:10:45.364557544Z" level=info msg="StopPodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\"" Oct 2 20:10:45.365322 env[1641]: time="2023-10-02T20:10:45.364700799Z" level=info msg="Container to stop \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:45.367435 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a-shm.mount: Deactivated successfully. Oct 2 20:10:45.388000 audit: BPF prog-id=118 op=UNLOAD Oct 2 20:10:45.389806 systemd[1]: cri-containerd-c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a.scope: Deactivated successfully. Oct 2 20:10:45.392000 audit: BPF prog-id=121 op=UNLOAD Oct 2 20:10:45.397541 env[1641]: time="2023-10-02T20:10:45.397477507Z" level=info msg="StopContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" with timeout 30 (s)" Oct 2 20:10:45.399413 env[1641]: time="2023-10-02T20:10:45.398364609Z" level=info msg="Stop container \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" with signal terminated" Oct 2 20:10:45.448707 systemd[1]: cri-containerd-83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca.scope: Deactivated successfully. Oct 2 20:10:45.448000 audit: BPF prog-id=133 op=UNLOAD Oct 2 20:10:45.451000 audit: BPF prog-id=136 op=UNLOAD Oct 2 20:10:45.457826 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a-rootfs.mount: Deactivated successfully. Oct 2 20:10:45.491344 env[1641]: time="2023-10-02T20:10:45.491281448Z" level=info msg="shim disconnected" id=c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a Oct 2 20:10:45.492925 env[1641]: time="2023-10-02T20:10:45.492848074Z" level=warning msg="cleaning up after shim disconnected" id=c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a namespace=k8s.io Oct 2 20:10:45.493091 env[1641]: time="2023-10-02T20:10:45.493069826Z" level=info msg="cleaning up dead shim" Oct 2 20:10:45.503881 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca-rootfs.mount: Deactivated successfully. Oct 2 20:10:45.512996 env[1641]: time="2023-10-02T20:10:45.512947979Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3736 runtime=io.containerd.runc.v2\n" Oct 2 20:10:45.514576 env[1641]: time="2023-10-02T20:10:45.513625729Z" level=info msg="TearDown network for sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" successfully" Oct 2 20:10:45.514576 env[1641]: time="2023-10-02T20:10:45.513653766Z" level=info msg="StopPodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" returns successfully" Oct 2 20:10:45.518495 env[1641]: time="2023-10-02T20:10:45.518021954Z" level=info msg="shim disconnected" id=83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca Oct 2 20:10:45.518495 env[1641]: time="2023-10-02T20:10:45.518090526Z" level=warning msg="cleaning up after shim disconnected" id=83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca namespace=k8s.io Oct 2 20:10:45.518495 env[1641]: time="2023-10-02T20:10:45.518105483Z" level=info msg="cleaning up dead shim" Oct 2 20:10:45.533471 env[1641]: time="2023-10-02T20:10:45.533271169Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3751 runtime=io.containerd.runc.v2\n" Oct 2 20:10:45.537815 env[1641]: time="2023-10-02T20:10:45.537761210Z" level=info msg="StopContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" returns successfully" Oct 2 20:10:45.538832 env[1641]: time="2023-10-02T20:10:45.538796497Z" level=info msg="StopPodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\"" Oct 2 20:10:45.541541 env[1641]: time="2023-10-02T20:10:45.538871607Z" level=info msg="Container to stop \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:10:45.541321 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131-shm.mount: Deactivated successfully. Oct 2 20:10:45.557803 systemd[1]: cri-containerd-cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131.scope: Deactivated successfully. Oct 2 20:10:45.556000 audit: BPF prog-id=129 op=UNLOAD Oct 2 20:10:45.560000 audit: BPF prog-id=132 op=UNLOAD Oct 2 20:10:45.587876 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131-rootfs.mount: Deactivated successfully. Oct 2 20:10:45.602225 env[1641]: time="2023-10-02T20:10:45.602167045Z" level=info msg="shim disconnected" id=cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131 Oct 2 20:10:45.602225 env[1641]: time="2023-10-02T20:10:45.602224238Z" level=warning msg="cleaning up after shim disconnected" id=cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131 namespace=k8s.io Oct 2 20:10:45.602630 env[1641]: time="2023-10-02T20:10:45.602236659Z" level=info msg="cleaning up dead shim" Oct 2 20:10:45.614959 env[1641]: time="2023-10-02T20:10:45.614909571Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:45Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3781 runtime=io.containerd.runc.v2\n" Oct 2 20:10:45.615316 env[1641]: time="2023-10-02T20:10:45.615278164Z" level=info msg="TearDown network for sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" successfully" Oct 2 20:10:45.615316 env[1641]: time="2023-10-02T20:10:45.615312657Z" level=info msg="StopPodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" returns successfully" Oct 2 20:10:45.674543 kubelet[2783]: I1002 20:10:45.674489 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-kernel\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674543 kubelet[2783]: I1002 20:10:45.674549 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-net\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674813 kubelet[2783]: I1002 20:10:45.674576 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-lib-modules\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674813 kubelet[2783]: I1002 20:10:45.674600 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-cgroup\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674813 kubelet[2783]: I1002 20:10:45.674636 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e06f8552-1bce-4a7d-889d-72b522d584ec-clustermesh-secrets\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674813 kubelet[2783]: I1002 20:10:45.674660 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-xtables-lock\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674813 kubelet[2783]: I1002 20:10:45.674694 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-config-path\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.674813 kubelet[2783]: I1002 20:10:45.674718 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-run\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675202 kubelet[2783]: I1002 20:10:45.674754 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-bd7q9\" (UniqueName: \"kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-kube-api-access-bd7q9\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675202 kubelet[2783]: I1002 20:10:45.674781 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-etc-cni-netd\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675202 kubelet[2783]: I1002 20:10:45.674811 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-hubble-tls\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675202 kubelet[2783]: I1002 20:10:45.674837 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-bpf-maps\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675202 kubelet[2783]: I1002 20:10:45.674880 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-hostproc\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675202 kubelet[2783]: I1002 20:10:45.674908 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cni-path\") pod \"e06f8552-1bce-4a7d-889d-72b522d584ec\" (UID: \"e06f8552-1bce-4a7d-889d-72b522d584ec\") " Oct 2 20:10:45.675524 kubelet[2783]: I1002 20:10:45.674983 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cni-path" (OuterVolumeSpecName: "cni-path") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.675524 kubelet[2783]: I1002 20:10:45.675149 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.675524 kubelet[2783]: I1002 20:10:45.675180 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.675524 kubelet[2783]: I1002 20:10:45.675202 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.675524 kubelet[2783]: I1002 20:10:45.675222 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.675914 kubelet[2783]: I1002 20:10:45.675887 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.676063 kubelet[2783]: W1002 20:10:45.676029 2783 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/e06f8552-1bce-4a7d-889d-72b522d584ec/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:45.678629 kubelet[2783]: I1002 20:10:45.678566 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:45.678822 kubelet[2783]: I1002 20:10:45.678658 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.679065 kubelet[2783]: I1002 20:10:45.678999 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.679186 kubelet[2783]: I1002 20:10:45.679063 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.679186 kubelet[2783]: I1002 20:10:45.679087 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-hostproc" (OuterVolumeSpecName: "hostproc") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:10:45.687494 kubelet[2783]: I1002 20:10:45.687243 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:45.687812 kubelet[2783]: I1002 20:10:45.687243 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/e06f8552-1bce-4a7d-889d-72b522d584ec-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:10:45.691902 kubelet[2783]: I1002 20:10:45.691851 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-kube-api-access-bd7q9" (OuterVolumeSpecName: "kube-api-access-bd7q9") pod "e06f8552-1bce-4a7d-889d-72b522d584ec" (UID: "e06f8552-1bce-4a7d-889d-72b522d584ec"). InnerVolumeSpecName "kube-api-access-bd7q9". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:45.776125 kubelet[2783]: I1002 20:10:45.776073 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5ddcc158-862a-41f0-8c84-b756d422b337-cilium-config-path\") pod \"5ddcc158-862a-41f0-8c84-b756d422b337\" (UID: \"5ddcc158-862a-41f0-8c84-b756d422b337\") " Oct 2 20:10:45.776125 kubelet[2783]: I1002 20:10:45.776133 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-pq6b5\" (UniqueName: \"kubernetes.io/projected/5ddcc158-862a-41f0-8c84-b756d422b337-kube-api-access-pq6b5\") pod \"5ddcc158-862a-41f0-8c84-b756d422b337\" (UID: \"5ddcc158-862a-41f0-8c84-b756d422b337\") " Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776177 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-cgroup\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776202 2783 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/e06f8552-1bce-4a7d-889d-72b522d584ec-clustermesh-secrets\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776217 2783 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-xtables-lock\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776231 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-config-path\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776245 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cilium-run\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776258 2783 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-bd7q9\" (UniqueName: \"kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-kube-api-access-bd7q9\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776272 2783 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-etc-cni-netd\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776407 kubelet[2783]: I1002 20:10:45.776286 2783 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/e06f8552-1bce-4a7d-889d-72b522d584ec-hubble-tls\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776776 kubelet[2783]: I1002 20:10:45.776299 2783 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-bpf-maps\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776776 kubelet[2783]: I1002 20:10:45.776311 2783 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-hostproc\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776776 kubelet[2783]: I1002 20:10:45.776329 2783 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-cni-path\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776776 kubelet[2783]: I1002 20:10:45.776346 2783 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-kernel\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776776 kubelet[2783]: I1002 20:10:45.776361 2783 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-host-proc-sys-net\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.776776 kubelet[2783]: I1002 20:10:45.776388 2783 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/e06f8552-1bce-4a7d-889d-72b522d584ec-lib-modules\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.777280 kubelet[2783]: W1002 20:10:45.777236 2783 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/5ddcc158-862a-41f0-8c84-b756d422b337/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:10:45.782330 kubelet[2783]: I1002 20:10:45.782285 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5ddcc158-862a-41f0-8c84-b756d422b337-kube-api-access-pq6b5" (OuterVolumeSpecName: "kube-api-access-pq6b5") pod "5ddcc158-862a-41f0-8c84-b756d422b337" (UID: "5ddcc158-862a-41f0-8c84-b756d422b337"). InnerVolumeSpecName "kube-api-access-pq6b5". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:10:45.782868 kubelet[2783]: I1002 20:10:45.782843 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5ddcc158-862a-41f0-8c84-b756d422b337-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "5ddcc158-862a-41f0-8c84-b756d422b337" (UID: "5ddcc158-862a-41f0-8c84-b756d422b337"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:10:45.880413 kubelet[2783]: I1002 20:10:45.876571 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/5ddcc158-862a-41f0-8c84-b756d422b337-cilium-config-path\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:45.880413 kubelet[2783]: I1002 20:10:45.876652 2783 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-pq6b5\" (UniqueName: \"kubernetes.io/projected/5ddcc158-862a-41f0-8c84-b756d422b337-kube-api-access-pq6b5\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:10:46.040162 kubelet[2783]: I1002 20:10:46.040134 2783 scope.go:115] "RemoveContainer" containerID="16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a" Oct 2 20:10:46.043038 env[1641]: time="2023-10-02T20:10:46.042991430Z" level=info msg="RemoveContainer for \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\"" Oct 2 20:10:46.049859 env[1641]: time="2023-10-02T20:10:46.049576913Z" level=info msg="RemoveContainer for \"16007c8338ce776e8f6f4a04f46db47bec3f71c5923b323805000555a2ada08a\" returns successfully" Oct 2 20:10:46.051708 kubelet[2783]: I1002 20:10:46.051661 2783 scope.go:115] "RemoveContainer" containerID="83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca" Oct 2 20:10:46.053786 systemd[1]: Removed slice kubepods-burstable-pode06f8552_1bce_4a7d_889d_72b522d584ec.slice. Oct 2 20:10:46.057952 systemd[1]: Removed slice kubepods-besteffort-pod5ddcc158_862a_41f0_8c84_b756d422b337.slice. Oct 2 20:10:46.065098 env[1641]: time="2023-10-02T20:10:46.065048230Z" level=info msg="RemoveContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\"" Oct 2 20:10:46.072994 env[1641]: time="2023-10-02T20:10:46.072936527Z" level=info msg="RemoveContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" returns successfully" Oct 2 20:10:46.074052 kubelet[2783]: I1002 20:10:46.074012 2783 scope.go:115] "RemoveContainer" containerID="83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca" Oct 2 20:10:46.077739 env[1641]: time="2023-10-02T20:10:46.077549384Z" level=error msg="ContainerStatus for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\": not found" Oct 2 20:10:46.079434 kubelet[2783]: E1002 20:10:46.079403 2783 remote_runtime.go:415] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\": not found" containerID="83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca" Oct 2 20:10:46.079736 kubelet[2783]: I1002 20:10:46.079490 2783 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={Type:containerd ID:83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca} err="failed to get container status \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\": rpc error: code = NotFound desc = an error occurred when try to find container \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\": not found" Oct 2 20:10:46.332242 env[1641]: time="2023-10-02T20:10:46.331807575Z" level=info msg="StopPodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\"" Oct 2 20:10:46.332242 env[1641]: time="2023-10-02T20:10:46.331934332Z" level=info msg="TearDown network for sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" successfully" Oct 2 20:10:46.332242 env[1641]: time="2023-10-02T20:10:46.331996781Z" level=info msg="StopPodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" returns successfully" Oct 2 20:10:46.332242 env[1641]: time="2023-10-02T20:10:46.332108698Z" level=info msg="StopContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" with timeout 1 (s)" Oct 2 20:10:46.332242 env[1641]: time="2023-10-02T20:10:46.332145167Z" level=error msg="StopContainer for \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\": not found" Oct 2 20:10:46.333525 kubelet[2783]: E1002 20:10:46.332486 2783 remote_runtime.go:349] "StopContainer from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca\": not found" containerID="83e42fa781c5f4f5c1c2e52fe16c9b747a6046a7543326b38eded161746b55ca" Oct 2 20:10:46.335656 env[1641]: time="2023-10-02T20:10:46.335569609Z" level=info msg="StopPodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\"" Oct 2 20:10:46.335763 env[1641]: time="2023-10-02T20:10:46.335714138Z" level=info msg="TearDown network for sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" successfully" Oct 2 20:10:46.335814 env[1641]: time="2023-10-02T20:10:46.335762622Z" level=info msg="StopPodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" returns successfully" Oct 2 20:10:46.336650 kubelet[2783]: I1002 20:10:46.336609 2783 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=5ddcc158-862a-41f0-8c84-b756d422b337 path="/var/lib/kubelet/pods/5ddcc158-862a-41f0-8c84-b756d422b337/volumes" Oct 2 20:10:46.338458 kubelet[2783]: I1002 20:10:46.338375 2783 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=e06f8552-1bce-4a7d-889d-72b522d584ec path="/var/lib/kubelet/pods/e06f8552-1bce-4a7d-889d-72b522d584ec/volumes" Oct 2 20:10:46.366721 systemd[1]: var-lib-kubelet-pods-5ddcc158\x2d862a\x2d41f0\x2d8c84\x2db756d422b337-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dpq6b5.mount: Deactivated successfully. Oct 2 20:10:46.366866 systemd[1]: var-lib-kubelet-pods-e06f8552\x2d1bce\x2d4a7d\x2d889d\x2d72b522d584ec-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dbd7q9.mount: Deactivated successfully. Oct 2 20:10:46.366949 systemd[1]: var-lib-kubelet-pods-e06f8552\x2d1bce\x2d4a7d\x2d889d\x2d72b522d584ec-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:10:46.367101 systemd[1]: var-lib-kubelet-pods-e06f8552\x2d1bce\x2d4a7d\x2d889d\x2d72b522d584ec-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:10:47.292125 sshd[3690]: pam_unix(sshd:session): session closed for user core Oct 2 20:10:47.298000 audit[3690]: USER_END pid=3690 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.302475 kernel: kauditd_printk_skb: 27 callbacks suppressed Oct 2 20:10:47.302607 kernel: audit: type=1106 audit(1696277447.298:1394): pid=3690 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.301000 audit[3690]: CRED_DISP pid=3690 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.314999 systemd[1]: sshd@28-172.31.28.145:22-139.178.89.65:39396.service: Deactivated successfully. Oct 2 20:10:47.316231 systemd[1]: session-29.scope: Deactivated successfully. Oct 2 20:10:47.325749 kernel: audit: type=1104 audit(1696277447.301:1395): pid=3690 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.325869 kernel: audit: type=1131 audit(1696277447.311:1396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.28.145:22-139.178.89.65:39396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-172.31.28.145:22-139.178.89.65:39396 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.318375 systemd-logind[1633]: Session 29 logged out. Waiting for processes to exit. Oct 2 20:10:47.343692 systemd[1]: Started sshd@29-172.31.28.145:22-139.178.89.65:47122.service. Oct 2 20:10:47.342000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.145:22-139.178.89.65:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.358742 kernel: audit: type=1130 audit(1696277447.342:1397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.145:22-139.178.89.65:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:10:47.355037 systemd-logind[1633]: Removed session 29. Oct 2 20:10:47.529000 audit[3799]: USER_ACCT pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.530951 sshd[3799]: Accepted publickey for core from 139.178.89.65 port 47122 ssh2: RSA SHA256:b5m6N7VYUkBtWMhKXZKayIGJb71YGiCnT/ZVA79Xzbc Oct 2 20:10:47.542277 kernel: audit: type=1101 audit(1696277447.529:1398): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.543000 audit[3799]: CRED_ACQ pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.546195 sshd[3799]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Oct 2 20:10:47.558670 kernel: audit: type=1103 audit(1696277447.543:1399): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.558767 kernel: audit: type=1006 audit(1696277447.544:1400): pid=3799 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Oct 2 20:10:47.558797 kernel: audit: type=1300 audit(1696277447.544:1400): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeee10dfe0 a2=3 a3=0 items=0 ppid=1 pid=3799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:47.544000 audit[3799]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeee10dfe0 a2=3 a3=0 items=0 ppid=1 pid=3799 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:47.558010 systemd[1]: Started session-30.scope. Oct 2 20:10:47.559977 systemd-logind[1633]: New session 30 of user core. Oct 2 20:10:47.565526 kernel: audit: type=1327 audit(1696277447.544:1400): proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:47.544000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Oct 2 20:10:47.570408 kernel: audit: type=1105 audit(1696277447.566:1401): pid=3799 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.566000 audit[3799]: USER_START pid=3799 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:47.577000 audit[3801]: CRED_ACQ pid=3801 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:10:48.352259 kubelet[2783]: I1002 20:10:48.352223 2783 topology_manager.go:210] "Topology Admit Handler" Oct 2 20:10:48.352739 kubelet[2783]: E1002 20:10:48.352300 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: E1002 20:10:48.352313 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: E1002 20:10:48.352322 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="5ddcc158-862a-41f0-8c84-b756d422b337" containerName="cilium-operator" Oct 2 20:10:48.352739 kubelet[2783]: E1002 20:10:48.352331 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: I1002 20:10:48.352403 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: I1002 20:10:48.352416 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: I1002 20:10:48.352425 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: I1002 20:10:48.352436 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: I1002 20:10:48.352445 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: I1002 20:10:48.352457 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="5ddcc158-862a-41f0-8c84-b756d422b337" containerName="cilium-operator" Oct 2 20:10:48.352739 kubelet[2783]: E1002 20:10:48.352500 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.352739 kubelet[2783]: E1002 20:10:48.352511 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.353265 kubelet[2783]: E1002 20:10:48.352520 2783 cpu_manager.go:395] "RemoveStaleState: removing container" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.353265 kubelet[2783]: I1002 20:10:48.352559 2783 memory_manager.go:346] "RemoveStaleState removing state" podUID="e06f8552-1bce-4a7d-889d-72b522d584ec" containerName="mount-cgroup" Oct 2 20:10:48.362062 systemd[1]: Created slice kubepods-burstable-pod031c55f8_58b2_4a4b_91bf_95d0e41692c2.slice. Oct 2 20:10:48.492300 kubelet[2783]: I1002 20:10:48.492255 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-bpf-maps\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.492511 kubelet[2783]: I1002 20:10:48.492336 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cni-path\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.493254 kubelet[2783]: I1002 20:10:48.493222 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hostproc\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.500742 kubelet[2783]: I1002 20:10:48.500703 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-czxzk\" (UniqueName: \"kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-kube-api-access-czxzk\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.502457 kubelet[2783]: I1002 20:10:48.502427 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-net\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.503151 kubelet[2783]: I1002 20:10:48.503135 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hubble-tls\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.503302 kubelet[2783]: I1002 20:10:48.503292 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-cgroup\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.503432 kubelet[2783]: I1002 20:10:48.503421 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-ipsec-secrets\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.503556 kubelet[2783]: I1002 20:10:48.503547 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-run\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.503660 kubelet[2783]: I1002 20:10:48.503650 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-config-path\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.505151 kubelet[2783]: I1002 20:10:48.505131 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-kernel\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.505310 kubelet[2783]: I1002 20:10:48.505299 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-lib-modules\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.505443 kubelet[2783]: I1002 20:10:48.505433 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-xtables-lock\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.505568 kubelet[2783]: I1002 20:10:48.505559 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-clustermesh-secrets\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.505673 kubelet[2783]: I1002 20:10:48.505665 2783 reconciler_common.go:253] "operationExecutor.VerifyControllerAttachedVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-etc-cni-netd\") pod \"cilium-hvs4c\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " pod="kube-system/cilium-hvs4c" Oct 2 20:10:48.669743 env[1641]: time="2023-10-02T20:10:48.669495840Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hvs4c,Uid:031c55f8-58b2-4a4b-91bf-95d0e41692c2,Namespace:kube-system,Attempt:0,}" Oct 2 20:10:48.697753 env[1641]: time="2023-10-02T20:10:48.697670798Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Oct 2 20:10:48.698081 env[1641]: time="2023-10-02T20:10:48.697723061Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Oct 2 20:10:48.698081 env[1641]: time="2023-10-02T20:10:48.697746247Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Oct 2 20:10:48.698249 env[1641]: time="2023-10-02T20:10:48.698083201Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa pid=3818 runtime=io.containerd.runc.v2 Oct 2 20:10:48.721781 systemd[1]: Started cri-containerd-f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa.scope. Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.744000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.745000 audit: BPF prog-id=137 op=LOAD Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:48.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363830353635376332303566383636643933393232366638376266 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:48.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363830353635376332303566383636643933393232366638376266 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.748000 audit: BPF prog-id=138 op=LOAD Oct 2 20:10:48.748000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002569c0 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:48.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363830353635376332303566383636643933393232366638376266 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.750000 audit: BPF prog-id=139 op=LOAD Oct 2 20:10:48.750000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000256a08 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:48.750000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363830353635376332303566383636643933393232366638376266 Oct 2 20:10:48.751000 audit: BPF prog-id=139 op=UNLOAD Oct 2 20:10:48.751000 audit: BPF prog-id=138 op=UNLOAD Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { perfmon } for pid=3827 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit[3827]: AVC avc: denied { bpf } for pid=3827 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Oct 2 20:10:48.751000 audit: BPF prog-id=140 op=LOAD Oct 2 20:10:48.751000 audit[3827]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000256e18 items=0 ppid=3818 pid=3827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Oct 2 20:10:48.751000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634363830353635376332303566383636643933393232366638376266 Oct 2 20:10:48.774190 env[1641]: time="2023-10-02T20:10:48.774134483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:cilium-hvs4c,Uid:031c55f8-58b2-4a4b-91bf-95d0e41692c2,Namespace:kube-system,Attempt:0,} returns sandbox id \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\"" Oct 2 20:10:48.779559 env[1641]: time="2023-10-02T20:10:48.779497186Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:0,}" Oct 2 20:10:48.811619 env[1641]: time="2023-10-02T20:10:48.811574931Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:0,} returns container id \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\"" Oct 2 20:10:48.815996 env[1641]: time="2023-10-02T20:10:48.815964387Z" level=info msg="StartContainer for \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\"" Oct 2 20:10:48.844888 systemd[1]: Started cri-containerd-192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74.scope. Oct 2 20:10:48.860650 systemd[1]: cri-containerd-192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74.scope: Deactivated successfully. Oct 2 20:10:48.894866 env[1641]: time="2023-10-02T20:10:48.894761555Z" level=info msg="shim disconnected" id=192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74 Oct 2 20:10:48.894866 env[1641]: time="2023-10-02T20:10:48.894832533Z" level=warning msg="cleaning up after shim disconnected" id=192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74 namespace=k8s.io Oct 2 20:10:48.894866 env[1641]: time="2023-10-02T20:10:48.894847207Z" level=info msg="cleaning up dead shim" Oct 2 20:10:48.906539 env[1641]: time="2023-10-02T20:10:48.906487847Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3877 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:48Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:48.906819 env[1641]: time="2023-10-02T20:10:48.906760541Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:10:48.907311 env[1641]: time="2023-10-02T20:10:48.907036589Z" level=error msg="Failed to pipe stderr of container \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\"" error="reading from a closed fifo" Oct 2 20:10:48.908533 env[1641]: time="2023-10-02T20:10:48.908471153Z" level=error msg="Failed to pipe stdout of container \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\"" error="reading from a closed fifo" Oct 2 20:10:48.911648 env[1641]: time="2023-10-02T20:10:48.911589759Z" level=error msg="StartContainer for \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:48.912144 kubelet[2783]: E1002 20:10:48.912052 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74" Oct 2 20:10:48.912682 kubelet[2783]: E1002 20:10:48.912347 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:48.912682 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:48.912682 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:10:48.912682 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-czxzk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:48.913826 kubelet[2783]: E1002 20:10:48.912672 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:10:49.057248 env[1641]: time="2023-10-02T20:10:49.057194978Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:1,}" Oct 2 20:10:49.085245 env[1641]: time="2023-10-02T20:10:49.085191947Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:1,} returns container id \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\"" Oct 2 20:10:49.104059 env[1641]: time="2023-10-02T20:10:49.104016141Z" level=info msg="StartContainer for \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\"" Oct 2 20:10:49.128601 systemd[1]: Started cri-containerd-3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d.scope. Oct 2 20:10:49.146888 systemd[1]: cri-containerd-3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d.scope: Deactivated successfully. Oct 2 20:10:49.168613 env[1641]: time="2023-10-02T20:10:49.168558642Z" level=info msg="shim disconnected" id=3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d Oct 2 20:10:49.168613 env[1641]: time="2023-10-02T20:10:49.168614312Z" level=warning msg="cleaning up after shim disconnected" id=3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d namespace=k8s.io Oct 2 20:10:49.168916 env[1641]: time="2023-10-02T20:10:49.168626980Z" level=info msg="cleaning up dead shim" Oct 2 20:10:49.178719 env[1641]: time="2023-10-02T20:10:49.178653617Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:10:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3916 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:10:49Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:10:49.179039 env[1641]: time="2023-10-02T20:10:49.178956845Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:10:49.179402 env[1641]: time="2023-10-02T20:10:49.179331944Z" level=error msg="Failed to pipe stdout of container \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\"" error="reading from a closed fifo" Oct 2 20:10:49.179563 env[1641]: time="2023-10-02T20:10:49.179448047Z" level=error msg="Failed to pipe stderr of container \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\"" error="reading from a closed fifo" Oct 2 20:10:49.182182 env[1641]: time="2023-10-02T20:10:49.182133587Z" level=error msg="StartContainer for \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:10:49.182662 kubelet[2783]: E1002 20:10:49.182454 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d" Oct 2 20:10:49.182662 kubelet[2783]: E1002 20:10:49.182586 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:10:49.182662 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:10:49.182662 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:10:49.182915 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-czxzk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:10:49.183041 kubelet[2783]: E1002 20:10:49.182631 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:10:50.059493 kubelet[2783]: I1002 20:10:50.059441 2783 scope.go:115] "RemoveContainer" containerID="192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74" Oct 2 20:10:50.060470 kubelet[2783]: I1002 20:10:50.060437 2783 scope.go:115] "RemoveContainer" containerID="192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74" Oct 2 20:10:50.062487 env[1641]: time="2023-10-02T20:10:50.062443757Z" level=info msg="RemoveContainer for \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\"" Oct 2 20:10:50.063521 env[1641]: time="2023-10-02T20:10:50.063486306Z" level=info msg="RemoveContainer for \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\"" Oct 2 20:10:50.063747 env[1641]: time="2023-10-02T20:10:50.063675932Z" level=error msg="RemoveContainer for \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\" failed" error="failed to set removing state for container \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\": container is already in removing state" Oct 2 20:10:50.064689 kubelet[2783]: E1002 20:10:50.063905 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\": container is already in removing state" containerID="192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74" Oct 2 20:10:50.064689 kubelet[2783]: E1002 20:10:50.063940 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74": container is already in removing state; Skipping pod "cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)" Oct 2 20:10:50.064689 kubelet[2783]: E1002 20:10:50.064294 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:10:50.072682 env[1641]: time="2023-10-02T20:10:50.072631476Z" level=info msg="RemoveContainer for \"192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74\" returns successfully" Oct 2 20:10:50.277938 kubelet[2783]: E1002 20:10:50.277904 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:10:51.063671 kubelet[2783]: E1002 20:10:51.063638 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 10s restarting failed container=mount-cgroup pod=cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:10:52.000473 kubelet[2783]: W1002 20:10:52.000431 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod031c55f8_58b2_4a4b_91bf_95d0e41692c2.slice/cri-containerd-192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74.scope WatchSource:0}: container "192d398c5294e3c42a8321e5697e209ed794afbc27d457460bfa95163371da74" in namespace "k8s.io": not found Oct 2 20:10:55.110208 kubelet[2783]: W1002 20:10:55.110167 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod031c55f8_58b2_4a4b_91bf_95d0e41692c2.slice/cri-containerd-3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d.scope WatchSource:0}: task 3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d not found: not found Oct 2 20:10:55.279732 kubelet[2783]: E1002 20:10:55.279668 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:00.281011 kubelet[2783]: E1002 20:11:00.280971 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:03.334018 env[1641]: time="2023-10-02T20:11:03.332797699Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:2,}" Oct 2 20:11:03.378511 env[1641]: time="2023-10-02T20:11:03.378455677Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:2,} returns container id \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\"" Oct 2 20:11:03.383084 env[1641]: time="2023-10-02T20:11:03.382544993Z" level=info msg="StartContainer for \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\"" Oct 2 20:11:03.413895 systemd[1]: run-containerd-runc-k8s.io-0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26-runc.tgi5Ro.mount: Deactivated successfully. Oct 2 20:11:03.420145 systemd[1]: Started cri-containerd-0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26.scope. Oct 2 20:11:03.440292 systemd[1]: cri-containerd-0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26.scope: Deactivated successfully. Oct 2 20:11:03.468116 env[1641]: time="2023-10-02T20:11:03.468025771Z" level=info msg="shim disconnected" id=0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26 Oct 2 20:11:03.468736 env[1641]: time="2023-10-02T20:11:03.468123182Z" level=warning msg="cleaning up after shim disconnected" id=0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26 namespace=k8s.io Oct 2 20:11:03.468736 env[1641]: time="2023-10-02T20:11:03.468136171Z" level=info msg="cleaning up dead shim" Oct 2 20:11:03.480767 env[1641]: time="2023-10-02T20:11:03.480705940Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:03Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3955 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:03Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:03.481057 env[1641]: time="2023-10-02T20:11:03.480997707Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:11:03.481290 env[1641]: time="2023-10-02T20:11:03.481243300Z" level=error msg="Failed to pipe stdout of container \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\"" error="reading from a closed fifo" Oct 2 20:11:03.487271 env[1641]: time="2023-10-02T20:11:03.487198391Z" level=error msg="Failed to pipe stderr of container \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\"" error="reading from a closed fifo" Oct 2 20:11:03.490094 env[1641]: time="2023-10-02T20:11:03.490037009Z" level=error msg="StartContainer for \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:03.490419 kubelet[2783]: E1002 20:11:03.490395 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26" Oct 2 20:11:03.491022 kubelet[2783]: E1002 20:11:03.490573 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:03.491022 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:03.491022 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:11:03.491022 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-czxzk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:03.491783 kubelet[2783]: E1002 20:11:03.490664 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:11:04.100968 kubelet[2783]: I1002 20:11:04.100593 2783 scope.go:115] "RemoveContainer" containerID="3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d" Oct 2 20:11:04.100968 kubelet[2783]: I1002 20:11:04.100934 2783 scope.go:115] "RemoveContainer" containerID="3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d" Oct 2 20:11:04.102368 env[1641]: time="2023-10-02T20:11:04.102212095Z" level=info msg="RemoveContainer for \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\"" Oct 2 20:11:04.102635 env[1641]: time="2023-10-02T20:11:04.102607696Z" level=info msg="RemoveContainer for \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\"" Oct 2 20:11:04.102888 env[1641]: time="2023-10-02T20:11:04.102845477Z" level=error msg="RemoveContainer for \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\" failed" error="failed to set removing state for container \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\": container is already in removing state" Oct 2 20:11:04.103045 kubelet[2783]: E1002 20:11:04.103025 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\": container is already in removing state" containerID="3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d" Oct 2 20:11:04.103126 kubelet[2783]: E1002 20:11:04.103064 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d": container is already in removing state; Skipping pod "cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)" Oct 2 20:11:04.103463 kubelet[2783]: E1002 20:11:04.103446 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:11:04.108094 env[1641]: time="2023-10-02T20:11:04.108045490Z" level=info msg="RemoveContainer for \"3ff524201ae52a58381beb3157afe452c59b7ee1fafb7ade0ff9671d9459348d\" returns successfully" Oct 2 20:11:04.352231 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26-rootfs.mount: Deactivated successfully. Oct 2 20:11:05.281771 kubelet[2783]: E1002 20:11:05.281738 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:06.572276 kubelet[2783]: W1002 20:11:06.572230 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod031c55f8_58b2_4a4b_91bf_95d0e41692c2.slice/cri-containerd-0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26.scope WatchSource:0}: task 0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26 not found: not found Oct 2 20:11:10.282873 kubelet[2783]: E1002 20:11:10.282839 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:14.331009 kubelet[2783]: E1002 20:11:14.330529 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 20s restarting failed container=mount-cgroup pod=cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:11:15.283658 kubelet[2783]: E1002 20:11:15.283624 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:20.285174 kubelet[2783]: E1002 20:11:20.285142 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:24.690000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:24.692940 kernel: kauditd_printk_skb: 58 callbacks suppressed Oct 2 20:11:24.693032 kernel: audit: type=1400 audit(1696277484.690:1421): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:24.690000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00116ff80 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:24.705895 kernel: audit: type=1300 audit(1696277484.690:1421): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00116ff80 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:24.706022 kernel: audit: type=1327 audit(1696277484.690:1421): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:24.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:24.692000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:24.717436 kernel: audit: type=1400 audit(1696277484.692:1422): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:24.717544 kernel: audit: type=1300 audit(1696277484.692:1422): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001288f40 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:24.692000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001288f40 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:24.692000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:24.730577 kernel: audit: type=1327 audit(1696277484.692:1422): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:25.286746 kubelet[2783]: E1002 20:11:25.286704 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:26.142000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.142000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.168239 kernel: audit: type=1400 audit(1696277486.142:1424): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.168418 kernel: audit: type=1400 audit(1696277486.142:1423): avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="nvme0n1p9" ino=521268 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.168459 kernel: audit: type=1300 audit(1696277486.142:1423): arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00ceda360 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.142000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c00ceda360 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.142000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.184540 kernel: audit: type=1327 audit(1696277486.142:1423): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.142000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.142000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c0018e9380 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.142000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.142000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00cc18e70 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.142000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.176000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="nvme0n1p9" ino=521274 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.176000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00cc18ed0 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.176000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.297000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.297000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0018e9480 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.297000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.297000 audit[2523]: AVC avc: denied { watch } for pid=2523 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="nvme0n1p9" ino=521272 scontext=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:26.297000 audit[2523]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c00cc19200 a2=fc6 a3=0 items=0 ppid=2377 pid=2523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c239,c676 key=(null) Oct 2 20:11:26.297000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3137322E33312E32382E313435002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75 Oct 2 20:11:26.335415 env[1641]: time="2023-10-02T20:11:26.335052619Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for container &ContainerMetadata{Name:mount-cgroup,Attempt:3,}" Oct 2 20:11:26.353717 env[1641]: time="2023-10-02T20:11:26.353669781Z" level=info msg="CreateContainer within sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" for &ContainerMetadata{Name:mount-cgroup,Attempt:3,} returns container id \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\"" Oct 2 20:11:26.355434 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3900113704.mount: Deactivated successfully. Oct 2 20:11:26.357892 env[1641]: time="2023-10-02T20:11:26.357171689Z" level=info msg="StartContainer for \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\"" Oct 2 20:11:26.394007 systemd[1]: Started cri-containerd-ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12.scope. Oct 2 20:11:26.408679 systemd[1]: run-containerd-runc-k8s.io-ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12-runc.fSjwy8.mount: Deactivated successfully. Oct 2 20:11:26.430267 systemd[1]: cri-containerd-ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12.scope: Deactivated successfully. Oct 2 20:11:26.459653 env[1641]: time="2023-10-02T20:11:26.459590722Z" level=info msg="shim disconnected" id=ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12 Oct 2 20:11:26.459653 env[1641]: time="2023-10-02T20:11:26.459659082Z" level=warning msg="cleaning up after shim disconnected" id=ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12 namespace=k8s.io Oct 2 20:11:26.459996 env[1641]: time="2023-10-02T20:11:26.459672542Z" level=info msg="cleaning up dead shim" Oct 2 20:11:26.482540 env[1641]: time="2023-10-02T20:11:26.482486374Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:26Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=3993 runtime=io.containerd.runc.v2\ntime=\"2023-10-02T20:11:26Z\" level=warning msg=\"failed to read init pid file\" error=\"open /run/containerd/io.containerd.runtime.v2.task/k8s.io/ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12/init.pid: no such file or directory\" runtime=io.containerd.runc.v2\n" Oct 2 20:11:26.482906 env[1641]: time="2023-10-02T20:11:26.482818814Z" level=error msg="copy shim log" error="read /proc/self/fd/41: file already closed" Oct 2 20:11:26.483188 env[1641]: time="2023-10-02T20:11:26.483143302Z" level=error msg="Failed to pipe stdout of container \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\"" error="reading from a closed fifo" Oct 2 20:11:26.484711 env[1641]: time="2023-10-02T20:11:26.484654412Z" level=error msg="Failed to pipe stderr of container \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\"" error="reading from a closed fifo" Oct 2 20:11:26.488958 env[1641]: time="2023-10-02T20:11:26.488882306Z" level=error msg="StartContainer for \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\" failed" error="failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" Oct 2 20:11:26.489238 kubelet[2783]: E1002 20:11:26.489217 2783 remote_runtime.go:326] "StartContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown" containerID="ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12" Oct 2 20:11:26.489728 kubelet[2783]: E1002 20:11:26.489402 2783 kuberuntime_manager.go:872] init container &Container{Name:mount-cgroup,Image:quay.io/cilium/cilium:v1.12.5@sha256:06ce2b0a0a472e73334a7504ee5c5d8b2e2d7b72ef728ad94e564740dd505be5,Command:[sh -ec cp /usr/bin/cilium-mount /hostbin/cilium-mount; Oct 2 20:11:26.489728 kubelet[2783]: nsenter --cgroup=/hostproc/1/ns/cgroup --mount=/hostproc/1/ns/mnt "${BIN_PATH}/cilium-mount" $CGROUP_ROOT; Oct 2 20:11:26.489728 kubelet[2783]: rm /hostbin/cilium-mount Oct 2 20:11:26.489728 kubelet[2783]: ],Args:[],WorkingDir:,Ports:[]ContainerPort{},Env:[]EnvVar{EnvVar{Name:CGROUP_ROOT,Value:/run/cilium/cgroupv2,ValueFrom:nil,},EnvVar{Name:BIN_PATH,Value:/opt/cni/bin,ValueFrom:nil,},},Resources:ResourceRequirements{Limits:ResourceList{},Requests:ResourceList{},Claims:[]ResourceClaim{},},VolumeMounts:[]VolumeMount{VolumeMount{Name:hostproc,ReadOnly:false,MountPath:/hostproc,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:cni-path,ReadOnly:false,MountPath:/hostbin,SubPath:,MountPropagation:nil,SubPathExpr:,},VolumeMount{Name:kube-api-access-czxzk,ReadOnly:true,MountPath:/var/run/secrets/kubernetes.io/serviceaccount,SubPath:,MountPropagation:nil,SubPathExpr:,},},LivenessProbe:nil,ReadinessProbe:nil,Lifecycle:nil,TerminationMessagePath:/dev/termination-log,ImagePullPolicy:IfNotPresent,SecurityContext:&SecurityContext{Capabilities:&Capabilities{Add:[SYS_ADMIN SYS_CHROOT SYS_PTRACE],Drop:[ALL],},Privileged:nil,SELinuxOptions:&SELinuxOptions{User:,Role:,Type:spc_t,Level:s0,},RunAsUser:nil,RunAsNonRoot:nil,ReadOnlyRootFilesystem:nil,AllowPrivilegeEscalation:nil,RunAsGroup:nil,ProcMount:nil,WindowsOptions:nil,SeccompProfile:nil,},Stdin:false,StdinOnce:false,TTY:false,EnvFrom:[]EnvFromSource{},TerminationMessagePolicy:FallbackToLogsOnError,VolumeDevices:[]VolumeDevice{},StartupProbe:nil,} start failed in pod cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2): RunContainerError: failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown Oct 2 20:11:26.490035 kubelet[2783]: E1002 20:11:26.489457 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with RunContainerError: \"failed to create containerd task: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: write /proc/self/attr/keycreate: invalid argument: unknown\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:11:27.168496 kubelet[2783]: I1002 20:11:27.168459 2783 scope.go:115] "RemoveContainer" containerID="0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26" Oct 2 20:11:27.169098 kubelet[2783]: I1002 20:11:27.169061 2783 scope.go:115] "RemoveContainer" containerID="0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26" Oct 2 20:11:27.171914 env[1641]: time="2023-10-02T20:11:27.171849600Z" level=info msg="RemoveContainer for \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\"" Oct 2 20:11:27.172393 env[1641]: time="2023-10-02T20:11:27.171994567Z" level=info msg="RemoveContainer for \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\"" Oct 2 20:11:27.172636 env[1641]: time="2023-10-02T20:11:27.172563576Z" level=error msg="RemoveContainer for \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\" failed" error="failed to set removing state for container \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\": container is already in removing state" Oct 2 20:11:27.172907 kubelet[2783]: E1002 20:11:27.172882 2783 remote_runtime.go:368] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\": container is already in removing state" containerID="0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26" Oct 2 20:11:27.173021 kubelet[2783]: E1002 20:11:27.172929 2783 kuberuntime_container.go:784] failed to remove pod init container "mount-cgroup": rpc error: code = Unknown desc = failed to set removing state for container "0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26": container is already in removing state; Skipping pod "cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)" Oct 2 20:11:27.173653 kubelet[2783]: E1002 20:11:27.173515 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:11:27.177498 env[1641]: time="2023-10-02T20:11:27.177452995Z" level=info msg="RemoveContainer for \"0eb24efb6514ee652bd811cb57f597a1088dd68c41869680f901b14dc7b2ab26\" returns successfully" Oct 2 20:11:27.348569 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12-rootfs.mount: Deactivated successfully. Oct 2 20:11:29.567418 kubelet[2783]: W1002 20:11:29.567339 2783 manager.go:1174] Failed to process watch event {EventType:0 Name:/kubepods.slice/kubepods-burstable.slice/kubepods-burstable-pod031c55f8_58b2_4a4b_91bf_95d0e41692c2.slice/cri-containerd-ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12.scope WatchSource:0}: task ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12 not found: not found Oct 2 20:11:29.943670 env[1641]: time="2023-10-02T20:11:29.943630187Z" level=info msg="StopPodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\"" Oct 2 20:11:29.944111 env[1641]: time="2023-10-02T20:11:29.943724848Z" level=info msg="TearDown network for sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" successfully" Oct 2 20:11:29.944111 env[1641]: time="2023-10-02T20:11:29.943767488Z" level=info msg="StopPodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" returns successfully" Oct 2 20:11:29.945336 env[1641]: time="2023-10-02T20:11:29.944418220Z" level=info msg="RemovePodSandbox for \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\"" Oct 2 20:11:29.945506 env[1641]: time="2023-10-02T20:11:29.945342274Z" level=info msg="Forcibly stopping sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\"" Oct 2 20:11:29.945506 env[1641]: time="2023-10-02T20:11:29.945468539Z" level=info msg="TearDown network for sandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" successfully" Oct 2 20:11:29.949587 env[1641]: time="2023-10-02T20:11:29.949368318Z" level=info msg="RemovePodSandbox \"c34c7488d37d69e693c0929b71a618cca557c0a006a4f9c27a97468cc7d1497a\" returns successfully" Oct 2 20:11:29.950017 env[1641]: time="2023-10-02T20:11:29.949990950Z" level=info msg="StopPodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\"" Oct 2 20:11:29.950132 env[1641]: time="2023-10-02T20:11:29.950084147Z" level=info msg="TearDown network for sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" successfully" Oct 2 20:11:29.950192 env[1641]: time="2023-10-02T20:11:29.950128270Z" level=info msg="StopPodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" returns successfully" Oct 2 20:11:29.950807 env[1641]: time="2023-10-02T20:11:29.950780759Z" level=info msg="RemovePodSandbox for \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\"" Oct 2 20:11:29.950948 env[1641]: time="2023-10-02T20:11:29.950905158Z" level=info msg="Forcibly stopping sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\"" Oct 2 20:11:29.951083 env[1641]: time="2023-10-02T20:11:29.951006125Z" level=info msg="TearDown network for sandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" successfully" Oct 2 20:11:29.957782 env[1641]: time="2023-10-02T20:11:29.957655873Z" level=info msg="RemovePodSandbox \"cfe14d385036b9a578160c1a874c53cfee023abf857aa7a123cd48ae4c84e131\" returns successfully" Oct 2 20:11:30.291055 kubelet[2783]: E1002 20:11:30.289037 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:35.290611 kubelet[2783]: E1002 20:11:35.290584 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:38.331458 kubelet[2783]: E1002 20:11:38.330032 2783 pod_workers.go:965] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"mount-cgroup\" with CrashLoopBackOff: \"back-off 40s restarting failed container=mount-cgroup pod=cilium-hvs4c_kube-system(031c55f8-58b2-4a4b-91bf-95d0e41692c2)\"" pod="kube-system/cilium-hvs4c" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 Oct 2 20:11:40.291554 kubelet[2783]: E1002 20:11:40.291488 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:41.692425 kernel: kauditd_printk_skb: 14 callbacks suppressed Oct 2 20:11:41.692614 kernel: audit: type=1400 audit(1696277501.685:1429): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.685000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.685000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00108a940 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.703416 kernel: audit: type=1300 audit(1696277501.685:1429): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00108a940 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.704719 kernel: audit: type=1327 audit(1696277501.685:1429): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.685000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.722000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.722000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.733772 kernel: audit: type=1400 audit(1696277501.722:1430): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.733900 kernel: audit: type=1400 audit(1696277501.722:1431): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.733934 kernel: audit: type=1300 audit(1696277501.722:1430): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc2900 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.722000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc2900 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.722000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00108a960 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.748017 kernel: audit: type=1300 audit(1696277501.722:1431): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00108a960 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.748142 kernel: audit: type=1327 audit(1696277501.722:1430): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.722000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.722000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.759726 kernel: audit: type=1327 audit(1696277501.722:1431): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:41.759890 kernel: audit: type=1400 audit(1696277501.722:1432): avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.722000 audit[2573]: AVC avc: denied { watch } for pid=2573 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="nvme0n1p9" ino=521001 scontext=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Oct 2 20:11:41.722000 audit[2573]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000cc2b40 a2=fc6 a3=0 items=0 ppid=2418 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c297,c927 key=(null) Oct 2 20:11:41.722000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Oct 2 20:11:45.293027 kubelet[2783]: E1002 20:11:45.293001 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:50.044057 env[1641]: time="2023-10-02T20:11:50.043993084Z" level=info msg="StopPodSandbox for \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\"" Oct 2 20:11:50.045331 env[1641]: time="2023-10-02T20:11:50.045286988Z" level=info msg="Container to stop \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Oct 2 20:11:50.051999 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa-shm.mount: Deactivated successfully. Oct 2 20:11:50.067056 systemd[1]: cri-containerd-f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa.scope: Deactivated successfully. Oct 2 20:11:50.070878 kernel: kauditd_printk_skb: 2 callbacks suppressed Oct 2 20:11:50.070979 kernel: audit: type=1334 audit(1696277510.067:1433): prog-id=137 op=UNLOAD Oct 2 20:11:50.067000 audit: BPF prog-id=137 op=UNLOAD Oct 2 20:11:50.073000 audit: BPF prog-id=140 op=UNLOAD Oct 2 20:11:50.076418 kernel: audit: type=1334 audit(1696277510.073:1434): prog-id=140 op=UNLOAD Oct 2 20:11:50.115867 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa-rootfs.mount: Deactivated successfully. Oct 2 20:11:50.154280 env[1641]: time="2023-10-02T20:11:50.154216833Z" level=info msg="shim disconnected" id=f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa Oct 2 20:11:50.154280 env[1641]: time="2023-10-02T20:11:50.154277316Z" level=warning msg="cleaning up after shim disconnected" id=f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa namespace=k8s.io Oct 2 20:11:50.155418 env[1641]: time="2023-10-02T20:11:50.154292660Z" level=info msg="cleaning up dead shim" Oct 2 20:11:50.163691 sshd[3799]: pam_unix(sshd:session): session closed for user core Oct 2 20:11:50.167000 audit[3799]: USER_END pid=3799 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.180644 kernel: audit: type=1106 audit(1696277510.167:1435): pid=3799 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.187783 kernel: audit: type=1104 audit(1696277510.167:1436): pid=3799 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.167000 audit[3799]: CRED_DISP pid=3799 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Oct 2 20:11:50.181905 systemd[1]: sshd@29-172.31.28.145:22-139.178.89.65:47122.service: Deactivated successfully. Oct 2 20:11:50.182835 systemd[1]: session-30.scope: Deactivated successfully. Oct 2 20:11:50.184004 systemd-logind[1633]: Session 30 logged out. Waiting for processes to exit. Oct 2 20:11:50.186003 systemd-logind[1633]: Removed session 30. Oct 2 20:11:50.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.145:22-139.178.89.65:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.194490 kernel: audit: type=1131 audit(1696277510.181:1437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-172.31.28.145:22-139.178.89.65:47122 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Oct 2 20:11:50.196633 env[1641]: time="2023-10-02T20:11:50.195566809Z" level=warning msg="cleanup warnings time=\"2023-10-02T20:11:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4029 runtime=io.containerd.runc.v2\n" Oct 2 20:11:50.196633 env[1641]: time="2023-10-02T20:11:50.196010992Z" level=info msg="TearDown network for sandbox \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" successfully" Oct 2 20:11:50.196633 env[1641]: time="2023-10-02T20:11:50.196042978Z" level=info msg="StopPodSandbox for \"f46805657c205f866d939226f87bfedd0313b60b07b20b1b2f836b02239c26aa\" returns successfully" Oct 2 20:11:50.253129 kubelet[2783]: I1002 20:11:50.253088 2783 scope.go:115] "RemoveContainer" containerID="ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12" Oct 2 20:11:50.258311 env[1641]: time="2023-10-02T20:11:50.257760506Z" level=info msg="RemoveContainer for \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\"" Oct 2 20:11:50.266742 kubelet[2783]: I1002 20:11:50.264392 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hubble-tls\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.266742 kubelet[2783]: I1002 20:11:50.264489 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-ipsec-secrets\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.266742 kubelet[2783]: I1002 20:11:50.264559 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-run\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.266742 kubelet[2783]: I1002 20:11:50.264733 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-kernel\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.266742 kubelet[2783]: I1002 20:11:50.264826 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-clustermesh-secrets\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.266742 kubelet[2783]: I1002 20:11:50.264859 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-lib-modules\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.267252 kubelet[2783]: I1002 20:11:50.264901 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-net\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.267252 kubelet[2783]: I1002 20:11:50.264926 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-cgroup\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.267252 kubelet[2783]: I1002 20:11:50.264978 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cni-path\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.267252 kubelet[2783]: I1002 20:11:50.265004 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-etc-cni-netd\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.267252 kubelet[2783]: I1002 20:11:50.265596 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"kube-api-access-czxzk\" (UniqueName: \"kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-kube-api-access-czxzk\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.267252 kubelet[2783]: I1002 20:11:50.265651 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-xtables-lock\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.268531 kubelet[2783]: I1002 20:11:50.265687 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hostproc\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.268531 kubelet[2783]: I1002 20:11:50.265743 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-config-path\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.268531 kubelet[2783]: I1002 20:11:50.265773 2783 reconciler_common.go:169] "operationExecutor.UnmountVolume started for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-bpf-maps\") pod \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\" (UID: \"031c55f8-58b2-4a4b-91bf-95d0e41692c2\") " Oct 2 20:11:50.268531 kubelet[2783]: I1002 20:11:50.265996 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-cgroup" (OuterVolumeSpecName: "cilium-cgroup") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "cilium-cgroup". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.268531 kubelet[2783]: I1002 20:11:50.266328 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-bpf-maps" (OuterVolumeSpecName: "bpf-maps") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "bpf-maps". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.269619 kubelet[2783]: I1002 20:11:50.266355 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cni-path" (OuterVolumeSpecName: "cni-path") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "cni-path". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.269619 kubelet[2783]: I1002 20:11:50.266399 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-etc-cni-netd" (OuterVolumeSpecName: "etc-cni-netd") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "etc-cni-netd". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.269619 kubelet[2783]: I1002 20:11:50.266744 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-xtables-lock" (OuterVolumeSpecName: "xtables-lock") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "xtables-lock". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.269619 kubelet[2783]: I1002 20:11:50.266775 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hostproc" (OuterVolumeSpecName: "hostproc") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "hostproc". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.269619 kubelet[2783]: W1002 20:11:50.266907 2783 empty_dir.go:525] Warning: Failed to clear quota on /var/lib/kubelet/pods/031c55f8-58b2-4a4b-91bf-95d0e41692c2/volumes/kubernetes.io~configmap/cilium-config-path: clearQuota called, but quotas disabled Oct 2 20:11:50.273096 kubelet[2783]: I1002 20:11:50.273057 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-run" (OuterVolumeSpecName: "cilium-run") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "cilium-run". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.273250 kubelet[2783]: I1002 20:11:50.273122 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-kernel" (OuterVolumeSpecName: "host-proc-sys-kernel") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "host-proc-sys-kernel". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.273448 kubelet[2783]: I1002 20:11:50.273425 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-lib-modules" (OuterVolumeSpecName: "lib-modules") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "lib-modules". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.273572 kubelet[2783]: I1002 20:11:50.273556 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-net" (OuterVolumeSpecName: "host-proc-sys-net") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "host-proc-sys-net". PluginName "kubernetes.io/host-path", VolumeGidValue "" Oct 2 20:11:50.276314 kubelet[2783]: I1002 20:11:50.276274 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-config-path" (OuterVolumeSpecName: "cilium-config-path") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "cilium-config-path". PluginName "kubernetes.io/configmap", VolumeGidValue "" Oct 2 20:11:50.277784 env[1641]: time="2023-10-02T20:11:50.277577489Z" level=info msg="RemoveContainer for \"ab9c3141add02bec97974dca8211a3dd31afca3f5eb52d3336200595eab48f12\" returns successfully" Oct 2 20:11:50.288818 systemd[1]: var-lib-kubelet-pods-031c55f8\x2d58b2\x2d4a4b\x2d91bf\x2d95d0e41692c2-volumes-kubernetes.io\x7eprojected-hubble\x2dtls.mount: Deactivated successfully. Oct 2 20:11:50.291179 kubelet[2783]: I1002 20:11:50.291135 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hubble-tls" (OuterVolumeSpecName: "hubble-tls") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "hubble-tls". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:50.294301 systemd[1]: var-lib-kubelet-pods-031c55f8\x2d58b2\x2d4a4b\x2d91bf\x2d95d0e41692c2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dczxzk.mount: Deactivated successfully. Oct 2 20:11:50.308503 kubelet[2783]: E1002 20:11:50.296204 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:11:50.308503 kubelet[2783]: I1002 20:11:50.297855 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-kube-api-access-czxzk" (OuterVolumeSpecName: "kube-api-access-czxzk") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "kube-api-access-czxzk". PluginName "kubernetes.io/projected", VolumeGidValue "" Oct 2 20:11:50.308503 kubelet[2783]: I1002 20:11:50.302370 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-ipsec-secrets" (OuterVolumeSpecName: "cilium-ipsec-secrets") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "cilium-ipsec-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:50.308503 kubelet[2783]: I1002 20:11:50.307657 2783 operation_generator.go:900] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-clustermesh-secrets" (OuterVolumeSpecName: "clustermesh-secrets") pod "031c55f8-58b2-4a4b-91bf-95d0e41692c2" (UID: "031c55f8-58b2-4a4b-91bf-95d0e41692c2"). InnerVolumeSpecName "clustermesh-secrets". PluginName "kubernetes.io/secret", VolumeGidValue "" Oct 2 20:11:50.303146 systemd[1]: var-lib-kubelet-pods-031c55f8\x2d58b2\x2d4a4b\x2d91bf\x2d95d0e41692c2-volumes-kubernetes.io\x7esecret-cilium\x2dipsec\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:50.349800 systemd[1]: Removed slice kubepods-burstable-pod031c55f8_58b2_4a4b_91bf_95d0e41692c2.slice. Oct 2 20:11:50.366806 kubelet[2783]: I1002 20:11:50.366745 2783 reconciler_common.go:295] "Volume detached for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-lib-modules\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.366806 kubelet[2783]: I1002 20:11:50.366814 2783 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-net\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-net\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.366806 kubelet[2783]: I1002 20:11:50.366835 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-cgroup\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-cgroup\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366879 2783 reconciler_common.go:295] "Volume detached for volume \"cni-path\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cni-path\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366897 2783 reconciler_common.go:295] "Volume detached for volume \"etc-cni-netd\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-etc-cni-netd\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366911 2783 reconciler_common.go:295] "Volume detached for volume \"kube-api-access-czxzk\" (UniqueName: \"kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-kube-api-access-czxzk\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366923 2783 reconciler_common.go:295] "Volume detached for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-xtables-lock\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366968 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-config-path\" (UniqueName: \"kubernetes.io/configmap/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-config-path\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366986 2783 reconciler_common.go:295] "Volume detached for volume \"hostproc\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hostproc\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.366998 2783 reconciler_common.go:295] "Volume detached for volume \"bpf-maps\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-bpf-maps\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.367450 kubelet[2783]: I1002 20:11:50.367011 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-run\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-run\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.370573 kubelet[2783]: I1002 20:11:50.367054 2783 reconciler_common.go:295] "Volume detached for volume \"hubble-tls\" (UniqueName: \"kubernetes.io/projected/031c55f8-58b2-4a4b-91bf-95d0e41692c2-hubble-tls\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.370573 kubelet[2783]: I1002 20:11:50.367070 2783 reconciler_common.go:295] "Volume detached for volume \"cilium-ipsec-secrets\" (UniqueName: \"kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-cilium-ipsec-secrets\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.370573 kubelet[2783]: I1002 20:11:50.367084 2783 reconciler_common.go:295] "Volume detached for volume \"host-proc-sys-kernel\" (UniqueName: \"kubernetes.io/host-path/031c55f8-58b2-4a4b-91bf-95d0e41692c2-host-proc-sys-kernel\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:50.370573 kubelet[2783]: I1002 20:11:50.367100 2783 reconciler_common.go:295] "Volume detached for volume \"clustermesh-secrets\" (UniqueName: \"kubernetes.io/secret/031c55f8-58b2-4a4b-91bf-95d0e41692c2-clustermesh-secrets\") on node \"ip-172-31-28-145\" DevicePath \"\"" Oct 2 20:11:51.050757 systemd[1]: var-lib-kubelet-pods-031c55f8\x2d58b2\x2d4a4b\x2d91bf\x2d95d0e41692c2-volumes-kubernetes.io\x7esecret-clustermesh\x2dsecrets.mount: Deactivated successfully. Oct 2 20:11:52.332169 kubelet[2783]: I1002 20:11:52.332128 2783 kubelet_volumes.go:160] "Cleaned up orphaned pod volumes dir" podUID=031c55f8-58b2-4a4b-91bf-95d0e41692c2 path="/var/lib/kubelet/pods/031c55f8-58b2-4a4b-91bf-95d0e41692c2/volumes" Oct 2 20:11:55.298142 kubelet[2783]: E1002 20:11:55.298110 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" Oct 2 20:12:00.299355 kubelet[2783]: E1002 20:12:00.299323 2783 kubelet.go:2475] "Container runtime network not ready" networkReady="NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized"